DeepSource MCP Server

# Changelog ## 1.7.1 ### Patch Changes - [#187](https://github.com/sapientpants/deepsource-mcp-server/pull/187) [`05042a4`](https://github.com/sapientpants/deepsource-mcp-server/commit/05042a4a2b57f62188143ac5089eeba7d735eea0) - Update dependencies to latest versions - Updated production dependencies: - @modelcontextprotocol/sdk from 1.18.0 to 1.18.1 - Updated dev dependencies: - @cyclonedx/cdxgen from 11.7.0 to 11.8.0 - @types/node from 24.5.1 to 24.5.2 - @typescript-eslint/eslint-plugin from 8.44.0 to 8.44.1 - @typescript-eslint/parser from 8.44.0 to 8.44.1 - eslint from 9.35.0 to 9.36.0 - jsonc-eslint-parser from 2.4.0 to 2.4.1 - lint-staged from 16.1.6 to 16.2.0 - vite from 7.1.5 to 7.1.7 - Maintained zod at v3.25.76 as requested (latest v3 version) All tests passing and CI checks green. ## 1.7.0 ### Minor Changes - [#180](https://github.com/sapientpants/deepsource-mcp-server/pull/180) [`4da304e`](https://github.com/sapientpants/deepsource-mcp-server/commit/4da304e1141c797f32d466b250882b85fb126d0a) - Add automatic retry with exponential backoff and circuit breaker Implements intelligent retry logic with the following features: - Exponential backoff with jitter to prevent thundering herd - Circuit breaker pattern per endpoint to prevent cascade failures - Retry budget management to limit resource consumption - Respect for Retry-After headers from the API - Automatic handling of transient failures (network, 502, 503, 504) - Rate-limited requests (429) are automatically retried with appropriate delays Configuration via environment variables: - `RETRY_MAX_ATTEMPTS`: Maximum retry attempts (default: 3) - `RETRY_BASE_DELAY_MS`: Base delay for exponential backoff (default: 1000ms) - `RETRY_MAX_DELAY_MS`: Maximum delay between retries (default: 30000ms) - `RETRY_BUDGET_PER_MINUTE`: Max retries per minute (default: 10) - `CIRCUIT_BREAKER_THRESHOLD`: Failures before opening circuit (default: 5) - `CIRCUIT_BREAKER_TIMEOUT_MS`: Recovery timeout (default: 30000ms) Safety features: - Only retries idempotent operations (queries/GET requests) - Never retries mutations (update operations) - Transparent to MCP clients - no user-visible errors during transient failures ### Patch Changes - [#180](https://github.com/sapientpants/deepsource-mcp-server/pull/180) [`4da304e`](https://github.com/sapientpants/deepsource-mcp-server/commit/4da304e1141c797f32d466b250882b85fb126d0a) - Fix all DeepSource code quality issues - JS-0356: Remove unused import in exponential-backoff test file - JS-0339: Replace non-null assertions with proper null checks and error handling in circuit-breaker and retry-budget modules - JS-0054: Fix lexical declaration scoping in switch case statements by adding block scope braces - JS-0105: Make isAxiosError method static in base-client.ts since it doesn't use 'this' - JS-0047: Add default cases to switch statements in recordSuccess and recordFailure methods - JS-0045: Add explicit return statement in extractRetryAfter arrow function for consistency - Update test expectations to match corrected circuit breaker behavior - Fix unhandled promise rejection in retry-executor test - [#186](https://github.com/sapientpants/deepsource-mcp-server/pull/186) [`3453343`](https://github.com/sapientpants/deepsource-mcp-server/commit/3453343b8378d9e8f33ce1648bbbf94ec7dc5324) - Update pnpm from 10.15.1 to 10.17.0 - Updated packageManager field in package.json - Updated pnpm version across all GitHub Actions workflows - Ensures consistency and uses latest bug fixes ## 1.6.4 ### Patch Changes - [#178](https://github.com/sapientpants/deepsource-mcp-server/pull/178) [`967a64b`](https://github.com/sapientpants/deepsource-mcp-server/commit/967a64b732ceee8d42fa42d601bd4160b4d06009) - fix: remove redundant client-side filtering in quality metrics handler The quality metrics handler was unnecessarily filtering metrics on the client side after the GraphQL API had already applied the same filters on the server side. This change removes the redundant filtering by using the repository's findByProjectWithFilter method when shortcode filters are specified. ## 1.6.3 ### Patch Changes - [#177](https://github.com/sapientpants/deepsource-mcp-server/pull/177) [`a670251`](https://github.com/sapientpants/deepsource-mcp-server/commit/a67025187410d557446b69951345aef8a9e476ca) - feat: add script to update GraphQL schema from DeepSource API - Add reusable script to fetch and update GraphQL schema via introspection - Add 'schema:update' npm script for easy schema updates - Install graphql package for schema introspection utilities - Update schema to latest version from DeepSource API ## 1.6.2 ### Patch Changes - [#174](https://github.com/sapientpants/deepsource-mcp-server/pull/174) [`b94be08`](https://github.com/sapientpants/deepsource-mcp-server/commit/b94be0874031e5fc8ca7ebb202c35d68a73e3c2f) - chore: replace local changelog generator with @sapientpants/changelog-github-custom package - Removed custom changelog implementation in favor of the community package - Updated changeset config to use @sapientpants/changelog-github-custom - Added @sapientpants/changelog-github-custom as a dev dependency - Simplified maintenance by using an established solution ## 1.6.1 ### Patch Changes - [#166](https://github.com/sapientpants/deepsource-mcp-server/pull/166) [`8828190`](https://github.com/sapientpants/deepsource-mcp-server/commit/8828190442628c0860df080f47ebbbe308e7a406) - Fix changelog format configuration and add custom changelog generator for improved release notes formatting - [#169](https://github.com/sapientpants/deepsource-mcp-server/pull/169) [`1603c83`](https://github.com/sapientpants/deepsource-mcp-server/commit/1603c83ec519be914179785bb821d15cf1a9dfb8) - fix: add build step before changeset versioning in ci - Build TypeScript before running changeset version command to ensure custom changelog generator is available - Clean build directory before final release build to ensure SBOM reflects exact release artifacts - Fixes CI pipeline failure when using custom changelog generator - [#168](https://github.com/sapientpants/deepsource-mcp-server/pull/168) [`b7ab8d4`](https://github.com/sapientpants/deepsource-mcp-server/commit/b7ab8d49007377e31bdd70b4d06f047f7483da87) - chore: remove unused dependencies and Jest configuration - Removed unused production dependencies: cors, express, pino, pino-roll, pino-syslog - Removed unused dev dependencies related to Jest (project uses Vitest): @eslint/js, @fast-check/vitest, @jest/globals, @types/cors, @types/express, @types/jest, @types/supertest, fast-check, jest, pino-pretty, supertest, ts-jest, ts-node, ts-node-dev - Removed jest.config.js as the project uses Vitest for testing - [#167](https://github.com/sapientpants/deepsource-mcp-server/pull/167) [`ee5c975`](https://github.com/sapientpants/deepsource-mcp-server/commit/ee5c975d442d45ea63c11d6168289c8942de3fcd) - Update dependencies to latest versions - Update @modelcontextprotocol/sdk from 1.17.4 to 1.18.0 - Update axios from 1.11.0 to 1.12.1 - Update pino from 9.9.4 to 9.9.5 - Update @types/node from 24.3.1 to 24.3.3 (dev dependency) - Constrain zod to >=3.25.0 <4.0.0 to prevent breaking changes from v4 All tests pass and no security vulnerabilities found. ## 1.6.0 ### Minor Changes - [#164](https://github.com/sapientpants/deepsource-mcp-server/pull/164) [`8939e69`](https://github.com/sapientpants/deepsource-mcp-server/commit/8939e6975ba7ef4f7c12fe6d72175b1dbee593bc) - Add unified versioning system with single source of truth - Created central `version.ts` module that reads from package.json - Added CLI support for `--version` and `-v` flags to display version - Added `--help` and `-h` flags with comprehensive help text - Replaced all hardcoded version strings with VERSION constant - Added version to startup logging for better debugging - Created build script to inject version at build time - Added comprehensive version utilities (parsing, validation, comparison) - Exported VERSION constant and helper functions for programmatic access - Added fallback to "0.0.0-dev" when package.json is unavailable This ensures consistent version reporting across: - CLI output - Server metadata - Startup logs - Error messages - MCP protocol responses ## 1.5.1 ### Patch Changes - [#163](https://github.com/sapientpants/deepsource-mcp-server/pull/163) [`e181abc`](https://github.com/sapientpants/deepsource-mcp-server/commit/e181abcef0b30d442df5285a999f80b94b9e3ef4) - Update Node.js to 22.19.0 and pnpm to 10.15.1 - Update Node.js from 22.0.0 to 22.19.0 (latest 22.x LTS) - Update pnpm from 10.15.0 to 10.15.1 (latest version) - Configure mise for version management - Update all workflow files to use consistent pnpm version - Add new Claude commands for analyzing builds and creating chore specs ## 1.5.0 ### Minor Changes - [#162](https://github.com/sapientpants/deepsource-mcp-server/pull/162) [`56d4985`](https://github.com/sapientpants/deepsource-mcp-server/commit/56d4985bb76ef7753b59f34d215337d25ed46c9d) - feat: implement true pagination for all list queries Adds comprehensive cursor-based pagination support across all list endpoints to handle large datasets efficiently and provide deterministic, complete results. ## New Features - **Multi-page fetching**: Automatically fetch multiple pages with `max_pages` parameter - **Page size control**: Use convenient `page_size` parameter (alias for `first`) - **Enhanced metadata**: User-friendly pagination metadata in responses - **Backward compatibility**: Existing queries work without changes ## Supported Endpoints All list endpoints now support full pagination: - `projects` - `project_issues` - `runs` - `recent_run_issues` - `dependency_vulnerabilities` - `quality_metrics` ## Usage ```javascript // Fetch up to 5 pages of 50 items each { projectKey: "my-project", page_size: 50, max_pages: 5 } // Traditional cursor-based pagination still works { projectKey: "my-project", first: 20, after: "cursor123" } ``` ## Response Format Responses now include both standard `pageInfo` and enhanced `pagination` metadata: ```javascript { items: [...], pageInfo: { /* Relay-style pagination */ }, pagination: { has_more_pages: true, next_cursor: "...", page_size: 50, pages_fetched: 3, total_count: 250 } } ``` ## Technical Implementation - **PaginationManager**: New orchestrator class for handling complex pagination scenarios - **AsyncIterator support**: Modern async iteration patterns for paginated results - **Bounded loops**: Replaced while loops with bounded for-loops to prevent infinite iterations - **Error resilience**: Graceful handling of null/undefined data in API responses ## Test Coverage Improvements - Added 200+ new tests for pagination functionality - Achieved 100% line coverage for critical components (`issues-client.ts`) - Comprehensive edge case testing (null data, missing fields, network errors) - Integration tests for multi-page fetching scenarios ## Performance Considerations - Single-page fetches remain unchanged for backward compatibility - Multi-page fetching is opt-in via `max_pages` parameter - Efficient cursor management reduces API calls - Response merging optimized for large datasets ## Migration Notes No breaking changes - existing code will continue to work without modifications. To leverage new pagination features: 1. Add `page_size` parameter for clearer intent (replaces `first`) 2. Add `max_pages` parameter to fetch multiple pages automatically 3. Use the enhanced `pagination` metadata in responses for better UX This implementation ensures complete data retrieval for large DeepSource accounts without silent truncation or memory issues. Closes #152 ## 1.4.2 ### Patch Changes - [#151](https://github.com/sapientpants/deepsource-mcp-server/pull/151) [`c7c4569`](https://github.com/sapientpants/deepsource-mcp-server/commit/c7c45697c4f3c9d07620614a47ff503c7e76015d) - Update dependencies to latest versions - Updated pino from 9.9.0 to 9.9.4 (production dependency) - Updated @changesets/cli from 2.29.6 to 2.29.7 - Updated @cyclonedx/cdxgen from 11.6.0 to 11.7.0 - Updated @eslint/js from 9.34.0 to 9.35.0 - Updated @types/node from 24.3.0 to 24.3.1 - Updated @typescript-eslint/eslint-plugin from 8.42.0 to 8.43.0 - Updated @typescript-eslint/parser from 8.40.0 to 8.43.0 - Updated eslint from 9.34.0 to 9.35.0 - Updated lint-staged from 16.1.5 to 16.1.6 - Kept zod at 3.25.76 as requested (latest is 4.1.5) All tests passing, no breaking changes identified. ## 1.4.1 ### Patch Changes - [#142](https://github.com/sapientpants/deepsource-mcp-server/pull/142) [`04f7440`](https://github.com/sapientpants/deepsource-mcp-server/commit/04f744073131e99d4613ba661ccb93b090001ffc) - Fixed TypeScript strict mode compatibility and integrated agentic-node-ts-starter template - Resolved hundreds of `exactOptionalPropertyTypes` errors across the codebase - Migrated test suite from Jest to Vitest - Enhanced CI/CD workflows with security scanning and validation - Added comprehensive linting tools (actionlint, markdownlint, yamllint) - Improved development tooling and scripts - Fixed all precommit check failures All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). ## [v1.4.0] - 2025-08-23 ### Breaking Changes - Removed misleading `start`, `dev`, and related test:server commands that don't work with MCP servers - Renamed `format` and `format:check` commands for consistency with lint commands: - `format` now checks formatting (was `format:check`) - `format:fix` now fixes formatting (was `format`) ### Changed - Updated dependencies to latest versions: - zod: 3.25.76 → 4.1.0 (major version upgrade) - @modelcontextprotocol/sdk: 1.17.3 → 1.17.4 - @eslint/js: 9.33.0 → 9.34.0 - eslint: 9.33.0 → 9.34.0 - Removed redundant `validate` script (use `ci` instead) ### Fixed - Fixed Zod v4 breaking change by updating error property access from `.errors` to `.issues` - Fixed MCP server documentation to clarify stdio communication requirements ### Documentation - Significantly improved CLAUDE.md with better architecture overview and focused guidelines - Reorganized and enhanced development commands documentation - Added comprehensive error handling patterns with complete examples - Added missing `clean` command to README - Clarified that MCP servers cannot be run standalone ## [v1.3.2] - 2025-08-23 - Added commitlint support for conventional commits - Upgraded to Node 22 LTS (minimum version requirement) - Fixed TypeScript type safety issues by replacing `any` types with proper types - Fixed linting errors in index-registry test - Fixed index-registry test failures causing CI issues - Fixed Jest ES module mocking issues for local test execution - Updated dependencies to latest versions: - @commitlint/cli: ^19.8.1 - @commitlint/config-conventional: ^19.8.1 - @modelcontextprotocol/sdk: 1.17.2 → 1.17.3 - @typescript-eslint/eslint-plugin: 8.39.0 → 8.40.0 - @typescript-eslint/parser: 8.39.0 → 8.40.0 - husky: 9.1.6 → 9.1.7 - ts-jest: 29.4.0 → 29.4.1 - Improved build process reliability ## [v1.3.1] - 2025-08-11 - Updated dependencies to latest versions - @modelcontextprotocol/sdk: 1.17.1 → 1.17.2 - @eslint/js: 9.32.0 → 9.33.0 - @types/node: 24.1.0 → 24.2.1 - @typescript-eslint/eslint-plugin: 8.38.0 → 8.39.0 - @typescript-eslint/parser: 8.38.0 → 8.39.0 - eslint: 9.32.0 → 9.33.0 - eslint-plugin-prettier: 5.5.3 → 5.5.4 - lint-staged: 16.1.4 → 16.1.5 - nock: 14.0.7 → 14.0.9 - typescript: 5.8.3 → 5.9.2 - Fixed ESLint warnings by removing unused eslint-disable directives ## [v1.3.0] - 2025-08-05 - Major architectural improvements with Domain-Driven Design (DDD) implementation - Improved test coverage from 88.84% to 90.27% - Added comprehensive error handling system with MCP-specific error types - Implemented new tool registry system with dependency injection - Added enhanced tool registry with automatic tool discovery and metadata support - Created domain aggregates for Project, AnalysisRun, QualityMetrics, and ComplianceReport - Added value objects for type-safe domain modeling (ThresholdValue, MetricValue, CoveragePercentage, IssueCount) - Implemented repository pattern with mappers for clean separation of concerns - Added GraphQL query builder for improved API interaction - Created comprehensive test suites for all new components - Fixed all DeepSource analyzer issues (JS-0323, JS-0331, JS-R1004, JS-0105, JS-W1044) - Improved TypeScript type safety by eliminating all `any` types - Added handler factory pattern for consistent handler implementation - Created adapters for backward compatibility with existing code - Added extensive documentation for new architectural patterns - Implemented proper error handling with categorized MCP errors - Added support for tool categorization and tagging - Created example tool demonstrating enhanced plugin format - Improved code organization following SOLID and DRY principles ## [v1.2.2] - 2025-07-28 - Updated all dependencies to their latest versions - @modelcontextprotocol/sdk: 1.12.3 → 1.17.0 - axios: 1.10.0 → 1.11.0 - @eslint/js: 9.29.0 → 9.32.0 - @types/jest: 29.5.14 → 30.0.0 - @types/node: 24.0.1 → 24.1.0 - @typescript-eslint/eslint-plugin: 8.34.0 → 8.38.0 - @typescript-eslint/parser: 8.34.0 → 8.38.0 - eslint: 9.29.0 → 9.32.0 - eslint-config-prettier: 10.1.5 → 10.1.8 - eslint-plugin-prettier: 5.4.1 → 5.5.3 - jest: 30.0.0 → 30.0.5 - nock: 14.0.5 → 14.0.7 - prettier: 3.5.3 → 3.6.2 - supertest: 7.1.1 → 7.1.4 - Updated DeepSource test coverage action from v1.1.2 to v1.1.3 to fix CI issues - Added pnpm override to force form-data >= 4.0.4 for security - Security fix: Bumped brace-expansion to address vulnerability ## [v1.2.1] - 2025-06-16 - Updated all dependencies to their latest versions - @modelcontextprotocol/sdk: 1.11.4 → 1.12.3 - axios: 1.9.0 → 1.10.0 - zod: 3.25.3 → 3.25.64 - @eslint/js: 9.27.0 → 9.29.0 - @types/cors: 2.8.18 → 2.8.19 - @types/express: 5.0.2 → 5.0.3 - @types/node: 22.15.19 → 24.0.1 - @typescript-eslint/eslint-plugin: 8.32.1 → 8.34.0 - @typescript-eslint/parser: 8.32.1 → 8.34.0 - eslint: 9.27.0 → 9.29.0 - eslint-plugin-prettier: 5.4.0 → 5.4.1 - jest: 29.7.0 → 30.0.0 - lint-staged: 16.0.0 → 16.1.2 - nock: 14.0.4 → 14.0.5 - ts-jest: 29.3.4 → 29.4.0 ## [v1.2.0] - 2025-05-21 - Refactored codebase for improved maintainability - Removed examples directory containing non-production code - Improved documentation ## [v1.1.0] - 2025-05-20 - Added dependency vulnerability reporting - Added quality metrics history support - Added metric threshold management - Enhanced filtering capabilities for issues and runs - Fixed pagination issues - Improved error handling ## [v1.0.2] - 2025-05-17 - Fixed npx launching issues - Fixed package description ## [v1.0.1] - 2025-05-17 - Fixed documentation issues - Added comprehensive test coverage ## [v1.0.0] - 2025-05-16 - Initial stable release - Complete MCP server implementation for DeepSource - Support for projects, issues, runs, and compliance reports - Full GraphQL API integration - Comprehensive error handling - Relay-style pagination support