prism-mcp-server 12.5.2 → 12.5.4

package/dist/auth.js

@@ -1,218 +0,0 @@
-/**
- * Prism Cloud — Authentication Module (v2.0)
- * =============================================
- *
- * Handles OAuth login flow for Prism CLI:
- *   1. `prism login` → starts local HTTP server on random port
- *   2. Opens browser → Synalux OAuth page with redirect back to localhost
- *   3. Receives auth code → exchanges for JWT + refresh token
- *   4. Stores tokens in prism-config.db via configStorage
- *
- * Token management:
- *   - Auto-refresh expired JWTs using stored refresh token
- *   - `prism logout` → clears stored tokens
- *   - `prism status` → shows current auth state
- */
-import { createServer } from 'http';
-import { URL } from 'url';
-import { setSetting, getSetting } from './storage/configStorage.js';
-import { clearCloudCache } from './prism-cloud.js';
-// ─── Config ───────────────────────────────────────────────────────
-const SYNALUX_BASE = process.env.SYNALUX_API_BASE || 'https://synalux.ai';
-const AUTH_CALLBACK_PATH = '/auth/callback';
-// Config keys in prism-config.db
-const KEY_AUTH_TOKEN = 'prism_auth_token';
-const KEY_REFRESH_TOKEN = 'prism_refresh_token';
-const KEY_AUTH_EMAIL = 'prism_auth_email';
-const KEY_AUTH_NAME = 'prism_auth_name';
-const KEY_AUTH_PLAN = 'prism_auth_plan';
-const KEY_AUTH_EXPIRES = 'prism_auth_expires';
-/**
- * Start the OAuth login flow.
- * Opens default browser to Synalux login page, waits for callback.
- */
-export async function login() {
-    return new Promise((resolve) => {
-        // Start local server on random port
-        const server = createServer(async (req, res) => {
-            const url = new URL(req.url || '/', `http://localhost`);
-            if (url.pathname !== AUTH_CALLBACK_PATH) {
-                res.writeHead(404);
-                res.end('Not found');
-                return;
-            }
-            const code = url.searchParams.get('code');
-            const error = url.searchParams.get('error');
-            if (error) {
-                res.writeHead(200, { 'Content-Type': 'text/html' });
-                res.end(renderHtml('Login Failed', `Error: ${error}. You can close this window.`));
-                server.close();
-                resolve({ success: false, error });
-                return;
-            }
-            if (!code) {
-                res.writeHead(400, { 'Content-Type': 'text/html' });
-                res.end(renderHtml('Login Failed', 'No authorization code received. You can close this window.'));
-                server.close();
-                resolve({ success: false, error: 'No authorization code' });
-                return;
-            }
-            try {
-                // Exchange code for JWT
-                const tokenResult = await exchangeCode(code);
-                // Store tokens
-                await setSetting(KEY_AUTH_TOKEN, tokenResult.access_token);
-                if (tokenResult.refresh_token) {
-                    await setSetting(KEY_REFRESH_TOKEN, tokenResult.refresh_token);
-                }
-                if (tokenResult.email) {
-                    await setSetting(KEY_AUTH_EMAIL, tokenResult.email);
-                }
-                if (tokenResult.plan) {
-                    await setSetting(KEY_AUTH_PLAN, tokenResult.plan);
-                }
-                if (tokenResult.expires_at) {
-                    await setSetting(KEY_AUTH_EXPIRES, String(tokenResult.expires_at));
-                }
-                // Clear cached cloud limits so next verify call uses new token
-                clearCloudCache();
-                res.writeHead(200, { 'Content-Type': 'text/html' });
-                res.end(renderHtml('✅ Prism Login Successful', `Authenticated as <strong>${tokenResult.email}</strong> (${tokenResult.plan} plan). You can close this window.`));
-                server.close();
-                resolve({
-                    success: true,
-                    email: tokenResult.email,
-                    plan: tokenResult.plan,
-                });
-            }
-            catch (err) {
-                const message = err instanceof Error ? err.message : String(err);
-                res.writeHead(200, { 'Content-Type': 'text/html' });
-                res.end(renderHtml('Login Failed', `Error: ${message}. You can close this window.`));
-                server.close();
-                resolve({ success: false, error: message });
-            }
-        });
-        server.listen(0, '127.0.0.1', () => {
-            const addr = server.address();
-            if (!addr || typeof addr === 'string') {
-                resolve({ success: false, error: 'Failed to start local server' });
-                return;
-            }
-            const port = addr.port;
-            const callbackUrl = `http://127.0.0.1:${port}${AUTH_CALLBACK_PATH}`;
-            const loginUrl = `${SYNALUX_BASE}/auth/prism-login?redirect_uri=${encodeURIComponent(callbackUrl)}`;
-            console.log(`\n🔐 Opening browser for Synalux login...`);
-            console.log(`   If the browser doesn't open, visit:\n   ${loginUrl}\n`);
-            // Open browser (platform-agnostic)
-            openBrowser(loginUrl);
-            // Timeout after 5 minutes
-            setTimeout(() => {
-                server.close();
-                resolve({ success: false, error: 'Login timed out (5 minutes)' });
-            }, 5 * 60 * 1000);
-        });
-    });
-}
-async function exchangeCode(code) {
-    const response = await fetch(`${SYNALUX_BASE}/api/v1/auth/code-exchange`, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({ code, client: 'prism-cli' }),
-    });
-    if (!response.ok) {
-        const text = await response.text();
-        throw new Error(`Token exchange failed (${response.status}): ${text}`);
-    }
-    return response.json();
-}
-// ─── Token Refresh ────────────────────────────────────────────────
-/**
- * Get a valid auth token, refreshing if expired.
- * Returns empty string if not logged in.
- */
-export async function getAuthToken() {
-    const token = await getSetting(KEY_AUTH_TOKEN);
-    if (!token)
-        return '';
-    // Check expiry
-    const expiresStr = await getSetting(KEY_AUTH_EXPIRES);
-    if (expiresStr) {
-        const expiresAt = parseInt(expiresStr, 10);
-        const now = Math.floor(Date.now() / 1000);
-        if (now < expiresAt - 60) {
-            // Token still valid (with 60s buffer)
-            return token;
-        }
-        // Try to refresh
-        const refreshToken = await getSetting(KEY_REFRESH_TOKEN);
-        if (refreshToken) {
-            try {
-                const refreshed = await refreshAuthToken(refreshToken);
-                await setSetting(KEY_AUTH_TOKEN, refreshed.access_token);
-                if (refreshed.expires_at) {
-                    await setSetting(KEY_AUTH_EXPIRES, String(refreshed.expires_at));
-                }
-                clearCloudCache();
-                return refreshed.access_token;
-            }
-            catch {
-                console.warn('[Prism Auth] Token refresh failed. Run `prism login` to re-authenticate.');
-                return '';
-            }
-        }
-    }
-    return token;
-}
-async function refreshAuthToken(refreshToken) {
-    const response = await fetch(`${SYNALUX_BASE}/api/v1/auth/jwt`, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({ refresh_token: refreshToken, client: 'prism-cli' }),
-    });
-    if (!response.ok) {
-        throw new Error(`Token refresh failed (${response.status})`);
-    }
-    return response.json();
-}
-// ─── Logout ───────────────────────────────────────────────────────
-export async function logout() {
-    await setSetting(KEY_AUTH_TOKEN, '');
-    await setSetting(KEY_REFRESH_TOKEN, '');
-    await setSetting(KEY_AUTH_EMAIL, '');
-    await setSetting(KEY_AUTH_PLAN, '');
-    await setSetting(KEY_AUTH_EXPIRES, '');
-    clearCloudCache();
-}
-export async function getAuthStatus() {
-    const token = await getSetting(KEY_AUTH_TOKEN);
-    if (!token)
-        return { loggedIn: false };
-    const email = await getSetting(KEY_AUTH_EMAIL);
-    const name = await getSetting(KEY_AUTH_NAME);
-    const plan = await getSetting(KEY_AUTH_PLAN);
-    const expiresStr = await getSetting(KEY_AUTH_EXPIRES);
-    return {
-        loggedIn: true,
-        email: email || undefined,
-        name: name || undefined,
-        plan: plan || undefined,
-        expiresAt: expiresStr ? new Date(parseInt(expiresStr, 10) * 1000) : undefined,
-    };
-}
-// ─── Helpers ──────────────────────────────────────────────────────
-function renderHtml(title, body) {
-    return `<!DOCTYPE html>
-<html><head><title>${title}</title>
-<style>body{font-family:system-ui,-apple-system,sans-serif;display:flex;justify-content:center;align-items:center;min-height:100vh;margin:0;background:#0a0a1a;color:#e0e0e0}
-.card{background:#1a1a2e;border-radius:16px;padding:48px;max-width:480px;text-align:center;box-shadow:0 8px 32px rgba(0,0,0,.4)}
-h1{font-size:24px;margin-bottom:16px}p{color:#a0a0b0;line-height:1.6}</style>
-</head><body><div class="card"><h1>${title}</h1><p>${body}</p></div></body></html>`;
-}
-function openBrowser(url) {
-    const { exec } = require('child_process');
-    const cmd = process.platform === 'darwin' ? 'open'
-        : process.platform === 'win32' ? 'start'
-            : 'xdg-open';
-    exec(`${cmd} "${url}"`);
-}

package/dist/prism-cloud.js

@@ -1,110 +0,0 @@
-import { getSettingSync } from './storage/configStorage.js';
-const DEFAULT_LIMITS = {
-    tier: 'free',
-    status: 'active',
-    limits: {
-        llm_daily: 0,
-        search_daily: 0,
-        memory_sync: false,
-        coder_daily: 0,
-    },
-    usage: {
-        llm_calls: 0,
-        search_calls: 0,
-        memory_calls: 0,
-        coder_calls: 0,
-    },
-    features: {
-        cloud_coder: false,
-        cloud_memory: false,
-        cloud_llm: false,
-        cloud_search: false,
-        hivemind: false,
-        voice_video: false,
-    },
-};
-let cachedLimits = null;
-/**
- * Verify cloud license via Synalux API (v2.0 — JWT Auth).
- *
- * Reads auth token from:
- *   1. PRISM_AUTH_TOKEN env var (set by `prism login`)
- *   2. prism_auth_token setting (stored by dashboard login)
- *   3. Legacy: PRISM_LICENSE_KEY (deprecated, returns guidance)
- *
- * Calls GET /api/v1/prism/verify with Bearer JWT.
- */
-export async function verifyCloudLicense() {
-    if (cachedLimits)
-        return cachedLimits;
-    // v2.0: Read JWT auth token (set by `prism login` OAuth flow)
-    const authToken = getSettingSync('prism_auth_token', process.env.PRISM_AUTH_TOKEN || '');
-    // Legacy fallback: if user still has old license key, guide them to upgrade
-    const legacyKey = getSettingSync('prism_license_key', process.env.PRISM_LICENSE_KEY || '');
-    if (!authToken && legacyKey) {
-        console.warn('[Prism Cloud] License key auth is deprecated. Please run `prism login` to switch to OAuth.');
-        return DEFAULT_LIMITS;
-    }
-    if (!authToken) {
-        console.warn('[Prism Cloud] No auth token found. Operating in Free tier. Run `prism login` to authenticate.');
-        return DEFAULT_LIMITS;
-    }
-    try {
-        const baseUrl = process.env.SYNALUX_API_BASE || 'https://synalux.ai';
-        const response = await fetch(`${baseUrl}/api/v1/prism/verify`, {
-            method: 'GET',
-            headers: {
-                'Authorization': `Bearer ${authToken}`,
-                'Content-Type': 'application/json',
-            },
-        });
-        if (!response.ok) {
-            if (response.status === 401) {
-                console.warn('[Prism Cloud] Auth token expired or invalid. Run `prism login` to re-authenticate.');
-            }
-            else {
-                console.warn(`[Prism Cloud] Verification failed with status ${response.status}. Operating in Free tier.`);
-            }
-            return DEFAULT_LIMITS;
-        }
-        const data = await response.json();
-        if (data.status === 'success') {
-            cachedLimits = {
-                tier: data.user.plan || 'free',
-                status: 'active',
-                limits: {
-                    llm_daily: data.limits?.llm_daily || 0,
-                    search_daily: data.limits?.search_daily || 0,
-                    memory_sync: data.limits?.memory_sync || false,
-                    coder_daily: data.limits?.coder_daily || 0,
-                },
-                usage: {
-                    llm_calls: data.usage?.llm_calls || 0,
-                    search_calls: data.usage?.search_calls || 0,
-                    memory_calls: data.usage?.memory_calls || 0,
-                    coder_calls: data.usage?.coder_calls || 0,
-                },
-                features: data.features || DEFAULT_LIMITS.features,
-            };
-            console.log(`[Prism Cloud] Verified ${cachedLimits.tier} license.`);
-            return cachedLimits;
-        }
-        else {
-            console.warn(`[Prism Cloud] Invalid response. Operating in Free tier.`);
-            return DEFAULT_LIMITS;
-        }
-    }
-    catch (error) {
-        console.error(`[Prism Cloud] Error verifying license: ${error instanceof Error ? error.message : String(error)}`);
-        return DEFAULT_LIMITS;
-    }
-}
-export function getCloudLimits() {
-    return cachedLimits || DEFAULT_LIMITS;
-}
-/**
- * Clear cached limits (e.g., after `prism login` sets new token).
- */
-export function clearCloudCache() {
-    cachedLimits = null;
-}

package/dist/tools/projects.js

@@ -1,214 +0,0 @@
-/**
- * Prism Projects — MCP Tool Handlers (Phase 4)
- * ===============================================
- *
- * CRUD operations for projects and team membership.
- * Tier limits enforced via getCloudLimits().
- *
- * Tools:
- *   - project_create: Create a new project
- *   - project_list: List all projects for current user
- *   - project_update: Update project name/description/status
- *   - project_delete: Archive/delete a project
- *   - project_assign_member: Add a member to a project
- *   - project_remove_member: Remove a member from a project
- */
-import { randomUUID } from 'crypto';
-import { getStorage } from '../storage/index.js';
-import { getCloudLimits } from '../prism-cloud.js';
-import { PRISM_USER_ID } from '../config.js';
-const VALID_STATUSES = ['draft', 'active', 'on_hold', 'completed', 'archived'];
-const VALID_ROLES = ['owner', 'editor', 'viewer'];
-// Tier limits for projects
-const PROJECT_LIMITS = {
-    free: { maxProjects: 1, maxMembers: 1 },
-    standard: { maxProjects: 9, maxMembers: 5 },
-    advanced: { maxProjects: 999, maxMembers: 25 },
-    enterprise: { maxProjects: 999999, maxMembers: 999999 },
-};
-function makeResult(text, isError = false) {
-    return { content: [{ type: 'text', text }], isError };
-}
-// ─── project_create ──────────────────────────────────────────
-export async function projectCreateHandler(args) {
-    const { name, description, status, team_id } = args;
-    if (!name || typeof name !== 'string' || name.trim().length === 0) {
-        return makeResult('❌ Missing required field: name', true);
-    }
-    if (status && !VALID_STATUSES.includes(status)) {
-        return makeResult(`❌ Invalid status. Must be one of: ${VALID_STATUSES.join(', ')}`, true);
-    }
-    // Check tier limits
-    const limits = getCloudLimits();
-    const tierLimits = PROJECT_LIMITS[limits.tier] || PROJECT_LIMITS.free;
-    const storage = await getStorage();
-    const db = storage.db;
-    if (!db) {
-        return makeResult('❌ Project management requires SQLite storage.', true);
-    }
-    // Count existing projects
-    const countResult = await db.execute({
-        sql: 'SELECT COUNT(*) as cnt FROM prism_projects WHERE created_by = ?',
-        args: [PRISM_USER_ID],
-    });
-    const currentCount = Number(countResult.rows[0]?.cnt || 0);
-    if (currentCount >= tierLimits.maxProjects) {
-        return makeResult(`❌ Project limit reached (${currentCount}/${tierLimits.maxProjects}). ` +
-            `Upgrade your plan to create more projects.`, true);
-    }
-    const id = randomUUID();
-    await db.execute({
-        sql: `INSERT INTO prism_projects (id, name, description, status, created_by, team_id)
-              VALUES (?, ?, ?, ?, ?, ?)`,
-        args: [id, name.trim(), description || '', status || 'draft', PRISM_USER_ID, team_id || null],
-    });
-    // Auto-assign creator as owner
-    await db.execute({
-        sql: `INSERT INTO prism_project_members (project_id, user_id, role)
-              VALUES (?, ?, 'owner')`,
-        args: [id, PRISM_USER_ID],
-    });
-    return makeResult(`✅ Project created: "${name.trim()}" (${id})\n` +
-        `   Status: ${status || 'draft'}\n` +
-        `   Projects used: ${currentCount + 1}/${tierLimits.maxProjects}`);
-}
-// ─── project_list ────────────────────────────────────────────
-export async function projectListHandler(args) {
-    const storage = await getStorage();
-    const db = storage.db;
-    if (!db) {
-        return makeResult('❌ Project management requires SQLite storage.', true);
-    }
-    let sql = `SELECT p.*, m.role as my_role
-               FROM prism_projects p
-               LEFT JOIN prism_project_members m ON p.id = m.project_id AND m.user_id = ?
-               WHERE (p.created_by = ? OR m.user_id = ?)`;
-    const sqlArgs = [PRISM_USER_ID, PRISM_USER_ID, PRISM_USER_ID];
-    if (args.status) {
-        sql += ` AND p.status = ?`;
-        sqlArgs.push(args.status);
-    }
-    if (args.team_id) {
-        sql += ` AND p.team_id = ?`;
-        sqlArgs.push(args.team_id);
-    }
-    sql += ` ORDER BY p.updated_at DESC`;
-    const result = await db.execute({ sql, args: sqlArgs });
-    const projects = result.rows;
-    if (projects.length === 0) {
-        return makeResult('📁 No projects found. Use `project_create` to create one.');
-    }
-    const lines = projects.map((p) => {
-        const statusIcon = p.status === 'active' ? '🟢' : p.status === 'draft' ? '📝' : p.status === 'completed' ? '✅' : p.status === 'archived' ? '📦' : '⏸️';
-        return `${statusIcon} **${p.name}** (${p.id.substring(0, 8)})\n   Status: ${p.status} | Role: ${p.my_role || 'owner'} | Updated: ${p.updated_at}`;
-    });
-    const limits = getCloudLimits();
-    const tierLimits = PROJECT_LIMITS[limits.tier] || PROJECT_LIMITS.free;
-    return makeResult(`📁 **Projects** (${projects.length}/${tierLimits.maxProjects})\n\n` +
-        lines.join('\n\n'));
-}
-// ─── project_update ──────────────────────────────────────────
-export async function projectUpdateHandler(args) {
-    const { project_id, name, description, status } = args;
-    if (!project_id) {
-        return makeResult('❌ Missing required field: project_id', true);
-    }
-    if (status && !VALID_STATUSES.includes(status)) {
-        return makeResult(`❌ Invalid status. Must be one of: ${VALID_STATUSES.join(', ')}`, true);
-    }
-    const storage = await getStorage();
-    const db = storage.db;
-    if (!db)
-        return makeResult('❌ Project management requires SQLite storage.', true);
-    const sets = ["updated_at = datetime('now')"];
-    const sqlArgs = [];
-    if (name) {
-        sets.push('name = ?');
-        sqlArgs.push(name.trim());
-    }
-    if (description !== undefined) {
-        sets.push('description = ?');
-        sqlArgs.push(description);
-    }
-    if (status) {
-        sets.push('status = ?');
-        sqlArgs.push(status);
-    }
-    sqlArgs.push(project_id);
-    await db.execute({
-        sql: `UPDATE prism_projects SET ${sets.join(', ')} WHERE id = ?`,
-        args: sqlArgs,
-    });
-    return makeResult(`✅ Project ${project_id.substring(0, 8)} updated.`);
-}
-// ─── project_delete ──────────────────────────────────────────
-export async function projectDeleteHandler(args) {
-    const { project_id, hard } = args;
-    if (!project_id) {
-        return makeResult('❌ Missing required field: project_id', true);
-    }
-    const storage = await getStorage();
-    const db = storage.db;
-    if (!db)
-        return makeResult('❌ Project management requires SQLite storage.', true);
-    if (hard) {
-        await db.execute({ sql: 'DELETE FROM prism_projects WHERE id = ?', args: [project_id] });
-        return makeResult(`🗑️ Project ${project_id.substring(0, 8)} permanently deleted.`);
-    }
-    else {
-        await db.execute({
-            sql: `UPDATE prism_projects SET status = 'archived', updated_at = datetime('now') WHERE id = ?`,
-            args: [project_id],
-        });
-        return makeResult(`📦 Project ${project_id.substring(0, 8)} archived.`);
-    }
-}
-// ─── project_assign_member ───────────────────────────────────
-export async function projectAssignMemberHandler(args) {
-    const { project_id, user_id, role } = args;
-    if (!project_id || !user_id) {
-        return makeResult('❌ Missing required fields: project_id, user_id', true);
-    }
-    const effectiveRole = role || 'viewer';
-    if (!VALID_ROLES.includes(effectiveRole)) {
-        return makeResult(`❌ Invalid role. Must be one of: ${VALID_ROLES.join(', ')}`, true);
-    }
-    // Check tier limits
-    const limits = getCloudLimits();
-    const tierLimits = PROJECT_LIMITS[limits.tier] || PROJECT_LIMITS.free;
-    const storage = await getStorage();
-    const db = storage.db;
-    if (!db)
-        return makeResult('❌ Project management requires SQLite storage.', true);
-    const countResult = await db.execute({
-        sql: 'SELECT COUNT(*) as cnt FROM prism_project_members WHERE project_id = ?',
-        args: [project_id],
-    });
-    const currentMembers = Number(countResult.rows[0]?.cnt || 0);
-    if (currentMembers >= tierLimits.maxMembers) {
-        return makeResult(`❌ Member limit reached (${currentMembers}/${tierLimits.maxMembers}). ` +
-            `Upgrade your plan to add more members.`, true);
-    }
-    await db.execute({
-        sql: `INSERT OR REPLACE INTO prism_project_members (project_id, user_id, role)
-              VALUES (?, ?, ?)`,
-        args: [project_id, user_id, effectiveRole],
-    });
-    return makeResult(`✅ ${user_id} assigned as ${effectiveRole} to project ${project_id.substring(0, 8)}.`);
-}
-// ─── project_remove_member ───────────────────────────────────
-export async function projectRemoveMemberHandler(args) {
-    const { project_id, user_id } = args;
-    if (!project_id || !user_id) {
-        return makeResult('❌ Missing required fields: project_id, user_id', true);
-    }
-    const storage = await getStorage();
-    const db = storage.db;
-    if (!db)
-        return makeResult('❌ Project management requires SQLite storage.', true);
-    await db.execute({
-        sql: 'DELETE FROM prism_project_members WHERE project_id = ? AND user_id = ?',
-        args: [project_id, user_id],
-    });
-    return makeResult(`✅ ${user_id} removed from project ${project_id.substring(0, 8)}.`);
-}