node-autotask 0.20.0 → 0.21.0

package/MCP_TOOL_MANIFEST.md

@@ -1,6 +1,6 @@
 # MCP Tool Manifest — node-autotask
 
-<!-- GENERATED by scripts/project-mcp-tools.mjs at 2026-10-20T01:49:50.529Z — do not hand-edit. -->
+<!-- GENERATED by scripts/project-mcp-tools.mjs at 2026-10-20T21:35:51.707Z — do not hand-edit. -->
 
 Mechanical MCP projection of the capability registry (generator-design section 7, ARCHITECTURE section 19.5).
 Tool names are the plan `mcpTool` columns (entity-first `autotask_<entity>_<verb>`); descriptions are the
@@ -8,7 +8,7 @@ registry `purpose` + a mechanical bounds/flags sentence; annotations derive from
 Curation edits live ONLY in `MCP_TOOL_OVERRIDES.json` (records `{ tool, field, newValue, reason }`).
 
 Registry: 1213 operations; projected tools: 850 (one per registry op with a non-null `mcpTool`);
-not projected (catalog/describe material): 363. planHash: `f6a579e0b7a8544f…`
+not projected (catalog/describe material): 363. planHash: `baf3e855956ed545…`
 
 ## Always-on core tier (CORE_RULE — computed, never a hand list)
 
@@ -818,9 +818,9 @@ operation key). An op with no tool of its own still exists as a catalog row in `
 | `autotask_aggregate` | `operations.aggregate` | helper | read | read | Fold any query surface into groups/sums/totals in one bounded call — or count it with the vendor count endpoint when no folding is needed — with blind-surface and truncation honesty (caps documented: the walk scans at most 2500 rows and top keeps at most 100 groups — a truncated aggregate is a PARTIAL answer, never a tenant-wide total); date fields bucket via the closed groupBy suffix <field>@month | @week | @year (ISO labels, UTC-anchored) | {"operation":{"type":"string — the query operation to fold, exactly <planResourceKey>.query (a plan resource WITH a query row; a special op, a .count row, or an unknown resource is refused naming autotask_catalog)"},"filter":{"type":"object[] — the filter conditions (the query-bag filter grammar: 13 operators, caps 500 OR-conditions / 1 UDF / 8000 chars; field names in vendor casing via operations.fieldCatalog; an empty array = the unfiltered call — the blind-predicate stamp case)"},"opts":{"type":"object (optional) — { groupBy?: string[] (vendor field names), sum?: string[] (numeric vendor fields), top?: number (default 25, clamped 1..100 — the group-row cap), limit?: number (total-record cap for the walk modes, default 2500 = the house BOUNDED_QUERY_MAX_LIMIT — the hard max) } — NEITHER groupBy nor sum = COUNT mode (one vendor /query/count call — no walk)"}} (required: operation, filter) | compact AggregateResult |
 | `autotask_blind_surfaces` | `operations.blindSurfaces` | helper | read | read | Answer 'can this tenant/see this table at all?' in one ZERO-wire call: the plan-pinned blind-surface inventory over the 116 query-able surfaces — which read ops are affected per resource, the blind class, the unfiltered row count the discovery sweep observed, the authority op, and the proof level — with the data-full set, the artifact counts, and the remedies. | {"opts":{"type":"object? (the optional filter bag: { resource?: string (the plan resource key — narrows the row set; unknown key → RESOURCE_UNKNOWN), kind?: \u0027unowned-blind\u0027 \| \u0027fully-blind\u0027 \| \u0027unfiltered-blind\u0027 \| \u0027unknown\u0027 (narrows to one blind class; unknown kind → CONFIG_ERROR naming the valid classes) }) — the ZERO-wire served 116-surface inventory"}} (required: none) | compact BlindSurfaceInventory |
 | `autotask_create_guidance` | `operations.createGuidance` | helper | read | read | Answer 'what does the vendor ACTUALLY require to create a record here?' in one ZERO-wire call: the 92 campaign-decoded create entities — the live-proven required-field prefix, the structured blocker (the exact wall class), the exact vendor message text, the remedy, and the delete boundary — instead of rediscovering it one failed write at a time. | {"opts":{"type":"object? (the optional filter bag: { resources?: string[] (the plan resource keys — narrows the row set; unknown key → RESOURCE_UNKNOWN), kind?: CreateBlockerKind (narrows to one blocker kind; unknown kind → CONFIG_ERROR naming the valid kinds) }) — the ZERO-wire served zone-fact catalog (one row per campaign-decoded create entity)"}} (required: none) | compact CreateGuidanceReport |
-| `autotask_expand_resource_names` | `operations.expandResourceNames` | helper | read | read | Resolve resource ids to display names in one opt-in call: per-id resources.get reads (never an id-in query) with blind-marked rows for ids the API user cannot resolve and an opt-in in-memory name cache (each distinct id fetched at most once per cache lifetime). | {"ids":{"type":"(number \| string)[] — vendor numeric resource ids (safe integers, or the canonical integer string for ids above 2^53); up to 500 ids (over → pre-request refusal, zero wire; maxIds may lower the cap, never raise it); non-numeric string ids refused pointing at autotask_resolve_any. One call = per-id resources.get reads ONLY (never an id-in query — the resources table can be blind to count/query while per-id reads work, and an id-in lookup would silently return nothing). Each distinct id is fetched at most once per call (de-duplicated) and, with the opt-in resourceNameCache configured, at most once per cache lifetime (the vendor\u0027s true not-found is cached as a blind marker — a repeat miss costs no wire; a failure is never cached). Per-row results { id, name (firstName [middleName] lastName, single spaces; null when the vendor returns no name part — a data gap, distinct from blind), blind (true when the per-id read cannot resolve — the table-invisible case — id kept, no error, no throw), error? (a transient per-id fault; one fault never aborts the rest) }. Result: { results, resolved, blind, failed }."}} (required: ids) | compact ExpandResourceNamesResult |
-| `autotask_fetch_by_ids` | `operations.fetchByIds` | helper | read | read | Fetch up to 500 single records by id across mixed resources in one call (query-first chunked id-in reads with a per-id get fallback), with per-item typed results. | {"items":{"type":"object[] — the items list [{ resource: string (plan key, e.g. tickets), id: number \| string (vendor numeric id — a safe integer, or the canonical integer string for ids above 2^53), fields?: string[] (exact vendor field names — the fetched row projected best-effort to the item\u0027s fields, zero extra wire) }]; up to 500 items (over → pre-request refusal); numeric ids + canonical integer strings ONLY (non-numeric string identifiers → autotask_resolve_any); mixed resources; query-first (per-resource 250-id id-in chunks, single page each) with a per-id get fallback for every query-missed id (blind-surface-safe); per-item typed results (one NOT_FOUND or fault never aborts the rest)"}} (required: items) | compact FetchManyResult |
-| `autotask_fetch_many` | `operations.fetchMany` | helper | read | read | When to call: batch up to 20 single-record GETs across MIXED resources in one call (instead of N sequential autotask_read calls): items [{ resource, id, fields? }] with per-item typed results (NOT_FOUND / SERVER_ERROR per item — never all-or-nothing). Refusals are pre-request (zero wire): string ids point at autotask_resolve_any (name → id is its job); parent-scoped children (e.g. ticket_notes) need a parentId; unknown `fields` keys come back as the complete problem list (fields = exact vendor field names — client-side projection, zero extra wire); >20 items → CONFIG_ERROR (use <resource>.query for bulk). Sequential GETs (one wire per item); read op — no dry run. | {"items":{"type":"object[] — the items list [{ resource: string (plan key, e.g. tickets), id: number \| string (vendor numeric id — a safe integer, or the canonical integer string for ids above 2^53), fields?: string[] (exact vendor field names — client-side projection, zero extra wire) }]; max 20 items (over → pre-request refusal); numeric ids + canonical integer strings ONLY (non-numeric string identifiers → autotask_resolve_any); per-item typed partial failure (never all-or-nothing)"},"opts":{"type":"object (optional) — { maxItems?: number (may lower the 20-item cap, never raise it), liveFields?: boolean (OPT-IN live field validation, issue #66 — when true the requested fields validate against the tenant\u0027s LIVE entity field metadata: a warm fieldCache costs zero wire, a cold run is one entityInformation/fields GET per distinct resource in the batch; a resource whose metadata is unavailable falls back to the vendored-spec set for THAT resource (never throws, never blocks the batch); when available the live set is authoritative — a field it lacks is refused even if the spec lists it, and a live field the spec lacks (e.g. time_entries postedDate) is accepted; field discovery: operations.fieldCatalog) }"}} (required: items) | compact FetchManyResult |
+| `autotask_expand_resource_names` | `operations.expandResourceNames` | helper | read | read | Resolve resource ids to display names in one opt-in call: per-id resources.get reads (never an id-in query) with blind-marked rows for ids the API user cannot resolve and an opt-in in-memory name cache (each distinct id fetched at most once per cache lifetime). | {"ids":{"type":"(number \| string)[] — vendor numeric resource ids (safe integers, or the canonical integer string for ids above 2^53); up to 500 ids (over → pre-request refusal, zero wire; maxIds may lower the cap, never raise it); non-numeric string ids refused pointing at operations.resolveAny. One call = per-id resources.get reads ONLY (never an id-in query — the resources table can be blind to count/query while per-id reads work, and an id-in lookup would silently return nothing). Each distinct id is fetched at most once per call (de-duplicated) and, with the opt-in resourceNameCache configured, at most once per cache lifetime (the vendor\u0027s true not-found is cached as a blind marker — a repeat miss costs no wire; a failure is never cached). Per-row results { id, name (firstName [middleName] lastName, single spaces; null when the vendor returns no name part — a data gap, distinct from blind), blind (true when the per-id read cannot resolve — the table-invisible case — id kept, no error, no throw), error? (a transient per-id fault; one fault never aborts the rest) }. Result: { results, resolved, blind, failed }."}} (required: ids) | compact ExpandResourceNamesResult |
+| `autotask_fetch_by_ids` | `operations.fetchByIds` | helper | read | read | Fetch up to 500 single records by id across mixed resources in one call (query-first chunked id-in reads with a per-id get fallback), with per-item typed results. | {"items":{"type":"object[] — the items list [{ resource: string (plan key, e.g. tickets), id: number \| string (vendor numeric id — a safe integer, or the canonical integer string for ids above 2^53), fields?: string[] (exact vendor field names — the fetched row projected best-effort to the item\u0027s fields, zero extra wire) }]; up to 500 items (over → pre-request refusal); numeric ids + canonical integer strings ONLY (non-numeric string identifiers → operations.resolveAny); mixed resources; query-first (per-resource 250-id id-in chunks, single page each) with a per-id get fallback for every query-missed id (blind-surface-safe); per-item typed results (one NOT_FOUND or fault never aborts the rest)"}} (required: items) | compact FetchManyResult |
+| `autotask_fetch_many` | `operations.fetchMany` | helper | read | read | When to call: batch up to 20 single-record GETs across MIXED resources in one call (instead of N sequential autotask_read calls): items [{ resource, id, fields? }] with per-item typed results (NOT_FOUND / SERVER_ERROR per item — never all-or-nothing). Refusals are pre-request (zero wire): string ids point at operations.resolveAny (name → id is its job); parent-scoped children (e.g. ticket_notes) need a parentId; unknown `fields` keys come back as the complete problem list (fields = exact vendor field names — client-side projection, zero extra wire); >20 items → CONFIG_ERROR (use <resource>.query for bulk). Sequential GETs (one wire per item); read op — no dry run. | {"items":{"type":"object[] — the items list [{ resource: string (plan key, e.g. tickets), id: number \| string (vendor numeric id — a safe integer, or the canonical integer string for ids above 2^53), fields?: string[] (exact vendor field names — client-side projection, zero extra wire) }]; max 20 items (over → pre-request refusal); numeric ids + canonical integer strings ONLY (non-numeric string identifiers → operations.resolveAny); per-item typed partial failure (never all-or-nothing)"},"opts":{"type":"object (optional) — { maxItems?: number (may lower the 20-item cap, never raise it), liveFields?: boolean (OPT-IN live field validation, issue #66 — when true the requested fields validate against the tenant\u0027s LIVE entity field metadata: a warm fieldCache costs zero wire, a cold run is one entityInformation/fields GET per distinct resource in the batch; a resource whose metadata is unavailable falls back to the vendored-spec set for THAT resource (never throws, never blocks the batch); when available the live set is authoritative — a field it lacks is refused even if the spec lists it, and a live field the spec lacks (e.g. time_entries postedDate) is accepted; field discovery: operations.fieldCatalog) }"}} (required: items) | compact FetchManyResult |
 | `autotask_field_catalog` | `operations.fieldCatalog` | helper | read | read | Fetch the LIVE vendor field catalog for the named resources in one bounded read call: which fields exist, which are required, types, maxLength, read-only, queryable, picklist-ness — the on-demand refresh for the point-in-time pins (operations.createGuidance, the zoneFacts) when the vendor has moved since they were verified. The wire cost (resources × include) is refused pre-request above the cap, never truncated; with the opt-in fieldCache configured, repeat reads inside the TTL cost no wire. It reports picklist-ness as a flag (isPickList) and picklist field NAMES (picklistFields); with the opt-in labels: true the projected picklist rows carry the vendor's exposed picklist VALUES (labels next to each value), and without it the op serves no VALUES. A picklist VALUE the vendor does not expose to this API user is not resolvable from this catalog. | {"opts":{"type":"object? (the call bag: { resources?: string[] (plan keys; omitted → the 5 workflow resources — never the full set; unknown key → RESOURCE_UNKNOWN carrying the count + the autotask_catalog pointer), include?: (\u0027info\u0027\|\u0027fields\u0027\|\u0027udf\u0027)[] (what to fetch per resource; default [\u0027fields\u0027]), fresh?: boolean (default false — bypass + refresh the opt-in fieldCache entries), fields?: string[] (post-projection filter, fields-kind rows only: names absent from a resource\u0027s fields catalog → that row\u0027s unmatchedFields — reported, never an error; info/udf rows unaffected), labels?: boolean (opt-in: the projected picklist rows carry the vendor\u0027s exposed picklist VALUES — the raw vendor entries as-is; default false = no VALUES on the rows; zero extra wire) }) — bounded live field metadata (the wire cost is refused pre-request above the cap, never truncated; per-resource failures recorded, never aborting). It reports field SHAPE as FLAGS and NAMES (picklist-ness via isPickList, picklist field names via picklistFields); with the opt-in labels: true, picklist rows carry the vendor\u0027s exposed picklist VALUES (labels next to each value), and without it the op serves no VALUES; a picklist VALUE the vendor does not expose to this API user (W-A4) is not resolvable from it"}} (required: none) | compact FieldCatalogResult |
 | `autotask_probe_reachability` | `operations.probeReachability` | helper | read | read | Re-run the blind-surface discovery live, on this tenant, in one bounded caller-opted call: one read query per named surface, hard-capped, with per-surface failures recorded instead of aborting — the operator's once-per-tenant answer to 'which of these tables does this user actually see?'. | {"opts":{"type":"object? (the sweep bag: { resources?: string[] (plan keys; omitted → the 70 non-data-full pinned surfaces — exceeds the default cap, so it needs an explicit maxWireCalls ≤ 80), limit?: 1-2 (rows per surface, default 2), maxWireCalls?: number (default 40; REFUSED above the hard cap of 80; a requested set larger than the cap is refused pre-request — refused, never truncated), confirmProbe?: true (REQUIRED — absent → CONFIG_ERROR before any request) }) — one bounded read query per surface; per-surface failures recorded, never aborting"}} (required: none) | compact ProbeReachabilityResult |
 | `autotask_recovery` | `operations.recovery` | helper | write | write | Find (and, where the vendor allows, delete) the record a write just created, in one typed call — the bounded, marker-filtered recovery path for tenants where created scratch records would otherwise become permanent residue. Dry-run first (dry_run). | {"input":{"type":"object (the recovery input: { resource: string (plan key, e.g. companies), marker: string, field?: string, parentId?: number, filter?: FilterCondition[], limit?: number (default 25, max 100), action?: \u0027find\u0027 (default read) \| \u0027delete\u0027 (destructive — dry-run-first, confirm: \u0027operations.recovery\u0027 to apply) })"},"dry_run":{"type":"boolean","default":true,"note":"true = the pinned DryRunResult envelope; the mutating request is never issued"}} (required: input) | compact RecoveryResult |
@@ -947,8 +947,8 @@ singleton, so no helper tier is expected there; G8, 2026-09-26.)
 
 ## Meta
 
-- generatedAt: 2026-10-20T01:49:50.529Z
-- planHash: f6a579e0b7a8544f6e477a730d21a9ba031536392d8dbaeb2f73c61ca290ae91
+- generatedAt: 2026-10-20T21:35:51.707Z
+- planHash: baf3e855956ed5450e1efea640845cb0fbc3a3a5a631a6159d4702b8dc726170
 - registry records: 1213
 - projected tools: 850
 - core tier: 15

package/MCP_TOOL_OVERRIDES.json

@@ -136,7 +136,7 @@
     {
       "tool": "autotask_fetch_many",
       "field": "description",
-      "newValue": "When to call: batch up to 20 single-record GETs across MIXED resources in one call (instead of N sequential autotask_read calls): items [{ resource, id, fields? }] with per-item typed results (NOT_FOUND / SERVER_ERROR per item — never all-or-nothing). Refusals are pre-request (zero wire): string ids point at autotask_resolve_any (name → id is its job); parent-scoped children (e.g. ticket_notes) need a parentId; unknown `fields` keys come back as the complete problem list (fields = exact vendor field names — client-side projection, zero extra wire); >20 items → CONFIG_ERROR (use <resource>.query for bulk). Sequential GETs (one wire per item); read op — no dry run.",
+      "newValue": "When to call: batch up to 20 single-record GETs across MIXED resources in one call (instead of N sequential autotask_read calls): items [{ resource, id, fields? }] with per-item typed results (NOT_FOUND / SERVER_ERROR per item — never all-or-nothing). Refusals are pre-request (zero wire): string ids point at operations.resolveAny (name → id is its job); parent-scoped children (e.g. ticket_notes) need a parentId; unknown `fields` keys come back as the complete problem list (fields = exact vendor field names — client-side projection, zero extra wire); >20 items → CONFIG_ERROR (use <resource>.query for bulk). Sequential GETs (one wire per item); read op — no dry run.",
       "reason": "S12-B T4 (mcp-fix-20261003): the batch/fan-out read primitive that collapses the server's worst cost pattern (N sequential reads); the override states the refusal contracts up front."
     },
     {

package/N8N_MCP_MANIFEST.json

@@ -1,6 +1,6 @@
 {
   "schema": "node-autotask n8n consumer mcp projection v1",
-  "generatedAt": "2026-10-20T01:49:50.705Z",
+  "generatedAt": "2026-10-20T21:35:52.181Z",
   "generator": "scripts/project-n8n-mcp.mjs",
   "inputs": {
     "capabilities": "capabilities.json (the capability registry — the single source of truth)",
@@ -3702,6 +3702,6 @@
     "approvalGatedWrites": 2,
     "destructiveExcluded": 3
   },
-  "capabilitiesHash": "1fdd74785554c692c5dbe41343b915bee0c2eafc1f88614e79a2c8dcc2d6ed76",
+  "capabilitiesHash": "5dbc8f4b9a993123b72dd51983d26806476845e1148cac87f2962f91f614e37a",
   "curationHash": "e19117ce73e38d9aded3be7e7f077a4e185d2e10294622b76c17d67f63cf9e3b"
 }

package/N8N_MCP_MANIFEST.md

@@ -1,6 +1,6 @@
 # N8N MCP Manifest — node-autotask (consumer projection)
 
-<!-- GENERATED by scripts/project-n8n-mcp.mjs at 2026-10-20T01:49:50.705Z — do not hand-edit. -->
+<!-- GENERATED by scripts/project-n8n-mcp.mjs at 2026-10-20T21:35:52.181Z — do not hand-edit. -->
 
 The n8n CONSUMER projection of the capability registry: the canonical source for what the
 n8n-side MCP tools must expose. The SDK is canonical — this is a projection of it, never a
@@ -282,6 +282,6 @@ only via a recorded change to `n8n-mcp.curation.json`.
 
 ## Meta
 
-- generatedAt: 2026-10-20T01:49:50.705Z
-- capabilitiesHash: 1fdd74785554c692c5dbe41343b915bee0c2eafc1f88614e79a2c8dcc2d6ed76
+- generatedAt: 2026-10-20T21:35:52.181Z
+- capabilitiesHash: 5dbc8f4b9a993123b72dd51983d26806476845e1148cac87f2962f91f614e37a
 - curationHash: e19117ce73e38d9aded3be7e7f077a4e185d2e10294622b76c17d67f63cf9e3b