@thehammer/danx-dashboard-mcp 0.1.230 → 0.1.233

package/README.md

@@ -36,7 +36,7 @@ All exposed as `mcp__danx-dashboard__<name>` once wired through the workspace `m
 | Tool | Purpose |
 |---|---|
 | `danxbot_api` | `{method, path, query?, body?}` — calls any dashboard route the caller's credential may reach (card/plan CRUD, comments, dependencies, problems/solutions, quality gates, retro, triage, transitions, …). Returns `{ok, status, body}`; `body` carries the route's own response, or its structured error verbatim when `ok:false`. While this session is plan-connected, the dashboard's own reminders for it (today: `plan_list.listener_unattached`, attached by the server to `GET /api/plans` when the event listener is unattached past the startup grace, DX-3997) are relayed into the body's `reminders[]`; the MCP carries no reminder text or state of its own and re-reads at most every 30s. |
-| `danxbot_api_list` | No args. Lists the routes this caller's credential may reach, one line each (`{method, path, summary, permission}`) — call this first when you don't know the route for what you need to do. |
+| `danxbot_api_list` | No args. Lists the routes this caller's credential may reach as `{routes: ["METHOD /path"], external: [{route, served_by}]}` (one bare string per route, exactly what `danxbot_api_spec` takes) — call this first when you don't know the route for what you need to do. |
 | `danxbot_api_spec` | `{endpoints}` (comma-joined `METHOD /path` list, required, min 1). Returns the exact OpenAPI contract for those routes — call this when you know the route but not its exact request/response shape. |
 | `request_permission` | `{permissions, reason}` — asks a person to grant this key ONE MORE permission (see "Asking for one more permission" above). Answers at once with the approval URL and confirm code; the grant is picked up in the background. |
 

package/dist/handlers.js

@@ -137,7 +137,7 @@ export async function danxbotApi(client, args) {
 const ROUTES_BASE_PATH = "/api/routes";
 /**
  * `danxbot_api_list()` — the routes YOUR credential may currently call,
- * `[{method, path, summary, permission}]`, one line each. Backed by DX-3528's
+ * `{routes: ["METHOD /path"], external: [{route, served_by}]}`, one string each (DX-4401). Backed by DX-3528's
  * `GET /api/routes`, which filters the served route table through the SAME
  * `isRouteAuthorizedForPrincipal` check `authorize()` enforces on every
  * request — a route listed here is always callable, and a route this

package/dist/index.js

@@ -18,7 +18,7 @@
  *                            brief_*, repo_knowledge_*, failure_category_*,
  *                            dispatch_transcript_search, quality_gate_instruction — all deleted
  *                            here). See `SERVER_INSTRUCTIONS` below for the calling convention.
- *   - danxbot_api_list       lists the routes your credential may call, one line each (DX-3465
+ *   - danxbot_api_list       lists the routes your credential may call, one string each (DX-3465
  *                            A5, backed by DX-3528's permission-aware discovery). Call this
  *                            first to find the route for something you need to do.
  *   - danxbot_api_spec       discovers the exact request/response shape of any route
@@ -449,8 +449,8 @@ async (args) => {
 // ---------------- danxbot_api_list (DX-3465 A5, PLN-11 R-25) ----------------
 strictTool("danxbot_api_list", 
 // DX-3528 — the list is filtered by the same permission check every request takes.
-"Lists the dashboard API routes your credential may call: `[{method, path, summary, permission}]`, each " +
-    "`path` a route template (`/api/issues/:id/transition`), the form `danxbot_api_spec` takes. A route not " +
+"Lists the dashboard API routes your credential may call: `{routes: [\"METHOD /path/template\", ...], external: [...]}`, the " +
+    "strings `danxbot_api_spec` takes (`POST /api/issues/:id/transition`); `external` are worker-served routes. A route not " +
     "listed is not callable by you.", {}, async () => guardedBoundedJson(() => danxbotApiList(client)));
 // ---------------- danxbot_api_spec (DX-3465, PLN-11 R-25) ----------------
 strictTool("danxbot_api_spec", 

package/dist/route-board-scope.generated.js

@@ -6,6 +6,7 @@
  * unknown key on a list read whose vocabulary omits `board` and on a route declaring `strictQuery`; a path no template names is stamped.
  */
 export const GET_ROUTE_BOARD_SCOPE = [
+    ["/api/access-requests", false],
     ["/api/account/sessions", false],
     ["/api/audit-events", false],
     ["/api/boards", false],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thehammer/danx-dashboard-mcp",
-  "version": "0.1.230",
+  "version": "0.1.233",
   "description": "Stdio MCP server fronting danxbot's dashboard API for agents (operator sessions and dispatched workers alike): the generic danxbot_api/danxbot_api_list/danxbot_api_spec tools reach any route the caller's credential may call, plus dedicated agent-specific tools (plan_connect, danxbot_complete, and other per-dispatch lifecycle callbacks) (DX-3465, PLN-11 R-25).",
   "license": "MIT",
   "type": "module",