@fruition/fcp-mcp-server 1.28.0 → 1.29.0

package/README.md

@@ -25,6 +25,24 @@ MCP (Model Context Protocol) server that gives Claude Code direct access to the
 | `fcp_update_freeze` | Edit an existing freeze's window or reason |
 | `fcp_unfreeze` | Remove a freeze by id, or clear all freezes for a repo |
 
+### Certificate Tools
+
+| Tool | Description |
+|------|-------------|
+| `fcp_list_certificates` | Fleet TLS certs with status/expiry/cluster filters |
+| `fcp_get_certificate` | Single certificate detail (issuer, SANs, expiry) |
+| `fcp_scan_certificates` | Trigger a cert-monitor scan run |
+
+### Tasker Job Control Tools
+
+| Tool | Description |
+|------|-------------|
+| `fcp_spawn_task_job` | Spawn an automated code-change job for an Unroo task |
+| `fcp_get_job_status` | Job status by job_id/task_id (or all + stats) |
+| `fcp_list_jobs` | List the current Tasker job queue |
+| `fcp_approve_job` | Approve merge for a job needing human sign-off |
+| `fcp_override_merge_window` | Force-allow an auto-merge outside its deploy window (super_admin) |
+
 ### Unroo Task Management Tools
 
 | Tool | Description |

package/dist/index.d.ts

@@ -360,6 +360,41 @@ export declare class FCPClient {
         id?: number;
         repo?: string;
     }): Promise<any>;
+    listCertificates(filters?: {
+        status?: string;
+        cluster?: string;
+        namespace?: string;
+        certType?: string;
+        expiringWithinDays?: number;
+        sortBy?: string;
+        sortDir?: string;
+        page?: number;
+        limit?: number;
+    }): Promise<any>;
+    getCertificate(certId: string | number): Promise<any>;
+    scanCertificates(input?: {
+        dryRun?: boolean;
+    }): Promise<any>;
+    spawnTaskJob(input: {
+        task_id: string;
+        task_title: string;
+        project_key: string;
+        task_description?: string;
+        labels?: string[];
+    }): Promise<any>;
+    getJobStatus(opts: {
+        job_id?: string;
+        task_id?: string;
+    }): Promise<any>;
+    listJobs(opts?: {
+        refresh?: boolean;
+    }): Promise<any>;
+    approveJob(id: string): Promise<any>;
+    overrideMergeWindow(id: string, input: {
+        action: 'set' | 'clear';
+        reason?: string;
+        ttl_minutes?: number;
+    }): Promise<any>;
     backupListSites(): Promise<any>;
     backupGetConfig(): Promise<any>;
     backupListEligible(): Promise<any>;

package/dist/index.js

@@ -99,6 +99,7 @@ const TOOL_PERMISSIONS = {
     fcp_backup_delete_pairing: 'super_admin',
     fcp_filesync_cancel_sync: 'super_admin',
     fcp_unfreeze: 'super_admin', // lifting a freeze releases a held deploy
+    fcp_override_merge_window: 'super_admin', // bypasses the deploy-window safety gate
     // --- admin+: mutating ops with real-world side effects ---
     fcp_create_launch: 'admin',
     fcp_update_launch: 'admin',
@@ -111,6 +112,9 @@ const TOOL_PERMISSIONS = {
     fcp_trusted_ip_update_range: 'admin',
     fcp_freeze_repo: 'admin',
     fcp_update_freeze: 'admin',
+    fcp_scan_certificates: 'admin',
+    fcp_spawn_task_job: 'admin',
+    fcp_approve_job: 'admin',
     fcp_backup_enable: 'admin',
     fcp_backup_trigger: 'admin',
     fcp_backup_check_trigger: 'admin',
@@ -161,6 +165,10 @@ const TOOL_PERMISSIONS = {
     fcp_trusted_ip_list_ranges: 'viewer',
     fcp_trusted_ip_export: 'viewer',
     fcp_list_freezes: 'viewer',
+    fcp_list_certificates: 'viewer',
+    fcp_get_certificate: 'viewer',
+    fcp_list_jobs: 'viewer',
+    fcp_get_job_status: 'viewer',
     fcp_backup_list_sites: 'viewer',
     fcp_backup_get_config: 'viewer',
     fcp_backup_list_eligible: 'viewer',
@@ -829,6 +837,79 @@ export class FCPClient {
         });
     }
     // ============================================================================
+    // Certificate Methods
+    // ============================================================================
+    async listCertificates(filters) {
+        const p = new URLSearchParams();
+        if (filters?.status)
+            p.append('status', filters.status);
+        if (filters?.cluster)
+            p.append('cluster', filters.cluster);
+        if (filters?.namespace)
+            p.append('namespace', filters.namespace);
+        if (filters?.certType)
+            p.append('certType', filters.certType);
+        if (filters?.expiringWithinDays != null)
+            p.append('expiringWithinDays', String(filters.expiringWithinDays));
+        if (filters?.sortBy)
+            p.append('sortBy', filters.sortBy);
+        if (filters?.sortDir)
+            p.append('sortDir', filters.sortDir);
+        if (filters?.page != null)
+            p.append('page', String(filters.page));
+        if (filters?.limit != null)
+            p.append('limit', String(filters.limit));
+        const qs = p.toString();
+        return this.fetch(`/api/certificates${qs ? `?${qs}` : ''}`);
+    }
+    async getCertificate(certId) {
+        return this.fetch(`/api/certificates/${encodeURIComponent(String(certId))}`);
+    }
+    async scanCertificates(input) {
+        return this.fetch('/api/certificates/scan', {
+            method: 'POST',
+            body: JSON.stringify(input || {}),
+        });
+    }
+    // ============================================================================
+    // Tasker Job Control Methods
+    // ============================================================================
+    async spawnTaskJob(input) {
+        return this.fetch('/api/ticket-workflow/spawn', {
+            method: 'POST',
+            body: JSON.stringify(input),
+        });
+    }
+    async getJobStatus(opts) {
+        const p = new URLSearchParams();
+        if (opts.job_id)
+            p.append('job_id', opts.job_id);
+        if (opts.task_id)
+            p.append('task_id', opts.task_id);
+        const qs = p.toString();
+        return this.fetch(`/api/ticket-workflow/status${qs ? `?${qs}` : ''}`);
+    }
+    async listJobs(opts) {
+        const qs = opts?.refresh ? '?refresh=true' : '';
+        return this.fetch(`/api/ticket-workflow/queue${qs}`);
+    }
+    async approveJob(id) {
+        return this.fetch(`/api/ticket-workflow/jobs/${encodeURIComponent(id)}/approve`, {
+            method: 'POST',
+            body: JSON.stringify({}),
+        });
+    }
+    async overrideMergeWindow(id, input) {
+        const path = `/api/ticket-workflow/jobs/${encodeURIComponent(id)}/override`;
+        if (input.action === 'clear') {
+            return this.fetch(path, { method: 'DELETE' });
+        }
+        const body = { reason: input.reason };
+        if (input.ttl_minutes != null)
+            body.ttl_minutes = input.ttl_minutes;
+        return this.fetch(path, { method: 'POST', body: JSON.stringify(body) });
+    }
+    // ============================================================================
     // Backup Management Methods
     // ============================================================================
     async backupListSites() {
@@ -3159,6 +3240,104 @@ const TOOLS = [
         },
     },
     // ============================================================================
+    // Certificate Tools
+    // ============================================================================
+    {
+        name: 'fcp_list_certificates',
+        description: 'List TLS certificates across the fleet (cert-monitor). Filter by status (valid|warning|critical|expired), expiringWithinDays, cluster, namespace, certType; sort and paginate. Use to find certs about to expire before a migration/cutover.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                status: { type: 'string', description: 'valid | warning | critical | expired | unknown' },
+                expiringWithinDays: { type: 'number', description: 'Only certs expiring within N days' },
+                cluster: { type: 'string', description: 'Filter by k8s cluster' },
+                namespace: { type: 'string', description: 'Filter by namespace' },
+                certType: { type: 'string', description: 'Filter by certificate type' },
+                sortBy: { type: 'string', description: 'name | cluster | namespace | certType | status | expiry | subjectCn' },
+                sortDir: { type: 'string', enum: ['asc', 'desc'], description: 'Sort direction (default asc)' },
+                page: { type: 'number', description: 'Page number (1-based)' },
+                limit: { type: 'number', description: 'Page size' },
+            },
+        },
+    },
+    {
+        name: 'fcp_get_certificate',
+        description: 'Get a single certificate by id, including issuer, SANs, expiry, and history.',
+        inputSchema: {
+            type: 'object',
+            properties: { certId: { type: 'string', description: 'Certificate id' } },
+            required: ['certId'],
+        },
+    },
+    {
+        name: 'fcp_scan_certificates',
+        description: 'Trigger a cert-monitor scan run across clusters to refresh certificate inventory and expiry. Pass dryRun=true to compute without persisting.',
+        inputSchema: {
+            type: 'object',
+            properties: { dryRun: { type: 'boolean', description: 'Compute without writing results (default false)' } },
+        },
+    },
+    // ============================================================================
+    // Tasker Job Control Tools
+    // ============================================================================
+    {
+        name: 'fcp_spawn_task_job',
+        description: 'Spawn a Tasker automated code-change job for an Unroo task (Claude Code in K8s -> PR). Requires task_id, task_title, project_key. Rejects if a job is already in progress for the task.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                task_id: { type: 'string', description: 'Unroo task id' },
+                task_title: { type: 'string', description: 'Task title' },
+                project_key: { type: 'string', description: 'Project key (resolves the repo)' },
+                task_description: { type: 'string', description: 'Optional task description / instructions' },
+                labels: { type: 'array', items: { type: 'string' }, description: 'Optional labels' },
+            },
+            required: ['task_id', 'task_title', 'project_key'],
+        },
+    },
+    {
+        name: 'fcp_get_job_status',
+        description: 'Get Tasker job status. Pass job_id or task_id for a specific job; omit both for all jobs + stats.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                job_id: { type: 'string', description: 'Tasker job id' },
+                task_id: { type: 'string', description: 'Unroo task id (alternative to job_id)' },
+            },
+        },
+    },
+    {
+        name: 'fcp_list_jobs',
+        description: 'List the current Tasker job queue. Pass refresh=true to re-sync statuses from K8s first.',
+        inputSchema: {
+            type: 'object',
+            properties: { refresh: { type: 'boolean', description: 'Re-sync from K8s before listing (default false)' } },
+        },
+    },
+    {
+        name: 'fcp_approve_job',
+        description: 'Approve the merge for a Tasker job that requires human sign-off (e.g. HIGH/CRITICAL security PRs). The job still respects its deploy window unless overridden.',
+        inputSchema: {
+            type: 'object',
+            properties: { id: { type: 'string', description: 'Tasker job id' } },
+            required: ['id'],
+        },
+    },
+    {
+        name: 'fcp_override_merge_window',
+        description: 'Force-allow a Tasker auto-merge OUTSIDE its configured deploy window (super_admin). action=set grants an override for ttl_minutes (reason required); action=clear cancels it. Bypasses the safety gate \u2014 use deliberately.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                id: { type: 'string', description: 'Tasker job id' },
+                action: { type: 'string', enum: ['set', 'clear'], description: 'set = grant override, clear = cancel' },
+                reason: { type: 'string', description: 'Justification (required when action=set)' },
+                ttl_minutes: { type: 'number', description: 'How long the override lasts (when action=set)' },
+            },
+            required: ['id', 'action'],
+        },
+    },
+    // ============================================================================
     // Backup Management Tools
     // ============================================================================
     {
@@ -5046,6 +5225,54 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
                 };
             }
             // ============================================================================
+            // Certificate Handlers
+            // ============================================================================
+            case 'fcp_list_certificates': {
+                const result = await client.listCertificates(args);
+                return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+            }
+            case 'fcp_get_certificate': {
+                const { certId } = args;
+                const result = await client.getCertificate(certId);
+                return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+            }
+            case 'fcp_scan_certificates': {
+                const { dryRun } = args;
+                const result = await client.scanCertificates({ dryRun });
+                return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+            }
+            // ============================================================================
+            // Tasker Job Control Handlers
+            // ============================================================================
+            case 'fcp_spawn_task_job': {
+                const { task_id, task_title, project_key, task_description, labels } = args;
+                const result = await client.spawnTaskJob({ task_id, task_title, project_key, task_description, labels });
+                return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+            }
+            case 'fcp_get_job_status': {
+                const { job_id, task_id } = args;
+                const result = await client.getJobStatus({ job_id, task_id });
+                return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+            }
+            case 'fcp_list_jobs': {
+                const { refresh } = args;
+                const result = await client.listJobs({ refresh });
+                return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+            }
+            case 'fcp_approve_job': {
+                const { id } = args;
+                const result = await client.approveJob(id);
+                return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+            }
+            case 'fcp_override_merge_window': {
+                const { id, action, reason, ttl_minutes } = args;
+                if (action === 'set' && (!reason || !reason.trim())) {
+                    throw new Error('fcp_override_merge_window: reason is required when action=set');
+                }
+                const result = await client.overrideMergeWindow(id, { action, reason, ttl_minutes });
+                return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+            }
+            // ============================================================================
             // Backup Management Handlers
             // ============================================================================
             case 'fcp_backup_list_sites': {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fruition/fcp-mcp-server",
-  "version": "1.28.0",
+  "version": "1.29.0",
   "description": "MCP Server for FCP Launch Coordination System - enables Claude Code to interact with FCP launches and track development time",
   "main": "dist/index.js",
   "type": "module",