@taiga-ai/mcp-server 0.36.0-dev.917 → 0.36.0-dev.919

package/dist/index.js

@@ -26183,6 +26183,31 @@ const ENVIRONMENT_TYPES = [
 //#endregion
 //#region ../../packages/types/dist/api-keys.js
 /**
+* API key scopes control what operations a key can perform.
+* Scopes act as a ceiling -- the effective permissions are the intersection
+* of the key's scopes and the user's role-based capabilities.
+*
+* Convention: "resource:action" matching the existing Capability type.
+*/
+const API_KEY_SCOPES = [
+	"products:read",
+	"products:write",
+	"backlog:read",
+	"backlog:write",
+	"factories:read",
+	"factories:documents:write",
+	"users:read",
+	"tenant:documents:read",
+	"tenant:documents:write",
+	"vcs:read",
+	"customDocuments:read",
+	"customDocuments:write",
+	"customDocuments:delete",
+	"factories:write",
+	"vcs:manage"
+];
+const API_KEY_PREFIX = "taiga_sk_live_";
+/**
 * The groups the MCP server's tools come in (PRO-2838). A key may name the ones
 * its AI tool sees; null is every one. This is focus, not security: a tool the
 * key's role or scopes do not allow is never offered, whatever is named here.
@@ -27344,6 +27369,19 @@ strictObject({ type: productDocumentType }), object({
 		isProtected: boolean().default(false)
 	}).optional()
 });
+/**
+* The MCP toolsets a key's AI tool sees: at least one, each once, or null for
+* every one (PRO-2838). An empty list would start a server with no tools at all.
+*/
+const mcpToolsets = array(_enum(MCP_TOOLSETS)).min(1).refine((sets) => new Set(sets).size === sets.length, "Name each toolset once").nullable();
+strictObject({
+	key: string$2().regex(new RegExp(`^${API_KEY_PREFIX}[0-9a-f]{64}$`)),
+	name: string$2().min(1).max(255),
+	scopes: array(_enum(API_KEY_SCOPES)).optional(),
+	expiresInDays: number$1().int().min(1).max(365).optional(),
+	mcpToolsets: mcpToolsets.optional()
+}), object({ keyId: uuid });
+strictObject({ mcpToolsets });
 object({
 	url: string$2().url(),
 	expiresAt: string$2()
@@ -27424,7 +27462,16 @@ strictObject({
 	status: _enum(GITLAB_CONNECTION_STATUSES),
 	lastValidatedAt: string$2(),
 	detail: string$2().nullable()
-}), object({ finished: boolean() });
+}), object({ finished: boolean() }), strictObject({ search: string$2().trim().max(100).optional() }), object({
+	projects: array(object({
+		id: number$1().int(),
+		pathWithNamespace: string$2(),
+		nameWithNamespace: string$2(),
+		webUrl: string$2(),
+		defaultBranch: string$2().nullable()
+	})).nullable(),
+	truncated: boolean()
+});
 object({
 	outcome: _enum([
 		"uninstalled",
@@ -27433,6 +27480,8 @@ object({
 	]),
 	manageUrl: string$2().nullable()
 });
+/** A value GitHub's redirect carries back: a state token, or a one-time code. */
+const githubCallbackSecret = string$2().trim().min(1).max(1024);
 strictObject({
 	displayName: string$2().trim().min(1).max(255),
 	baseUrl: string$2().trim().min(1).max(480),
@@ -27450,7 +27499,16 @@ strictObject({
 	expiresAt: isoInstant.nullable().optional(),
 	credential: registryCredential,
 	testPackage: registryTestPackage.optional()
-}), strictObject({ hostId: uuid.optional() }), object({ installUrl: string$2().url() }), strictObject({
+}), strictObject({ hostId: uuid.optional() }), object({ installUrl: string$2().url() }), strictObject({ state: githubCallbackSecret }), object({
+	clientId: string$2(),
+	authorizeUrl: string$2(),
+	redirectUri: string$2().optional()
+}), strictObject({
+	installationId: number$1().int().positive(),
+	setupAction: _enum(["install", "update"]),
+	state: githubCallbackSecret.optional(),
+	code: githubCallbackSecret.optional()
+}), strictObject({
 	subdomain: string$2().min(1).max(39).optional(),
 	serverUrl: string$2().min(1).max(2048).optional(),
 	caBundlePem: string$2().max(65536).optional(),
@@ -27460,6 +27518,9 @@ strictObject({
 	manifest: record(string$2(), unknown$1()),
 	postUrl: string$2().url(),
 	state: string$2()
+}), strictObject({
+	state: githubCallbackSecret,
+	code: githubCallbackSecret
 }), strictObject({ type: _enum(TENANT_DOCUMENT_TYPES) }), strictObject({ type: _enum(TENANT_DOCUMENT_TYPES).refine((type) => type !== "design_standards", { message: "The design standards draft is not made through sync" }) }), strictObject({
 	name: string$2().min(1).max(50),
 	action: _enum(["accept", "decline"])
@@ -27505,6 +27566,9 @@ strictObject({
 }).refine((a) => Boolean(a.approve) !== Boolean(a.remove), { message: "Name one license to approve or remove" }), object({
 	enrolled: number$1().int().nonnegative(),
 	total: number$1().int().nonnegative()
+}), object({
+	principalArn: string$2().nullable(),
+	externalId: string$2()
 });
 strictObject({ kind: _enum(["sbom", "notices"]) }), object({
 	url: string$2().url().nullable(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taiga-ai/mcp-server",
-  "version": "0.36.0-dev.917",
+  "version": "0.36.0-dev.919",
   "description": "Taiga for AI coding assistants: read products, policies, initiatives and runs, and operate the line, over MCP",
   "mcpName": "ga.tai/mcp-server",
   "license": "UNLICENSED",