@thehammer/danx-dashboard-mcp 0.1.158 → 0.1.159

package/dist/handlers.js

@@ -111,51 +111,6 @@ export async function issueGet(client, args) {
         board: args.board,
     });
 }
-// ---------------- brief_list / brief_get_page / brief_set_page ----------------
-const BRIEF_BASE_PATH = "/api/brief";
-/**
- * List the board's named Brief pages via GET /api/brief (DX-2083).
- * A bare board-scoped GET, no id — many named pages per board.
- */
-export async function briefList(client, args = {}) {
-    return client.request({
-        method: "GET",
-        path: "",
-        basePath: BRIEF_BASE_PATH,
-        board: args.board,
-    });
-}
-/**
- * Fetch one Brief page by slug via GET /api/brief/page?slug=
- * (DX-2083). A missing row (including a not-yet-created page) reads as the
- * empty view — never a 404.
- */
-export async function briefGetPage(client, args) {
-    return client.request({
-        method: "GET",
-        path: "/page",
-        basePath: BRIEF_BASE_PATH,
-        query: { slug: args.slug },
-        board: args.board,
-    });
-}
-/**
- * Write one Brief page via PUT /api/brief/page?slug= (DX-2083).
- * Optimistic-concurrency `base_hash` with a verbatim 409 passthrough on a
- * stale write. `slug` rides the query string (matching the route), never
- * the body.
- */
-export async function briefSetPage(client, args) {
-    const { slug, board, ...body } = args;
-    return client.request({
-        method: "PUT",
-        path: "/page",
-        basePath: BRIEF_BASE_PATH,
-        query: { slug },
-        body,
-        board,
-    });
-}
 export async function issueCreate(client, args, defaultBoard) {
     // Resolve the target board ONCE: per-call `args.board` override (a
     // qualified `<repo>:<slug>` id) wins, else the dispatch's env-derived

package/dist/http-client.js

@@ -1,10 +1,6 @@
-import { assertVersionFloorSatisfied, MCP_MIN_VERSION_HEADER } from "./version-floor.js";
 export class DashboardHttpClient {
     config;
     fetchImpl;
-    // DX-3597 — true once this instance has made ONE request, regardless of
-    // outcome. Drives the "first call OR any 4xx" version-floor check below.
-    hasCheckedVersionFloor = false;
     constructor(config, fetchImpl = fetch) {
         this.config = config;
         this.fetchImpl = fetchImpl;
@@ -54,18 +50,6 @@ export class DashboardHttpClient {
         catch (err) {
             throw new Error(`[danx-dashboard-mcp] network failure on ${args.method} ${url}: ${err instanceof Error ? err.message : String(err)}`);
         }
-        // DX-3597 — proactive on the first call this instance ever makes
-        // (regardless of outcome: a stale client can otherwise look fine for a
-        // while on routes whose shape didn't change), and on every subsequent
-        // 4xx (a response that might otherwise read as an ordinary caller
-        // error when it's really "you're running an old MCP"). Throws
-        // McpOutdatedError instead of returning below when this package is
-        // behind the floor — see version-floor.ts's own doc.
-        const isFirstCall = !this.hasCheckedVersionFloor;
-        this.hasCheckedVersionFloor = true;
-        if (isFirstCall || (res.status >= 400 && res.status < 500)) {
-            assertVersionFloorSatisfied(res.headers.get(MCP_MIN_VERSION_HEADER));
-        }
         const text = await res.text();
         let parsed = null;
         if (text !== "") {

package/dist/index.js

@@ -34,9 +34,6 @@
  *   - issue_attach           POST   /api/issues/:id/attachments (reads a local file)
  *   - quality_gate_instruction
  *                            GET    /api/quality-gates/:gate/instruction (DX-3341, not card-scoped)
- *   - brief_list       GET    /api/brief
- *   - brief_get_page   GET    /api/brief/page (DX-2083 / DX-2484)
- *   - brief_set_page   PUT    /api/brief/page (DX-2083 / DX-2484)
  *   - plan_list              GET    /api/plans (DX-2683)
  *   - plan_get               GET    /api/plans/:id/full | /api/plans/mine (DX-2727: bare = scalars only, fields= opts in)
  *   - plan_create            POST   /api/plans
@@ -108,7 +105,7 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
 import { DashboardHttpClient } from "./http-client.js";
-import { issueAttach, issueChecklist, issueComment, issueCreate, issueDependency, issueEdit, issueGet, issueList, issueProblem, issueQualityGate, issueQualityGateVerdict, issueRetireBranch, issueRetro, issueSolution, issueTransition, issueTriage, briefGetPage, briefList, briefSetPage, failureCategoryCreate, failureCategoryList, failureCategoryUpdate, dispatchTranscriptSearch, planAddArchitectureSection, planAddCard, planAddNote, planAddRecord, planConnect, planCreate, planDeleteArchitectureSection, planDeleteNote, planDeleteRecord, planGet, PLAN_STATUSES, ISSUE_BATCH_GET_MAX, LIST_PAGE_MAX_LIMIT, planGetArchitectureSection, planGetRecord, planList, planRemoveCard, planRename, planReorderArchitectureSection, planUpdateArchitectureSection, planUpdateNote, planUpdateRecord, qualityGateInstruction, resourceFields, } from "./handlers.js";
+import { issueAttach, issueChecklist, issueComment, issueCreate, issueDependency, issueEdit, issueGet, issueList, issueProblem, issueQualityGate, issueQualityGateVerdict, issueRetireBranch, issueRetro, issueSolution, issueTransition, issueTriage, failureCategoryCreate, failureCategoryList, failureCategoryUpdate, dispatchTranscriptSearch, planAddArchitectureSection, planAddCard, planAddNote, planAddRecord, planConnect, planCreate, planDeleteArchitectureSection, planDeleteNote, planDeleteRecord, planGet, PLAN_STATUSES, ISSUE_BATCH_GET_MAX, LIST_PAGE_MAX_LIMIT, planGetArchitectureSection, planGetRecord, planList, planRemoveCard, planRename, planReorderArchitectureSection, planUpdateArchitectureSection, planUpdateNote, planUpdateRecord, qualityGateInstruction, resourceFields, } from "./handlers.js";
 import { PRIORITY_TIER_WORDS } from "./priority.js";
 import { fieldTreeSchema } from "./field-tree.js";
 function readEnvOrDie(name) {
@@ -872,33 +869,6 @@ strictTool("issue_attach", "Attach a LOCAL file to an issue card: `id` (the card
         .describe("Absolute path to a local file on the dispatch's shared filesystem (must start with `/`)."),
     ...boardField,
 }, async (args) => jsonResult(await issueAttach(client, args)));
-// ---------------- brief_list ----------------
-strictTool("brief_list", "List the board's named Brief pages. Board-scoped; see `board`. Returns `{boardId, pages: [{slug, title, contentHash, sortOrder, updatedAt, updatedBy}]}` — metadata only, no content (use `brief_get_page`). Brief pages are MANY named pages per board (Goals/Architecture/Rules/Caveats tabs), keyed by (board, slug). The reserved `index` slug always exists.", {
-    ...boardField,
-}, async (args) => jsonResult(await briefList(client, args)));
-// ---------------- brief_get_page ----------------
-strictTool("brief_get_page", 'Fetch one Brief page by slug. Board-scoped; see `board`. Returns `{boardId, slug, title, content, contentHash, sortOrder, updatedAt, updatedBy}` — a missing page reads as the empty view (content/contentHash `""`), not a 404. Before `brief_set_page`, always get immediately first and pass `contentHash` back as `base_hash` — the concurrency guard rejects a stale write.', {
-    slug: z
-        .string()
-        .min(1)
-        .describe("The page's slug. The reserved `index` slug always exists on every board."),
-    ...boardField,
-}, async (args) => jsonResult(await briefGetPage(client, args)));
-// ---------------- brief_set_page ----------------
-strictTool("brief_set_page", 'Write one Brief page. Board-scoped; see `board`. Body: `{content, title?, sortOrder?, base_hash?}` — optimistic-concurrency, targeting one named page. `base_hash` must be the `contentHash` from the immediately-prior `brief_get_page` (`""` for a true first write). On mismatch fails loud with `{error: "stale_brief_page", currentHash}` — re-get, re-merge, retry, never overwrite blindly. On success persists, publishes `brief:updated` over SSE, and returns the new view. No delete tool on this surface; the reserved `index` slug is never deletable — removing a non-index page is dashboard-UI-only.', {
-    slug: z
-        .string()
-        .min(1)
-        .describe("The page's slug. Writing the reserved `index` slug is allowed (it always exists); only deletion of `index` is refused."),
-    content: z.string(),
-    title: z.string().optional(),
-    sortOrder: z.number().optional(),
-    base_hash: z
-        .string()
-        .optional()
-        .describe('The contentHash last read via brief_get_page ("" for a true first write). Omitted also normalizes to "" server-side, so it only succeeds against an empty/absent page — always get immediately before set.'),
-    ...boardField,
-}, async (args) => jsonResult(await briefSetPage(client, args)));
 // ---------------- plans (DX-2683) ----------------
 // THE BINDING ASYMMETRY IS IN THE SCHEMAS, NOT IN PROSE. `plan_get` takes an
 // optional `plan_id`; `plan_add_record`, `plan_get_record`,
@@ -909,7 +879,7 @@ strictTool("brief_set_page", 'Write one Brief page. Board-scoped; see `board`. B
 // plan id — and it can only ever bind the caller's own session. `plan_create`
 // also takes no plan id, but for a different reason: it MAKES a plan rather
 // than acting on one, so there is no existing plan for an id to name yet.
-strictTool("plan_list", "List every plan, and learn which plan THIS session is connected to. Plans are GLOBAL, not board-scoped — a plan is a named, dated set of cards an operator assembled by hand, from any repo. Returns `{plans: [{id, ref, name, createdAt, cardCount, boards, status, signedOffAt, signedOffBy, autoSignOff}], session, sessionListenerAttached}` — `ref` is the plan's short reference (`PLN-<id>`), cite it rather than the bare id. `status` is computed fresh on every read, never stored — except the sign-off pair itself: `awaiting-session` (no live session — a session row isn't released just because a session ended), `planning` (no cards, or only Review/Backlog/terminal ones with ≥1 not Done/Cancelled), `building` (a live session AND ≥1 card ToDo/In Progress or stuck-but-active — Blocked/Needs Help), `awaiting-sign-off` (≥1 card, all Done/Cancelled, but nobody has signed the plan off yet — DX-3519), `complete` (≥1 card, all Done/Cancelled, AND signed off — wins even with no session). `signedOffAt`/`signedOffBy` are `null` until a human (`signedOffBy` = their identity) or the `autoSignOff` toggle (`signedOffBy: 'auto'`) signs the plan off; sign-off itself is a human-only write, not exposed through this MCP surface — direct the operator to the dashboard's plan page. Pass `status` to filter. `session` is your own registration (`{sessionId, title, planId, planName, firstSeenAt, lastActiveAt}`) or null outside a Claude Code session; `planId: null` means connected to no plan — `plan_get` to browse, `plan_connect` to bind. `sessionListenerAttached` says whether your event stream is attached (the plugin's plan bridge); false for a few seconds right after connect is normal, false after that means events aren't reaching you — tell the operator. Distinct from the board Brief (`brief_list`).", {
+strictTool("plan_list", "List every plan, and learn which plan THIS session is connected to. Plans are GLOBAL, not board-scoped — a plan is a named, dated set of cards an operator assembled by hand, from any repo. Returns `{plans: [{id, ref, name, createdAt, cardCount, boards, status, signedOffAt, signedOffBy, autoSignOff}], session, sessionListenerAttached}` — `ref` is the plan's short reference (`PLN-<id>`), cite it rather than the bare id. `status` is computed fresh on every read, never stored — except the sign-off pair itself: `awaiting-session` (no live session — a session row isn't released just because a session ended), `planning` (no cards, or only Review/Backlog/terminal ones with ≥1 not Done/Cancelled), `building` (a live session AND ≥1 card ToDo/In Progress or stuck-but-active — Blocked/Needs Help), `awaiting-sign-off` (≥1 card, all Done/Cancelled, but nobody has signed the plan off yet — DX-3519), `complete` (≥1 card, all Done/Cancelled, AND signed off — wins even with no session). `signedOffAt`/`signedOffBy` are `null` until a human (`signedOffBy` = their identity) or the `autoSignOff` toggle (`signedOffBy: 'auto'`) signs the plan off; sign-off itself is a human-only write, not exposed through this MCP surface — direct the operator to the dashboard's plan page. Pass `status` to filter. `session` is your own registration (`{sessionId, title, planId, planName, firstSeenAt, lastActiveAt}`) or null outside a Claude Code session; `planId: null` means connected to no plan — `plan_get` to browse, `plan_connect` to bind. `sessionListenerAttached` says whether your event stream is attached (the plugin's plan bridge); false for a few seconds right after connect is normal, false after that means events aren't reaching you — tell the operator.", {
     status: z
         .enum(PLAN_STATUSES)
         .optional()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thehammer/danx-dashboard-mcp",
-  "version": "0.1.158",
+  "version": "0.1.159",
   "description": "Stdio MCP server wrapping danxbot's dashboard /api/issues/* normalized DB-backed HTTP routes for dispatched agents (DX-704 Phase 2).",
   "license": "MIT",
   "type": "module",

package/dist/version-floor.js

@@ -1,128 +0,0 @@
-/**
- * DX-3597 — this package's half of the MCP-version-floor guard whose
- * server-side half shipped in DX-3525 (`src/mcp-contract.ts`,
- * `src/dashboard/serve-request.ts`, `src/resources/field-tree.ts`, all in
- * the main danxbot repo — this package cannot import them, see below).
- *
- * The dashboard stamps `X-Danx-Mcp-Min-Version` on every routed `/api/*`
- * response with its currently-advertised floor (`MIN_MCP_VERSION` in
- * `src/mcp-contract.ts` — DX-3597 made that floor track the version where
- * an MCP-exposed contract last changed, not "whatever's currently
- * published"; see that file's module doc for the full decision).
- *
- * `DashboardHttpClient.request()` (`./http-client.ts`) reads this header on
- * the FIRST call this process makes (regardless of outcome — a proactive
- * check, since a stale client can otherwise appear to work for a while on
- * routes whose shape didn't change) and on every subsequent 4xx (a response
- * that might otherwise read as an ordinary caller error, when it's really
- * "you're running an old MCP"). When this package's own version is behind
- * the advertised floor, it throws `McpOutdatedError` instead of returning
- * the ordinary envelope — the same "throw rather than fabricate/silently
- * pass through" contract `http-client.ts` already applies to a 5xx/network
- * failure (see that file's own doc): an outdated MCP is exactly that class
- * of failure, nothing the calling tool can meaningfully work around.
- *
- * Everything here is duplicated, not imported, from the server's
- * `src/mcp-contract.ts` — this package is an INDEPENDENTLY PUBLISHED npm
- * artifact (DX-2103) and cannot depend on the danxbot service's own `src/`
- * tree. Keep the header name, the package name, and the version-compare
- * behavior in agreement with that file by hand when either changes.
- */
-import { readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-/** Must match `MCP_MIN_VERSION_HEADER` in danxbot's `src/mcp-contract.ts` verbatim. */
-export const MCP_MIN_VERSION_HEADER = "X-Danx-Mcp-Min-Version";
-/** Must match `MCP_PACKAGE_NAME` in danxbot's `src/mcp-contract.ts` verbatim. */
-export const MCP_PACKAGE_NAME = "@thehammer/danx-dashboard-mcp";
-/**
- * Numeric-dotted version compare (major.minor.patch, ...) — mirrors
- * `compareMcpVersions` in danxbot's `src/mcp-contract.ts` behavior
- * byte-for-byte (duplicated, not imported — see module doc). Both sides of
- * this contract have only ever used plain numeric dotted versions, so this
- * throws rather than silently falling back to a lexical compare, which
- * would misorder "0.1.9" vs "0.1.10".
- */
-export function compareMcpVersions(a, b) {
-    const parse = (v) => {
-        if (!/^\d+(\.\d+)*$/.test(v)) {
-            throw new Error(`[danx-dashboard-mcp] "${v}" is not a plain numeric dotted version (major.minor.patch)`);
-        }
-        return v.split(".").map(Number);
-    };
-    const pa = parse(a);
-    const pb = parse(b);
-    const len = Math.max(pa.length, pb.length);
-    for (let i = 0; i < len; i++) {
-        const da = pa[i] ?? 0;
-        const db = pb[i] ?? 0;
-        if (da !== db)
-            return da - db;
-    }
-    return 0;
-}
-let cachedOwnVersion;
-/**
- * Reads this package's OWN version from its `package.json` — always present
- * next to `dist/` (or `src/`, under `npm run dev`'s `tsx`) at runtime even
- * though `files: ["dist","README.md"]` excludes it from the tarball
- * MANIFEST: npm always includes `package.json` in what it publishes and
- * what it installs, regardless of `files` (the same guarantee `README` /
- * `LICENSE` / the `main` entry get) — this reads the copy npm actually
- * installed next to this module, not danxbot's own source tree. Both
- * `dist/version-floor.js` and `src/version-floor.ts` sit exactly one
- * directory below the package root, so `../package.json` resolves
- * correctly under both the published (dist) and dev (`tsx src/index.ts`)
- * shapes. Memoized — the version cannot change mid-process.
- */
-export function readOwnVersion() {
-    if (cachedOwnVersion !== undefined)
-        return cachedOwnVersion;
-    const here = dirname(fileURLToPath(import.meta.url));
-    const pkgJsonPath = join(here, "..", "package.json");
-    const raw = readFileSync(pkgJsonPath, "utf8");
-    const parsed = JSON.parse(raw);
-    if (typeof parsed.version !== "string") {
-        throw new Error(`[danx-dashboard-mcp] could not read this package's own version from ${pkgJsonPath}`);
-    }
-    cachedOwnVersion = parsed.version;
-    return cachedOwnVersion;
-}
-/** Test-only escape hatch — real callers never need to override the memoized read. */
-export function __resetOwnVersionCacheForTests() {
-    cachedOwnVersion = undefined;
-}
-/**
- * Thrown by `assertVersionFloorSatisfied` when this package is running
- * behind the server's advertised floor. Carries structured `have`/`need`
- * fields (not just a prose message) so a caller that wants to branch on
- * "is this specifically an outdated-MCP failure" can check `error.code`
- * rather than pattern-match the message text.
- */
-export class McpOutdatedError extends Error {
-    code = "mcp_outdated";
-    have;
-    need;
-    constructor(have, need) {
-        super(`[danx-dashboard-mcp] mcp_outdated: this MCP is running ${MCP_PACKAGE_NAME}@${have}, but the dashboard ` +
-            `requires >= ${need}. Restart your Claude Code session to pick up the published update.`);
-        this.name = "McpOutdatedError";
-        this.have = have;
-        this.need = need;
-    }
-}
-/**
- * Compares this package's own version against the floor a response header
- * advertised. No-ops (returns) when compatible, or when `headerValue` is
- * `null`/empty (an old-enough server, or a test stub, that never stamped
- * one — nothing to compare against). Throws `McpOutdatedError` when this
- * package is behind.
- */
-export function assertVersionFloorSatisfied(headerValue) {
-    if (!headerValue)
-        return;
-    const have = readOwnVersion();
-    if (compareMcpVersions(have, headerValue) < 0) {
-        throw new McpOutdatedError(have, headerValue);
-    }
-}