memory-journal-mcp 6.1.2 → 6.2.1

package/src/server/scheduler.ts

@@ -1,283 +0,0 @@
-/**
- * Memory Journal MCP Server - Scheduler
- *
- * Lightweight in-process scheduler for periodic maintenance jobs.
- * Only meaningful for HTTP/SSE transport (long-lived server processes).
- * Uses setInterval for simplicity — no external dependencies.
- */
-
-import type { IDatabaseAdapter } from '../database/core/interfaces.js'
-import type { VectorSearchManager } from '../vector/vector-search-manager.js'
-import { logger } from '../utils/logger.js'
-
-// ============================================================================
-// Types
-// ============================================================================
-
-/** Scheduler configuration options */
-export interface SchedulerOptions {
-    /** Automated backup interval in minutes (0 = disabled) */
-    backupIntervalMinutes: number
-    /** Max backups to retain during automated cleanup */
-    keepBackups: number
-    /** Database optimize interval in minutes (0 = disabled) */
-    vacuumIntervalMinutes: number
-    /** Vector index rebuild interval in minutes (0 = disabled) */
-    rebuildIndexIntervalMinutes: number
-}
-
-/** Status of a single scheduled job */
-export interface JobStatus {
-    name: string
-    enabled: boolean
-    intervalMinutes: number
-    lastRun: string | null
-    lastResult: 'success' | 'error' | null
-    lastError: string | null
-    nextRun: string | null
-    runCount: number
-}
-
-/** Overall scheduler status */
-export interface SchedulerStatus {
-    active: boolean
-    jobs: JobStatus[]
-}
-
-/** Internal timer tracking for a job */
-interface JobTimer {
-    name: string
-    intervalMinutes: number
-    timer: ReturnType<typeof setInterval>
-    lastRun: Date | null
-    lastResult: 'success' | 'error' | null
-    lastError: string | null
-    runCount: number
-}
-
-// ============================================================================
-// Scheduler
-// ============================================================================
-
-/**
- * Scheduler — runs periodic maintenance jobs for long-lived server processes.
- *
- * Jobs:
- * - **backup**: Exports database to timestamped file, then prunes old backups.
- * - **vacuum**: Runs `PRAGMA optimize` and flushes database to disk.
- * - **rebuild-index**: Rebuilds vector search index from all entries.
- */
-export class Scheduler {
-    private readonly options: SchedulerOptions
-    private readonly db: IDatabaseAdapter
-    private readonly vectorManager: VectorSearchManager | null
-    private readonly timers: JobTimer[] = []
-    private started = false
-
-    constructor(
-        options: SchedulerOptions,
-        db: IDatabaseAdapter,
-        vectorManager?: VectorSearchManager
-    ) {
-        this.options = options
-        this.db = db
-        this.vectorManager = vectorManager ?? null
-    }
-
-    /**
-     * Start all enabled scheduled jobs.
-     * Each job runs on its own interval and failures are isolated.
-     */
-    start(): void {
-        if (this.started) {
-            logger.warning('Scheduler already started, ignoring duplicate start()', {
-                module: 'Scheduler',
-            })
-            return
-        }
-        this.started = true
-
-        const { backupIntervalMinutes, vacuumIntervalMinutes, rebuildIndexIntervalMinutes } =
-            this.options
-
-        if (backupIntervalMinutes > 0) {
-            this.scheduleJob('backup', backupIntervalMinutes, () => this.runBackup())
-        }
-
-        if (vacuumIntervalMinutes > 0) {
-            this.scheduleJob('vacuum', vacuumIntervalMinutes, () => {
-                this.runVacuumOptimize()
-                return Promise.resolve()
-            })
-        }
-
-        if (rebuildIndexIntervalMinutes > 0) {
-            if (this.vectorManager) {
-                this.scheduleJob('rebuild-index', rebuildIndexIntervalMinutes, () =>
-                    this.runRebuildIndex()
-                )
-            } else {
-                logger.warning(
-                    'rebuild-index-interval specified but vector manager not available, skipping',
-                    { module: 'Scheduler' }
-                )
-            }
-        }
-
-        if (this.timers.length > 0) {
-            const summary = this.timers.map(
-                (t: JobTimer) => `${t.name} (${String(t.intervalMinutes)}min)`
-            )
-            logger.info(`Scheduler started: ${summary.join(', ')}`, { module: 'Scheduler' })
-        } else {
-            logger.info('Scheduler started with no jobs enabled', { module: 'Scheduler' })
-        }
-    }
-
-    /**
-     * Stop all scheduled jobs and clear timers.
-     * Safe to call multiple times.
-     */
-    stop(): void {
-        for (const job of this.timers) {
-            clearInterval(job.timer)
-        }
-        if (this.timers.length > 0) {
-            logger.info(`Scheduler stopped, cleared ${String(this.timers.length)} job(s)`, {
-                module: 'Scheduler',
-            })
-        }
-        this.timers.length = 0
-        this.started = false
-    }
-
-    /**
-     * Get the current status of all scheduled jobs.
-     */
-    getStatus(): SchedulerStatus {
-        return {
-            active: this.started,
-            jobs: this.timers.map((t: JobTimer) => ({
-                name: t.name,
-                enabled: true,
-                intervalMinutes: t.intervalMinutes,
-                lastRun: t.lastRun?.toISOString() ?? null,
-                lastResult: t.lastResult,
-                lastError: t.lastError,
-                nextRun: t.lastRun
-                    ? new Date(t.lastRun.getTime() + t.intervalMinutes * 60_000).toISOString()
-                    : new Date(Date.now() + t.intervalMinutes * 60_000).toISOString(),
-                runCount: t.runCount,
-            })),
-        }
-    }
-
-    // ========================================================================
-    // Private — Job scheduling
-    // ========================================================================
-
-    /**
-     * Schedule a recurring job.
-     */
-    private scheduleJob(name: string, intervalMinutes: number, fn: () => Promise<void>): void {
-        const intervalMs = intervalMinutes * 60_000
-
-        const jobTimer: JobTimer = {
-            name,
-            intervalMinutes,
-            timer: setInterval(() => {
-                void this.executeJob(jobTimer, fn)
-            }, intervalMs),
-            lastRun: null,
-            lastResult: null,
-            lastError: null,
-            runCount: 0,
-        }
-
-        jobTimer.timer.unref()
-        this.timers.push(jobTimer)
-    }
-
-    /**
-     * Execute a job with error isolation and status tracking.
-     */
-    private async executeJob(job: JobTimer, fn: () => Promise<void>): Promise<void> {
-        const startTime = Date.now()
-        try {
-            await fn()
-            job.lastRun = new Date(startTime)
-            job.lastResult = 'success'
-            job.lastError = null
-            job.runCount++
-        } catch (error) {
-            job.lastRun = new Date(startTime)
-            job.lastResult = 'error'
-            job.lastError = error instanceof Error ? error.message : String(error)
-            job.runCount++
-            logger.error(`Scheduled job '${job.name}' failed`, {
-                module: 'Scheduler',
-                operation: job.name,
-                error: job.lastError,
-            })
-        }
-    }
-
-    // ========================================================================
-    // Private — Job implementations
-    // ========================================================================
-
-    /**
-     * Backup job: export database to file, then cleanup old backups.
-     */
-    private async runBackup(): Promise<void> {
-        const result = await this.db.exportToFile()
-        logger.info('Scheduled backup created', {
-            module: 'Scheduler',
-            operation: 'backup',
-            context: { filename: result.filename, sizeBytes: result.sizeBytes },
-        })
-
-        const cleanup = this.db.deleteOldBackups(this.options.keepBackups)
-        if (cleanup.deleted.length > 0) {
-            logger.info(
-                `Backup cleanup: deleted ${String(cleanup.deleted.length)}, kept ${String(cleanup.kept)}`,
-                {
-                    module: 'Scheduler',
-                    operation: 'backup-cleanup',
-                }
-            )
-        }
-    }
-
-    /**
-     * Vacuum/optimize job: run PRAGMA optimize and flush to disk.
-     *
-     * PRAGMA optimize updates internal query planner statistics based on
-     * recent query patterns. For the native better-sqlite3 driver, disk
-     * writes happen automatically via WAL mode.
-     */
-    private runVacuumOptimize(): void {
-        this.db.pragma('optimize')
-        this.db.flushSave()
-        logger.info('Scheduled database optimize completed', {
-            module: 'Scheduler',
-            operation: 'vacuum',
-        })
-    }
-
-    /**
-     * Rebuild index job: full vector index rebuild from database entries.
-     */
-    private async runRebuildIndex(): Promise<void> {
-        if (!this.vectorManager) {
-            return
-        }
-
-        const { indexed: count } = await this.vectorManager.rebuildIndex(this.db)
-        logger.info(`Scheduled vector index rebuild: ${String(count)} entries indexed`, {
-            module: 'Scheduler',
-            operation: 'rebuild-index',
-            context: { entriesIndexed: count },
-        })
-    }
-}

package/src/transports/http/handlers.ts

@@ -1,78 +0,0 @@
-/**
- * memory-journal-mcp — HTTP Transport Handlers
- *
- * Standalone handler functions for utility endpoints and auth middleware.
- */
-
-import { timingSafeEqual } from 'node:crypto'
-import type { Request, Response } from 'express'
-import { logger } from '../../utils/logger.js'
-import { VERSION } from '../../version.js'
-
-// =============================================================================
-// Health Check
-// =============================================================================
-
-/**
- * Handle the /health endpoint
- */
-export function handleHealthCheck(_req: Request, res: Response): void {
-    res.status(200).json({
-        status: 'healthy',
-        timestamp: new Date().toISOString(),
-    })
-}
-
-// =============================================================================
-// Root Info
-// =============================================================================
-
-/**
- * Handle the / endpoint — helpful for browser visitors and debugging
- */
-export function handleRootInfo(_req: Request, res: Response): void {
-    res.status(200).json({
-        name: 'memory-journal-mcp',
-        version: VERSION,
-        description: 'Project context management for AI-assisted development',
-        endpoints: {
-            'POST /mcp': 'JSON-RPC requests (Streamable HTTP, MCP 2025-03-26)',
-            'GET /mcp': 'SSE stream for server-to-client notifications',
-            'DELETE /mcp': 'Session termination',
-            'GET /sse': 'Legacy SSE connection (MCP 2024-11-05)',
-            'POST /messages': 'Legacy SSE message endpoint',
-            'GET /health': 'Health check',
-        },
-        documentation: 'https://github.com/neverinfamous/memory-journal-mcp',
-    })
-}
-
-// =============================================================================
-// Bearer Token Auth Middleware
-// =============================================================================
-
-/**
- * Create a bearer token authentication middleware.
- * Bypasses /health endpoint. Uses timing-safe comparison.
- */
-export function createAuthMiddleware(
-    authToken: string
-): (req: Request, res: Response, next: () => void) => void {
-    logger.info('Bearer token authentication enabled', { module: 'HTTP' })
-
-    return (req: Request, res: Response, next: () => void): void => {
-        if (req.path === '/health') {
-            next()
-            return
-        }
-
-        const header = req.headers.authorization
-        const expected = Buffer.from(`Bearer ${authToken}`)
-        const received = Buffer.from(header ?? '')
-        if (expected.length !== received.length || !timingSafeEqual(expected, received)) {
-            res.status(401).json({ error: 'Unauthorized' })
-            return
-        }
-        next()
-    }
-}

package/src/transports/http/index.ts

@@ -1,8 +0,0 @@
-/**
- * memory-journal-mcp — HTTP Transport barrel export
- */
-
-export { HttpTransport } from './server/index.js'
-export type { HttpTransportConfig } from './types.js'
-export { getClientIp, checkRateLimit } from './security.js'
-export { handleHealthCheck, handleRootInfo } from './handlers.js'

package/src/transports/http/security.ts

@@ -1,147 +0,0 @@
-/**
- * memory-journal-mcp — HTTP Transport Security
- *
- * Security utilities: rate limiting, headers, CORS, client IP extraction.
- */
-
-import type { Request, Response } from 'express'
-import type { HttpTransportConfig, RateLimitEntry } from './types.js'
-import {
-    DEFAULT_RATE_LIMIT_WINDOW_MS,
-    DEFAULT_RATE_LIMIT_MAX_REQUESTS,
-    DEFAULT_HSTS_MAX_AGE,
-    CORS_PREFLIGHT_MAX_AGE_SECONDS,
-} from './types.js'
-
-// =============================================================================
-// Client IP Extraction
-// =============================================================================
-
-/**
- * Extract the client IP address from the request.
- * When trustProxy is enabled, uses the leftmost IP from X-Forwarded-For.
- * Falls back to Express's req.ip then req.socket.remoteAddress.
- */
-export function getClientIp(req: Request, trustProxy: boolean): string {
-    if (trustProxy) {
-        const forwarded = req.headers['x-forwarded-for']
-        if (typeof forwarded === 'string') {
-            const firstIp = forwarded.split(',')[0]?.trim()
-            if (firstIp) return firstIp
-        }
-    }
-    return req.ip ?? req.socket.remoteAddress ?? 'unknown'
-}
-
-// =============================================================================
-// Rate Limiting
-// =============================================================================
-
-/**
- * Check rate limit for a request.
- * Returns object with `allowed` flag and optional `retryAfterSeconds`.
- */
-export function checkRateLimit(
-    req: Request,
-    config: HttpTransportConfig,
-    rateLimitMap: Map<string, RateLimitEntry>
-): { allowed: boolean; retryAfterSeconds?: number } {
-    if (config.enableRateLimit === false) {
-        return { allowed: true }
-    }
-
-    const clientIp = getClientIp(req, config.trustProxy ?? false)
-    const now = Date.now()
-    const windowMs = config.rateLimitWindowMs ?? DEFAULT_RATE_LIMIT_WINDOW_MS
-    const maxRequests =
-        config.rateLimitMaxRequests ??
-        (process.env['MCP_RATE_LIMIT_MAX']
-            ? parseInt(process.env['MCP_RATE_LIMIT_MAX'], 10)
-            : DEFAULT_RATE_LIMIT_MAX_REQUESTS)
-
-    const entry = rateLimitMap.get(clientIp)
-
-    if (!entry || now > entry.resetTime) {
-        rateLimitMap.set(clientIp, { count: 1, resetTime: now + windowMs })
-        return { allowed: true }
-    }
-
-    if (entry.count >= maxRequests) {
-        const retryAfterSeconds = Math.ceil((entry.resetTime - now) / 1000)
-        return { allowed: false, retryAfterSeconds }
-    }
-
-    entry.count++
-    return { allowed: true }
-}
-
-// =============================================================================
-// Security Headers
-// =============================================================================
-
-/**
- * Set security headers for all responses.
- *
- * Headers: X-Content-Type-Options, X-Frame-Options, Cache-Control,
- * Content-Security-Policy, Permissions-Policy, Referrer-Policy, HSTS (opt-in).
- */
-export function setSecurityHeaders(res: Response, config: HttpTransportConfig): void {
-    res.setHeader('X-Content-Type-Options', 'nosniff')
-    res.setHeader('X-Frame-Options', 'DENY')
-    res.setHeader('Cache-Control', 'no-store, no-cache, must-revalidate')
-    res.setHeader('Content-Security-Policy', "default-src 'none'; frame-ancestors 'none'")
-    res.setHeader('Permissions-Policy', 'camera=(), microphone=(), geolocation=()')
-    res.setHeader('Referrer-Policy', 'no-referrer')
-
-    if (config.enableHSTS) {
-        const maxAge = config.hstsMaxAge ?? DEFAULT_HSTS_MAX_AGE
-        res.setHeader('Strict-Transport-Security', `max-age=${String(maxAge)}; includeSubDomains`)
-    }
-}
-
-// =============================================================================
-// CORS
-// =============================================================================
-
-/**
- * Set CORS headers based on configuration.
- *
- * Uses the `origin in whitelist` pattern from CodeQL's documented safe example
- * for js/cors-misconfiguration-for-credentials. CodeQL only recognizes specific
- * sanitizer expressions (object property lookup via `in`, `Set.has()`, etc.) —
- * `Array.some()` with a callback is NOT recognized as a sanitizer.
- *
- * Wildcard subdomain patterns (`*.example.com`) are not supported when
- * `corsAllowCredentials` is true. For credentialed CORS, list explicit origins.
- */
-export function setCorsHeaders(req: Request, res: Response, config: HttpTransportConfig): void {
-    const corsOrigins = config.corsOrigins ?? ['*']
-    const isWildcard = corsOrigins.includes('*')
-    const origin = req.headers.origin
-
-    if (isWildcard) {
-        res.setHeader('Access-Control-Allow-Origin', '*')
-    } else if (origin) {
-        // Build whitelist record — CodeQL recognizes `origin in whitelist` as a sanitizer
-        const whitelist: Record<string, true> = {}
-        for (const allowed of corsOrigins) {
-            whitelist[allowed] = true
-        }
-
-        if (origin in whitelist) {
-            res.setHeader('Access-Control-Allow-Origin', origin)
-            res.setHeader('Vary', 'Origin')
-            if (config.corsAllowCredentials) {
-                res.setHeader('Access-Control-Allow-Credentials', 'true')
-            }
-        }
-    }
-
-    res.setHeader('Access-Control-Allow-Methods', 'GET, POST, DELETE, OPTIONS')
-    res.setHeader(
-        'Access-Control-Allow-Headers',
-        'Content-Type, Accept, Authorization, mcp-session-id, Last-Event-ID, mcp-protocol-version'
-    )
-    res.setHeader('Access-Control-Expose-Headers', 'mcp-session-id')
-    res.setHeader('Access-Control-Max-Age', String(CORS_PREFLIGHT_MAX_AGE_SECONDS))
-}