spur-board 0.7.0 → 0.8.1

package/dist/mcp.mjs

@@ -1,6 +1,6 @@
-import { j as ERRORS, s as OPERATIONS, u as renderMcpError } from "./src-BFgTh55w.mjs";
-import { r as CliError, t as requestOperation } from "./client-Ln76BdDz.mjs";
-import { n as loadClientConfig } from "./config-B_6fA4Au.mjs";
+import { j as ERRORS, s as OPERATIONS, u as renderMcpError } from "./src-g7u1onIP.mjs";
+import { i as CliError, n as requestOperation } from "./client-D4cveOHQ.mjs";
+import { a as memoryVerdictCache, r as compareCatalogs, s as loadClientConfig, t as checkCatalog } from "./config-B1fVOLzp.mjs";
 import { randomUUID } from "node:crypto";
 import { readFileSync } from "node:fs";
 import { z } from "zod";
@@ -79,6 +79,32 @@ function createMcpServer(env = process.env, loadConfig = loadClientConfig) {
 		version
 	});
 	const agent = Boolean(env["SPUR_SESSION"]);
+	const verdicts = memoryVerdictCache();
+	/** Addresses whose daemon served a different catalog; each call probes before sending. */
+	const mismatched = /* @__PURE__ */ new Map();
+	/** Refuses the call unless the daemon at a marked address now serves the client's catalog. */
+	const probe = async (config) => {
+		if (mismatched.get(config.address.href) === void 0) return;
+		const { clientVersion, serverVersion, matches, instance } = await compareCatalogs(config).catch((cause) => {
+			throw cause instanceof CliError && ERRORS[cause.code].recovery.sideEffects === "none" ? cause : new CliError("daemon_unavailable");
+		});
+		if (!matches) {
+			mismatched.set(config.address.href, {
+				clientVersion,
+				serverVersion
+			});
+			throw new CliError("version_mismatch", {
+				clientVersion,
+				serverVersion
+			});
+		}
+		mismatched.delete(config.address.href);
+		if (instance !== void 0) verdicts.remember(config.address, instance, {
+			clientVersion,
+			serverVersion,
+			matches: true
+		});
+	};
 	for (const op of OPERATIONS) server.registerTool(op.mcp.name, {
 		description: toolDescription(op),
 		inputSchema: fromJsonSchema(toolInputSchema(op, agent), handlerValidator),
@@ -93,7 +119,29 @@ function createMcpServer(env = process.env, loadConfig = loadClientConfig) {
 			const parsed = parseArguments(op, argumentsValue, agent);
 			key = parsed.key;
 			const config = loadConfig(env);
-			const value = await requestOperation(op, parsed.input, key, config);
+			await probe(config);
+			let instance;
+			let outcome;
+			try {
+				outcome = { value: await requestOperation(op, parsed.input, key, config, (seen) => {
+					instance = seen;
+				}) };
+			} catch (error) {
+				outcome = { error };
+			}
+			if (instance !== void 0) {
+				const verdict = await checkCatalog(config, instance, verdicts);
+				if (verdict !== void 0 && !verdict.matches) {
+					const context = {
+						clientVersion: verdict.clientVersion,
+						serverVersion: verdict.serverVersion
+					};
+					mismatched.set(config.address.href, context);
+					if (op.kind === "query") throw new CliError("version_mismatch", context);
+				}
+			}
+			if ("error" in outcome) throw outcome.error;
+			const value = outcome.value;
 			return {
 				content: [{
 					type: "text",

package/dist/{src-BFgTh55w.mjs → src-g7u1onIP.mjs}

@@ -113,6 +113,12 @@ const SLACK_BOT_SCOPES = [
 const DEFAULT_HTTP_PORT = 4311;
 const DEFAULT_SLACK_APP_NAME = "spur-board";
 const DEFAULT_SLACK_COMMAND = "/board";
+/**
+* The journal project of board-wide events that belong to no configured project: token
+* lifecycle, unknown Spur states and denials with no resolvable project. It sits outside the
+* project id pattern, so no configured project can take it.
+*/
+const RESERVED_PROJECT = "_board";
 const WEEKDAYS = [
 	"monday",
 	"tuesday",
@@ -195,7 +201,10 @@ function checkBoard(items, ctx) {
 	});
 }
 const projectSchema = z.strictObject({
-	id: z.string().regex(/^[a-z][a-z0-9-]*$/, "Expected lowercase letters, digits and dashes"),
+	id: z.string().refine((id) => id !== RESERVED_PROJECT, {
+		message: `"${RESERVED_PROJECT}" is reserved for board-wide journal events; choose another project id`,
+		abort: true
+	}).regex(/^[a-z][a-z0-9-]*$/, "Expected lowercase letters, digits and dashes"),
 	tracker: z.discriminatedUnion("type", [jiraTracker, githubIssuesTracker]),
 	repos: z.array(repoSlugSchema).min(1),
 	operatorGithubLogin: z.string().regex(/^[A-Za-z0-9-]{1,39}$/, "Expected a GitHub login"),
@@ -522,7 +531,11 @@ const ERRORS = {
 		exit: EXIT_CODES.notApplied,
 		message: "The client and daemon catalog versions do not match; nothing was applied.",
 		hint: "Run `board service restart` to update the daemon, then retry.",
-		recovery: noRetry("Run `board service restart`, then retry the command.")
+		recovery: noRetry("Run `board service restart`, then retry the command."),
+		mcp: {
+			hint: "Restart your agent session so `board mcp` loads the daemon's catalog; if the mismatch remains, run `board service restart`.",
+			recovery: noRetry("Restart your agent session; if the mismatch remains, run `board service restart`. Then retry the tool call.")
+		}
 	}),
 	daemon_unavailable: spec("daemon_unavailable", {
 		status: null,
@@ -894,6 +907,7 @@ const EVENT_KINDS = [
 	"doorbell_read",
 	"doorbell_undelivered",
 	"inbound_failed",
+	"inbound_skipped",
 	"from_you_raised",
 	"from_you_cleared",
 	"flag_raised",
@@ -1034,6 +1048,10 @@ const eventPayloadSchemas = {
 		gateway: S,
 		reason: S
 	}),
+	inbound_skipped: z.looseObject({
+		gateway: S,
+		reason: S
+	}),
 	from_you_raised: z.looseObject({
 		item: S,
 		rule: S.optional()
@@ -1242,9 +1260,10 @@ const errorInputSchema = z.strictObject({
 	requestId: z.string().min(1),
 	context: errorContextSchema.optional()
 });
-function fields(input) {
+function fields(input, transport = "default") {
 	const { code, requestId, context } = errorInputSchema.parse(input);
 	const spec = ERRORS[code];
+	const guidance = (transport === "mcp" ? spec.mcp : void 0) ?? spec;
 	const trace = code === "unexpected" ? {
 		requestId,
 		logLocation: "daemon log"
@@ -1253,9 +1272,9 @@ function fields(input) {
 		code,
 		requestId,
 		message: spec.message,
-		hint: spec.hint,
+		hint: guidance.hint,
 		docs: spec.docs,
-		recovery: spec.recovery,
+		recovery: guidance.recovery,
 		context: context ?? {},
 		...trace ? { trace } : {}
 	};
@@ -1275,12 +1294,12 @@ function renderHttpProblem(input) {
 	};
 }
 function renderMcpError(input) {
-	const content = fields(input);
+	const content = fields(input, "mcp");
 	return {
 		isError: true,
 		content: [{
 			type: "text",
-			text: renderStderrError(input)
+			text: renderLines(content)
 		}],
 		structuredContent: content
 	};
@@ -1292,8 +1311,7 @@ function renderJsonError(input) {
 		error: fields(input)
 	};
 }
-function renderStderrError(input) {
-	const value = fields(input);
+function renderLines(value) {
 	const context = Object.entries(value.context);
 	return [
 		`error: ${value.code}: ${value.message}`,
@@ -2678,4 +2696,4 @@ var AdapterError = class extends Error {
 	}
 };
 //#endregion
-export { taskKeySchema as A, SLACK_BOT_SCOPES as B, sessionFactsSchema as C, errorCodeOf as D, encodeActorId as E, DEFAULT_HTTP_PORT as F, DEFAULT_SLACK_APP_NAME as I, DEFAULT_SLACK_COMMAND as L, errorContextSchema as M, errorEnvelopeSchema as N, parseActorId as O, successEnvelopeSchema as P, configSchema as R, prRefSchema as S, actorIdSchema as T, EVENT_KINDS as _, buildCatalogSnapshot as a, SESSION_STATUSES as b, renderHttpProblem as c, SPACE_IDS as d, conversationRefSchema as f, userIdSchema as g, messageRefSchema as h, sourceCursorSchema as i, ERRORS as j, parseRef as k, renderJsonError as l, interactionRefSchema as m, batchSchema as n, roleCanUseOperation as o, inboundEventSchema as p, entityRefSchema as r, OPERATIONS as s, AdapterError as t, renderMcpError as u, eventPayloadSchemas as v, ticketFactsSchema as w, prFactsSchema as x, SESSION_HEALTH_STATES as y, requiredSecretKeys as z };
+export { taskKeySchema as A, requiredSecretKeys as B, sessionFactsSchema as C, errorCodeOf as D, encodeActorId as E, DEFAULT_HTTP_PORT as F, DEFAULT_SLACK_APP_NAME as I, DEFAULT_SLACK_COMMAND as L, errorContextSchema as M, errorEnvelopeSchema as N, parseActorId as O, successEnvelopeSchema as P, RESERVED_PROJECT as R, prRefSchema as S, actorIdSchema as T, SLACK_BOT_SCOPES as V, EVENT_KINDS as _, buildCatalogSnapshot as a, SESSION_STATUSES as b, renderHttpProblem as c, SPACE_IDS as d, conversationRefSchema as f, userIdSchema as g, messageRefSchema as h, sourceCursorSchema as i, ERRORS as j, parseRef as k, renderJsonError as l, interactionRefSchema as m, batchSchema as n, roleCanUseOperation as o, inboundEventSchema as p, entityRefSchema as r, OPERATIONS as s, AdapterError as t, renderMcpError as u, eventPayloadSchemas as v, ticketFactsSchema as w, prFactsSchema as x, SESSION_HEALTH_STATES as y, configSchema as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spur-board",
-  "version": "0.7.0",
+  "version": "0.8.1",
   "license": "MIT",
   "engines": {
     "node": "^24.12.0 || ^26.0.0"

package/dist/config-B_6fA4Au.mjs

@@ -1,111 +0,0 @@
-import { R as configSchema } from "./src-BFgTh55w.mjs";
-import { r as CliError } from "./client-Ln76BdDz.mjs";
-import { closeSync, constants, fstatSync, lstatSync, openSync, readFileSync, realpathSync, statSync } from "node:fs";
-import { homedir } from "node:os";
-import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
-import YAML from "yaml";
-//#region src/config.ts
-const CONNECT_TIMEOUT_MS = 2e3;
-const RESPONSE_TIMEOUT_MS = 3e4;
-function configFile(env, home) {
-	const boardHome = env["BOARD_HOME"];
-	if (boardHome) return join(resolve(boardHome), "config.yaml");
-	const xdg = env["XDG_CONFIG_HOME"];
-	return join(xdg && isAbsolute(xdg) ? xdg : join(home, ".config"), "spur-board", "config.yaml");
-}
-function resolveDaemonAddress(env = process.env, home = homedir(), configuredPort) {
-	const rawAddress = env["BOARD_DAEMON_URL"];
-	if (rawAddress === void 0) {
-		let port = configuredPort ?? 4311;
-		if (configuredPort === void 0) try {
-			const parsed = YAML.parseDocument(readFileSync(configFile(env, home), "utf8"));
-			if (parsed.errors.length === 0) {
-				const config = configSchema.safeParse(parsed.toJS());
-				if (config.success) port = config.data.http.port;
-			}
-		} catch {}
-		if (port === 0) throw new CliError("config", void 0, void 0, "http.port: 0 assigns a runtime port that clients cannot discover. Set BOARD_DAEMON_URL to the daemon listening address.");
-		return new URL(`http://127.0.0.1:${String(port)}`);
-	}
-	let address;
-	try {
-		address = new URL(rawAddress);
-	} catch {
-		throw new CliError("config", { environmentVariable: "BOARD_DAEMON_URL" });
-	}
-	if (!["http:", "https:"].includes(address.protocol) || address.username || address.password) throw new CliError("config", { environmentVariable: "BOARD_DAEMON_URL" });
-	return address;
-}
-function tokenInFolder(folder, warn) {
-	const directory = join(folder, ".spur-board");
-	const file = join(directory, "token");
-	try {
-		const owner = process.getuid?.();
-		const directoryInfo = lstatSync(directory);
-		if (!directoryInfo.isDirectory() || directoryInfo.uid !== owner || (directoryInfo.mode & 63) !== 0) throw new Error("unsafe token directory");
-		const descriptor = openSync(file, constants.O_RDONLY | constants.O_NOFOLLOW);
-		let value;
-		try {
-			const fileInfo = fstatSync(descriptor);
-			if (!fileInfo.isFile() || fileInfo.uid !== owner || (fileInfo.mode & 63) !== 0) throw new Error("unsafe token file");
-			value = readFileSync(descriptor, "utf8").trimEnd();
-		} finally {
-			closeSync(descriptor);
-		}
-		if (value === "") throw new Error("empty token file");
-		return value;
-	} catch (error) {
-		if (error !== null && typeof error === "object" && "code" in error && error.code === "ENOENT") return;
-		warn("Ignoring an unsafe .spur-board/token candidate.\n");
-		return;
-	}
-}
-function findTokenFile(cwd, home, warn = (message) => {
-	process.stderr.write(message);
-}) {
-	const current = realpathSync(cwd);
-	const boundary = realpathSync(home);
-	if (current === boundary) return void 0;
-	const toCurrent = relative(boundary, current);
-	const outsideHome = toCurrent === ".." || toCurrent.startsWith(`..${sep}`) || isAbsolute(toCurrent);
-	let folder = current;
-	while (folder !== boundary) {
-		if (outsideHome) {
-			const info = statSync(folder);
-			if (info.uid !== process.getuid?.() || (info.mode & 2) !== 0) break;
-		}
-		const token = tokenInFolder(folder, warn);
-		if (token !== void 0) return token;
-		const parent = dirname(folder);
-		if (parent === folder) break;
-		folder = parent;
-	}
-}
-function loadClientConfig(env = process.env, paths = {
-	cwd: process.cwd(),
-	home: homedir()
-}) {
-	const address = resolveDaemonAddress(env, paths.home);
-	const session = env["SPUR_SESSION"] || void 0;
-	const token = session ? void 0 : env["BOARD_TOKEN"] === void 0 ? findTokenFile(paths.cwd, paths.home) : env["BOARD_TOKEN"];
-	if (!session && !token) throw new CliError("config", { environmentVariable: "BOARD_TOKEN" });
-	return {
-		address,
-		session,
-		token,
-		connectTimeoutMs: CONNECT_TIMEOUT_MS,
-		responseTimeoutMs: RESPONSE_TIMEOUT_MS
-	};
-}
-/** Enrollment sends only a hash and works before any operator credential exists. */
-function loadEnrollmentConfig(env = process.env) {
-	return {
-		address: resolveDaemonAddress(env),
-		session: void 0,
-		token: void 0,
-		connectTimeoutMs: CONNECT_TIMEOUT_MS,
-		responseTimeoutMs: RESPONSE_TIMEOUT_MS
-	};
-}
-//#endregion
-export { resolveDaemonAddress as i, loadClientConfig as n, loadEnrollmentConfig as r, configFile as t };