@featureflip/mcp 0.1.9 → 0.1.10

package/dist/index.mjs

@@ -1,2 +1,2 @@
-import { a as e, c as t, o as n, r, s as i, t as a } from "./org-8tn1Su68.js";
+import { a as e, c as t, o as n, r, s as i, t as a } from "./org-C5dAa5In.js";
 export { n as ApiError, i as FeatureflipApi, t as PKG_VERSION, e as createServer, r as loadConfig, a as resolveOrg };

package/dist/{org-8tn1Su68.js → org-C5dAa5In.js}

@@ -4,7 +4,7 @@ import * as t from "zod/v4";
 //#region src/version.ts
 var n = {
 	name: "@featureflip/mcp",
-	version: "0.1.9",
+	version: "0.1.10",
 	mcpName: "io.github.canopy-labs/featureflip",
 	description: "MCP server for managing Featureflip feature flags from AI agents and editors",
 	keywords: [
@@ -360,7 +360,7 @@ function y(e, n) {
 		annotations: { destructiveHint: !0 }
 	}, async ({ project: e, flag: t }) => d(async () => (await n.api.request("DELETE", `${r(e)}/${i(t)}`), l({ deleted: t })))), e.registerTool("archive_flag", {
 		title: "Archive feature flag",
-		description: "Archive a flag (soft-hide, evaluation stops serving it). Reversible with restore_flag. Refused with FLAG_RECENTLY_EVALUATED while live traffic is still evaluating the flag, because archiving makes every caller fall back to its own hardcoded default — normally that means the code removal has merged but not deployed yet, and the refusal clears itself once it has.",
+		description: "Archive a flag (soft-hide, evaluation stops serving it). Reversible with restore_flag. Archive dependents first: refused with FLAG_HAS_DEPENDENTS while another live flag lists this one as a prerequisite, so archive those flags (blockedBy in find_stale_flags / list_removal_candidates) first. Refused with FLAG_RECENTLY_EVALUATED while live traffic is still evaluating the flag, because archiving makes every caller fall back to its own hardcoded default — normally that means the code removal has merged but not deployed yet, and the refusal clears itself once it has.",
 		inputSchema: t.object({
 			project: t.string(),
 			flag: t.string(),
@@ -677,59 +677,88 @@ function k(e, n) {
 }
 //#endregion
 //#region src/tools/workflows/stale-flags.ts
-var A = 50;
-function j(e, n) {
+var A = t.enum(["dead", "stale"]), j = 50;
+function M(e, n) {
 	e.registerTool("find_stale_flags", {
 		title: "Find stale flags",
-		description: `Find flags that look ready for code cleanup: not updated in N days AND either enabled in every environment (verify rollout is complete before removing — per-rule percentage ramps are not inspected) or disabled in every environment (dead — remove flag and code path). A flag whose expiry date (set_flag_expiry) has passed is always a candidate, however recently it was edited; if it is on in some environments and off in others its reason is past-expiry, meaning the owner has to decide which way to fold it. Every result carries expiresAtUtc, expired and owner (null when unowned). Pass owner to see one person's stale flags ("me" for your own) or "none" for the unowned ones. Checks at most ${A} candidates per call, expired flags first.`,
+		description: `Find flags that look ready for code cleanup: not updated in N days AND either enabled in every environment (verify rollout is complete before removing — per-rule percentage ramps are not inspected) or disabled in every environment (dead — remove flag and code path). A flag whose expiry date (set_flag_expiry) has passed is always a candidate, however recently it was edited; if it is on in some environments and off in others its reason is past-expiry, meaning the owner has to decide which way to fold it. Every result carries expiresAtUtc, expired and owner (null when unowned). Pass owner to see one person's stale flags ("me" for your own) or "none" for the unowned ones. Every result also carries blockedBy: the live flags that still list it as a prerequisite, which have to be removed and archived before it ([] when none). blockedBy is null when the server did not classify the flag as a removal candidate, which means unknown, not unblocked. A flag that other live flags list as a prerequisite has to be removed LAST, dependents first: archiving it while a dependent still names it makes that dependent fail its prerequisite check and serve its off variation, so archive_flag refuses it with FLAG_HAS_DEPENDENTS. Checks at most ${j} candidates per call, expired flags first.`,
 		inputSchema: t.object({
 			project: t.string(),
 			days: t.number().int().min(1).optional().default(30).describe("Minimum age in days since last update"),
 			owner: g
 		}),
 		annotations: { readOnlyHint: !0 }
-	}, async ({ project: e, days: t, owner: r }) => d(async () => {
-		let a = await _(n, r), o = `/api/v1/orgs/${i(n.org)}/projects/${i(e)}/flags`, s = Date.now(), c = s - t * 24 * 60 * 60 * 1e3, u = (e) => !!e.expiresAtUtc && new Date(e.expiresAtUtc).getTime() <= s, d = [], f;
+	}, async ({ project: e, days: t, owner: a }) => d(async () => {
+		let o = await _(n, a), s = `/api/v1/orgs/${i(n.org)}/projects/${i(e)}/flags`, c = Date.now(), u = c - t * 24 * 60 * 60 * 1e3, d = (e) => !!e.expiresAtUtc && new Date(e.expiresAtUtc).getTime() <= c, f = [], p;
 		do {
-			let e = await n.api.request("GET", o, { query: {
+			let e = await n.api.request("GET", s, { query: {
 				archived: !1,
 				limit: 100,
-				cursor: f,
-				owner: a
+				cursor: p,
+				owner: o
 			} });
-			d.push(...(e.items ?? []).filter((e) => !!e.key && !!e.name && !!e.updatedAt && (new Date(e.updatedAt).getTime() < c || u(e)))), f = e.next_cursor ?? void 0;
-		} while (f);
-		d.sort((e, t) => Number(u(t)) - Number(u(e)));
-		let p = d.length > A, m = d.slice(0, A), h = [];
-		for (let e of m) {
-			let t = await n.api.request("GET", `${o}/${i(e.key)}/environments`);
+			f.push(...(e.items ?? []).filter((e) => !!e.key && !!e.name && !!e.updatedAt && (new Date(e.updatedAt).getTime() < u || d(e)))), p = e.next_cursor ?? void 0;
+		} while (p);
+		f.sort((e, t) => Number(d(t)) - Number(d(e)));
+		let m = f.length > j, h = f.slice(0, j), g = [];
+		for (let e of h) {
+			let t = await n.api.request("GET", `${s}/${i(e.key)}/environments`);
 			if (t.length === 0) continue;
-			let r = u(e), a = t.every((e) => e.isEnabled), s = t.every((e) => !e.isEnabled);
-			(a || s || r) && h.push({
+			let r = d(e), a = t.every((e) => e.isEnabled), o = t.every((e) => !e.isEnabled);
+			(a || o || r) && g.push({
 				key: e.key,
 				name: e.name,
 				updatedAt: e.updatedAt,
 				expiresAtUtc: e.expiresAtUtc ?? null,
 				expired: r,
 				owner: e.owner ?? null,
-				reason: a ? "enabled-everywhere" : s ? "disabled-everywhere" : "past-expiry",
-				environments: t.length
+				reason: a ? "enabled-everywhere" : o ? "disabled-everywhere" : "past-expiry",
+				environments: t.length,
+				blockedBy: null
 			});
 		}
+		let v;
+		if (g.length > 0) try {
+			let e = /* @__PURE__ */ new Map(), t;
+			do {
+				let r = await n.api.request("GET", `${s}/removal-candidates`, { query: {
+					staleness: "stale",
+					limit: 100,
+					cursor: t
+				} });
+				for (let t of r.items ?? []) t.key && t.blockedBy && e.set(t.key, t.blockedBy);
+				t = r.next_cursor ?? void 0;
+			} while (t);
+			for (let t of g) t.blockedBy = e.get(t.key) ?? null;
+		} catch (e) {
+			if (!(e instanceof r)) throw e;
+			v = `Could not read removal-candidates (${e.status} ${e.envelope.error}), so blockedBy is unknown for every flag. archive_flag still refuses any flag that a live flag depends on (FLAG_HAS_DEPENDENTS).`;
+		}
 		return l({
 			project: e,
 			olderThanDays: t,
-			...a ? { owner: a } : {},
-			checked: m.length,
-			truncated: p,
-			...p ? { note: `Only the first ${A} of ${d.length} candidates were checked.` } : {},
-			stale: h
+			...o ? { owner: o } : {},
+			checked: h.length,
+			truncated: m,
+			...m ? { note: `Only the first ${j} of ${f.length} candidates were checked.` } : {},
+			...v ? { blockedByNote: v } : {},
+			stale: g
 		});
-	}));
+	})), e.registerTool("list_removal_candidates", {
+		title: "List removal candidates",
+		description: "List the flags the server is confident can be removed from code, the same list the Featureflip flag cleanup GitHub Action works from. Each item has key, reason, status (Dead or Stale), treatment (true = keep the on-branch, false = keep the off-branch) and blockedBy: the live flags that still list it as a prerequisite. Only remove a flag whose blockedBy is empty. A flag that other live flags list as a prerequisite has to be removed LAST, dependents first: archiving it while a dependent still names it makes that dependent fail its prerequisite check and serve its off variation, so archive_flag refuses it with FLAG_HAS_DEPENDENTS. staleness \"dead\" (the default) returns only dead flags, \"stale\" adds stale ones. Paginated via cursor.",
+		inputSchema: t.object({
+			project: t.string().describe("Project key"),
+			staleness: A.optional().describe("Minimum staleness tier: dead (default) or stale"),
+			limit: t.number().int().min(1).max(100).optional(),
+			cursor: t.string().optional()
+		}),
+		annotations: { readOnlyHint: !0 }
+	}, async ({ project: e, ...t }) => d(async () => l(await n.api.request("GET", `/api/v1/orgs/${i(n.org)}/projects/${i(e)}/flags/removal-candidates`, { query: t }))));
 }
 //#endregion
 //#region src/tools/workflows/snippets.ts
-var M = [
+var N = [
 	"js",
 	"node",
 	"browser",
@@ -741,16 +770,16 @@ var M = [
 	"php",
 	"ruby",
 	"swift"
-], N = [
+], P = [
 	"browser",
 	"react",
 	"swift"
 ];
-function P(e) {
-	return N.includes(e);
+function F(e) {
+	return P.includes(e);
 }
-var F = "Uses a SERVER-side SDK key (Featureflip dashboard → environment → SDK keys).", I = "Uses a CLIENT-side SDK key (safe to ship to browsers/apps).";
-function L(e, t) {
+var I = "Uses a SERVER-side SDK key (Featureflip dashboard → environment → SDK keys).", L = "Uses a CLIENT-side SDK key (safe to ship to browsers/apps).";
+function R(e, t) {
 	switch (e) {
 		case "js": return {
 			install: "npm install @featureflip/js",
@@ -765,7 +794,7 @@ const enabled = client.boolVariation('${t}', { user_id: userId }, false);
 if (enabled) {
   // new code path
 }`,
-			notes: F
+			notes: I
 		};
 		case "node": return {
 			install: "npm install @featureflip/node",
@@ -776,7 +805,7 @@ const enabled = client.boolVariation('${t}', { user_id: userId }, false);
 if (enabled) {
   // new code path
 }`,
-			notes: F
+			notes: I
 		};
 		case "browser": return {
 			install: "npm install @featureflip/browser",
@@ -788,7 +817,7 @@ const enabled = client.boolVariation('${t}', false);
 if (enabled) {
   // new code path
 }`,
-			notes: I
+			notes: L
 		};
 		case "react": return {
 			install: "npm install @featureflip/react @featureflip/browser",
@@ -801,7 +830,7 @@ function MyComponent() {
   const enabled = useFeatureFlag('${t}', false);
   return enabled ? <NewExperience /> : <CurrentExperience />;
 }`,
-			notes: I
+			notes: L
 		};
 		case "python": return {
 			install: "pip install featureflip",
@@ -812,7 +841,7 @@ enabled = client.variation("${t}", {"user_id": user_id}, default=False)
 if enabled:
     # new code path
     ...`,
-			notes: F
+			notes: I
 		};
 		case "csharp": return {
 			install: "dotnet add package Featureflip.Client",
@@ -825,7 +854,7 @@ if (enabled)
 {
     // new code path
 }`,
-			notes: F
+			notes: I
 		};
 		case "java": return {
 			install: "implementation 'io.featureflip:featureflip-java:2.0.0'",
@@ -839,7 +868,7 @@ boolean enabled = client.boolVariation("${t}",
 if (enabled) {
     // new code path
 }`,
-			notes: F
+			notes: I
 		};
 		case "go": return {
 			install: "go get github.com/canopy-labs/featureflip-go/v2",
@@ -855,7 +884,7 @@ ctx := featureflip.EvaluationContext{UserID: userID}
 if client.BoolVariation("${t}", ctx, false) {
     // new code path
 }`,
-			notes: F
+			notes: I
 		};
 		case "php": return {
 			install: "composer require featureflip/featureflip-php",
@@ -870,7 +899,7 @@ $enabled = $client->boolVariation('${t}', ['user_id' => $userId], false);
 if ($enabled) {
     // new code path
 }`,
-			notes: F + " Requires PSR-16 cache and PSR-18 HTTP implementations."
+			notes: I + " Requires PSR-16 cache and PSR-18 HTTP implementations."
 		};
 		case "ruby": return {
 			install: "gem \"featureflip\"",
@@ -881,7 +910,7 @@ enabled = client.bool_variation("${t}", { "user_id" => user_id }, false)
 if enabled
   # new code path
 end`,
-			notes: F
+			notes: I
 		};
 		case "swift": return {
 			install: ".package(url: \"https://github.com/canopy-labs/featureflip-swift\", from: \"2.0.0\")",
@@ -894,13 +923,13 @@ let enabled = client.boolVariation("${t}", default: false)
 if enabled {
     // new code path
 }`,
-			notes: I
+			notes: L
 		};
 	}
 }
 //#endregion
 //#region src/tools/workflows/wrap-feature.ts
-function R(e, n) {
+function z(e, n) {
 	e.registerTool("wrap_feature", {
 		title: "Wrap a feature in a new flag",
 		description: "Create a Boolean feature flag and get back the SDK code snippet to guard the new code path with it. Returns the snippet only — apply the edit yourself. The flag starts DISABLED in every environment; enable it with toggle_flag when ready.",
@@ -910,7 +939,7 @@ function R(e, n) {
 			name: t.string().optional().describe("Display name; defaults to the key"),
 			description: t.string().optional().describe("What this flag guards"),
 			tags: t.array(t.string()).optional(),
-			language: t.enum(M).describe("SDK language of the codebase being edited"),
+			language: t.enum(N).describe("SDK language of the codebase being edited"),
 			idempotency_key: t.string().optional()
 		}),
 		annotations: { destructiveHint: !1 }
@@ -922,10 +951,10 @@ function R(e, n) {
 				type: "Boolean",
 				description: a,
 				tags: o,
-				...P(s) ? { clientSideVisible: !0 } : {}
+				...F(s) ? { clientSideVisible: !0 } : {}
 			},
 			idempotencyKey: c
-		}), d = L(s, t);
+		}), d = R(s, t);
 		return l({
 			flag: u,
 			integration: {
@@ -944,17 +973,17 @@ function R(e, n) {
 }
 //#endregion
 //#region src/server.ts
-function z(t) {
+function B(t) {
 	let r = new e({
 		name: "featureflip",
 		version: n
 	});
-	return p(r, t), m(r, t), h(r, t), y(r, t), x(r, t), w(r, t), T(r, t), k(r, t), j(r, t), R(r, t), r;
+	return p(r, t), m(r, t), h(r, t), y(r, t), x(r, t), w(r, t), T(r, t), k(r, t), M(r, t), z(r, t), r;
 }
 //#endregion
 //#region src/config.ts
-var B = "FEATUREFLIP_TOKEN is required. Create one in the Featureflip dashboard — Settings → API Tokens (personal token, ffp_...) or Organization Settings → Service Tokens (ffs_...) — and set it in your MCP client config.";
-function V(e = process.env) {
+var V = "FEATUREFLIP_TOKEN is required. Create one in the Featureflip dashboard — Settings → API Tokens (personal token, ffp_...) or Organization Settings → Service Tokens (ffs_...) — and set it in your MCP client config.";
+function H(e = process.env) {
 	let t = e.FEATUREFLIP_TOKEN?.trim();
 	return t ? {
 		token: t,
@@ -962,14 +991,14 @@ function V(e = process.env) {
 		org: e.FEATUREFLIP_ORG?.trim() || void 0
 	} : null;
 }
-function H(e = process.env) {
-	let t = V(e);
-	if (!t) throw Error(B);
+function U(e = process.env) {
+	let t = H(e);
+	if (!t) throw Error(V);
 	return t;
 }
 //#endregion
 //#region src/org.ts
-async function U(e, t) {
+async function W(e, t) {
 	if (t) return t;
 	let n = (await e.request("GET", "/api/v1/orgs", { query: { limit: 100 } })).items ?? [];
 	if (n.length === 1) {
@@ -980,4 +1009,4 @@ async function U(e, t) {
 	throw n.length === 0 ? Error("The token can see no organizations. Check the token in the Featureflip dashboard.") : Error(`The token can see ${n.length} organizations — set FEATUREFLIP_ORG to one of: ` + n.map((e) => e.slug ?? "?").join(", "));
 }
 //#endregion
-export { z as a, n as c, V as i, B as n, r as o, H as r, c as s, U as t };
+export { B as a, n as c, H as i, V as n, r as o, U as r, c as s, W as t };

package/dist/tools/flags.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flags.d.ts","sourceRoot":"","sources":["../../src/tools/flags.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAI9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAKhD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAgQ3E"}
+{"version":3,"file":"flags.d.ts","sourceRoot":"","sources":["../../src/tools/flags.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAI9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAKhD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAkQ3E"}

package/dist/tools/workflows/stale-flags.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stale-flags.d.ts","sourceRoot":"","sources":["../../../src/tools/workflows/stale-flags.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAI9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAajD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAoGhF"}
+{"version":3,"file":"stale-flags.d.ts","sourceRoot":"","sources":["../../../src/tools/workflows/stale-flags.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAI9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAsBjD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAmKhF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@featureflip/mcp",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "mcpName": "io.github.canopy-labs/featureflip",
   "description": "MCP server for managing Featureflip feature flags from AI agents and editors",
   "keywords": [