@taiga-ai/mcp-server 0.36.0-dev.918 → 0.36.0-dev.920

package/dist/index.js

@@ -26183,6 +26183,31 @@ const ENVIRONMENT_TYPES = [
 //#endregion
 //#region ../../packages/types/dist/api-keys.js
 /**
+* API key scopes control what operations a key can perform.
+* Scopes act as a ceiling -- the effective permissions are the intersection
+* of the key's scopes and the user's role-based capabilities.
+*
+* Convention: "resource:action" matching the existing Capability type.
+*/
+const API_KEY_SCOPES = [
+	"products:read",
+	"products:write",
+	"backlog:read",
+	"backlog:write",
+	"factories:read",
+	"factories:documents:write",
+	"users:read",
+	"tenant:documents:read",
+	"tenant:documents:write",
+	"vcs:read",
+	"customDocuments:read",
+	"customDocuments:write",
+	"customDocuments:delete",
+	"factories:write",
+	"vcs:manage"
+];
+const API_KEY_PREFIX = "taiga_sk_live_";
+/**
 * The groups the MCP server's tools come in (PRO-2838). A key may name the ones
 * its AI tool sees; null is every one. This is focus, not security: a tool the
 * key's role or scopes do not allow is never offered, whatever is named here.
@@ -27344,6 +27369,19 @@ strictObject({ type: productDocumentType }), object({
 		isProtected: boolean().default(false)
 	}).optional()
 });
+/**
+* The MCP toolsets a key's AI tool sees: at least one, each once, or null for
+* every one (PRO-2838). An empty list would start a server with no tools at all.
+*/
+const mcpToolsets = array(_enum(MCP_TOOLSETS)).min(1).refine((sets) => new Set(sets).size === sets.length, "Name each toolset once").nullable();
+strictObject({
+	key: string$2().regex(new RegExp(`^${API_KEY_PREFIX}[0-9a-f]{64}$`)),
+	name: string$2().min(1).max(255),
+	scopes: array(_enum(API_KEY_SCOPES)).optional(),
+	expiresInDays: number$1().int().min(1).max(365).optional(),
+	mcpToolsets: mcpToolsets.optional()
+}), object({ keyId: uuid });
+strictObject({ mcpToolsets });
 object({
 	url: string$2().url(),
 	expiresAt: string$2()
@@ -31343,6 +31381,7 @@ function registerBuildTools(server, client) {
 }
 /** What happened to a request that steers a run (PRO-3161), in one sentence. */
 function steerSituation(steer) {
+	if (steer === "sent") return "The run takes it as an instruction while it keeps working.";
 	if (steer === "replanning") return "The run has paused and its plan is being revised for the request.";
 	if (steer === "after_step") return "The run stops when the step it is building ends, then its plan is revised.";
 	if (steer === "after_round") return "The run is answering review comments or fixing CI; the request is planned when that round ends, and no further automatic round starts while it is open.";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taiga-ai/mcp-server",
-  "version": "0.36.0-dev.918",
+  "version": "0.36.0-dev.920",
   "description": "Taiga for AI coding assistants: read products, policies, initiatives and runs, and operate the line, over MCP",
   "mcpName": "ga.tai/mcp-server",
   "license": "UNLICENSED",