fleetbo-svro 1.0.46 → 1.0.47

package/dist/fleetbo-mcp.js

@@ -0,0 +1,489 @@
+#!/usr/bin/env node
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import {
+  CallToolRequestSchema,
+  ListToolsRequestSchema,
+  ListPromptsRequestSchema,
+  GetPromptRequestSchema,
+} from "@modelcontextprotocol/sdk/types.js";
+import { z } from "zod";
+import fs from "node:fs";
+import path from "node:path";
+import os from "node:os";
+
+function getDevToken() {
+  if (process.env.FLEETBO_DEV_TOKEN) return process.env.FLEETBO_DEV_TOKEN;
+  try {
+    const credPath = path.join(os.homedir(), ".fleetbo", "credentials.json");
+    if (fs.existsSync(credPath)) {
+      return JSON.parse(fs.readFileSync(credPath, "utf8")).devToken || null;
+    }
+  } catch (_) {}
+  return null;
+}
+
+const DEV_AUTH_TOKEN = getDevToken();
+const CLOUD_RUN_REGION = "jqycakhlxa-uc.a.run.app";
+
+// ============================================================================
+// CONTRAT DE DONNÉES & DIRECTIVES STRICTES D'ARCHITECTURE FLEETBO SVRO
+// ============================================================================
+const FLEETBO_SYSTEM_GUIDELINES = `
+# LE CONTRAT DE DONNÉES FLEETBO (FLEETBO DATA CONTRACT)
+Ce document constitue le Cahier des charges officiel et le Contrat bilatéral d'intégrité liant le code client et le moteur Data OS Fleetbo SVRO.
+
+🚨 DIRECTIVE D'EXÉCUTION OBLIGATOIRE POUR L'AGENT IA :
+1. Interdiction d'extrapolation : Ne crée aucun champ, type ou endpoint non déclaré explicitement dans svro.schema.json.
+2. Zéro backend intermédiaire : N'écris AUCUN serveur Express, NestJS ou route d'API REST fictive.
+3. Objet global unique : Utilise exclusivement l'objet global Fleetbo.* (add, getDocsG, getDoc, update, delete, call, join).
+4. Zero Import : L'objet Fleetbo et les balises <fleetbo-*> sont des composants globaux au runtime. Ne fais aucun import manuel de SDK.
+5. Typage strict avant écriture : Caste systématiquement les types reçus des formulaires (Number, String, Boolean).
+
+CYCLE DE MODÉLISATION DU DATA OS :
+- Étape 1 (Création) : Alloue le projet via 'fleetbo_create_project'.
+- Étape 2 (Amorçage) : Lance 'npx fleetbo-svro init ...' puis 'npx fleetbo-svro sync'.
+- Étape 3 (Modélisation Jour 1) : Écris tes premières vues UI (JSX, TSX, Vue) et modélise la base via 'fleetbo_update_project'.
+- Étape 4 (Scellage) : Exécute 'npx fleetbo-svro sync' pour générer svro.schema.json, svro.workflow.json, Fleetbo_contract.md et le typage TypeScript.
+- Étape 5 (Évolutions Jour 2) : Chaque nouvelle vue ou règle passe par 'fleetbo_update_project' suivi d'un 'npx fleetbo-svro sync'.
+
+SYNTAXE CRUD CANONIQUE DU SDK FLEETBO :
+- CREATE : await Fleetbo.add('collection', { name: String(n).trim(), price: Number(p) });
+- READ ALL : const docs = await Fleetbo.getDocsG('collection');
+- READ ONE : const doc = await Fleetbo.getDoc('collection', docId);
+- READ USER : const docs = await Fleetbo.getDocsU('collection');
+- UPDATE : await Fleetbo.update('collection', docId, { status: 'PAID' });
+- DELETE : await Fleetbo.delete('collection', docId);
+- JOIN : await Fleetbo.join('orders', { innerJoin: { collection: 'users', on: ['userId', '==', 'id'], as: 'user' } });
+- CLOUD FUNCTION : const res = await Fleetbo.call('$functionName', payload);
+
+GESTION DE L'ENVIRONNEMENT (.env) :
+- VITE_FLEETBO_PROTOTYPE=true  : Mode bac à sable UI. L'Edge acquitte immédiatement sans toucher à la base physique.
+- VITE_FLEETBO_PROTOTYPE=false : Mode strict live. L'Edge valide le contrat DDL et persiste sur MongoDB Atlas.
+`;
+
+const server = new Server(
+  {
+    name: "fleetbo-svro-mcp",
+    version: "1.0.0",
+  },
+  {
+    capabilities: {
+      tools: {},
+      prompts: {},
+    },
+  }
+);
+
+// ============================================================================
+// 1. PROMPTS MCP
+// ============================================================================
+server.setRequestHandler(ListPromptsRequestSchema, async () => {
+  return {
+    prompts: [
+      {
+        name: "fleetbo_contract_rules",
+        description:
+          "Loads strict architectural rules, invariants, and integrity directives for Fleetbo SVRO.",
+      },
+    ],
+  };
+});
+
+server.setRequestHandler(GetPromptRequestSchema, async (request) => {
+  if (request.params.name === "fleetbo_contract_rules") {
+    return {
+      description: "Official Fleetbo SVRO architecture directives",
+      messages: [
+        {
+          role: "user",
+          content: {
+            type: "text",
+            text: FLEETBO_SYSTEM_GUIDELINES,
+          },
+        },
+      ],
+    };
+  }
+  throw new Error(`Unknown prompt: ${request.params.name}`);
+});
+
+// ============================================================================
+// 2. OUTILS MCP (Tools)
+// ============================================================================
+server.setRequestHandler(ListToolsRequestSchema, async () => {
+  return {
+    tools: [
+      {
+        name: "fleetbo_create_project",
+        description:
+          "Étape 1 : Crée une nouvelle application Fleetbo Data OS dans le Cloud avec son nom et sa clé unique (contrats initiaux vierges prêts pour la modélisation).",
+        inputSchema: {
+          type: "object",
+          properties: {
+            name: {
+              type: "string",
+              description: "Nom d'affichage de l'application (ex: CoWorking Manager)",
+            },
+            keyApp: {
+              type: "string",
+              description: "Clé unique d'application sans espace ni caractères spéciaux (ex: coworking_prod)",
+            },
+          },
+          required: ["name", "keyApp"],
+        },
+      },
+      {
+        name: "fleetbo_update_project",
+        description:
+          "Step 3 & 5: Analyzes UI component files (JSX, TSX, Vue) and business rules to forge or enrich DDL schema and workflow additively.",
+        inputSchema: {
+          type: "object",
+          properties: {
+            keyApp: {
+              type: "string",
+              description: "Unique application key (e.g. coworking_prod)",
+            },
+            name: {
+              type: "string",
+              description: "Application name",
+            },
+            rules: {
+              type: "string",
+              description: "New business rules, calculations, or state transitions.",
+            },
+            filePaths: {
+              type: "array",
+              items: { type: "string" },
+              description: "Relative paths of view files to analyze (e.g. ['src/views/Bookings.jsx']).",
+            },
+            viewFiles: {
+              type: "array",
+              items: {
+                type: "object",
+                properties: {
+                  name: { type: "string" },
+                  content: { type: "string" },
+                },
+                required: ["name", "content"],
+              },
+              description: "View files already loaded in memory [{ name, content }].",
+            },
+          },
+          required: ["keyApp", "name"],
+        },
+      },
+      {
+        name: "fleetbo_publish_function",
+        description:
+          "Deploys a private or public cloud utility function executed in a secure Fleetbo serverless environment.",
+        inputSchema: {
+          type: "object",
+          properties: {
+            enterpriseID: {
+              type: "string",
+              description: "Project enterpriseID infrastructure identifier",
+            },
+            functionName: {
+              type: "string",
+              description: "Function name (alphanumeric 3-40 chars, e.g. calculateTotal)",
+            },
+            code: {
+              type: "string",
+              description: "JS source code (e.g. async function calculateTotal(payload, Fleetbo) { ... })",
+            },
+            description: {
+              type: "string",
+              description: "Action documentation for the catalog and Alex AI",
+            },
+            isPublic: {
+              type: "boolean",
+              description: "true to publish to the global Marketplace, false for private function",
+            },
+          },
+          required: ["enterpriseID", "functionName", "code"],
+        },
+      },
+      {
+        name: "fleetbo_get_contract",
+        description:
+          "Provides the official data contract, SDK directives, production lifecycle and canonical blueprint.",
+        inputSchema: {
+          type: "object",
+          properties: {},
+        },
+      },
+    ],
+  };
+});
+
+// ============================================================================
+// 3. EXÉCUTION DES OUTILS
+// ============================================================================
+server.setRequestHandler(CallToolRequestSchema, async (request) => {
+  const { name, arguments: args } = request.params;
+
+  if (name === "fleetbo_get_contract") {
+    return {
+      content: [
+        {
+          type: "text",
+          text: FLEETBO_SYSTEM_GUIDELINES,
+        },
+      ],
+    };
+  }
+
+  if (!DEV_AUTH_TOKEN) {
+    return {
+      isError: true,
+      content: [
+        {
+          type: "text",
+          text: "Error: FLEETBO_DEV_TOKEN is missing from your environment. Run 'npx fleetbo-svro login' or configure it in your MCP client.",
+        },
+      ],
+    };
+  }
+
+  try {
+    // --- ACTION 1 : CREATE PROJECT ---
+    if (name === "fleetbo_create_project") {
+      const schema = z.object({
+        name: z.string().min(2),
+        keyApp: z.string().min(2),
+      });
+      const params = schema.parse(args);
+
+      const res = await fetch(`https://createprojectlight-${CLOUD_RUN_REGION}`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Bearer ${DEV_AUTH_TOKEN}`,
+        },
+        body: JSON.stringify({
+          data: {
+            name: params.name,
+            keyApp: params.keyApp,
+          },
+        }),
+      });
+
+      const json = await res.json();
+      if (!res.ok || json.error) {
+        throw new Error(json.error?.message || "Failed to create project on Fleetbo OS.");
+      }
+
+      const proj = json.result?.data || json.data || {};
+      const resolvedId = proj.enterpriseId || proj.referenceId || proj.id;
+
+      return {
+        content: [
+          {
+            type: "text",
+            text: JSON.stringify(
+              {
+                status: "SUCCESS",
+                message: `Project "${params.name}" successfully created. Ready for modeling.`,
+                enterpriseID: resolvedId,
+                keyApp: params.keyApp,
+                bootstrapToken: proj.bootstrapToken,
+                commandInit: `npx fleetbo-svro init --keyApp=${params.keyApp} --token=${proj.bootstrapToken}`,
+                nextSteps: [
+                  "1. Run commandInit in your terminal to configure local .env.",
+                  "2. Write your initial UI component (e.g. src/views/App.jsx).",
+                  "3. Call 'fleetbo_update_project' with this file to forge data contract.",
+                  "4. Run 'npx fleetbo-svro sync' to seal Edge and generate Fleetbo_contract.md.",
+                ],
+              },
+              null,
+              2
+            ),
+          },
+        ],
+      };
+    }
+
+    // --- ACTION 2 : UPDATE PROJECT (MODÉLISATION ADDITIVE) ---
+    if (name === "fleetbo_update_project") {
+      const schema = z.object({
+        keyApp: z.string().min(2),
+        name: z.string().min(2),
+        rules: z.string().optional(),
+        filePaths: z.array(z.string()).optional(),
+        viewFiles: z
+          .array(
+            z.object({
+              name: z.string(),
+              content: z.string(),
+            })
+          )
+          .optional(),
+      });
+      const params = schema.parse(args);
+
+      const filesPayload = [...(params.viewFiles || [])];
+
+      const ALLOWED_EXTENSIONS = new Set([".jsx", ".tsx", ".vue", ".svelte", ".js", ".ts", ".html"]);
+      const FORBIDDEN_PATTERNS = [/\.env/i, /id_rsa/i, /node_modules/i, /\.git/i, /package-lock/i, /\.pem$/i];
+      const MAX_FILE_SIZE_BYTES = 500 * 1024;
+
+      if (params.filePaths && params.filePaths.length > 0) {
+        const resolvedProjectRoot = path.resolve(process.cwd());
+
+        for (const relPath of params.filePaths) {
+          const fullPath = path.resolve(resolvedProjectRoot, relPath);
+          const relative = path.relative(resolvedProjectRoot, fullPath);
+
+          if (relative.startsWith("..") || path.isAbsolute(relative)) {
+            console.warn(`[MCP Security] Access denied outside project directory: ${relPath}`);
+            continue;
+          }
+
+          const baseName = path.basename(fullPath);
+          if (FORBIDDEN_PATTERNS.some((pat) => pat.test(baseName))) {
+            console.warn(`[MCP Security] Sensitive file skipped: ${baseName}`);
+            continue;
+          }
+
+          const ext = path.extname(fullPath).toLowerCase();
+          if (!ALLOWED_EXTENSIONS.has(ext)) {
+            console.warn(`[MCP Security] Unsupported file extension: ${ext}`);
+            continue;
+          }
+
+          if (fs.existsSync(fullPath)) {
+            const stat = fs.statSync(fullPath);
+            if (!stat.isFile()) {
+              console.warn(`[MCP Security] Path skipped (not a regular file): ${relPath}`);
+              continue;
+            }
+            if (stat.size > MAX_FILE_SIZE_BYTES) {
+              console.warn(`[MCP Security] File too large (> 500 KB) skipped: ${relPath}`);
+              continue;
+            }
+
+            filesPayload.push({
+              name: baseName,
+              content: fs.readFileSync(fullPath, "utf8"),
+            });
+          } else {
+            console.warn(`[MCP Security] File not found on disk: ${relPath}`);
+          }
+        }
+      }
+
+      if (filesPayload.length === 0 && (!params.rules || !params.rules.trim())) {
+        throw new Error(
+          "Modeling failed: You must provide at least one valid UI view file (filePaths/viewFiles) or a business rule (rules)."
+        );
+      }
+
+      const res = await fetch(`https://updateprojectlight-${CLOUD_RUN_REGION}`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Bearer ${DEV_AUTH_TOKEN}`,
+        },
+        body: JSON.stringify({
+          data: {
+            keyApp: params.keyApp,
+            name: params.name,
+            newViewFiles: filesPayload,
+            fleetbo_rules: params.rules || "",
+          },
+        }),
+      });
+
+      const json = await res.json();
+      if (!res.ok || json.error) {
+        throw new Error(json.error?.message || "Failed to model project on Fleetbo Cloud.");
+      }
+
+      return {
+        content: [
+          {
+            type: "text",
+            text: JSON.stringify(
+              {
+                status: "SUCCESS",
+                message: `Alex AI modeled ${filesPayload.length} component(s) and registered business rules successfully.`,
+                actionRequired: "npx fleetbo-svro sync",
+                directive:
+                  "RUN 'npx fleetbo-svro sync' in terminal now to fetch contracts, seal Edge KV, update TypeScript types and generate Fleetbo_contract.md.",
+              },
+              null,
+              2
+            ),
+          },
+        ],
+      };
+    }
+
+    // --- ACTION 3 : PUBLISH FUNCTION ---
+    if (name === "fleetbo_publish_function") {
+      const schema = z.object({
+        enterpriseID: z.string(),
+        functionName: z.string().min(3).max(40),
+        code: z.string().min(10),
+        description: z.string().optional(),
+        isPublic: z.boolean().optional(),
+      });
+      const params = schema.parse(args);
+
+      const res = await fetch(`https://publishfunction-${CLOUD_RUN_REGION}`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Bearer ${DEV_AUTH_TOKEN}`,
+        },
+        body: JSON.stringify({
+          data: {
+            enterpriseID: params.enterpriseID,
+            functionName: params.functionName,
+            targetType: "inline",
+            code: params.code,
+            description: params.description || "",
+            isPublic: params.isPublic ?? false,
+          },
+        }),
+      });
+
+      const json = await res.json();
+      if (!res.ok || json.error) {
+        throw new Error(json.error?.message || "Failed to deploy function.");
+      }
+
+      return {
+        content: [
+          {
+            type: "text",
+            text: JSON.stringify(
+              {
+                status: "SUCCESS",
+                functionName: `$${params.functionName}`,
+                isPublic: params.isPublic ?? false,
+                usageHint: `Direct client usage: const res = await Fleetbo.call.$${params.functionName}(payload);`,
+              },
+              null,
+              2
+            ),
+          },
+        ],
+      };
+    }
+
+    throw new Error(`Unknown tool: ${name}`);
+  } catch (err) {
+    return {
+      isError: true,
+      content: [{ type: "text", text: `Fleetbo MCP Error: ${err.message}` }],
+    };
+  }
+});
+
+// ============================================================================
+// 4. CONNEXION STDIO
+// ============================================================================
+const transport = new StdioServerTransport();
+await server.connect(transport);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fleetbo-svro",
-  "version": "1.0.46",
+  "version": "1.0.47",
   "main": "dist/index.js",
   "type": "module",
   "exports": {
@@ -21,8 +21,10 @@
     "index.d.ts"
   ],
   "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.30.0",
     "firebase": "^12.16.0",
-    "unplugin-auto-import": "^0.18.0"
+    "unplugin-auto-import": "^0.18.0",
+    "zod": "^4.6.5"
   },
   "devDependencies": {
     "esbuild": "^0.28.1"