loopctl-mcp-server 2.56.0 → 2.58.0

package/README.md

@@ -139,10 +139,10 @@ autonomous agent) can self-remediate without a human. Full agent-tenant lifecycl
 
 | Tool | Description |
 |---|---|
-| `get_tenant` | Get current tenant info. Use to verify connectivity. |
+| `get_tenant` | Get current tenant info. Use to verify connectivity, and to read `capabilities` — which surfaces your `trust_tier` includes — before attempting a write. |
 | `list_projects` | List all projects in the current tenant. |
 | `resolve_project` | Resolve a repo to its `project_id` in one cheap call — provide any of `slug`, `repo_url` (`git@github.com:owner/repo.git`, `https://github.com/owner/repo`, and bare `owner/repo` all match), or `name`. Precedence `slug > repo_url > name`, first match wins. Use the returned `id` to scope captures/recall (`memory_*`, `recall_context`). `404` `not_found` if nothing matches, `422` `no_identifier` if none supplied, `409` if a fuzzy identifier matches more than one active project. |
-| `create_project` | Create a new project in the current tenant. |
+| `create_project` | Create a new **work** project (epics/stories/custody). Requires orchestrator+ **and** a `human_anchored` tenant; an agent-rooted tenant gets `403 custody_tier_required` and should use `create_kb_scope`. |
 | `delete_project` | **Requires `LOOPCTL_USER_KEY`.** Delete a project and all of its dependent resources (epics, stories, audit entries). Irreversible — orchestrator role is not sufficient. |
 | `get_progress` | Get progress summary for a project, including story counts by status. Pass `include_cost=true` for cost data. |
 | `import_stories` | Import stories into a project from a structured payload (Epic 12 import format). Pass `merge: true` to add stories to epics that already exist (otherwise duplicates return 409). For large payloads, use `payload_path` to read JSON from disk instead of passing it inline. |
@@ -221,7 +221,7 @@ Epic 39 Repo Coordination Bus — a lightweight, tenant-isolated channel for age
 | `get_cost_summary` | orch | Get cost/token usage summary for a project, optionally broken down by `agent`, `epic`, or `model`. |
 | `get_story_token_usage` | orch | Get all token usage records for a single story. |
 | `get_cost_anomalies` | orch | Get cost anomaly alerts — stories or agents exceeding expected budgets. Optionally filter by project. |
-| `get_ingestion_anomalies` | orch | Get ingestion-health anomalies — capture_silence (a source_type stopped producing articles) and high_reject_rate (writes rejected at high rate, persisting no article row). Check whether knowledge capture is still landing AND being accepted. |
+| `get_ingestion_anomalies` | orch | Get ingestion-health anomalies — capture_silence (a source_type stopped producing articles), high_reject_rate (writes rejected at high rate, persisting no article row), and sweep_stalled (the 30-day channel-post retention sweep is no longer enforcing retention, under the reserved source_type `channel_post_sweep`). Check whether knowledge capture is still landing AND being accepted, and whether coordination-bus retention is still enforced. |
 | `set_token_budget` | orch | Set a token budget (in millicents) for a project, epic, story, or agent scope. Requires orchestrator role. |
 
 ### Knowledge Wiki Tools (agent key)

package/index.js

@@ -2461,7 +2461,17 @@ const TOOLS = [
   // Project Tools
   {
     name: "get_tenant",
-    description: "Get current tenant info. Use to verify connectivity.",
+    description:
+      "Get current tenant info. Use to verify connectivity, AND to discover which surfaces " +
+      "your tenant's trust_tier includes BEFORE attempting a write. The response carries " +
+      "`capabilities`: `surfaces` (each surface -> \"allowed\" | \"requires_human_anchor\"), " +
+      "`allowed`/`blocked` lists, `descriptions`, and `remediation` when something is blocked. " +
+      "Read the live `allowed`/`blocked` lists from the response — they are the authoritative, " +
+      "current split for your TIER — instead of probing for a 403 per endpoint. Two bounds, " +
+      "restated in the payload as `scope: trust_tier_only` and `applies_to: mutating_actions`: " +
+      "the ROLE gate is separate (an `allowed` surface can still return 403 `insufficient_role` " +
+      "if your key's role is too low), and READS stay open on every surface, including blocked " +
+      "ones — `blocked` means writes.",
     inputSchema: {
       type: "object",
       properties: {},
@@ -2512,7 +2522,14 @@ const TOOLS = [
   },
   {
     name: "create_project",
-    description: "Create a new project in the current tenant.",
+    description:
+      "Create a new WORK project (kind: work) in the current tenant — the container for " +
+      "epics/stories/dispatch and the chain-of-custody surface. Requires orchestrator+ role " +
+      "AND a human_anchored tenant (WebAuthn signup ceremony); an agent_rooted tenant gets " +
+      "403 custody_tier_required, by design — a tenant must not be able to open a custody " +
+      "surface for itself. If you only need a project row to scope KNOWLEDGE to the repo you " +
+      "are on, use create_kb_scope instead (agent role, no human anchor). Call get_tenant " +
+      "first and read `capabilities` to see which of the two applies to your tenant.",
     inputSchema: {
       type: "object",
       properties: {
@@ -3375,9 +3392,13 @@ const TOOLS = [
     name: "get_ingestion_anomalies",
     description:
       "Get ingestion-health anomalies — capture_silence (a source_type that was producing " +
-      "articles has gone silent) and high_reject_rate (writes attempted but rejected at high " +
-      "rate — 409 title_conflict / validation drops that persist no article row). Use to check " +
-      "whether knowledge capture is still landing AND being accepted. Paginated (page/page_size); " +
+      "articles has gone silent), high_reject_rate (writes attempted but rejected at high " +
+      "rate — 409 title_conflict / validation drops that persist no article row), and " +
+      "sweep_stalled (the 30-day channel-post retention sweep is no longer enforcing " +
+      "retention for this tenant — expired coordination-bus posts are still present well " +
+      "past their expires_at; recorded under the reserved source_type channel_post_sweep). " +
+      "Use to check whether knowledge capture is still landing AND being accepted, and " +
+      "whether coordination-bus retention is still being enforced. Paginated (page/page_size); " +
       "advance `page` to enumerate all. Filter by source_type, anomaly_type, resolved status, or " +
       "include archived.",
     inputSchema: {
@@ -3391,10 +3412,11 @@ const TOOLS = [
           type: "string",
           // Keep in sync with Loopctl.Knowledge.IngestionAnomaly @anomaly_types (the
           // server-side Ecto.Enum + the ingestion_anomalies_anomaly_type_check DB CHECK).
-          enum: ["capture_silence", "high_reject_rate"],
+          enum: ["capture_silence", "high_reject_rate", "sweep_stalled"],
           description:
-            'Optional: filter by anomaly type — "capture_silence" (writes stopped) or ' +
-            '"high_reject_rate" (writes rejected at high rate).',
+            'Optional: filter by anomaly type — "capture_silence" (writes stopped), ' +
+            '"high_reject_rate" (writes rejected at high rate), or "sweep_stalled" ' +
+            '(the channel-post retention sweep is not enforcing the 30-day window).',
         },
         resolved: {
           type: "string",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "loopctl-mcp-server",
-  "version": "2.56.0",
+  "version": "2.58.0",
   "description": "MCP server for loopctl \u2014 structural trust for AI development loops",
   "type": "module",
   "main": "index.js",