@elixium.ai/mcp-server 0.4.0 → 0.6.0

package/dist/stakeholders.js

@@ -0,0 +1,72 @@
+/**
+ * Stakeholder derivation — mcp-server local mirror of the logic in
+ * `lib/trust-audiences.ts` (story 72d27a2a / §7).
+ *
+ * Why duplicated: mcp-server is a separately-published npm package with
+ * its own `tsconfig.json` (rootDir = `./src`). It can't import from the
+ * parent repo's `lib/` without a workspace-level refactor. For now, the
+ * derivation logic lives independently here.
+ *
+ * **Drift guard:** `tests/stakeholder-detection-mcp-parity.spec.ts`
+ * imports both this module and `lib/trust-audiences.ts` and asserts they
+ * produce identical output on a fixture matrix. If either copy is
+ * updated without the other, that test fails.
+ *
+ * If/when a shared workspace package is introduced, consolidate.
+ */
+export const AUDIENCE_KEYS = [
+    "peers",
+    "institutional_memory",
+    "onboarders",
+    "risk_committee",
+    "governance",
+    "execs",
+];
+// Case-insensitive: accepts uppercase forms historically used in test
+// fixtures AND the lowercase enum values from types.ts.
+const REGULATED_FRAMEWORKS_NORMALIZED = new Set([
+    "hipaa",
+    "soc2",
+    "fedramp-moderate",
+    "fedramp-high",
+    "fedramp",
+]);
+function isRegulatedFramework(framework) {
+    return REGULATED_FRAMEWORKS_NORMALIZED.has(framework.toLowerCase());
+}
+function nonEmpty(value) {
+    return typeof value === "string" && value.trim().length > 0;
+}
+export function deriveStakeholders(input) {
+    const result = [];
+    const seen = new Set();
+    function add(audience, reason) {
+        if (seen.has(audience))
+            return;
+        seen.add(audience);
+        result.push({ audience, reason });
+    }
+    add("peers", "always needed");
+    add("institutional_memory", "always needed");
+    add("onboarders", "always needed");
+    if (nonEmpty(input.story.risk_profile)) {
+        add("risk_committee", `risk_profile = "${input.story.risk_profile}"`);
+    }
+    if (input.story.risk_profile === "Compliance") {
+        add("governance", "risk_profile flags Compliance");
+    }
+    const regulated = (input.workspaceCompliance ?? []).find((f) => isRegulatedFramework(f));
+    if (regulated) {
+        add("governance", `workspace compliance: ${regulated}`);
+    }
+    const epic = input.epic;
+    if (epic) {
+        if (nonEmpty(epic.hypothesis)) {
+            add("execs", "epic has hypothesis");
+        }
+        else if (nonEmpty(epic.successMetrics)) {
+            add("execs", "epic has successMetrics");
+        }
+    }
+    return result;
+}

package/dist/toolSchemas.js

@@ -0,0 +1,245 @@
+/**
+ * MCP tool input schemas — extracted from `index.ts` so they can be imported
+ * directly by behavior tests instead of grepped from source (Tier 5.7).
+ *
+ * Pattern for new MCP tools in this package: define the inputSchema here as
+ * an exported `as const` literal, then reference it from the tool definition
+ * in `index.ts`. Story 50e536ca will eventually migrate the remaining inline
+ * schemas to this module.
+ *
+ * Keep enums and field shapes locked to the backend Zod validators
+ * (`backend/api/src/validators/storySchemas.ts`). Drift between the MCP
+ * schema and the backend validator means LLMs can send fields that get
+ * silently stripped (or be told to send valid fields the backend rejects).
+ * Cross-spec drift guards live in the test specs.
+ */
+const STORY_TYPE_ENUM = ["feature", "bug", "chore", "platform"];
+const RISK_PROFILE_ENUM = [
+    "User",
+    "Tech",
+    "Market",
+    "Compliance",
+    "Model_Drift",
+];
+const LANE_ENUM = [
+    "Backlog",
+    "Icebox",
+    "Current",
+    "Done",
+    "BACKLOG",
+    "ICEBOX",
+    "CURRENT",
+    "DONE",
+];
+export const CREATE_STORY_INPUT_SCHEMA = {
+    type: "object",
+    properties: {
+        title: { type: "string", description: "Title of the story" },
+        description: {
+            type: "string",
+            description: "Description of the story",
+        },
+        acceptanceCriteria: {
+            type: "string",
+            description: "Acceptance criteria in Given/When/Then format",
+        },
+        lane: {
+            type: "string",
+            description: "Lane to add the story to (case-insensitive)",
+            enum: LANE_ENUM,
+        },
+        points: {
+            type: "number",
+            description: "Points (0, 1, 2, 3, 5, 8)",
+        },
+        requester: {
+            type: "string",
+            description: "Email of the person requesting this story. Defaults to ELIXIUM_USER_EMAIL env var or API key owner.",
+        },
+        epicId: {
+            type: "string",
+            description: "Epic ID to link this story to (optional). Use list_epics to find epic IDs.",
+        },
+        testPlan: {
+            type: "string",
+            description: "Markdown test plan describing test strategy (optional). Sets the test_plan field without changing workflow_stage.",
+        },
+        storyType: {
+            type: "string",
+            description: "Categorizes the story for filtering and Learning Loop signals (feature, bug, chore, platform).",
+            enum: STORY_TYPE_ENUM,
+        },
+        owners: {
+            type: "array",
+            items: { type: "string" },
+            description: "Story d9541094 — Firebase UIDs of the story's owners. If omitted, the backend auto-assigns the API key's owner UID (so MCP-created stories show up under the user's 'My Stories' filter). Pass an explicit array to assign teammates, or `[]` to create intentionally unowned.",
+        },
+    },
+    required: ["title"],
+};
+// ─── Story 0ad8e319 (§2): Agent-proposal primitive ──────────────────────
+const PROPOSABLE_FIELD_NAMES_FOR_MCP = [
+    "hypothesis",
+    "hidden_unknowns",
+    "confidence_score",
+    "risk_profile",
+    "outcome_summary",
+];
+export const PROPOSE_FIELD_DRAFT_INPUT_SCHEMA = {
+    type: "object",
+    properties: {
+        storyId: {
+            type: "string",
+            description: "UUID of the story this proposal is for",
+        },
+        fieldName: {
+            type: "string",
+            description: "Which Learning Loop field this proposal targets. Must be one of the proposable fields.",
+            enum: PROPOSABLE_FIELD_NAMES_FOR_MCP,
+        },
+        draftValue: {
+            type: ["string", "number", "null"],
+            description: "The proposed value for the field. Type matches the field: string for hypothesis/hidden_unknowns/risk_profile/outcome_summary, number for confidence_score, null to propose clearing the field.",
+        },
+        provider: {
+            type: "string",
+            description: "Optional: the LLM provider+model that generated this draft (e.g., 'anthropic.claude-sonnet-4.5', 'google.gemini-2.0-flash'). Strongly encouraged — disclosed on the proposal badge so humans see which model drafted it.",
+        },
+        agent: {
+            type: "string",
+            description: "Optional: the agent client+version that submitted the proposal (e.g., 'claude-code/1.2.3', 'cursor/0.40.0'). Used for per-agent calibration signatures.",
+        },
+    },
+    required: ["storyId", "fieldName", "draftValue"],
+};
+export const ENDORSE_PROPOSAL_INPUT_SCHEMA = {
+    type: "object",
+    properties: {
+        proposalId: {
+            type: "string",
+            description: "UUID of the pending proposal to endorse. Endorsement updates the underlying story field with the proposal's draft_value and emits a proposal.endorsed audit event.",
+        },
+    },
+    required: ["proposalId"],
+};
+export const REJECT_PROPOSAL_INPUT_SCHEMA = {
+    type: "object",
+    properties: {
+        proposalId: {
+            type: "string",
+            description: "UUID of the pending proposal to reject.",
+        },
+        reason: {
+            type: "string",
+            description: "Required reason the proposal was rejected. Captured for agent learning + audit.",
+        },
+    },
+    required: ["proposalId", "reason"],
+};
+export const DRAFT_HYPOTHESIS_INPUT_SCHEMA = {
+    type: "object",
+    properties: {
+        storyId: {
+            type: "string",
+            description: "UUID of the story to draft a hypothesis for. Reference consumer of the proposal primitive — calls the configured AI_PROVIDER on the backend to generate a draft hypothesis, then submits it as a pending proposal. Pattern for §4 outcome-from-evidence and §6 v2 missing-field drafter to follow.",
+        },
+        context: {
+            type: "string",
+            description: "Optional additional context to seed the AI draft (e.g., domain notes, prior hypotheses).",
+        },
+    },
+    required: ["storyId"],
+};
+export const GET_STAKEHOLDERS_INPUT_SCHEMA = {
+    type: "object",
+    properties: {
+        storyId: {
+            type: "string",
+            description: "UUID of the story to derive stakeholders for. Returns which audiences (peers, execs, governance, risk_committee, institutional_memory, onboarders) this card needs to earn trust with, based on story metadata + linked epic + workspace compliance frameworks.",
+        },
+    },
+    required: ["storyId"],
+};
+export const GET_TRUST_LEAKAGE_INPUT_SCHEMA = {
+    type: "object",
+    properties: {
+        since: {
+            type: "string",
+            description: "Optional ISO-8601 timestamp. Return only commits authored on or after this instant. Defaults to 30 days ago.",
+        },
+        repo: {
+            type: "string",
+            description: "Optional repo override in 'owner/repo' form. Defaults to the workspace's configured default_repo for the tenant's provider.",
+        },
+    },
+    required: [],
+};
+export const UPDATE_STORY_INPUT_SCHEMA = {
+    type: "object",
+    properties: {
+        storyId: { type: "string", description: "ID of the story" },
+        title: { type: "string", description: "Updated title" },
+        description: { type: "string", description: "Updated description" },
+        lane: {
+            type: "string",
+            description: "Lane to move the story to (case-insensitive)",
+            enum: LANE_ENUM,
+        },
+        points: {
+            type: "number",
+            description: "Updated points (0, 1, 2, 3, 5, 8)",
+        },
+        state: {
+            type: "string",
+            description: "Story state (unstarted, started, finished, delivered, accepted, rejected)",
+        },
+        outcome_summary: {
+            type: "string",
+            description: "Learning outcome summary",
+        },
+        acceptanceCriteria: {
+            type: "string",
+            description: "Acceptance criteria in Given/When/Then format",
+        },
+        sortOrder: {
+            type: "number",
+            description: "Sort order within the lane (lower = higher priority)",
+        },
+        epicId: {
+            type: "string",
+            description: "Epic ID to link this story to. Set to empty string to unlink.",
+        },
+        testPlan: {
+            type: "string",
+            description: "Markdown test plan. Updates test_plan field without changing workflow_stage.",
+        },
+        storyType: {
+            type: "string",
+            description: "Categorizes the story for filtering and Learning Loop signals (feature, bug, chore, platform).",
+            enum: STORY_TYPE_ENUM,
+        },
+        hypothesis: {
+            type: "string",
+            description: "We believe that... — drives Learning Loop AI prompts and earns trust with execs/board.",
+        },
+        confidence_score: {
+            type: "number",
+            description: "How confident we are this delivers value (0-100). Earns trust with peers and calibration-minded leaders.",
+        },
+        hidden_unknowns: {
+            type: "string",
+            description: "Assumptions or open questions that could invalidate the hypothesis. Earns trust with risk committee / staff engineering.",
+        },
+        risk_profile: {
+            type: "string",
+            description: "Categorizes risk (User, Tech, Market, Compliance, Model_Drift). Earns trust with governance and compliance audiences.",
+            enum: RISK_PROFILE_ENUM,
+        },
+        owners: {
+            type: "array",
+            items: { type: "string" },
+            description: "Story d9541094 — Firebase UIDs of the story's owners. Replaces the existing array (PATCH semantics). Pass `[]` to clear owners. Use this to retroactively assign yourself or a teammate to a story whose owners were dropped before the auto-assign fix landed.",
+        },
+    },
+    required: ["storyId"],
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elixium.ai/mcp-server",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "type": "module",
   "description": "MCP Server for Elixium.ai",
   "mcpName": "io.github.IndirectTek/mcp-server",
@@ -19,20 +19,22 @@
   },
   "scripts": {
     "build": "tsc",
-    "test": "vitest run",
-    "test:watch": "vitest",
     "start": "node dist/index.js",
     "dev": "ts-node src/index.ts"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^0.6.0",
+    "@modelcontextprotocol/sdk": "^1.25.2",
     "axios": "^1.6.0",
     "zod": "^3.22.0"
   },
   "devDependencies": {
     "@types/node": "^20.0.0",
     "ts-node": "^10.9.0",
-    "typescript": "^5.3.0",
-    "vitest": "^4.1.1"
+    "typescript": "^5.3.0"
+  },
+  "overrides": {
+    "ip-address": "^10.1.1",
+    "hono": "^4.12.18",
+    "fast-uri": "^3.1.2"
   }
 }

package/dist/__tests__/board-isolation.test.js

@@ -1,83 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-import { selectBoard, resetBoardContext, getRuntimeBoardId, } from "../board-context.js";
-import { ALL_BOARDS, BOARD_ALPHA, BOARD_BETA, ALPHA_STORIES, BETA_STORIES, ALL_STORIES, ALPHA_EPICS, BETA_EPICS, } from "./fixtures/boards.js";
-const mockClient = {
-    get: vi.fn(),
-    post: vi.fn(),
-};
-beforeEach(() => {
-    vi.clearAllMocks();
-    resetBoardContext();
-});
-/**
- * Simulates how fetchStories filters by boardId in the MCP server.
- * This mirrors the logic in index.ts that will use getRuntimeBoardId().
- */
-const fetchStoriesForBoard = (boardId, allStories) => {
-    if (!boardId)
-        return allStories;
-    return allStories.filter((s) => s.boardId === boardId || !s.boardId);
-};
-const fetchEpicsForBoard = (boardId, allEpics) => {
-    if (!boardId)
-        return allEpics;
-    return allEpics.filter((e) => e.boardId === boardId || !e.boardId);
-};
-describe("board isolation", () => {
-    it("4.1 stories are scoped to selected board", async () => {
-        mockClient.get.mockResolvedValue({ data: ALL_BOARDS });
-        await selectBoard(mockClient, "alpha");
-        const boardId = getRuntimeBoardId();
-        const stories = fetchStoriesForBoard(boardId, ALL_STORIES);
-        expect(stories).toHaveLength(ALPHA_STORIES.length);
-        expect(stories.every((s) => s.boardId === BOARD_ALPHA.id)).toBe(true);
-    });
-    it("4.1b beta board returns only beta stories", async () => {
-        mockClient.get.mockResolvedValue({ data: ALL_BOARDS });
-        await selectBoard(mockClient, "beta");
-        const boardId = getRuntimeBoardId();
-        const stories = fetchStoriesForBoard(boardId, ALL_STORIES);
-        expect(stories).toHaveLength(BETA_STORIES.length);
-        expect(stories.every((s) => s.boardId === BOARD_BETA.id)).toBe(true);
-    });
-    it("4.2 creating a story assigns it to selected board", async () => {
-        mockClient.get.mockResolvedValue({ data: ALL_BOARDS });
-        await selectBoard(mockClient, "alpha");
-        const boardId = getRuntimeBoardId();
-        // Simulate what create_story handler does
-        const payload = {
-            title: "New Story",
-            lane: "Current",
-            ...(boardId ? { boardId } : {}),
-        };
-        expect(payload.boardId).toBe(BOARD_ALPHA.id);
-    });
-    it("4.3 epics respect board context", async () => {
-        mockClient.get.mockResolvedValue({ data: ALL_BOARDS });
-        await selectBoard(mockClient, "alpha");
-        const boardId = getRuntimeBoardId();
-        const allEpics = [...ALPHA_EPICS, ...BETA_EPICS];
-        const epics = fetchEpicsForBoard(boardId, allEpics);
-        expect(epics).toHaveLength(1);
-        expect(epics[0].boardId).toBe(BOARD_ALPHA.id);
-    });
-    it("4.5 no board selected falls back to all stories", async () => {
-        // No select_board called, no env var
-        const boardId = getRuntimeBoardId();
-        expect(boardId).toBeNull();
-        const stories = fetchStoriesForBoard(boardId, ALL_STORIES);
-        expect(stories).toHaveLength(ALL_STORIES.length);
-    });
-    it("switching boards changes story scope", async () => {
-        // Select alpha
-        mockClient.get.mockResolvedValue({ data: ALL_BOARDS });
-        await selectBoard(mockClient, "alpha");
-        let stories = fetchStoriesForBoard(getRuntimeBoardId(), ALL_STORIES);
-        expect(stories).toHaveLength(ALPHA_STORIES.length);
-        // Switch to beta
-        mockClient.get.mockResolvedValue({ data: ALL_BOARDS });
-        await selectBoard(mockClient, "beta");
-        stories = fetchStoriesForBoard(getRuntimeBoardId(), ALL_STORIES);
-        expect(stories).toHaveLength(BETA_STORIES.length);
-    });
-});

package/dist/__tests__/create-board.test.js

@@ -1,97 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-import { createBoard, resetBoardContext } from "../board-context.js";
-const mockClient = {
-    get: vi.fn(),
-    post: vi.fn(),
-};
-beforeEach(() => {
-    vi.clearAllMocks();
-    resetBoardContext();
-});
-describe("create_board", () => {
-    it("2.1 creates board with name and description", async () => {
-        const created = {
-            id: "new-board-id",
-            slug: "sprint-board",
-            name: "Sprint Board",
-            description: "For sprints",
-            is_archived: false,
-            created_at: "2026-03-23T00:00:00.000Z",
-        };
-        mockClient.post.mockResolvedValue({ data: created });
-        const result = await createBoard(mockClient, {
-            name: "Sprint Board",
-            description: "For sprints",
-        });
-        expect(mockClient.post).toHaveBeenCalledWith("/boards", {
-            name: "Sprint Board",
-            slug: "sprint-board",
-            description: "For sprints",
-        });
-        expect(result.id).toBe("new-board-id");
-        expect(result.slug).toBe("sprint-board");
-        expect(result.name).toBe("Sprint Board");
-    });
-    it("2.2 auto-generates slug from name", async () => {
-        mockClient.post.mockResolvedValue({
-            data: {
-                id: "gen-id",
-                slug: "my-sprint-board",
-                name: "My Sprint Board",
-                is_archived: false,
-                created_at: "2026-03-23T00:00:00.000Z",
-            },
-        });
-        await createBoard(mockClient, { name: "My Sprint Board" });
-        expect(mockClient.post).toHaveBeenCalledWith("/boards", {
-            name: "My Sprint Board",
-            slug: "my-sprint-board",
-            description: "",
-        });
-    });
-    it("2.3 creates board with only required name field", async () => {
-        mockClient.post.mockResolvedValue({
-            data: {
-                id: "min-id",
-                slug: "backlog",
-                name: "Backlog",
-                description: "",
-                is_archived: false,
-                created_at: "2026-03-23T00:00:00.000Z",
-            },
-        });
-        const result = await createBoard(mockClient, { name: "Backlog" });
-        expect(result.name).toBe("Backlog");
-        expect(result.description).toBe("");
-    });
-    it("2.4 rejects creation when board limit reached", async () => {
-        mockClient.post.mockRejectedValue({
-            response: {
-                status: 422,
-                data: { error: "Maximum 3 active boards per tenant" },
-            },
-            message: "Request failed with status code 422",
-        });
-        await expect(createBoard(mockClient, { name: "Fourth Board" })).rejects.toMatchObject({
-            response: { status: 422 },
-        });
-    });
-    it("2.5 rejects duplicate slug within tenant", async () => {
-        mockClient.post.mockRejectedValue({
-            response: {
-                status: 409,
-                data: { error: "Board slug already exists" },
-            },
-            message: "Request failed with status code 409",
-        });
-        await expect(createBoard(mockClient, { name: "Alpha Board" })).rejects.toMatchObject({
-            response: { status: 409 },
-        });
-    });
-    it("2.6 validates name is non-empty", async () => {
-        await expect(createBoard(mockClient, { name: "" })).rejects.toThrow("Board name cannot be empty");
-        await expect(createBoard(mockClient, { name: "   " })).rejects.toThrow("Board name cannot be empty");
-        // Should not call API
-        expect(mockClient.post).not.toHaveBeenCalled();
-    });
-});

package/dist/__tests__/fixtures/boards.js

@@ -1,117 +0,0 @@
-/**
- * Test fixtures for multi-board MCP tools.
- */
-export const BOARD_ALPHA = {
-    id: "aaaaaaaa-1111-2222-3333-444444444444",
-    slug: "alpha",
-    name: "Alpha Board",
-    description: "First test board",
-    is_archived: false,
-    created_at: "2026-03-01T00:00:00.000Z",
-    settings: {},
-};
-export const BOARD_BETA = {
-    id: "bbbbbbbb-1111-2222-3333-444444444444",
-    slug: "beta",
-    name: "Beta Board",
-    description: "Second test board",
-    is_archived: false,
-    created_at: "2026-03-02T00:00:00.000Z",
-    settings: {},
-};
-export const BOARD_ARCHIVED = {
-    id: "cccccccc-1111-2222-3333-444444444444",
-    slug: "archived-board",
-    name: "Archived Board",
-    description: "An archived board",
-    is_archived: true,
-    created_at: "2026-02-15T00:00:00.000Z",
-    settings: {},
-};
-export const ALL_BOARDS = [BOARD_ALPHA, BOARD_BETA, BOARD_ARCHIVED];
-export const ACTIVE_BOARDS = [BOARD_ALPHA, BOARD_BETA];
-// Stories assigned to specific boards
-export const ALPHA_STORIES = [
-    {
-        id: "s1111111-1111-1111-1111-111111111111",
-        title: "Alpha Story 1",
-        lane: "Current",
-        state: "started",
-        points: 3,
-        owners: ["user-1"],
-        labels: [],
-        epicId: null,
-        boardId: BOARD_ALPHA.id,
-        storyType: "feature",
-        createdAt: "2026-03-10T00:00:00.000Z",
-    },
-    {
-        id: "s2222222-2222-2222-2222-222222222222",
-        title: "Alpha Story 2",
-        lane: "Backlog",
-        state: "unstarted",
-        points: 2,
-        owners: [],
-        labels: [],
-        epicId: null,
-        boardId: BOARD_ALPHA.id,
-        storyType: "bug",
-        createdAt: "2026-03-11T00:00:00.000Z",
-    },
-];
-export const BETA_STORIES = [
-    {
-        id: "s3333333-3333-3333-3333-333333333333",
-        title: "Beta Story 1",
-        lane: "Current",
-        state: "unstarted",
-        points: 5,
-        owners: ["user-2"],
-        labels: [],
-        epicId: null,
-        boardId: BOARD_BETA.id,
-        storyType: "feature",
-        createdAt: "2026-03-12T00:00:00.000Z",
-    },
-    {
-        id: "s4444444-4444-4444-4444-444444444444",
-        title: "Beta Story 2",
-        lane: "Current",
-        state: "started",
-        points: 1,
-        owners: [],
-        labels: [],
-        epicId: null,
-        boardId: BOARD_BETA.id,
-        storyType: "chore",
-        createdAt: "2026-03-13T00:00:00.000Z",
-    },
-    {
-        id: "s5555555-5555-5555-5555-555555555555",
-        title: "Beta Story 3",
-        lane: "Backlog",
-        state: "unstarted",
-        points: 8,
-        owners: [],
-        labels: [],
-        epicId: null,
-        boardId: BOARD_BETA.id,
-        storyType: "feature",
-        createdAt: "2026-03-14T00:00:00.000Z",
-    },
-];
-export const ALL_STORIES = [...ALPHA_STORIES, ...BETA_STORIES];
-export const ALPHA_EPICS = [
-    {
-        id: "e1111111-1111-1111-1111-111111111111",
-        name: "Alpha Epic",
-        boardId: BOARD_ALPHA.id,
-    },
-];
-export const BETA_EPICS = [
-    {
-        id: "e2222222-2222-2222-2222-222222222222",
-        name: "Beta Epic",
-        boardId: BOARD_BETA.id,
-    },
-];