standup-mr 0.6.1 → 0.7.0

package/CHANGELOG.md

@@ -4,6 +4,21 @@ All notable changes to standup-mr are recorded here. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the project uses
 [semantic versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.7.0] - 2026-10-10
+
+### Added
+
+- **Tool annotations.** Every MCP tool now declares `readOnlyHint`,
+  `destructiveHint`, `idempotentHint` and `openWorldHint`, so a host can tell
+  the read-only `get_standup_data` and `get_note_instructions` apart from
+  `post_standup_note`, which sends a message other people will see, and warn
+  before invoking it.
+
+### Changed
+
+- The MCP server registers its tools with `registerTool`, which needs
+  `@modelcontextprotocol/sdk` 1.30.0 or later.
+
 ## [0.6.1] - 2026-09-02
 
 ### Fixed

package/README.md

@@ -12,13 +12,13 @@ pipeline is red, it opens the job log and tells you **why**.
 
 ## What makes it different
 
-|  | commit-log tools | standup-mr |
-|---|---|---|
-| Source | local `git log` | GitLab or GitHub API |
-| Merge request state | ✗ | ready / blocked / draft / stale |
-| Review queue | ✗ | pending only, approvals filtered out |
-| Failed pipeline | ✗ | error lines from the job trace or the Actions job log |
-| Self-hosted (GitLab CE/EE, GitHub Enterprise) | varies | first class |
+|                                               | commit-log tools | standup-mr                                            |
+| --------------------------------------------- | ---------------- | ----------------------------------------------------- |
+| Source                                        | local `git log`  | GitLab or GitHub API                                  |
+| Merge request state                           | ✗                | ready / blocked / draft / stale                       |
+| Review queue                                  | ✗                | pending only, approvals filtered out                  |
+| Failed pipeline                               | ✗                | error lines from the job trace or the Actions job log |
+| Self-hosted (GitLab CE/EE, GitHub Enterprise) | varies           | first class                                           |
 
 ## Use
 
@@ -36,10 +36,10 @@ npx standup-mr fetch --markdown | npx standup-mr post --google-chat "$URL"
 
 ### Identity
 
-| | GitHub | GitLab |
-|---|---|---|
-| Flags | `--host` / `--token` | `--host` / `--token` |
-| Env | `GITHUB_HOST` / `GITHUB_TOKEN` | `GITLAB_HOST` / `GITLAB_TOKEN` |
+|             | GitHub                                      | GitLab                                                  |
+| ----------- | ------------------------------------------- | ------------------------------------------------------- |
+| Flags       | `--host` / `--token`                        | `--host` / `--token`                                    |
+| Env         | `GITHUB_HOST` / `GITHUB_TOKEN`              | `GITLAB_HOST` / `GITLAB_TOKEN`                          |
 | CLI session | [`gh`](https://cli.github.com/) auth config | [`glab`](https://gitlab.com/gitlab-org/cli) auth config |
 
 GitHub defaults to `github.com` when no host is given. GitLab has no default —
@@ -93,15 +93,15 @@ paste in the note-writing rules separately.
 
 ```json
 {
-  "mcpServers": {
-    "standup": {
-      "command": "npx",
-      "args": ["-y", "standup-mr", "mcp"],
-      "env": {
-        "GITHUB_TOKEN": "ghp_..."
-      }
+    "mcpServers": {
+        "standup": {
+            "command": "npx",
+            "args": ["-y", "standup-mr", "mcp"],
+            "env": {
+                "GITHUB_TOKEN": "ghp_..."
+            }
+        }
     }
-  }
 }
 ```
 
@@ -123,11 +123,11 @@ documentation for the current format rather than trusting this file blindly.
 
 The server exposes three tools:
 
-| Tool | What it does |
-|---|---|
-| `get_standup_data` | Reads the provider and returns the report as JSON. Optional `provider`, `host`, `lang`. |
+| Tool                    | What it does                                                                                 |
+| ----------------------- | -------------------------------------------------------------------------------------------- |
+| `get_standup_data`      | Reads the provider and returns the report as JSON. Optional `provider`, `host`, `lang`.      |
 | `get_note_instructions` | Returns the note-writing rules, so the assistant can write the note the way the skill would. |
-| `post_standup_note` | Posts a finished note to a Slack, Discord or Google Chat webhook. |
+| `post_standup_note`     | Posts a finished note to a Slack, Discord or Google Chat webhook.                            |
 
 `post_standup_note` reads the webhook URL from `STANDUP_WEBHOOK_URL` and never
 takes it as an argument — anyone holding that URL can post to the channel, so
@@ -196,8 +196,8 @@ _Structured digest — not a written note._
 ## Blockers
 
 - `acme/mobile` !6 — job `quality`
-  - `npm ERR! code E404`
-  - `npm ERR! 404 Not Found - GET https://registry.example.com/@acme%2fui`
+    - `npm ERR! code E404`
+    - `npm ERR! 404 Not Found - GET https://registry.example.com/@acme%2fui`
 ```
 
 The last section is the point of the tool. Every other standup tool can tell you
@@ -232,7 +232,7 @@ pipe `standup fetch` into anything, or import the package, read
   returns `null` with no error.
 - `MergeRequest`, `Review` and `Blocker` carry a required `provider` field, and
   `Provider.getReviews` takes an `Identity` rather than a numeric id.
-- The MCP `CollectOptions.provider` is now a provider *name*; inject a
+- The MCP `CollectOptions.provider` is now a provider _name_; inject a
   `Provider` instance through `providerImpl`.
 
 Claude Code plugin users should run `/plugin marketplace update standup-mr` —

package/dist/{chunk-NJO6LFYN.js → chunk-J5LAGA3U.js}

@@ -1,12 +1,25 @@
 #!/usr/bin/env node
 
-// src/buckets/buckets.constants.ts
-var STALE_DAYS = 14;
-
 // src/dates/dates.constants.ts
 var DAYS = {
-  en: ["Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"],
-  tr: ["Pazar", "Pazartesi", "Sal\u0131", "\xC7ar\u015Famba", "Per\u015Fembe", "Cuma", "Cumartesi"]
+  en: [
+    "Sunday",
+    "Monday",
+    "Tuesday",
+    "Wednesday",
+    "Thursday",
+    "Friday",
+    "Saturday"
+  ],
+  tr: [
+    "Pazar",
+    "Pazartesi",
+    "Sal\u0131",
+    "\xC7ar\u015Famba",
+    "Per\u015Fembe",
+    "Cuma",
+    "Cumartesi"
+  ]
 };
 var MONTHS = {
   en: [
@@ -77,10 +90,14 @@ function previousActiveDays(eventDates, today) {
   }));
 }
 
+// src/buckets/buckets.constants.ts
+var STALE_DAYS = 14;
+
 // src/buckets/buckets.ts
 function classify(mr, today, staleDays = STALE_DAYS) {
   if (mr.draft) return "draft";
-  if (mr.pipeline === "failed" || mr.pipeline === "canceled" || mr.unresolved > 0) return "blocked";
+  if (mr.pipeline === "failed" || mr.pipeline === "canceled" || mr.unresolved > 0)
+    return "blocked";
   const age = Math.round(
     (Date.parse(`${isoDay(today)}T00:00:00Z`) - Date.parse(`${mr.updated}T00:00:00Z`)) / MS_PER_DAY
   );
@@ -169,7 +186,9 @@ function cliStatus(cli) {
   }
 }
 function parseLoggedInHosts(statusOutput) {
-  const hosts = [...statusOutput.matchAll(/Logged in to (\S+)/g)].map((match) => match[1]);
+  const hosts = [...statusOutput.matchAll(/Logged in to (\S+)/g)].map(
+    (match) => match[1]
+  );
   return [...new Set(hosts)].sort();
 }
 var parseGlabHosts = parseLoggedInHosts;
@@ -186,14 +205,6 @@ function ghToken(host) {
   return cliCapture("gh", ["auth", "token", "--hostname", host]);
 }
 
-// src/notify/notify.constants.ts
-var PAYLOAD_FIELD = {
-  slack: "text",
-  discord: "content",
-  "google-chat": "text"
-};
-var WEBHOOK_KINDS = Object.keys(PAYLOAD_FIELD);
-
 // src/render/chat.ts
 var MARKDOWN_NATIVE = ["discord"];
 var FENCE = /^```/;
@@ -214,6 +225,14 @@ function toChatText(markdown, kind) {
   }).join("\n");
 }
 
+// src/notify/notify.constants.ts
+var PAYLOAD_FIELD = {
+  "slack": "text",
+  "discord": "content",
+  "google-chat": "text"
+};
+var WEBHOOK_KINDS = Object.keys(PAYLOAD_FIELD);
+
 // src/notify/notify.ts
 async function postWebhook(url, text, kind = "slack", fetchImpl = fetch) {
   const field = PAYLOAD_FIELD[kind];
@@ -228,7 +247,9 @@ async function postWebhook(url, text, kind = "slack", fetchImpl = fetch) {
     body: JSON.stringify({ [field]: toChatText(text, kind) })
   });
   if (!response.ok) {
-    throw new Error(`Webhook rejected the message: HTTP ${response.status}.`);
+    throw new Error(
+      `Webhook rejected the message: HTTP ${response.status}.`
+    );
   }
 }
 var WEBHOOK_HOSTS = {
@@ -279,17 +300,25 @@ function retryAfter(response) {
   const value = response.headers.get("retry-after");
   if (!value) return "";
   const seconds = Number(value);
-  if (!Number.isFinite(seconds) || seconds <= 0) return `; retry after ${value}`;
+  if (!Number.isFinite(seconds) || seconds <= 0)
+    return `; retry after ${value}`;
   return `; retry after ${seconds}s`;
 }
 function assertUsable(response, host) {
   if (response.ok || response.status === 404) return;
   if (response.status === 403 || response.status === 429) {
     if (remaining(response) === "0") {
-      throw new ApiError(`${host} rate limit reached${resetAt(response)}.`, response.status);
+      throw new ApiError(
+        `${host} rate limit reached${resetAt(response)}.`,
+        response.status
+      );
     }
     const retry = retryAfter(response);
-    if (retry) throw new ApiError(`${host} rate limit reached${retry}.`, response.status);
+    if (retry)
+      throw new ApiError(
+        `${host} rate limit reached${retry}.`,
+        response.status
+      );
   }
   if (response.status === 401) {
     throw new ApiError(
@@ -490,8 +519,8 @@ var GitHubProvider = class {
   }
   headers() {
     return {
-      authorization: `Bearer ${this.token}`,
-      accept: "application/vnd.github+json",
+      "authorization": `Bearer ${this.token}`,
+      "accept": "application/vnd.github+json",
       "x-github-api-version": API_VERSION
     };
   }
@@ -543,11 +572,14 @@ var GitHubProvider = class {
     return rows;
   }
   async getLogText(path) {
-    const first = await this.send(buildUrl(this.api, path), { redirect: "manual" });
+    const first = await this.send(buildUrl(this.api, path), {
+      redirect: "manual"
+    });
     if (first.status === 404) return "";
     const location = first.headers.get("location");
     if (!location) {
-      if (first.status === 0 || first.status >= 300 && first.status < 400) return "";
+      if (first.status === 0 || first.status >= 300 && first.status < 400)
+        return "";
       assertUsable(first, this.host);
       return first.ok ? await first.text() : "";
     }
@@ -590,7 +622,9 @@ var GitHubProvider = class {
   async shapePr(item) {
     const project = repoFromUrl(item.repository_url);
     const iid = item.number;
-    const pull = await this.getJson(`repos/${project}/pulls/${iid}`);
+    const pull = await this.getJson(
+      `repos/${project}/pulls/${iid}`
+    );
     if (!pull) return null;
     const sha = pull.head?.sha ?? "";
     const [checks, reviews] = await Promise.all([
@@ -598,9 +632,15 @@ var GitHubProvider = class {
         `repos/${project}/commits/${sha}/check-runs`,
         { per_page: PAGE_SIZE }
       ) : Promise.resolve(null),
-      this.getPaged(`repos/${project}/pulls/${iid}/reviews`, {}, 2)
+      this.getPaged(
+        `repos/${project}/pulls/${iid}/reviews`,
+        {},
+        2
+      )
     ]);
-    const { pipeline, pipelineId } = normalizeChecks(checks?.check_runs ?? []);
+    const { pipeline, pipelineId } = normalizeChecks(
+      checks?.check_runs ?? []
+    );
     return {
       provider: "github",
       project,
@@ -639,7 +679,9 @@ var GitHubProvider = class {
       `is:pr is:open review-requested:${identity.username}`,
       SEARCH_CAP
     );
-    const cutoff = isoDay(new Date(today.getTime() - FRESH_REVIEW_DAYS * MS_PER_DAY));
+    const cutoff = isoDay(
+      new Date(today.getTime() - FRESH_REVIEW_DAYS * MS_PER_DAY)
+    );
     const rows = await Promise.all(
       items.map(async (item) => {
         const project = repoFromUrl(item.repository_url);
@@ -705,7 +747,10 @@ var GitHubProvider = class {
       (run) => run.conclusion !== null && FAILED_CONCLUSIONS.has(run.conclusion)
     );
     if (!failed) return null;
-    const summary = [failed.output?.summary ?? "", failed.output?.text ?? ""].filter(Boolean).join("\n");
+    const summary = [
+      failed.output?.summary ?? "",
+      failed.output?.text ?? ""
+    ].filter(Boolean).join("\n");
     const errors = extractErrors(summary);
     if (errors.length === 0) return null;
     return {
@@ -818,7 +863,9 @@ var GitLabProvider = class {
     const raw = await this.getPaged("events", {
       after: isoDay(since)
     });
-    const ids = [...new Set(raw.map((e) => e.project_id).filter(Boolean))];
+    const ids = [
+      ...new Set(raw.map((e) => e.project_id).filter(Boolean))
+    ];
     const paths = new Map(
       await Promise.all(
         ids.map(async (id) => [id, await this.projectPath(id)])
@@ -829,7 +876,7 @@ var GitLabProvider = class {
       return {
         at: String(event.created_at).slice(0, 16),
         action: event.action_name,
-        project: paths.get(event.project_id) ?? "",
+        project: paths.get(event.project_id ?? -1) ?? "",
         targetType: event.target_type ?? "",
         title: event.target_title ?? "",
         branch: push.ref ?? "",
@@ -841,7 +888,9 @@ var GitLabProvider = class {
   async countUnresolved(projectId, iid) {
     const discussions = await this.getJson(
       `projects/${projectId}/merge_requests/${iid}/discussions`,
-      { per_page: PAGE_SIZE2 }
+      {
+        per_page: PAGE_SIZE2
+      }
     );
     if (!discussions) return 0;
     return discussions.filter((discussion) => {
@@ -894,7 +943,9 @@ var GitLabProvider = class {
   async approvedByMe(projectId, iid, uid) {
     const approvals = await this.getJson(`projects/${projectId}/merge_requests/${iid}/approvals`);
     if (!approvals) return false;
-    return (approvals.approved_by ?? []).some((entry) => entry.user?.id === uid);
+    return (approvals.approved_by ?? []).some(
+      (entry) => entry.user?.id === uid
+    );
   }
   async getReviews(identity, today) {
     const raw = await this.getPaged("merge_requests", {
@@ -902,7 +953,9 @@ var GitLabProvider = class {
       state: "opened",
       reviewer_id: identity.id
     });
-    const cutoff = isoDay(new Date(today.getTime() - FRESH_REVIEW_DAYS2 * MS_PER_DAY));
+    const cutoff = isoDay(
+      new Date(today.getTime() - FRESH_REVIEW_DAYS2 * MS_PER_DAY)
+    );
     const rows = await Promise.all(
       raw.map(async (mr) => ({
         provider: "gitlab",
@@ -914,7 +967,11 @@ var GitLabProvider = class {
         draft: mr.draft,
         url: mr.web_url,
         fresh: String(mr.updated_at).slice(0, 10) >= cutoff,
-        approvedByMe: await this.approvedByMe(mr.project_id, mr.iid, identity.id)
+        approvedByMe: await this.approvedByMe(
+          mr.project_id,
+          mr.iid,
+          identity.id
+        )
       }))
     );
     return rows.sort((a, b) => b.updated.localeCompare(a.updated));
@@ -926,7 +983,9 @@ var GitLabProvider = class {
     ) ?? [];
     const job = jobs.find((j) => j.status === "failed");
     if (!job) return null;
-    const trace = await this.getText(`projects/${mr.projectId}/jobs/${job.id}/trace`);
+    const trace = await this.getText(
+      `projects/${mr.projectId}/jobs/${job.id}/trace`
+    );
     return {
       provider: "gitlab",
       project: mr.project,
@@ -959,7 +1018,12 @@ function hostFrom(cliHost, envHost, probe, fallback, labels) {
   if (cliHost) return cliHost;
   if (envHost) return envHost;
   const found = probe();
-  return resolveHost(void 0, void 0, found.length > 0 ? found : fallback, labels);
+  return resolveHost(
+    void 0,
+    void 0,
+    found.length > 0 ? found : fallback,
+    labels
+  );
 }
 function chooseKind(options = {}) {
   const env = options.env ?? process.env;
@@ -1012,7 +1076,13 @@ function connect(options = {}) {
   const env = options.env ?? process.env;
   const probe = options.probe ?? DEFAULT_PROBE;
   if (chooseKind(options) === "github") {
-    const host2 = hostFrom(options.host, env.GITHUB_HOST, probe.github, [DOT_COM], GITHUB_LABELS);
+    const host2 = hostFrom(
+      options.host,
+      env.GITHUB_HOST,
+      probe.github,
+      [DOT_COM],
+      GITHUB_LABELS
+    );
     const token2 = resolveToken(
       host2,
       options.token,
@@ -1022,7 +1092,13 @@ function connect(options = {}) {
     );
     return new GitHubProvider(host2, token2);
   }
-  const host = hostFrom(options.host, env.GITLAB_HOST, probe.gitlab, [], GITLAB_LABELS);
+  const host = hostFrom(
+    options.host,
+    env.GITLAB_HOST,
+    probe.gitlab,
+    [],
+    GITLAB_LABELS
+  );
   const token = resolveToken(
     host,
     options.token,
@@ -1086,10 +1162,18 @@ function eventLine(event) {
 }
 function toMarkdown(report, lang = "en") {
   const base = STRINGS[lang] ?? STRINGS.en;
-  const t = { ...base, ...PROVIDER_STRINGS[report.provider][lang] ?? {} };
+  const t = {
+    ...base,
+    ...PROVIDER_STRINGS[report.provider][lang] ?? {}
+  };
   const ref = REF_PREFIX[report.provider];
   const out = [];
-  out.push(`# ${report.today.label} \u2014 ${report.user}`, "", `_${t.digest}_`, "");
+  out.push(
+    `# ${report.today.label} \u2014 ${report.user}`,
+    "",
+    `_${t.digest}_`,
+    ""
+  );
   if (report.previousDays.length === 0) {
     out.push(`## ${t.previous}`, "", `_${t.nothing}_`, "");
   }
@@ -1116,7 +1200,10 @@ function toMarkdown(report, lang = "en") {
   }
   const pending = report.reviews.filter((r) => !r.approvedByMe);
   if (pending.length > 0) {
-    out.push(`## ${t.reviews} (${report.reviewPendingCount} ${t.pending})`, "");
+    out.push(
+      `## ${t.reviews} (${report.reviewPendingCount} ${t.pending})`,
+      ""
+    );
     for (const review of pending) {
       out.push(
         `- \`${review.project}\` ${ref}${review.iid} ${review.title} \u2014 ${review.author}`
@@ -1127,7 +1214,9 @@ function toMarkdown(report, lang = "en") {
   if (report.blockers.length > 0) {
     out.push(`## ${t.blockers}`, "");
     for (const blocker of report.blockers) {
-      out.push(`- \`${blocker.project}\` ${ref}${blocker.mr} \u2014 job \`${blocker.job}\``);
+      out.push(
+        `- \`${blocker.project}\` ${ref}${blocker.mr} \u2014 job \`${blocker.job}\``
+      );
       out.push(...blocker.errors.map((line) => `  - \`${line}\``));
     }
     out.push("");
@@ -1195,21 +1284,29 @@ import { dirname as dirname2, join as join2 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function readStandupSkillBody() {
   const moduleDir = dirname2(fileURLToPath2(import.meta.url));
-  const skillPath = join2(findPackageRoot(moduleDir), "skills", "standup", "SKILL.md");
+  const skillPath = join2(
+    findPackageRoot(moduleDir),
+    "skills",
+    "standup",
+    "SKILL.md"
+  );
   if (!existsSync2(skillPath)) {
     throw new Error(`Cannot find the standup skill file at ${skillPath}`);
   }
   const content = readFileSync2(skillPath, "utf8");
-  const withoutFrontmatter = content.replace(/^---\r?\n[\s\S]*?\r?\n---\r?\n/, "");
+  const withoutFrontmatter = content.replace(
+    /^---\r?\n[\s\S]*?\r?\n---\r?\n/,
+    ""
+  );
   return withoutFrontmatter.replace(/^\n+/, "");
 }
 
 export {
-  STALE_DAYS,
   isoDay,
   localAt,
   label,
   previousActiveDays,
+  STALE_DAYS,
   classify,
   markMissingPipelines,
   ConfigError,
@@ -1223,8 +1320,8 @@ export {
   glabToken,
   ghHosts,
   ghToken,
-  WEBHOOK_KINDS,
   toChatText,
+  WEBHOOK_KINDS,
   postWebhook,
   inferWebhookKind,
   buildUrl,

package/dist/cli.js

@@ -8,7 +8,7 @@ import {
   postWebhook,
   readStandupSkillBody,
   toMarkdown
-} from "./chunk-NJO6LFYN.js";
+} from "./chunk-J5LAGA3U.js";
 
 // src/cli/cli.ts
 import { realpathSync } from "fs";
@@ -64,7 +64,11 @@ async function main(argv) {
           markdown: { type: "boolean", default: false }
         }
       });
-      const report = await buildReport(connect(values), /* @__PURE__ */ new Date(), values.lang);
+      const report = await buildReport(
+        connect(values),
+        /* @__PURE__ */ new Date(),
+        values.lang
+      );
       const output = values.markdown ? toMarkdown(report, values.lang) : JSON.stringify(report, null, 1);
       process.stdout.write(`${output}
 `);
@@ -75,7 +79,10 @@ async function main(argv) {
         args: rest,
         options: {
           ...Object.fromEntries(
-            WEBHOOK_KINDS.map((kind2) => [kind2, { type: "string" }])
+            WEBHOOK_KINDS.map((kind2) => [
+              kind2,
+              { type: "string" }
+            ])
           ),
           text: { type: "string", default: "-" }
         }
@@ -83,7 +90,9 @@ async function main(argv) {
       const urls = values;
       const kind = WEBHOOK_KINDS.find((candidate) => urls[candidate]);
       if (!kind) {
-        const flags = WEBHOOK_KINDS.map((candidate) => `--${candidate} URL`).join(" | ");
+        const flags = WEBHOOK_KINDS.map(
+          (candidate) => `--${candidate} URL`
+        ).join(" | ");
         process.stderr.write(`Pass one of: ${flags}.
 `);
         return 1;
@@ -99,7 +108,12 @@ async function main(argv) {
     }
     if (command === "mcp") {
       const moduleDir = dirname(fileURLToPath(import.meta.url));
-      const serverPath = join(findPackageRoot(moduleDir), "dist", "mcp", "server.js");
+      const serverPath = join(
+        findPackageRoot(moduleDir),
+        "dist",
+        "mcp",
+        "server.js"
+      );
       const serverUrl = pathToFileURL(serverPath).href;
       const { main: startMcpServer } = await import(serverUrl);
       await startMcpServer();