rootly-mcp-server 2.2.22__tar.gz → 2.2.24__tar.gz

{rootly_mcp_server-2.2.22 → rootly_mcp_server-2.2.24}/CHANGELOG.md

@@ -5,6 +5,32 @@ All notable changes to the Rootly MCP Server will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.2.24] - Released 2026-04-22
+
+### Fixed
+
+- **Incident Form Field Selection Responses**: Normalized text and textarea form field selection responses so MCP clients receive the primary `value` plus `selected_*_ids`, without the redundant `selected_*` value objects repeated across unrelated resource types
+
+### Testing
+
+- **Response Normalization Coverage**: Added focused transport tests for single-item and list incident form field selection payloads, including a guard to leave select-style fields unchanged
+
+## [2.2.23] - Released 2026-04-22
+
+### Features
+
+- **Self-Hosted Tool Allowlists**: Added `ROOTLY_MCP_ENABLED_TOOLS` and `--enabled-tools` so self-hosted deployments can expose only an exact allowlist of MCP tool names
+- **Tool Discovery Command**: Added `--list-tools` so self-hosted users can print the effective tool names for their current configuration before narrowing the MCP surface
+- **Code Mode Alignment**: Applied the same allowlist behavior to the self-hosted Code Mode surface so discovery and enforcement stay consistent
+
+### Testing
+
+- **Live MCP Integration Coverage**: Added subprocess integration tests that boot the server, connect over streamable HTTP, call `tools/list`, and verify the live tool payload matches the configured allowlist
+
+### Documentation
+
+- **Self-Hosted Setup Guidance**: Documented the new allowlist and discovery workflow in the README, including smoke-test examples for read-only and write-enabled self-hosted setups
+
 ## [2.2.20] - Released 2026-04-21
 
 ### Security

{rootly_mcp_server-2.2.22 → rootly_mcp_server-2.2.24}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: rootly-mcp-server
-Version: 2.2.22
+Version: 2.2.24
 Summary: Secure Model Context Protocol server for Rootly APIs with AI SRE capabilities, comprehensive error handling, and input validation
 Project-URL: Homepage, https://github.com/Rootly-AI-Labs/Rootly-MCP-server
 Project-URL: Issues, https://github.com/Rootly-AI-Labs/Rootly-MCP-server/issues

{rootly_mcp_server-2.2.22 → rootly_mcp_server-2.2.24}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "rootly-mcp-server"
-version = "2.2.22"
+version = "2.2.24"
 description = "Secure Model Context Protocol server for Rootly APIs with AI SRE capabilities, comprehensive error handling, and input validation"
 readme = "README.md"
 requires-python = ">=3.12"

{rootly_mcp_server-2.2.22 → rootly_mcp_server-2.2.24}/src/rootly_mcp_server/transport.py

@@ -717,6 +717,9 @@ class AuthenticatedHTTPXClient:
         # there is no other interception point for auto-generated tools.
         response = self._maybe_strip_alert_response(method, url, response)
         response = self._maybe_strip_collection_response(method, url, response)
+        response = self._maybe_normalize_incident_form_field_selection_response(
+            method, url, response
+        )
 
         return response
 
@@ -739,6 +742,13 @@ class AuthenticatedHTTPXClient:
         except Exception:
             return str(url).split("?", 1)[0]
 
+    @staticmethod
+    def _is_incident_form_field_selection_endpoint(path: str) -> bool:
+        """Return whether a path targets incident form field selection resources."""
+        return path.startswith("/v1/incident_form_field_selections/") or (
+            path.startswith("/v1/incidents/") and path.endswith("/form_field_selections")
+        )
+
     @staticmethod
     def _maybe_strip_alert_response(
         method: str, url: str, response: httpx.Response
@@ -783,6 +793,85 @@ class AuthenticatedHTTPXClient:
             logger.debug(f"Could not strip collection response for {url}", exc_info=True)
         return response
 
+    @staticmethod
+    def _normalize_incident_form_field_selection_item(item: Any) -> Any:
+        """Prune redundant selected_* objects for text-like form field selections."""
+        if not isinstance(item, dict):
+            return item
+
+        attributes = item.get("attributes")
+        if not isinstance(attributes, dict):
+            return item
+
+        form_field = attributes.get("form_field")
+        if not isinstance(form_field, dict):
+            return item
+
+        if form_field.get("input_kind") not in {"text", "textarea"}:
+            return item
+
+        normalized_attributes = dict(attributes)
+        for key in (
+            "selected_groups",
+            "selected_options",
+            "selected_services",
+            "selected_functionalities",
+            "selected_catalog_entities",
+            "selected_users",
+            "selected_environments",
+            "selected_causes",
+            "selected_incident_types",
+        ):
+            normalized_attributes.pop(key, None)
+
+        normalized_item = dict(item)
+        normalized_item["attributes"] = normalized_attributes
+        return normalized_item
+
+    @classmethod
+    def _normalize_incident_form_field_selection_payload(cls, payload: Any) -> Any:
+        """Normalize form field selection payloads that may contain one item or many."""
+        if not isinstance(payload, dict):
+            return payload
+
+        data = payload.get("data")
+        if isinstance(data, dict):
+            normalized_payload = dict(payload)
+            normalized_payload["data"] = cls._normalize_incident_form_field_selection_item(data)
+            return normalized_payload
+
+        if isinstance(data, list):
+            normalized_payload = dict(payload)
+            normalized_payload["data"] = [
+                cls._normalize_incident_form_field_selection_item(item) for item in data
+            ]
+            return normalized_payload
+
+        return payload
+
+    @classmethod
+    def _maybe_normalize_incident_form_field_selection_response(
+        cls, method: str, url: str, response: httpx.Response
+    ) -> httpx.Response:
+        """Normalize noisy incident form field selection responses."""
+        if method.upper() not in {"GET", "POST", "PUT", "PATCH"} or not response.is_success:
+            return response
+
+        path = cls._path_for_url(url)
+        if not cls._is_incident_form_field_selection_endpoint(path):
+            return response
+
+        try:
+            payload = response.json()
+            normalized = cls._normalize_incident_form_field_selection_payload(payload)
+            response._content = json.dumps(normalized).encode()  # noqa: SLF001
+        except Exception:
+            logger.debug(
+                f"Could not normalize incident form field selection response for {url}",
+                exc_info=True,
+            )
+        return response
+
     async def get(self, url: str, **kwargs):
         """Proxy to request with GET method."""
         return await self.request("GET", url, **kwargs)
@@ -858,6 +947,9 @@ class AuthenticatedHTTPXClient:
 
         response = self._maybe_strip_alert_response(request.method, str(request.url), response)
         response = self._maybe_strip_collection_response(request.method, str(request.url), response)
+        response = self._maybe_normalize_incident_form_field_selection_response(
+            request.method, str(request.url), response
+        )
         return response
 
     async def __aenter__(self):

{rootly_mcp_server-2.2.22 → rootly_mcp_server-2.2.24}/tests/unit/test_server.py

@@ -289,32 +289,38 @@ class TestServerCreation:
 class TestBundledIncidentFormFieldSelectionTools:
     """Verify the bundled swagger exposes the intended incident custom field tools."""
 
-    async def test_default_server_hides_generated_write_tools(self, mock_environment_token):
+    async def test_default_server_shows_generated_write_tools(self, mock_environment_token):
         server = create_rootly_mcp_server(hosted=False)
 
         tools = await server.list_tools()
         tool_names = {tool.name for tool in tools}
 
+        # Read tools should be present
         assert "listIncidentActionItems" in tool_names
         assert "listIncidentFormFieldSelections" in tool_names
         assert "getIncidentFormFieldSelection" in tool_names
 
-        assert "createIncidentActionItem" not in tool_names
-        assert "createIncidentFormFieldSelection" not in tool_names
-        assert "updateIncidentFormFieldSelection" not in tool_names
+        # Write tools should also be present by default
+        assert "createIncidentActionItem" in tool_names
+        assert "createIncidentFormFieldSelection" in tool_names
+        assert "updateIncidentFormFieldSelection" in tool_names
+        # Delete operations are still restricted
         assert "deleteIncidentFormFieldSelection" not in tool_names
 
-    async def test_default_server_hides_workflow_write_tools(self, mock_environment_token):
+    async def test_default_server_shows_workflow_write_tools(self, mock_environment_token):
         server = create_rootly_mcp_server(hosted=False)
 
         tools = await server.list_tools()
         tool_names = {tool.name for tool in tools}
 
+        # Read tools should be present
         assert "listWorkflowTasks" in tool_names
         assert "getWorkflowTask" in tool_names
 
-        assert "createWorkflowTask" not in tool_names
-        assert "updateWorkflowTask" not in tool_names
+        # Write tools should also be present by default
+        assert "createWorkflowTask" in tool_names
+        assert "updateWorkflowTask" in tool_names
+        # Delete operations are still restricted
         assert "deleteWorkflowTask" not in tool_names
 
     async def test_enable_write_tools_exposes_curated_generated_write_tools(

{rootly_mcp_server-2.2.22 → rootly_mcp_server-2.2.24}/tests/unit/test_transport_module.py

@@ -267,6 +267,175 @@ class TestTransportModule:
             == ""
         )
 
+    def test_normalize_incident_form_field_selection_payload_textarea(self):
+        payload = {
+            "data": {
+                "id": "selection-1",
+                "type": "incident_form_field_selections",
+                "attributes": {
+                    "value": "Decagon Chat API degraded",
+                    "selected_group_ids": [],
+                    "selected_option_ids": [],
+                    "selected_service_ids": [],
+                    "selected_functionality_ids": [],
+                    "selected_catalog_entity_ids": [],
+                    "selected_user_ids": [],
+                    "selected_groups": {"id": None, "value": "Decagon Chat API degraded"},
+                    "selected_options": {"id": None, "value": "Decagon Chat API degraded"},
+                    "selected_services": {"id": None, "value": "Decagon Chat API degraded"},
+                    "selected_functionalities": {
+                        "id": None,
+                        "value": "Decagon Chat API degraded",
+                    },
+                    "selected_catalog_entities": {
+                        "id": None,
+                        "value": "Decagon Chat API degraded",
+                    },
+                    "selected_users": {"id": None, "value": "Decagon Chat API degraded"},
+                    "selected_environments": {
+                        "id": None,
+                        "value": "Decagon Chat API degraded",
+                    },
+                    "selected_causes": {"id": None, "value": "Decagon Chat API degraded"},
+                    "selected_incident_types": {
+                        "id": None,
+                        "value": "Decagon Chat API degraded",
+                    },
+                    "form_field": {"input_kind": "textarea"},
+                },
+            }
+        }
+
+        normalized = (
+            transport.AuthenticatedHTTPXClient._normalize_incident_form_field_selection_payload(
+                payload
+            )
+        )
+        attributes = normalized["data"]["attributes"]
+
+        assert attributes["value"] == "Decagon Chat API degraded"
+        assert attributes["selected_group_ids"] == []
+        assert "selected_groups" not in attributes
+        assert "selected_options" not in attributes
+        assert "selected_services" not in attributes
+        assert "selected_functionalities" not in attributes
+        assert "selected_catalog_entities" not in attributes
+        assert "selected_users" not in attributes
+        assert "selected_environments" not in attributes
+        assert "selected_causes" not in attributes
+        assert "selected_incident_types" not in attributes
+
+    def test_normalize_incident_form_field_selection_payload_select_unchanged(self):
+        payload = {
+            "data": {
+                "id": "selection-2",
+                "type": "incident_form_field_selections",
+                "attributes": {
+                    "selected_option_ids": ["opt-1"],
+                    "selected_options": {"id": "opt-1", "value": "Database"},
+                    "form_field": {"input_kind": "select"},
+                },
+            }
+        }
+
+        normalized = (
+            transport.AuthenticatedHTTPXClient._normalize_incident_form_field_selection_payload(
+                payload
+            )
+        )
+
+        assert normalized == payload
+
+    def test_normalize_incident_form_field_selection_list_payload(self):
+        payload = {
+            "data": [
+                {
+                    "id": "selection-3",
+                    "type": "incident_form_field_selections",
+                    "attributes": {
+                        "value": "External user impact only",
+                        "selected_groups": {"id": None, "value": "External user impact only"},
+                        "selected_group_ids": [],
+                        "form_field": {"input_kind": "textarea"},
+                    },
+                },
+                {
+                    "id": "selection-4",
+                    "type": "incident_form_field_selections",
+                    "attributes": {
+                        "selected_options": {"id": "opt-1", "value": "Database"},
+                        "selected_option_ids": ["opt-1"],
+                        "form_field": {"input_kind": "select"},
+                    },
+                },
+            ]
+        }
+
+        normalized = (
+            transport.AuthenticatedHTTPXClient._normalize_incident_form_field_selection_payload(
+                payload
+            )
+        )
+
+        assert "selected_groups" not in normalized["data"][0]["attributes"]
+        assert normalized["data"][1]["attributes"]["selected_options"] == {
+            "id": "opt-1",
+            "value": "Database",
+        }
+
+    def test_maybe_normalize_incident_form_field_selection_response(self):
+        response = httpx.Response(
+            200,
+            json={
+                "data": {
+                    "id": "selection-5",
+                    "type": "incident_form_field_selections",
+                    "attributes": {
+                        "value": "External user impact only",
+                        "selected_groups": {"id": None, "value": "External user impact only"},
+                        "selected_group_ids": [],
+                        "form_field": {"input_kind": "textarea"},
+                    },
+                }
+            },
+        )
+
+        result = transport.AuthenticatedHTTPXClient._maybe_normalize_incident_form_field_selection_response(
+            "PUT", "/v1/incident_form_field_selections/selection-5", response
+        )
+        parsed = result.json()
+
+        assert parsed["data"]["attributes"]["value"] == "External user impact only"
+        assert parsed["data"]["attributes"]["selected_group_ids"] == []
+        assert "selected_groups" not in parsed["data"]["attributes"]
+
+    def test_maybe_normalize_incident_form_field_selection_list_response(self):
+        response = httpx.Response(
+            200,
+            json={
+                "data": [
+                    {
+                        "id": "selection-6",
+                        "type": "incident_form_field_selections",
+                        "attributes": {
+                            "value": "External user impact only",
+                            "selected_groups": {"id": None, "value": "External user impact only"},
+                            "selected_group_ids": [],
+                            "form_field": {"input_kind": "textarea"},
+                        },
+                    }
+                ]
+            },
+        )
+
+        result = transport.AuthenticatedHTTPXClient._maybe_normalize_incident_form_field_selection_response(
+            "GET", "/v1/incidents/inc-123/form_field_selections", response
+        )
+        parsed = result.json()
+
+        assert parsed["data"][0]["attributes"]["selected_group_ids"] == []
+        assert "selected_groups" not in parsed["data"][0]["attributes"]
+
     def test_authenticated_client_user_agent_contains_mode(self):
         with patch.object(
             transport.AuthenticatedHTTPXClient, "_get_api_token", return_value="token"

{rootly_mcp_server-2.2.22 → rootly_mcp_server-2.2.24}/uv.lock

@@ -1715,7 +1715,7 @@ wheels = [
 
 [[package]]
 name = "rootly-mcp-server"
-version = "2.2.20"
+version = "2.2.24"
 source = { editable = "." }
 dependencies = [
     { name = "authlib" },