wolfpack-mcp 1.0.79 → 1.0.81

package/dist/agentBuilderTools.js

@@ -116,7 +116,8 @@ export const AGENT_BUILDER_TOOLS = [
         description: 'Create an alias of an agent, so the same definition can run work in parallel. ' +
             'An agent runs one session at a time, so N concurrent workers means N aliases. ' +
             'The alias live-tracks the source for container image, prompts, instructions, LLM, tools, skills and tasks — edit those once on the source. ' +
-            'It does NOT inherit project assignment, API key permissions, secrets or schedules: set those on the alias afterwards, or it will start with a read-only key and no repository. ' +
+            'It does NOT inherit project assignment, API key permissions or schedules: set those on the alias afterwards, or it will start with a read-only key and no repository. ' +
+            'Secrets are inherited only when marked shared_with_aliases on the source (same-org only); an alias-local secret of the same name overrides. ' +
             'Aliases are auto-named from the source (e.g. "Coder (2)"). You cannot alias an alias.',
         inputSchema: {
             type: 'object',
@@ -714,16 +715,21 @@ export const AGENT_BUILDER_TOOLS = [
     {
         name: 'set_agent_secret',
         description: 'Create or update a secret for an agent. ' +
-            'Name must be uppercase letters, digits, and underscores (e.g. MY_API_KEY).',
+            'Name must be uppercase letters, digits, and underscores (e.g. MY_API_KEY). ' +
+            'Omit value to change only shared_with_aliases on an existing secret.',
         inputSchema: {
             type: 'object',
             properties: {
                 agent_id: { type: 'string', description: 'Agent profile ID' },
                 name: { type: 'string', description: 'Secret name (e.g. MY_API_KEY)' },
                 value: { type: 'string', description: 'Secret value (encrypted at rest)' },
+                shared_with_aliases: {
+                    type: 'boolean',
+                    description: 'Share with same-org aliases of this agent (default false)',
+                },
                 ...ORG_SLUG_PROP,
             },
-            required: ['agent_id', 'name', 'value'],
+            required: ['agent_id', 'name'],
         },
     },
     // ─── Group 7: Discovery ───────────────────────────────────────────────────
@@ -1315,11 +1321,12 @@ export async function handleAgentBuilderTool(name, args, client) {
                 .object({
                 agent_id: z.string(),
                 name: z.string(),
-                value: z.string(),
+                value: z.string().optional(),
+                shared_with_aliases: z.boolean().optional(),
                 org_slug: orgSlugField,
             })
                 .parse(args);
-            const secret = await client.setAgentSecret(parsed.agent_id, parsed.name, parsed.value, resolveOrg(parsed));
+            const secret = await client.setAgentSecret(parsed.agent_id, parsed.name, parsed.value, parsed.shared_with_aliases, resolveOrg(parsed));
             return { content: [{ type: 'text', text: `Set secret "${secret.name}"` }] };
         }
         // ─── Discovery ────────────────────────────────────────────────────────────

package/dist/agentMemoryTools.test.js

@@ -0,0 +1,19 @@
+import { describe, it, expect } from 'vitest';
+import { AGENT_SELF_TOOLS, AGENT_MEMORY_TOOLS } from './agentSelfTools.js';
+const names = (tools) => tools.map((t) => t.name);
+describe('agent self and memory tool split (#1776)', () => {
+    it('keeps the memory tools out of the self tools, so they can be withheld separately', () => {
+        expect(names(AGENT_SELF_TOOLS)).toEqual(['get_self', 'get_own_sessions']);
+    });
+    it('groups every memory tool under the separately gated set', () => {
+        expect(names(AGENT_MEMORY_TOOLS).sort()).toEqual([
+            'get_memory',
+            'list_memories',
+            'save_memory',
+        ]);
+    });
+    it('never lists the same tool twice', () => {
+        const all = [...names(AGENT_SELF_TOOLS), ...names(AGENT_MEMORY_TOOLS)];
+        expect(new Set(all).size).toBe(all.length);
+    });
+});

package/dist/agentSelfTools.js

@@ -23,6 +23,12 @@ export const AGENT_SELF_TOOLS = [
             },
         },
     },
+];
+/**
+ * Memory tools, gated by the `agent_memory` capability so an agent whose
+ * memory is disabled (#1776) is never offered them.
+ */
+export const AGENT_MEMORY_TOOLS = [
     {
         name: 'list_memories',
         description: 'List all your persistent memory entries. Memory persists across sessions and is scoped to you. ' +

package/dist/client.js

@@ -240,6 +240,22 @@ export class WolfpackClient {
             throw error;
         }
     }
+    // Review check methods
+    async listWorkItemChecks(filter, teamSlug) {
+        const params = new URLSearchParams();
+        if (filter.workItemId)
+            params.set('workItemId', filter.workItemId);
+        if (filter.status)
+            params.set('status', filter.status);
+        const query = params.toString();
+        return this.api.get(this.withTeamSlug(`/work-item-checks${query ? `?${query}` : ''}`, teamSlug));
+    }
+    async claimWorkItemCheck(workItemId, checkId, teamSlug) {
+        return this.api.post(this.withTeamSlug(`/work-items/${workItemId}/checks/${checkId}/claim`, teamSlug), {});
+    }
+    async completeWorkItemCheck(workItemId, checkId, data, teamSlug) {
+        return this.api.post(this.withTeamSlug(`/work-items/${workItemId}/checks/${checkId}/complete`, teamSlug), data);
+    }
     // Radar Item (Initiative/Roadmap) methods
     async listRadarItems(options) {
         const params = new URLSearchParams();
@@ -762,8 +778,12 @@ export class WolfpackClient {
     async listAgentSecrets(agentId, orgSlug) {
         return this.api.get(this.withOrgSlug(`/agents/${agentId}/secrets`, orgSlug));
     }
-    async setAgentSecret(agentId, name, value, orgSlug) {
-        return this.api.post(this.withOrgSlug(`/agents/${agentId}/secrets`, orgSlug), { name, value });
+    async setAgentSecret(agentId, name, value, sharedWithAliases, orgSlug) {
+        return this.api.post(this.withOrgSlug(`/agents/${agentId}/secrets`, orgSlug), {
+            name,
+            value,
+            sharedWithAliases,
+        });
     }
     // ─── Agent Builder: Skills (write) ────────────────────────────────────────
     async createSkill(body, orgSlug) {

package/dist/index.js

@@ -11,7 +11,7 @@ import { allTasksChecked, getWorkItemReminders } from './workItemReminders.js';
 import { validateConfig, config } from './config.js';
 import { AGENT_BUILDER_TOOLS, handleAgentBuilderTool } from './agentBuilderTools.js';
 import { PROCEDURE_TOOLS, handleProcedureTool } from './procedureTools.js';
-import { AGENT_SELF_TOOLS, handleAgentSelfTool } from './agentSelfTools.js';
+import { AGENT_SELF_TOOLS, AGENT_MEMORY_TOOLS, handleAgentSelfTool } from './agentSelfTools.js';
 import { resolveRadarItemId } from './resolveRadarItemId.js';
 import { fetch as proxyFetch } from './proxyFetch.js';
 // Get current package version
@@ -214,6 +214,28 @@ const SubmitWorkItemFormSchema = z.object({
         .optional()
         .describe('Project slug (required for multi-project users, use list_projects to get slugs)'),
 });
+const ListWorkItemChecksSchema = z.object({
+    work_item_id: refIdString()
+        .optional()
+        .describe('The refId of a work item; omit for your reviewer inbox'),
+    status: z.enum(['pending', 'passed', 'failed']).optional().describe('Filter by check status'),
+    project_slug: z
+        .string()
+        .optional()
+        .describe('Project slug (required for multi-project users, use list_projects to get slugs)'),
+});
+const ClaimWorkItemCheckSchema = z.object({
+    work_item_id: refIdString().describe('The refId of the work item'),
+    check_id: z.string().describe('The check ID (from list_work_item_checks)'),
+    project_slug: z
+        .string()
+        .optional()
+        .describe('Project slug (required for multi-project users, use list_projects to get slugs)'),
+});
+const CompleteWorkItemCheckSchema = ClaimWorkItemCheckSchema.extend({
+    status: z.enum(['passed', 'failed']).describe('The verdict'),
+    summary: z.string().optional().describe('Short summary of the review findings'),
+});
 // Radar Item (Initiative/Roadmap) schemas
 const ListRadarItemsSchema = z.object({
     project_slug: z.string().optional().describe('Project slug to filter radar items'),
@@ -641,6 +663,11 @@ const AddDiscussionCommentSchema = z.object({
 const PASSTHROUGH_FIELDS = new Set(['formDefinition', 'formValues', 'formContent']);
 // Strip UUID v4 fields from response objects so agents use refId/slug instead.
 // Preserves Clerk user IDs (user_xxx format) and operational fields (categoryId, radarItemId).
+/** Present a review check with its ID under `checkId` (stripUuids would drop `id`). */
+function formatWorkItemCheck(check) {
+    const { id, workItemId: _workItemId, ...rest } = check;
+    return { checkId: id, ...rest };
+}
 function stripUuids(obj) {
     if (obj === null || obj === undefined)
         return obj;
@@ -758,6 +785,8 @@ class WolfpackMCPServer {
                             'AGENTS: unless granted the mcp:work_items:read_all permission, your results are always ' +
                             'narrowed to items assigned to you or routed to a work pool you belong to, whatever ' +
                             'assigned_to_id you pass; the response says so when this applies. ' +
+                            'AGENTS: when more than one item is claimable, the response also states the order to take ' +
+                            'them in (bug fixes first, then higher priority, then oldest) and which to pull next. ' +
                             'TERMINOLOGY: "board" and "kanban" are synonymous - both refer to the Kanban board of work items. ' +
                             'The board has columns: "new" (to do), "doing" (in progress), "review" (pending review), "ready" (code done, awaiting deployment), "blocked", "completed" (deployed). ' +
                             'The "backlog" or "pending" status represents items not yet on the board. ' +
@@ -836,6 +865,7 @@ class WolfpackMCPServer {
                             'blocked/ready/completed/closed→new→doing, then review when done). ' +
                             'PLANNING: Check if the description contains a plan (markdown checklist). If not, APPEND one using update_work_progress - preserve all original description text and add your plan below a "---" separator. ' +
                             'FORMS: Procedure-created work items may include formDefinition (field definitions with name, label, type, required, options) and formValues (current values). Use submit_work_item_form to fill in form values. ' +
+                            'REVIEW CHECKS: items under review may carry review checks (code-review, security-review, ...); see list_work_item_checks and claim/complete_work_item_check. ' +
                             'IMAGES: Image references in the description (e.g. `![alt](/api/files/...)`) can be viewed using the download_image tool.',
                         inputSchema: {
                             type: 'object',
@@ -986,6 +1016,8 @@ class WolfpackMCPServer {
                             'agent and will return 403: ask a human to route it to your pool or assign it to you. ' +
                             'AGENTS: pulling puts the item straight into "doing" — you are taking it to start on it ' +
                             'now — so there is no separate "move it to doing" step. Move it to "review" when done. ' +
+                            'AGENTS: with more than one item claimable, take them in the order list_work_items gives ' +
+                            'you: bug fixes first, then higher priority, then oldest. ' +
                             'If no assignee is specified, assigns to the API key owner. ' +
                             'In personal projects, items are always assigned to the owner.',
                         inputSchema: {
@@ -1031,6 +1063,79 @@ class WolfpackMCPServer {
                             required: ['work_item_id', 'form_values'],
                         },
                     },
+                    {
+                        name: 'list_work_item_checks',
+                        description: 'List review checks (key controls such as code-review, security-review, e2e-review) on work items. ' +
+                            'With work_item_id: every check on that item. Without it: your REVIEWER INBOX — pending checks on ' +
+                            'work items in the work pools you belong to that are unclaimed or held by you, each with workItemRefId and workItemTitle. ' +
+                            'REVIEW WORKFLOW: claim a check with claim_work_item_check, get_work_item to read the work, review it, ' +
+                            'then complete_work_item_check with "passed" or "failed" and a short summary. ' +
+                            'A failed check sends the item back to its developer with your summary as feedback; do not change the item status yourself.',
+                        inputSchema: {
+                            type: 'object',
+                            properties: {
+                                work_item_id: {
+                                    type: 'string',
+                                    description: 'The refId of a work item; omit for your reviewer inbox',
+                                },
+                                status: {
+                                    type: 'string',
+                                    enum: ['pending', 'passed', 'failed'],
+                                    description: 'Filter by check status',
+                                },
+                                project_slug: {
+                                    type: 'string',
+                                    description: 'Project slug (required for multi-project users, use list_projects to get slugs)',
+                                },
+                            },
+                        },
+                    },
+                    {
+                        name: 'claim_work_item_check',
+                        description: 'Claim a pending, unclaimed review check on a work item so other reviewers know it is being handled. ' +
+                            'Only one reviewer can hold a check; the claim is refused if someone else got there first.',
+                        inputSchema: {
+                            type: 'object',
+                            properties: {
+                                work_item_id: { type: 'string', description: 'The refId of the work item' },
+                                check_id: {
+                                    type: 'string',
+                                    description: 'The check ID (checkId from list_work_item_checks)',
+                                },
+                                project_slug: {
+                                    type: 'string',
+                                    description: 'Project slug (required for multi-project users, use list_projects to get slugs)',
+                                },
+                            },
+                            required: ['work_item_id', 'check_id'],
+                        },
+                    },
+                    {
+                        name: 'complete_work_item_check',
+                        description: 'Record the verdict on a review check: "passed" or "failed", with a short summary of the findings. ' +
+                            'A claimed check can only be completed by its claimant (or an admin). When every check on the item is ' +
+                            'resolved the owning procedure continues — with a failed check it returns the item to the developer with the summaries as feedback.',
+                        inputSchema: {
+                            type: 'object',
+                            properties: {
+                                work_item_id: { type: 'string', description: 'The refId of the work item' },
+                                check_id: {
+                                    type: 'string',
+                                    description: 'The check ID (checkId from list_work_item_checks)',
+                                },
+                                status: { type: 'string', enum: ['passed', 'failed'], description: 'The verdict' },
+                                summary: {
+                                    type: 'string',
+                                    description: 'Short summary of the review findings (what was checked, what failed)',
+                                },
+                                project_slug: {
+                                    type: 'string',
+                                    description: 'Project slug (required for multi-project users, use list_projects to get slugs)',
+                                },
+                            },
+                            required: ['work_item_id', 'check_id', 'status'],
+                        },
+                    },
                     // Radar Item (Initiative/Roadmap) tools
                     {
                         name: 'list_radar_items',
@@ -2040,6 +2145,7 @@ class WolfpackMCPServer {
                     },
                     ...(this.capabilities.includes('procedures') ? PROCEDURE_TOOLS : []),
                     ...(this.capabilities.includes('agent_self') ? AGENT_SELF_TOOLS : []),
+                    ...(this.capabilities.includes('agent_memory') ? AGENT_MEMORY_TOOLS : []),
                     ...(this.capabilities.includes('agent_builder') ? AGENT_BUILDER_TOOLS : []),
                 ],
             };
@@ -2309,6 +2415,43 @@ class WolfpackMCPServer {
                             content: [{ type: 'text', text: 'Work item not found' }],
                         };
                     }
+                    case 'list_work_item_checks': {
+                        const parsed = ListWorkItemChecksSchema.parse(args);
+                        const teamSlug = parsed.project_slug || this.client.getProjectSlug() || undefined;
+                        const checks = await this.client.listWorkItemChecks({ workItemId: parsed.work_item_id, status: parsed.status }, teamSlug);
+                        const text = checks.length === 0
+                            ? parsed.work_item_id
+                                ? 'No review checks on this work item'
+                                : 'No review checks waiting for you'
+                            : JSON.stringify(checks.map(formatWorkItemCheck), null, 2);
+                        return { content: [{ type: 'text', text }] };
+                    }
+                    case 'claim_work_item_check': {
+                        const parsed = ClaimWorkItemCheckSchema.parse(args);
+                        const teamSlug = parsed.project_slug || this.client.getProjectSlug() || undefined;
+                        const check = await this.client.claimWorkItemCheck(parsed.work_item_id, parsed.check_id, teamSlug);
+                        return {
+                            content: [
+                                {
+                                    type: 'text',
+                                    text: `Claimed ${check.kind} check on #${check.workItemRefId} "${check.workItemTitle}"\n\n${JSON.stringify(formatWorkItemCheck(check), null, 2)}`,
+                                },
+                            ],
+                        };
+                    }
+                    case 'complete_work_item_check': {
+                        const parsed = CompleteWorkItemCheckSchema.parse(args);
+                        const teamSlug = parsed.project_slug || this.client.getProjectSlug() || undefined;
+                        const check = await this.client.completeWorkItemCheck(parsed.work_item_id, parsed.check_id, { status: parsed.status, summary: parsed.summary }, teamSlug);
+                        return {
+                            content: [
+                                {
+                                    type: 'text',
+                                    text: `Marked ${check.kind} check on #${check.workItemRefId} as ${check.status}\n\n${JSON.stringify(formatWorkItemCheck(check), null, 2)}`,
+                                },
+                            ],
+                        };
+                    }
                     // Radar Item handlers
                     case 'list_radar_items': {
                         const parsed = ListRadarItemsSchema.parse(args);
@@ -2965,6 +3108,13 @@ class WolfpackMCPServer {
                                 return handleAgentSelfTool(name, args, this.client);
                             }
                         }
+                        // Check memory tools (separately gated — #1776)
+                        if (this.capabilities.includes('agent_memory')) {
+                            const memoryToolNames = AGENT_MEMORY_TOOLS.map((t) => t.name);
+                            if (memoryToolNames.includes(name)) {
+                                return handleAgentSelfTool(name, args, this.client);
+                            }
+                        }
                         // Check agent builder tools
                         if (this.capabilities.includes('agent_builder')) {
                             return handleAgentBuilderTool(name, args, this.client);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wolfpack-mcp",
-  "version": "1.0.79",
+  "version": "1.0.81",
   "description": "MCP server for Wolfpack AI-enhanced software delivery tools",
   "main": "dist/index.js",
   "type": "module",