@bicon/mcp-composer 0.11.0 → 0.12.0

package/README.md

@@ -28,7 +28,7 @@ via API keys is a separate, security-reviewed phase.
 | `export_initiative_file` | Takes the **same compact spec**, assembles it and wraps the result in the app's single-initiative JSON envelope; returns `{ok, filename, json, importInstructions, derivedScores, warnings}`. There is one pipeline — a hand-edited initiative object is not an input, so client-supplied scores or unknown keys can never bypass assembly. |
 | `read_portfolio_context` | Takes the organisation's **portfolio-context file** (see below) and returns the interview plan for that organisation — its own labels, help texts and rating notes per sub-dimension, which sub-dimensions are switched off, its business units, categories, tags, skills (id + name), non-archived initiatives (id + name) and the capability map's capabilities (id, name, domain, importance, current → target maturity; context version 2), currency, discount rate, whether the EU-AI-Act module is on — plus a short **contextId** that stands in for the file in the two other tools. |
 | `composer_version` | Returns `{composerVersion, capabilities}`. Every *successful* tool result also carries `composerVersion`. |
-| `load_portfolio` | Reads the organisation's **full backup** (Import/Export → Backup → Export, a `bicon-backup-….json`, format version 10 or newer) from a local `path` (inline `backup` JSON only for small files), runs it through the app's own sanitiser, strips author fields, and returns a short **portfolioId** plus a summary (counts by status, business unit and driver, skills, capabilities, saved portfolios, snapshots, currency, budget cap, export date). |
+| `load_portfolio` | Reads the organisation's **full backup** (Import/Export → Backup → Export, a `bicon-portfolio-backup-YYYY-MM-DD.json`, format version 10 or newer) from a local `path` (inline `backup` JSON only for small files), runs it through the app's own sanitiser, strips author fields, and returns a short **portfolioId** plus a summary (counts by status, business unit and driver, skills, capabilities, saved portfolios, snapshots, currency, budget cap, export date). |
 | `query_initiatives` | Filters the loaded portfolio (status, business unit, category, driver, tags, saved portfolio, capability, skill, score ranges, overdue milestones / follow-ups, severe risks) and returns chosen columns, sorted, plus aggregates over the whole scope. At most 200 rows per call. |
 | `portfolio_readings` | Computes portfolio readings with the app's own libs: KPIs, concentration bars and HHI, the seven operating-model readings, capability impact, the risk register, early-warning signals and Board Actions. |
 | `rank_initiatives` | Runs the Prioritisation ranking and cut line (the organisation's rule book, budget envelope, exclusions and skill caps), with what-if inputs: cap, budget field, trade-off percent, skill FTE deltas, promoted / excluded ids, queue statuses, regulatory-first switch. |

package/dist/index.mjs

@@ -12,7 +12,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 
 // src/version.ts
-var COMPOSER_VERSION = true ? "0.11.0" : readPackageVersion();
+var COMPOSER_VERSION = true ? "0.12.0" : readPackageVersion();
 
 // ../../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -29869,7 +29869,7 @@ function expandPath(p) {
 function readBackupFile(p) {
   const full = expandPath(p);
   if (path.extname(full).toLowerCase() !== ".json") {
-    return { ok: false, error: `path: "${full}" is not a .json file. Pass the backup the app downloads (Import/Export \u2192 Backup \u2192 Export), named like bicon-backup-\u2026.json.` };
+    return { ok: false, error: `path: "${full}" is not a .json file. Pass the backup the app downloads (Import/Export \u2192 Backup \u2192 Export), named like bicon-portfolio-backup-YYYY-MM-DD.json.` };
   }
   let size;
   try {
@@ -31268,6 +31268,17 @@ function unrecordedSignals(i, ctx, t) {
   });
 }
 
+// ../../initiative-model/src/decision-log.ts
+function sortDecisionLog(entries) {
+  return entries.map((entry, index) => ({ entry, index })).sort((a, b) => {
+    if (a.entry.date !== b.entry.date) return a.entry.date < b.entry.date ? 1 : -1;
+    const at = a.entry.createdAt ?? "";
+    const bt = b.entry.createdAt ?? "";
+    if (at !== bt) return at < bt ? 1 : -1;
+    return b.index - a.index;
+  }).map(({ entry }) => entry);
+}
+
 // ../../initiative-model/src/skill-demand.ts
 var round12 = (n) => Math.round(n * 10) / 10;
 var MAX_DEMAND_MONTHS = 48;
@@ -31613,13 +31624,19 @@ function toRow(i, fields, c) {
   for (const f of fields) row[f] = fieldValue(i, f, c);
   return row;
 }
-var SIZE_NOTE = "Answer cut to stay within about 60 KB: long texts are shortened (\u2026) and long lists keep their first entries. Ask a narrower question or use query_initiatives with fewer fields.";
+var SIZE_NOTE = "Answer cut to stay within about 60 KB: long texts are shortened (\u2026) and long lists and maps (such as counts by business unit) keep their first entries. Ask a narrower question or use query_initiatives with fewer fields.";
+var MIN_KEYS = 60;
 function shrink(v, maxStr, maxArr) {
   if (typeof v === "string") return v.length > maxStr ? `${v.slice(0, maxStr)}\u2026` : v;
   if (Array.isArray(v)) return v.slice(0, maxArr).map((x) => shrink(x, maxStr, maxArr));
   if (v && typeof v === "object") {
     const out = {};
-    for (const [k, x] of Object.entries(v)) out[k] = shrink(x, maxStr, maxArr);
+    for (const [k, x] of Object.entries(v).slice(0, Math.max(maxArr, MIN_KEYS))) {
+      const short = shrink(k, maxStr, maxArr);
+      let key = short;
+      for (let n = 2; key in out; n++) key = `${short} (${n})`;
+      out[key] = shrink(x, maxStr, maxArr);
+    }
     return out;
   }
   return v;
@@ -31918,7 +31935,8 @@ function rankPortfolio(p, q, now = Date.now()) {
     for (const id of ids ?? []) if (!known.has(id)) errors.push(`${field}: "${id}" is not an initiative id of this backup.`);
   }
   const skillIds = new Set(p.skills.map((s) => s.id));
-  for (const id of Object.keys(q.skillFteDeltas ?? {})) if (!skillIds.has(id)) errors.push(`skillFteDeltas: "${id}" is not a skill id of this backup.`);
+  for (const id of Object.keys(q.skillFteDeltas ?? {})) if (!skillIds.has(id)) errors.push(`skillFteDeltas: "${id}" is not a skill id of this backup (the key is the skill id, not its name).`);
+  errors.push(...capDeltaErrors(p, q.skillFteDeltas));
   if (errors.length) return { ok: false, errors };
   const base = baselineScenario(p.budgetField, p.exclusions);
   const scenario = {
@@ -32027,7 +32045,7 @@ function initiativeDetail(p, ref, now = Date.now()) {
       followUpsList: sortFollowUps(i.followUps ?? []).map((f) => ({ title: f.title, due: f.dueDate, done: f.doneDate ?? null, state: followUpState(f, now), assignee: f.assigneeName ?? null })),
       // The six latest by reporting date, newest first, as the Status Report page.
       statusReports: sortStatusReports(i.statusReports ?? []).slice(0, 6),
-      decisionLog: (i.decisionLog ?? []).slice(-10).map((d) => ({ date: d.date, kind: d.kind, owner: d.owner ?? null, rationale: d.rationale ?? null })),
+      decisionLog: sortDecisionLog(i.decisionLog ?? []).slice(0, 10).map((d) => ({ date: d.date, kind: d.kind, owner: d.owner ?? null, rationale: d.rationale ?? null })),
       capabilityImpacts: (i.capabilityImpacts ?? []).map((ci) => ({ capability: linkedCapabilityPaths({ ...i, capabilityImpacts: [ci] }, p.capabilities)[0] ?? ci.capabilityId, kind: ci.kind, maturityTo: ci.maturityTo ?? null })),
       dependents: p.initiatives.filter((x) => x.dependsOn.includes(i.id)).map((x) => x.name)
     }
@@ -32309,18 +32327,26 @@ function boardSlices(p, q, now = Date.now()) {
   };
 }
 var SKILL_MONTHS_DEFAULT = 24;
+function capDeltaErrors(p, deltas) {
+  const errors = [];
+  for (const [id, d] of Object.entries(deltas ?? {})) {
+    const s = p.skills.find((x) => x.id === id);
+    if (!s) continue;
+    if (s.fteCap <= 0 && d !== 0) errors.push(`skillFteDeltas: ${s.name} has no FTE cap (0 = no limit), so a delta would create one. Set a cap in the app (Settings \u2192 Taxonomy \u2192 Skills) to test a limit.`);
+    else if (s.fteCap > 0 && Math.round((s.fteCap + d) * 10) / 10 <= 0) errors.push(`skillFteDeltas: ${d} takes the cap of ${s.name} (${s.fteCap} FTE) to 0, which the cut line reads as no limit at all. The smallest cap is 0.1 FTE (a delta of ${Math.round((0.1 - s.fteCap) * 10) / 10}).`);
+  }
+  return errors;
+}
 function skillAllocation(p, q, now = Date.now()) {
   const errors = [];
   if (p.skills.length === 0) return { ok: false, errors: ["The backup has no skill roster (Settings \u2192 Taxonomy \u2192 Skills in the app)."] };
   const byKey = (ref) => p.skills.find((s) => s.id === ref) ?? p.skills.find((s) => lc(s.name) === lc(ref));
   const chosen = q.skills?.length ? q.skills.map((r) => [r, byKey(r)]) : p.skills.map((s) => [s.id, s]);
   for (const [r, s] of chosen) if (!s) errors.push(`skills: "${r}" is not a skill of this backup (have: ${p.skills.map((x) => x.name).join(" | ")}).`);
-  for (const [id, d] of Object.entries(q.skillFteDeltas ?? {})) {
-    const s = p.skills.find((x) => x.id === id);
-    if (!s) errors.push(`skillFteDeltas: "${id}" is not a skill id of this backup (the key is the skill id, not its name).`);
-    else if (s.fteCap <= 0 && d !== 0) errors.push(`skillFteDeltas: ${s.name} has no FTE cap (0 = no limit), so a delta would create one. Set a cap in the app (Settings \u2192 Taxonomy \u2192 Skills) to test a limit.`);
-    else if (s.fteCap > 0 && Math.round((s.fteCap + d) * 10) / 10 <= 0) errors.push(`skillFteDeltas: ${d} takes the cap of ${s.name} (${s.fteCap} FTE) to 0, which the cut line reads as no limit at all. The smallest cap is 0.1 FTE (a delta of ${Math.round((0.1 - s.fteCap) * 10) / 10}).`);
+  for (const id of Object.keys(q.skillFteDeltas ?? {})) {
+    if (!p.skills.some((x) => x.id === id)) errors.push(`skillFteDeltas: "${id}" is not a skill id of this backup (the key is the skill id, not its name).`);
   }
+  errors.push(...capDeltaErrors(p, q.skillFteDeltas));
   const known = new Set(p.initiatives.map((i) => i.id));
   for (const id of q.excludedIds ?? []) if (!known.has(id)) errors.push(`excludedIds: "${id}" is not an initiative id of this backup.`);
   if (q.fromMonth && !/^\d{4}-(0[1-9]|1[0-2])$/.test(q.fromMonth)) errors.push(`fromMonth: "${q.fromMonth}" is not a yyyy-mm month.`);
@@ -32429,7 +32455,7 @@ function skillAllocation(p, q, now = Date.now()) {
     ...list.length < perSkill.length ? { skillsReturned: list.length, skillCount: perSkill.length, cutForSize: `Cut to the first ${list.length} of ${perSkill.length} skills to fit; pass skills to see the others.` } : {},
     ...rowCap2 < limit && perSkill.some((s) => s.initiatives.length > rowCap2) ? { rowsCutForSize: `Initiative rows cut to ${rowCap2} per skill to fit (initiativeCount gives the full number); ask for fewer skills to see more.` } : {},
     ...whatIf ? { whatIf } : {},
-    note: "pipelineDemand = in-flight work not yet in production (the capacity Board Action's rule); headroom = cap minus pipelineDemand (run teams not counted, as that rule); runFte = In Production run teams organisation-wide; fundedUse = the baseline cut line's use of a capped skill; the monthly series is the Roadmap's skill demand in whole calendar months: a timeline's start month and end month count in full at build FTE, and an In Production run team (includeRunTeams) starts the month after the end. Quote these figures rather than recomputing them."
+    note: "pipelineDemand = in-flight work not yet in production (the capacity Board Action's rule); headroom = cap minus pipelineDemand (run teams not counted, as that rule); runFte = In Production run teams organisation-wide; fundedUse = the baseline cut line's use of a capped skill; the monthly series is the Roadmap's skill demand in whole calendar months: a timeline's start month and end month count in full at build FTE, and an In Production run team (includeRunTeams) starts the month after the end at its run FTE (no run FTE set: the build FTE; a start without an end: the build FTE runs on from the start; no usable start or an inverted timeline: the run FTE from the current month). Quote these figures rather than recomputing them."
   });
   let rowCap = limit;
   while (rowCap > 5 && JSON.stringify(build(rowCap, perSkill)).length > OUTPUT_BUDGET_CHARS) rowCap = Math.max(5, Math.floor(rowCap / 2));
@@ -32634,7 +32660,7 @@ function createServer() {
     "load_portfolio",
     {
       title: "Load portfolio backup",
-      description: "Loads the organisation's FULL BACKUP (BICon app: Import/Export \u2192 Backup \u2192 Export, a bicon-backup-\u2026.json) for analysis and returns a portfolioId plus a summary: counts by status, business unit and driver, the skills, capabilities, saved portfolios and snapshots, currency, budget cap. Pass the file's full local `path` (ask the user where it is, often Downloads); inline `backup` JSON only for small files. Read-only: nothing is sent anywhere, author fields are removed on load. Call once, then pass `portfolio: \"<portfolioId>\"` to the other analysis tools. The data is as of the export date in the summary.",
+      description: "Loads the organisation's FULL BACKUP (BICon app: Import/Export \u2192 Backup \u2192 Export, a bicon-portfolio-backup-YYYY-MM-DD.json) for analysis and returns a portfolioId plus a summary: counts by status, business unit and driver, the skills, capabilities, saved portfolios and snapshots, currency, budget cap. Pass the file's full local `path` (ask the user where it is, often Downloads); inline `backup` JSON only for small files. Read-only: nothing is sent anywhere, author fields are removed on load. Call once, then pass `portfolio: \"<portfolioId>\"` to the other analysis tools. The data is as of the export date in the summary.",
       inputSchema: loadPortfolioInputSchema
     },
     async (input2) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bicon/mcp-composer",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "MCP server that helps an AI client compose a valid BICon portfolio initiative and hand it back as an import file (draft-first, no auth, no API calls).",
   "license": "UNLICENSED",
   "author": "BICon Establishment",