@taiga-ai/mcp-server 0.25.0-dev.467 → 0.25.0-dev.469

package/dist/index.js

@@ -4892,7 +4892,7 @@ function registerMaintenanceTools(server, client) {
 	}));
 	server.registerTool("taiga_get_policy_standing", {
 		title: "Get a product's policy standing",
-		description: "How a product stands against the organization's published policies: summary counts, when the documents were assessed, and each violated control with its violations (critical and high only, citing the policy sentence and the contradicting passage) and the work on each. state: breached (open scanner findings map to it, by findingsByTier; routine-only is not urgent) or diverged (the documents contradict it). live: false means the violation's initiative ended without fixing it: it needs a person or a new fix. An unlisted control is not \"passing\" (summary.controlsWithNothingRecorded counts them). full: true adds evidence and resolved ones. Fix with taiga_fix_policy_violation.",
+		description: "How a product stands against the organization's published policies: summary counts, when the documents were assessed, and each violated control with its violations (critical and high only, citing the policy sentence and the contradicting passage) and the work on each. state: breached (open scanner findings map to it, by findingsByTier; routine-only is not urgent) or diverged (the documents contradict it). live: false means the violation's initiative ended without fixing it: it needs a person or a new fix. raisedFor: false means the link is the backlog planner's: it said an initiative a person asked it for would close the violation, which may be a dedicated fix or broader work; true means a fix was raised for it (taiga_fix_policy_violation or the sweep). An unlisted control is not \"passing\" (summary.controlsWithNothingRecorded counts them). full: true adds evidence and resolved ones. Fix with taiga_fix_policy_violation.",
 		inputSchema: z.object({
 			productId,
 			full: z.boolean().optional().describe("Carry each violation's evidence and policy excerpt, cut to about 1,500 characters each, and up to 20 resolved violations (default false)"),
@@ -5227,7 +5227,8 @@ const SETUP_TASK_FIELDS = [
 	"providerActionUrl",
 	"inboxItemId",
 	"inboxItemStatus",
-	"createdAt"
+	"createdAt",
+	"stale"
 ];
 /** The API's count across every page, on the first page; nothing from an API that does not send one. */
 function totalOf(result) {
@@ -5267,7 +5268,10 @@ function sameKeyOnce(rows) {
 			const { alsoFiledAs: _also, ...was } = kept;
 			for (const field of Object.keys(kept)) delete kept[field];
 			Object.assign(kept, row, { alsoFiledAs: [...also, record(was)] });
-		} else kept["alsoFiledAs"] = [...also, record(row)];
+		} else {
+			kept["alsoFiledAs"] = [...also, record(row)];
+			if (isOpen(row) && row["stale"] === void 0) delete kept["stale"];
+		}
 	}
 	return out;
 }
@@ -5342,7 +5346,7 @@ function registerInboxTools(server, client) {
 	}));
 	server.registerTool("taiga_list_setup_tasks", {
 		title: "List setup tasks",
-		description: "List what a person must set up for a product (secrets, variables, accounts), with exactly what and where: key (the name to create; Taiga never stores values), the provider page, and phase: prereq (the deploy fails without it), wiring (generated values back to providers) or followup (can wait until after launch). Runs do not wait for them. One product or all, oldest first; includeDone: true adds done and dismissed. A variable filed twice lists the others under alsoFiledAs; totalCount counts records, and a page that folded some says recordsOnPage. Unlike taiga_list_action_required, which lists the same work as items to resolve.",
+		description: "List what a person must set up for a product (secrets, variables, accounts), with exactly what and where: key (the name to create; Taiga never stores values), the provider page, and phase: prereq (the deploy fails without it), wiring (generated values back to providers) or followup (can wait until after launch). Runs do not wait for them. One product or all, oldest first; includeDone: true adds done and dismissed. A variable filed twice lists the others under alsoFiledAs; totalCount counts records, and a page that folded some says recordsOnPage. stale on an open task says no document derived from the code since it was raised mentions its key: it may not apply any more, so check before asking anyone to set it. Unlike taiga_list_action_required, which lists the same work as items to resolve.",
 		inputSchema: z.object({
 			productId: productId.optional(),
 			includeDone: z.boolean().optional().describe("Also the tasks already done or dismissed (default false)"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taiga-ai/mcp-server",
-  "version": "0.25.0-dev.467",
+  "version": "0.25.0-dev.469",
   "description": "MCP server for Taiga -- gives AI assistants access to documents and products",
   "type": "module",
   "main": "./dist/index.js",

package/src/server.integration.test.ts

@@ -6856,6 +6856,52 @@ describe('what the second agent review found (PRO-2778, PRO-2780)', () => {
     expect(sentUrl(fetchSpy, '/v1/inbox').searchParams.has('withTotal')).toBe(false);
   });
 
+  it("passes on a setup task's stale note (PRO-2819)", async () => {
+    const stale = "None of the current code's documents, derived since this task was raised, mention JWT_SECRET.";
+    const { client } = await bootMcpPair({
+      capabilities: ALL_CAPABILITIES,
+      routes: {
+        'GET /v1/setup-tasks': {
+          data: [
+            {
+              id: ENV_ID,
+              productId: ENV_ID,
+              key: 'JWT_SECRET',
+              inboxItemStatus: 'open',
+              title: 'Set JWT_SECRET',
+              stale,
+            },
+          ],
+          nextCursor: null,
+        },
+      },
+    });
+
+    const tasks = parseToolResult(await client.callTool({ name: 'taiga_list_setup_tasks', arguments: {} }));
+    expect(tasks.data[0].stale).toBe(stale);
+  });
+
+  it('drops the stale note from a folded variable when one open record of it is live (PRO-2819)', async () => {
+    const stale = "None of the current code's documents, derived since this task was raised, mention JWT_SECRET.";
+    const record = { productId: ENV_ID, key: 'JWT_SECRET', inboxItemStatus: 'open' };
+    const { client } = await bootMcpPair({
+      capabilities: ALL_CAPABILITIES,
+      routes: {
+        'GET /v1/setup-tasks': {
+          data: [
+            { ...record, id: 'old', category: 'secret', title: 'Set JWT_SECRET', stale },
+            { ...record, id: 'new', category: 'env_var', title: 'Set JWT_SECRET' },
+          ],
+          nextCursor: null,
+        },
+      },
+    });
+
+    const tasks = parseToolResult(await client.callTool({ name: 'taiga_list_setup_tasks', arguments: {} }));
+    expect(tasks.data).toHaveLength(1);
+    expect(tasks.data[0].stale).toBeUndefined();
+  });
+
   it('carries who cancelled a failed plan and when, and leaves the item as it was when the history is refused', async () => {
     const failed = { id: ITEM_ID, title: 'Login', planningStatus: 'failed', planFailureCause: 'cancelled' };
     const history = {

package/src/tools/inbox.ts

@@ -306,6 +306,7 @@ const SETUP_TASK_FIELDS = [
   'inboxItemId',
   'inboxItemStatus',
   'createdAt',
+  'stale',
 ] as const;
 
 /** The API's count across every page, on the first page; nothing from an API that does not send one. */
@@ -350,6 +351,9 @@ export function sameKeyOnce(rows: Row[]): Row[] {
       Object.assign(kept, row, { alsoFiledAs: [...also, record(was)] });
     } else {
       kept['alsoFiledAs'] = [...also, record(row)];
+      // Stale only while every open record is (PRO-2819): one raised after the code's documents were derived
+      // is a live ask, whichever record leads.
+      if (isOpen(row) && row['stale'] === undefined) delete kept['stale'];
     }
   }
   return out;
@@ -471,7 +475,9 @@ export function registerInboxTools(server: McpServer, client: TaigaClient) {
         'deploy fails without it), wiring (generated values back to providers) or followup (can wait until after ' +
         'launch). Runs do not wait for them. One product or all, oldest first; includeDone: true adds done and ' +
         'dismissed. A variable filed twice lists the others under alsoFiledAs; totalCount counts records, and a ' +
-        'page that folded some says recordsOnPage. Unlike ' +
+        'page that folded some says recordsOnPage. stale on an open task says no document derived from the code ' +
+        'since it was raised mentions its key: it may not apply any more, so check before asking anyone to set ' +
+        'it. Unlike ' +
         'taiga_list_action_required, which lists the same work as items to resolve.',
       inputSchema: z.object({
         productId: productId.optional(),

package/src/tools/maintenance.ts

@@ -311,6 +311,9 @@ export function registerMaintenanceTools(server: McpServer, client: TaigaClient)
         'sentence and the contradicting passage) and the work on each. state: breached (open scanner findings ' +
         'map to it, by findingsByTier; routine-only is not urgent) or diverged (the documents contradict it). ' +
         "live: false means the violation's initiative ended without fixing it: it needs a person or a new fix. " +
+        "raisedFor: false means the link is the backlog planner's: it said an initiative a person asked it for " +
+        'would close the violation, which may be a dedicated fix or broader work; true means a fix was raised ' +
+        'for it (taiga_fix_policy_violation or the sweep). ' +
         'An unlisted control is not "passing" (summary.controlsWithNothingRecorded counts them). full: true adds ' +
         'evidence and resolved ones. Fix with taiga_fix_policy_violation.',
       inputSchema: z.object({