drafted 1.18.3 → 1.18.4

package/mcp/server.mjs

@@ -279,6 +279,18 @@ export function stripUrlOrigin(p) {
 // segment 0, so `write /skills/<slug>/README.md` silently rewrote SKILL.md — and
 // the create-time README gate then looked unsatisfiable from this tool.
 // Pure + exported (asserted in mcp/test-skill-paths.mjs).
+// Search matches every TERM in the query, not the raw phrase. A whole-string
+// substring test means a natural multi-word search ("tool surface parity MCP")
+// never hits a project whose name/slug/description contains each of those words
+// — while the single word "parity" does. That reads as "no such project" for a
+// project that is right there. Pure + exported (asserted in mcp/test-search-terms.mjs).
+export function matchesAllTerms(parts, query) {
+  const terms = String(query || '').toLowerCase().split(/\s+/).filter(Boolean);
+  if (!terms.length) return false;
+  const hay = parts.map((v) => String(v || '')).join(' ').toLowerCase();
+  return terms.every((t) => hay.includes(t));
+}
+
 export function splitSkillPath(p) {
   const rest = /^\/skills\/?$/.test(p || '') ? '' : String(p || '').replace(/^\/skills\/?/, '');
   const segs = rest.split('/').filter(Boolean);
@@ -3094,10 +3106,7 @@ tool('fs', 'Navigate Drafted like a local filesystem. An org is the top folder:
       // addressable paths instead of the whole inventory.
       const q = String(query || '').trim();
       if (!q) return err(new Error('search requires a query — e.g. fs(search, path="/projects", query="<terms>")'));
-      const needle = q.toLowerCase();
-      const hitProjects = rows.filter(x =>
-        [x.name, x.slug, x.description].some(v => String(v || '').toLowerCase().includes(needle))
-      );
+      const hitProjects = rows.filter(x => matchesAllTerms([x.name, x.slug, x.description], q));
       let frames = [];
       let frameError = null;
       try {
@@ -3124,6 +3133,12 @@ tool('fs', 'Navigate Drafted like a local filesystem. An org is the top folder:
         out.push(`\nFrames matching "${q}" (${frames.length}${frames.length > 25 ? ', first 25' : ''}):\n${lines.join('\n')}`);
       } else if (frameError) {
         out.push(`\n(frame search unavailable: ${frameError} — project matches above are complete, frame matches were not checked)`);
+      } else {
+        // Say the frame leg ran and found nothing. Printing only the project leg
+        // leaves "frames were never searched" and "no frame matched" looking the
+        // same, and frame search matches LABELS only — so a term that lives in
+        // frame content is a miss, not an absence.
+        out.push(`\nNo frame label matches "${q}" (frame search matches labels, not frame content).`);
       }
       return ok(out.join('\n'));
     }
@@ -3331,7 +3346,7 @@ tool('fs', 'Navigate Drafted like a local filesystem. An org is the top folder:
           // Express parse projectId as an ARRAY and the scope match nothing.
           const res = await api('GET', `/api/search?q=${encodeURIComponent(q)}`);
           const frames = Array.isArray(res) ? res : (res?.results || []);
-          if (!frames.length) return ok(`No frames matching "${q}".`);
+          if (!frames.length) return ok(`No frames matching "${q}" (frame search matches labels, not frame content).`);
           const lines = frames.slice(0, 50).map(f =>
             `  /o/${f.orgSlug || f.orgId}/projects/${f.projectSlug || f.projectId}/${f.layer}/${f.lane || ''}/${f.label}`.replace(/\/\//g, '/')
           );

package/mcp/test-search-terms.mjs

@@ -0,0 +1,42 @@
+// Regression for fs(search) term matching on /projects.
+// Run: `node mcp/test-search-terms.mjs`. No framework — asserts the pure core.
+//
+// Why this exists: search used to substring-test the WHOLE query against each
+// field, so `query="tool surface parity MCP Flow"` missed a project whose
+// description says "tool surface" and "parity" — while `query="parity"` hit it.
+// An agent reads that miss as "the project does not exist" and stops looking.
+import assert from 'node:assert/strict';
+import { matchesAllTerms } from './server.mjs';
+
+const proj = [
+  'Flow AI MCP Server Feature Card',
+  'flow-ai-mcp-server-feature-card',
+  'Covers the BEO-2527 parity guard for the agent tool surface.',
+];
+
+// The reported failure: a natural multi-word query spanning name AND description.
+assert.equal(matchesAllTerms(proj, 'tool surface parity MCP Flow'), true);
+// The single word that did work must keep working.
+assert.equal(matchesAllTerms(proj, 'parity'), true);
+// Terms match across fields and across a hyphenated slug.
+assert.equal(matchesAllTerms(proj, 'flow feature card'), true);
+assert.equal(matchesAllTerms(proj, 'BEO-2527'), true);
+// Case and surrounding whitespace are irrelevant.
+assert.equal(matchesAllTerms(proj, '  PARITY   Guard '), true);
+
+// AND, not OR: one unmatched term is a miss. An OR would return most of the org.
+assert.equal(matchesAllTerms(proj, 'parity kubernetes'), false);
+assert.equal(matchesAllTerms(proj, 'kubernetes'), false);
+
+// An empty query never matches — the caller rejects it before this, and
+// "every term" over zero terms would otherwise be vacuously true for every row.
+assert.equal(matchesAllTerms(proj, ''), false);
+assert.equal(matchesAllTerms(proj, '   '), false);
+assert.equal(matchesAllTerms(proj, undefined), false);
+
+// Null/undefined fields don't throw or match a stray "null"/"undefined" term.
+assert.equal(matchesAllTerms([null, undefined, 'alpha'], 'alpha'), true);
+assert.equal(matchesAllTerms([null, undefined, 'alpha'], 'null'), false);
+
+console.log('search term matching ok — every term must hit, across fields, never vacuously');
+process.exit(0);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "drafted",
-  "version": "1.18.3",
+  "version": "1.18.4",
   "description": "Drafted — visual thinking surface for humans and AI agents. Renders HTML, markdown, images, and code as frames on a zoomable canvas, with MCP tools for AI agents and real-time sync for humans.",
   "type": "module",
   "files": [