meshcode 2.6.9__tar.gz → 2.7.0__tar.gz

{meshcode-2.6.9 → meshcode-2.7.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: meshcode
-Version: 2.6.9
+Version: 2.7.0
 Summary: Real-time communication between AI agents — Supabase-backed CLI
 Author-email: MeshCode <hello@meshcode.io>
 License: MIT

{meshcode-2.6.9 → meshcode-2.7.0}/meshcode/__init__.py

@@ -1,2 +1,2 @@
 """MeshCode — Real-time communication between AI agents."""
-__version__ = "2.6.9"
+__version__ = "2.7.0"

{meshcode-2.6.9 → meshcode-2.7.0}/meshcode/meshcode_mcp/backend.py

@@ -36,6 +36,14 @@ def _load_env_file() -> Dict[str, str]:
 _env_file = _load_env_file()
 SUPABASE_URL = os.environ.get("SUPABASE_URL") or _env_file.get("SUPABASE_URL") or _DEFAULT_SUPABASE_URL
 SUPABASE_KEY = os.environ.get("SUPABASE_KEY") or _env_file.get("SUPABASE_KEY") or _DEFAULT_SUPABASE_KEY
+SUPABASE_SERVICE_ROLE_KEY = (
+    os.environ.get("SUPABASE_SERVICE_ROLE_KEY")
+    or os.environ.get("SUPABASE_SECRET_KEY")
+    or _env_file.get("SUPABASE_SERVICE_ROLE_KEY")
+    or _env_file.get("SUPABASE_SECRET_KEY")
+    or _env_file.get("NEW_SUPABASE_SECRET")
+    or ""
+)
 SCHEMA = "meshcode"
 
 

{meshcode-2.6.9 → meshcode-2.7.0}/meshcode/meshcode_mcp/realtime.py

@@ -44,12 +44,14 @@ class RealtimeListener:
         project_id: str,
         agent_name: str,
         notify_callback: Optional[Callable[[Dict], Awaitable[None]]] = None,
+        service_role_key: Optional[str] = None,
     ):
         self.supabase_url = supabase_url
         self.supabase_key = supabase_key
         self.project_id = project_id
         self.agent_name = agent_name
         self.notify_callback = notify_callback
+        self.service_role_key = service_role_key
 
         # Last 100 unread messages — drained by meshcode_check tool
         self.queue: Deque[Dict] = deque(maxlen=100)
@@ -127,6 +129,21 @@ class RealtimeListener:
             self._connected = True
             log.info(f"Realtime connected for agent={self.agent_name}")
 
+            # Elevate auth context if service_role_key is available.
+            # This lets Supabase Realtime bypass RLS for INSERT event delivery,
+            # so mc_user_has_project_access (which needs auth.uid()) is not required.
+            if self.service_role_key:
+                try:
+                    await ws.send(json.dumps({
+                        "topic": "realtime:*",
+                        "event": "access_token",
+                        "payload": {"access_token": self.service_role_key},
+                        "ref": "auth",
+                    }))
+                    log.info("Realtime auth elevated with service_role_key")
+                except Exception as e:
+                    log.warning(f"Failed to send access_token: {e}")
+
             # Phoenix channel join: phoenix realtime topic
             topic = f"realtime:{self.project_id}-{self.agent_name}"
             join_msg = {

{meshcode-2.6.9 → meshcode-2.7.0}/meshcode/meshcode_mcp/server.py

@@ -1040,6 +1040,7 @@ async def lifespan(_app):
         project_id=_PROJECT_ID,
         agent_name=AGENT_NAME,
         notify_callback=_on_new_message,
+        service_role_key=be.SUPABASE_SERVICE_ROLE_KEY or None,
     )
     await _REALTIME.start()
 

{meshcode-2.6.9 → meshcode-2.7.0}/meshcode.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: meshcode
-Version: 2.6.9
+Version: 2.7.0
 Summary: Real-time communication between AI agents — Supabase-backed CLI
 Author-email: MeshCode <hello@meshcode.io>
 License: MIT

{meshcode-2.6.9 → meshcode-2.7.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "meshcode"
-version = "2.6.9"
+version = "2.7.0"
 description = "Real-time communication between AI agents — Supabase-backed CLI"
 readme = "README.md"
 license = {text = "MIT"}