premanmcp 0.10.5 → 0.10.7

package/dist/server.js

@@ -3,10 +3,12 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { z } from "zod";
 import { registerUserAuthFlowTools } from "./user_auth_flow.js";
 import { shareAuthFlowToUi } from "./auth_flow_ui.js";
+import { spawn } from "node:child_process";
 import { existsSync, readFileSync } from "node:fs";
 import fs from "node:fs/promises";
 import path from "node:path";
 import os from "node:os";
+import { fileURLToPath } from "node:url";
 import { randomUUID } from "node:crypto";
 import { MCP_PREVIEW_RESOURCE_URI, RESOURCE_URI_META_KEY, buildConversionPanelHtml, writeMcpPreviewFile, } from "./mcp-preview-panel.js";
 let REPO_CONFIG = null;
@@ -391,6 +393,7 @@ export function createServer() {
             "- 'preview my MCP before deploying': mcp_preview (read-only). 'actually deploy': mcp_deploy.",
             "- 'test the login endpoint' / 'hit POST /auth/login with body': test_api with the full URL. Use test_endpoint_by_id ONLY when the user references a saved endpoint by id/uuid.",
             "- 'import my Postman/OpenAPI/Bruno/curl collection': import_collection.",
+            "- 'migrate / move / switch from Postman', 'bring my Postman workspace over': migrate_from_postman — it imports AND creates scheduled suites, environments and alerts in one call. Prefer it over import_collection whenever the user frames this as leaving Postman.",
             "- 'generate tests for endpoint X' / 'write unit tests for X and run them': generate_endpoint_tests (set include_code=true and write the returned code_artifacts to disk when the user wants test files).",
             "- 'stress / load test X': run_stress_test. Read-only unless the user explicitly authorises writes — never set allow_writes yourself.",
             "- After discover_endpoints_from_codebase, call register_discovered_endpoints with the JSON array it asked for, then verify_endpoints_live to confirm they respond.",
@@ -408,6 +411,7 @@ export function createServer() {
             "2. **Import then generate**: import_collection (Postman/OpenAPI/curl) -> generate_tests -> test_api to run them.",
             '3. **Coverage audit**: get_coverage on a collection -> generate_tests(coverage_level="comprehensive") for gaps.',
             "4. **Drift detection**: detect_drift with a collection + base_url -> test_api on drifted endpoints.",
+            "5. **Postman migration**: migrate_from_postman -> review next_steps (base URLs, secrets needing values) -> re-run with activate=true -> failures open fix tasks you collect with preman_get_fix_task.",
             "",
             "## Auth",
             "PreMan API tools (get_endpoints, test_api, …) need an pm_live_ key. Preferred no-browser flow: user_auth_start_signup -> user_auth_set_password -> preman_create_api_key, or user_auth_login -> preman_create_api_key. Browser fallback: preman_login -> preman_login_complete.",
@@ -663,6 +667,57 @@ export function createServer() {
             });
         }
     });
+    // ── migrate_from_postman ──────────────────────────────────────────
+    server.tool("migrate_from_postman", "Move a Postman collection into PreMan, fully wired, in one call. Converts the collection keeping the assertions its pm.test blocks declared, splits the environment into shared variables and encrypted secrets, and creates one scheduled test suite per request seeded from those assertions. Suites are created switched OFF; pass activate=true to start them and attach alert rules so a failing check opens a fix task. Returns next_steps — the honest list of what still needs a human.", {
+        content: z.string().optional().describe("Raw Postman collection export (v2.x JSON)"),
+        collection_id: z.string().optional().describe("Pull from a connected Postman workspace instead of pasting content"),
+        environment: z.string().optional().describe("Raw Postman environment export (JSON)"),
+        name: z.string().optional().describe("Override the collection name"),
+        project_id: z.string().optional().describe("Scope the migration to a project"),
+        activate: z.boolean().optional().default(false).describe("Start the suites and create alert rules. Leave false to review first."),
+        channel_ids: z.array(z.string()).optional().describe("Alert channels to notify. Empty still records events and opens fix tasks."),
+        autofix_enabled: z.boolean().optional().default(false).describe("Let a failure dispatch to the coding agent automatically"),
+        include_yaml: z.boolean().optional().default(false).describe("Include the full .ot.yaml string (default false to save tokens)"),
+    }, async (args) => {
+        try {
+            const result = await callBackend("migrate_from_postman", args);
+            const collectionId = result?.collection_id ?? "";
+            const dashPath = collectionId ? `/collections?id=${collectionId}` : "/collections";
+            emitActivity("navigate", { path: dashPath });
+            emitActivity("data_refresh", { scope: "collections" });
+            return withFrontendUrl({ ...result, ...agentSessionPayload(dashPath) }, dashPath);
+        }
+        catch (e) {
+            return toolError(e.message, inferErrorCode(e.message), {
+                next_actions: [
+                    "Provide either content (a Postman v2.x export) or collection_id from a connected Postman workspace.",
+                    "Connect a workspace at /integrations/postman/connect to use collection_id.",
+                ],
+                related_tools: ["import_collection", "get_endpoints"],
+            });
+        }
+    });
+    // ── recover_assertions ────────────────────────────────────────────
+    server.tool("recover_assertions", "Hand back assertions you translated from a Postman script PreMan could not read. An import's migration_report lists every dropped pm.test block with the script attached under entries[].source — read that JavaScript, convert what it checks, and call this. The assertion lands on the collection endpoint, its workbench request and the scheduled suite, so the next run grades it. Each assertion accepts: status (int or '2xx'), status_not (int), response_time_ms ('< 500'), json_paths ({'json.id': 7}, or 'exists' to require a field).", {
+        collection_id: z.string().describe("The collection the import created"),
+        endpoint_id: z.string().describe("entries[].endpoint_id from the migration report (or the endpoint name)"),
+        assertions: z.array(z.record(z.any())).describe("The converted assertions"),
+    }, async (args) => {
+        try {
+            const result = await callBackend("recover_assertions", args);
+            emitActivity("data_refresh", { scope: "collections" });
+            return { content: [{ type: "text", text: JSON.stringify(result) }] };
+        }
+        catch (e) {
+            return toolError(e.message, inferErrorCode(e.message), {
+                next_actions: [
+                    "Check collection_id and endpoint_id against the migration_report entries.",
+                    "Each assertion must use the documented fields: status, status_not, response_time_ms, json_paths.",
+                ],
+                related_tools: ["get_collection", "migrate_from_postman"],
+            });
+        }
+    });
     // ── detect_drift ──────────────────────────────────────────────────
     server.tool("detect_drift", "Detect spec drift by comparing live API responses against a collection spec. Returns a list of drift alerts per endpoint with expected vs actual differences.", {
         base_url: z.string().describe("Base URL to test against (e.g. https://api.example.com)"),
@@ -1444,11 +1499,34 @@ export function createServer() {
     return server;
 }
 // ── Start ─────────────────────────────────────────────────────────────
+/**
+ * A pre-push hook PreMan wrote can stop working — the machine gained a `preman`
+ * belonging to another package, or lost the one it pinned — and the only symptom
+ * is one skipped line per push. This process starting is proof PreMan runs here,
+ * so it is a good moment to check. Detached with stdio ignored: the check shells
+ * out to npm, and this process's stdout is the MCP protocol.
+ */
+function repairPushHookInBackground() {
+    try {
+        const cli = path.join(path.dirname(fileURLToPath(import.meta.url)), "..", "bin", "cli.js");
+        if (!existsSync(cli))
+            return;
+        const child = spawn(process.execPath, [cli, "hook", "repair", "--if-stale"], {
+            detached: true,
+            stdio: "ignore",
+        });
+        child.unref();
+    }
+    catch {
+        // Never worth failing a server start over.
+    }
+}
 async function main() {
     await initAuth();
     const server = createServer();
     const transport = new StdioServerTransport();
     await server.connect(transport);
+    repairPushHookInBackground();
     // Starting the configured MCP server is itself proof that the coding agent
     // is live.  Previously the workbench remained in `connecting` until someone
     // explicitly asked the agent to call `preman_status`, even when this process

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "premanmcp",
-  "version": "0.10.5",
+  "version": "0.10.7",
   "description": "Turn APIs into agent-callable MCP tools with auth, testing, and audit logs",
   "type": "module",
   "bin": {
@@ -15,7 +15,7 @@
     "open-mcp-preview-in-cursor": "node scripts/open-cursor-preview.mjs",
     "test": "npm run build && npm run test:connect && npm run test:node",
     "test:connect": "node scripts/smoke-connect.mjs",
-    "test:node": "node --test --test-timeout=30000 scripts/smoke-launcher-config.mjs scripts/smoke-runner.mjs scripts/smoke-repo-config.mjs scripts/smoke-onboard.mjs scripts/smoke-local-detect.mjs scripts/smoke-prepush-hook.mjs scripts/smoke-cli-identity.mjs scripts/smoke-runner-heartbeat.mjs scripts/smoke-verify-prepush.mjs scripts/smoke-push-diff.mjs scripts/smoke-progress-reporter.mjs scripts/smoke-verify-plan.mjs scripts/smoke-install-desktop.mjs"
+    "test:node": "node --test --test-timeout=90000 scripts/smoke-account.mjs scripts/smoke-cli-entrypoint.mjs scripts/smoke-launcher-config.mjs scripts/smoke-runner.mjs scripts/smoke-repo-config.mjs scripts/smoke-onboard.mjs scripts/smoke-local-detect.mjs scripts/smoke-prepush-hook.mjs scripts/smoke-cli-identity.mjs scripts/smoke-runner-heartbeat.mjs scripts/smoke-verify-prepush.mjs scripts/smoke-push-diff.mjs scripts/smoke-progress-reporter.mjs scripts/smoke-verify-plan.mjs scripts/smoke-install-desktop.mjs scripts/smoke-api-tools.mjs scripts/smoke-tests-workbench.mjs scripts/smoke-bin-scope.mjs"
   },
   "dependencies": {
     "@modelcontextprotocol/ext-apps": "^0.1.0",