@aioproductoscom/mcp 0.15.5 → 0.15.7

package/dist/client.js

@@ -99,6 +99,9 @@ export class PlatformClient {
     updateTask(id, body) {
         return this.req(`/api/pm/tasks/${encodeURIComponent(id)}`, { method: "PATCH", body: JSON.stringify(body) });
     }
+    deleteTask(id) {
+        return this.req(`/api/pm/tasks/${encodeURIComponent(id)}`, { method: "DELETE" });
+    }
     comment(id, body) {
         return this.req(`/api/pm/tasks/${encodeURIComponent(id)}/comments`, {
             method: "POST",

package/dist/index.js

@@ -4,6 +4,8 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { z } from "zod";
 import { PlatformClient } from "./client.js";
 import { PM_PLAYBOOK, PM_SKILL_VERSION } from "./pm-skill.js";
+import { checkForUpdate, updateBanner } from "./update-notifier.js";
+const VERSION = "0.15.7";
 const token = process.env.PRODUCTOS_TOKEN;
 const baseUrl = (process.env.PRODUCTOS_URL ?? "https://platform.aioproductos.com").replace(/\/$/, "");
 if (!token) {
@@ -11,19 +13,26 @@ if (!token) {
     process.exit(1);
 }
 const client = new PlatformClient(baseUrl, token);
+// Set once the startup npm check finds a newer release; the banner then rides
+// on the NEXT tool result (the model reads it and tells the user) — exactly once.
+let updateNotice = null;
+let updateNoticeShown = false;
 function text(data) {
-    return {
-        content: [
-            { type: "text", text: typeof data === "string" ? data : JSON.stringify(data, null, 2) },
-        ],
-    };
+    const content = [
+        { type: "text", text: typeof data === "string" ? data : JSON.stringify(data, null, 2) },
+    ];
+    if (updateNotice && !updateNoticeShown) {
+        updateNoticeShown = true;
+        content.push({ type: "text", text: updateNotice });
+    }
+    return { content };
 }
 /** A prompt result — one user-role message the host injects when the slash
  *  command runs. Surfaces as a named slash command in the AI host. */
 function promptMsg(body) {
     return { messages: [{ role: "user", content: { type: "text", text: body } }] };
 }
-const server = new McpServer({ name: "AIOProductOS", version: "0.15.5" }, {
+const server = new McpServer({ name: "AIOProductOS", version: VERSION }, {
     instructions: "You manage product work on AIOProductOS for the connected member — board, insights, features, and " +
         "analytics all hang off one spine. Call get_pm_playbook first for how to operate: ground in " +
         "get_product_brain, keep work tied to the spine (insight→feature→task→outcome), and prioritize on " +
@@ -180,6 +189,7 @@ server.tool("update_task", "Update one or more of a task's fields and return the
     insight_id: z.string().nullable().optional().describe("New insight id; null unlinks (optional)."),
     assignee_member_ids: z.array(z.string()).optional().describe("Member ids to assign, from pm_meta (optional)."),
 }, async ({ id, ...body }) => text(await client.updateTask(id, body)));
+server.tool("delete_task", "PERMANENTLY delete a task and return the deleted id. Irreversible — there is no undo. Cascades: the task's comments, assignees, tags, attachments, time entries, outcomes, events, relations, and its SUBTASKS are deleted with it; experiment/insight/meeting links to it are cleared. Resolve the id via list_tasks and confirm intent first — prefer update_task (move it to a done/archived status) when you only want it off the active board.", { id: z.string().describe("Task id to permanently delete, from list_tasks (required).") }, async (a) => text(await client.deleteTask(a.id)));
 server.tool("comment_on_task", "Add a comment to a task, authored as the connected member, and return the created comment. Use to record progress, a decision, or a handoff — the comment is visible to the whole org, so keep it work-relevant. Resolve the task id first with list_tasks or get_task; both id and body are required.", {
     id: z.string().describe("Task id, from list_tasks or get_task."),
     body: z.string().describe("Comment body."),
@@ -272,6 +282,14 @@ server.prompt("daily", "Daily PM briefing — your plate, blockers, and the one
     `Output a tight briefing: top priorities today, blockers needing a decision, and ONE recommended next action. ` +
     `Read-only unless they ask you to act.`));
 async function main() {
+    // Fire-and-forget: if a newer version is on npm, arm the one-time banner that
+    // rides on the next tool result. Never blocks the transport, never throws.
+    void checkForUpdate(VERSION)
+        .then((latest) => {
+        if (latest)
+            updateNotice = updateBanner(latest, VERSION);
+    })
+        .catch(() => { });
     await server.connect(new StdioServerTransport());
 }
 main().catch((err) => {

package/dist/update-notifier.js

@@ -0,0 +1,84 @@
+/**
+ * Update notifier — lets a stdio user (Cursor / Claude / Codex …) know when a
+ * newer @aioproductoscom/mcp is on npm. The MCP host shows tool RESULTS to the
+ * model, so the notice rides along on the first tool call (see index.ts) and the
+ * assistant relays it. Everything here is best-effort and silent: it never
+ * throws, never blocks the transport, and never writes to stdout (which would
+ * corrupt the JSON-RPC stream). Cached ~daily in the temp dir so we don't hit
+ * npm on every launch. Opt out with NO_UPDATE_NOTIFIER / PRODUCTOS_NO_UPDATE_NOTIFIER,
+ * and it's disabled under CI.
+ */
+import { readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+const PKG = "@aioproductoscom/mcp";
+const CACHE = join(tmpdir(), "aioproductos-mcp-update.json");
+const TTL_MS = 24 * 60 * 60 * 1000; // check npm at most once a day
+const FETCH_TIMEOUT_MS = 2500;
+/** true when `latest` is a higher release than `current` (patch/minor/major; pre-release tags ignored). */
+export function isNewer(latest, current) {
+    const parts = (v) => v.split("-")[0].split(".").map((n) => parseInt(n, 10) || 0);
+    const a = parts(latest);
+    const b = parts(current);
+    for (let i = 0; i < 3; i++) {
+        const x = a[i] ?? 0;
+        const y = b[i] ?? 0;
+        if (x > y)
+            return true;
+        if (x < y)
+            return false;
+    }
+    return false;
+}
+async function fetchLatest() {
+    try {
+        const ctrl = new AbortController();
+        const to = setTimeout(() => ctrl.abort(), FETCH_TIMEOUT_MS);
+        const res = await fetch(`https://registry.npmjs.org/${PKG}/latest`, {
+            signal: ctrl.signal,
+            headers: { accept: "application/json" },
+        });
+        clearTimeout(to);
+        if (!res.ok)
+            return null;
+        const body = (await res.json());
+        return typeof body.version === "string" ? body.version : null;
+    }
+    catch {
+        return null; // offline / timeout / registry hiccup — stay quiet
+    }
+}
+/** Latest published version if it's newer than `current`, else null. Never throws. */
+export async function checkForUpdate(current) {
+    if (process.env.NO_UPDATE_NOTIFIER || process.env.PRODUCTOS_NO_UPDATE_NOTIFIER || process.env.CI) {
+        return null;
+    }
+    let latest = null;
+    try {
+        const cached = JSON.parse(readFileSync(CACHE, "utf8"));
+        if (cached && Date.now() - cached.at < TTL_MS && typeof cached.latest === "string") {
+            latest = cached.latest;
+        }
+    }
+    catch {
+        /* no cache yet or unreadable — fall through to a live check */
+    }
+    if (!latest) {
+        latest = await fetchLatest();
+        if (latest) {
+            try {
+                writeFileSync(CACHE, JSON.stringify({ at: Date.now(), latest }));
+            }
+            catch {
+                /* temp dir not writable — fine, we just re-check next launch */
+            }
+        }
+    }
+    return latest && isNewer(latest, current) ? latest : null;
+}
+/** The one-line banner appended to a tool result when an update is available. */
+export function updateBanner(latest, current) {
+    return (`\n\n— ⬆️ A newer AIOProductOS MCP is available: ${latest} (you're on ${current}). ` +
+        `Update by pointing your MCP config at \`@aioproductoscom/mcp@latest\` (or \`@${latest}\`) ` +
+        `and restarting your MCP client. New tools and fixes ship regularly. —`);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aioproductoscom/mcp",
-  "version": "0.15.5",
+  "version": "0.15.7",
   "mcpName": "com.aioproductos/mcp",
   "description": "AIOProductOS MCP — manage the board, read your product brain + analytics, and run the support inbox from Claude Code, Cursor, Codex, and any MCP host.",
   "type": "module",