@taiga-ai/mcp-server 0.26.0-rc.530 → 0.26.0

package/dist/index.js

@@ -2081,11 +2081,12 @@ const MAINTENANCE_IGNORE_REASONS = [
 *   alone is shipped, and `dev` + `optional` (devOptional) is left undecided.
 * - pnpm-lock.yaml: `dev` comes from a per-package `dev: true` that lockfile
 *   v9 no longer writes, so an empty list says nothing; `dev` still means dev.
-*   For a package a workspace declares under `dependencies` or
-*   `optionalDependencies`, the sweep adds Taiga's own `prod`, so that copy
-*   reads runtime. A `devDependencies` declaration is not turned into `dev`:
-*   a runtime dependency's snapshot may pull the same copy in, which only the
-*   `snapshots` graph could rule out, so it stays unknown.
+*   From a v9 lockfile the sweep walks the `snapshots` graph (PRO-2943): a
+*   copy reachable from any workspace's `dependencies` or
+*   `optionalDependencies` gets Taiga's own `prod` and reads runtime; one
+*   reachable only from `devDependencies` gets `dev`. From an older lockfile
+*   only a copy a workspace declares under `dependencies` or
+*   `optionalDependencies` gets `prod`, and the rest stays unknown.
 * - poetry.lock: group names with `main` dropped; a non-main, non-optional
 *   group is not in the runtime install. Poetry 1.x lockfiles carry no groups
 *   at all, so an empty list says nothing.
@@ -3379,6 +3380,7 @@ const PACKAGE_ROW_FIELDS = [
 	"licenses",
 	"scope",
 	"relation",
+	"introducedBy",
 	"sourcePath",
 	"productRepositoryId",
 	"detectedAt"
@@ -3702,7 +3704,7 @@ function registerMaintenanceTools(server, client) {
 	}));
 	server.registerTool("taiga_list_packages", {
 		title: "List the package inventory",
-		description: "List every package a product's code uses, with version, license and whether it is direct or dev only. The first page summarizes licenses against the allowed list. Filter by license, name or repository. NOT_FOUND where the licenses feature is off.",
+		description: "List every package a product's code uses, with version, license, whether it is direct or dev only, and what pulls a transitive one in. The first page summarizes licenses against the allowed list. Filter by license, name or repository. NOT_FOUND where the licenses feature is off.",
 		inputSchema: z.object({
 			productId,
 			license: z.string().min(1).max(MAINTENANCE_LICENSE_FILTER_MAX).optional().describe("Only packages carrying exactly this SPDX string"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taiga-ai/mcp-server",
-  "version": "0.26.0-rc.530",
+  "version": "0.26.0",
   "description": "Taiga for AI coding assistants: read products, policies, initiatives and runs, and operate the line, over MCP",
   "mcpName": "ga.tai/mcp-server",
   "type": "module",