@taiga-ai/mcp-server 0.37.0-dev.982 → 0.37.0-dev.985

package/dist/index.js

@@ -23961,6 +23961,10 @@ var TaigaClient = class {
 	async shipNotices(productId) {
 		return this.request("POST", `/products/${seg(productId)}/maintenance/notices`, {});
 	}
+	/** Sweep one of a product's repositories (PRO-4276): its primary when none is named. */
+	async startSweep(productId, productRepositoryId) {
+		return this.request("POST", `/products/${seg(productId)}/maintenance/sweeps`, productRepositoryId ? { productRepositoryId } : {});
+	}
 	async remediateFinding(productId, findingId) {
 		return this.request("POST", `/products/${seg(productId)}/maintenance/findings/${seg(findingId)}/remediate`, {});
 	}
@@ -28011,7 +28015,7 @@ const TOOLSET_PURPOSE = {
 	core: "where products, initiatives, runs, policies and findings stand",
 	operate: "moving work: queue, plans, runs, fixes, Action Required",
 	setup: "creating and configuring factories, products, repositories, environments and autonomy",
-	observe: "deployments, monitoring, delivery metrics and the package inventory",
+	observe: "deployments, monitoring, delivery metrics, the package inventory and the sweeps that read it",
 	documents: "writing documents and knowledge, and regenerating product documents"
 };
 /** Every tool's toolset. A tool missing here fails at registration, so none can be added without a home. */
@@ -28078,6 +28082,7 @@ const TOOLSET_OF = {
 	taiga_get_monitoring: "observe",
 	taiga_get_delivery_metrics: "observe",
 	taiga_list_packages: "observe",
+	taiga_start_sweep: "observe",
 	taiga_list_licenses: "observe",
 	taiga_change_license: "setup",
 	taiga_get_sbom: "observe",
@@ -35159,7 +35164,7 @@ function registerMaintenanceTools(server, client) {
 	}, (params) => runTool(async () => toolResult({ notices: await client.getNotices(params.productId, params.linkId) })));
 	server.registerTool("taiga_get_finding", {
 		title: "Get a maintenance finding",
-		description: "Read one finding: how likely it is to be exploited, the advisory and its fixed version, where it is, which policy controls it breaches, and any fix under way. fixable: false says taiga_fix_finding would refuse it. A secret's value is never stored.",
+		description: "Read one finding: how likely it is to be exploited, the advisory and its fixed version, where it is, which policy controls it breaches, any fix under way, and triage: whether the code reaches it, as its factory judged it at a commit (advice; it never changes the status). fixable: false says taiga_fix_finding would refuse it. A secret's value is never stored.",
 		inputSchema: object({
 			findingId,
 			full: boolean().optional().describe("Carry the advisory's whole record: every affected range and reference (default false)")
@@ -35302,6 +35307,21 @@ function registerMaintenanceTools(server, client) {
 			...params.expiresAt !== void 0 ? { ignoreExpiresAt: params.expiresAt } : {}
 		})).data);
 	}));
+	server.registerTool("taiga_start_sweep", {
+		title: "Sweep a repository",
+		description: "Scan one of a product's repositories now: its dependencies, secrets, code and infrastructure, the findings triaged and its code judged against the policies. Its primary repository when none is named. Returns the sweep; taiga_list_findings and taiga_get_policy_standing read what it found once it completes.",
+		inputSchema: object({
+			productId,
+			linkId: idInput("repository link", "taiga_list_product_repositories gives it (its id); a linkable repository id is not one").optional()
+		}),
+		annotations: OPERATE
+	}, (params) => runTool(async () => {
+		const { id, ...run } = (await client.startSweep(params.productId, params.linkId)).data;
+		return toolResult({
+			sweepId: id,
+			...run
+		});
+	}));
 	server.registerTool("taiga_fix_finding", {
 		title: "Fix a finding",
 		description: "Raise an initiative that fixes a finding; it ends in a pull request, which merges on its own only where the product's auto-merge allows it. wholeGroup: true fixes, in that repository, every open advisory on that package version in one bump, or every place the rule flagged. A malicious package is removed, with every advisory on that version, whatever wholeGroup says. A license finding the row marks fixable has its packages replaced by ones on the approved list. A language runtime moves every file declaring it together, in a container image only to a tag the image has published. Refused when there is no version to move to (fixable: false; for a runtime, also while its image has not published the fix), the code is in a submodule, or a secret is only in history (rotate it outside Taiga).",
@@ -55811,6 +55831,7 @@ const PAID_WORK = /* @__PURE__ */ new Set([
 	"taiga_review_plan",
 	"taiga_set_auto_build",
 	"taiga_start_import",
+	"taiga_start_sweep",
 	"taiga_stop_generating_documents",
 	"taiga_stop_run",
 	"taiga_sync_design_tokens"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taiga-ai/mcp-server",
-  "version": "0.37.0-dev.982",
+  "version": "0.37.0-dev.985",
   "description": "Taiga for AI coding assistants: read products, policies, initiatives and runs, and operate the line, over MCP",
   "mcpName": "ga.tai/mcp-server",
   "license": "UNLICENSED",