node-autotask 0.44.0 → 0.45.0

package/MCP_TOOL_OVERRIDES.json

@@ -76,26 +76,14 @@
     {
       "tool": "autotask_billingCode_count",
       "field": "description",
-      "newValue": "Zone quirk (ww29, live-verified): the unfiltered count/query surface is blind — query with `useType` (1 = general, 3 = internal) + `isActive` filters; time_entries.createForResource always applies them for you.",
-      "reason": "S11-C F4 (mcp-fix-20261003, plan M4): the unfiltered billing_codes surface is blind in ww29 (S9b node rule: the resolver always queries the internal family useType=3 + isActive); a raw caller gets a silent 0."
+      "newValue": "Zone quirk (ww29, live-verified): the unfiltered count/query surface is blind — query with `useType` (1 = general, 3 = internal) + `isActive` filters. A raw caller must pass those filters (the allocation-code-aware createForResource node op was cut in #292).",
+      "reason": "S11-C F4 (mcp-fix-20261003, plan M4): the unfiltered billing_codes surface is blind in ww29 (S9b node rule: the resolver always queries the internal family useType=3 + isActive); a raw caller gets a silent 0. The node op that applied these filters (createForResource) was cut in #292 — callers now pass the filters themselves."
     },
     {
       "tool": "autotask_billingCode_query",
       "field": "description",
-      "newValue": "Zone quirk (ww29, live-verified): the unfiltered count/query surface is blind — query with `useType` (1 = general, 3 = internal) + `isActive` filters; time_entries.createForResource always applies them for you.",
-      "reason": "S11-C F4 (mcp-fix-20261003, plan M4): the unfiltered billing_codes surface is blind in ww29 — pass the useType + isActive filters (time_entries.createForResource applies them for you)."
-    },
-    {
-      "tool": "autotask_timeEntry_create_for_resource",
-      "field": "description",
-      "newValue": "Create a time entry for a resource with the allocation-code dependency resolved by the node: it verifies the resource is active, honours the caller's linkage pin (else the default internal linkage), resolves an EXISTING active allocation code applicable to the resource (never creates one — the API user cannot), and posts the vendor-valid body. Pass `resourceID` and, optionally, the time window (`dateWorked`/`startDateTime`/`endDateTime`/`hoursWorked`) ONLY — the node resolves the allocation code; pin `internallAllocationCodeID` only when you hold a known active code. Wire key: the body posts the model name `internalBillingCodeID` (settled live for the australia-nz zone). (ww29/australia-nz: a (resource, role) pair that selects the API-only user's own resource was refused 2026-10-06 — 500 'API-only user cannot be selected for this field'. Creates succeeded live 2026-10-21 (pair not recorded); the authorised pair set is not re-adjudicated. On that error use an authorised (resource, role) pair or record time in the Autotask UI; the working reads remain postedWithin / the window helpers.)",
-      "reason": "S11-C F5 (mcp-fix-20261003, plan M5): state the minimal-input contract (resourceID + optional time window only), the pin rule (internallAllocationCodeID only when you hold a known active code) and the wire-key fact (the body posts the model name internalBillingCodeID — key oracle, S9b §5). The mechanical purpose covers node resolution only.; S13-QA (top-20 audit 2026-10-06) I-1 (W-A3, re-verified 2026-10-06 CONF100-1791187382): a (resource, role) pair wall for the API-only user's own resource (re-scoped 2026-10-21, #195) — the served surface names the wall and the working reads."
-    },
-    {
-      "tool": "autotask_ticket_open_with_note_and_assign",
-      "field": "description",
-      "newValue": "When to call: open a ticket and — in the same call — optionally attach the first note and/or assign a resource (1 call instead of the 6-call create + note + assign choreography). The node absorbs the ww29-proven create contract (required set { title, status (default 1 New), priority (default 3 Low), companyID, queueID }) and NEVER guesses a queue: an omitted queueID the vendor 500s on becomes the typed QUEUE_REQUIRED (suggestedAction: pass params.queueID — discover via autotask_describe(tickets.create)). Partial-failure contract: `steps[]` reports per-step results — the ticket is created first and a note/assign failure returns the applied ticketId + the typed step error (vendor rules now absorbed: the note create REQUIRES `title`; the assignment requires BOTH assignedResourceID and assignedResourceRoleID — live-verified). The resources table is blind to this API user, so the node pre-validates the assign target via resources.get (get is the authority). Apply after the dry run.",
-      "reason": "S12-A T1 (mcp-fix-20261003): the write composition that collapses the open-and-assign choreography; the override surfaces the steps[] partial-failure contract, the never-guess-queue rule and the live-verified vendor field rules (note title, the assign roleID) the mechanical purpose omits.; S13-QA (top-20 audit 2026-10-06) M-2: de-duplicated the dry-run sentence against the mechanical bounds tail."
+      "newValue": "Zone quirk (ww29, live-verified): the unfiltered count/query surface is blind — query with `useType` (1 = general, 3 = internal) + `isActive` filters. A raw caller must pass those filters (the allocation-code-aware createForResource node op was cut in #292).",
+      "reason": "S11-C F4 (mcp-fix-20261003, plan M4): the unfiltered billing_codes surface is blind in ww29 — pass the useType + isActive filters (the allocation-code-aware createForResource node op that applied them was cut in #292)."
     },
     {
       "tool": "autotask_ticket_change_status",
@@ -103,22 +91,10 @@
       "newValue": "When to call: move a ticket to a target status without knowing the tenant's status picklist or the per-status required fields — the node validates the targetStatus against the tenant's LIVE status picklist (entity metadata — a value the live picklist lacks → typed STATUS_UNKNOWN, zero record wire; the metadata unavailable → the vendor's own validation decides) and carries the live-discovered STATUS_REQUIRED_FIELDS map: one fresh GET merges the current record and the node fills the proven-safe defaults for the fields the target status requires that the record lacks. current === target → the typed no-op { changed: false, reason: 'NO_CHANGE' } (zero mutating wire). If the vendor 50s a status move naming required fields, the node retries once with those fields filled (typed discovery, bounded: max 3 merges) and returns filledFields + discoveryMerges.",
       "reason": "S12-A T2 (mcp-fix-20261003): the per-status required-field map is live-discovered vendor state an MCP LLM cannot know; the override states the picklist guard, the no-op contract and the bounded-discovery retry.; S13-QA (top-20 audit 2026-10-06) M-2: dropped the trailing dry-run sentence (the mechanical bounds tail already serves it).; S13-QA gate note 2 (dual-gate 2026-10-06): trailing space from the truncation fix.; #64 (2026-10-10): the guard is the tenant's LIVE status picklist (entity metadata, cache-aware) with the vendor-rejection fallback — the pinned ww29 table is deleted."
     },
-    {
-      "tool": "autotask_contact_upsert_by_email",
-      "field": "description",
-      "newValue": "When to call: ensure a contact with the given email exists under the given company (find-or-create) — one call with the typed EXISTS/CREATED result (+ the record). The node pre-checks the parent via companies.get (the companies count/query surface is blind to this API user — get is the authority; a miss → typed COMPANY_NOT_FOUND), then the parent-narrowed dedup query (1 wire, never widens; exact-case matching). The contact create absorbs the live-verified vendor rule: lastName must be non-empty (the node defaults it to 'Unknown'). Caveat: under the default redaction policy existing.emailAddress arrives [REDACTED] (PII).",
-      "reason": "S12-A T4 (mcp-fix-20261003): the find-or-create under the right parent with the blind-safe pre-check; the override states the typed EXISTS/CREATED contract, the redaction caveat and the live-verified lastName rule.; S13-QA (top-20 audit 2026-10-06) M-2: dropped the trailing dry-run sentence (the mechanical bounds tail already serves it).; S13-QA gate note 2 (dual-gate 2026-10-06): trailing space from the truncation fix."
-    },
-    {
-      "tool": "autotask_company_upsert_by_name",
-      "field": "description",
-      "newValue": "When to call: ensure a company with the given name exists (find-or-create) — one call with the typed EXISTS/CREATED result. The dedup boundary travels IN THE RESULT: the companies surface is blind to this API user (unowned companies are invisible to count/query), so BOTH result shapes carry the typed blindSurface caveat ('dedup covers only companies this API user can enumerate; a same-name company outside that scope is not detected') — the op never pretends total visibility. CREATE needs the ww29 required set { companyName, companyType, phone, ownerResourceID }: a missing owner → typed OWNER_RESOURCE_REQUIRED (the fix is fixture-free: pass params.ownerResourceID — the API-only user holds no owner resource in this zone). The create side-effects an auto 'Primary Address' location (reported in sideEffects).",
-      "reason": "S12-A T5 (mcp-fix-20261003): the blind-surface-aware find-or-create; the override states the in-result caveat, the OWNER_RESOURCE_REQUIRED remedy and the auto-location side-effect.; S13-QA (top-20 audit 2026-10-06) M-2: dropped the trailing dry-run sentence (the mechanical bounds tail already serves it).; S13-QA gate note 2 (dual-gate 2026-10-06): trailing space from the truncation fix."
-    },
     {
       "tool": "autotask_ticket_full_context",
       "field": "description",
-      "newValue": "When to call: the full context of ONE ticket in a single call (instead of 8–10 separate reads): the ticket + company + contact + assigned resource + project (a missing/dangling FK part is null + 'absent' — a part miss never fails the op), plus its notes, time entries and attachment metadata (histories are not read by this served tool). Wire: 8 bounded reads. Long text is truncated at textLimit (default 500) and flagged. The ticket itself missing → NOT_FOUND. Prefer this before composing actions on a ticket (changeStatus / openWithNoteAndAssign).",
+      "newValue": "When to call: the full context of ONE ticket in a single call (instead of 8–10 separate reads): the ticket + company + contact + assigned resource + project (a missing/dangling FK part is null + 'absent' — a part miss never fails the op), plus its notes, time entries and attachment metadata (histories are not read by this served tool). Wire: 8 bounded reads. Long text is truncated at textLimit (default 500) and flagged. The ticket itself missing → NOT_FOUND. Prefer this before composing actions on a ticket (changeStatus).",
       "reason": "S12-B T1 (mcp-fix-20261003): collapses the 9 raw relationship reads into one read call; the override states the per-part 'absent' semantics and the opt-in budget knobs.; S13-QA (top-20 audit 2026-10-06) I-4: includeHistories is not a served argument — the opt-in wording promised a control the closed schema lacks.; S13-QA gate note 1 (dual-gate 2026-10-06): the served schema is {id} — the 10-reads-with-histories figure is unreachable, dropped so the row does not contradict itself."
     },
     {
@@ -133,12 +109,6 @@
       "newValue": "When to call: the full profile of ONE configuration item in a single call: the item + its type + category records + notes + related items + billing-product associations (wire: <=6 reads; a dangling type/category FK skips its read). productAssociations is TYPED, never an error: on a tenant without enumerable products (ww29: products.count = 0 — the CI-create wall) the part carries blind: true + the zone-facts note. Zone fact: on ww29 NO CI record exists (the product wall blocked every create) — expect NOT_FOUND there; the op is mock-verified and stranger-verified.",
       "reason": "S12-B T3 (mcp-fix-20261003): the typed product-wall part; the override states the wall zone fact so consumers do not misread the blind association part as a defect."
     },
-    {
-      "tool": "autotask_fetch_many",
-      "field": "description",
-      "newValue": "When to call: batch up to 20 single-record GETs across MIXED resources in one call (instead of N sequential autotask_read calls): items [{ resource, id, fields? }] with per-item typed results (NOT_FOUND / SERVER_ERROR per item — never all-or-nothing). Refusals are pre-request (zero wire): string ids point at operations.resolveAny (name → id is its job); parent-scoped children (e.g. ticket_notes) need a parentId; unknown `fields` keys come back as the complete problem list (fields = exact vendor field names — client-side projection, zero extra wire); >20 items → CONFIG_ERROR (use <resource>.query for bulk). Sequential GETs (one wire per item); read op — no dry run.",
-      "reason": "S12-B T4 (mcp-fix-20261003): the batch/fan-out read primitive that collapses the server's worst cost pattern (N sequential reads); the override states the refusal contracts up front."
-    },
     {
       "tool": "autotask_relationship_map",
       "field": "description",
@@ -148,21 +118,15 @@
     {
       "tool": "autotask_timeEntry_create",
       "field": "description",
-      "newValue": "Create a time entry. (ww29/australia-nz: a (resource, role) pair that selects the API-only user's own resource was refused 2026-10-06 — 500 'API-only user cannot be selected for this field'. Creates succeeded live 2026-10-21 (pair not recorded); the authorised pair set is not re-adjudicated. On that error use an authorised (resource, role) pair or record time in the Autotask UI; the working reads remain postedWithin / the window helpers.)",
+      "newValue": "Create a time entry. (ww29/australia-nz: a (resource, role) pair that selects the API-only user's own resource was refused 2026-10-06 — 500 'API-only user cannot be selected for this field'. Creates succeeded live 2026-10-21 (pair not recorded); the authorised pair set is not re-adjudicated. On that error use an authorised (resource, role) pair or record time in the Autotask UI; the working reads remain time_entries.dateWorkedWindow / the plain query.)",
       "reason": "S13-QA (top-20 audit 2026-10-06) I-1 (W-A3, re-verified 2026-10-06 CONF100-1791187382): the 2026-10-06 (resource, role) pair wall (API-only user's own resource); re-scoped 2026-10-21 (#195) after live creates succeeded; the served surface previously presented the write as normal."
     },
     {
       "tool": "autotask_timeEntry_update",
       "field": "description",
-      "newValue": "Update a time entry. (ww29/australia-nz: a (resource, role) pair that selects the API-only user's own resource was refused 2026-10-06 — 500 'API-only user cannot be selected for this field'. Creates succeeded live 2026-10-21 (pair not recorded); the authorised pair set is not re-adjudicated. On that error use an authorised (resource, role) pair or record time in the Autotask UI; the working reads remain postedWithin / the window helpers.)",
+      "newValue": "Update a time entry. (ww29/australia-nz: a (resource, role) pair that selects the API-only user's own resource was refused 2026-10-06 — 500 'API-only user cannot be selected for this field'. Creates succeeded live 2026-10-21 (pair not recorded); the authorised pair set is not re-adjudicated. On that error use an authorised (resource, role) pair or record time in the Autotask UI; the working reads remain time_entries.dateWorkedWindow / the plain query.)",
       "reason": "S13-QA (top-20 audit 2026-10-06) I-1 (W-A3, re-verified 2026-10-06 CONF100-1791187382): same wall on the update write path; the served surface names it."
     },
-    {
-      "tool": "autotask_timeEntry_create_if_not_exists",
-      "field": "description",
-      "newValue": "Create a TimeEntry. (ww29/australia-nz: a (resource, role) pair that selects the API-only user's own resource was refused 2026-10-06 — 500 'API-only user cannot be selected for this field'. Creates succeeded live 2026-10-21 (pair not recorded); the authorised pair set is not re-adjudicated. On that error use an authorised (resource, role) pair or record time in the Autotask UI; the working reads remain postedWithin / the window helpers.)",
-      "reason": "S13-QA (top-20 audit 2026-10-06) I-1 (W-A3): the dedup-miss branch runs the walled create; the served surface names the wall (the plain-create caveat is appended mechanically by the projection when the schema lacks dedupFields)."
-    },
     {
       "tool": "autotask_ticket_count",
       "field": "description",
@@ -174,24 +138,6 @@
       "field": "description",
       "newValue": "Query Ticket records with a JSON filter. Zone quirk (ww29, live-verified): the tickets count/query surface returns 0/empty even when data exists (0 before AND after a proven live create) — verify presence with get(id), not count.",
       "reason": "S13-QA (top-20 audit 2026-10-06) M-4: the ww29 blind-surface quirk rides the served text (precedent: the companies count/query overrides, S11-C F3)."
-    },
-    {
-      "tool": "autotask_configurationItems_create_if_not_exists",
-      "field": "description",
-      "newValue": "Create a ConfigurationItem. Note: the create branch inherits the zone wall documented on configuration_items.create (ww29: product wall — products.count = 0, this create is UNAVAILABLE in tenants without products).",
-      "reason": "S13-QA (top-20 audit 2026-10-06) M-5: pointer to the walled sibling create on the create branch."
-    },
-    {
-      "tool": "autotask_contractCharge_create_if_not_exists",
-      "field": "description",
-      "newValue": "Create a ContractCharge. Note: the create branch inherits the zone wall documented on contract_charges.create (ww29: blind parent — the contracts table is 0 rows for this API user).",
-      "reason": "S13-QA (top-20 audit 2026-10-06) M-5: pointer to the walled sibling create on the create branch."
-    },
-    {
-      "tool": "autotask_projectCharge_create_if_not_exists",
-      "field": "description",
-      "newValue": "Create a ProjectCharge. Note: the create branch inherits the zone wall documented on project_charges.create (ww29: blind parent — the projects table is 0 rows for this API user).",
-      "reason": "S13-QA (top-20 audit 2026-10-06) M-5: pointer to the walled sibling create on the create branch."
     }
   ]
-}
+}