secufusion-mcp 1.0.46 → 1.0.48

package/.secufusion-project-spec.json

@@ -963,6 +963,21 @@
       "port": 8088,
       "uri": "lb://PRODUCT-SERVICE",
       "note": "Defined in the shared deployment env config (PRODUCT_SERVICE_NAME/PRODUCT_SERVICE_PORT/PRODUCT_SERVICE_URI) but NO corresponding repository exists anywhere in this 18-repo workspace, and no route to it was found in sfn-gateway-api's application.properties. See manual_review_flags."
+    },
+    "sfn-web-ui": {
+      "repo": "sfn-web-ui",
+      "type": "frontend",
+      "dev_port": 5173,
+      "framework": "React 19.1.1 (Vite 7.1.7 build tool, @vitejs/plugin-react + @vitejs/plugin-basic-ssl for local HTTPS)",
+      "ui_library": "MUI (Material UI) v7.3.5 + Emotion styling engine, custom theme in src/theme.js",
+      "state_management": "Redux Toolkit 2.10.1 + react-redux 9.2.0 (primary global state: src/store/slices/ — auth, feature, notification, tenant, ui); React Context used narrowly (src/contexts/TenantContextProvider.jsx)",
+      "api_base_url_pattern": "axios instance (src/utils/axiosConfig.js) with host-derived baseURL: relative/empty on localhost (routed through Vite dev proxy to VITE_API_TARGET env var), or https://<current-host>/ in production (same-origin)",
+      "auth_token_attachment": "axios request interceptor: tries dynamicKeycloakService.getToken() (silent refresh) first, falls back to Redux auth.token, sets Authorization: Bearer <token>. Matching response interceptor handles 401 via Keycloak refresh or POST /api/tenants/auth/token/refresh, with a failed-request queue to avoid parallel refresh storms.",
+      "tenant_id_in_requests": "Hybrid: normally tenantId is embedded as a URL path segment (derived from Redux auth.user.tenantId) per service's own routing convention. For MSSP 'acting tenant' impersonation, the same axios interceptor adds an X-Acting-Tenant header (for tenant-agnostic-path APIs) AND rewrites /api/tenants/... URL path segments to swap in the acting tenant's UUID (implemented in src/services/tenantImpersonation.js).",
+      "owns_tables": [],
+      "calls_services": ["sfn-gateway-api"],
+      "kafka_produces": [],
+      "kafka_consumes": []
     }
   },
   "frontend": {

package/index.js

@@ -374,9 +374,37 @@ server.tool("manage_project_spec", "Manages the .secufusion-project-spec.json fi
             }, inputChars);
         }
         const microservices = spec.microservices;
-        const serviceBlock = microservices?.[service_name];
+        const svcNameLower = service_name.toLowerCase();
+        // 1. Direct match in microservices
+        let serviceBlock = microservices?.[service_name];
+        // 2. Case-insensitive match in microservices (e.g. "sfn-iam-api" vs "sfn-IAM-api")
+        if (!serviceBlock && microservices) {
+            const matchedKey = Object.keys(microservices).find(k => k.toLowerCase() === svcNameLower);
+            if (matchedKey)
+                serviceBlock = microservices[matchedKey];
+        }
+        // 3. Check spec.frontend by repo name (e.g. "sfn-web-ui")
+        const frontend = spec.frontend;
+        if (!serviceBlock && frontend) {
+            const repoName = String(frontend.repo ?? "").toLowerCase();
+            if (repoName === svcNameLower || svcNameLower.includes("web-ui") || svcNameLower.includes("frontend")) {
+                serviceBlock = frontend;
+            }
+        }
+        // 4. Check spec.chrome_extension by repo name
+        const chromeExt = spec.chrome_extension;
+        if (!serviceBlock && chromeExt) {
+            const repoName = String(chromeExt.repo ?? "").toLowerCase();
+            if (repoName === svcNameLower || svcNameLower.includes("chrome") || svcNameLower.includes("extension")) {
+                serviceBlock = chromeExt;
+            }
+        }
         if (!serviceBlock) {
-            const available = microservices ? Object.keys(microservices).join(", ") : "none";
+            const available = [
+                ...(microservices ? Object.keys(microservices) : []),
+                ...(frontend?.repo ? [String(frontend.repo)] : []),
+                ...(chromeExt?.repo ? [String(chromeExt.repo)] : []),
+            ].join(", ");
             return appendTelemetry({
                 isError: true,
                 content: [{ type: "text", text: `Service '${service_name}' not found in spec.\n\nAvailable services: ${available}` }],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "secufusion-mcp",
-  "version": "1.0.46",
+  "version": "1.0.48",
   "type": "module",
   "description": "SecuFusion MCP server - developer workflow tooling with guardrails",
   "main": "index.js",