npm - prism-mcp-server - Versions diffs - 7.6.0 → 7.7.1 - Mend

prism-mcp-server 7.6.0 → 7.7.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/dashboard/server.js +134 -1
package/dist/server.js +16 -9
package/package.json +1 -1

package/dist/dashboard/server.js CHANGED Viewed

@@ -20,6 +20,8 @@ import * as http from "http";
 import * as path from "path";
 import * as os from "os";
 import * as fs from "fs";
+import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";
+import { createServer, getAllPossibleTools } from "../server.js";
 import { getStorage } from "../storage/index.js";
 import { PRISM_USER_ID, SERVER_CONFIG } from "../config.js";
 import { renderDashboardHTML } from "./ui.js";
@@ -89,6 +91,8 @@ export async function startDashboardServer() {
         maxAttempts: 5,
         windowMs: 60 * 1000,
     });
+    // Track active SSE transports for MCP
+    const activeSSETransports = new Map();
     /** Render a styled login page matching the Mind Palace theme */
     function renderLoginPage() {
         return `<!DOCTYPE html>
@@ -201,10 +205,106 @@ return false;}
             });
             return res.end(JSON.stringify({ ok: true }));
         }
+        // ─── API: Smithery MCP Server Card (v7.4) ───
+        // Smithery explicitly requests this file to skip slow stdio scanning.
+        // MUST BE PLACED HERE (above Auth Gate) so it is a fully public manifest.
+        if (reqUrl.pathname === "/.well-known/mcp/server-card.json" && req.method === "GET") {
+            try {
+                const tools = getAllPossibleTools();
+                res.writeHead(200, {
+                    "Content-Type": "application/json",
+                    "Access-Control-Allow-Origin": "*",
+                    "Cache-Control": "public, max-age=3600"
+                });
+                return res.end(JSON.stringify({
+                    $schema: "https://smithery.ai/schema/server-card.json",
+                    serverInfo: {
+                        name: SERVER_CONFIG.name,
+                        version: SERVER_CONFIG.version,
+                    },
+                    authentication: {
+                        required: false
+                    },
+                    configSchema: {
+                        type: "object",
+                        required: [],
+                        properties: {
+                            braveApiKey: {
+                                type: "string",
+                                title: "Brave Search API Key",
+                                description: "API key for Brave Search (powers web search and research tools). Get one at https://brave.com/search/api/"
+                            },
+                            googleApiKey: {
+                                type: "string",
+                                title: "Google AI API Key",
+                                description: "API key for Google AI Studio / Gemini (powers synthesis, embeddings, paper analysis). Get one at https://aistudio.google.com/apikey"
+                            },
+                            storage: {
+                                type: "string",
+                                title: "Storage Backend",
+                                description: "Storage backend: 'local' (SQLite, zero-config) or 'supabase' (PostgreSQL, multi-device)",
+                                default: "local",
+                                enum: ["local", "supabase"]
+                            },
+                            supabaseUrl: {
+                                type: "string",
+                                title: "Supabase URL",
+                                description: "Your Supabase project URL (required if storage is 'supabase')"
+                            },
+                            supabaseServiceKey: {
+                                type: "string",
+                                title: "Supabase Service Key",
+                                description: "Your Supabase service role key (required if storage is 'supabase')"
+                            },
+                            firecrawlApiKey: {
+                                type: "string",
+                                title: "Firecrawl API Key",
+                                description: "Optional: API key for Firecrawl (enables Web Scholar pipeline). Get one at https://www.firecrawl.dev/"
+                            },
+                            braveAnswersApiKey: {
+                                type: "string",
+                                title: "Brave Answers API Key",
+                                description: "Optional: Separate key for AI-grounded answers (brave_answers tool)"
+                            },
+                            prismEnableHivemind: {
+                                type: "boolean",
+                                title: "Enable Multi-Agent Hivemind",
+                                description: "Set to true to enable multi-agent coordination tools.",
+                                default: false
+                            },
+                            prismDarkFactoryEnabled: {
+                                type: "boolean",
+                                title: "Enable Dark Factory",
+                                description: "Set to true to enable autonomous evaluation pipelines.",
+                                default: false
+                            },
+                            prismTaskRouterEnabled: {
+                                type: "boolean",
+                                title: "Enable Task Router",
+                                description: "Set to true to allow Prism to route tasks to local Ollama agents.",
+                                default: false
+                            }
+                        }
+                    },
+                    tools: tools.map(t => ({
+                        name: t.name,
+                        description: t.description,
+                        inputSchema: t.inputSchema
+                    })),
+                    prompts: [],
+                    resources: []
+                }));
+            }
+            catch (err) {
+                console.error("[Dashboard] Error generating server card:", err);
+                res.writeHead(500, { "Content-Type": "application/json" });
+                return res.end(JSON.stringify({ error: err.message || "Failed to generate server card" }));
+            }
+        }
         // ─── v5.1: Auth gate — block unauthenticated requests ───
         if (AUTH_ENABLED && !isAuthenticated(req, authConfig)) {
             // For API calls, return 401 JSON
-            if (reqUrl.pathname.startsWith("/api/")) {
+            if (reqUrl.pathname.startsWith("/api/") || reqUrl.pathname === "/sse" || reqUrl.pathname === "/messages") {
                 res.writeHead(401, { "Content-Type": "application/json" });
                 return res.end(JSON.stringify({ error: "Authentication required" }));
             }
@@ -214,6 +314,39 @@ return false;}
         }
         try {
             const url = new URL(req.url || "/", `http://${req.headers.host}`);
+            // ─── SSE: MCP Transport Endpoint ───
+            if (url.pathname === "/sse" && req.method === "GET") {
+                const transport = new SSEServerTransport("/messages", res);
+                await transport.start();
+                activeSSETransports.set(transport.sessionId, transport);
+                transport.onclose = () => {
+                    activeSSETransports.delete(transport.sessionId);
+                };
+                try {
+                    const mcpServer = createServer();
+                    await mcpServer.connect(transport);
+                }
+                catch (err) {
+                    console.error("[Dashboard] SSE Connection failed:", err);
+                    activeSSETransports.delete(transport.sessionId);
+                }
+                return; // SSEServerTransport handles keeping the response open
+            }
+            // ─── SSE: MCP Message Receiver ───
+            if (url.pathname === "/messages" && req.method === "POST") {
+                const sessionId = url.searchParams.get("sessionId");
+                if (!sessionId) {
+                    res.writeHead(400, { "Content-Type": "text/plain" });
+                    return res.end("Missing sessionId");
+                }
+                const transport = activeSSETransports.get(sessionId);
+                if (!transport) {
+                    res.writeHead(404, { "Content-Type": "text/plain" });
+                    return res.end("Session not found");
+                }
+                await transport.handlePostMessage(req, res);
+                return;
+            }
             // ─── Serve the Dashboard UI ───
             if (url.pathname === "/" || url.pathname === "/index.html") {
                 res.writeHead(200, {

package/dist/server.js CHANGED Viewed

@@ -254,7 +254,18 @@ export function notifyResourceUpdate(project, server) {
  *   - resources: memory://{project}/handoff — paperclip-attachable session state
  *                with subscribe support for live refresh
  */
-export function createServer() {
+export function getAllPossibleTools() {
+    return [
+        ...BASE_TOOLS,
+        ...buildSessionMemoryTools([]),
+        ...AGENT_REGISTRY_TOOLS,
+        SESSION_TASK_ROUTE_TOOL,
+        SESSION_START_PIPELINE_TOOL,
+        SESSION_CHECK_PIPELINE_STATUS_TOOL,
+        SESSION_ABORT_PIPELINE_TOOL
+    ];
+}
+export function getAvailableTools() {
     // ─── v4.1 FIX: Auto-Load via Dynamic Tool Descriptions ────────
     // Read auto-load projects EXCLUSIVELY from dashboard config
     // (available after initConfigStorage() in startServer).
@@ -273,21 +284,17 @@ export function createServer() {
     if (autoloadList.length > 0) {
         console.error(`[Prism] Auto-load projects (dashboard): ${autoloadList.join(', ')}`);
     }
-    // Build the dynamic tool list with auto-load instruction injected
     const SESSION_MEMORY_TOOLS = buildSessionMemoryTools(autoloadList);
-    // Combine: always list ALL tools so scanners (Glama, Smithery, MCP Registry)
-    // can enumerate the full capability set. Runtime guards in the CallTool handler
-    // still prevent execution without valid Supabase credentials.
-    const ALL_TOOLS = [
+    return [
         ...BASE_TOOLS,
         ...SESSION_MEMORY_TOOLS,
-        // v3.0: Agent Hivemind tools — only when PRISM_ENABLE_HIVEMIND=true
         ...(PRISM_ENABLE_HIVEMIND ? AGENT_REGISTRY_TOOLS : []),
-        // v7.1: Task Router tool — only when PRISM_TASK_ROUTER_ENABLED=true
         ...(getSettingSync("task_router_enabled", String(PRISM_TASK_ROUTER_ENABLED_ENV)) === "true" ? [SESSION_TASK_ROUTE_TOOL] : []),
-        // v7.3: Dark Factory pipeline tools — only when PRISM_DARK_FACTORY_ENABLED=true
         ...(PRISM_DARK_FACTORY_ENABLED ? [SESSION_START_PIPELINE_TOOL, SESSION_CHECK_PIPELINE_STATUS_TOOL, SESSION_ABORT_PIPELINE_TOOL] : []),
     ];
+}
+export function createServer() {
+    const ALL_TOOLS = getAvailableTools();
     const server = new Server({
         name: SERVER_CONFIG.name,
         version: SERVER_CONFIG.version,

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "prism-mcp-server",
-  "version": "7.6.0",
+  "version": "7.7.1",
   "mcpName": "io.github.dcostenco/prism-mcp",
   "description": "The Mind Palace for AI Agents — adversarial evaluation (PLAN_CONTRACT→EVALUATE anti-sycophancy), fail-closed Dark Factory autonomous pipelines (3-gate parse→type→scope), persistent memory (SQLite/Supabase), ACT-R cognitive retrieval, behavioral learning & IDE rules sync, multi-agent Hivemind, time travel, visual dashboard. Zero-config local mode.",
   "module": "index.ts",