@aioproductoscom/mcp 0.15.9 → 0.16.0

package/README.md

@@ -41,39 +41,68 @@ at a self-hosted platform.
 ### Prefer no local install? Use the hosted remote
 
 AIOProductOS is also a **hosted remote MCP** (OAuth 2.1 sign-in, no token
-pasting, 38 tools) — add the custom connector URL
+pasting, the same 71 tools) — add the custom connector URL
 `https://platform.aioproductos.com/api/mcp` in Claude.ai, Claude Code, or any
 remote-capable MCP host. Listed on the
 [official MCP Registry](https://registry.modelcontextprotocol.io) as
 `com.aioproductos/mcp` and [verified on Glama](https://glama.ai/mcp/connectors/com.aioproductos/mcp).
 
-## Tools
-
-| Tool | What it does |
-|---|---|
-| `whoami` | the connected org + member |
-| `pm_meta` | lists / statuses / members / features (resolve names → ids) |
-| `list_tasks` | list tasks (filter by `status_id`, `list_id`) |
-| `get_task` | one task + comments + assignees |
-| `create_task` | new task; `feature_id` / `insight_id` link it to the spine |
-| `update_task` | change status, priority, fields, assignees |
-| `comment_on_task` | add a comment |
-| `get_product_brain` | a grounded read-only snapshot of your product (revenue, accounts, web + product analytics, features, signals, open work) |
-| `analyze_funnel` | build an ordered conversion funnel from your events (users per step, conversion, drop-off); omit steps to list available events |
-| `get_retention` | weekly cohort retention — who comes back, week over week |
-| `analyze_paths` | user paths (Sankey) — what people do after a start event, with drop-off |
-| `list_conversations` | the support-chat inbox (open threads, visitor, topic, status) |
-| `get_conversation` | one support thread + its full message history |
-| `reply_to_conversation` | reply to a visitor (**visible in their chat widget**, sent as you) |
-| `add_note` | internal triage note on a conversation (never shown to the visitor) |
-| `resolve_conversation` | mark a conversation resolved |
-| `list_bookings` | scheduled calls/meetings (upcoming by default) |
-| `cancel_booking` | cancel a booking (frees the slot, cancels the meeting) |
-| `reschedule_booking` | move a booking to a new open slot |
-| `list_channels` | the team Comms channels you belong to |
-| `read_channel` | recent messages in a channel (catch up before replying) |
-| `post_to_channel` | post into a team channel — visible live to teammates, as you |
-| `reply_in_channel` | reply in a thread under a message |
+## Tools — 71
+
+It reads **and** writes across the whole strategy-to-delivery ladder, so an
+assistant can run product work end to end instead of reporting on it. Identical
+tool set to the hosted remote connector.
+
+**Orientation** — `whoami` (org + member), `get_pm_playbook` (how to operate),
+`pm_meta` (lists / statuses / members / features — resolve names → ids)
+
+**Grounding** — `get_product_brain` (revenue, accounts, analytics, features,
+signals, open work in one read), `get_weekly_signal_memo`, `get_customer_360`
+(money + people + voice for one account), `get_codebase_map`
+
+**Discovery — ideas** — `list_ideas`, `create_idea`, `update_idea`, `vote_idea`,
+`promote_idea` (idea → feature)
+
+**Strategy — initiatives & OKRs** — `list_initiatives`, `create_initiative`,
+`update_initiative`, `list_objectives`, `create_objective`, `update_objective`,
+`update_key_result`
+
+**Roadmap** — `list_features`, `create_feature`, `update_feature`,
+`list_releases`, `create_release`, `update_release`, `get_roadmap_drift`
+(planned vs shipped, scored)
+
+**Delivery — board & sprints** — `list_tasks`, `get_task`, `create_task`,
+`update_task`, `delete_task`, `comment_on_task`, `list_sprints`, `create_sprint`,
+`update_sprint`
+
+**Docs & decisions** — `list_pages`, `get_page`, `create_page`, `update_page`,
+`list_decisions`, `create_decision`, `update_decision`
+
+**Experiments** — `list_experiments`, `create_experiment`, `update_experiment`
+
+**Voice of customer** — `list_insights`, `capture_insight`
+
+**Analytics** — `analyze_nps`, `analyze_nrr` (both revenue-weighted),
+`analyze_funnel`, `get_retention`, `analyze_paths`
+
+**Support inbox** — `list_conversations`, `get_conversation`,
+`reply_to_conversation` (**visible in the visitor's chat widget**), `add_note`
+(internal only), `resolve_conversation`
+
+**Scheduling** — `list_bookings`, `cancel_booking`, `reschedule_booking`
+
+**Team comms** — `list_channels`, `read_channel`, `post_to_channel`,
+`reply_in_channel`
+
+**Identity graph** — `get_device_candidates`, `merge_end_users`,
+`unmerge_end_users` (reversible 30 days), `list_identity_merges`
+
+**AI artifacts** — `review_artifact` (critic vs your PM bar),
+`list_artifact_versions`, `revert_to_version`
+
+Every tool declares read-only / write / destructive hints, so a host can gate
+them. `delete_task` is the only destructive one. Writes are scoped to your org
+and respect your role's permissions — the token can never reach another tenant.
 
 > For an assignable **coding teammate** (Backend / Frontend / Mobile / QA that
 > opens PRs in your repo), install the separate

package/dist/client.d.ts

@@ -0,0 +1,16 @@
+import type { RestCall } from "./registry.js";
+export interface RestResult {
+    ok: boolean;
+    status: number;
+    /** Raw response body. Passed through verbatim — same contract as the hosted
+     *  dispatcher, and it sidesteps the old failure mode where a non-JSON error
+     *  page (a 502 from the edge) crashed JSON.parse with "Unexpected token '<'"
+     *  instead of reporting what actually happened. */
+    text: string;
+}
+export declare class PlatformClient {
+    private readonly baseUrl;
+    private readonly token;
+    constructor(baseUrl: string, token: string);
+    request(call: RestCall): Promise<RestResult>;
+}

package/dist/client.js

@@ -1,5 +1,14 @@
-// Thin typed HTTP client over the platform's token-authed PM endpoints.
-// Uses global fetch (Node 18+). The PAT is the only credential; nothing is stored.
+// One hardened HTTP executor over the platform's token-authed REST endpoints.
+// The registry's RestCall describes WHAT to call; this describes HOW — the PAT
+// header, a timeout, and honest failure text. The PAT is the only credential;
+// nothing is stored.
+//
+// This file used to be 70 near-identical methods (one per tool). The shared
+// registry made them redundant: every tool already declares its own
+// method/path/body, so the client collapses to a single request function.
+/** A hung platform request must fail the TOOL CALL, not hang the agent's turn
+ *  forever — 30s is far beyond any healthy endpoint here. */
+const TIMEOUT_MS = 30_000;
 export class PlatformClient {
     baseUrl;
     token;
@@ -7,202 +16,25 @@ export class PlatformClient {
         this.baseUrl = baseUrl;
         this.token = token;
     }
-    async req(path, init) {
-        const res = await fetch(`${this.baseUrl}${path}`, {
-            ...init,
-            headers: {
-                "Content-Type": "application/json",
-                Authorization: `Bearer ${this.token}`,
-                ...(init?.headers ?? {}),
-            },
-        });
-        const body = await res.text();
-        const json = body ? JSON.parse(body) : {};
-        if (!res.ok) {
-            const o = (json ?? {});
-            const msg = o.error ? `${o.error}${o.detail ? `: ${o.detail}` : ""}` : `HTTP ${res.status}`;
-            const e = new Error(msg);
-            e.status = res.status;
-            throw e;
+    async request(call) {
+        try {
+            const res = await fetch(`${this.baseUrl}${call.path}`, {
+                method: call.method,
+                headers: {
+                    "Content-Type": "application/json",
+                    Authorization: `Bearer ${this.token}`,
+                },
+                body: call.body !== undefined ? JSON.stringify(call.body) : undefined,
+                signal: AbortSignal.timeout(TIMEOUT_MS),
+            });
+            return { ok: res.ok, status: res.status, text: await res.text() };
+        }
+        catch (e) {
+            // Transport-level failure (offline, DNS, timeout) — return it as an
+            // honest error result rather than throwing, so the tool result tells the
+            // model what happened instead of surfacing a stack trace.
+            const why = e instanceof Error && e.name === "TimeoutError" ? `platform did not respond within ${TIMEOUT_MS / 1000}s` : String(e);
+            return { ok: false, status: 0, text: `Platform unreachable: ${why}` };
         }
-        return json;
-    }
-    whoami() {
-        return this.req("/api/me");
-    }
-    meta() {
-        return this.req("/api/pm/meta");
-    }
-    listTasks(q) {
-        const params = new URLSearchParams();
-        if (q.status_id)
-            params.set("status_id", q.status_id);
-        if (q.list_id)
-            params.set("list_id", q.list_id);
-        const qs = params.toString();
-        return this.req(`/api/pm/tasks${qs ? `?${qs}` : ""}`);
-    }
-    getTask(id) {
-        return this.req(`/api/pm/tasks/${encodeURIComponent(id)}`);
-    }
-    createTask(body) {
-        return this.req("/api/pm/tasks", { method: "POST", body: JSON.stringify(body) });
-    }
-    createFeature(body) {
-        return this.req("/api/me/features", { method: "POST", body: JSON.stringify(body) });
-    }
-    createObjective(body) {
-        return this.req("/api/me/objectives", { method: "POST", body: JSON.stringify(body) });
-    }
-    createSprint(body) {
-        return this.req("/api/me/sprints", { method: "POST", body: JSON.stringify(body) });
-    }
-    createPage(body) {
-        return this.req("/api/me/pages", { method: "POST", body: JSON.stringify(body) });
-    }
-    updateFeature(body) {
-        return this.req("/api/me/features", { method: "PATCH", body: JSON.stringify(body) });
-    }
-    updateObjective(body) {
-        return this.req("/api/me/objectives", { method: "PATCH", body: JSON.stringify(body) });
-    }
-    updateKeyResult(body) {
-        return this.req("/api/me/key-results", { method: "PATCH", body: JSON.stringify(body) });
-    }
-    updateSprint(body) {
-        return this.req("/api/me/sprints", { method: "PATCH", body: JSON.stringify(body) });
-    }
-    updatePage(body) {
-        return this.req("/api/me/pages", { method: "PATCH", body: JSON.stringify(body) });
-    }
-    createRelease(body) {
-        return this.req("/api/me/releases", { method: "POST", body: JSON.stringify(body) });
-    }
-    updateRelease(body) {
-        return this.req("/api/me/releases", { method: "PATCH", body: JSON.stringify(body) });
-    }
-    createExperiment(body) {
-        return this.req("/api/me/experiments", { method: "POST", body: JSON.stringify(body) });
-    }
-    updateExperiment(body) {
-        return this.req("/api/me/experiments", { method: "PATCH", body: JSON.stringify(body) });
-    }
-    listDecisions(status) {
-        return this.req(`/api/me/decisions${status ? `?status=${encodeURIComponent(status)}` : ""}`);
-    }
-    createDecision(body) {
-        return this.req("/api/me/decisions", { method: "POST", body: JSON.stringify(body) });
-    }
-    updateDecision(body) {
-        return this.req("/api/me/decisions", { method: "PATCH", body: JSON.stringify(body) });
-    }
-    updateTask(id, body) {
-        return this.req(`/api/pm/tasks/${encodeURIComponent(id)}`, { method: "PATCH", body: JSON.stringify(body) });
-    }
-    deleteTask(id) {
-        return this.req(`/api/pm/tasks/${encodeURIComponent(id)}`, { method: "DELETE" });
-    }
-    comment(id, body) {
-        return this.req(`/api/pm/tasks/${encodeURIComponent(id)}/comments`, {
-            method: "POST",
-            body: JSON.stringify({ body }),
-        });
-    }
-    brain(productId) {
-        const qs = productId ? `?product_id=${encodeURIComponent(productId)}` : "";
-        return this.req(`/api/me/brain${qs}`);
-    }
-    captureInsight(body) {
-        return this.req("/api/me/insight", { method: "POST", body: JSON.stringify(body) });
-    }
-    customer360(query) {
-        return this.req(`/api/me/customer?q=${encodeURIComponent(query)}`);
-    }
-    nps(opts) {
-        const p = new URLSearchParams();
-        if (opts.productId)
-            p.set("product_id", opts.productId);
-        if (opts.windowDays)
-            p.set("window_days", String(opts.windowDays));
-        const qs = p.toString();
-        return this.req(`/api/me/nps${qs ? `?${qs}` : ""}`);
-    }
-    nrr(windowDays) {
-        const qs = windowDays ? `?window_days=${windowDays}` : "";
-        return this.req(`/api/me/nrr${qs}`);
-    }
-    funnel(opts) {
-        const p = new URLSearchParams();
-        if (opts.productId)
-            p.set("product_id", opts.productId);
-        if (opts.window)
-            p.set("window", String(opts.window));
-        for (const s of opts.steps ?? [])
-            p.append("step", s);
-        const qs = p.toString();
-        return this.req(`/api/me/funnel${qs ? `?${qs}` : ""}`);
-    }
-    retention(opts) {
-        const p = new URLSearchParams();
-        if (opts.productId)
-            p.set("product_id", opts.productId);
-        if (opts.window)
-            p.set("window", String(opts.window));
-        const qs = p.toString();
-        return this.req(`/api/me/retention${qs ? `?${qs}` : ""}`);
-    }
-    paths(opts) {
-        const p = new URLSearchParams();
-        if (opts.productId)
-            p.set("product_id", opts.productId);
-        if (opts.window)
-            p.set("window", String(opts.window));
-        if (opts.start)
-            p.set("start", opts.start);
-        const qs = p.toString();
-        return this.req(`/api/me/paths${qs ? `?${qs}` : ""}`);
-    }
-    listConversations(opts) {
-        const p = new URLSearchParams();
-        if (opts.productId)
-            p.set("product_id", opts.productId);
-        if (opts.status)
-            p.set("status", opts.status);
-        const qs = p.toString();
-        return this.req(`/api/me/inbox${qs ? `?${qs}` : ""}`);
-    }
-    getConversation(id) {
-        return this.req(`/api/me/inbox?conversation_id=${encodeURIComponent(id)}`);
-    }
-    inboxAction(body) {
-        return this.req("/api/me/inbox", { method: "POST", body: JSON.stringify(body) });
-    }
-    listBookings(opts) {
-        const qs = opts.include === "all" ? "?include=all" : "";
-        return this.req(`/api/me/scheduling${qs}`);
-    }
-    schedulingAction(body) {
-        return this.req("/api/me/scheduling", { method: "POST", body: JSON.stringify(body) });
-    }
-    listChannels() {
-        return this.req("/api/me/comms");
-    }
-    readChannel(channelId, limit) {
-        const p = new URLSearchParams({ channel_id: channelId });
-        if (limit)
-            p.set("limit", String(limit));
-        return this.req(`/api/me/comms?${p.toString()}`);
-    }
-    postToChannel(channelId, body) {
-        return this.req("/api/me/comms", {
-            method: "POST",
-            body: JSON.stringify({ action: "post", channel_id: channelId, body }),
-        });
-    }
-    replyInChannel(channelId, parentId, body) {
-        return this.req("/api/me/comms", {
-            method: "POST",
-            body: JSON.stringify({ action: "reply", channel_id: channelId, parent_id: parentId, body }),
-        });
     }
 }

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};