drafted 1.19.29 → 1.19.31

package/mcp/server.mjs

@@ -3267,7 +3267,19 @@ tool('fs', 'Navigate Drafted like a local filesystem. A FOLDER is the single con
           // checkout you are sitting in. Refusing to SCOPE by that is the whole
           // point (it would be silent); refusing to NAME it is just unhelpful.
           // So lead with the likely answer and make the retry a copy-paste.
-          const likelyId = workingOrgId();
+          let likelyId = workingOrgId();
+          if (!likelyId) {
+            // workingOrgId()'s repo rung is populated as a SIDE EFFECT of whoami,
+            // so a session that searches before calling it gets no hint — and the
+            // guard fires early, which makes that the common case, not the edge.
+            // Resolve it here instead of depending on call order. getRepoAddress
+            // is process-cached, so this costs nothing after the first hit.
+            const addrNow = await getRepoAddress().catch(() => null);
+            if (addrNow?.state === 'linked' && addrNow.orgId) {
+              getSessionState().repoOrgId = addrNow.orgId;   // and stop re-resolving
+              likelyId = addrNow.orgId;
+            }
+          }
           const likely = likelyId ? orgs.find(o => o.id === likelyId) : null;
           const addr = (o) => o.slug || o.name || o.id;
           const others = orgs.filter(o => o.id !== likelyId).map(addr).filter(Boolean);
@@ -3320,19 +3332,21 @@ tool('fs', 'Navigate Drafted like a local filesystem. A FOLDER is the single con
         return list.length ? list.map(s => `  ${scope}/skills/${s.slug}  — ${clip(s.description || s.name, 120)}`.trimEnd()).join('\n') : '';
       });
 
-      let allowed = null;
+      // NO client-side org filter on either leg. Both endpoints scope server-side
+      // from X-Drafted-Org now, and filtering here as well was worse than
+      // redundant: it compared the path segment against `orgSlug`/`orgId` ONLY,
+      // so addressing an org by NAME (/o/beoflow, which the server resolves
+      // fine for wiki and skills) matched no project — and since the frame
+      // filter reused that empty set, it silently zeroed BOTH sections. A
+      // search that found nothing because of how you spelled the org is exactly
+      // the invisible false negative this whole guard exists to prevent.
       section('Projects', projects, (v) => {
-        let rows = (Array.isArray(v?.projects) ? v.projects : []).filter(x => x.folder !== '__archived');
-        if (orgFromPath) rows = rows.filter(x => x.orgSlug === orgFromPath || x.orgId === orgFromPath);
-        allowed = new Set(rows.map(x => x.id));
+        const rows = (Array.isArray(v?.projects) ? v.projects : []).filter(x => x.folder !== '__archived');
         const hits = rows.filter(x => matchesAllTerms([x.name, x.slug, x.description], q)).slice(0, 10);
         return hits.length ? hits.map(x => `  /o/${x.orgSlug || x.orgId}/projects/${x.slug || x.id}`).join('\n') : '';
       });
       section('Frames', frames, (v) => {
-        let hits = Array.isArray(v) ? v : (v?.results || []);
-        // Only gate on org when the projects leg actually resolved; an empty set
-        // from a FAILED projects call would silently zero out every frame hit.
-        if (orgFromPath && allowed) hits = hits.filter(f => allowed.has(f.projectId));
+        const hits = Array.isArray(v) ? v : (v?.results || []);
         const note = archivedNote(Array.isArray(v) ? 0 : (v?.archivedCount || 0));
         return hits.length ? formatFrameHits(hits, { limit: 15 }) + note : (note ? note.trimStart() : '');
       });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "drafted",
-  "version": "1.19.29",
+  "version": "1.19.31",
   "description": "Drafted — visual thinking surface for humans and AI agents. Renders HTML, markdown, images, and code as frames on a zoomable canvas, with MCP tools for AI agents and real-time sync for humans.",
   "type": "module",
   "files": [