@taiga-ai/mcp-server 0.36.0-dev.912 → 0.36.0-dev.914

package/dist/index.js

@@ -26277,7 +26277,10 @@ function isFixableFinding(finding) {
 	if (finding.status !== "open") return false;
 	if (finding.location?.historyOnly) return false;
 	if (!isAgentRemediable(finding)) return false;
-	if (finding.fingerprint?.startsWith("base-image:")) return typeof finding.baseMove === "boolean" ? finding.baseMove : baseImageMoveRemoves(finding.data);
+	if (finding.fingerprint?.startsWith("base-image:") || finding.baseImageFix) {
+		if (finding.baseImageFix) return finding.baseImageFix.way === "move" || finding.baseImageFix.way === "upgrade";
+		return typeof finding.baseMove === "boolean" ? finding.baseMove : baseImageMoveRemoves(finding.data);
+	}
 	if (finding.kind === "vulnerable_dependency" && isMaliciousPackageFinding(finding)) return true;
 	return isCodeRemediationKind(finding.kind) || !!finding.recommendedVersion;
 }
@@ -28541,6 +28544,7 @@ const FINDING_ROW_FIELDS = [
 	"malicious",
 	"baseMove",
 	"baseImageMove",
+	"baseImageFix",
 	"removal",
 	"replaceable",
 	"status",
@@ -28707,7 +28711,20 @@ function withFixability(row) {
 		fixable: true,
 		fixNote: "A malicious package: taiga_fix_finding removes it (or replaces it), with every advisory on that version."
 	} : row;
-	if (typeof row["baseMove"] === "boolean" && isAgentRemediable({ remediableBy: typeof row["remediableBy"] === "string" ? row["remediableBy"] : null })) return row["baseMove"] === true && row["status"] === "open" ? {
+	const base = row["baseImageFix"];
+	if (base && base.way !== "move" && isAgentRemediable({ remediableBy: remediableByOf(row) })) {
+		if (base.way === "upgrade") return row["status"] === "open" ? {
+			...row,
+			fixable: true,
+			fixNote: "taiga_fix_finding adds a temporary line to the Dockerfile that upgrades this package over its base, until the base publishes a build with the fix."
+		} : row;
+		return {
+			...row,
+			fixable: false,
+			fixNote: baseImageWaitNote(base)
+		};
+	}
+	if (typeof row["baseMove"] === "boolean" && isAgentRemediable({ remediableBy: remediableByOf(row) })) return row["baseMove"] === true && row["status"] === "open" ? {
 		...row,
 		fixable: true,
 		fixNote: "taiga_fix_finding moves the base images it is in to the builds their tags name now, the FROM line alone, with every other advisory that move removes."
@@ -28777,6 +28794,13 @@ function withResolutionLabel(row) {
 		previouslyResolvedReason: resolvedReason
 	};
 }
+/** Why a base image's finding has no Fix, in the page's words (`maintaining_base_wait_*`). */
+function baseImageWaitNote(fix) {
+	if (fix.way === "wait_for_distro") return `${fix.distro} has no fix for this yet.`;
+	const image = fix.images.join(", ") || "The base image";
+	return `${fix.distro} has fixed this, but ${image} has not published a build with the fix yet. It clears when it does.`;
+}
+const remediableByOf = (row) => typeof row["remediableBy"] === "string" ? row["remediableBy"] : null;
 /** A finding as a tool answers it: the row fields, the scope, and whether Fix would take it. */
 function findingRows(findings, extra = []) {
 	return pickFields(findings, [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taiga-ai/mcp-server",
-  "version": "0.36.0-dev.912",
+  "version": "0.36.0-dev.914",
   "description": "Taiga for AI coding assistants: read products, policies, initiatives and runs, and operate the line, over MCP",
   "mcpName": "ga.tai/mcp-server",
   "license": "UNLICENSED",