@dain-os/mcp-server 0.3.2 → 0.4.0

package/README.md

@@ -1,141 +1,141 @@
-# @dain-os/mcp-server
-
-MCP server for DainOS. Lets Claude Code and other MCP clients manage your projects, tasks, task comments, proposals (including content drafting), and persist + retrieve developer knowledge (changelog / sessions / KB).
-
-## What it does
-
-Wraps the DainOS Express API behind 36 tools:
-
-| Domain | Tools |
-|---|---|
-| Projects | `list_projects`, `get_project`, `create_project`, `update_project`, `archive_project` |
-| Tasks | `list_tasks`, `get_task`, `create_task`, `update_task`, `complete_task`, `archive_task` |
-| Comments | `add_task_comment` |
-| Developer KB (v0.2+) | `log_changelog_entry`, `log_session_context`, `log_knowledge_base_entry`, `list_recent_sessions`, `search_knowledge_base` |
-| Proposals (v0.3+) | `list_proposals`, `get_proposal`, `create_proposal`, `update_proposal`, `set_proposal_status`, `delete_proposal` |
-| Proposal options (v0.3+) | `list_proposal_options`, `create_proposal_option`, `update_proposal_option`, `set_recommended_option`, `delete_proposal_option` |
-| Proposal content (v0.3+) | `get_proposal_content`, `describe_proposal_block_types`, `upsert_proposal_section`, `delete_proposal_section`, `upsert_proposal_block`, `delete_proposal_block`, `reorder_proposal_blocks`, `replace_proposal_content` |
-
-Project / task / comment / proposal tools run as the user who minted the token, with tenant scoping enforced server-side. Developer KB tools are intentionally cross-tenant: they accept `project` as a required parameter and store entries in a shared developer schema (used by `/wrapup`, `/recap`, `/dev-kb`).
-
-### Drafting proposal content
-
-Proposal content lives in a structured JSON shape: `{ version: 2, sections: [{ id, key, title, blocks: ContentBlock[] }] }`. Eight block types are supported: `text`, `cards`, `diagram`, `chart`, `table`, `image`, `gantt`, `iframe`.
-
-Start a drafting session by calling `describe_proposal_block_types` — it returns the full catalogue (schema + minimal example + when-to-use hints + gotchas like the iframe host allowlist). Then use the granular content tools to add or change one block at a time. Each granular tool ships only the bytes you are editing, so token cost stays low even for fine-grained edits.
-
-For wholesale rewrites or regeneration, use `replace_proposal_content`.
-
-`get_proposal` includes a computed `shareUrl` field. It is populated as `https://dainos.app/proposals/view/<token>` once the proposal has been transitioned to `sent` (or later: `viewed`, `accepted`). Draft proposals return `shareUrl: null` because the link is not yet meaningful.
-
-## Setup
-
-### 1. Mint a personal access token
-
-Sign in to DainOS, go to **Settings -> API tokens**, click **New token**, give it a name (e.g. `claude-code-laptop`), and copy the value. The raw token is shown exactly once.
-
-Tokens look like `dain_pat_<43 base64url chars>`.
-
-### 2. Add the server to your MCP client
-
-#### Claude Code
-
-```bash
-claude mcp add dainos -- npx -y @dain-os/mcp-server
-```
-
-Then set the token in your environment (or pass it inline):
-
-```bash
-export DAINOS_API_TOKEN=dain_pat_<your token>
-```
-
-Or, for one-machine setup, add it to your Claude Code config directly:
-
-```json
-{
-  "mcpServers": {
-    "dainos": {
-      "command": "npx",
-      "args": ["-y", "@dain-os/mcp-server"],
-      "env": {
-        "DAINOS_API_TOKEN": "dain_pat_<your token>"
-      }
-    }
-  }
-}
-```
-
-### 3. Restart your MCP client
-
-Claude Code picks up new MCP servers on restart.
-
-## Environment
-
-| Variable | Required | Default | Notes |
-|---|---|---|---|
-| `DAINOS_API_TOKEN` | yes | n/a | Personal access token from `/settings/api-tokens` |
-| `DAINOS_API_URL` | no | `https://api.dainos.app` | Override for local dev or staging |
-
-## Usage examples
-
-Once connected, ask Claude Code things like:
-
-- "List my active projects in DainOS."
-- "What tasks are assigned to me?"
-- "Create a task on the Portunus project called 'wire up the new sidebar' due Friday."
-- "Mark that task complete and add a comment that the PR is #312."
-
-The model uses `list_projects` to find ids, `create_task` / `update_task` / `complete_task` to mutate state, and `add_task_comment` for follow-ups.
-
-## Troubleshooting
-
-### 401 Unauthorized
-
-```
-DainOS rejected the token (401). Mint a new one at https://dainos.app/settings/api-tokens
-```
-
-The token is revoked, expired, or never existed. Visit Settings -> API tokens, mint a new one, and update your MCP config.
-
-### 403 Forbidden
-
-The token is valid but your account does not have permission for the operation (e.g. archiving a project you do not own).
-
-### Tool is not visible to Claude Code
-
-Restart Claude Code after `claude mcp add ...`. MCP servers are loaded once at startup.
-
-## Local development
-
-```bash
-git clone https://github.com/dain-agency/dain-os
-cd dain-os/packages/mcp-server
-npm install
-npm run build
-```
-
-Then point your MCP client at the local build:
-
-```json
-{
-  "mcpServers": {
-    "dainos-local": {
-      "command": "node",
-      "args": ["/path/to/dain-os/packages/mcp-server/dist/index.js"],
-      "env": {
-        "DAINOS_API_TOKEN": "dain_pat_...",
-        "DAINOS_API_URL": "http://localhost:3001"
-      }
-    }
-  }
-}
-```
-
-## Why a small tool surface
-
-The Notion MCP works well because it exposes a focused, opinionated set of operations rather than a one-to-one mirror of every API endpoint. The DainOS MCP server follows the same principle: project and task work covers the bulk of the day-to-day "keep things updated" use case, and the model picks the right verb every time. Tools for time entries, deals, proposals, and attachments are tracked for follow-up versions.
-
-## Licence
-
-Proprietary. Internal use by Dain only.
+# @dain-os/mcp-server
+
+MCP server for DainOS. Lets Claude Code and other MCP clients manage your projects, tasks, task comments, proposals (including content drafting), and persist + retrieve developer knowledge (changelog / sessions / KB).
+
+## What it does
+
+Wraps the DainOS Express API behind 36 tools:
+
+| Domain | Tools |
+|---|---|
+| Projects | `list_projects`, `get_project`, `create_project`, `update_project`, `archive_project` |
+| Tasks | `list_tasks`, `get_task`, `create_task`, `update_task`, `complete_task`, `archive_task` |
+| Comments | `add_task_comment` |
+| Developer KB (v0.2+) | `log_changelog_entry`, `log_session_context`, `log_knowledge_base_entry`, `list_recent_sessions`, `search_knowledge_base` |
+| Proposals (v0.3+) | `list_proposals`, `get_proposal`, `create_proposal`, `update_proposal`, `set_proposal_status`, `delete_proposal` |
+| Proposal options (v0.3+) | `list_proposal_options`, `create_proposal_option`, `update_proposal_option`, `set_recommended_option`, `delete_proposal_option` |
+| Proposal content (v0.3+) | `get_proposal_content`, `describe_proposal_block_types`, `upsert_proposal_section`, `delete_proposal_section`, `upsert_proposal_block`, `delete_proposal_block`, `reorder_proposal_blocks`, `replace_proposal_content` |
+
+Project / task / comment / proposal tools run as the user who minted the token, with tenant scoping enforced server-side. Developer KB tools are intentionally cross-tenant: they accept `project` as a required parameter and store entries in a shared developer schema (used by `/wrapup`, `/recap`, `/dev-kb`).
+
+### Drafting proposal content
+
+Proposal content lives in a structured JSON shape: `{ version: 2, sections: [{ id, key, title, blocks: ContentBlock[] }] }`. Eight block types are supported: `text`, `cards`, `diagram`, `chart`, `table`, `image`, `gantt`, `iframe`.
+
+Start a drafting session by calling `describe_proposal_block_types` — it returns the full catalogue (schema + minimal example + when-to-use hints + gotchas like the iframe host allowlist). Then use the granular content tools to add or change one block at a time. Each granular tool ships only the bytes you are editing, so token cost stays low even for fine-grained edits.
+
+For wholesale rewrites or regeneration, use `replace_proposal_content`.
+
+`get_proposal` includes a computed `shareUrl` field. It is populated as `https://dainos.app/proposals/view/<token>` once the proposal has been transitioned to `sent` (or later: `viewed`, `accepted`). Draft proposals return `shareUrl: null` because the link is not yet meaningful.
+
+## Setup
+
+### 1. Mint a personal access token
+
+Sign in to DainOS, go to **Settings -> API tokens**, click **New token**, give it a name (e.g. `claude-code-laptop`), and copy the value. The raw token is shown exactly once.
+
+Tokens look like `dain_pat_<43 base64url chars>`.
+
+### 2. Add the server to your MCP client
+
+#### Claude Code
+
+```bash
+claude mcp add dainos -- npx -y @dain-os/mcp-server
+```
+
+Then set the token in your environment (or pass it inline):
+
+```bash
+export DAINOS_API_TOKEN=dain_pat_<your token>
+```
+
+Or, for one-machine setup, add it to your Claude Code config directly:
+
+```json
+{
+  "mcpServers": {
+    "dainos": {
+      "command": "npx",
+      "args": ["-y", "@dain-os/mcp-server"],
+      "env": {
+        "DAINOS_API_TOKEN": "dain_pat_<your token>"
+      }
+    }
+  }
+}
+```
+
+### 3. Restart your MCP client
+
+Claude Code picks up new MCP servers on restart.
+
+## Environment
+
+| Variable | Required | Default | Notes |
+|---|---|---|---|
+| `DAINOS_API_TOKEN` | yes | n/a | Personal access token from `/settings/api-tokens` |
+| `DAINOS_API_URL` | no | `https://api.dainos.app` | Override for local dev or staging |
+
+## Usage examples
+
+Once connected, ask Claude Code things like:
+
+- "List my active projects in DainOS."
+- "What tasks are assigned to me?"
+- "Create a task on the Portunus project called 'wire up the new sidebar' due Friday."
+- "Mark that task complete and add a comment that the PR is #312."
+
+The model uses `list_projects` to find ids, `create_task` / `update_task` / `complete_task` to mutate state, and `add_task_comment` for follow-ups.
+
+## Troubleshooting
+
+### 401 Unauthorized
+
+```
+DainOS rejected the token (401). Mint a new one at https://dainos.app/settings/api-tokens
+```
+
+The token is revoked, expired, or never existed. Visit Settings -> API tokens, mint a new one, and update your MCP config.
+
+### 403 Forbidden
+
+The token is valid but your account does not have permission for the operation (e.g. archiving a project you do not own).
+
+### Tool is not visible to Claude Code
+
+Restart Claude Code after `claude mcp add ...`. MCP servers are loaded once at startup.
+
+## Local development
+
+```bash
+git clone https://github.com/dain-agency/dain-os
+cd dain-os/packages/mcp-server
+npm install
+npm run build
+```
+
+Then point your MCP client at the local build:
+
+```json
+{
+  "mcpServers": {
+    "dainos-local": {
+      "command": "node",
+      "args": ["/path/to/dain-os/packages/mcp-server/dist/index.js"],
+      "env": {
+        "DAINOS_API_TOKEN": "dain_pat_...",
+        "DAINOS_API_URL": "http://localhost:3001"
+      }
+    }
+  }
+}
+```
+
+## Why a small tool surface
+
+The Notion MCP works well because it exposes a focused, opinionated set of operations rather than a one-to-one mirror of every API endpoint. The DainOS MCP server follows the same principle: project and task work covers the bulk of the day-to-day "keep things updated" use case, and the model picks the right verb every time. Tools for time entries, deals, proposals, and attachments are tracked for follow-up versions.
+
+## Licence
+
+Proprietary. Internal use by Dain only.

package/dist/index.js

@@ -60,13 +60,15 @@ async function main() {
         }
         try {
             const result = await tool.handler(client, parsed.data);
+            // Some endpoints (e.g. archive_project hits DELETE → 204) resolve to
+            // undefined. JSON.stringify(undefined) yields undefined, which fails the
+            // MCP SDK's content[0].text string validation. Emit a confirmation
+            // envelope instead so 204-style mutations don't crash the response.
+            const text = result === undefined
+                ? JSON.stringify({ ok: true }, null, 2)
+                : JSON.stringify(result, null, 2);
             return {
-                content: [
-                    {
-                        type: 'text',
-                        text: JSON.stringify(result, null, 2),
-                    },
-                ],
+                content: [{ type: 'text', text }],
             };
         }
         catch (error) {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,MAAM,YAAY,GAAG,QAAQ,CAAC;AAC9B,MAAM,eAAe,GAAG,OAAO,CAAC;AAEhC,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,OAAO,IAAI,CAAC,CAAC;IAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CACF,0IAA0I,CAC3I,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,IAAI,CACF,8FAA8F,CAC/F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAEhD,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,EAChD,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC;SAC5C,CAAC,CAAC;KACJ,CAAC,CAAC,CAAC;IAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;gBACL,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,iBAAiB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;iBACxE;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,qBAAqB,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;qBAChE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACvD,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBACtC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GACX,KAAK,YAAY,cAAc;gBAC7B,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,KAAK,YAAY,KAAK;oBACtB,CAAC,CAAC,KAAK,CAAC,OAAO;oBACf,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;gBACnD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2BAA2B,QAAQ,CAAC,MAAM,eAAe,MAAM,CAAC,OAAO,KAAK,CAC7E,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;AAC5B,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,MAAM,YAAY,GAAG,QAAQ,CAAC;AAC9B,MAAM,eAAe,GAAG,OAAO,CAAC;AAEhC,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,OAAO,IAAI,CAAC,CAAC;IAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CACF,0IAA0I,CAC3I,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,IAAI,CACF,8FAA8F,CAC/F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAEhD,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,EAChD,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC;SAC5C,CAAC,CAAC;KACJ,CAAC,CAAC,CAAC;IAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;gBACL,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,iBAAiB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;iBACxE;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,qBAAqB,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;qBAChE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACvD,qEAAqE;YACrE,yEAAyE;YACzE,mEAAmE;YACnE,oEAAoE;YACpE,MAAM,IAAI,GACR,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACtC,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC;aAC3C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GACX,KAAK,YAAY,cAAc;gBAC7B,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,KAAK,YAAY,KAAK;oBACtB,CAAC,CAAC,KAAK,CAAC,OAAO;oBACf,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;gBACnD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2BAA2B,QAAQ,CAAC,MAAM,eAAe,MAAM,CAAC,OAAO,KAAK,CAC7E,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;AAC5B,CAAC,CAAC,CAAC"}

package/dist/tools/developer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"developer.d.ts","sourceRoot":"","sources":["../../src/tools/developer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AA+LjD,eAAO,MAAM,cAAc,EAAE,cAAc,EAM1C,CAAC"}
+{"version":3,"file":"developer.d.ts","sourceRoot":"","sources":["../../src/tools/developer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAwXjD,eAAO,MAAM,cAAc,EAAE,cAAc,EAU1C,CAAC"}

package/dist/tools/developer.js

@@ -13,6 +13,38 @@ import { z } from 'zod';
  * "herbert", "mabel") on every call. The backing tables live in the developer
  * schema and span tenants.
  */
+/**
+ * Some MCP clients serialise array-typed tool arguments as JSON-encoded strings
+ * rather than nested arrays. Caught during /wrapup on 2026-05-14:
+ * `log_changelog_entry` rejected a perfectly-shaped batch with "expected array,
+ * received string" while `log_knowledge_base_entry` accepted the same shape.
+ * The difference was the model's serialisation choice on that specific tool
+ * call, not the schema. Defending the entries field at the parse boundary
+ * makes both spellings work.
+ */
+function jsonStringArray(item, min = 1, max = 50) {
+    return z.preprocess((val) => {
+        if (typeof val === 'string') {
+            try {
+                return JSON.parse(val);
+            }
+            catch {
+                return val;
+            }
+        }
+        return val;
+    }, z.array(item).min(min).max(max));
+}
+/**
+ * Optional string that also accepts `null`. Some clients send `null` for
+ * "field intentionally absent" rather than omitting the key; the previous
+ * `z.string().optional()` rejected null with "expected string, received null".
+ */
+const optionalString = z.preprocess((val) => (val === null ? undefined : val), z.string().optional());
+/** Optional non-string field (e.g. number, boolean, array) that accepts null too. */
+function nullishOptional(schema) {
+    return z.preprocess((val) => (val === null ? undefined : val), schema.optional());
+}
 const commitTypeEnum = z.enum([
     'feat', 'fix', 'chore', 'refactor', 'test', 'docs', 'perf', 'ci', 'build', 'revert', 'style',
 ]);
@@ -27,30 +59,30 @@ const kbCategoryEnum = z.enum(['gotcha', 'pattern', 'lesson', 'decision', 'worka
 // ---------------------------------------------------------------------------
 const changelogEntrySchema = z.object({
     commit_sha: z.string().length(40).describe('Full 40-character SHA.'),
-    branch: z.string().optional().describe('Defaults to "main" if omitted.'),
+    branch: optionalString.describe('Defaults to "main" if omitted.'),
     commit_type: commitTypeEnum.describe('Conventional-commit type prefix.'),
-    scope: z.string().optional(),
+    scope: optionalString,
     summary: z.string().describe('Commit message subject line.'),
-    description: z.string().optional(),
-    files_changed: z.coerce.number().int().optional(),
-    insertions: z.coerce.number().int().optional(),
-    deletions: z.coerce.number().int().optional(),
-    milestone: z.string().optional(),
-    task_ref: z.string().optional().describe('Linear / Jira / Notion task id.'),
-    impacts_config: z.boolean().optional().describe('Defaults false.'),
-    breaking_change: z.boolean().optional().describe('Defaults false.'),
-    tags: z.array(z.string()).optional(),
-    author: z.string().optional(),
+    description: optionalString,
+    files_changed: nullishOptional(z.coerce.number().int()),
+    insertions: nullishOptional(z.coerce.number().int()),
+    deletions: nullishOptional(z.coerce.number().int()),
+    milestone: optionalString,
+    task_ref: optionalString.describe('Linear / Jira / Notion task id.'),
+    impacts_config: nullishOptional(z.boolean()).describe('Defaults false.'),
+    breaking_change: nullishOptional(z.boolean()).describe('Defaults false.'),
+    tags: nullishOptional(z.array(z.string())),
+    author: optionalString,
     committed_at: z.string().describe('ISO 8601 timestamp.'),
-    pr_number: z.coerce.number().int().optional(),
-    pr_url: z.string().optional(),
+    pr_number: nullishOptional(z.coerce.number().int()),
+    pr_url: optionalString,
 });
 const logChangelogEntry = {
     name: 'log_changelog_entry',
     description: 'Append commit records to the developer changelog for a project. Use during /wrapup to persist today\'s commits. Accepts a batch (1-50 entries). Idempotent on (project, commit_sha): duplicates are silently skipped. Returns { inserted, skipped } counts.',
     inputSchema: z.object({
         project: z.string().describe('Project slug, e.g. "dain-os", "herbert", "mabel".'),
-        entries: z.array(changelogEntrySchema).min(1).max(50),
+        entries: jsonStringArray(changelogEntrySchema, 1, 50),
     }),
     handler: async (client, input) => {
         const entries = input.entries.map((entry) => ({
@@ -73,17 +105,21 @@ const logSessionContext = {
     inputSchema: z.object({
         project: z.string().describe('Project slug, e.g. "dain-os".'),
         session_name: z.string().describe('Short descriptive title.'),
-        session_date: z.string().optional().describe('YYYY-MM-DD. Defaults to today server-side.'),
+        session_date: optionalString.describe('YYYY-MM-DD. Defaults to today server-side.'),
         operator: z.string().describe('e.g. "Dane + Claude Opus 4.7".'),
-        machine: z.string().optional(),
-        duration_minutes: z.coerce.number().int().optional(),
+        machine: optionalString,
+        duration_minutes: nullishOptional(z.coerce.number().int()),
         summary: z.string().describe('2-4 sentence overview of WHAT and WHY.'),
-        decisions_made: z.array(decisionSchema).optional().describe('Non-obvious choices future sessions need to understand.'),
-        files_touched: z.array(z.string()).optional(),
-        tasks_completed: z.array(z.string()).optional(),
-        blockers: z.array(z.string()).optional(),
-        handoff_notes: z.string().optional().describe('What the next session needs to know first.'),
-        tags: z.array(z.string()).optional(),
+        decisions_made: nullishOptional(z.array(decisionSchema)).describe('Non-obvious choices future sessions need to understand.'),
+        files_touched: nullishOptional(z.array(z.string())),
+        tasks_completed: nullishOptional(z.array(z.string())),
+        blockers: nullishOptional(z.array(z.string())),
+        handoff_notes: optionalString.describe('What the next session needs to know first.'),
+        tags: nullishOptional(z.array(z.string())),
+        client_visible: nullishOptional(z.boolean()).describe('When false, the session is hidden from portal product pages and the client portal activity feed. Defaults to true. Set false for sensitive sessions (security incidents, internal escalations).'),
+        product_id: nullishOptional(z.string().uuid()).describe('UUID of the product this session relates to.'),
+        task_ids: nullishOptional(z.array(z.string().uuid()).max(100)).describe('UUIDs of DainOS tasks worked on during the session (max 100).'),
+        operator_iam_user_id: nullishOptional(z.string().uuid()).describe('IAM user UUID of the operator. Resolved server-side from the auth token when omitted.'),
     }),
     handler: async (client, input) => client.post('/developer/sessions', input),
 };
@@ -95,20 +131,20 @@ const kbEntrySchema = z.object({
     module: z.string().describe('System / area, e.g. "auth", "react", "prisma".'),
     title: z.string().describe('Short descriptive title.'),
     description: z.string().describe('What happened / what is this.'),
-    impact: z.string().optional().describe('What goes wrong if you don\'t know this.'),
-    prevention: z.string().optional().describe('How to avoid it next time.'),
-    severity: severityEnum.optional(),
+    impact: optionalString.describe('What goes wrong if you don\'t know this.'),
+    prevention: optionalString.describe('How to avoid it next time.'),
+    severity: nullishOptional(severityEnum),
     source_type: sourceTypeEnum,
-    source_refs: z.array(z.string()).optional().describe('Links, file paths, or commit SHAs.'),
-    tags: z.array(z.string()).optional(),
-    platform: z.string().optional().describe('e.g. "supabase", "anthropic", "vercel".'),
+    source_refs: nullishOptional(z.array(z.string())).describe('Links, file paths, or commit SHAs.'),
+    tags: nullishOptional(z.array(z.string())),
+    platform: optionalString.describe('e.g. "supabase", "anthropic", "vercel".'),
 });
 const logKnowledgeBaseEntry = {
     name: 'log_knowledge_base_entry',
     description: 'Append KB findings (gotchas, patterns, lessons, decisions, workarounds) for a project. Only add entries for things that were SURPRISING, NON-OBVIOUS, or caused real problems. Use during /wrapup. Accepts a batch (1-50 entries). Check for similar existing titles via search_knowledge_base before adding to avoid duplicates.',
     inputSchema: z.object({
         project: z.string().describe('Project slug, e.g. "dain-os". Use "universal" for cross-product lessons.'),
-        entries: z.array(kbEntrySchema).min(1).max(50),
+        entries: jsonStringArray(kbEntrySchema, 1, 50),
     }),
     handler: async (client, input) => {
         const entries = input.entries.map((entry) => ({
@@ -172,11 +208,140 @@ const searchKnowledgeBase = {
         return client.get(`/developer/knowledge-base/search?${params.toString()}`);
     },
 };
+// ---------------------------------------------------------------------------
+// update_* — partial edits to existing developer KB rows
+// ---------------------------------------------------------------------------
+//
+// Wraps PATCH /developer/{changelog|sessions|knowledge-base}/:id. Used when a
+// /wrapup-style flow needs to amend a previously-logged entry (e.g. the user
+// corrects a session summary, fills in handoff_notes after the fact, or
+// reclassifies a KB entry's severity). `project` is immutable on every row —
+// to "move" between projects, delete and re-insert.
+const updateChangelogEntry = {
+    name: 'update_changelog_entry',
+    description: 'Partially update an existing changelog entry by id. Every field is optional; only the supplied fields are written. `project` and `commit_sha` are immutable. Returns the refreshed row. 404 if id is unknown.',
+    inputSchema: z.object({
+        id: z.string().uuid().describe('Changelog entry id (UUID).'),
+        branch: optionalString,
+        commit_type: commitTypeEnum.optional(),
+        scope: optionalString,
+        summary: optionalString,
+        description: optionalString,
+        files_changed: nullishOptional(z.coerce.number().int()),
+        insertions: nullishOptional(z.coerce.number().int()),
+        deletions: nullishOptional(z.coerce.number().int()),
+        milestone: optionalString,
+        task_ref: optionalString,
+        impacts_config: nullishOptional(z.boolean()),
+        breaking_change: nullishOptional(z.boolean()),
+        tags: nullishOptional(z.array(z.string())),
+        author: optionalString,
+        committed_at: optionalString.describe('ISO 8601 timestamp.'),
+        pr_number: nullishOptional(z.coerce.number().int()),
+        pr_url: optionalString,
+    }),
+    handler: async (client, input) => {
+        const { id, ...rest } = input;
+        // Drop undefined keys so the API only receives the fields the caller set.
+        const body = Object.fromEntries(Object.entries(rest).filter(([, value]) => value !== undefined));
+        return client.patch(`/developer/changelog/${id}`, body);
+    },
+};
+const updateSessionContext = {
+    name: 'update_session_context',
+    description: 'Partially update an existing session_context row by id. Every field is optional. `project` is immutable. Returns the refreshed row. 404 if id is unknown.',
+    inputSchema: z.object({
+        id: z.string().uuid().describe('Session context id (UUID).'),
+        session_name: optionalString,
+        session_date: optionalString.describe('YYYY-MM-DD.'),
+        operator: optionalString,
+        machine: optionalString,
+        duration_minutes: nullishOptional(z.coerce.number().int()),
+        summary: optionalString,
+        decisions_made: nullishOptional(z.array(decisionSchema)),
+        files_touched: nullishOptional(z.array(z.string())),
+        tasks_completed: nullishOptional(z.array(z.string())),
+        blockers: nullishOptional(z.array(z.string())),
+        handoff_notes: optionalString,
+        tags: nullishOptional(z.array(z.string())),
+        product_id: nullishOptional(z.string().uuid()).describe('UUID of the product this session relates to.'),
+        task_ids: nullishOptional(z.array(z.string().uuid()).max(100)).describe('UUIDs of DainOS tasks worked on during the session (max 100).'),
+        operator_iam_user_id: nullishOptional(z.string().uuid()).describe('IAM user UUID of the operator.'),
+    }),
+    handler: async (client, input) => {
+        const { id, ...rest } = input;
+        const body = Object.fromEntries(Object.entries(rest).filter(([, value]) => value !== undefined));
+        return client.patch(`/developer/sessions/${id}`, body);
+    },
+};
+const updateKnowledgeBaseEntry = {
+    name: 'update_knowledge_base_entry',
+    description: 'Partially update an existing KB entry by id. Every field is optional. `project` is immutable. Returns the refreshed row. 404 if id is unknown.',
+    inputSchema: z.object({
+        id: z.string().uuid().describe('KB entry id (UUID).'),
+        category: kbCategoryEnum.optional(),
+        module: optionalString,
+        title: optionalString,
+        description: optionalString,
+        impact: optionalString,
+        prevention: optionalString,
+        severity: nullishOptional(severityEnum),
+        source_type: sourceTypeEnum.optional(),
+        source_refs: nullishOptional(z.array(z.string())),
+        tags: nullishOptional(z.array(z.string())),
+        platform: optionalString,
+    }),
+    handler: async (client, input) => {
+        const { id, ...rest } = input;
+        const body = Object.fromEntries(Object.entries(rest).filter(([, value]) => value !== undefined));
+        return client.patch(`/developer/knowledge-base/${id}`, body);
+    },
+};
+// ---------------------------------------------------------------------------
+// list_changelog — read changelog entries by project slug + date
+// ---------------------------------------------------------------------------
+const listChangelog = {
+    name: 'list_changelog',
+    description: 'List developer changelog entries for a project, newest first. Optionally filter by `since` (ISO 8601 date). Default limit 50, max 200. Use during /recap to review recent commits for a project without raw SQL.',
+    inputSchema: z.object({
+        project: z
+            .string()
+            .min(1)
+            .max(100)
+            .regex(/^[a-z0-9][a-z0-9-]*$/, 'project must be a lowercase slug')
+            .describe('Project slug, e.g. "dain-os", "herbert", "mabel".'),
+        since: z
+            .string()
+            .datetime({ offset: true, message: 'since must be ISO 8601 with offset' })
+            .optional()
+            .describe('ISO 8601 timestamp with offset (e.g. 2026-05-18T00:00:00Z) — only return entries with committed_at >= this value.'),
+        limit: z.coerce
+            .number()
+            .int()
+            .min(1)
+            .max(200)
+            .optional()
+            .describe('Default 50, max 200.'),
+    }),
+    handler: async (client, input) => {
+        const params = new URLSearchParams();
+        params.set('project', input.project);
+        if (input.since)
+            params.set('since', input.since);
+        if (input.limit !== undefined)
+            params.set('limit', String(input.limit));
+        return client.get(`/developer/changelog?${params.toString()}`);
+    },
+};
 export const developerTools = [
     logChangelogEntry,
     logSessionContext,
     logKnowledgeBaseEntry,
     listRecentSessions,
     searchKnowledgeBase,
+    updateChangelogEntry,
+    updateSessionContext,
+    updateKnowledgeBaseEntry,
+    listChangelog,
 ];
 //# sourceMappingURL=developer.js.map