0 Fork 0

mirror of https://github.com/Dvorinka/Primora.git synced 2026-10-28 15:51:23 +00:00

Files

T

Tomas DvorakandDevin 89f3d84234 fix: full-stack E2E hardening — client blobs, modal errors, audit coverage, MCP context

- api-client: getResponseBody returns Blob for non-JSON (fixes storage
  preview/download TypeError); postgen.mjs reapplies the patch on regen
- Modal: error prop renders inside the dialog so request failures are
  visible instead of hidden behind the overlay (6 pages wired)
- lib/api: extract server-provided error message from error.body
- Modal: unique id per instance (duplicate modal-title broke aria-label)
- nginx: index.html no-cache + immutable /assets (stale shell pointed at
  deleted hashed assets after redeploy → white screen)
- vite: drop dead Google Fonts runtime caching (fonts are vendored)
- functions: audit function.created/updated/deleted/invoked
- AuditPage: expand action filter to all recorded actions
- MCP: whoami uses /context for API keys; projectId/orgId resolve via
  /context with auth-aware precedence (stale `primora use` selection can
  never authorize a differently-scoped key)

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

2026-09-24 22:51:10 +02:00

src

fix: full-stack E2E hardening — client blobs, modal errors, audit coverage, MCP context

2026-09-24 22:51:10 +02:00

package.json

feat: phase 5 distribution — tauri shell, pwa, desktop release artifacts

2026-09-16 19:59:53 +02:00

README.md

fix: vendor dashboard fonts + vault_exec docs cleanup

2026-09-24 22:01:47 +02:00

tsconfig.json

feat: ship phase 1 surface area (v0.2.0)

2026-09-16 14:04:43 +02:00

README.md

@primora/mcp

Primora MCP stdio server - exposes the platform as primora_* tools to any MCP client (Claude Desktop, Cursor, etc.).

Build

npm run build --workspace @primora/mcp   # → dist/server.js

Configure

Point your MCP client at node dist/server.js. The server shares the CLI's config file - primora login once and both tools work. Env vars override: PRIMORA_BASE_URL, PRIMORA_API_KEY, PRIMORA_ORG, PRIMORA_PROJECT.

Tools

30+ primora_* tools covering organizations, projects, buckets, objects, collections, API keys, integrations, webhooks, scheduled jobs, telemetry, and audit: primora_whoami, primora_list_projects, primora_upload_object, primora_query_audit, primora_run_job, …

Secrets are agent-safe by design — values are never returned by any tool:

primora_vault_status / primora_vault_list — local-vault state and metadata (names/urls/notes only); requires primora vault unlock on the host.
primora_vault_exec — runs primora commands with a vault secret injected into the child's env. A strict allow-list (read-mostly commands like whoami, context, orgs:list, buckets:list, jobs:list, audit:list, events:send) — nothing that reads, writes, or moves a credential can run; file/path flags are rejected and the injected env name must be a safe identifier (loader hooks like NODE_OPTIONS are blocked).
primora_secrets_list / primora_secrets_set — project-vault metadata and write-only storage. No reveal or delete: agents consume secrets through secret://NAME references in job payloads, resolved server-side at delivery.