@glie/mcp-polaris 0.8.0 → 0.10.0

package/dist/index.js

@@ -3,6 +3,21 @@
 
 // ../../src/mcp/index.ts
 import { createInterface } from "readline";
+
+// ../../src/lib/media-types.ts
+var MEDIA_TYPES = [
+  { mime: "image/png", kind: "image", ext: ".png", aliases: [] },
+  { mime: "image/jpeg", kind: "image", ext: ".jpg", aliases: [".jpeg"] },
+  { mime: "image/webp", kind: "image", ext: ".webp", aliases: [] },
+  { mime: "video/mp4", kind: "video", ext: ".mp4", aliases: [] },
+  { mime: "video/quicktime", kind: "video", ext: ".mov", aliases: [] },
+  { mime: "video/webm", kind: "video", ext: ".webm", aliases: [] }
+];
+function allMimes() {
+  return MEDIA_TYPES.map((t) => t.mime);
+}
+
+// ../../src/mcp/index.ts
 var BASE = process.env.POLARIS_URL ?? "http://127.0.0.1:7843";
 var TOKEN = process.env.POLARIS_TOKEN ?? "";
 var PROJECT = process.env.POLARIS_PROJECT ?? "";
@@ -123,12 +138,27 @@ var TOOLS = [
   },
   {
     name: "polaris.project.create",
-    description: "Create a project (human-only).",
-    inputSchema: objSchema({ key: strSchema(), name: strSchema(), description_md: strSchema() }, [
-      "key",
+    description: "Create a project (human-only). With GitHub connected a repository is required \u2014 pick one from polaris.github.repositories. One repository holds one project.",
+    inputSchema: objSchema({
+      key: strSchema(),
+      name: strSchema(),
+      repo_url: strSchema("https://github.com/owner/repo \u2014 required when GitHub is connected")
+    }, ["key", "name"]),
+    call: async (args) => (await apiCall("POST", "/api/projects", args)).body
+  },
+  {
+    name: "polaris.github.repositories",
+    description: "Repositories a project may live in (human-only): whether GitHub is connected, and every repository the GitHub App reaches \u2014 available, or why not (already another project's, or archived).",
+    inputSchema: objSchema({}),
+    call: async () => (await apiCall("GET", "/api/github/repositories")).body
+  },
+  {
+    name: "polaris.github.repository.create",
+    description: "Create a repository ready for Polaris (human-only): private, initialised, Issues on, with a dev branch. Needs the GitHub App's Administration: write permission \u2014 the answer says where to grant it when missing. Then create the project with its URL.",
+    inputSchema: objSchema({ name: strSchema("the repository name \u2014 usually the project key") }, [
       "name"
     ]),
-    call: async (args) => (await apiCall("POST", "/api/projects", args)).body
+    call: async (args) => (await apiCall("POST", "/api/github/repositories", args)).body
   },
   {
     name: "polaris.project.arm",
@@ -213,7 +243,7 @@ var TOOLS = [
     description: "Step 1 of attaching an image to a milestone: reserve an upload key. Returns file_key + upload_url \u2014 PUT the raw image bytes to upload_url YOURSELF (curl/fetch from your shell; this call does not carry bytes), then call polaris.milestone.attachment_create with the same file_key. A link isn't an attachment at all \u2014 just write `[text](url)` straight into the milestone's description_md.",
     inputSchema: objSchema({
       id: intSchema("milestone id"),
-      mime: strSchema("image/png | image/jpeg | image/webp"),
+      mime: strSchema(allMimes().join(" | ")),
       size_bytes: intSchema()
     }, ["id", "mime", "size_bytes"]),
     call: async (args) => (await apiCall("POST", `/api/milestones/${args.id}/attachments/presign`, {
@@ -325,7 +355,7 @@ var TOOLS = [
     description: "Step 1 of attaching an image to a task: reserve an upload key. Returns file_key + upload_url \u2014 PUT the raw image bytes to upload_url YOURSELF (curl/fetch from your shell; this call does not carry bytes), then call polaris.task.attachment_create with the same file_key. A link isn't an attachment at all \u2014 just write `[text](url)` straight into the task's description_md.",
     inputSchema: objSchema({
       id: intSchema("task id"),
-      mime: strSchema("image/png | image/jpeg | image/webp"),
+      mime: strSchema(allMimes().join(" | ")),
       size_bytes: intSchema()
     }, ["id", "mime", "size_bytes"]),
     call: async (args) => (await apiCall("POST", `/api/tasks/${args.id}/attachments/presign`, {
@@ -393,9 +423,16 @@ var TOOLS = [
   },
   {
     name: "polaris.task.transition",
-    description: "Move a task to its next status when you finish a stage (e.g. dev\u2192test once your PR is up). Enforced flow: draft\u2192backlog\u2192dev\u2192test\u2192approval\u2192release\u2192done (any\u2192canceled). Illegal jumps are rejected. Neither terminal state is a dead end: canceled\u2192draft and done\u2192approval undo the last step, so a mistaken close is recoverable without touching the database. The approval\u2192release gate is polaris.task.approve (human-only).",
-    inputSchema: objSchema({ id: intSchema(), status: strSchema() }, ["id", "status"]),
-    call: async (args) => (await apiCall("POST", `/api/tasks/${args.id}/state`, { status: args.status })).body
+    description: 'Move a task to its next status when you finish a stage (e.g. dev\u2192test once your PR is up). Enforced flow: draft\u2192backlog\u2192dev\u2192test\u2192approval\u2192release\u2192done (any\u2192canceled). Illegal jumps are rejected. Neither terminal state is a dead end: canceled\u2192draft and done\u2192approval undo the last step, so a mistaken close is recoverable without touching the database. The approval\u2192release gate is polaris.task.approve (human-only).\n\nThree of these moves hand the work to someone else, and `note` is REQUIRED on them \u2014 it is the message that travels with it, and it lands in the task chat as a handover: `dev\u2192test` (what you did and what to look at first), `test\u2192dev` (why it comes back \u2014 it is what the next attempt is made from), and `test\u2192approval`, which also requires `verdict` ("approved" or "rejected": a person is about to decide, and they need to know whether this passed or ran out of rounds). Every other move takes no note.',
+    inputSchema: objSchema({ id: intSchema(), status: strSchema(), note: strSchema(), verdict: strSchema() }, ["id", "status"]),
+    call: async (args) => {
+      const body = { status: args.status };
+      if (typeof args.note === "string")
+        body.note = args.note;
+      if (typeof args.verdict === "string")
+        body.verdict = args.verdict;
+      return (await apiCall("POST", `/api/tasks/${args.id}/state`, body)).body;
+    }
   },
   {
     name: "polaris.task.approve",
@@ -729,22 +766,54 @@ var TOOLS = [
   },
   {
     name: "polaris.presence.list",
-    description: "Where a product exists in the world: the channels it publishes on and the directories it is listed in, each with its state (missing \u2192 exists \u2192 connected). Read this before writing a campaign \u2014 a channel that is not connected cannot be published to.",
+    description: "Where a product exists in the world: the channels it publishes on and the directories it is listed in, each with its state (missing \u2192 exists \u2192 connected). Read this before writing a campaign \u2014 a channel that is not connected cannot be published to. Each row carries what the catalogue knows in `place`: read `place.actor` before planning work there \u2014 `agent` means there is a publishing tool, `human` means a person does it and records where, and `place.final_state` says how far this particular place can ever get.",
     inputSchema: objSchema({ key: strSchema("project key") }, ["key"]),
     call: async (args) => (await apiCall("GET", `/api/projects/${args.key}/presences`)).body
   },
+  {
+    name: "polaris.place.list",
+    description: "The catalogue of places a product can exist in \u2014 every social network, paid surface, syndication platform, app store and software directory the studio knows about. The world's list, not ours: read it to decide WHERE a product should be. Each entry says what the place is, who acts there (`actor`: agent = there is a publishing tool; human = a person does it and records where), how far it can get (`final_state`), WHY it is worth being there (`note`), and the URL that was verified (`source`). Whether we are actually there is a PRESENCE \u2014 polaris.presence.list.",
+    inputSchema: objSchema({}),
+    call: async () => (await apiCall("GET", "/api/places")).body
+  },
+  {
+    name: "polaris.org_credential.list",
+    description: "The accounts that serve MANY products at once \u2014 Google Play Console, App Store Connect, a vendor login that covers several listings. Read it to know whether an entry can be opened at all, and by whom: the row names the owner, and the password never leaves the server. A presence points at one of these when the credential is the org's rather than the product's.",
+    inputSchema: objSchema({}),
+    call: async () => (await apiCall("GET", "/api/org-credentials")).body
+  },
+  {
+    name: "polaris.org_credential.add",
+    description: "Register an org-wide credential (human-only). Idempotent on slug + login: the same Play Console twice is the same Play Console, and a DIFFERENT login on the same site is a different credential. A place reached by OAuth is refused \u2014 that credential already lives in social accounts. Never send a password you were not given.",
+    inputSchema: objSchema({
+      slug: strSchema("play-store \xB7 app-store \xB7 capterra \u2026"),
+      label: strSchema("human name; defaults to the catalogue's"),
+      url: strSchema("where you log in"),
+      login_email: strSchema(),
+      notes: strSchema("who holds the second factor, and anything the next person needs")
+    }, ["slug"]),
+    call: async (args) => (await apiCall("POST", "/api/org-credentials", args)).body
+  },
+  {
+    name: "polaris.org_credential.verify",
+    description: "Stamp an org credential as CHECKED \u2014 it still opens the door (human-only). A credential does not announce that it expired: that is discovered on the day it is needed, which is always the worst day.",
+    inputSchema: objSchema({ id: intSchema("credential id") }, ["id"]),
+    call: async (args) => (await apiCall("POST", `/api/org-credentials/${args.id}/verify`, {})).body
+  },
   {
     name: "polaris.presence.add",
-    description: "Add a place to a project (human-only). kind: channel (we publish there) | listing (we keep an entry there). Idempotent on slug: adding the same place twice fills in what was left empty. Never send a password you were not given.",
+    description: "Add a place to a project (human-only). kind: channel (we publish there) | listing (we keep an entry there). Idempotent on slug + MARKET: adding Instagram BR twice is the same Instagram BR, and Instagram US is a different presence. Never send a password you were not given.",
     inputSchema: objSchema({
       key: strSchema("project key"),
       kind: strSchema("channel | listing"),
       slug: strSchema("instagram \xB7 linkedin \xB7 reddit \xB7 g2 \xB7 capterra \u2026"),
       label: strSchema("human name, e.g. Instagram"),
+      market: strSchema("the market this one serves (BR \xB7 US \xB7 \u2026) \u2014 it is half the identity, so a product with an account per market gets one presence per market. Omit where the place has no market (a blog, a store entry)."),
       url: strSchema("public profile or listing URL"),
       handle: strSchema("@handle or account name"),
-      state: strSchema("missing | exists | connected (channel only)"),
+      state: strSchema("missing | exists | connected \u2014 connected means there IS a link"),
       login_email: strSchema(),
+      org_credential_id: intSchema("the org-wide account that opens this entry, when there is one"),
       notes: strSchema()
     }, ["key", "kind", "slug", "label"]),
     call: async (args) => {
@@ -763,6 +832,7 @@ var TOOLS = [
       handle: strSchema(),
       state: strSchema("missing | exists | connected"),
       login_email: strSchema(),
+      org_credential_id: intSchema("the org-wide account that opens this entry; null unlinks"),
       notes: strSchema()
     }, ["key", "id"]),
     call: async (args) => {
@@ -907,11 +977,23 @@ var TOOLS = [
     inputSchema: objSchema({ id: intSchema("stack id"), task_id: intSchema() }, ["id", "task_id"]),
     call: async (args) => (await apiCall("DELETE", `/api/stacks/${args.id}/tasks`, { task_id: args.task_id })).body
   },
+  {
+    name: "polaris.task.escalate",
+    description: "You are making a piece and something needs a HUMAN DECISION before it can be made \u2014 a premise in the brief that turned out false, two ways forward and no ground to choose between them, a collision with something already live. Stops the piece and puts it in front of a person, in `approval`, with your question attached.\n\nNot for a piece you could not finish: that is what ending the run does. This is for one you are not going to decide alone.\n\nThe `note` is the whole point \u2014 what you found, what the options are, and what you are not choosing on your own. Without it this is an abandoned piece with a flag on it.",
+    inputSchema: objSchema({
+      id: intSchema(),
+      note: strSchema("the question \u2014 what was found, the options, and what you will not decide")
+    }, ["id", "note"]),
+    call: async (args) => (await apiCall("POST", `/api/tasks/${args.id}/escalate`, { note: args.note })).body
+  },
   {
     name: "polaris.task.return_to_backlog",
-    description: "Send an approval task back for rework (human-only) \u2014 to its sticky developer (dev) or backlog. Clears escalation.",
-    inputSchema: objSchema({ id: intSchema() }, ["id"]),
-    call: async (args) => (await apiCall("POST", `/api/tasks/${args.id}/return-to-backlog`)).body
+    description: "Send an approval task back for rework (human-only) \u2014 to its sticky developer (dev) or backlog. Clears escalation.\n\n**Write the `note`.** On a rework the agent does NOT re-read the brief: the request it gets says *you already have the brief*, and the note is the only thing that reaches it. Sending a piece back without one asks for the same piece again \u2014 and an agent that finds the field empty concludes the worker restarted and changes nothing, which is what it should do.",
+    inputSchema: objSchema({
+      id: intSchema(),
+      note: strSchema("why it is coming back \u2014 this is the brief for the next attempt")
+    }, ["id"]),
+    call: async (args) => (await apiCall("POST", `/api/tasks/${args.id}/return-to-backlog`, args.note ? { note: args.note } : undefined)).body
   },
   {
     name: "polaris.chat.post",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@glie/mcp-polaris",
-  "version": "0.8.0",
+  "version": "0.10.0",
   "description": "Model Context Protocol (stdio) server exposing Polaris, glie's ops platform, as native tools in Claude Code and any MCP client.",
   "license": "Apache-2.0",
   "author": "glie <carlos@glie.ai>",
@@ -8,11 +8,7 @@
   "bin": {
     "mcp-polaris": "dist/index.js"
   },
-  "files": [
-    "dist",
-    "README.md",
-    "LICENSE"
-  ],
+  "files": ["dist", "README.md", "LICENSE"],
   "engines": {
     "node": ">=18"
   },
@@ -25,14 +21,7 @@
     "directory": "packages/mcp-polaris"
   },
   "homepage": "https://polaris.glie.ai",
-  "keywords": [
-    "mcp",
-    "model-context-protocol",
-    "claude",
-    "claude-code",
-    "polaris",
-    "glie"
-  ],
+  "keywords": ["mcp", "model-context-protocol", "claude", "claude-code", "polaris", "glie"],
   "scripts": {
     "build": "bun run build.ts",
     "prepublishOnly": "bun run build.ts"