feat(mcp-server-consent): add consent triage filters and cookie occurrences sort - #338
Open
dsklyar wants to merge 3 commits into
Open
Conversation
…rences sort Adds agent-facing triage capabilities to the consent inventory tools: - consent_list_data_flows: unmappedOnly (orphaned/unmapped approved flows via service=""), type (DataFlowScope, e.g. CSP), and minOccurrences filters - consent_list_cookies: minOccurrences filter and occurrences sort - CookieOrderField gains Occurrences (mirrors backend cm-types change) - Clarify showZeroActivity so default NEEDS_REVIEW totals reconcile with consent_get_inventory_stats needReviewCount Closes ZEL-8105
@transcend-io/airgap.js-types
@transcend-io/cli
@transcend-io/design-tokens
@transcend-io/internationalization
@transcend-io/privacy-types
@transcend-io/sdk
@transcend-io/type-utils
@transcend-io/utils
@transcend-io/mcp
@transcend-io/mcp-server-admin
@transcend-io/mcp-server-assessment
@transcend-io/mcp-server-base
@transcend-io/mcp-server-consent
@transcend-io/mcp-server-discovery
@transcend-io/mcp-server-docs
@transcend-io/mcp-server-dsr
@transcend-io/mcp-server-inventory
@transcend-io/mcp-server-preferences
@transcend-io/mcp-server-workflows
commit: |
Contributor
Author
|
@dawson-turechek-transcend it looks like the |
6 tasks
Replace the hand-edited CookieOrderField.occurrences entry with an authentic `pnpm graphql:refresh-schema` snapshot now that the backend change (occurrences sort) has deployed to staging. Also picks up other schema drift accumulated since the last refresh; all MCP servers typecheck against the new snapshot.
…-scope-consent_analyze-gaps-for-cookie-and-data-flow-triage # Conflicts: # schema.graphql
dawson-turechek-transcend
approved these changes
Jul 25, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Closes ZEL-8105. Adds agent-facing triage capabilities to the consent inventory MCP tools, paired with backend monorepo changes (
transcend-io/main#46389 cookie occurrences sort).consent_list_data_flows: newunmappedOnly(orphaned/unmapped approved flows via server-sideservice: ""->catalogIntegrationName IS NULL),type(DataFlowScope, e.g. CSP), andminOccurrencesfilters.consent_list_cookies: newminOccurrencesfilter andoccurrencessort (top-traffic cookies).CookieOrderFieldgainsOccurrencesin@transcend-io/privacy-types(mirrors the backend cm-types enum add) +schema.graphqlsnapshot sync.All changes are thin server-side passthroughs; no client-side filtering/sorting.
Deploy sequencing
unmappedOnly(service: "") works against the live backend today.occurrencessort depends on backend PR #46389 being deployed; it will error at runtime until then.Note: the
consent_get_inventory_statsdescription update was intentionally left out of this PR (still under discussion).Test plan
pnpm run --dir packages/mcp/mcp-server-consent test(15 passed)mcp-server-consent,privacy-types)occurrencessort against a live org after #46389 deploysMade with Cursor