@bicon/mcp-composer 0.5.0 → 0.6.0

package/dist/index.mjs

@@ -12,7 +12,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 
 // src/version.ts
-var COMPOSER_VERSION = true ? "0.5.0" : readPackageVersion();
+var COMPOSER_VERSION = true ? "0.6.0" : readPackageVersion();
 
 // ../../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
 var external_exports = {};
@@ -4170,7 +4170,7 @@ var ListOrganizationMembersResponseItem = objectType({
   "email": stringType(),
   "displayName": stringType().nullable(),
   "role": enumType(["admin", "member", "viewer"]),
-  "permissions": arrayType(stringType()).describe("App-managed permission overrides on top of the fixed role (free-form strings, not a closed enum). Known keys: manage_skills, manage_ai_act, manage_metadata, manage_stage_gate, manage_economics, manage_decision_log, manage_dependencies, manage_required_skills, manage_scoring, manage_status_report, manage_prioritisation, manage_capabilities, manage_capability_impact, manage_milestones.")
+  "permissions": arrayType(stringType()).describe("App-managed permission overrides on top of the fixed role (free-form strings, not a closed enum). Known keys: manage_skills, manage_ai_act, manage_metadata, manage_stage_gate, manage_economics, manage_decision_log, manage_dependencies, manage_required_skills, manage_scoring, manage_status_report, manage_prioritisation, manage_capabilities, manage_capability_impact, manage_milestones, manage_risks.")
 });
 var ListOrganizationMembersResponse = arrayType(ListOrganizationMembersResponseItem);
 var SyncOrganizationMembersResponse = objectType({
@@ -4180,18 +4180,18 @@ var SyncOrganizationMembersResponse = objectType({
 var GetMyOrganizationAccessResponse = objectType({
   "userId": stringType().describe(`The caller's own local user id (matches AuthorRef.userId on initiatives), so the client can tell its own changes apart from a teammate's \u2014 e.g. to suppress the "updated by X" collaboration banner when an edit echoing back is the caller's own save.`),
   "role": enumType(["admin", "member", "viewer"]),
-  "permissions": arrayType(stringType()).describe("App-managed permission overrides on top of the fixed role (free-form strings, not a closed enum). Known keys: manage_skills, manage_ai_act, manage_metadata, manage_stage_gate, manage_economics, manage_decision_log, manage_dependencies, manage_required_skills, manage_scoring, manage_status_report, manage_prioritisation, manage_capabilities, manage_capability_impact, manage_milestones."),
+  "permissions": arrayType(stringType()).describe("App-managed permission overrides on top of the fixed role (free-form strings, not a closed enum). Known keys: manage_skills, manage_ai_act, manage_metadata, manage_stage_gate, manage_economics, manage_decision_log, manage_dependencies, manage_required_skills, manage_scoring, manage_status_report, manage_prioritisation, manage_capabilities, manage_capability_impact, manage_milestones, manage_risks."),
   "initiativeLimit": numberType().describe("The most initiatives this organisation may hold, archived ones included. Creating one more answers 507 with code initiative_limit_reached, so the client blocks New, Duplicate and Import up front.")
 });
 var UpdateOrganizationMemberPermissionsParams = objectType({
   "userId": coerce.string().uuid()
 });
 var UpdateOrganizationMemberPermissionsBody = objectType({
-  "permissions": arrayType(stringType()).describe("App-managed permission overrides on top of the fixed role (free-form strings, not a closed enum). Known keys: manage_skills, manage_ai_act, manage_metadata, manage_stage_gate, manage_economics, manage_decision_log, manage_dependencies, manage_required_skills, manage_scoring, manage_status_report, manage_prioritisation, manage_capabilities, manage_capability_impact, manage_milestones.")
+  "permissions": arrayType(stringType()).describe("App-managed permission overrides on top of the fixed role (free-form strings, not a closed enum). Known keys: manage_skills, manage_ai_act, manage_metadata, manage_stage_gate, manage_economics, manage_decision_log, manage_dependencies, manage_required_skills, manage_scoring, manage_status_report, manage_prioritisation, manage_capabilities, manage_capability_impact, manage_milestones, manage_risks.")
 });
 var UpdateOrganizationMemberPermissionsResponse = objectType({
   "userId": stringType().uuid(),
-  "permissions": arrayType(stringType()).describe("App-managed permission overrides on top of the fixed role (free-form strings, not a closed enum). Known keys: manage_skills, manage_ai_act, manage_metadata, manage_stage_gate, manage_economics, manage_decision_log, manage_dependencies, manage_required_skills, manage_scoring, manage_status_report, manage_prioritisation, manage_capabilities, manage_capability_impact, manage_milestones.")
+  "permissions": arrayType(stringType()).describe("App-managed permission overrides on top of the fixed role (free-form strings, not a closed enum). Known keys: manage_skills, manage_ai_act, manage_metadata, manage_stage_gate, manage_economics, manage_decision_log, manage_dependencies, manage_required_skills, manage_scoring, manage_status_report, manage_prioritisation, manage_capabilities, manage_capability_impact, manage_milestones, manage_risks.")
 });
 var ListPermissionProfilesResponseItem = objectType({
   "id": stringType().uuid(),
@@ -4286,6 +4286,18 @@ var listSnapshotsResponseInitiativesItemMilestonesItemForecastDateRegExp = new R
 var listSnapshotsResponseInitiativesItemMilestonesItemDoneDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
 var listSnapshotsResponseInitiativesItemMilestonesItemNoteMax = 1e4;
 var listSnapshotsResponseInitiativesItemMilestonesMax = 30;
+var listSnapshotsResponseInitiativesItemRisksItemTitleMax = 300;
+var listSnapshotsResponseInitiativesItemRisksItemProbabilityMax = 5;
+var listSnapshotsResponseInitiativesItemRisksItemImpactMax = 5;
+var listSnapshotsResponseInitiativesItemRisksItemResidualProbabilityMax = 5;
+var listSnapshotsResponseInitiativesItemRisksItemResidualImpactMax = 5;
+var listSnapshotsResponseInitiativesItemRisksItemOwnerMax = 300;
+var listSnapshotsResponseInitiativesItemRisksItemMitigationMax = 1e4;
+var listSnapshotsResponseInitiativesItemRisksItemRaisedDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var listSnapshotsResponseInitiativesItemRisksItemReviewDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var listSnapshotsResponseInitiativesItemRisksItemOccurredDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var listSnapshotsResponseInitiativesItemRisksItemNoteMax = 1e4;
+var listSnapshotsResponseInitiativesItemRisksMax = 50;
 var listSnapshotsResponseInitiativesItemDependsOnMax = 1e3;
 var listSnapshotsResponseInitiativesItemRequiredSkillsItemRunFteMin = 0;
 var listSnapshotsResponseInitiativesItemRequiredSkillsMax = 1e3;
@@ -4495,6 +4507,22 @@ var ListSnapshotsResponseItem = objectType({
       "doneDate": stringType().regex(listSnapshotsResponseInitiativesItemMilestonesItemDoneDateRegExp).optional(),
       "note": stringType().max(listSnapshotsResponseInitiativesItemMilestonesItemNoteMax).optional()
     }).describe("A dated intermediate result (docs/milestones-concept-2026-10-17.md). baselineDate is the agreed plan, forecastDate today's expectation (absent = the baseline), doneDate marks it reached; all yyyy-mm-dd.")).max(listSnapshotsResponseInitiativesItemMilestonesMax).optional(),
+    "risks": arrayType(objectType({
+      "id": stringType(),
+      "title": stringType().min(1).max(listSnapshotsResponseInitiativesItemRisksItemTitleMax),
+      "category": enumType(["delivery", "vendor", "data", "people", "regulatory", "technical", "financial"]),
+      "probability": numberType().min(1).max(listSnapshotsResponseInitiativesItemRisksItemProbabilityMax),
+      "impact": numberType().min(1).max(listSnapshotsResponseInitiativesItemRisksItemImpactMax),
+      "residualProbability": numberType().min(1).max(listSnapshotsResponseInitiativesItemRisksItemResidualProbabilityMax).optional(),
+      "residualImpact": numberType().min(1).max(listSnapshotsResponseInitiativesItemRisksItemResidualImpactMax).optional(),
+      "status": enumType(["open", "mitigating", "closed", "occurred"]),
+      "owner": stringType().max(listSnapshotsResponseInitiativesItemRisksItemOwnerMax).optional(),
+      "mitigation": stringType().max(listSnapshotsResponseInitiativesItemRisksItemMitigationMax).optional(),
+      "raisedDate": stringType().regex(listSnapshotsResponseInitiativesItemRisksItemRaisedDateRegExp).optional(),
+      "reviewDate": stringType().regex(listSnapshotsResponseInitiativesItemRisksItemReviewDateRegExp).optional(),
+      "occurredDate": stringType().regex(listSnapshotsResponseInitiativesItemRisksItemOccurredDateRegExp).optional(),
+      "note": stringType().max(listSnapshotsResponseInitiativesItemRisksItemNoteMax).optional()
+    }).describe("A concrete project risk, or an issue when status is occurred (docs/risks-issues-follow-ups-concept-2026-10-19.md). Probability and impact are integers 1-5; the residual pair (after mitigation) is sent as a pair or not at all. Dates are yyyy-mm-dd.")).max(listSnapshotsResponseInitiativesItemRisksMax).optional(),
     "dependsOn": arrayType(stringType()).max(listSnapshotsResponseInitiativesItemDependsOnMax),
     "requiredSkills": arrayType(objectType({
       "skillId": stringType(),
@@ -4638,6 +4666,18 @@ var createSnapshotBodyInitiativesItemMilestonesItemForecastDateRegExp = new RegE
 var createSnapshotBodyInitiativesItemMilestonesItemDoneDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
 var createSnapshotBodyInitiativesItemMilestonesItemNoteMax = 1e4;
 var createSnapshotBodyInitiativesItemMilestonesMax = 30;
+var createSnapshotBodyInitiativesItemRisksItemTitleMax = 300;
+var createSnapshotBodyInitiativesItemRisksItemProbabilityMax = 5;
+var createSnapshotBodyInitiativesItemRisksItemImpactMax = 5;
+var createSnapshotBodyInitiativesItemRisksItemResidualProbabilityMax = 5;
+var createSnapshotBodyInitiativesItemRisksItemResidualImpactMax = 5;
+var createSnapshotBodyInitiativesItemRisksItemOwnerMax = 300;
+var createSnapshotBodyInitiativesItemRisksItemMitigationMax = 1e4;
+var createSnapshotBodyInitiativesItemRisksItemRaisedDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var createSnapshotBodyInitiativesItemRisksItemReviewDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var createSnapshotBodyInitiativesItemRisksItemOccurredDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var createSnapshotBodyInitiativesItemRisksItemNoteMax = 1e4;
+var createSnapshotBodyInitiativesItemRisksMax = 50;
 var createSnapshotBodyInitiativesItemDependsOnMax = 1e3;
 var createSnapshotBodyInitiativesItemRequiredSkillsItemRunFteMin = 0;
 var createSnapshotBodyInitiativesItemRequiredSkillsMax = 1e3;
@@ -4847,6 +4887,22 @@ var CreateSnapshotBody = objectType({
       "doneDate": stringType().regex(createSnapshotBodyInitiativesItemMilestonesItemDoneDateRegExp).optional(),
       "note": stringType().max(createSnapshotBodyInitiativesItemMilestonesItemNoteMax).optional()
     }).describe("A dated intermediate result (docs/milestones-concept-2026-10-17.md). baselineDate is the agreed plan, forecastDate today's expectation (absent = the baseline), doneDate marks it reached; all yyyy-mm-dd.")).max(createSnapshotBodyInitiativesItemMilestonesMax).optional(),
+    "risks": arrayType(objectType({
+      "id": stringType(),
+      "title": stringType().min(1).max(createSnapshotBodyInitiativesItemRisksItemTitleMax),
+      "category": enumType(["delivery", "vendor", "data", "people", "regulatory", "technical", "financial"]),
+      "probability": numberType().min(1).max(createSnapshotBodyInitiativesItemRisksItemProbabilityMax),
+      "impact": numberType().min(1).max(createSnapshotBodyInitiativesItemRisksItemImpactMax),
+      "residualProbability": numberType().min(1).max(createSnapshotBodyInitiativesItemRisksItemResidualProbabilityMax).optional(),
+      "residualImpact": numberType().min(1).max(createSnapshotBodyInitiativesItemRisksItemResidualImpactMax).optional(),
+      "status": enumType(["open", "mitigating", "closed", "occurred"]),
+      "owner": stringType().max(createSnapshotBodyInitiativesItemRisksItemOwnerMax).optional(),
+      "mitigation": stringType().max(createSnapshotBodyInitiativesItemRisksItemMitigationMax).optional(),
+      "raisedDate": stringType().regex(createSnapshotBodyInitiativesItemRisksItemRaisedDateRegExp).optional(),
+      "reviewDate": stringType().regex(createSnapshotBodyInitiativesItemRisksItemReviewDateRegExp).optional(),
+      "occurredDate": stringType().regex(createSnapshotBodyInitiativesItemRisksItemOccurredDateRegExp).optional(),
+      "note": stringType().max(createSnapshotBodyInitiativesItemRisksItemNoteMax).optional()
+    }).describe("A concrete project risk, or an issue when status is occurred (docs/risks-issues-follow-ups-concept-2026-10-19.md). Probability and impact are integers 1-5; the residual pair (after mitigation) is sent as a pair or not at all. Dates are yyyy-mm-dd.")).max(createSnapshotBodyInitiativesItemRisksMax).optional(),
     "dependsOn": arrayType(stringType()).max(createSnapshotBodyInitiativesItemDependsOnMax),
     "requiredSkills": arrayType(objectType({
       "skillId": stringType(),
@@ -4996,6 +5052,18 @@ var renameSnapshotResponseInitiativesItemMilestonesItemForecastDateRegExp = new
 var renameSnapshotResponseInitiativesItemMilestonesItemDoneDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
 var renameSnapshotResponseInitiativesItemMilestonesItemNoteMax = 1e4;
 var renameSnapshotResponseInitiativesItemMilestonesMax = 30;
+var renameSnapshotResponseInitiativesItemRisksItemTitleMax = 300;
+var renameSnapshotResponseInitiativesItemRisksItemProbabilityMax = 5;
+var renameSnapshotResponseInitiativesItemRisksItemImpactMax = 5;
+var renameSnapshotResponseInitiativesItemRisksItemResidualProbabilityMax = 5;
+var renameSnapshotResponseInitiativesItemRisksItemResidualImpactMax = 5;
+var renameSnapshotResponseInitiativesItemRisksItemOwnerMax = 300;
+var renameSnapshotResponseInitiativesItemRisksItemMitigationMax = 1e4;
+var renameSnapshotResponseInitiativesItemRisksItemRaisedDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var renameSnapshotResponseInitiativesItemRisksItemReviewDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var renameSnapshotResponseInitiativesItemRisksItemOccurredDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var renameSnapshotResponseInitiativesItemRisksItemNoteMax = 1e4;
+var renameSnapshotResponseInitiativesItemRisksMax = 50;
 var renameSnapshotResponseInitiativesItemDependsOnMax = 1e3;
 var renameSnapshotResponseInitiativesItemRequiredSkillsItemRunFteMin = 0;
 var renameSnapshotResponseInitiativesItemRequiredSkillsMax = 1e3;
@@ -5205,6 +5273,22 @@ var RenameSnapshotResponse = objectType({
       "doneDate": stringType().regex(renameSnapshotResponseInitiativesItemMilestonesItemDoneDateRegExp).optional(),
       "note": stringType().max(renameSnapshotResponseInitiativesItemMilestonesItemNoteMax).optional()
     }).describe("A dated intermediate result (docs/milestones-concept-2026-10-17.md). baselineDate is the agreed plan, forecastDate today's expectation (absent = the baseline), doneDate marks it reached; all yyyy-mm-dd.")).max(renameSnapshotResponseInitiativesItemMilestonesMax).optional(),
+    "risks": arrayType(objectType({
+      "id": stringType(),
+      "title": stringType().min(1).max(renameSnapshotResponseInitiativesItemRisksItemTitleMax),
+      "category": enumType(["delivery", "vendor", "data", "people", "regulatory", "technical", "financial"]),
+      "probability": numberType().min(1).max(renameSnapshotResponseInitiativesItemRisksItemProbabilityMax),
+      "impact": numberType().min(1).max(renameSnapshotResponseInitiativesItemRisksItemImpactMax),
+      "residualProbability": numberType().min(1).max(renameSnapshotResponseInitiativesItemRisksItemResidualProbabilityMax).optional(),
+      "residualImpact": numberType().min(1).max(renameSnapshotResponseInitiativesItemRisksItemResidualImpactMax).optional(),
+      "status": enumType(["open", "mitigating", "closed", "occurred"]),
+      "owner": stringType().max(renameSnapshotResponseInitiativesItemRisksItemOwnerMax).optional(),
+      "mitigation": stringType().max(renameSnapshotResponseInitiativesItemRisksItemMitigationMax).optional(),
+      "raisedDate": stringType().regex(renameSnapshotResponseInitiativesItemRisksItemRaisedDateRegExp).optional(),
+      "reviewDate": stringType().regex(renameSnapshotResponseInitiativesItemRisksItemReviewDateRegExp).optional(),
+      "occurredDate": stringType().regex(renameSnapshotResponseInitiativesItemRisksItemOccurredDateRegExp).optional(),
+      "note": stringType().max(renameSnapshotResponseInitiativesItemRisksItemNoteMax).optional()
+    }).describe("A concrete project risk, or an issue when status is occurred (docs/risks-issues-follow-ups-concept-2026-10-19.md). Probability and impact are integers 1-5; the residual pair (after mitigation) is sent as a pair or not at all. Dates are yyyy-mm-dd.")).max(renameSnapshotResponseInitiativesItemRisksMax).optional(),
     "dependsOn": arrayType(stringType()).max(renameSnapshotResponseInitiativesItemDependsOnMax),
     "requiredSkills": arrayType(objectType({
       "skillId": stringType(),
@@ -5349,6 +5433,18 @@ var listInitiativesResponseMilestonesItemForecastDateRegExp = new RegExp("^\\d{4
 var listInitiativesResponseMilestonesItemDoneDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
 var listInitiativesResponseMilestonesItemNoteMax = 1e4;
 var listInitiativesResponseMilestonesMax = 30;
+var listInitiativesResponseRisksItemTitleMax = 300;
+var listInitiativesResponseRisksItemProbabilityMax = 5;
+var listInitiativesResponseRisksItemImpactMax = 5;
+var listInitiativesResponseRisksItemResidualProbabilityMax = 5;
+var listInitiativesResponseRisksItemResidualImpactMax = 5;
+var listInitiativesResponseRisksItemOwnerMax = 300;
+var listInitiativesResponseRisksItemMitigationMax = 1e4;
+var listInitiativesResponseRisksItemRaisedDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var listInitiativesResponseRisksItemReviewDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var listInitiativesResponseRisksItemOccurredDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var listInitiativesResponseRisksItemNoteMax = 1e4;
+var listInitiativesResponseRisksMax = 50;
 var listInitiativesResponseDependsOnMax = 1e3;
 var listInitiativesResponseRequiredSkillsItemRunFteMin = 0;
 var listInitiativesResponseRequiredSkillsMax = 1e3;
@@ -5552,6 +5648,22 @@ var ListInitiativesResponseItem = objectType({
     "doneDate": stringType().regex(listInitiativesResponseMilestonesItemDoneDateRegExp).optional(),
     "note": stringType().max(listInitiativesResponseMilestonesItemNoteMax).optional()
   }).describe("A dated intermediate result (docs/milestones-concept-2026-10-17.md). baselineDate is the agreed plan, forecastDate today's expectation (absent = the baseline), doneDate marks it reached; all yyyy-mm-dd.")).max(listInitiativesResponseMilestonesMax).optional(),
+  "risks": arrayType(objectType({
+    "id": stringType(),
+    "title": stringType().min(1).max(listInitiativesResponseRisksItemTitleMax),
+    "category": enumType(["delivery", "vendor", "data", "people", "regulatory", "technical", "financial"]),
+    "probability": numberType().min(1).max(listInitiativesResponseRisksItemProbabilityMax),
+    "impact": numberType().min(1).max(listInitiativesResponseRisksItemImpactMax),
+    "residualProbability": numberType().min(1).max(listInitiativesResponseRisksItemResidualProbabilityMax).optional(),
+    "residualImpact": numberType().min(1).max(listInitiativesResponseRisksItemResidualImpactMax).optional(),
+    "status": enumType(["open", "mitigating", "closed", "occurred"]),
+    "owner": stringType().max(listInitiativesResponseRisksItemOwnerMax).optional(),
+    "mitigation": stringType().max(listInitiativesResponseRisksItemMitigationMax).optional(),
+    "raisedDate": stringType().regex(listInitiativesResponseRisksItemRaisedDateRegExp).optional(),
+    "reviewDate": stringType().regex(listInitiativesResponseRisksItemReviewDateRegExp).optional(),
+    "occurredDate": stringType().regex(listInitiativesResponseRisksItemOccurredDateRegExp).optional(),
+    "note": stringType().max(listInitiativesResponseRisksItemNoteMax).optional()
+  }).describe("A concrete project risk, or an issue when status is occurred (docs/risks-issues-follow-ups-concept-2026-10-19.md). Probability and impact are integers 1-5; the residual pair (after mitigation) is sent as a pair or not at all. Dates are yyyy-mm-dd.")).max(listInitiativesResponseRisksMax).optional(),
   "dependsOn": arrayType(stringType()).max(listInitiativesResponseDependsOnMax),
   "requiredSkills": arrayType(objectType({
     "skillId": stringType(),
@@ -5692,6 +5804,18 @@ var createInitiativeBodyOneMilestonesItemForecastDateRegExp = new RegExp("^\\d{4
 var createInitiativeBodyOneMilestonesItemDoneDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
 var createInitiativeBodyOneMilestonesItemNoteMax = 1e4;
 var createInitiativeBodyOneMilestonesMax = 30;
+var createInitiativeBodyOneRisksItemTitleMax = 300;
+var createInitiativeBodyOneRisksItemProbabilityMax = 5;
+var createInitiativeBodyOneRisksItemImpactMax = 5;
+var createInitiativeBodyOneRisksItemResidualProbabilityMax = 5;
+var createInitiativeBodyOneRisksItemResidualImpactMax = 5;
+var createInitiativeBodyOneRisksItemOwnerMax = 300;
+var createInitiativeBodyOneRisksItemMitigationMax = 1e4;
+var createInitiativeBodyOneRisksItemRaisedDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var createInitiativeBodyOneRisksItemReviewDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var createInitiativeBodyOneRisksItemOccurredDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var createInitiativeBodyOneRisksItemNoteMax = 1e4;
+var createInitiativeBodyOneRisksMax = 50;
 var createInitiativeBodyOneDependsOnMax = 1e3;
 var createInitiativeBodyOneRequiredSkillsItemRunFteMin = 0;
 var createInitiativeBodyOneRequiredSkillsMax = 1e3;
@@ -5895,6 +6019,22 @@ var CreateInitiativeBody = objectType({
     "doneDate": stringType().regex(createInitiativeBodyOneMilestonesItemDoneDateRegExp).optional(),
     "note": stringType().max(createInitiativeBodyOneMilestonesItemNoteMax).optional()
   }).describe("A dated intermediate result (docs/milestones-concept-2026-10-17.md). baselineDate is the agreed plan, forecastDate today's expectation (absent = the baseline), doneDate marks it reached; all yyyy-mm-dd.")).max(createInitiativeBodyOneMilestonesMax).optional(),
+  "risks": arrayType(objectType({
+    "id": stringType(),
+    "title": stringType().min(1).max(createInitiativeBodyOneRisksItemTitleMax),
+    "category": enumType(["delivery", "vendor", "data", "people", "regulatory", "technical", "financial"]),
+    "probability": numberType().min(1).max(createInitiativeBodyOneRisksItemProbabilityMax),
+    "impact": numberType().min(1).max(createInitiativeBodyOneRisksItemImpactMax),
+    "residualProbability": numberType().min(1).max(createInitiativeBodyOneRisksItemResidualProbabilityMax).optional(),
+    "residualImpact": numberType().min(1).max(createInitiativeBodyOneRisksItemResidualImpactMax).optional(),
+    "status": enumType(["open", "mitigating", "closed", "occurred"]),
+    "owner": stringType().max(createInitiativeBodyOneRisksItemOwnerMax).optional(),
+    "mitigation": stringType().max(createInitiativeBodyOneRisksItemMitigationMax).optional(),
+    "raisedDate": stringType().regex(createInitiativeBodyOneRisksItemRaisedDateRegExp).optional(),
+    "reviewDate": stringType().regex(createInitiativeBodyOneRisksItemReviewDateRegExp).optional(),
+    "occurredDate": stringType().regex(createInitiativeBodyOneRisksItemOccurredDateRegExp).optional(),
+    "note": stringType().max(createInitiativeBodyOneRisksItemNoteMax).optional()
+  }).describe("A concrete project risk, or an issue when status is occurred (docs/risks-issues-follow-ups-concept-2026-10-19.md). Probability and impact are integers 1-5; the residual pair (after mitigation) is sent as a pair or not at all. Dates are yyyy-mm-dd.")).max(createInitiativeBodyOneRisksMax).optional(),
   "dependsOn": arrayType(stringType()).max(createInitiativeBodyOneDependsOnMax),
   "requiredSkills": arrayType(objectType({
     "skillId": stringType(),
@@ -6045,6 +6185,18 @@ var getInitiativeResponseMilestonesItemForecastDateRegExp = new RegExp("^\\d{4}-
 var getInitiativeResponseMilestonesItemDoneDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
 var getInitiativeResponseMilestonesItemNoteMax = 1e4;
 var getInitiativeResponseMilestonesMax = 30;
+var getInitiativeResponseRisksItemTitleMax = 300;
+var getInitiativeResponseRisksItemProbabilityMax = 5;
+var getInitiativeResponseRisksItemImpactMax = 5;
+var getInitiativeResponseRisksItemResidualProbabilityMax = 5;
+var getInitiativeResponseRisksItemResidualImpactMax = 5;
+var getInitiativeResponseRisksItemOwnerMax = 300;
+var getInitiativeResponseRisksItemMitigationMax = 1e4;
+var getInitiativeResponseRisksItemRaisedDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var getInitiativeResponseRisksItemReviewDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var getInitiativeResponseRisksItemOccurredDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var getInitiativeResponseRisksItemNoteMax = 1e4;
+var getInitiativeResponseRisksMax = 50;
 var getInitiativeResponseDependsOnMax = 1e3;
 var getInitiativeResponseRequiredSkillsItemRunFteMin = 0;
 var getInitiativeResponseRequiredSkillsMax = 1e3;
@@ -6248,6 +6400,22 @@ var GetInitiativeResponse = objectType({
     "doneDate": stringType().regex(getInitiativeResponseMilestonesItemDoneDateRegExp).optional(),
     "note": stringType().max(getInitiativeResponseMilestonesItemNoteMax).optional()
   }).describe("A dated intermediate result (docs/milestones-concept-2026-10-17.md). baselineDate is the agreed plan, forecastDate today's expectation (absent = the baseline), doneDate marks it reached; all yyyy-mm-dd.")).max(getInitiativeResponseMilestonesMax).optional(),
+  "risks": arrayType(objectType({
+    "id": stringType(),
+    "title": stringType().min(1).max(getInitiativeResponseRisksItemTitleMax),
+    "category": enumType(["delivery", "vendor", "data", "people", "regulatory", "technical", "financial"]),
+    "probability": numberType().min(1).max(getInitiativeResponseRisksItemProbabilityMax),
+    "impact": numberType().min(1).max(getInitiativeResponseRisksItemImpactMax),
+    "residualProbability": numberType().min(1).max(getInitiativeResponseRisksItemResidualProbabilityMax).optional(),
+    "residualImpact": numberType().min(1).max(getInitiativeResponseRisksItemResidualImpactMax).optional(),
+    "status": enumType(["open", "mitigating", "closed", "occurred"]),
+    "owner": stringType().max(getInitiativeResponseRisksItemOwnerMax).optional(),
+    "mitigation": stringType().max(getInitiativeResponseRisksItemMitigationMax).optional(),
+    "raisedDate": stringType().regex(getInitiativeResponseRisksItemRaisedDateRegExp).optional(),
+    "reviewDate": stringType().regex(getInitiativeResponseRisksItemReviewDateRegExp).optional(),
+    "occurredDate": stringType().regex(getInitiativeResponseRisksItemOccurredDateRegExp).optional(),
+    "note": stringType().max(getInitiativeResponseRisksItemNoteMax).optional()
+  }).describe("A concrete project risk, or an issue when status is occurred (docs/risks-issues-follow-ups-concept-2026-10-19.md). Probability and impact are integers 1-5; the residual pair (after mitigation) is sent as a pair or not at all. Dates are yyyy-mm-dd.")).max(getInitiativeResponseRisksMax).optional(),
   "dependsOn": arrayType(stringType()).max(getInitiativeResponseDependsOnMax),
   "requiredSkills": arrayType(objectType({
     "skillId": stringType(),
@@ -6390,6 +6558,18 @@ var updateInitiativeBodyOneMilestonesItemForecastDateRegExp = new RegExp("^\\d{4
 var updateInitiativeBodyOneMilestonesItemDoneDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
 var updateInitiativeBodyOneMilestonesItemNoteMax = 1e4;
 var updateInitiativeBodyOneMilestonesMax = 30;
+var updateInitiativeBodyOneRisksItemTitleMax = 300;
+var updateInitiativeBodyOneRisksItemProbabilityMax = 5;
+var updateInitiativeBodyOneRisksItemImpactMax = 5;
+var updateInitiativeBodyOneRisksItemResidualProbabilityMax = 5;
+var updateInitiativeBodyOneRisksItemResidualImpactMax = 5;
+var updateInitiativeBodyOneRisksItemOwnerMax = 300;
+var updateInitiativeBodyOneRisksItemMitigationMax = 1e4;
+var updateInitiativeBodyOneRisksItemRaisedDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var updateInitiativeBodyOneRisksItemReviewDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var updateInitiativeBodyOneRisksItemOccurredDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var updateInitiativeBodyOneRisksItemNoteMax = 1e4;
+var updateInitiativeBodyOneRisksMax = 50;
 var updateInitiativeBodyOneDependsOnMax = 1e3;
 var updateInitiativeBodyOneRequiredSkillsItemRunFteMin = 0;
 var updateInitiativeBodyOneRequiredSkillsMax = 1e3;
@@ -6593,6 +6773,22 @@ var UpdateInitiativeBody = objectType({
     "doneDate": stringType().regex(updateInitiativeBodyOneMilestonesItemDoneDateRegExp).optional(),
     "note": stringType().max(updateInitiativeBodyOneMilestonesItemNoteMax).optional()
   }).describe("A dated intermediate result (docs/milestones-concept-2026-10-17.md). baselineDate is the agreed plan, forecastDate today's expectation (absent = the baseline), doneDate marks it reached; all yyyy-mm-dd.")).max(updateInitiativeBodyOneMilestonesMax).optional(),
+  "risks": arrayType(objectType({
+    "id": stringType(),
+    "title": stringType().min(1).max(updateInitiativeBodyOneRisksItemTitleMax),
+    "category": enumType(["delivery", "vendor", "data", "people", "regulatory", "technical", "financial"]),
+    "probability": numberType().min(1).max(updateInitiativeBodyOneRisksItemProbabilityMax),
+    "impact": numberType().min(1).max(updateInitiativeBodyOneRisksItemImpactMax),
+    "residualProbability": numberType().min(1).max(updateInitiativeBodyOneRisksItemResidualProbabilityMax).optional(),
+    "residualImpact": numberType().min(1).max(updateInitiativeBodyOneRisksItemResidualImpactMax).optional(),
+    "status": enumType(["open", "mitigating", "closed", "occurred"]),
+    "owner": stringType().max(updateInitiativeBodyOneRisksItemOwnerMax).optional(),
+    "mitigation": stringType().max(updateInitiativeBodyOneRisksItemMitigationMax).optional(),
+    "raisedDate": stringType().regex(updateInitiativeBodyOneRisksItemRaisedDateRegExp).optional(),
+    "reviewDate": stringType().regex(updateInitiativeBodyOneRisksItemReviewDateRegExp).optional(),
+    "occurredDate": stringType().regex(updateInitiativeBodyOneRisksItemOccurredDateRegExp).optional(),
+    "note": stringType().max(updateInitiativeBodyOneRisksItemNoteMax).optional()
+  }).describe("A concrete project risk, or an issue when status is occurred (docs/risks-issues-follow-ups-concept-2026-10-19.md). Probability and impact are integers 1-5; the residual pair (after mitigation) is sent as a pair or not at all. Dates are yyyy-mm-dd.")).max(updateInitiativeBodyOneRisksMax).optional(),
   "dependsOn": arrayType(stringType()).max(updateInitiativeBodyOneDependsOnMax),
   "requiredSkills": arrayType(objectType({
     "skillId": stringType(),
@@ -6740,6 +6936,18 @@ var updateInitiativeResponseMilestonesItemForecastDateRegExp = new RegExp("^\\d{
 var updateInitiativeResponseMilestonesItemDoneDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
 var updateInitiativeResponseMilestonesItemNoteMax = 1e4;
 var updateInitiativeResponseMilestonesMax = 30;
+var updateInitiativeResponseRisksItemTitleMax = 300;
+var updateInitiativeResponseRisksItemProbabilityMax = 5;
+var updateInitiativeResponseRisksItemImpactMax = 5;
+var updateInitiativeResponseRisksItemResidualProbabilityMax = 5;
+var updateInitiativeResponseRisksItemResidualImpactMax = 5;
+var updateInitiativeResponseRisksItemOwnerMax = 300;
+var updateInitiativeResponseRisksItemMitigationMax = 1e4;
+var updateInitiativeResponseRisksItemRaisedDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var updateInitiativeResponseRisksItemReviewDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var updateInitiativeResponseRisksItemOccurredDateRegExp = new RegExp("^\\d{4}-\\d{2}-\\d{2}$");
+var updateInitiativeResponseRisksItemNoteMax = 1e4;
+var updateInitiativeResponseRisksMax = 50;
 var updateInitiativeResponseDependsOnMax = 1e3;
 var updateInitiativeResponseRequiredSkillsItemRunFteMin = 0;
 var updateInitiativeResponseRequiredSkillsMax = 1e3;
@@ -6943,6 +7151,22 @@ var UpdateInitiativeResponse = objectType({
     "doneDate": stringType().regex(updateInitiativeResponseMilestonesItemDoneDateRegExp).optional(),
     "note": stringType().max(updateInitiativeResponseMilestonesItemNoteMax).optional()
   }).describe("A dated intermediate result (docs/milestones-concept-2026-10-17.md). baselineDate is the agreed plan, forecastDate today's expectation (absent = the baseline), doneDate marks it reached; all yyyy-mm-dd.")).max(updateInitiativeResponseMilestonesMax).optional(),
+  "risks": arrayType(objectType({
+    "id": stringType(),
+    "title": stringType().min(1).max(updateInitiativeResponseRisksItemTitleMax),
+    "category": enumType(["delivery", "vendor", "data", "people", "regulatory", "technical", "financial"]),
+    "probability": numberType().min(1).max(updateInitiativeResponseRisksItemProbabilityMax),
+    "impact": numberType().min(1).max(updateInitiativeResponseRisksItemImpactMax),
+    "residualProbability": numberType().min(1).max(updateInitiativeResponseRisksItemResidualProbabilityMax).optional(),
+    "residualImpact": numberType().min(1).max(updateInitiativeResponseRisksItemResidualImpactMax).optional(),
+    "status": enumType(["open", "mitigating", "closed", "occurred"]),
+    "owner": stringType().max(updateInitiativeResponseRisksItemOwnerMax).optional(),
+    "mitigation": stringType().max(updateInitiativeResponseRisksItemMitigationMax).optional(),
+    "raisedDate": stringType().regex(updateInitiativeResponseRisksItemRaisedDateRegExp).optional(),
+    "reviewDate": stringType().regex(updateInitiativeResponseRisksItemReviewDateRegExp).optional(),
+    "occurredDate": stringType().regex(updateInitiativeResponseRisksItemOccurredDateRegExp).optional(),
+    "note": stringType().max(updateInitiativeResponseRisksItemNoteMax).optional()
+  }).describe("A concrete project risk, or an issue when status is occurred (docs/risks-issues-follow-ups-concept-2026-10-19.md). Probability and impact are integers 1-5; the residual pair (after mitigation) is sent as a pair or not at all. Dates are yyyy-mm-dd.")).max(updateInitiativeResponseRisksMax).optional(),
   "dependsOn": arrayType(stringType()).max(updateInitiativeResponseDependsOnMax),
   "requiredSkills": arrayType(objectType({
     "skillId": stringType(),
@@ -10241,6 +10465,9 @@ function assembleInitiative(input, now = /* @__PURE__ */ new Date()) {
   if (updates && spec.milestones === void 0) {
     warnings.push("milestones: none sent, and the app will offer this file as an update \u2014 it replaces the initiative's milestones, so any the app holds are removed. Send the full list to keep them.");
   }
+  if (updates) {
+    warnings.push("risks: this file cannot carry risks, and the app will offer it as an update \u2014 any risks the app holds for this initiative are removed. Re-enter them in the app after the import, or add the initiative's details there instead.");
+  }
   let businessUnit = spec.businessUnit;
   let aiCategory = spec.aiCategory;
   if (context) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bicon/mcp-composer",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "MCP server that helps an AI client compose a valid BICon portfolio initiative and hand it back as an import file (draft-first, no auth, no API calls).",
   "license": "UNLICENSED",
   "author": "BICon Establishment",