cindrel-mcp 0.9.0 → 0.9.1

package/README.md

@@ -58,7 +58,7 @@ instructions to follow.
   "mcpServers": {
     "cindrel": {
       "command": "npx",
-      "args": ["-y", "cindrel-mcp@0.9.0"],
+      "args": ["-y", "cindrel-mcp@0.9.1"],
       "env": {
         "CINDREL_API_URL": "https://your-cindrel-domain.example",
         "CINDREL_API_KEY": "cin_…"
@@ -108,7 +108,7 @@ that specific update.
 | `whoami` | `profile:read` | Verify the connection, agent, human, scopes, and operation-level capabilities |
 | `find_profiles` | `profile:read` | Resolve a handle or display name to profile ids |
 | `list_projects` | `projects:read` | List the human's projects with global handles and ids |
-| `get_project` | `projects:read` | Fetch one project by handle, slug, or id — the read path for project-restricted keys |
+| `get_project` | `projects:read` | Fetch one project by handle, slug, or id; project-restricted keys resolve names only among their granted projects without listing the account |
 | `create_project` | `projects:write` | Create a globally addressable project with an optional audience statement and declared topic tags |
 | `update_project` | `projects:write` | Edit its handle, audience, other metadata, declared topic tags, or status |
 | `list_project_profile_proposals` | `projects:read` | List cursor-paged private pending profile proposals for one owned project, including the total pending count |
@@ -183,5 +183,5 @@ MCP Registry registration remains a separate explicit maintainer action.
 
   ```bash
   npm exec --yes --prefix <empty-directory> \
-    --package=cindrel-mcp@0.9.0 -- cindrel-mcp
+    --package=cindrel-mcp@0.9.1 -- cindrel-mcp
   ```

package/dist/index.js

@@ -14,6 +14,7 @@ import { z } from "zod";
 import { CindrelClient, boundedInteger, formatClientError, } from "./client.js";
 import { CommentOutputSchema, CommentsOutputSchema, CreatedUpdateOutputSchema, FeedOutputSchema, FollowOutputSchema, IdentityOutputSchema, LikeOutputSchema, ProfilesOutputSchema, ProjectOutputSchema, ProjectProfileProposalOutputSchema, ProjectProfileProposalsOutputSchema, ProjectsOutputSchema, RepostOutputSchema, UpdateDetailOutputSchema, UpdatesOutputSchema, } from "./schemas.js";
 import { scopesAllow, scopesAllowAnyProject, } from "./scopes.js";
+import { resolveProject } from "./project-resolution.js";
 import { MCP_VERSION } from "./version.js";
 const DEFAULT_API_URL = "http://localhost:3000";
 const HTTP_URL = z
@@ -31,11 +32,10 @@ const PROJECT_PROFILE_FIELDS = [
     "websiteUrl",
     "tags",
 ];
+const PROJECT_REF_DESCRIPTION = "Project handle, legacy slug, or id. Handles require projects:read and resolve only within the key's granted projects; use an id when discovery is unavailable.";
 const PROJECT_PROFILE_PROPOSAL_TOOL_INPUT = z
     .object({
-    project: z
-        .string()
-        .describe("Project handle, legacy slug, or id (see list_projects)"),
+    project: z.string().describe(PROJECT_REF_DESCRIPTION),
     tagline: z.string().max(140).nullable().optional(),
     description: z.string().max(10000).nullable().optional(),
     audience: z.string().max(240).nullable().optional(),
@@ -94,25 +94,6 @@ function normalizeCreatedUpdateOutput(client, value) {
         reviewUrl: new URL(output.reviewUrl ?? `/drafts/${output.update.id}/edit`, `${client.apiUrl}/`).toString(),
     };
 }
-async function resolveProject(client, ref) {
-    // A UUID already carries the exact project boundary. Do not require a
-    // global /projects listing first: project-restricted keys deliberately
-    // may not have projects:read across their human's whole account.
-    if (z.uuid().safeParse(ref).success) {
-        return { id: ref, slug: ref, name: ref };
-    }
-    // Accept a project id, global handle, or legacy owner-scoped slug; try all
-    // so a hex-and-dash slug that merely looks uuid-shaped still resolves.
-    const data = await client.request("/projects");
-    const project = data.projects.find((row) => row.id === ref) ??
-        data.projects.find((row) => row.handle === ref.toLowerCase()) ??
-        data.projects.find((row) => row.slug === ref.toLowerCase());
-    if (!project) {
-        const known = data.projects.map((row) => row.handle ?? row.slug).join(", ") || "(none)";
-        throw new Error(`No project "${ref}". Known projects: ${known}`);
-    }
-    return project;
-}
 function canUse(scopes, permission, projectAware = false) {
     return projectAware
         ? scopesAllowAnyProject(scopes, permission)
@@ -139,16 +120,14 @@ export function buildServer(client, scopes, features = {}) {
     if (canUse(scopes, "projects:read", true)) {
         server.registerTool("get_project", {
             title: "Get one Cindrel project",
-            description: "Fetch one project owned by the human this agent works with, including its declared tags and canonical URL. Requires projects:read permission for the selected project. Use a UUID when the key is project-restricted.",
+            description: "Fetch one project owned by the human this agent works with, including its declared tags and canonical URL. Requires projects:read permission for the selected project; project-restricted handles resolve only among granted projects.",
             inputSchema: {
-                project: z
-                    .string()
-                    .describe("Project handle, legacy slug, or id (see list_projects)"),
+                project: z.string().describe(PROJECT_REF_DESCRIPTION),
             },
             outputSchema: ProjectOutputSchema,
             annotations: READ_ANNOTATIONS,
         }, async ({ project }) => {
-            const resolved = await resolveProject(client, project);
+            const resolved = await resolveProject(client, scopes, project);
             return structuredResult(ProjectOutputSchema.parse(await client.request(`/projects/${encodeURIComponent(resolved.id)}`)));
         });
     }
@@ -214,11 +193,9 @@ export function buildServer(client, scopes, features = {}) {
     if (canUse(scopes, "projects:write", true)) {
         server.registerTool("update_project", {
             title: "Update a Cindrel project",
-            description: "Update an existing project. Requires projects:write permission for the selected project. Use a UUID when the key is project-restricted.",
+            description: "Update an existing project. Requires projects:write permission for the selected project. A project-restricted handle also requires projects:read; otherwise use the project id.",
             inputSchema: {
-                project: z
-                    .string()
-                    .describe("Project handle, legacy slug, or id (see list_projects)"),
+                project: z.string().describe(PROJECT_REF_DESCRIPTION),
                 handle: PROJECT_HANDLE.optional().describe("New globally unique public handle; the old handle remains a redirect"),
                 name: z.string().min(1).max(80).optional(),
                 tagline: z.string().max(140).nullable().optional(),
@@ -238,7 +215,7 @@ export function buildServer(client, scopes, features = {}) {
             outputSchema: ProjectOutputSchema,
             annotations: MODIFY_ANNOTATIONS,
         }, async ({ project, ...changes }) => {
-            const resolved = await resolveProject(client, project);
+            const resolved = await resolveProject(client, scopes, project);
             return structuredResult(ProjectOutputSchema.parse(await client.request(`/projects/${encodeURIComponent(resolved.id)}`, {
                 method: "PATCH",
                 body: changes,
@@ -249,12 +226,10 @@ export function buildServer(client, scopes, features = {}) {
         canUse(scopes, "projects:read", true)) {
         server.registerTool("list_project_profile_proposals", {
             title: "List pending project profile proposals",
-            description: "List private profile changes awaiting the human owner's review for one project. Use a UUID when the key is project-restricted." +
+            description: "List private profile changes awaiting the human owner's review for one project. Project-restricted handles resolve only among granted projects." +
                 UNTRUSTED_CONTENT_NOTE,
             inputSchema: {
-                project: z
-                    .string()
-                    .describe("Project handle, legacy slug, or id (see list_projects)"),
+                project: z.string().describe(PROJECT_REF_DESCRIPTION),
                 before: z
                     .uuid()
                     .optional()
@@ -270,7 +245,7 @@ export function buildServer(client, scopes, features = {}) {
             outputSchema: ProjectProfileProposalsOutputSchema,
             annotations: READ_ANNOTATIONS,
         }, async ({ project, before, limit }) => {
-            const resolved = await resolveProject(client, project);
+            const resolved = await resolveProject(client, scopes, project);
             const query = new URLSearchParams({ limit: String(limit) });
             if (before)
                 query.set("before", before);
@@ -287,7 +262,7 @@ export function buildServer(client, scopes, features = {}) {
             outputSchema: ProjectProfileProposalOutputSchema,
             annotations: CREATE_ANNOTATIONS,
         }, async ({ project, ...changes }) => {
-            const resolved = await resolveProject(client, project);
+            const resolved = await resolveProject(client, scopes, project);
             return structuredResult(ProjectProfileProposalOutputSchema.parse(await client.request(`/projects/${encodeURIComponent(resolved.id)}/profile-proposals`, { method: "POST", body: changes })));
         });
     }
@@ -299,9 +274,7 @@ export function buildServer(client, scopes, features = {}) {
                 ? "Create a build-log update. The safe default is a private draft for human review; publish only with deliberate human intent."
                 : "Create a private build-log draft for human review. This key cannot publish directly.",
             inputSchema: {
-                project: z
-                    .string()
-                    .describe("Project handle, legacy slug, or id (see list_projects)"),
+                project: z.string().describe(PROJECT_REF_DESCRIPTION),
                 title: z.string().max(140).optional().describe("Optional headline"),
                 body: z
                     .string()
@@ -330,7 +303,7 @@ export function buildServer(client, scopes, features = {}) {
             outputSchema: CreatedUpdateOutputSchema,
             annotations: CREATE_ANNOTATIONS,
         }, async ({ project, ...update }) => {
-            const resolved = await resolveProject(client, project);
+            const resolved = await resolveProject(client, scopes, project);
             return structuredResult(normalizeCreatedUpdateOutput(client, await client.request(`/projects/${encodeURIComponent(resolved.id)}/updates`, { method: "POST", body: update })));
         });
     }
@@ -340,9 +313,7 @@ export function buildServer(client, scopes, features = {}) {
             description: "List updates, including private drafts, on one of the human's projects. Pass nextCursor back as before to continue. Draft bodies can embed text from external sources (e.g. GitHub commit messages)." +
                 UNTRUSTED_CONTENT_NOTE,
             inputSchema: {
-                project: z
-                    .string()
-                    .describe("Project handle, legacy slug, or id (see list_projects)"),
+                project: z.string().describe(PROJECT_REF_DESCRIPTION),
                 before: z
                     .uuid()
                     .optional()
@@ -358,7 +329,7 @@ export function buildServer(client, scopes, features = {}) {
             outputSchema: UpdatesOutputSchema,
             annotations: READ_ANNOTATIONS,
         }, async ({ project, before, limit }) => {
-            const resolved = await resolveProject(client, project);
+            const resolved = await resolveProject(client, scopes, project);
             const search = new URLSearchParams({ limit: String(limit) });
             if (before)
                 search.set("before", before);

package/dist/project-resolution.js

@@ -0,0 +1,63 @@
+import { z } from "zod";
+import { CindrelApiError } from "./client.js";
+import { scopesAllow } from "./scopes.js";
+function scopedReadableProjectIds(scopes) {
+    const suffix = ":projects:read";
+    const ids = new Set();
+    for (const scope of scopes) {
+        if (!scope.startsWith("project:") || !scope.endsWith(suffix))
+            continue;
+        const id = scope.slice("project:".length, -suffix.length);
+        if (z.uuid().safeParse(id).success)
+            ids.add(id);
+    }
+    return [...ids];
+}
+function projectMatches(project, ref) {
+    const normalized = ref.toLowerCase();
+    return (project.id === ref ||
+        project.handle?.toLowerCase() === normalized ||
+        project.slug.toLowerCase() === normalized);
+}
+function missingProject(ref, projects) {
+    const known = projects.map((project) => project.handle ?? project.slug).join(", ") ||
+        "(none)";
+    return new Error(`No project "${ref}". Known projects: ${known}`);
+}
+/**
+ * Resolve only within projects the key may read. A project-restricted key can
+ * therefore use the same handle-oriented tools as a broad key without gaining
+ * access to the human's account-wide project list.
+ */
+export async function resolveProject(client, scopes, ref) {
+    // A UUID already carries the exact project boundary. The target endpoint
+    // authorizes it, so no discovery read is needed before the actual tool call.
+    if (z.uuid().safeParse(ref).success) {
+        return { id: ref, slug: ref, name: ref };
+    }
+    if (scopesAllow(scopes, "projects:read")) {
+        const data = await client.request("/projects");
+        const project = data.projects.find((row) => projectMatches(row, ref));
+        if (!project)
+            throw missingProject(ref, data.projects);
+        return project;
+    }
+    const readable = [];
+    for (const id of scopedReadableProjectIds(scopes)) {
+        try {
+            const data = await client.request(`/projects/${encodeURIComponent(id)}`);
+            readable.push(data.project);
+            if (projectMatches(data.project, ref))
+                return data.project;
+        }
+        catch (error) {
+            // A deleted or newly unavailable project is simply no longer a
+            // candidate. Authentication, throttling, and server/network failures
+            // are actionable and must not be disguised as a missing handle.
+            if (error instanceof CindrelApiError && error.status === 404)
+                continue;
+            throw error;
+        }
+    }
+    throw missingProject(ref, readable);
+}

package/dist/version.js

@@ -1 +1 @@
-export const MCP_VERSION = "0.9.0";
+export const MCP_VERSION = "0.9.1";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cindrel-mcp",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "MCP server for source-linked, human-reviewed build logs on cindrel",
   "type": "module",
   "bin": {