@codazen/harmonica-mcp 3.5.0 → 3.6.1

package/dist/index.js

@@ -21587,6 +21587,18 @@ async function fetchProjectInOrg(client, projectId, orgId) {
   }
   return project;
 }
+async function fetchSystemInOrg(client, systemId, orgId) {
+  const system = await client.getSystem(systemId);
+  if (!system) {
+    throw new Error(`System not found: "${systemId}"`);
+  }
+  if (system.orgId !== orgId) {
+    throw new Error(
+      `System "${systemId}" does not belong to the configured organization. Access denied.`
+    );
+  }
+  return system;
+}
 async function fetchBeatInOrg(client, beatId, orgId) {
   const beat = await client.getBeat(beatId);
   if (!beat) {
@@ -21968,7 +21980,7 @@ function registerActivityTools(server, ctx, client) {
     },
     async ({ projectId, limit, importance }) => {
       await assertProjectInOrg(client, projectId, ctx.orgId);
-      const { entries, hasMore } = await client.listProjectActivities(projectId, {
+      const { entries, hasMore } = await client.listSystemActivities(projectId, {
         limit: limit ?? 30,
         minImportance: importance
       });
@@ -22362,7 +22374,7 @@ function registerBeatConvergenceTools(server, ctx, client) {
     { beatId: external_exports.string().describe("The beat ID (e.g., TF-B-001)") },
     async ({ beatId }) => {
       const beat = await fetchBeatInOrg(client, beatId, ctx.orgId);
-      const report = await client.getBeatConvergence(beat.projectId, beatId);
+      const report = await client.getBeatConvergence(beat.systemId ?? beat.projectId, beatId);
       if (!report) {
         return { content: [{ type: "text", text: `No convergence data for beat "${beatId}".` }], isError: true };
       }
@@ -22689,7 +22701,7 @@ function formatDeliveryPolicy(policy, unresolvedReason) {
 }
 function formatProjectContext(project, notes, orgCoda) {
   const sections = [];
-  sections.push(`# Project: ${project.title}`);
+  sections.push(`# System: ${project.title}`);
   sections.push(`**ID:** ${project.projectId}`);
   sections.push(`**Status:** ${project.status.replace("_", " ")}`);
   if (project.repoOwner && project.repoName) {
@@ -22977,7 +22989,7 @@ function formatSessionDetail(session) {
     "",
     `**Type:** ${type}`,
     `**Status:** ${status}`,
-    `**Project:** ${session.projectId}`,
+    `**Project:** ${session.systemId ?? session.projectId}`,
     `**Actor:** ${session.actor.agentPersona}${session.actor.agentRole ? ` (${session.actor.agentRole})` : ""}`
   ];
   if (session.actor.initiator) {
@@ -23131,7 +23143,7 @@ function registerBeatTools(server, ctx, client) {
     },
     async ({ beatId, projectId }) => {
       const beat = await fetchBeatInOrg(client, beatId, ctx.orgId);
-      const resolvedProjectId = projectId ?? beat.projectId;
+      const resolvedProjectId = projectId ?? beat.systemId ?? beat.projectId;
       const timeline = await client.getUnifiedBeatTimeline(resolvedProjectId, beatId);
       if (timeline.length === 0) {
         return { content: [{ type: "text", text: `No history for beat "${beatId}".` }] };
@@ -23245,7 +23257,7 @@ ${formatBeatDetail(beat)}${similarityWarning}` }] };
           return { content: [{ type: "text", text: `Beat not found: "${beatId}"` }], isError: true };
         }
         await logBeatActivity(client, {
-          projectId: beat.projectId,
+          projectId: beat.systemId ?? beat.projectId,
           action: "beat_updated",
           beatIds: [beatId],
           beatTitles: [updated.title],
@@ -23275,7 +23287,7 @@ ${formatBeatDetail(beat)}${similarityWarning}` }] };
     async ({ projectId, beatId, status, includeArchived }) => {
       try {
         await assertProjectInOrg(client, projectId, ctx.orgId);
-        const revisions = beatId ? await client.listBeatRevisions(projectId, beatId, { status, includeArchived }) : await client.listProjectRevisions(projectId, { status, includeArchived });
+        const revisions = beatId ? await client.listBeatRevisions(projectId, beatId, { status, includeArchived }) : await client.listSystemRevisions(projectId, { status, includeArchived });
         return { content: [{ type: "text", text: formatRevisionSummaryTable(revisions) }] };
       } catch (err) {
         const message = err instanceof Error ? err.message : String(err);
@@ -23464,7 +23476,7 @@ function registerBeatVersionTools(server, ctx, client) {
           return { content: [{ type: "text", text: `Beat not found: "${beatId}"` }], isError: true };
         }
         await assertBeatInOrg(client, beatId, ctx.orgId);
-        const beatVersion = await client.createBeatVersion(beat.projectId, beatId, {
+        const beatVersion = await client.createBeatVersion(beat.systemId ?? beat.projectId, beatId, {
           title,
           description,
           scope,
@@ -23936,7 +23948,7 @@ function registerCheckTools(server, ctx, client) {
     },
     async ({ projectId }) => {
       try {
-        const checks = await client.listLatestProjectChecks(projectId);
+        const checks = await client.listLatestSystemChecks(projectId);
         if (checks.length === 0) {
           return { content: [{ type: "text", text: `No checks found for project ${projectId}.` }] };
         }
@@ -24316,18 +24328,6 @@ ${g.acceptanceCriteria}` : null,
       };
     }
   );
-  server.tool(
-    "list_deliverable_group_deliverables",
-    'List all Deliverables assigned to a DeliverableGroup. Use to answer "what deliverables are in this phase/milestone?" or "what has the team committed to in this engagement group?"',
-    {
-      deliverableGroupId: external_exports.string().describe("The DeliverableGroup ID")
-    },
-    async ({ deliverableGroupId }) => {
-      const items = await client.listDeliverableGroupDeliverables(deliverableGroupId);
-      const text = items.length === 0 ? "No deliverables in this group." : items.map((d) => `[${d.deliverableId}] teamspace: ${d.teamspaceId}`).join("\n");
-      return { content: [{ type: "text", text }] };
-    }
-  );
   server.tool(
     "list_deliverable_group_drops",
     'List all Drops linked to a DeliverableGroup. Use to answer "what releases are part of this phase?" or "which software drops are tied to this engagement milestone?"',
@@ -24385,108 +24385,6 @@ ${g.acceptanceCriteria}` : null,
   );
 }
 
-// ../../libs/harmonica-services/src/mcp/tools/deliverable-tools.ts
-var import_node_crypto = require("node:crypto");
-function registerDeliverableTools(server, ctx, client) {
-  server.tool(
-    "list_deliverables",
-    "List all Deliverables (tangible client-facing artifacts or milestones owed by a date \u2014 e.g. board deck, roadmap doc, audit report) for a Teamspace.",
-    {
-      teamspaceId: external_exports.string().describe("The teamspace ID")
-    },
-    async ({ teamspaceId }) => {
-      const deliverables = await client.listTeamspaceDeliverables(teamspaceId);
-      const text = deliverables.length === 0 ? "No deliverables found." : deliverables.map(
-        (d) => `[${d.deliverableId}] ${d.title} \u2014 ${d.status}${d.dueDate ? ` (due ${d.dueDate})` : ""}${d.deliverableGroupId ? ` (group: ${d.deliverableGroupId})` : ""}`
-      ).join("\n");
-      return { content: [{ type: "text", text }] };
-    }
-  );
-  server.tool(
-    "get_deliverable",
-    "Get a Deliverable (tangible client-facing artifact or milestone) by ID.",
-    {
-      deliverableId: external_exports.string().describe("The deliverable ID")
-    },
-    async ({ deliverableId }) => {
-      const d = await client.getDeliverable(deliverableId);
-      if (!d) return { content: [{ type: "text", text: `Deliverable not found: ${deliverableId}` }] };
-      const text = [
-        `ID: ${d.deliverableId}`,
-        `Title: ${d.title}`,
-        `Teamspace: ${d.teamspaceId}`,
-        `Status: ${d.status}`,
-        d.description ? `Description: ${d.description}` : null,
-        d.dueDate ? `Due: ${d.dueDate}` : null,
-        d.deliverableGroupId ? `Group: ${d.deliverableGroupId}` : null,
-        `Version: ${d.version}`,
-        `Created: ${d.createdAt}`
-      ].filter(Boolean).join("\n");
-      return { content: [{ type: "text", text }] };
-    }
-  );
-  server.tool(
-    "create_deliverable",
-    'Create a Deliverable in a Teamspace. A Deliverable is a tangible commitment the agency owes the client by a date \u2014 board presentation, roadmap document, audit report, design mockups, training session, etc. Use this when the user describes something we will hand over. Do NOT use this for software capabilities the product provides to its end users \u2014 those are Beats (use create_beat). Do NOT use this for context, assumptions, constraints, or decisions \u2014 those are Notes (use create_note). Recognition cue: phrases like "we owe them\u2026", "due by\u2026", "the deck", "the report" \u2192 Deliverable. "Users will be able to\u2026", "the screen that\u2026" \u2192 Beat.',
-    {
-      teamspaceId: external_exports.string().describe("The teamspace ID"),
-      title: external_exports.string().min(1).max(300).describe("Deliverable title"),
-      description: external_exports.string().max(2e3).optional().describe("Optional description"),
-      dueDate: external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional().describe("Due date (YYYY-MM-DD)"),
-      status: external_exports.enum(["draft", "active", "delivered", "cancelled"]).optional().describe("Initial status (default: draft)"),
-      deliverableGroupId: external_exports.string().optional().describe("Assign to a DeliverableGroup by ID at creation time")
-    },
-    async ({ teamspaceId, title, description, dueDate, status, deliverableGroupId }) => {
-      const deliverableId = `dlv-${(0, import_node_crypto.randomUUID)()}`;
-      const d = await client.createDeliverable({
-        deliverableId,
-        teamspaceId,
-        orgId: ctx.orgId,
-        title,
-        description,
-        dueDate,
-        status,
-        createdBy: ctx.user.userId,
-        ...deliverableGroupId !== void 0 && { deliverableGroupId }
-      });
-      return {
-        content: [{
-          type: "text",
-          text: `Created deliverable: [${d.deliverableId}] ${d.title} \u2014 ${d.status}`
-        }]
-      };
-    }
-  );
-  server.tool(
-    "update_deliverable",
-    "Update an existing Deliverable. Transition status as the artifact progresses: draft \u2192 active \u2192 delivered (or cancelled).",
-    {
-      deliverableId: external_exports.string().describe("The deliverable ID"),
-      title: external_exports.string().min(1).max(300).optional().describe("New title"),
-      description: external_exports.string().max(2e3).optional().describe("New description"),
-      dueDate: external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/).nullable().optional().describe("New due date (YYYY-MM-DD), or null to clear"),
-      status: external_exports.enum(["draft", "active", "delivered", "cancelled"]).optional().describe("New status"),
-      deliverableGroupId: external_exports.string().nullable().optional().describe("Assign to a DeliverableGroup by ID, or null to ungroup")
-    },
-    async ({ deliverableId, title, description, dueDate, status, deliverableGroupId }) => {
-      const updates = {};
-      if (title !== void 0) updates["title"] = title;
-      if (description !== void 0) updates["description"] = description;
-      if (dueDate !== void 0) updates["dueDate"] = dueDate;
-      if (status !== void 0) updates["status"] = status;
-      if (deliverableGroupId !== void 0) updates["deliverableGroupId"] = deliverableGroupId;
-      const d = await client.updateDeliverable(deliverableId, updates);
-      if (!d) return { content: [{ type: "text", text: `Deliverable not found: ${deliverableId}` }] };
-      return {
-        content: [{
-          type: "text",
-          text: `Updated deliverable: [${d.deliverableId}] ${d.title} \u2014 ${d.status}`
-        }]
-      };
-    }
-  );
-}
-
 // ../../libs/harmonica-services/src/mcp/tools/downbeat-harmony-report-tools.ts
 function formatQualifyingBeat(b) {
   return `- \`${b.beatId}\` ${b.title}: ${b.signals.join(", ")}`;
@@ -24549,7 +24447,7 @@ function registerDownbeatTools(server, ctx, client) {
     { beatId: external_exports.string().describe("The beat ID (e.g., TF-B-001)") },
     async ({ beatId }) => {
       const beat = await fetchBeatInOrg(client, beatId, ctx.orgId);
-      const downbeat = await client.setDownbeat(beat.projectId, beatId);
+      const downbeat = await client.setDownbeat(beat.systemId ?? beat.projectId, beatId);
       if (!downbeat) {
         return { content: [{ type: "text", text: `Could not set a Downbeat for beat "${beatId}".` }], isError: true };
       }
@@ -24562,7 +24460,7 @@ function registerDownbeatTools(server, ctx, client) {
     { beatId: external_exports.string().describe("The beat ID (e.g., TF-B-001)") },
     async ({ beatId }) => {
       const beat = await fetchBeatInOrg(client, beatId, ctx.orgId);
-      const result = await client.listIncrementsSinceDownbeat(beat.projectId, beatId);
+      const result = await client.listIncrementsSinceDownbeat(beat.systemId ?? beat.projectId, beatId);
       if (!result) {
         return { content: [{ type: "text", text: `No such beat "${beatId}".` }], isError: true };
       }
@@ -24575,7 +24473,7 @@ function registerDownbeatTools(server, ctx, client) {
     { beatId: external_exports.string().describe("The beat ID (e.g., TF-B-001)") },
     async ({ beatId }) => {
       const beat = await fetchBeatInOrg(client, beatId, ctx.orgId);
-      const report = await client.getCodaDrift(beat.projectId, beatId);
+      const report = await client.getCodaDrift(beat.systemId ?? beat.projectId, beatId);
       if (!report) {
         return { content: [{ type: "text", text: `No such beat "${beatId}".` }], isError: true };
       }
@@ -24588,7 +24486,7 @@ function registerDownbeatTools(server, ctx, client) {
     { beatId: external_exports.string().describe("The beat ID (e.g., TF-B-001)") },
     async ({ beatId }) => {
       const beat = await fetchBeatInOrg(client, beatId, ctx.orgId);
-      const report = await client.getRelationalDrift(beat.projectId, beatId);
+      const report = await client.getRelationalDrift(beat.systemId ?? beat.projectId, beatId);
       if (!report) {
         return { content: [{ type: "text", text: `No such beat "${beatId}".` }], isError: true };
       }
@@ -28513,7 +28411,7 @@ ${lines.join("\n")}` }] };
 }
 
 // ../../libs/harmonica-services/src/mcp/tools/onboarding-tools.ts
-var import_node_crypto2 = require("node:crypto");
+var import_node_crypto = require("node:crypto");
 var OnboardingNoteInputSchema = external_exports.object({
   noteType: external_exports.enum(["context", "assumption", "constraint", "guidance", "decision"]),
   content: external_exports.string().min(1),
@@ -28525,11 +28423,6 @@ var OnboardingProjectInputSchema = external_exports.object({
   description: external_exports.string().max(2e3).optional(),
   notes: external_exports.array(OnboardingNoteInputSchema).optional()
 });
-var OnboardingDeliverableInputSchema = external_exports.object({
-  title: external_exports.string().min(1).max(300),
-  description: external_exports.string().max(2e3).optional(),
-  dueDate: external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional()
-});
 function registerOnboardingTools(server, ctx, client) {
   server.tool(
     "initiate_teamspace_onboarding",
@@ -28627,7 +28520,7 @@ function registerOnboardingTools(server, ctx, client) {
   server.tool(
     "create_teamspace_onboarding_batch",
     [
-      "Create a Teamspace, Projects, Notes, and Deliverables",
+      "Create a Teamspace, Projects, and Notes",
       "from a PM-approved onboarding payload in a single batch operation.",
       "Call this after the PM approves the pre-flight review card from initiate_teamspace_onboarding.",
       "Returns a creation receipt with IDs and counts for all created entities.",
@@ -28636,20 +28529,18 @@ function registerOnboardingTools(server, ctx, client) {
     {
       teamspaceName: external_exports.string().min(1).max(200).describe("Teamspace display name"),
       projects: external_exports.array(OnboardingProjectInputSchema).min(1).describe("Phase 1 projects to create, each linked to the Teamspace"),
-      teamspaceNotes: external_exports.array(OnboardingNoteInputSchema).describe("Constraints, assumptions, and context notes at the Teamspace/project level"),
-      deliverables: external_exports.array(OnboardingDeliverableInputSchema).describe("Deliverables detected from commitment language in documents")
+      teamspaceNotes: external_exports.array(OnboardingNoteInputSchema).describe("Constraints, assumptions, and context notes at the Teamspace/project level")
     },
     async ({
       teamspaceName,
       projects,
-      teamspaceNotes,
-      deliverables
+      teamspaceNotes
     }) => {
       const lines = [];
       let teamspace;
       try {
         teamspace = await client.createTeamspace({
-          teamspaceId: (0, import_node_crypto2.randomUUID)(),
+          teamspaceId: (0, import_node_crypto.randomUUID)(),
           slug: teamspaceName.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, ""),
           orgId: ctx.orgId,
           name: teamspaceName,
@@ -28666,8 +28557,8 @@ Error: ${msg}`);
       const createdProjects = [];
       for (const p of projects) {
         try {
-          const project = await client.createProject({
-            projectId: (0, import_node_crypto2.randomUUID)(),
+          const project = await client.createSystem({
+            projectId: (0, import_node_crypto.randomUUID)(),
             orgId: ctx.orgId,
             teamspaceId: teamspace.teamspaceId,
             ownerUserId: ctx.user?.userId ?? "system",
@@ -28711,7 +28602,7 @@ Projects (${createdProjects.length}):`);
         for (const note of projects[i]?.notes ?? []) {
           try {
             const n = await client.createNote({
-              noteId: `N-TEMP-${(0, import_node_crypto2.randomUUID)()}`,
+              noteId: `N-TEMP-${(0, import_node_crypto.randomUUID)()}`,
               // overridden server-side
               projectId: project.projectId,
               noteType: note.noteType,
@@ -28728,24 +28619,6 @@ Projects (${createdProjects.length}):`);
       }
       lines.push(`
 Notes filed: ${createdNotes.length}`);
-      const createdDeliverables = [];
-      for (const d of deliverables) {
-        try {
-          const del = await client.createDeliverable({
-            deliverableId: (0, import_node_crypto2.randomUUID)(),
-            // overridden server-side
-            teamspaceId: teamspace.teamspaceId,
-            orgId: ctx.orgId,
-            title: d.title,
-            description: d.description,
-            dueDate: d.dueDate,
-            createdBy: ctx.user?.userId ?? "mcp"
-          });
-          createdDeliverables.push(del.deliverableId);
-        } catch {
-        }
-      }
-      lines.push(`Deliverables: ${createdDeliverables.length}`);
       lines.unshift(`\u2705 Onboarding batch created successfully.`);
       return { content: [{ type: "text", text: lines.join("\n") }] };
     }
@@ -29455,11 +29328,11 @@ function registerRevisionLifecycleTools(server, ctx, client) {
           if (!parentBv) {
             return { content: [{ type: "text", text: `Beat Version not found: "${beatVersionId}"` }], isError: true };
           }
-          if (parentBv.beatId !== beatId || parentBv.projectId !== beat.projectId) {
+          if (parentBv.beatId !== beatId || (parentBv.systemId ?? parentBv.projectId) !== (beat.systemId ?? beat.projectId)) {
             return { content: [{ type: "text", text: `Beat Version "${beatVersionId}" belongs to a different Beat.` }], isError: true };
           }
         }
-        const { revision, warnings } = await client.createRevision(beat.projectId, beatId, {
+        const { revision, warnings } = await client.createRevision(beat.systemId ?? beat.projectId, beatId, {
           title,
           description,
           changeSummary,
@@ -29547,7 +29420,7 @@ function registerRevisionLifecycleTools(server, ctx, client) {
           if (!bv) {
             return { content: [{ type: "text", text: `Beat Version not found: "${beatVersionId}"` }], isError: true };
           }
-          if (bv.beatId !== revision.beatId || bv.projectId !== revision.projectId) {
+          if (bv.beatId !== revision.beatId || (bv.systemId ?? bv.projectId) !== (revision.systemId ?? revision.projectId)) {
             return { content: [{ type: "text", text: `Beat Version "${beatVersionId}" belongs to a different Beat.` }], isError: true };
           }
         }
@@ -30051,7 +29924,7 @@ function registerSessionTools(server, ctx, client) {
       includeTerminal: external_exports.boolean().optional().describe("Include terminal (closed) sessions. Default false.")
     },
     async ({ systemId, status, includeTerminal }) => {
-      const sessions = await client.listProjectSessions(systemId, {
+      const sessions = await client.listSystemSessions(systemId, {
         status,
         includeTerminal
       });
@@ -30718,7 +30591,7 @@ function registerProjectTools(server, ctx, client) {
         fetchProjectInOrg(client, systemId, ctx.orgId),
         client.getOrg(ctx.orgId)
       ]);
-      const notes = await client.listProjectNotes(systemId, {
+      const notes = await client.listSystemNotes(systemId, {
         limit: noteLimit ?? DEFAULT_CONTEXT_NOTE_LIMIT
       });
       const text = formatProjectContext(project, notes, org?.coda);
@@ -30886,7 +30759,7 @@ function registerProjectTools(server, ctx, client) {
 }
 
 // ../../libs/harmonica-services/src/mcp/tools/teamspace-tools.ts
-var import_node_crypto3 = require("node:crypto");
+var import_node_crypto2 = require("node:crypto");
 var EnsembleMemberSchema = external_exports.discriminatedUnion("type", [
   external_exports.object({ type: external_exports.literal("human"), email: external_exports.string().email().max(254), name: external_exports.string().min(1).max(200) }),
   external_exports.object({ type: external_exports.literal("agent"), agentId: external_exports.string().min(1).max(100), name: external_exports.string().min(1).max(200) })
@@ -30925,7 +30798,7 @@ function registerTeamspaceTools(server, ctx, client) {
         if (!ts || ts.orgId !== ctx.orgId) {
           return { content: [{ type: "text", text: `Teamspace not found: ${teamspaceId}` }], isError: true };
         }
-        const allProjects = await client.listOrgProjects(ctx.orgId);
+        const allProjects = await client.listOrgSystems(ctx.orgId);
         const tsProjects = allProjects.filter((p) => p.teamspaceId === teamspaceId);
         const lines = [
           `ID: ${ts.teamspaceId}`,
@@ -30962,7 +30835,7 @@ function registerTeamspaceTools(server, ctx, client) {
       name: external_exports.string().min(1).max(200).describe("Teamspace name")
     },
     async ({ name }) => {
-      const teamspaceId = `ts-${(0, import_node_crypto3.randomUUID)()}`;
+      const teamspaceId = `ts-${(0, import_node_crypto2.randomUUID)()}`;
       const slug = generateTeamspaceSlug(name);
       const ts = await client.createTeamspace({
         teamspaceId,
@@ -31100,7 +30973,7 @@ function registerValueVelocityTools(server, ctx, client) {
       try {
         await assertProjectInOrg(client, systemId, ctx.orgId);
         const [rankedResult, staleWResult] = await Promise.allSettled([
-          withLeverage ? client.rankProjectBeatVersionsWithLeverage(systemId, lens) : client.rankProjectBeatVersions(systemId, lens),
+          withLeverage ? client.rankSystemBeatVersionsWithLeverage(systemId, lens) : client.rankSystemBeatVersions(systemId, lens),
           client.getStaleWBeatIds(systemId)
         ]);
         if (rankedResult.status === "rejected") {
@@ -31594,7 +31467,7 @@ ${JSON.stringify(task.result, null, 2)}
     },
     async ({ projectId, status, limit }) => {
       await assertProjectInOrg(client, projectId, ctx.orgId);
-      const tasks = await client.listProjectTasks(projectId, {
+      const tasks = await client.listSystemTasks(projectId, {
         status,
         limit
       });
@@ -31652,7 +31525,7 @@ ${JSON.stringify(task.result, null, 2)}
     },
     async ({ projectId, status, limit }) => {
       await assertProjectInOrg(client, projectId, ctx.orgId);
-      const tasks = await client.listProjectTasks(projectId, {
+      const tasks = await client.listSystemTasks(projectId, {
         status,
         limit
       });
@@ -31954,7 +31827,6 @@ var TOOL_PROFILES = Object.freeze({
     allow(registerBeatVersionTools, ["list_beat_versions", "get_beat_version"]),
     allow(registerNoteTools, ["list_notes", "get_note", "create_note", "list_documents"]),
     allow(registerDropTools, ["list_drops", "get_drop"]),
-    allow(registerDeliverableTools, ["list_deliverables", "get_deliverable"]),
     allow(registerEmbeddingTools, ["search", "find_similar_notes"])
   ])
 });
@@ -32007,7 +31879,6 @@ function registerAllTools(server, ctx, client, profile) {
   registerBaselineTools(server, ctx, client);
   registerTeamspaceTools(server, ctx, client);
   registerDeliverableGroupTools(server, ctx, client);
-  registerDeliverableTools(server, ctx, client);
   registerDropTools(server, ctx, client);
   registerSessionTools(server, ctx, client);
   registerOnboardingTools(server, ctx, client);
@@ -32026,12 +31897,12 @@ function registerAllTools(server, ctx, client, profile) {
 // ../../libs/harmonica-services/src/mcp/resources/beat-resources.ts
 function registerBeatResources(server, ctx, client) {
   server.resource(
-    "project-beats",
-    new ResourceTemplate("harmonica://project/{projectId}/beats", { list: void 0 }),
-    async (uri, { projectId }) => {
-      const pid = String(projectId);
-      await assertProjectInOrg(client, pid, ctx.orgId);
-      const beats = await client.listSystemBeats(pid);
+    "system-beats",
+    new ResourceTemplate("harmonica://system/{systemId}/beats", { list: void 0 }),
+    async (uri, { systemId }) => {
+      const sid = String(systemId);
+      await fetchSystemInOrg(client, sid, ctx.orgId);
+      const beats = await client.listSystemBeats(sid);
       const text = formatBeatSummaryTable(beats);
       return { contents: [{ uri: uri.href, text }] };
     }
@@ -32066,14 +31937,14 @@ function registerGuidelinesResources(server, client) {
 }
 
 // ../../libs/harmonica-services/src/mcp/resources/system-resources.ts
-function registerProjectResources(server, ctx, client) {
+function registerSystemResources(server, ctx, client) {
   server.resource(
-    "project-context",
-    new ResourceTemplate("harmonica://project/{projectId}/context", { list: void 0 }),
-    async (uri, { projectId }) => {
-      const pid = String(projectId);
-      const project = await fetchProjectInOrg(client, pid, ctx.orgId);
-      const notes = await client.listSystemNotes(pid, { limit: DEFAULT_CONTEXT_NOTE_LIMIT });
+    "system-context",
+    new ResourceTemplate("harmonica://system/{systemId}/context", { list: void 0 }),
+    async (uri, { systemId }) => {
+      const sid = String(systemId);
+      const project = await fetchSystemInOrg(client, sid, ctx.orgId);
+      const notes = await client.listSystemNotes(sid, { limit: DEFAULT_CONTEXT_NOTE_LIMIT });
       const text = formatProjectContext(project, notes);
       return { contents: [{ uri: uri.href, text }] };
     }
@@ -32082,7 +31953,7 @@ function registerProjectResources(server, ctx, client) {
 
 // ../../libs/harmonica-services/src/mcp/resources/index.ts
 function registerAllResources(server, ctx, client) {
-  registerProjectResources(server, ctx, client);
+  registerSystemResources(server, ctx, client);
   registerBeatResources(server, ctx, client);
   registerGuidelinesResources(server, client);
 }
@@ -32353,46 +32224,11 @@ function createHttpClient(config2) {
       if (!raw) return void 0;
       return { ...raw, projectId: raw.id ?? raw.projectId, title: raw.name ?? raw.title, orgId: raw.organizationId ?? raw.orgId };
     },
-    // @deprecated aliases — remove in cleanup increment (BV2)
-    listOrgProjects: async (orgId) => {
-      const raw = await request("GET", `/api/organizations/${encodeURIComponent(orgId)}/projects/summaries`);
-      return (raw ?? []).map((p) => ({ ...p, projectId: p.id, title: p.name, orgId: p.organizationId }));
-    },
-    getProject: async (projectId) => {
-      const raw = await request("GET", `/api/systems/${encodeURIComponent(projectId)}`);
-      if (!raw) return void 0;
-      return {
-        ...raw,
-        projectId: raw.id ?? raw.projectId,
-        title: raw.name ?? raw.title,
-        orgId: raw.organizationId ?? raw.orgId
-      };
-    },
-    createProject: async (input) => {
-      const raw = await request("POST", "/api/systems", {
-        organizationId: input.orgId,
-        teamspaceId: input.teamspaceId,
-        name: input.title,
-        description: input.description,
-        strategy: input.strategy,
-        // Without this the owning Account is dropped on the wire and the System
-        // is created unlinked — invisible in the Account's Systems list.
-        ...input.accountId !== void 0 && { accountId: input.accountId }
-      });
-      return { ...raw, orgId: raw?.organizationId ?? raw?.orgId };
-    },
-    updateProject: (projectId, updates) => request("PATCH", `/api/systems/${encodeURIComponent(projectId)}`, updates),
-    archiveProject: (projectId) => request("PATCH", `/api/systems/${encodeURIComponent(projectId)}/archive`),
     getSystemFact: async (projectId) => {
       const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/facts`);
       return result?.data;
     },
-    getProjectFact: async (projectId) => {
-      const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/facts`);
-      return result?.data;
-    },
     saveSystemFact: (input) => request("PUT", `/api/systems/${encodeURIComponent(String(input.projectId))}/facts`, input),
-    saveProjectFact: (input) => request("PUT", `/api/systems/${encodeURIComponent(String(input.projectId))}/facts`, input),
     transitionSystemLifecycleState: async (projectId, targetState, options) => {
       return request("POST", `/api/systems/${encodeURIComponent(projectId)}/lifecycle/transitions`, {
         targetState,
@@ -32400,13 +32236,6 @@ function createHttpClient(config2) {
         decisionNoteId: options.decisionNoteId
       });
     },
-    transitionProjectLifecycleState: async (projectId, targetState, options) => {
-      return request("POST", `/api/systems/${encodeURIComponent(projectId)}/lifecycle/transitions`, {
-        targetState,
-        reason: options.reason,
-        decisionNoteId: options.decisionNoteId
-      });
-    },
     // Beats
     getNextBeatId: async (projectId) => {
       const result = await request("POST", `/api/systems/${encodeURIComponent(projectId)}/beats/next-id`);
@@ -32424,7 +32253,7 @@ function createHttpClient(config2) {
     getBeat: async (beatId) => {
       const raw = await request("GET", `/api/beats/${encodeURIComponent(beatId)}`);
       if (!raw) return void 0;
-      return { ...raw, beatId: raw.beatId ?? raw.id, status: raw.status ?? "open", beatStatus: coerceBeatStatusLocal(raw.beatStatus) };
+      return { ...raw, beatId: raw.beatId ?? raw.id, projectId: raw.projectId ?? raw.systemId, status: raw.status ?? "open", beatStatus: coerceBeatStatusLocal(raw.beatStatus) };
     },
     getBeatConvergence: async (projectId, beatId) => {
       const raw = await request(
@@ -32471,7 +32300,9 @@ function createHttpClient(config2) {
       }
       const beat = await request("GET", `/api/beats/${encodeURIComponent(beatId)}`);
       if (!beat) return void 0;
-      const result = await request("PUT", `/api/systems/${encodeURIComponent(beat.projectId)}/beats/${encodeURIComponent(beatId)}`, updates);
+      const systemId = beat.systemId ?? beat.projectId;
+      if (!systemId) return void 0;
+      const result = await request("PUT", `/api/systems/${encodeURIComponent(systemId)}/beats/${encodeURIComponent(beatId)}`, updates);
       const raw = result?.beat ?? result;
       return { ...raw, beatStatus: coerceBeatStatusLocal(raw.beatStatus) };
     },
@@ -32584,22 +32415,6 @@ function createHttpClient(config2) {
       const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/notes${qs}`);
       return result?.notes ?? [];
     },
-    listProjectNotes: async (projectId, filters) => {
-      const params = new URLSearchParams();
-      if (filters?.noteType) {
-        const types = Array.isArray(filters.noteType) ? filters.noteType : [filters.noteType];
-        types.forEach((t) => params.append("type", t));
-      }
-      if (filters?.status) params.set("status", filters.status);
-      if (filters?.revisionId) params.set("revisionId", filters.revisionId);
-      if (filters?.beatVersionId) params.set("beatVersionId", filters.beatVersionId);
-      if (filters?.excludeChildren) params.set("excludeChildren", "true");
-      if (filters?.significance) params.set("significance", filters.significance);
-      if (filters?.limit !== void 0) params.set("limit", String(filters.limit));
-      const qs = params.toString() ? `?${params.toString()}` : "";
-      const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/notes${qs}`);
-      return result?.notes ?? [];
-    },
     listAllSystemNotes: async (projectId, filters, limit, cursor) => {
       const params = new URLSearchParams();
       if (filters?.noteType) {
@@ -32618,27 +32433,11 @@ function createHttpClient(config2) {
       const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/notes/all${qs}`);
       return { notes: result?.notes ?? [], cursor: result?.cursor, hasMore: result?.hasMore ?? false };
     },
-    listAllProjectNotes: async (projectId, filters, limit, cursor) => {
-      const params = new URLSearchParams();
-      if (filters?.noteType) {
-        const types = Array.isArray(filters.noteType) ? filters.noteType : [filters.noteType];
-        types.forEach((t) => params.append("type", t));
-      }
-      if (filters?.excludeNoteType) params.set("excludeType", filters.excludeNoteType);
-      if (filters?.status) params.set("status", filters.status);
-      if (filters?.revisionId) params.set("revisionId", filters.revisionId);
-      if (filters?.beatVersionId) params.set("beatVersionId", filters.beatVersionId);
-      if (filters?.excludeChildren) params.set("excludeChildren", "true");
-      if (filters?.significance) params.set("significance", filters.significance);
-      if (limit !== void 0) params.set("limit", String(limit));
-      if (cursor !== void 0) params.set("cursor", cursor);
-      const qs = params.toString() ? `?${params.toString()}` : "";
-      const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/notes/all${qs}`);
-      return { notes: result?.notes ?? [], cursor: result?.cursor, hasMore: result?.hasMore ?? false };
-    },
     listBeatNotes: async (beatId, filters) => {
       const beat = await request("GET", `/api/beats/${encodeURIComponent(beatId)}`);
       if (!beat) return [];
+      const systemId = beat.systemId ?? beat.projectId;
+      if (!systemId) return [];
       const params = new URLSearchParams();
       if (filters?.noteType) {
         const types = Array.isArray(filters.noteType) ? filters.noteType : [filters.noteType];
@@ -32650,7 +32449,7 @@ function createHttpClient(config2) {
       if (filters?.excludeChildren) params.set("excludeChildren", "true");
       if (filters?.significance) params.set("significance", filters.significance);
       const qs = params.toString() ? `?${params.toString()}` : "";
-      const result = await request("GET", `/api/systems/${encodeURIComponent(beat.projectId)}/beats/${encodeURIComponent(beatId)}/notes${qs}`);
+      const result = await request("GET", `/api/systems/${encodeURIComponent(systemId)}/beats/${encodeURIComponent(beatId)}/notes${qs}`);
       return result?.notes ?? [];
     },
     getNote: async (noteId) => {
@@ -32728,7 +32527,6 @@ function createHttpClient(config2) {
     },
     // Gaps are deprecated — replaced by assumption Notes. Return empty results.
     getSystemGaps: async () => [],
-    getProjectGaps: async () => [],
     updateInformationGap: async () => false,
     // Revisions
     createRevision: async (projectId, beatId, input) => {
@@ -32753,14 +32551,6 @@ function createHttpClient(config2) {
       const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/revisions${qs}`);
       return result ?? [];
     },
-    listProjectRevisions: async (projectId, options) => {
-      const params = new URLSearchParams();
-      if (options?.status) params.set("status", options.status);
-      if (options?.includeArchived) params.set("includeArchived", "true");
-      const qs = params.toString() ? `?${params.toString()}` : "";
-      const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/revisions${qs}`);
-      return result ?? [];
-    },
     listBeatRevisions: async (projectId, beatId, options) => {
       const params = new URLSearchParams();
       params.set("beatId", beatId);
@@ -32982,17 +32772,9 @@ function createHttpClient(config2) {
     // partitions, but the REST surface is unified per the project-level
     // "avoid nested/duplicate routes" guidance.
     getSession: (sessionId) => request("GET", `/api/sessions/${encodeURIComponent(sessionId)}`),
-    listSystemSessions: async (projectId, options) => {
+    listSystemSessions: async (systemId, options) => {
       const params = new URLSearchParams();
-      params.set("projectId", projectId);
-      if (options?.status) params.set("status", options.status);
-      if (options?.includeTerminal) params.set("includeTerminal", "true");
-      const result = await request("GET", `/api/sessions?${params.toString()}`);
-      return result ?? [];
-    },
-    listProjectSessions: async (projectId, options) => {
-      const params = new URLSearchParams();
-      params.set("projectId", projectId);
+      params.set("systemId", systemId);
       if (options?.status) params.set("status", options.status);
       if (options?.includeTerminal) params.set("includeTerminal", "true");
       const result = await request("GET", `/api/sessions?${params.toString()}`);
@@ -33185,14 +32967,6 @@ function createHttpClient(config2) {
       const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/tasks${qs}`);
       return result?.tasks ?? [];
     },
-    listProjectTasks: async (projectId, options) => {
-      const params = new URLSearchParams();
-      if (options?.status) params.set("status", options.status);
-      if (options?.limit) params.set("limit", String(options.limit));
-      const qs = params.toString() ? `?${params.toString()}` : "";
-      const result = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/tasks${qs}`);
-      return result?.tasks ?? [];
-    },
     listTaskEvents: async (taskId, options) => {
       const params = new URLSearchParams();
       if (options?.afterSeq !== void 0) params.set("after", String(options.afterSeq));
@@ -33225,15 +32999,6 @@ function createHttpClient(config2) {
       const result = await request("GET", path);
       return { entries: result.activities ?? [], hasMore: false };
     },
-    listProjectActivities: async (projectId, options) => {
-      const params = new URLSearchParams();
-      if (options?.limit) params.set("limit", String(options.limit));
-      if (options?.minImportance) params.set("importance", options.minImportance);
-      const qs = params.toString();
-      const path = `/api/systems/${encodeURIComponent(projectId)}/activities${qs ? `?${qs}` : ""}`;
-      const result = await request("GET", path);
-      return { entries: result.activities ?? [], hasMore: false };
-    },
     createActivity: async (input) => {
       const result = await request("POST", `/api/systems/${encodeURIComponent(input.projectId)}/activities`, {
         action: input.action,
@@ -33308,20 +33073,6 @@ function createHttpClient(config2) {
       );
       return result.ranked ?? [];
     },
-    rankProjectBeatVersions: async (projectId, lens) => {
-      const result = await request(
-        "GET",
-        `/api/systems/${encodeURIComponent(projectId)}/beat-versions/ranked?lens=${encodeURIComponent(lens)}`
-      );
-      return result.ranked ?? [];
-    },
-    rankProjectBeatVersionsWithLeverage: async (projectId, lens) => {
-      const result = await request(
-        "GET",
-        `/api/systems/${encodeURIComponent(projectId)}/beat-versions/ranked?lens=${encodeURIComponent(lens)}&withLeverage=true`
-      );
-      return result.ranked ?? [];
-    },
     // All four use requestOrThrow, not request. These endpoints answer 404 for a
     // missing edge/Beat with a real domain message, and `request()` turns a 404
     // into `undefined` — so the old `result.edge` access threw
@@ -33574,7 +33325,7 @@ function createHttpClient(config2) {
     },
     searchByText: async (scope, query, options) => {
       const params = new URLSearchParams({ q: query });
-      if ("projectId" in scope) params.set("projectId", scope.projectId);
+      if ("projectId" in scope) params.set("systemId", scope.projectId);
       else if ("teamspaceId" in scope) params.set("teamspaceId", scope.teamspaceId);
       else params.set("orgId", scope.orgId);
       if (options?.limit) params.set("limit", String(options.limit));
@@ -33620,18 +33371,6 @@ function createHttpClient(config2) {
       );
       return { checks: res?.checks ?? [], nextCursor: res?.nextCursor };
     },
-    listProjectChecks: async (projectId, checkType, options) => {
-      const params = new URLSearchParams();
-      if (checkType) params.set("type", checkType);
-      if (options?.limit !== void 0) params.set("limit", String(options.limit));
-      if (options?.cursor) params.set("cursor", options.cursor);
-      const qs = params.toString() ? `?${params.toString()}` : "";
-      const res = await request(
-        "GET",
-        `/api/systems/${encodeURIComponent(projectId)}/checks${qs}`
-      );
-      return { checks: res?.checks ?? [], nextCursor: res?.nextCursor };
-    },
     listLatestSystemChecks: async (projectId) => {
       const res = await request(
         "GET",
@@ -33639,13 +33378,6 @@ function createHttpClient(config2) {
       );
       return res?.checks ?? [];
     },
-    listLatestProjectChecks: async (projectId) => {
-      const res = await request(
-        "GET",
-        `/api/checks/latest?projectId=${encodeURIComponent(projectId)}`
-      );
-      return res?.checks ?? [];
-    },
     listBeatChecks: async (beatId, projectId, checkType) => {
       const qs = checkType ? `?type=${encodeURIComponent(checkType)}` : "";
       const res = await request(
@@ -33705,20 +33437,6 @@ function createHttpClient(config2) {
     updateTeamspace: async (teamspaceId, updates) => {
       return request("PATCH", `/api/teamspaces/${encodeURIComponent(teamspaceId)}`, updates);
     },
-    // Deliverables
-    listTeamspaceDeliverables: async (teamspaceId) => {
-      const res = await request("GET", `/api/teamspaces/${encodeURIComponent(teamspaceId)}/deliverables`);
-      return res?.deliverables ?? [];
-    },
-    getDeliverable: async (deliverableId) => {
-      return request("GET", `/api/deliverables/${encodeURIComponent(deliverableId)}`);
-    },
-    createDeliverable: async (input) => {
-      return request("POST", `/api/teamspaces/${encodeURIComponent(input.teamspaceId)}/deliverables`, input);
-    },
-    updateDeliverable: async (deliverableId, updates) => {
-      return request("PATCH", `/api/deliverables/${encodeURIComponent(deliverableId)}`, updates);
-    },
     // DeliverableGroups
     listTeamspaceDeliverableGroups: async (teamspaceId) => {
       const res = await request("GET", `/api/teamspaces/${encodeURIComponent(teamspaceId)}/deliverable-groups`);
@@ -33730,11 +33448,6 @@ function createHttpClient(config2) {
       if (res === void 0) throw new Error(`Project ${projectId} not found`);
       return res.deliverableGroups;
     },
-    listProjectDeliverableGroups: async (projectId) => {
-      const res = await request("GET", `/api/systems/${encodeURIComponent(projectId)}/deliverable-groups`);
-      if (res === void 0) throw new Error(`Project ${projectId} not found`);
-      return res.deliverableGroups;
-    },
     listMovementDeliverableGroups: async (movementId) => {
       const res = await request("GET", `/api/movements/${encodeURIComponent(movementId)}/deliverable-groups`);
       if (res === void 0) throw new Error(`Movement ${movementId} not found`);
@@ -33771,10 +33484,6 @@ function createHttpClient(config2) {
         ...opts ?? {}
       });
     },
-    listDeliverableGroupDeliverables: async (deliverableGroupId) => {
-      const res = await request("GET", `/api/deliverable-groups/${encodeURIComponent(deliverableGroupId)}/deliverables`);
-      return res?.deliverables ?? [];
-    },
     listDeliverableGroupDrops: async (deliverableGroupId) => {
       const res = await request("GET", `/api/deliverable-groups/${encodeURIComponent(deliverableGroupId)}/drops`);
       return res?.drops ?? [];
@@ -34354,28 +34063,54 @@ function createHttpClient(config2) {
       );
       return result?.usedBy;
     },
-    // Feature flags (B-135 v9/v10) — not available in HTTP transport; the published
-    // npm package has no DynamoDB credentials.
-    listFlags: async () => {
-      throw new Error("Feature flag queries are not available in HTTP transport mode");
+    // Feature flags (B-135 v11) — routed through /api/mcp/feature-flags/* so the
+    // published npm package (no DynamoDB credentials) can manage flags via HTTP.
+    listFlags: async (options) => {
+      const params = new URLSearchParams();
+      if (options?.includeArchived) params.set("includeArchived", "true");
+      if (options?.search) params.set("search", options.search);
+      if (options?.cursor) params.set("cursor", options.cursor);
+      if (options?.limit !== void 0) params.set("limit", String(options.limit));
+      const qs = params.toString();
+      return requestOrThrow(
+        "GET",
+        `/api/mcp/feature-flags${qs ? `?${qs}` : ""}`
+      );
     },
-    getFlag: async () => {
-      throw new Error("Feature flag queries are not available in HTTP transport mode");
+    getFlag: async (name, options) => {
+      const qs = options?.includeHistory ? "?includeHistory=true" : "";
+      return request("GET", `/api/mcp/feature-flags/${encodeURIComponent(name)}${qs}`);
     },
-    checkFlag: async () => {
-      throw new Error("Feature flag queries are not available in HTTP transport mode");
+    checkFlag: async (name, stage) => {
+      const flag = await request(
+        "GET",
+        `/api/mcp/feature-flags/${encodeURIComponent(name)}`
+      );
+      return flag ? flag.enabledIn.includes(stage) : false;
     },
-    createFlag: async () => {
-      throw new Error("Feature flag writes are not available in HTTP transport mode");
+    createFlag: async (name, enabledIn, options) => {
+      return requestOrThrow("POST", "/api/mcp/feature-flags", {
+        name,
+        enabledIn,
+        description: options?.description,
+        note: options?.note
+      });
     },
-    setFlag: async () => {
-      throw new Error("Feature flag writes are not available in HTTP transport mode");
+    setFlag: async (name, enabledIn, options) => {
+      return requestOrThrow("PUT", `/api/mcp/feature-flags/${encodeURIComponent(name)}`, {
+        enabledIn,
+        note: options?.note
+      });
     },
-    archiveFlag: async () => {
-      throw new Error("Feature flag writes are not available in HTTP transport mode");
+    archiveFlag: async (name, options) => {
+      return requestOrThrow("POST", `/api/mcp/feature-flags/${encodeURIComponent(name)}/archive`, {
+        note: options?.note
+      });
     },
-    unarchiveFlag: async () => {
-      throw new Error("Feature flag writes are not available in HTTP transport mode");
+    unarchiveFlag: async (name, options) => {
+      return requestOrThrow("POST", `/api/mcp/feature-flags/${encodeURIComponent(name)}/unarchive`, {
+        note: options?.note
+      });
     }
   };
   return client;
@@ -34426,7 +34161,7 @@ function loadConfig() {
   };
 }
 async function main() {
-  console.error(`[harmonica-mcp] v${"3.5.0"} starting\u2026`);
+  console.error(`[harmonica-mcp] v${"3.6.1"} starting\u2026`);
   const config2 = loadConfig();
   const client = createHttpClient({
     apiBaseUrl: config2.apiBaseUrl,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codazen/harmonica-mcp",
-  "version": "3.5.0",
+  "version": "3.6.1",
   "description": "MCP server for Harmonica — connect any MCP-compatible AI assistant to Harmonica",
   "license": "MIT",
   "bin": {