@taiga-ai/mcp-server 0.26.0-dev.488 → 0.26.0-dev.490

package/dist/index.js

@@ -2643,11 +2643,27 @@ function inProductWords(value) {
 function inProductWording(said) {
 	return said.replace(/^Backlog item not found/i, "Initiative not found").replace(/^Build run step not found/i, "Run step not found").replace(/^Build run not found/i, "Run not found").replace(/^Custom document not found/i, "Knowledge file not found").replace(/^(Branch "[^"]*" does not exist in \S+?)\.?$/i, "$1. taiga_list_repository_branches lists the branches it has.").replace(/^This product already has a repository\. Change it instead of linking another\./i, "This product already has a repository. Pass replacesRepositoryId to swap it in one step, or taiga_unlink_repository first (taiga_list_product_repositories gives its ID).");
 }
+/**
+* A float without its binary noise: six significant digits. Delivery metrics
+* came as `deploysPerWeek: 6.766666666666667`, sixteen digits nobody reads
+* (PRO-2847). Significant digits rather than fixed decimals: an EPSS score of
+* 0.00043, a 0.4% failure rate or 99.995% uptime keep what they say, where
+* two decimals read them as 0, 0 and 100.
+*/
+const roundFloats = (_key, value) => typeof value === "number" && Number.isFinite(value) && !Number.isInteger(value) ? Number(value.toPrecision(6)) : value;
+/**
+* A result as the model reads it: compact JSON, in the product's words, its
+* floats rounded. Indentation was a fifth of a list's characters (PRO-2847),
+* paid on every call; the model reads JSON without it.
+*/
+function serializeResult(value) {
+	return JSON.stringify(inProductWords(value), roundFloats);
+}
 /** A successful tool result: one JSON text block the model reads. */
 function toolResult(value) {
 	return { content: [{
 		type: "text",
-		text: JSON.stringify(inProductWords(value), null, 2)
+		text: serializeResult(value)
 	}] };
 }
 /**
@@ -5161,10 +5177,13 @@ function standingSummary(standing) {
 		const severity = String(violation["severity"] ?? "unknown");
 		bySeverity[severity] = (bySeverity[severity] ?? 0) + 1;
 	}
+	const stated = (state) => controls.filter((c) => c["state"] === state).length;
 	return {
 		controls: listed.length,
 		controlsInPolicies: controls.length,
-		controlsWithNothingRecorded: controls.length - listed.length,
+		controlsMet: stated("met"),
+		controlsNotApplicable: stated("not_applicable"),
+		controlsNotAssessed: stated("no_evidence"),
 		violations: violations.length,
 		bySeverity,
 		resolvedViolations: resolved
@@ -5232,11 +5251,12 @@ function registerMaintenanceTools(server, client) {
 	}));
 	server.registerTool("taiga_get_policy_standing", {
 		title: "Get a product's policy standing",
-		description: "How a product stands against the organization's published policies: summary counts, when the documents were assessed, and each violated control with its violations (critical and high only, citing the policy sentence and the contradicting passage) and the work on each. state: breached (open scanner findings map to it, by findingsByTier; routine-only is not urgent) or diverged (the documents contradict it). live: false means the violation's initiative ended without fixing it: it needs a person or a new fix. raisedFor: false means the link is the backlog planner's: it said an initiative a person asked it for would close the violation, which may be a dedicated fix or broader work; true means a fix was raised for it (taiga_fix_policy_violation or the sweep). An unlisted control is not \"passing\" (summary.controlsWithNothingRecorded counts them). full: true adds evidence and resolved ones. Fix with taiga_fix_policy_violation.",
+		description: "How a product stands against the organization's published policies: summary counts, when the documents were assessed, and each violated control with its violations (critical and high only, citing the policy sentence and the contradicting passage) and the work on each. state: breached (open scanner findings map to it, by findingsByTier; routine-only is not urgent) or diverged (the documents contradict it). live: false means the violation's initiative ended without fixing it: it needs a person or a new fix. raisedFor: false means the link is the backlog planner's: it said an initiative a person asked it for would close the violation, which may be a dedicated fix or broader work; true means a fix was raised for it (taiga_fix_policy_violation or the sweep). summary counts the other controls: met or not applicable as the documents show it, or not assessed (no evidence either way, which is no pass). controlId reads one control: its state, the passage behind a verdict, its document violations and how many scanner findings breach it. full: true adds evidence and resolved ones. Fix with taiga_fix_policy_violation.",
 		inputSchema: z.object({
 			productId,
 			full: z.boolean().optional().describe("Carry each violation's evidence and policy excerpt, cut to about 1,500 characters each, and up to 20 resolved violations (default false)"),
-			violationId: idInput("violation", "this tool lists them").optional().describe("Only this violation, in full and uncut: its evidence, policy excerpt and work")
+			violationId: idInput("violation", "this tool lists them").optional().describe("Only this violation, in full and uncut: its evidence, policy excerpt and work"),
+			controlId: z.string().trim().min(1).max(40).optional().describe("Only this control, such as SEC-5.1: whether it is met, not applicable, violated or not assessed, with the passage")
 		}),
 		annotations: READ_ONLY
 	}, (params) => runTool(async () => {
@@ -5248,6 +5268,20 @@ function registerMaintenanceTools(server, client) {
 		const note = standing.assessment?.state === "never" ? "Never assessed: the documents have not been checked against the policies yet, so nothing here is an all-clear. An assessment runs when the reality documents are derived or refreshed (taiga_refresh_reality_documents, paid work: ask first)." : null;
 		const resolvedAny = Array.isArray(standing.resolvedDivergences) && standing.resolvedDivergences.length > 0;
 		const wording = violations.length > 0 || resolvedAny ? { wordingNote: "A violation's evidence is from its assessedAt; its title and summary may be from when it was first recorded. Where they disagree, the evidence is current." } : {};
+		if (params.controlId && params.violationId) return toolError("VALIDATION_ERROR", "Name either a control (controlId) or one violation (violationId), not both.");
+		if (params.controlId) {
+			const wanted = params.controlId.toUpperCase();
+			const control = controls.find((c) => String(c.controlId).toUpperCase() === wanted);
+			if (!control) return toolError("NOT_FOUND", "No control with that id in this product's policies; taiga_get_document (type, sections: []) lists a policy's controls.");
+			const own = violations.filter((violation) => String(violation["controlId"]).toUpperCase() === wanted);
+			return toolResult({
+				...control,
+				...control.state === "no_evidence" ? { meaning: "Not assessed: no finding or violation is recorded against it, and the documents were not found to show it met. That is no evidence either way, not a pass." } : {},
+				violations: pickFields(own, VIOLATION_FIELDS),
+				...Number(control.findingCount ?? 0) > 0 ? { findingsNote: `${String(control.findingCount)} open scanner finding${control.findingCount === 1 ? "" : "s"} breach it; taiga_list_findings (productId) lists them with the controls each breaches.` } : {},
+				...own.length > 0 ? wording : {}
+			});
+		}
 		if (params.violationId) {
 			const one = [...violations, ...Array.isArray(standing.resolvedDivergences) ? standing.resolvedDivergences : []].find((violation) => violation["id"] === params.violationId);
 			if (!one) return toolError("NOT_FOUND", "No violation with that ID on this product; this tool without violationId lists them.");
@@ -6127,13 +6161,13 @@ async function productContext(client, product, options) {
 		unavailable,
 		readNext: "Read a policy, which is the organization's and takes no productId, with taiga_get_document (type, then sections: [] for its outline or a control id such as SEC-5.1); the product's own specification, architecture and other documents with taiga_get_product_document (productId); an initiative with taiga_get_initiative (taiga_list_initiatives pages a truncated backlog) and a run with taiga_get_run."
 	};
-	let characters = JSON.stringify(inProductWords(result), null, 2).length;
+	let characters = serializeResult(result).length;
 	for (let measured = -1; measured !== characters;) {
 		measured = characters;
-		characters = JSON.stringify(inProductWords({
+		characters = serializeResult({
 			...result,
 			characters: measured
-		}), null, 2).length;
+		}).length;
 	}
 	return toolResult({
 		characters,
@@ -6515,12 +6549,13 @@ function registerObserveTools(server, client) {
 		]);
 		const now = current.data;
 		const note = environments.rows.length === 0 ? "This product has no environments yet: an environment is defined with taiga_create_environment, and its deployments are mirrored from the provider once it is." : history.data.length === 0 && !params.cursor ? "No deployments recorded yet: none was mirrored from the provider (syncStatus says when it last synced), or nothing has been deployed." : null;
+		const live = new Set([...now.current ?? [], ...now.deploying ?? []].map((row) => row.id));
 		return toolResult({
 			environments: pickFields(environments.rows, ENVIRONMENT_FIELDS),
 			...environments.more ? { moreEnvironments: true } : {},
 			running: deploymentLines(now.current ?? []),
 			deploying: deploymentLines(now.deploying ?? []),
-			history: page(deploymentLines(history.data), history.nextCursor),
+			history: page(deploymentLines(history.data.filter((row) => !live.has(row.id))), history.nextCursor),
 			..."value" in sync ? { syncStatus: sync.value.data } : {
 				syncStatus: null,
 				syncUnavailable: sync.unavailable

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taiga-ai/mcp-server",
-  "version": "0.26.0-dev.488",
+  "version": "0.26.0-dev.490",
   "description": "Taiga for AI coding assistants: read products, policies, initiatives and runs, and operate the line, over MCP",
   "mcpName": "ga.tai/mcp-server",
   "type": "module",