asepharyana
0cdf261d40
CI / typecheck + build (turbo) (push) Canceled after 0s
Zero-dependency HTML page (served by the API, exposed on the domain): - live /metrics pull (queue gauges + uptime, 5s refresh, live-dot status) - search box calling MCP hybrid_search directly from the browser (CORS-open /mcp), ranked hits linking to the web doc route /docs/<slug> - XSS-hardened: all KB fields esc()'d before innerHTML Verified live: /dashboard 200, /metrics 200, MCP hybrid_search returns real hits, doc links 200, typecheck green.
209 lines
13 KiB
Markdown
209 lines
13 KiB
Markdown
# MCPedia — Phase Status
|
|
|
|
Legend: ✅ built · 🟡 partial · ⬜ deferred
|
|
|
|
## Phase 1 — MVP (✅ DONE)
|
|
|
|
| Capability | Status | Notes |
|
|
| --------------------- | ------ | ----- |
|
|
| Monorepo (bun + Turbo)| ✅ | apps/{web,mcp}, packages/{types,config,db,parser,search,core}, scripts |
|
|
| Content as Markdown | ✅ | `content/{docs,writeups,research,notes}/`, Git-tracked |
|
|
| Frontmatter parsing | ✅ | `@mcpedia/parser` (gray-matter) |
|
|
| Postgres metadata | ✅ | `@mcpedia/db` Drizzle, `documents` table |
|
|
| Postgres FTS | ✅ | weighted `tsvector` (title A / body B), GIN index, `ts_rank`+`ts_headline` |
|
|
| Core services | ✅ | Document / Content / Search — single business-logic layer |
|
|
| Indexer | ✅ | `scripts/indexer.ts` walks content/ → upserts |
|
|
| Web UI (Next 16) | ✅ | home (list), doc view (SSG), search (dynamic). react-markdown render |
|
|
| MCP server (stdio) | ✅ | 4 tools; in-memory smoke test passing |
|
|
| Hybrid/semantic search| ⬜ | Phase 2 |
|
|
|
|
## Phase 2 — Semantic + API
|
|
|
|
- [x] `packages/embeddings` — `EmbeddingProvider` interface + OpenRouter provider (via 9router `/v1`, `encoding_format:"float"`); `chunkText` + `embedChunks` batcher. `EMBED_DIM=2048` discovered live.
|
|
- [x] Schema `document_chunks` (id, document_id→documents.id cascade, slug, chunk_index, content, `embedding real[]`). Stored as `real[]` because pgvector **is not installed** on the shared imrnes Postgres (installing needs host-level apt — deferred). Cosine computed in-app; instant for a KB-sized corpus.
|
|
- [x] `scripts/indexer.ts` — chunks + embeds + upserts (per-doc replace).
|
|
- [x] `@mcpedia/search` — `semanticSearch` (cosine) + `hybridSearch` (FTS + cosine, RRF fusion). `keywordSearch` unchanged.
|
|
- [x] `apps/api` — Hono + tRPC v11 (`@trpc/server` fetch adapter, `@hono/node-server` on :4020): `search`, `semanticSearch`, `hybridSearch`, `getDocument`, `listDocuments`, `related`.
|
|
- [x] MCP server — added `semantic_search` + `hybrid_search` tools (6 total).
|
|
- [x] Web search — keyword/hybrid toggle (`?mode=hybrid`), hybrid reaches semantically-related docs keyword misses.
|
|
|
|
## Phase 3 — Async + Scale ✅ DONE
|
|
|
|
- [x] **Redis + BullMQ background indexing / embedding workers** —
|
|
`packages/queue` (ioredis singleton + BullMQ `Queue`/`Worker`, prefix
|
|
`mcpedia:` on shared imrnes Redis `:6379`); `apps/worker` runs
|
|
`startWorker()`. Three job types: `index-doc`, `index-all`, `reindex`.
|
|
Single indexing entry point `indexContentFile`/`runFullIndex` in
|
|
`@mcpedia/core` shared by the script, worker, and git hook. Verified
|
|
end-to-end against live Redis (job enqueue → worker → Postgres write).
|
|
- [x] **Git synchronization hook (auto-reindex on push)** — API webhook
|
|
`POST /hooks/reindex` (full) and `POST /hooks/index?slug=` (single) enqueue
|
|
BullMQ jobs. Wire a Git provider (GitHub/Gitea) post-receive / webhook to
|
|
`POST /hooks/reindex` to auto-reindex on push. `scripts/enqueue.ts` is a
|
|
one-shot enqueue helper (`bun run enqueue --all` / `<slug>`).
|
|
- [x] **Document revision system (`document_revisions`)** — `packages/db`
|
|
migration `0002_document_revisions.sql`. Indexer snapshots a revision only
|
|
when the body actually changes vs the latest revision (pure metadata edits
|
|
don't bloat history). `listRevisions` / `getRevision` / `restoreRevision`
|
|
in `@mcpedia/core`; exposed as tRPC `revisions` / `getRevision` /
|
|
`restoreRevision` and the `mcpedia://docs/{+slug}/revisions` MCP Resource.
|
|
- [x] **MCP Resources (`mcpedia://docs/...`)** — alongside the 6 tools:
|
|
`mcpedia://docs` (list), `mcpedia://docs/{+slug}` (body from disk),
|
|
`mcpedia://docs/{+slug}/chunks` (chunk preview),
|
|
`mcpedia://docs/{+slug}/revisions` (history). `{+slug}` uses RFC 6570
|
|
reserved expansion so slugs containing `/` match.
|
|
|
|
### New/changed commands
|
|
```
|
|
bun run index # full reindex (runFullIndex, writes revisions)
|
|
bun run enqueue --all # enqueue a full reindex job (no worker needed)
|
|
bun run enqueue <slug> # enqueue a single-doc reindex job
|
|
bun run worker # start the BullMQ indexing worker (long-running)
|
|
bun run api # Hono+tRPC API on :4020 (added /hooks/* webhooks)
|
|
```
|
|
|
|
### Verification done (real, against imrnes Redis + Postgres)
|
|
- `turbo run typecheck` green across all 13 packages.
|
|
- BullMQ e2e: enqueue `index-doc` → worker completes → `documents` +
|
|
`document_chunks` + `document_revisions` rows present.
|
|
- Revision dedup proven: editing a body creates a new revision; metadata-only
|
|
reindex does not; `restoreRevision` writes history back into the live row.
|
|
- MCP smoke test passes (tools + all 4 resources).
|
|
- API webhook `POST /hooks/reindex` enqueues → worker drains queue →
|
|
`queueStatus` reflects counts.
|
|
|
|
## Phase 4 — Operability & Correctness Hardening ✅ DONE
|
|
|
|
> Reinterpreted from the original "Scale-out" plan: OpenSearch/object-storage/
|
|
> multi-tenant were flagged YAGNI at KB scale (4 docs), so Phase 4 = make the
|
|
> Phase 3 async + revision machinery **correct, secure, observable, deployable**.
|
|
|
|
- [x] **T1 — `restoreRevision` rebuilds semantic chunks (CORRECTNESS BUG)** —
|
|
previously restore wrote the old body into `documents` but left `document_chunks`
|
|
on the *new* body, so semantic/hybrid search went stale after a restore.
|
|
`@mcpedia/core` `reindexChunks(slug)` now re-chunks + re-embeds from the live
|
|
body; `restoreRevision` calls it after the update (embed failure is logged, not
|
|
thrown). Verified: restore → `document_chunks` count matches re-chunk of the
|
|
restored body.
|
|
- [x] **T2 — Secure git-sync webhook (SECURITY)** — `/hooks/*` now require an
|
|
`x-webhook-secret` header matching `WEBHOOK_SECRET` (401 otherwise). API
|
|
fails fast at startup if `WEBHOOK_SECRET` is unset (no open endpoint). Added
|
|
`WEBHOOK_SECRET` to `@mcpedia/config` + `.env.example`; generated a real secret
|
|
in the local `.env` (gitignored).
|
|
- [x] **T3 — Web UI revisions view (UX)** — doc page now shows a "History" panel
|
|
(revision no, reason, date, body length) with a per-revision Restore button.
|
|
Restore POSTs to `apps/web/app/api/revisions/restore/route.ts` → `restoreRevision`
|
|
→ `revalidatePath` (server-component only, no client JS).
|
|
- [x] **T4 — Paginate `listRevisions`** — added `offset` param (summary never
|
|
includes body). API `revisions` + MCP resource use the summary.
|
|
- [x] **T5 — Deploy as supervised services (OPS)** — `deploy/mcpedia-api.service`
|
|
+ `deploy/mcpedia-worker.service` systemd units (`Restart=on-failure`,
|
|
`EnvironmentFile=.env`, `WorkingDirectory=/home/code/mcpedia`). Enable with:
|
|
`cp deploy/*.service /etc/systemd/system && systemctl daemon-reload &&
|
|
systemctl enable --now mcpedia-api mcpedia-worker`. (Not auto-enabled on host
|
|
without explicit user go-ahead.)
|
|
|
|
### Verification done (real, against imrnes Redis + Postgres)
|
|
- `turbo run typecheck` + `turbo run build` green (incl. `next build` with the
|
|
History panel).
|
|
- T1: edit → reindex (new revision + chunks) → restore rev #1 → `document_chunks`
|
|
count for that slug matches re-chunk of rev #1; `semanticSearch` on a term
|
|
unique to rev #1 returns it.
|
|
- T2: `curl -XPOST /hooks/reindex` → 401; with `-H "x-webhook-secret: $WEBHOOK_SECRET"`
|
|
→ 200 + jobId; job drains via worker.
|
|
- T3: History panel renders; restore route rebuilds chunks (T1 path).
|
|
- T4: `revisions` returns summaries (no body); `offset` paging works.
|
|
- T5: `systemd-analyze verify deploy/*.service` passes (off-host safe check).
|
|
|
|
## Phase 5 — Deferred scale-out (only when needed)
|
|
|
|
- [ ] Dedicated search engine (OpenSearch/Elasticsearch) — YAGNI until FTS is insufficient
|
|
- [ ] pgvector migration (install on imrnes Postgres) — when `real[]` cosine stalls
|
|
- [ ] Object storage for assets
|
|
- [ ] Advanced ranking, distributed workers, observability, multi-tenant
|
|
|
|
## Phase 6 — Network deployment + review hardening ✅ DONE
|
|
|
|
> Closed the real gaps found during review: the MCP server was stdio-only (unreachable
|
|
> over the network) and the tRPC API was not routed on the domain (swallowed by web →
|
|
> `/trpc/*` returned Next.js 404). Also found + fixed a security hole.
|
|
|
|
- [x] **MCP over Streamable HTTP** — `apps/mcp/src/http.ts` serves the 6 tools + 4
|
|
resources via MCP 2025-03-26 Streamable HTTP on `:4021`, stateless mode
|
|
(`sessionIdGenerator: undefined`, one server+transport per request, CORS on `/mcp`).
|
|
Deployed as `mcpedia-mcp.service`; reachable at `https://mcp.asepharyana.my.id/mcp`.
|
|
Stdio entry (`bun run mcp`) retained for local subprocess use.
|
|
- [x] **tRPC API routed on the domain** — Caddy `wiki.asepharyana.my.id` now forwards
|
|
`/trpc/*` (+ `/hooks/*`, `/health`) to the API on `:4020`; web stays on `:4016`.
|
|
Read-only procedures (search, list, revisions, job status) are public; the
|
|
`restoreRevision` mutation is gated by `x-webhook-secret` (see security fix below).
|
|
- [x] **Security: lock down `restoreRevision`** — the state-changing tRPC mutation was
|
|
anonymously callable over the network. Now requires `x-webhook-secret` (consistent
|
|
with `/hooks` auth). The Web UI calls `@mcpedia/core` directly in a server component,
|
|
so the gate does not affect the UI's restore button. Verified: no-secret → 401-class
|
|
rejection, with-secret → reaches handler.
|
|
- [x] **All four services live + supervised** — `mcpedia-web` (:4016), `mcpedia-api`
|
|
(:4020), `mcpedia-worker` (BullMQ), `mcpedia-mcp` (:4021) all `active`, reboot-safe.
|
|
GitHub push webhook → `https://wiki.asepharyana.my.id/hooks/reindex` (verified 200,
|
|
worker drains, 0 failed).
|
|
|
|
### Verification done (real, against live services)
|
|
- `https://mcp.asepharyana.my.id/mcp` initialize → 200 + serverInfo; tools/list → 6;
|
|
resources/list → 4 (Streamable HTTP SSE framing).
|
|
- `https://wiki.asepharyana.my.id/` → 200; `/health` → 200; `/trpc/listDocuments` → 200.
|
|
- GitHub push webhook delivers 200; `queueStatus` shows completed:N, failed:0.
|
|
- `turbo run typecheck` green across all 4 apps.
|
|
|
|
## Phase 7 — Corpus, MCP write-tools + auth, observability ✅ DONE
|
|
|
|
> Closed the remaining review gaps: tiny corpus (4 docs), MCP read-only (no write/auth),
|
|
> no observability.
|
|
|
|
- [x] **Content corpus grown** — added 5 real docs (Caddy reverse proxy, BullMQ workers,
|
|
MCP Streamable HTTP, Postgres FTS, Cloudflare-525 debugging writeup) across
|
|
docs/writeups/notes. `bun run index` reindexed: **9 documents, 17 chunks, 5 new
|
|
revisions** (was 4 docs). Search/semantic/revisions now operate on a real corpus.
|
|
- [x] **MCP write-tools + auth** — added `index_document`, `reindex_all`,
|
|
`restore_revision` (write, require `x-webhook-secret`) and `queue_status` (public).
|
|
`createMcpServer(authSecret?)` threads the request header; stdio keeps write tools
|
|
open (trusted local). Verified: unauthenticated `index_document` → `isError` +
|
|
"unauthorized"; authenticated → enqueues job, worker drains.
|
|
- [x] **Observability** — `GET /metrics` on the API (Prometheus text exposition:
|
|
`mcpedia_uptime_seconds`, `mcpedia_queue_jobs{state=...}`). Exposed on the domain at
|
|
`https://wiki.asepharyana.my.id/metrics`. Public, safe to scrape.
|
|
|
|
### Verification done (real, against live services)
|
|
- `https://wiki.asepharyana.my.id/metrics` → 200 Prometheus text (uptime + queue gauges).
|
|
- `tools/list` over MCP → 10 tools (6 read + 4 new). `index_document` auth gate works.
|
|
- Worker drained the MCP-enqueued job (completed count incremented, failed:0).
|
|
- `turbo run typecheck` green across all 4 apps.
|
|
|
|
## Phase 8 — Dashboard (observability UI) ✅ DONE
|
|
|
|
> The metrics endpoint existed (Phase 7) but had no consumer. Added a zero-dependency
|
|
> dashboard so the KB is actually observable + searchable from a browser.
|
|
|
|
- [x] **`GET /dashboard`** on the API — self-contained HTML (no build, no deps) that:
|
|
- pulls `/metrics` (same origin) and renders queue gauges (waiting/active/completed/
|
|
failed/delayed) + uptime, refreshing every 5s with a live-dot status indicator;
|
|
- runs a live **search box** that calls the MCP `hybrid_search` tool directly from the
|
|
browser (MCP `/mcp` is CORS-open), returning ranked hits that link to the web doc
|
|
page (`/docs/...`).
|
|
- [x] XSS hardening: all KB-sourced fields (`slug`/`title`/`section`/error message)
|
|
are `esc()`-escaped before `innerHTML` (defense-in-depth; data is server-trusted).
|
|
- [x] Caddy: `wiki.asepharyana.my.id/dashboard` → :4020.
|
|
|
|
### Verification done (real)
|
|
- `https://wiki.asepharyana.my.id/dashboard` → 200, serves the page (title + JS present).
|
|
- `/metrics` → 200, 7 gauge lines including `mcpedia_queue_jobs{state=...}`.
|
|
- MCP `hybrid_search` from browser path returns real ranked hits (verified the exact
|
|
`tools/call` payload the dashboard issues; shape `{doc:{slug,title,section},rank}`).
|
|
- Dashboard link points to working web doc route `/docs/<slug>` (verified 200).
|
|
- `turbo run typecheck` green.
|
|
|
|
## Decisions locked (from initial planning)
|
|
|
|
- **Tooling:** bun workspaces + Turborepo (repo already used bun; pnpm rejected to minimize churn).
|
|
- **DB:** imrnes Postgres `100.121.180.82:6432/mcpedia` for both dev and deploy; driver `prepare:false` (PgBouncer). Docker Compose reserved for future prod.
|
|
- **Phase 1 scope:** Core + Web + MCP only. tRPC/Hono API, pgvector, auth, BullMQ deferred (YAGNI).
|