@codazen/harmonica-mcp 3.4.0 → 3.6.0

package/dist/index.js

@@ -21587,6 +21587,18 @@ async function fetchProjectInOrg(client, projectId, orgId) {
   }
   return project;
 }
+async function fetchSystemInOrg(client, systemId, orgId) {
+  const system = await client.getSystem(systemId);
+  if (!system) {
+    throw new Error(`System not found: "${systemId}"`);
+  }
+  if (system.orgId !== orgId) {
+    throw new Error(
+      `System "${systemId}" does not belong to the configured organization. Access denied.`
+    );
+  }
+  return system;
+}
 async function fetchBeatInOrg(client, beatId, orgId) {
   const beat = await client.getBeat(beatId);
   if (!beat) {
@@ -21968,7 +21980,7 @@ function registerActivityTools(server, ctx, client) {
     },
     async ({ projectId, limit, importance }) => {
       await assertProjectInOrg(client, projectId, ctx.orgId);
-      const { entries, hasMore } = await client.listProjectActivities(projectId, {
+      const { entries, hasMore } = await client.listSystemActivities(projectId, {
         limit: limit ?? 30,
         minImportance: importance
       });
@@ -22689,7 +22701,7 @@ function formatDeliveryPolicy(policy, unresolvedReason) {
 }
 function formatProjectContext(project, notes, orgCoda) {
   const sections = [];
-  sections.push(`# Project: ${project.title}`);
+  sections.push(`# System: ${project.title}`);
   sections.push(`**ID:** ${project.projectId}`);
   sections.push(`**Status:** ${project.status.replace("_", " ")}`);
   if (project.repoOwner && project.repoName) {
@@ -23275,7 +23287,7 @@ ${formatBeatDetail(beat)}${similarityWarning}` }] };
     async ({ projectId, beatId, status, includeArchived }) => {
       try {
         await assertProjectInOrg(client, projectId, ctx.orgId);
-        const revisions = beatId ? await client.listBeatRevisions(projectId, beatId, { status, includeArchived }) : await client.listProjectRevisions(projectId, { status, includeArchived });
+        const revisions = beatId ? await client.listBeatRevisions(projectId, beatId, { status, includeArchived }) : await client.listSystemRevisions(projectId, { status, includeArchived });
         return { content: [{ type: "text", text: formatRevisionSummaryTable(revisions) }] };
       } catch (err) {
         const message = err instanceof Error ? err.message : String(err);
@@ -23936,7 +23948,7 @@ function registerCheckTools(server, ctx, client) {
     },
     async ({ projectId }) => {
       try {
-        const checks = await client.listLatestProjectChecks(projectId);
+        const checks = await client.listLatestSystemChecks(projectId);
         if (checks.length === 0) {
           return { content: [{ type: "text", text: `No checks found for project ${projectId}.` }] };
         }
@@ -24316,18 +24328,6 @@ ${g.acceptanceCriteria}` : null,
       };
     }
   );
-  server.tool(
-    "list_deliverable_group_deliverables",
-    'List all Deliverables assigned to a DeliverableGroup. Use to answer "what deliverables are in this phase/milestone?" or "what has the team committed to in this engagement group?"',
-    {
-      deliverableGroupId: external_exports.string().describe("The DeliverableGroup ID")
-    },
-    async ({ deliverableGroupId }) => {
-      const items = await client.listDeliverableGroupDeliverables(deliverableGroupId);
-      const text = items.length === 0 ? "No deliverables in this group." : items.map((d) => `[${d.deliverableId}] teamspace: ${d.teamspaceId}`).join("\n");
-      return { content: [{ type: "text", text }] };
-    }
-  );
   server.tool(
     "list_deliverable_group_drops",
     'List all Drops linked to a DeliverableGroup. Use to answer "what releases are part of this phase?" or "which software drops are tied to this engagement milestone?"',
@@ -24385,108 +24385,6 @@ ${g.acceptanceCriteria}` : null,
   );
 }
 
-// ../../libs/harmonica-services/src/mcp/tools/deliverable-tools.ts
-var import_node_crypto = require("node:crypto");
-function registerDeliverableTools(server, ctx, client) {
-  server.tool(
-    "list_deliverables",
-    "List all Deliverables (tangible client-facing artifacts or milestones owed by a date \u2014 e.g. board deck, roadmap doc, audit report) for a Teamspace.",
-    {
-      teamspaceId: external_exports.string().describe("The teamspace ID")
-    },
-    async ({ teamspaceId }) => {
-      const deliverables = await client.listTeamspaceDeliverables(teamspaceId);
-      const text = deliverables.length === 0 ? "No deliverables found." : deliverables.map(
-        (d) => `[${d.deliverableId}] ${d.title} \u2014 ${d.status}${d.dueDate ? ` (due ${d.dueDate})` : ""}${d.deliverableGroupId ? ` (group: ${d.deliverableGroupId})` : ""}`
-      ).join("\n");
-      return { content: [{ type: "text", text }] };
-    }
-  );
-  server.tool(
-    "get_deliverable",
-    "Get a Deliverable (tangible client-facing artifact or milestone) by ID.",
-    {
-      deliverableId: external_exports.string().describe("The deliverable ID")
-    },
-    async ({ deliverableId }) => {
-      const d = await client.getDeliverable(deliverableId);
-      if (!d) return { content: [{ type: "text", text: `Deliverable not found: ${deliverableId}` }] };
-      const text = [
-        `ID: ${d.deliverableId}`,
-        `Title: ${d.title}`,
-        `Teamspace: ${d.teamspaceId}`,
-        `Status: ${d.status}`,
-        d.description ? `Description: ${d.description}` : null,
-        d.dueDate ? `Due: ${d.dueDate}` : null,
-        d.deliverableGroupId ? `Group: ${d.deliverableGroupId}` : null,
-        `Version: ${d.version}`,
-        `Created: ${d.createdAt}`
-      ].filter(Boolean).join("\n");
-      return { content: [{ type: "text", text }] };
-    }
-  );
-  server.tool(
-    "create_deliverable",
-    'Create a Deliverable in a Teamspace. A Deliverable is a tangible commitment the agency owes the client by a date \u2014 board presentation, roadmap document, audit report, design mockups, training session, etc. Use this when the user describes something we will hand over. Do NOT use this for software capabilities the product provides to its end users \u2014 those are Beats (use create_beat). Do NOT use this for context, assumptions, constraints, or decisions \u2014 those are Notes (use create_note). Recognition cue: phrases like "we owe them\u2026", "due by\u2026", "the deck", "the report" \u2192 Deliverable. "Users will be able to\u2026", "the screen that\u2026" \u2192 Beat.',
-    {
-      teamspaceId: external_exports.string().describe("The teamspace ID"),
-      title: external_exports.string().min(1).max(300).describe("Deliverable title"),
-      description: external_exports.string().max(2e3).optional().describe("Optional description"),
-      dueDate: external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional().describe("Due date (YYYY-MM-DD)"),
-      status: external_exports.enum(["draft", "active", "delivered", "cancelled"]).optional().describe("Initial status (default: draft)"),
-      deliverableGroupId: external_exports.string().optional().describe("Assign to a DeliverableGroup by ID at creation time")
-    },
-    async ({ teamspaceId, title, description, dueDate, status, deliverableGroupId }) => {
-      const deliverableId = `dlv-${(0, import_node_crypto.randomUUID)()}`;
-      const d = await client.createDeliverable({
-        deliverableId,
-        teamspaceId,
-        orgId: ctx.orgId,
-        title,
-        description,
-        dueDate,
-        status,
-        createdBy: ctx.user.userId,
-        ...deliverableGroupId !== void 0 && { deliverableGroupId }
-      });
-      return {
-        content: [{
-          type: "text",
-          text: `Created deliverable: [${d.deliverableId}] ${d.title} \u2014 ${d.status}`
-        }]
-      };
-    }
-  );
-  server.tool(
-    "update_deliverable",
-    "Update an existing Deliverable. Transition status as the artifact progresses: draft \u2192 active \u2192 delivered (or cancelled).",
-    {
-      deliverableId: external_exports.string().describe("The deliverable ID"),
-      title: external_exports.string().min(1).max(300).optional().describe("New title"),
-      description: external_exports.string().max(2e3).optional().describe("New description"),
-      dueDate: external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/).nullable().optional().describe("New due date (YYYY-MM-DD), or null to clear"),
-      status: external_exports.enum(["draft", "active", "delivered", "cancelled"]).optional().describe("New status"),
-      deliverableGroupId: external_exports.string().nullable().optional().describe("Assign to a DeliverableGroup by ID, or null to ungroup")
-    },
-    async ({ deliverableId, title, description, dueDate, status, deliverableGroupId }) => {
-      const updates = {};
-      if (title !== void 0) updates["title"] = title;
-      if (description !== void 0) updates["description"] = description;
-      if (dueDate !== void 0) updates["dueDate"] = dueDate;
-      if (status !== void 0) updates["status"] = status;
-      if (deliverableGroupId !== void 0) updates["deliverableGroupId"] = deliverableGroupId;
-      const d = await client.updateDeliverable(deliverableId, updates);
-      if (!d) return { content: [{ type: "text", text: `Deliverable not found: ${deliverableId}` }] };
-      return {
-        content: [{
-          type: "text",
-          text: `Updated deliverable: [${d.deliverableId}] ${d.title} \u2014 ${d.status}`
-        }]
-      };
-    }
-  );
-}
-
 // ../../libs/harmonica-services/src/mcp/tools/downbeat-harmony-report-tools.ts
 function formatQualifyingBeat(b) {
   return `- \`${b.beatId}\` ${b.title}: ${b.signals.join(", ")}`;
@@ -25241,7 +25139,7 @@ var STAGE_ENUM = external_exports.enum([
   "beta",
   "prod"
 ]);
-function registerFeatureFlagTools(server, _ctx, client) {
+function registerFeatureFlagTools(server, ctx, client) {
   server.tool(
     "list_flags",
     "List feature flags and their enabled stages. Use check_flag to test a single flag against a specific stage, or get_flag for full detail on one flag.",
@@ -25307,6 +25205,89 @@ function registerFeatureFlagTools(server, _ctx, client) {
       }
     }
   );
+  server.tool(
+    "create_flag",
+    "Create or update a feature flag with the specified enabled stages. Idempotent \u2014 calling with an existing flag name replaces its enabledIn list.",
+    {
+      name: external_exports.string().min(1).describe('Flag name (e.g. "rbac:enforcement")'),
+      enabledIn: external_exports.array(STAGE_ENUM).describe("Stages to enable the flag in"),
+      description: external_exports.string().optional().describe("Human-readable description of what this flag gates"),
+      note: external_exports.string().optional().describe("Reason for this change (recorded in change history)")
+    },
+    async ({ name, enabledIn, description, note }) => {
+      if (!ctx.user.email) {
+        return { content: [{ type: "text", text: "Write operations require an authenticated user with a valid email." }], isError: true };
+      }
+      try {
+        const flag = await client.createFlag(name, enabledIn, { description, note, updatedBy: ctx.user.email });
+        return { content: [{ type: "text", text: formatFlag(flag) }] };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to create flag: ${message}` }], isError: true };
+      }
+    }
+  );
+  server.tool(
+    "set_flag",
+    "Update which stages a feature flag is enabled in. Replaces the current enabledIn list entirely.",
+    {
+      name: external_exports.string().min(1).describe("Flag name"),
+      enabledIn: external_exports.array(STAGE_ENUM).describe("New set of stages to enable the flag in. Pass [] to disable everywhere without archiving."),
+      note: external_exports.string().optional().describe("Reason for this change (recorded in change history)")
+    },
+    async ({ name, enabledIn, note }) => {
+      if (!ctx.user.email) {
+        return { content: [{ type: "text", text: "Write operations require an authenticated user with a valid email." }], isError: true };
+      }
+      try {
+        const flag = await client.setFlag(name, enabledIn, { note, updatedBy: ctx.user.email });
+        return { content: [{ type: "text", text: formatFlag(flag) }] };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to set flag: ${message}` }], isError: true };
+      }
+    }
+  );
+  server.tool(
+    "archive_flag",
+    "Archive a feature flag. Clears its enabledIn list and marks it archived so it cannot be re-enabled via set_flag. Use unarchive_flag to restore it.",
+    {
+      name: external_exports.string().min(1).describe("Flag name"),
+      note: external_exports.string().optional().describe("Reason for archiving (recorded in change history)")
+    },
+    async ({ name, note }) => {
+      if (!ctx.user.email) {
+        return { content: [{ type: "text", text: "Write operations require an authenticated user with a valid email." }], isError: true };
+      }
+      try {
+        const flag = await client.archiveFlag(name, { note, updatedBy: ctx.user.email });
+        return { content: [{ type: "text", text: formatFlag(flag) }] };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to archive flag: ${message}` }], isError: true };
+      }
+    }
+  );
+  server.tool(
+    "unarchive_flag",
+    "Restore an archived feature flag to operable state. The flag is re-enabled with an empty enabledIn list \u2014 use set_flag afterward to enable it in specific stages.",
+    {
+      name: external_exports.string().min(1).describe("Flag name"),
+      note: external_exports.string().optional().describe("Reason for restoring (recorded in change history)")
+    },
+    async ({ name, note }) => {
+      if (!ctx.user.email) {
+        return { content: [{ type: "text", text: "Write operations require an authenticated user with a valid email." }], isError: true };
+      }
+      try {
+        const flag = await client.unarchiveFlag(name, { note, updatedBy: ctx.user.email });
+        return { content: [{ type: "text", text: formatFlag(flag) }] };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to unarchive flag: ${message}` }], isError: true };
+      }
+    }
+  );
 }
 function formatFlag(flag, history) {
   const archived = flag.archivedAt ? " **(archived)**" : "";
@@ -25316,7 +25297,8 @@ function formatFlag(flag, history) {
     `**Scope:** ${flag.scope}`,
     `**Enabled in:** ${enabled}`,
     flag.description ? `**Description:** ${flag.description}` : null,
-    `**Last updated:** ${flag.updatedAt.slice(0, 10)} by ${flag.updatedBy}`
+    `**Last updated:** ${flag.updatedAt.slice(0, 10)} by ${flag.updatedBy}`,
+    flag.archivedAt ? `**Archived:** ${flag.archivedAt.slice(0, 10)} by ${flag.archivedBy}` : null
   ].filter(Boolean).join("\n");
   if (!history?.length) return parts;
   const historyLines = history.map((h) => {
@@ -28429,7 +28411,7 @@ ${lines.join("\n")}` }] };
 }
 
 // ../../libs/harmonica-services/src/mcp/tools/onboarding-tools.ts
-var import_node_crypto2 = require("node:crypto");
+var import_node_crypto = require("node:crypto");
 var OnboardingNoteInputSchema = external_exports.object({
   noteType: external_exports.enum(["context", "assumption", "constraint", "guidance", "decision"]),
   content: external_exports.string().min(1),
@@ -28441,11 +28423,6 @@ var OnboardingProjectInputSchema = external_exports.object({
   description: external_exports.string().max(2e3).optional(),
   notes: external_exports.array(OnboardingNoteInputSchema).optional()
 });
-var OnboardingDeliverableInputSchema = external_exports.object({
-  title: external_exports.string().min(1).max(300),
-  description: external_exports.string().max(2e3).optional(),
-  dueDate: external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional()
-});
 function registerOnboardingTools(server, ctx, client) {
   server.tool(
     "initiate_teamspace_onboarding",
@@ -28543,7 +28520,7 @@ function registerOnboardingTools(server, ctx, client) {
   server.tool(
     "create_teamspace_onboarding_batch",
     [
-      "Create a Teamspace, Projects, Notes, and Deliverables",
+      "Create a Teamspace, Projects, and Notes",
       "from a PM-approved onboarding payload in a single batch operation.",
       "Call this after the PM approves the pre-flight review card from initiate_teamspace_onboarding.",
       "Returns a creation receipt with IDs and counts for all created entities.",
@@ -28552,20 +28529,18 @@ function registerOnboardingTools(server, ctx, client) {
     {
       teamspaceName: external_exports.string().min(1).max(200).describe("Teamspace display name"),
       projects: external_exports.array(OnboardingProjectInputSchema).min(1).describe("Phase 1 projects to create, each linked to the Teamspace"),
-      teamspaceNotes: external_exports.array(OnboardingNoteInputSchema).describe("Constraints, assumptions, and context notes at the Teamspace/project level"),
-      deliverables: external_exports.array(OnboardingDeliverableInputSchema).describe("Deliverables detected from commitment language in documents")
+      teamspaceNotes: external_exports.array(OnboardingNoteInputSchema).describe("Constraints, assumptions, and context notes at the Teamspace/project level")
     },
     async ({
       teamspaceName,
       projects,
-      teamspaceNotes,
-      deliverables
+      teamspaceNotes
     }) => {
       const lines = [];
       let teamspace;
       try {
         teamspace = await client.createTeamspace({
-          teamspaceId: (0, import_node_crypto2.randomUUID)(),
+          teamspaceId: (0, import_node_crypto.randomUUID)(),
           slug: teamspaceName.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, ""),
           orgId: ctx.orgId,
           name: teamspaceName,
@@ -28582,8 +28557,8 @@ Error: ${msg}`);
       const createdProjects = [];
       for (const p of projects) {
         try {
-          const project = await client.createProject({
-            projectId: (0, import_node_crypto2.randomUUID)(),
+          const project = await client.createSystem({
+            projectId: (0, import_node_crypto.randomUUID)(),
             orgId: ctx.orgId,
             teamspaceId: teamspace.teamspaceId,
             ownerUserId: ctx.user?.userId ?? "system",
@@ -28627,7 +28602,7 @@ Projects (${createdProjects.length}):`);
         for (const note of projects[i]?.notes ?? []) {
           try {
             const n = await client.createNote({
-              noteId: `N-TEMP-${(0, import_node_crypto2.randomUUID)()}`,
+              noteId: `N-TEMP-${(0, import_node_crypto.randomUUID)()}`,
               // overridden server-side
               projectId: project.projectId,
               noteType: note.noteType,
@@ -28644,24 +28619,6 @@ Projects (${createdProjects.length}):`);
       }
       lines.push(`
 Notes filed: ${createdNotes.length}`);
-      const createdDeliverables = [];
-      for (const d of deliverables) {
-        try {
-          const del = await client.createDeliverable({
-            deliverableId: (0, import_node_crypto2.randomUUID)(),
-            // overridden server-side
-            teamspaceId: teamspace.teamspaceId,
-            orgId: ctx.orgId,
-            title: d.title,
-            description: d.description,
-            dueDate: d.dueDate,
-            createdBy: ctx.user?.userId ?? "mcp"
-          });
-          createdDeliverables.push(del.deliverableId);
-        } catch {
-        }
-      }
-      lines.push(`Deliverables: ${createdDeliverables.length}`);
       lines.unshift(`\u2705 Onboarding batch created successfully.`);
       return { content: [{ type: "text", text: lines.join("\n") }] };
     }
@@ -29967,7 +29924,7 @@ function registerSessionTools(server, ctx, client) {
       includeTerminal: external_exports.boolean().optional().describe("Include terminal (closed) sessions. Default false.")
     },
     async ({ systemId, status, includeTerminal }) => {
-      const sessions = await client.listProjectSessions(systemId, {
+      const sessions = await client.listSystemSessions(systemId, {
         status,
         includeTerminal
       });
@@ -30634,7 +30591,7 @@ function registerProjectTools(server, ctx, client) {
         fetchProjectInOrg(client, systemId, ctx.orgId),
         client.getOrg(ctx.orgId)
       ]);
-      const notes = await client.listProjectNotes(systemId, {
+      const notes = await client.listSystemNotes(systemId, {
         limit: noteLimit ?? DEFAULT_CONTEXT_NOTE_LIMIT
       });
       const text = formatProjectContext(project, notes, org?.coda);
@@ -30802,7 +30759,7 @@ function registerProjectTools(server, ctx, client) {
 }
 
 // ../../libs/harmonica-services/src/mcp/tools/teamspace-tools.ts
-var import_node_crypto3 = require("node:crypto");
+var import_node_crypto2 = require("node:crypto");
 var EnsembleMemberSchema = external_exports.discriminatedUnion("type", [
   external_exports.object({ type: external_exports.literal("human"), email: external_exports.string().email().max(254), name: external_exports.string().min(1).max(200) }),
   external_exports.object({ type: external_exports.literal("agent"), agentId: external_exports.string().min(1).max(100), name: external_exports.string().min(1).max(200) })
@@ -30841,7 +30798,7 @@ function registerTeamspaceTools(server, ctx, client) {
         if (!ts || ts.orgId !== ctx.orgId) {
           return { content: [{ type: "text", text: `Teamspace not found: ${teamspaceId}` }], isError: true };
         }
-        const allProjects = await client.listOrgProjects(ctx.orgId);
+        const allProjects = await client.listOrgSystems(ctx.orgId);
         const tsProjects = allProjects.filter((p) => p.teamspaceId === teamspaceId);
         const lines = [
           `ID: ${ts.teamspaceId}`,
@@ -30878,7 +30835,7 @@ function registerTeamspaceTools(server, ctx, client) {
       name: external_exports.string().min(1).max(200).describe("Teamspace name")
     },
     async ({ name }) => {
-      const teamspaceId = `ts-${(0, import_node_crypto3.randomUUID)()}`;
+      const teamspaceId = `ts-${(0, import_node_crypto2.randomUUID)()}`;
       const slug = generateTeamspaceSlug(name);
       const ts = await client.createTeamspace({
         teamspaceId,
@@ -31016,7 +30973,7 @@ function registerValueVelocityTools(server, ctx, client) {
       try {
         await assertProjectInOrg(client, systemId, ctx.orgId);
         const [rankedResult, staleWResult] = await Promise.allSettled([
-          withLeverage ? client.rankProjectBeatVersionsWithLeverage(systemId, lens) : client.rankProjectBeatVersions(systemId, lens),
+          withLeverage ? client.rankSystemBeatVersionsWithLeverage(systemId, lens) : client.rankSystemBeatVersions(systemId, lens),
           client.getStaleWBeatIds(systemId)
         ]);
         if (rankedResult.status === "rejected") {
@@ -31510,7 +31467,7 @@ ${JSON.stringify(task.result, null, 2)}
     },
     async ({ projectId, status, limit }) => {
       await assertProjectInOrg(client, projectId, ctx.orgId);
-      const tasks = await client.listProjectTasks(projectId, {
+      const tasks = await client.listSystemTasks(projectId, {
         status,
         limit
       });
@@ -31568,7 +31525,7 @@ ${JSON.stringify(task.result, null, 2)}
     },
     async ({ projectId, status, limit }) => {
       await assertProjectInOrg(client, projectId, ctx.orgId);
-      const tasks = await client.listProjectTasks(projectId, {
+      const tasks = await client.listSystemTasks(projectId, {
         status,
         limit
       });
@@ -31870,7 +31827,6 @@ var TOOL_PROFILES = Object.freeze({
     allow(registerBeatVersionTools, ["list_beat_versions", "get_beat_version"]),
     allow(registerNoteTools, ["list_notes", "get_note", "create_note", "list_documents"]),
     allow(registerDropTools, ["list_drops", "get_drop"]),
-    allow(registerDeliverableTools, ["list_deliverables", "get_deliverable"]),
     allow(registerEmbeddingTools, ["search", "find_similar_notes"])
   ])
 });
@@ -31923,7 +31879,6 @@ function registerAllTools(server, ctx, client, profile) {
   registerBaselineTools(server, ctx, client);
   registerTeamspaceTools(server, ctx, client);
   registerDeliverableGroupTools(server, ctx, client);
-  registerDeliverableTools(server, ctx, client);
   registerDropTools(server, ctx, client);
   registerSessionTools(server, ctx, client);
   registerOnboardingTools(server, ctx, client);
@@ -31942,12 +31897,12 @@ function registerAllTools(server, ctx, client, profile) {
 // ../../libs/harmonica-services/src/mcp/resources/beat-resources.ts
 function registerBeatResources(server, ctx, client) {
   server.resource(
-    "project-beats",
-    new ResourceTemplate("harmonica://project/{projectId}/beats", { list: void 0 }),
-    async (uri, { projectId }) => {
-      const pid = String(projectId);
-      await assertProjectInOrg(client, pid, ctx.orgId);
-      const beats = await client.listSystemBeats(pid);
+    "system-beats",
+    new ResourceTemplate("harmonica://system/{systemId}/beats", { list: void 0 }),
+    async (uri, { systemId }) => {
+      const sid = String(systemId);
+      await fetchSystemInOrg(client, sid, ctx.orgId);
+      const beats = await client.listSystemBeats(sid);
       const text = formatBeatSummaryTable(beats);
       return { contents: [{ uri: uri.href, text }] };
     }
@@ -31982,14 +31937,14 @@ function registerGuidelinesResources(server, client) {
 }
 
 // ../../libs/harmonica-services/src/mcp/resources/system-resources.ts
-function registerProjectResources(server, ctx, client) {
+function registerSystemResources(server, ctx, client) {
   server.resource(
-    "project-context",
-    new ResourceTemplate("harmonica://project/{projectId}/context", { list: void 0 }),
-    async (uri, { projectId }) => {
-      const pid = String(projectId);
-      const project = await fetchProjectInOrg(client, pid, ctx.orgId);
-      const notes = await client.listSystemNotes(pid, { limit: DEFAULT_CONTEXT_NOTE_LIMIT });
+    "system-context",
+    new ResourceTemplate("harmonica://system/{systemId}/context", { list: void 0 }),
+    async (uri, { systemId }) => {
+      const sid = String(systemId);
+      const project = await fetchSystemInOrg(client, sid, ctx.orgId);
+      const notes = await client.listSystemNotes(sid, { limit: DEFAULT_CONTEXT_NOTE_LIMIT });
       const text = formatProjectContext(project, notes);
       return { contents: [{ uri: uri.href, text }] };
     }
@@ -31998,7 +31953,7 @@ function registerProjectResources(server, ctx, client) {
 
 // ../../libs/harmonica-services/src/mcp/resources/index.ts
 function registerAllResources(server, ctx, client) {
-  registerProjectResources(server, ctx, client);
+  registerSystemResources(server, ctx, client);
   registerBeatResources(server, ctx, client);
   registerGuidelinesResources(server, client);
 }
@@ -32269,46 +32224,11 @@ function createHttpClient(config2) {
       if (!raw) return void 0;
       return { ...raw, projectId: raw.id ?? raw.projectId, title: raw.name ?? raw.title, orgId: raw.organizationId ?? raw.orgId };
     },
-    // @deprecated aliases — remove in cleanup increment (BV2)
-    listOrgProjects: async (orgId) => {
-      const raw = await request("GET", `/api/organizations/${encodeURIComponent(orgId)}/projects/summaries`);
-      return (raw ?? []).map((p) => ({ ...p, projectId: p.id, title: p.name, orgId: p.organizationId }));
-    },
-    getProject: async (projectId) => {
-      const raw = await request("GET", `/api/systems/${encodeURIComponent(projectId)}`);
-      if (!raw) return void 0;
-      return {
-        ...raw,
-        projectId: raw.id ?? raw.projectId,
-        title: raw.name ?? raw.title,
-        orgId: raw.organizationId ?? raw.orgId
-      };
-    },
-    createProject: async (input) => {
-      const raw = await request("POST", "/api/systems", {
-        organizationId: input.orgId,
-        teamspaceId: input.teamspaceId,
-        name: input.title,
-        description: input.description,
-        strategy: input.strategy,
-        // Without this the owning Account is dropped on the wire and the System
-        // is created unlinked — invisible in the Account's Systems list.
-        ...input.accountId !== void 0 && { accountId: input.accountId }
-      });
-      return { ...raw, orgId: raw?.organizationId ?? raw?.orgId };
-    },
-    updateProject: (projectId, updates) => request("PATCH", `/api/systems/${encodeURIComponent(projectId)}`, updates),
-    archiveProject: (projectId) => request("PATCH", `/api/systems/${encodeURIComponent(projectId)}/archive`),
     getSystemFact: async (projectId) => {
       const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/facts`);
       return result?.data;
     },
-    getProjectFact: async (projectId) => {
-      const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/facts`);
-      return result?.data;
-    },
     saveSystemFact: (input) => request("PUT", `/api/systems/${encodeURIComponent(String(input.projectId))}/facts`, input),
-    saveProjectFact: (input) => request("PUT", `/api/systems/${encodeURIComponent(String(input.projectId))}/facts`, input),
     transitionSystemLifecycleState: async (projectId, targetState, options) => {
       return request("POST", `/api/systems/${encodeURIComponent(projectId)}/lifecycle/transitions`, {
         targetState,
@@ -32316,13 +32236,6 @@ function createHttpClient(config2) {
         decisionNoteId: options.decisionNoteId
       });
     },
-    transitionProjectLifecycleState: async (projectId, targetState, options) => {
-      return request("POST", `/api/systems/${encodeURIComponent(projectId)}/lifecycle/transitions`, {
-        targetState,
-        reason: options.reason,
-        decisionNoteId: options.decisionNoteId
-      });
-    },
     // Beats
     getNextBeatId: async (projectId) => {
       const result = await request("POST", `/api/systems/${encodeURIComponent(projectId)}/beats/next-id`);
@@ -32500,22 +32413,6 @@ function createHttpClient(config2) {
       const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/notes${qs}`);
       return result?.notes ?? [];
     },
-    listProjectNotes: async (projectId, filters) => {
-      const params = new URLSearchParams();
-      if (filters?.noteType) {
-        const types = Array.isArray(filters.noteType) ? filters.noteType : [filters.noteType];
-        types.forEach((t) => params.append("type", t));
-      }
-      if (filters?.status) params.set("status", filters.status);
-      if (filters?.revisionId) params.set("revisionId", filters.revisionId);
-      if (filters?.beatVersionId) params.set("beatVersionId", filters.beatVersionId);
-      if (filters?.excludeChildren) params.set("excludeChildren", "true");
-      if (filters?.significance) params.set("significance", filters.significance);
-      if (filters?.limit !== void 0) params.set("limit", String(filters.limit));
-      const qs = params.toString() ? `?${params.toString()}` : "";
-      const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/notes${qs}`);
-      return result?.notes ?? [];
-    },
     listAllSystemNotes: async (projectId, filters, limit, cursor) => {
       const params = new URLSearchParams();
       if (filters?.noteType) {
@@ -32534,24 +32431,6 @@ function createHttpClient(config2) {
       const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/notes/all${qs}`);
       return { notes: result?.notes ?? [], cursor: result?.cursor, hasMore: result?.hasMore ?? false };
     },
-    listAllProjectNotes: async (projectId, filters, limit, cursor) => {
-      const params = new URLSearchParams();
-      if (filters?.noteType) {
-        const types = Array.isArray(filters.noteType) ? filters.noteType : [filters.noteType];
-        types.forEach((t) => params.append("type", t));
-      }
-      if (filters?.excludeNoteType) params.set("excludeType", filters.excludeNoteType);
-      if (filters?.status) params.set("status", filters.status);
-      if (filters?.revisionId) params.set("revisionId", filters.revisionId);
-      if (filters?.beatVersionId) params.set("beatVersionId", filters.beatVersionId);
-      if (filters?.excludeChildren) params.set("excludeChildren", "true");
-      if (filters?.significance) params.set("significance", filters.significance);
-      if (limit !== void 0) params.set("limit", String(limit));
-      if (cursor !== void 0) params.set("cursor", cursor);
-      const qs = params.toString() ? `?${params.toString()}` : "";
-      const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/notes/all${qs}`);
-      return { notes: result?.notes ?? [], cursor: result?.cursor, hasMore: result?.hasMore ?? false };
-    },
     listBeatNotes: async (beatId, filters) => {
       const beat = await request("GET", `/api/beats/${encodeURIComponent(beatId)}`);
       if (!beat) return [];
@@ -32644,7 +32523,6 @@ function createHttpClient(config2) {
     },
     // Gaps are deprecated — replaced by assumption Notes. Return empty results.
     getSystemGaps: async () => [],
-    getProjectGaps: async () => [],
     updateInformationGap: async () => false,
     // Revisions
     createRevision: async (projectId, beatId, input) => {
@@ -32669,14 +32547,6 @@ function createHttpClient(config2) {
       const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/revisions${qs}`);
       return result ?? [];
     },
-    listProjectRevisions: async (projectId, options) => {
-      const params = new URLSearchParams();
-      if (options?.status) params.set("status", options.status);
-      if (options?.includeArchived) params.set("includeArchived", "true");
-      const qs = params.toString() ? `?${params.toString()}` : "";
-      const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/revisions${qs}`);
-      return result ?? [];
-    },
     listBeatRevisions: async (projectId, beatId, options) => {
       const params = new URLSearchParams();
       params.set("beatId", beatId);
@@ -32906,14 +32776,6 @@ function createHttpClient(config2) {
       const result = await request("GET", `/api/sessions?${params.toString()}`);
       return result ?? [];
     },
-    listProjectSessions: async (projectId, options) => {
-      const params = new URLSearchParams();
-      params.set("projectId", projectId);
-      if (options?.status) params.set("status", options.status);
-      if (options?.includeTerminal) params.set("includeTerminal", "true");
-      const result = await request("GET", `/api/sessions?${params.toString()}`);
-      return result ?? [];
-    },
     listBeatSessions: async (beatId, options) => {
       const params = new URLSearchParams();
       params.set("beatId", beatId);
@@ -33101,14 +32963,6 @@ function createHttpClient(config2) {
       const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/tasks${qs}`);
       return result?.tasks ?? [];
     },
-    listProjectTasks: async (projectId, options) => {
-      const params = new URLSearchParams();
-      if (options?.status) params.set("status", options.status);
-      if (options?.limit) params.set("limit", String(options.limit));
-      const qs = params.toString() ? `?${params.toString()}` : "";
-      const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/tasks${qs}`);
-      return result?.tasks ?? [];
-    },
     listTaskEvents: async (taskId, options) => {
       const params = new URLSearchParams();
       if (options?.afterSeq !== void 0) params.set("after", String(options.afterSeq));
@@ -33141,15 +32995,6 @@ function createHttpClient(config2) {
       const result = await request("GET", path);
       return { entries: result.activities ?? [], hasMore: false };
     },
-    listProjectActivities: async (projectId, options) => {
-      const params = new URLSearchParams();
-      if (options?.limit) params.set("limit", String(options.limit));
-      if (options?.minImportance) params.set("importance", options.minImportance);
-      const qs = params.toString();
-      const path = `/api/systems/${encodeURIComponent(projectId)}/activities${qs ? `?${qs}` : ""}`;
-      const result = await request("GET", path);
-      return { entries: result.activities ?? [], hasMore: false };
-    },
     createActivity: async (input) => {
       const result = await request("POST", `/api/systems/${encodeURIComponent(input.projectId)}/activities`, {
         action: input.action,
@@ -33224,20 +33069,6 @@ function createHttpClient(config2) {
       );
       return result.ranked ?? [];
     },
-    rankProjectBeatVersions: async (projectId, lens) => {
-      const result = await request(
-        "GET",
-        `/api/systems/${encodeURIComponent(projectId)}/beat-versions/ranked?lens=${encodeURIComponent(lens)}`
-      );
-      return result.ranked ?? [];
-    },
-    rankProjectBeatVersionsWithLeverage: async (projectId, lens) => {
-      const result = await request(
-        "GET",
-        `/api/systems/${encodeURIComponent(projectId)}/beat-versions/ranked?lens=${encodeURIComponent(lens)}&withLeverage=true`
-      );
-      return result.ranked ?? [];
-    },
     // All four use requestOrThrow, not request. These endpoints answer 404 for a
     // missing edge/Beat with a real domain message, and `request()` turns a 404
     // into `undefined` — so the old `result.edge` access threw
@@ -33536,18 +33367,6 @@ function createHttpClient(config2) {
       );
       return { checks: res?.checks ?? [], nextCursor: res?.nextCursor };
     },
-    listProjectChecks: async (projectId, checkType, options) => {
-      const params = new URLSearchParams();
-      if (checkType) params.set("type", checkType);
-      if (options?.limit !== void 0) params.set("limit", String(options.limit));
-      if (options?.cursor) params.set("cursor", options.cursor);
-      const qs = params.toString() ? `?${params.toString()}` : "";
-      const res = await request(
-        "GET",
-        `/api/systems/${encodeURIComponent(projectId)}/checks${qs}`
-      );
-      return { checks: res?.checks ?? [], nextCursor: res?.nextCursor };
-    },
     listLatestSystemChecks: async (projectId) => {
       const res = await request(
         "GET",
@@ -33555,13 +33374,6 @@ function createHttpClient(config2) {
       );
       return res?.checks ?? [];
     },
-    listLatestProjectChecks: async (projectId) => {
-      const res = await request(
-        "GET",
-        `/api/checks/latest?projectId=${encodeURIComponent(projectId)}`
-      );
-      return res?.checks ?? [];
-    },
     listBeatChecks: async (beatId, projectId, checkType) => {
       const qs = checkType ? `?type=${encodeURIComponent(checkType)}` : "";
       const res = await request(
@@ -33621,20 +33433,6 @@ function createHttpClient(config2) {
     updateTeamspace: async (teamspaceId, updates) => {
       return request("PATCH", `/api/teamspaces/${encodeURIComponent(teamspaceId)}`, updates);
     },
-    // Deliverables
-    listTeamspaceDeliverables: async (teamspaceId) => {
-      const res = await request("GET", `/api/teamspaces/${encodeURIComponent(teamspaceId)}/deliverables`);
-      return res?.deliverables ?? [];
-    },
-    getDeliverable: async (deliverableId) => {
-      return request("GET", `/api/deliverables/${encodeURIComponent(deliverableId)}`);
-    },
-    createDeliverable: async (input) => {
-      return request("POST", `/api/teamspaces/${encodeURIComponent(input.teamspaceId)}/deliverables`, input);
-    },
-    updateDeliverable: async (deliverableId, updates) => {
-      return request("PATCH", `/api/deliverables/${encodeURIComponent(deliverableId)}`, updates);
-    },
     // DeliverableGroups
     listTeamspaceDeliverableGroups: async (teamspaceId) => {
       const res = await request("GET", `/api/teamspaces/${encodeURIComponent(teamspaceId)}/deliverable-groups`);
@@ -33646,11 +33444,6 @@ function createHttpClient(config2) {
       if (res === void 0) throw new Error(`Project ${projectId} not found`);
       return res.deliverableGroups;
     },
-    listProjectDeliverableGroups: async (projectId) => {
-      const res = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/deliverable-groups`);
-      if (res === void 0) throw new Error(`Project ${projectId} not found`);
-      return res.deliverableGroups;
-    },
     listMovementDeliverableGroups: async (movementId) => {
       const res = await request("GET", `/api/movements/${encodeURIComponent(movementId)}/deliverable-groups`);
       if (res === void 0) throw new Error(`Movement ${movementId} not found`);
@@ -33687,10 +33480,6 @@ function createHttpClient(config2) {
         ...opts ?? {}
       });
     },
-    listDeliverableGroupDeliverables: async (deliverableGroupId) => {
-      const res = await request("GET", `/api/deliverable-groups/${encodeURIComponent(deliverableGroupId)}/deliverables`);
-      return res?.deliverables ?? [];
-    },
     listDeliverableGroupDrops: async (deliverableGroupId) => {
       const res = await request("GET", `/api/deliverable-groups/${encodeURIComponent(deliverableGroupId)}/drops`);
       return res?.drops ?? [];
@@ -34270,16 +34059,54 @@ function createHttpClient(config2) {
       );
       return result?.usedBy;
     },
-    // Feature flags (B-135 v9) — not available in HTTP transport; the published
-    // npm package has no DynamoDB credentials.
-    listFlags: async () => {
-      throw new Error("Feature flag queries are not available in HTTP transport mode");
+    // Feature flags (B-135 v11) — routed through /api/mcp/feature-flags/* so the
+    // published npm package (no DynamoDB credentials) can manage flags via HTTP.
+    listFlags: async (options) => {
+      const params = new URLSearchParams();
+      if (options?.includeArchived) params.set("includeArchived", "true");
+      if (options?.search) params.set("search", options.search);
+      if (options?.cursor) params.set("cursor", options.cursor);
+      if (options?.limit !== void 0) params.set("limit", String(options.limit));
+      const qs = params.toString();
+      return requestOrThrow(
+        "GET",
+        `/api/mcp/feature-flags${qs ? `?${qs}` : ""}`
+      );
+    },
+    getFlag: async (name, options) => {
+      const qs = options?.includeHistory ? "?includeHistory=true" : "";
+      return request("GET", `/api/mcp/feature-flags/${encodeURIComponent(name)}${qs}`);
+    },
+    checkFlag: async (name, stage) => {
+      const flag = await request(
+        "GET",
+        `/api/mcp/feature-flags/${encodeURIComponent(name)}`
+      );
+      return flag ? flag.enabledIn.includes(stage) : false;
+    },
+    createFlag: async (name, enabledIn, options) => {
+      return requestOrThrow("POST", "/api/mcp/feature-flags", {
+        name,
+        enabledIn,
+        description: options?.description,
+        note: options?.note
+      });
     },
-    getFlag: async () => {
-      throw new Error("Feature flag queries are not available in HTTP transport mode");
+    setFlag: async (name, enabledIn, options) => {
+      return requestOrThrow("PUT", `/api/mcp/feature-flags/${encodeURIComponent(name)}`, {
+        enabledIn,
+        note: options?.note
+      });
+    },
+    archiveFlag: async (name, options) => {
+      return requestOrThrow("POST", `/api/mcp/feature-flags/${encodeURIComponent(name)}/archive`, {
+        note: options?.note
+      });
     },
-    checkFlag: async () => {
-      throw new Error("Feature flag queries are not available in HTTP transport mode");
+    unarchiveFlag: async (name, options) => {
+      return requestOrThrow("POST", `/api/mcp/feature-flags/${encodeURIComponent(name)}/unarchive`, {
+        note: options?.note
+      });
     }
   };
   return client;
@@ -34330,7 +34157,7 @@ function loadConfig() {
   };
 }
 async function main() {
-  console.error(`[harmonica-mcp] v${"3.4.0"} starting\u2026`);
+  console.error(`[harmonica-mcp] v${"3.6.0"} starting\u2026`);
   const config2 = loadConfig();
   const client = createHttpClient({
     apiBaseUrl: config2.apiBaseUrl,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codazen/harmonica-mcp",
-  "version": "3.4.0",
+  "version": "3.6.0",
   "description": "MCP server for Harmonica — connect any MCP-compatible AI assistant to Harmonica",
   "license": "MIT",
   "bin": {