@vibescope/mcp-server 0.0.1 → 0.2.0

package/src/index.ts

@@ -7,8 +7,8 @@ import {
 	ListToolsRequestSchema,
 	type Tool,
 } from '@modelcontextprotocol/sdk/types.js';
-import { createClient } from '@supabase/supabase-js';
 import { randomUUID } from 'crypto';
+import { initApiClient, getApiClient } from './api-client.js';
 import {
 	ValidationError,
 	validateRequired,
@@ -34,7 +34,6 @@ import {
 	extractProjectNameFromGitUrl,
 	isValidStatusTransition,
 } from './utils.js';
-import { hashApiKey } from './cli.js';
 import { buildHandlerRegistry, type HandlerContext } from './handlers/index.js';
 
 // ============================================================================
@@ -50,6 +49,9 @@ let currentSessionId: string | null = null;
 // Assigned persona for this agent instance
 let currentPersona: string | null = null;
 
+// Current role for this agent instance
+let currentRole: 'developer' | 'validator' | 'deployer' | 'reviewer' | 'maintainer' | null = null;
+
 // Token usage tracking for this session
 interface ModelTokens {
 	input: number;
@@ -589,188 +591,35 @@ interface UserUpdates {
 // Configuration
 // ============================================================================
 
-// Default Supabase URL for Vibescope production instance
-const DEFAULT_SUPABASE_URL = 'https://uuneucmuubpgswvfijwd.supabase.co';
-
-const SUPABASE_URL = process.env.SUPABASE_URL || process.env.PUBLIC_SUPABASE_URL || DEFAULT_SUPABASE_URL;
-const SUPABASE_SERVICE_KEY = process.env.SUPABASE_SERVICE_KEY;
 const API_KEY = process.env.VIBESCOPE_API_KEY;
 
-if (!SUPABASE_SERVICE_KEY) {
-	console.error('Missing required environment variable: SUPABASE_SERVICE_KEY');
-	process.exit(1);
-}
-
 if (!API_KEY) {
 	console.error('Missing required environment variable: VIBESCOPE_API_KEY');
 	process.exit(1);
 }
 
-// ============================================================================
-// Database Client
-// ============================================================================
-
-// Using untyped client for MCP server - data validation happens at runtime
-const supabase = createClient(SUPABASE_URL, SUPABASE_SERVICE_KEY);
+// Initialize the API client
+initApiClient({ apiKey: API_KEY });
 
 // ============================================================================
 // Authentication
 // ============================================================================
 
-async function validateApiKey(apiKey: string): Promise<AuthContext | null> {
-	const keyHash = hashApiKey(apiKey);
-
-	const { data, error } = await supabase
-		.from('api_keys')
-		.select('id, user_id, organization_id, scope, is_valid')
-		.eq('key_hash', keyHash)
-		.single();
-
-	if (error || !data) {
-		return null;
-	}
+async function validateApiKey(): Promise<AuthContext | null> {
+	const apiClient = getApiClient();
+	const response = await apiClient.validateAuth();
 
-	// Check if key has been invalidated (e.g., user left org)
-	if (data.is_valid === false) {
+	if (!response.ok || !response.data?.valid) {
 		return null;
 	}
 
-	// For org-scoped keys, verify user is still a member
-	if (data.scope === 'organization' && data.organization_id) {
-		const { data: member } = await supabase
-			.from('organization_members')
-			.select('role')
-			.eq('organization_id', data.organization_id)
-			.eq('user_id', data.user_id)
-			.single();
-
-		if (!member) {
-			// User is no longer a member, invalidate the key
-			await supabase
-				.from('api_keys')
-				.update({ is_valid: false })
-				.eq('id', data.id);
-			return null;
-		}
-	}
-
-	// Update last_used_at
-	await supabase
-		.from('api_keys')
-		.update({ last_used_at: new Date().toISOString() })
-		.eq('id', data.id);
-
 	return {
-		userId: data.user_id,
-		apiKeyId: data.id,
-		organizationId: data.organization_id || undefined,
-		scope: data.scope || 'personal',
+		userId: response.data.user_id,
+		apiKeyId: response.data.api_key_id,
+		scope: 'personal', // API handles authorization, scope not needed locally
 	};
 }
 
-// ============================================================================
-// Session Status Checking (Multi-Agent Coordination)
-// ============================================================================
-
-/**
- * Check if an agent session is active or stale.
- * A session is considered stale if:
- * - It doesn't exist (orphaned reference)
- * - Its status is 'disconnected'
- * - Its last_synced_at is older than 5 minutes
- */
-async function checkSessionStatus(
-	sessionId: string
-): Promise<{ exists: boolean; isActive: boolean; agentName?: string }> {
-	const { data: session } = await supabase
-		.from('agent_sessions')
-		.select('id, status, last_synced_at, agent_name, instance_id')
-		.eq('id', sessionId)
-		.single();
-
-	if (!session) {
-		return { exists: false, isActive: false };
-	}
-
-	const lastSync = new Date(session.last_synced_at).getTime();
-	const fiveMinutesAgo = Date.now() - 5 * 60 * 1000;
-	const isActive = session.status !== 'disconnected' && lastSync > fiveMinutesAgo;
-
-	return {
-		exists: true,
-		isActive,
-		agentName: session.agent_name || `Agent ${session.instance_id?.slice(0, 8) || sessionId.slice(0, 8)}`,
-	};
-}
-
-// ============================================================================
-// User Updates Tracking
-// ============================================================================
-
-async function getUserUpdates(
-	auth: AuthContext,
-	projectId: string
-): Promise<UserUpdates | undefined> {
-	// Get session's last_synced_at - prefer currentSessionId for accuracy
-	let lastSyncedAt: string;
-
-	if (currentSessionId) {
-		const { data: session } = await supabase
-			.from('agent_sessions')
-			.select('last_synced_at')
-			.eq('id', currentSessionId)
-			.single();
-		lastSyncedAt = session?.last_synced_at || new Date(0).toISOString();
-	} else {
-		const { data: session } = await supabase
-			.from('agent_sessions')
-			.select('last_synced_at')
-			.eq('api_key_id', auth.apiKeyId)
-			.eq('project_id', projectId)
-			.single();
-		lastSyncedAt = session?.last_synced_at || new Date(0).toISOString();
-	}
-
-	// Fetch user-created items since last sync (limit to 5 each for context efficiency)
-	const [tasksResult, blockersResult, ideasResult] = await Promise.all([
-		supabase
-			.from('tasks')
-			.select('id, title, created_at')
-			.eq('project_id', projectId)
-			.eq('created_by', 'user')
-			.gt('created_at', lastSyncedAt)
-			.order('created_at', { ascending: false })
-			.limit(5),
-		supabase
-			.from('blockers')
-			.select('id, description, created_at')
-			.eq('project_id', projectId)
-			.eq('created_by', 'user')
-			.gt('created_at', lastSyncedAt)
-			.order('created_at', { ascending: false })
-			.limit(5),
-		supabase
-			.from('ideas')
-			.select('id, title, created_at')
-			.eq('project_id', projectId)
-			.eq('created_by', 'user')
-			.gt('created_at', lastSyncedAt)
-			.order('created_at', { ascending: false })
-			.limit(5),
-	]);
-
-	const tasks = tasksResult.data || [];
-	const blockers = blockersResult.data || [];
-	const ideas = ideasResult.data || [];
-
-	// Return undefined if no new updates (saves context window space)
-	if (tasks.length === 0 && blockers.length === 0 && ideas.length === 0) {
-		return undefined;
-	}
-
-	return { tasks, blockers, ideas };
-}
-
 // ============================================================================
 // Tool Definitions
 // ============================================================================
@@ -812,7 +661,7 @@ Returns session info, persona, and next task. Use mode:'full' for complete conte
 			properties: {
 				topic: {
 					type: 'string',
-					enum: ['getting_started', 'tasks', 'validation', 'deployment', 'git', 'blockers', 'milestones', 'fallback', 'session', 'tokens', 'topics'],
+					enum: ['getting_started', 'tasks', 'validation', 'deployment', 'git', 'blockers', 'milestones', 'fallback', 'session', 'tokens', 'sprints', 'topics'],
 					description: 'Help topic. Use "topics" to list all available.',
 				},
 			},
@@ -1138,6 +987,14 @@ Returns session info, persona, and next task. Use mode:'full' for complete conte
 					type: 'number',
 					description: 'Max number of tasks to return (default 50)',
 				},
+				offset: {
+					type: 'number',
+					description: 'Number of tasks to skip for pagination (default 0)',
+				},
+				search_query: {
+					type: 'string',
+					description: 'Search tasks by title',
+				},
 				include_subtasks: {
 					type: 'boolean',
 					description: 'Include subtasks in results (default false). Use get_subtasks for subtasks of a specific task.',
@@ -1193,6 +1050,11 @@ Returns session info, persona, and next task. Use mode:'full' for complete conte
 					type: 'boolean',
 					description: 'When true, this task blocks all other work until complete (used for deployment finalization)',
 				},
+				task_type: {
+					type: 'string',
+					enum: ['frontend', 'backend', 'database', 'feature', 'bugfix', 'design', 'mcp', 'testing', 'docs', 'infra', 'other'],
+					description: 'Task category (frontend, backend, database, feature, bugfix, design, mcp, testing, docs, infra, other)',
+				},
 			},
 			required: ['project_id', 'title'],
 		},
@@ -1237,6 +1099,11 @@ Returns session info, persona, and next task. Use mode:'full' for complete conte
 					type: 'string',
 					description: 'Git branch associated with this task',
 				},
+				task_type: {
+					type: 'string',
+					enum: ['frontend', 'backend', 'database', 'feature', 'bugfix', 'design', 'mcp', 'testing', 'docs', 'infra', 'other'],
+					description: 'Task category (frontend, backend, database, feature, bugfix, design, mcp, testing, docs, infra, other)',
+				},
 			},
 			required: ['task_id'],
 		},
@@ -1336,6 +1203,18 @@ Returns session info, persona, and next task. Use mode:'full' for complete conte
 					enum: ['open', 'resolved'],
 					description: 'Filter by status (default: open)',
 				},
+				limit: {
+					type: 'number',
+					description: 'Max number of blockers to return (default 50, max 200)',
+				},
+				offset: {
+					type: 'number',
+					description: 'Number of blockers to skip for pagination (default 0)',
+				},
+				search_query: {
+					type: 'string',
+					description: 'Search blockers by description',
+				},
 			},
 			required: ['project_id'],
 		},
@@ -1381,6 +1260,18 @@ Returns session info, persona, and next task. Use mode:'full' for complete conte
 					type: 'string',
 					description: 'Project UUID',
 				},
+				limit: {
+					type: 'number',
+					description: 'Max number of decisions to return (default 50, max 200)',
+				},
+				offset: {
+					type: 'number',
+					description: 'Number of decisions to skip for pagination (default 0)',
+				},
+				search_query: {
+					type: 'string',
+					description: 'Search decisions by title or description',
+				},
 			},
 			required: ['project_id'],
 		},
@@ -1458,6 +1349,18 @@ Returns session info, persona, and next task. Use mode:'full' for complete conte
 					enum: ['raw', 'exploring', 'planned', 'in_development', 'shipped'],
 					description: 'Filter by status (optional)',
 				},
+				limit: {
+					type: 'number',
+					description: 'Max number of ideas to return (default 50, max 100)',
+				},
+				offset: {
+					type: 'number',
+					description: 'Number of ideas to skip for pagination (default 0)',
+				},
+				search_query: {
+					type: 'string',
+					description: 'Search ideas by title or description',
+				},
 			},
 			required: ['project_id'],
 		},
@@ -1588,7 +1491,9 @@ Returns session info, persona, and next task. Use mode:'full' for complete conte
 				category: { type: 'string', enum: ['performance', 'security', 'code_quality', 'accessibility', 'documentation', 'architecture', 'testing', 'other'], description: 'Filter by category (optional)' },
 				severity: { type: 'string', enum: ['info', 'low', 'medium', 'high', 'critical'], description: 'Filter by severity (optional)' },
 				status: { type: 'string', enum: ['open', 'addressed', 'dismissed', 'wontfix'], description: 'Filter by status (default: all)' },
-				limit: { type: 'number', description: 'Max number of findings to return (default 50)' },
+				limit: { type: 'number', description: 'Max number of findings to return (default 50, max 200)' },
+				offset: { type: 'number', description: 'Number of findings to skip for pagination (default 0)' },
+				search_query: { type: 'string', description: 'Search findings by title or description' },
 			},
 			required: ['project_id'],
 		},
@@ -1634,6 +1539,119 @@ Returns session info, persona, and next task. Use mode:'full' for complete conte
 			required: ['blocker_id'],
 		},
 	},
+	// Git Issues tools
+	{
+		name: 'add_git_issue',
+		description: `Record a git-related issue (merge conflict, push failure, etc.). Auto-created by claim_validation when conflicts detected.`,
+		inputSchema: {
+			type: 'object',
+			properties: {
+				project_id: {
+					type: 'string',
+					description: 'Project UUID',
+				},
+				issue_type: {
+					type: 'string',
+					enum: ['merge_conflict', 'push_failed', 'rebase_needed', 'branch_diverged', 'pr_not_mergeable'],
+					description: 'Type of git issue',
+				},
+				branch: {
+					type: 'string',
+					description: 'Branch where the issue occurred',
+				},
+				target_branch: {
+					type: 'string',
+					description: 'Target branch for merge/rebase (optional)',
+				},
+				pr_url: {
+					type: 'string',
+					description: 'Pull request URL if applicable (optional)',
+				},
+				conflicting_files: {
+					type: 'array',
+					items: { type: 'string' },
+					description: 'List of files with conflicts (optional)',
+				},
+				error_message: {
+					type: 'string',
+					description: 'Error message from git operation (optional)',
+				},
+				task_id: {
+					type: 'string',
+					description: 'Related task UUID (optional)',
+				},
+			},
+			required: ['project_id', 'issue_type', 'branch'],
+		},
+	},
+	{
+		name: 'resolve_git_issue',
+		description: `Mark a git issue as resolved.`,
+		inputSchema: {
+			type: 'object',
+			properties: {
+				git_issue_id: {
+					type: 'string',
+					description: 'Git issue UUID',
+				},
+				resolution_note: {
+					type: 'string',
+					description: 'How the issue was resolved (optional)',
+				},
+				auto_resolved: {
+					type: 'boolean',
+					description: 'Whether this was auto-resolved (e.g., PR became mergeable)',
+				},
+			},
+			required: ['git_issue_id'],
+		},
+	},
+	{
+		name: 'get_git_issues',
+		description: `Get git issues for a project, optionally filtered by status, type, or branch.`,
+		inputSchema: {
+			type: 'object',
+			properties: {
+				project_id: {
+					type: 'string',
+					description: 'Project UUID',
+				},
+				status: {
+					type: 'string',
+					enum: ['open', 'resolved'],
+					description: 'Filter by status (default: open)',
+				},
+				issue_type: {
+					type: 'string',
+					enum: ['merge_conflict', 'push_failed', 'rebase_needed', 'branch_diverged', 'pr_not_mergeable'],
+					description: 'Filter by issue type (optional)',
+				},
+				branch: {
+					type: 'string',
+					description: 'Filter by branch (optional)',
+				},
+				limit: {
+					type: 'number',
+					description: 'Max issues to return (default: 50)',
+				},
+			},
+			required: ['project_id'],
+		},
+	},
+	{
+		name: 'delete_git_issue',
+		description: `Delete a git issue.`,
+		inputSchema: {
+			type: 'object',
+			properties: {
+				git_issue_id: {
+					type: 'string',
+					description: 'Git issue UUID',
+				},
+			},
+			required: ['git_issue_id'],
+		},
+	},
 	{
 		name: 'delete_decision',
 		description: `Delete a decision.`,
@@ -1799,6 +1817,10 @@ Returns subtasks with aggregate completion stats.`,
 					type: 'string',
 					description: 'Session ID from start_work_session (optional, uses current session if not provided)',
 				},
+				current_worktree_path: {
+					type: ['string', 'null'],
+					description: 'Report your current git worktree path (e.g., "../project-task-abc123"). Set to null to clear.',
+				},
 			},
 		},
 	},
@@ -1848,7 +1870,7 @@ Returns subtasks with aggregate completion stats.`,
 	},
 	{
 		name: 'validate_task',
-		description: 'Validate a completed task. Include test results in validation_notes.',
+		description: 'Validate a completed task. Include test results in validation_notes. For github-flow/git-flow projects, a PR must exist before approval (add via add_task_reference).',
 		inputSchema: {
 			type: 'object',
 			properties: {
@@ -1864,6 +1886,10 @@ Returns subtasks with aggregate completion stats.`,
 					type: 'boolean',
 					description: 'Whether the task passes validation (true = approved, false = needs more work)',
 				},
+				skip_pr_check: {
+					type: 'boolean',
+					description: 'Skip PR existence check (use only for tasks that legitimately do not need a PR)',
+				},
 			},
 			required: ['task_id', 'approved'],
 		},
@@ -2571,7 +2597,8 @@ Bodies of work allow organizing related tasks with optional auto-deployment on c
 	},
 	{
 		name: 'get_body_of_work',
-		description: `Get a body of work with all its tasks organized by phase.`,
+		description: `Get a body of work with all its tasks organized by phase.
+Use summary_only: true to get task counts and next task instead of full task arrays (saves tokens).`,
 		inputSchema: {
 			type: 'object',
 			properties: {
@@ -2579,6 +2606,10 @@ Bodies of work allow organizing related tasks with optional auto-deployment on c
 					type: 'string',
 					description: 'Body of work UUID',
 				},
+				summary_only: {
+					type: 'boolean',
+					description: 'Return task counts and next task instead of full task arrays (default: false)',
+				},
 			},
 			required: ['body_of_work_id'],
 		},
@@ -2598,6 +2629,18 @@ Bodies of work allow organizing related tasks with optional auto-deployment on c
 					enum: ['draft', 'active', 'completed', 'cancelled'],
 					description: 'Filter by status (optional)',
 				},
+				limit: {
+					type: 'number',
+					description: 'Max number of bodies of work to return (default 50, max 100)',
+				},
+				offset: {
+					type: 'number',
+					description: 'Number of items to skip for pagination (default 0)',
+				},
+				search_query: {
+					type: 'string',
+					description: 'Search bodies of work by title or description',
+				},
 			},
 			required: ['project_id'],
 		},
@@ -2748,6 +2791,278 @@ Only returns tasks where all dependencies are completed.`,
 		},
 	},
 	// ============================================================================
+	// Sprint Tools
+	// ============================================================================
+	{
+		name: 'create_sprint',
+		description: `Create a new sprint. Sprints are time-bounded bodies of work with velocity tracking.
+Sprints start in 'planning' status where tasks can be added with story points.`,
+		inputSchema: {
+			type: 'object',
+			properties: {
+				project_id: {
+					type: 'string',
+					description: 'Project UUID',
+				},
+				title: {
+					type: 'string',
+					description: 'Sprint title (e.g., "Sprint 5" or "Q1 Release")',
+				},
+				goal: {
+					type: 'string',
+					description: 'Sprint goal statement',
+				},
+				start_date: {
+					type: 'string',
+					description: 'Start date (YYYY-MM-DD)',
+				},
+				end_date: {
+					type: 'string',
+					description: 'End date (YYYY-MM-DD)',
+				},
+				auto_deploy_on_completion: {
+					type: 'boolean',
+					description: 'Automatically request deployment when sprint completes (default: false)',
+				},
+				deploy_environment: {
+					type: 'string',
+					enum: ['development', 'staging', 'production'],
+					description: 'Target environment for auto-deploy (default: production)',
+				},
+				deploy_version_bump: {
+					type: 'string',
+					enum: ['patch', 'minor', 'major'],
+					description: 'Version bump for auto-deploy (default: minor)',
+				},
+			},
+			required: ['project_id', 'title', 'start_date', 'end_date'],
+		},
+	},
+	{
+		name: 'update_sprint',
+		description: `Update a sprint's details. Can update title, goal, dates, and deployment settings.`,
+		inputSchema: {
+			type: 'object',
+			properties: {
+				sprint_id: {
+					type: 'string',
+					description: 'Sprint UUID',
+				},
+				title: {
+					type: 'string',
+					description: 'New sprint title',
+				},
+				goal: {
+					type: 'string',
+					description: 'New sprint goal',
+				},
+				start_date: {
+					type: 'string',
+					description: 'New start date (YYYY-MM-DD)',
+				},
+				end_date: {
+					type: 'string',
+					description: 'New end date (YYYY-MM-DD)',
+				},
+				auto_deploy_on_completion: {
+					type: 'boolean',
+					description: 'Auto-deploy setting',
+				},
+				deploy_environment: {
+					type: 'string',
+					enum: ['development', 'staging', 'production'],
+					description: 'Target environment',
+				},
+				deploy_version_bump: {
+					type: 'string',
+					enum: ['patch', 'minor', 'major'],
+					description: 'Version bump type',
+				},
+			},
+			required: ['sprint_id'],
+		},
+	},
+	{
+		name: 'get_sprint',
+		description: `Get a sprint with all its tasks organized by phase (pre/core/post).
+Includes progress percentage, velocity points, and committed points.
+Use summary_only: true to get task counts and next task instead of full task arrays (saves tokens).`,
+		inputSchema: {
+			type: 'object',
+			properties: {
+				sprint_id: {
+					type: 'string',
+					description: 'Sprint UUID',
+				},
+				summary_only: {
+					type: 'boolean',
+					description: 'Return task counts and next task instead of full task arrays (default: false)',
+				},
+			},
+			required: ['sprint_id'],
+		},
+	},
+	{
+		name: 'get_sprints',
+		description: `List sprints for a project with velocity metrics.
+Returns sprints sorted by sprint_number descending (most recent first).`,
+		inputSchema: {
+			type: 'object',
+			properties: {
+				project_id: {
+					type: 'string',
+					description: 'Project UUID',
+				},
+				status: {
+					type: 'string',
+					enum: ['planning', 'active', 'in_review', 'retrospective', 'completed', 'cancelled'],
+					description: 'Filter by sprint status (optional)',
+				},
+				limit: {
+					type: 'number',
+					description: 'Max sprints to return (default: 20, max: 100)',
+				},
+			},
+			required: ['project_id'],
+		},
+	},
+	{
+		name: 'delete_sprint',
+		description: `Delete a sprint. Tasks are preserved but no longer grouped.`,
+		inputSchema: {
+			type: 'object',
+			properties: {
+				sprint_id: {
+					type: 'string',
+					description: 'Sprint UUID',
+				},
+			},
+			required: ['sprint_id'],
+		},
+	},
+	{
+		name: 'start_sprint',
+		description: `Start a sprint. Transitions from 'planning' to 'active' status.
+Locks the committed_points at the current total story points.`,
+		inputSchema: {
+			type: 'object',
+			properties: {
+				sprint_id: {
+					type: 'string',
+					description: 'Sprint UUID',
+				},
+			},
+			required: ['sprint_id'],
+		},
+	},
+	{
+		name: 'complete_sprint',
+		description: `Complete a sprint. Handles retrospective phase and auto-deployment if configured.
+Status flow: active → in_review → retrospective → completed`,
+		inputSchema: {
+			type: 'object',
+			properties: {
+				sprint_id: {
+					type: 'string',
+					description: 'Sprint UUID',
+				},
+				retrospective_notes: {
+					type: 'string',
+					description: 'Sprint retrospective notes',
+				},
+				skip_retrospective: {
+					type: 'boolean',
+					description: 'Skip retrospective phase and go directly to completed (default: false)',
+				},
+			},
+			required: ['sprint_id'],
+		},
+	},
+	{
+		name: 'add_task_to_sprint',
+		description: `Add a task to a sprint with optional story points.
+Tasks can be added during 'planning' status. Story points contribute to committed_points.`,
+		inputSchema: {
+			type: 'object',
+			properties: {
+				sprint_id: {
+					type: 'string',
+					description: 'Sprint UUID',
+				},
+				task_id: {
+					type: 'string',
+					description: 'Task UUID to add',
+				},
+				story_points: {
+					type: 'number',
+					description: 'Story point estimate (optional, must be non-negative integer)',
+				},
+				phase: {
+					type: 'string',
+					enum: ['pre', 'core', 'post'],
+					description: 'Task phase (default: core)',
+				},
+			},
+			required: ['sprint_id', 'task_id'],
+		},
+	},
+	{
+		name: 'remove_task_from_sprint',
+		description: `Remove a task from a sprint. Task is preserved but returns to backlog.`,
+		inputSchema: {
+			type: 'object',
+			properties: {
+				sprint_id: {
+					type: 'string',
+					description: 'Sprint UUID',
+				},
+				task_id: {
+					type: 'string',
+					description: 'Task UUID to remove',
+				},
+			},
+			required: ['sprint_id', 'task_id'],
+		},
+	},
+	{
+		name: 'get_sprint_backlog',
+		description: `Get tasks from backlog/pending that can be added to a sprint.
+Returns tasks not already assigned to any body of work or sprint.`,
+		inputSchema: {
+			type: 'object',
+			properties: {
+				project_id: {
+					type: 'string',
+					description: 'Project UUID',
+				},
+				sprint_id: {
+					type: 'string',
+					description: 'Sprint UUID to exclude already-added tasks (optional)',
+				},
+			},
+			required: ['project_id'],
+		},
+	},
+	{
+		name: 'get_sprint_velocity',
+		description: `Get velocity metrics for completed sprints.
+Returns committed vs completed points and average velocity.`,
+		inputSchema: {
+			type: 'object',
+			properties: {
+				project_id: {
+					type: 'string',
+					description: 'Project UUID',
+				},
+				limit: {
+					type: 'number',
+					description: 'Number of sprints to analyze (default: 10, max: 50)',
+				},
+			},
+			required: ['project_id'],
+		},
+	},
+	// ============================================================================
 	// Organization Tools
 	// ============================================================================
 	{
@@ -3001,24 +3316,15 @@ async function handleTool(
 	name: string,
 	args: Record<string, unknown>
 ): Promise<{ result: unknown; user_updates?: UserUpdates; reminder?: string }> {
-	// Update session on every tool call:
+	// Update session on every tool call via API:
 	// - last_synced_at: keeps session alive and visible as "active" on dashboard
-	// - tool_call_count: incremented for token efficiency tracking
-	// - last_tool_at: timestamp of last tool call
+	// - token tracking: synced periodically for cost monitoring
 	// Skip for start_work_session since it handles its own session setup
 	if (currentSessionId && name !== 'start_work_session') {
-		const now = new Date().toISOString();
-		await supabase.rpc('increment_tool_call_count', {
-			p_session_id: currentSessionId,
-			p_timestamp: now
-		}).then(({ error }) => {
-			// Fallback to direct update if RPC doesn't exist (pre-migration)
-			if (error) {
-				return supabase
-					.from('agent_sessions')
-					.update({ last_synced_at: now })
-					.eq('id', currentSessionId);
-			}
+		const apiClient = getApiClient();
+		// Fire and forget - don't block tool execution on session sync
+		apiClient.syncSession(currentSessionId).catch(() => {
+			// Silently ignore sync errors - session tracking is non-critical
 		});
 	}
 
@@ -3027,17 +3333,18 @@ async function handleTool(
 	if (handler) {
 		// Build handler context
 		const ctx: HandlerContext = {
-			supabase,
 			auth,
 			session: {
 				instanceId: INSTANCE_ID,
 				currentSessionId,
 				currentPersona,
+				currentRole,
 				tokenUsage: sessionTokenUsage,
 			},
 			updateSession: (updates) => {
 				if (updates.currentSessionId !== undefined) currentSessionId = updates.currentSessionId;
 				if (updates.currentPersona !== undefined) currentPersona = updates.currentPersona;
+				if (updates.currentRole !== undefined) currentRole = updates.currentRole;
 				if (updates.tokenUsage !== undefined) sessionTokenUsage = updates.tokenUsage;
 			},
 		};
@@ -3054,8 +3361,8 @@ async function handleTool(
 // ============================================================================
 
 async function main() {
-	// Validate API key on startup
-	const auth = await validateApiKey(API_KEY!);
+	// Validate API key on startup via API
+	const auth = await validateApiKey();
 	if (!auth) {
 		console.error('Invalid API key');
 		process.exit(1);