Skip to content

[comp] Production Deploy#3478

Merged
tofikwest merged 2 commits into
releasefrom
main
Jul 22, 2026
Merged

[comp] Production Deploy#3478
tofikwest merged 2 commits into
releasefrom
main

Conversation

@github-actions

@github-actions github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

This is an automated pull request to release the candidate branch into production, which will trigger a deployment.
It was created by the [Production PR] action.


Summary by cubic

Releases @trycompai/mcp-server v0.2.4 to production with an updated SDK, a new ISMS bulk measurements API/tool, and stricter request payloads for Trust Portal endpoints.

  • New Features

    • Added ISMS bulk measurements endpoint and MCP tool bulk-create-measurements.
    • Trust Portal tools now send validated request bodies for update-overview, update-faqs, create-custom-link, and reorder-custom-links.
    • Updated docs, manifest, and landing page links to v0.2.4.
  • Migration

    • Policy versions: request body changed to CreatePolicyVersionDto (use optional sourceVersionId and changelog; remove version/scriptKey).
    • Trust Portal:
      • updateFaqs now requires { faqs: [{ question, answer }] }.
      • updateOverview now requires { organizationId, overviewTitle?, overviewContent?, showOverview? }.
      • createCustomLink now requires { organizationId, title, url, description? }.
      • reorderCustomLinks now requires { organizationId, linkIds }.
    • ISMS register rows: create/update bodies include new fields and statuses (planned, in_progress, etc.); update clients accordingly.

Written for commit ff39e19. Summary will update on new commits.

Review in cubic

github-actions Bot and others added 2 commits July 22, 2026 03:33
* ## Mcp-typescript SDK Changes:
* `CompAi.Policies.PoliciesController_createPolicyVersion_v1()`: 
  *  `request.body` **Changed** (Breaking ⚠️)
* `CompAi.Trust Portal.TrustPortalController_updateFaqs_v1()`:  `request` **Added** (Breaking ⚠️)
* `CompAi.Trust Portal.TrustPortalController_updateOverview_v1()`:  `request` **Added** (Breaking ⚠️)
* `CompAi.Trust Portal.TrustPortalController_createCustomLink_v1()`:  `request` **Added** (Breaking ⚠️)
* `CompAi.Trust Portal.TrustPortalController_reorderCustomLinks_v1()`:  `request` **Added** (Breaking ⚠️)
* `CompAi.ISMS.IsmsRegistersController_bulkCreateMeasurements_v1()`: **Added**
* `CompAi.ISMS.IsmsRegistersController_createRow_v1()`: 
  *  `request.body` **Changed**
* `CompAi.ISMS.IsmsRegistersController_updateRow_v1()`: 
  *  `request.body` **Changed**

* empty commit to trigger [run-tests] workflow

---------

Co-authored-by: speakeasybot <bot@speakeasyapi.dev>
Co-authored-by: speakeasy-github[bot] <128539517+speakeasy-github[bot]@users.noreply.github.com>
Co-authored-by: Tofik Hasanov <72318342+tofikwest@users.noreply.github.com>
@vercel

vercel Bot commented Jul 22, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
app (staging) Ready Ready Preview, Comment Jul 22, 2026 4:00am
comp-framework-editor (staging) Ready Ready Preview, Comment Jul 22, 2026 4:00am
portal (staging) Ready Ready Preview, Comment Jul 22, 2026 4:00am

Request Review

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 issues found across 35 files

Confidence score: 4/5

  • In apps/mcp-server/src/models/ismsregisterscontrollercreaterowv1op.ts and apps/mcp-server/src/models/ismsregisterscontrollerupdaterowv1op.ts, cross-field/date-format validation is too permissive, so invalid audit date ranges reach the API and fail later, causing avoidable tool errors and poorer MCP user feedback — add date-order and ISO-date constraints in the OpenAPI source and regenerate these models before merging if you want cleaner validation behavior.
Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="apps/mcp-server/src/models/ismsregisterscontrollercreaterowv1op.ts">

<violation number="1" location="apps/mcp-server/src/models/ismsregisterscontrollercreaterowv1op.ts:266">
P3: The MCP create-row tool accepts an audit whose end date precedes its start date, then surfaces an API rejection instead of an input-validation error. Add cross-field date-order validation in the generated schema source and regenerate.

(Based on your team's feedback about audit date-order validation.) [FEEDBACK_USED]</violation>
</file>

<file name="apps/mcp-server/src/models/ismsregisterscontrollerupdaterowv1op.ts">

<violation number="1" location="apps/mcp-server/src/models/ismsregisterscontrollerupdaterowv1op.ts:267">
P3: Invalid audit dates pass MCP validation and fail only after the API request. Generate ISO-date constraints for `plannedStartDate`/`plannedEndDate` from the OpenAPI source (rather than editing this generated model); retain API validation for effective partial-update ranges.

(Based on your team's feedback about audit date-order validation.) [FEEDBACK_USED]</violation>
</file>

Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic

"First day of the covered period (YYYY-MM-DD), aligned to the metric cadence",
),
plan: z.string().optional(),
plannedEndDate: z.string().nullable().optional(),

@cubic-dev-ai cubic-dev-ai Bot Jul 22, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P3: The MCP create-row tool accepts an audit whose end date precedes its start date, then surfaces an API rejection instead of an input-validation error. Add cross-field date-order validation in the generated schema source and regenerate.

(Based on your team's feedback about audit date-order validation.)

View Feedback

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At apps/mcp-server/src/models/ismsregisterscontrollercreaterowv1op.ts, line 266:

<comment>The MCP create-row tool accepts an audit whose end date precedes its start date, then surfaces an API rejection instead of an input-validation error. Add cross-field date-order validation in the generated schema source and regenerate.

(Based on your team's feedback about audit date-order validation.) </comment>

<file context>
@@ -109,50 +169,126 @@ export type IsmsRegistersControllerCreateRowV1RequestBody = {
+    "First day of the covered period (YYYY-MM-DD), aligned to the metric cadence",
+  ),
   plan: z.string().optional(),
+  plannedEndDate: z.string().nullable().optional(),
+  plannedStartDate: z.string().nullable().optional(),
   position: z.int().optional(),
</file context>
Fix with cubic

),
plan: z.string().optional(),
plannedEndDate: z.string().nullable().optional(),
plannedStartDate: z.string().nullable().optional(),

@cubic-dev-ai cubic-dev-ai Bot Jul 22, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P3: Invalid audit dates pass MCP validation and fail only after the API request. Generate ISO-date constraints for plannedStartDate/plannedEndDate from the OpenAPI source (rather than editing this generated model); retain API validation for effective partial-update ranges.

(Based on your team's feedback about audit date-order validation.)

View Feedback

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At apps/mcp-server/src/models/ismsregisterscontrollerupdaterowv1op.ts, line 267:

<comment>Invalid audit dates pass MCP validation and fail only after the API request. Generate ISO-date constraints for `plannedStartDate`/`plannedEndDate` from the OpenAPI source (rather than editing this generated model); retain API validation for effective partial-update ranges.

(Based on your team's feedback about audit date-order validation.) </comment>

<file context>
@@ -109,50 +169,126 @@ export type IsmsRegistersControllerUpdateRowV1RequestBody = {
+  ),
   plan: z.string().optional(),
+  plannedEndDate: z.string().nullable().optional(),
+  plannedStartDate: z.string().nullable().optional(),
   position: z.int().optional(),
   remediationAction: z.string().nullable().optional(),
</file context>
Fix with cubic

@tofikwest
tofikwest merged commit 0b152b4 into release Jul 22, 2026
13 checks passed
@claudfuen

Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 3.107.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants