Skip to content

[comp] Production Deploy#3279

Merged
tofikwest merged 4 commits into
releasefrom
main
Jun 24, 2026
Merged

[comp] Production Deploy#3279
tofikwest merged 4 commits into
releasefrom
main

Conversation

@github-actions

@github-actions github-actions Bot commented Jun 24, 2026

Copy link
Copy Markdown
Contributor

This is an automated pull request to release the candidate branch into production, which will trigger a deployment.
It was created by the [Production PR] action.


Summary by cubic

Production deploy of @trycompai/mcp-server 0.2.1. Adds new ISMS tooling and Trust Portal badge endpoints, updates the generated SDK, and improves retry handling.

  • New Features

    • ISMS: ensure setup, get/generate/export documents, submit/approve/decline, drift detection, and add/remove control mappings.
    • ISMS Registers: create/update/delete rows and save singleton narratives.
    • ISMS Profile: get/save (partial) answers and generate all documents.
    • Trust Portal: upload/remove custom framework badge (PNG/JPEG/WebP, 256KB) with signed URL response.
    • MCP: registers new tools and updates manifest/tool names.
  • Dependencies

    • SDK regen with Speakeasy CLI 1.785.0 (gen 2.912.1); mcp-typescript 0.2.1.
    • Bump hono to 4.12.27; add overrides hono >=4.12.25 and fast-uri >=3.1.2.
    • Respect retry-after-ms header for backoff; update docs and landing links to v0.2.1.

Written for commit 504685f. Summary will update on new commits.

Review in cubic

github-actions Bot and others added 4 commits June 24, 2026 20:01
* `CompAi.Trust Portal.TrustPortalController_uploadCustomFrameworkBadge_v1()`: **Added**
* `CompAi.Trust Portal.TrustPortalController_removeCustomFrameworkBadge_v1()`: **Added**
* `CompAi.ISMS.IsmsController_ensureSetup_v1()`: **Added**
* `CompAi.ISMS.IsmsController_getDocument_v1()`: **Added**
* `CompAi.ISMS.IsmsController_addControls_v1()`: **Added**
* `CompAi.ISMS.IsmsController_removeControl_v1()`: **Added**
* `CompAi.ISMS.IsmsController_generate_v1()`: **Added**
* `CompAi.ISMS.IsmsController_submitForApproval_v1()`: **Added**
* `CompAi.ISMS.IsmsController_approve_v1()`: **Added**
* `CompAi.ISMS.IsmsController_decline_v1()`: **Added**
* `CompAi.ISMS.IsmsController_drift_v1()`: **Added**
* `CompAi.ISMS.IsmsController_exportDocument_v1()`: **Added**
* `CompAi.ISMS.IsmsRegistersController_createRow_v1()`: **Added**
* `CompAi.ISMS.IsmsRegistersController_updateRow_v1()`: **Added**
* `CompAi.ISMS.IsmsRegistersController_deleteRow_v1()`: **Added**
* `CompAi.ISMS.IsmsRegistersController_saveNarrative_v1()`: **Added**
* `CompAi.ISMS.IsmsProfileController_getProfile_v1()`: **Added**
* `CompAi.ISMS.IsmsProfileController_saveProfile_v1()`: **Added**
* `CompAi.ISMS.IsmsProfileController_generateAll_v1()`: **Added**
@vercel

vercel Bot commented Jun 24, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
app (staging) Ready Ready Preview, Comment Jun 24, 2026 8:20pm
comp-framework-editor (staging) Ready Ready Preview, Comment Jun 24, 2026 8:20pm
portal (staging) Ready Ready Preview, Comment Jun 24, 2026 8:20pm

Request Review

@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 3 committers have signed the CLA.

✅ tofikwest
❌ speakeasybot
❌ speakeasy-github[bot]
You have signed the CLA already but the status is still pending? Let us recheck it.

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 issues found across 79 files

Confidence score: 4/5

  • In apps/mcp-server/src/mcp-server/tools/ismsISMSProfileControllerGetProfileV1.ts, the GET profile tool is tagged as non-read-only/non-idempotent, so MCP clients may skip safe read optimizations (like caching or aggressive retries), leading to unnecessary load or slower UX—set readOnlyHint: true and idempotentHint: true before merging.
  • In apps/mcp-server/src/mcp-server/tools/ismsISMSControllerAddControlsV1.ts, idempotentHint: false appears to conflict with idempotent backend behavior, which can make clients overly conservative about retries and resilience after transient failures—align the hint with actual semantics before merging.
Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="apps/mcp-server/src/mcp-server/tools/ismsISMSControllerAddControlsV1.ts">

<violation number="1" location="apps/mcp-server/src/mcp-server/tools/ismsISMSControllerAddControlsV1.ts:22">
P2: `idempotentHint: false` misrepresents the idempotent backend semantics of `add-controls`</violation>
</file>

<file name="apps/mcp-server/src/mcp-server/tools/ismsISMSProfileControllerGetProfileV1.ts">

<violation number="1" location="apps/mcp-server/src/mcp-server/tools/ismsISMSProfileControllerGetProfileV1.ts:22">
P2: GET profile tool is misannotated as non-idempotent and non-read-only. A GET endpoint that retrieves profile data should be annotated with `readOnlyHint: true` and `idempotentHint: true` so MCP clients can apply read-only optimizations and avoid unnecessary confirmation prompts.</violation>
</file>

Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic

annotations: {
"title": "",
"destructiveHint": false,
"idempotentHint": false,

@cubic-dev-ai cubic-dev-ai Bot Jun 24, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2: idempotentHint: false misrepresents the idempotent backend semantics of add-controls

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At apps/mcp-server/src/mcp-server/tools/ismsISMSControllerAddControlsV1.ts, line 22:

<comment>`idempotentHint: false` misrepresents the idempotent backend semantics of `add-controls`</comment>

<file context>
@@ -0,0 +1,43 @@
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
</file context>
Fix with cubic

Get the ISMS wizard profile, defaults and members in Comp AI.`,
annotations: {
"title": "",
"destructiveHint": false,

@cubic-dev-ai cubic-dev-ai Bot Jun 24, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2: GET profile tool is misannotated as non-idempotent and non-read-only. A GET endpoint that retrieves profile data should be annotated with readOnlyHint: true and idempotentHint: true so MCP clients can apply read-only optimizations and avoid unnecessary confirmation prompts.

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At apps/mcp-server/src/mcp-server/tools/ismsISMSProfileControllerGetProfileV1.ts, line 22:

<comment>GET profile tool is misannotated as non-idempotent and non-read-only. A GET endpoint that retrieves profile data should be annotated with `readOnlyHint: true` and `idempotentHint: true` so MCP clients can apply read-only optimizations and avoid unnecessary confirmation prompts.</comment>

<file context>
@@ -0,0 +1,44 @@
+Get the ISMS wizard profile, defaults and members in Comp AI.`,
+  annotations: {
+    "title": "",
+    "destructiveHint": false,
+    "idempotentHint": false,
+    "openWorldHint": false,
</file context>
Fix with cubic

@tofikwest tofikwest merged commit e23110b into release Jun 24, 2026
15 of 16 checks passed
@claudfuen

Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 3.92.2 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants