From 8a51617661c37f946f784526eef31eee8a9deb27 Mon Sep 17 00:00:00 2001 From: Jeremy Daer Date: Wed, 16 Sep 2026 15:00:58 -0700 Subject: [PATCH 1/2] Pin the SDK to the v0.19.0 release The event-feed operations shipped in basecamp-sdk v0.19.0, so the main pseudo-version taken while they were unreleased becomes the release tag. v0.19.0's only commit over the pinned revision is the version bump, so the MCP model snapshot is unchanged apart from the ref it records. --- API-COVERAGE.md | 8 +++----- go.mod | 2 +- go.sum | 4 ++-- internal/mcpserver/model/PROVENANCE.json | 4 ++-- internal/version/sdk-provenance.json | 6 +++--- 5 files changed, 11 insertions(+), 13 deletions(-) diff --git a/API-COVERAGE.md b/API-COVERAGE.md index 976a74500..c42c64a97 100644 --- a/API-COVERAGE.md +++ b/API-COVERAGE.md @@ -49,11 +49,9 @@ Out-of-scope sections are excluded from parity totals and scripts: chatbots (dif > Note: the per-row `Endpoints` column in the Coverage by Section table sums higher than the Summary totals above. The discrepancy predates the BC5 baseline; the row count (48 sections) is authoritative for the `Since` column. Reconciling endpoint counts is pre-existing maintenance, tracked separately. **SDK version:** the pin in `go.mod`, with -`internal/version/sdk-provenance.json` authoritative for the exact commit. The -event-feed operations are unreleased, so that pin is a basecamp-sdk `main` -pseudo-version rather than a release tag; it builds on v0.18.0, the latest -release. The -command surface below largely dates to the v0.12.0 bump, which added 20 exported +`internal/version/sdk-provenance.json` authoritative for the exact commit. That +pin is basecamp-sdk v0.19.0, the release that ships the event-feed operations. +The command surface below largely dates to the v0.12.0 bump, which added 20 exported Go methods over 13 new backend operations; the extra seven wrapped endpoints that already existed but were reachable only through the raw generated client, which the andon-cord rule forbids the CLI from calling. v0.13.0–v0.15.0 diff --git a/go.mod b/go.mod index d84cae6bd..f7df619d9 100644 --- a/go.mod +++ b/go.mod @@ -6,7 +6,7 @@ require ( charm.land/bubbles/v2 v2.2.1 charm.land/bubbletea/v2 v2.0.9 charm.land/lipgloss/v2 v2.0.6 - github.com/basecamp/basecamp-sdk/go v0.18.1-0.20260916210227-4523eac74cfa + github.com/basecamp/basecamp-sdk/go v0.19.0 github.com/basecamp/cli v0.2.2-0.20260828230226-767413fc712d github.com/basecamp/mcp v0.0.0-20260828100356-2d6f44b51e9d github.com/basecamp/surfguard/go v0.1.0 diff --git a/go.sum b/go.sum index bc9a9b162..d13c050c3 100644 --- a/go.sum +++ b/go.sum @@ -87,8 +87,8 @@ github.com/aymanbagabas/go-udiff v0.4.1 h1:OEIrQ8maEeDBXQDoGCbbTTXYJMYRCRO1fnodZ github.com/aymanbagabas/go-udiff v0.4.1/go.mod h1:0L9PGwj20lrtmEMeyw4WKJ/TMyDtvAoK9bf2u/mNo3w= github.com/aymerick/douceur v0.2.0 h1:Mv+mAeH1Q+n9Fr+oyamOlAkUNPWPlA8PPGR0QAaYuPk= github.com/aymerick/douceur v0.2.0/go.mod h1:wlT5vV2O3h55X9m7iVYN0TBM0NH/MmbLnd30/FjWUq4= -github.com/basecamp/basecamp-sdk/go v0.18.1-0.20260916210227-4523eac74cfa h1:efZJJSiwKn5lBih05oVfLM6S+ZYN6kB0vcH1DQmd8a8= -github.com/basecamp/basecamp-sdk/go v0.18.1-0.20260916210227-4523eac74cfa/go.mod h1:kIBDYwPMMD59PadNGxpH0YTQuI+blFPZ8MelGI0RK5Q= +github.com/basecamp/basecamp-sdk/go v0.19.0 h1:byygVVbJnWCZsyBNeAlztlUAV23ytLEhPx98WakNy+c= +github.com/basecamp/basecamp-sdk/go v0.19.0/go.mod h1:kIBDYwPMMD59PadNGxpH0YTQuI+blFPZ8MelGI0RK5Q= github.com/basecamp/cli v0.2.2-0.20260828230226-767413fc712d h1:jAzDrCCzDpIwhbFT1xVVs0z2xpXoDEkomHfKB2bUUp8= github.com/basecamp/cli v0.2.2-0.20260828230226-767413fc712d/go.mod h1:iTBTaWvsPEFIcZfkxQHEfISyJ6sZ7036K6bNx0RY3EE= github.com/basecamp/mcp v0.0.0-20260828100356-2d6f44b51e9d h1:zEQVGq1x1nhKMZ2TudFAcSJ32CHT8richI1vQakIKz4= diff --git a/internal/mcpserver/model/PROVENANCE.json b/internal/mcpserver/model/PROVENANCE.json index 25c72af63..41423b4a7 100644 --- a/internal/mcpserver/model/PROVENANCE.json +++ b/internal/mcpserver/model/PROVENANCE.json @@ -1,7 +1,7 @@ { "source": "github.com/basecamp/basecamp-sdk", - "commit": "4523eac74cfa6452ec85ea5f8f633baa4dc487a5", - "ref": "go/v0.18.0-63-g4523eac7", + "commit": "6abe227204a465ced72969f10e32d3a06e77bcc1", + "ref": "go/v0.19.0", "files": ["behavior-model.json", "openapi.json"], "synced_by": "scripts/sync-mcp-model.sh", "patches": "binary-upload operations dropped because the toolkit refuses their non-JSON bodies (EXCLUDED_OPERATIONS) and the stream-ticket mint dropped by policy (POLICY_EXCLUDED_OPERATIONS); no tag patches applied (PATCHED_TAGS is empty — the export tags every operation) — see the sync script" diff --git a/internal/version/sdk-provenance.json b/internal/version/sdk-provenance.json index 3ff436f25..d25aac38f 100644 --- a/internal/version/sdk-provenance.json +++ b/internal/version/sdk-provenance.json @@ -1,9 +1,9 @@ { "sdk": { "module": "github.com/basecamp/basecamp-sdk/go", - "version": "v0.18.1-0.20260916210227-4523eac74cfa", - "revision": "4523eac74cfa", - "updated_at": "2026-09-16T21:02:27Z" + "version": "v0.19.0", + "revision": "6abe227204a4", + "updated_at": "2026-09-16T21:15:28Z" }, "api": { "repo": "basecamp/bc3", From 01799bb34aff231d70be32274f74bf4a352e907e Mon Sep 17 00:00:00 2001 From: Jeremy Daer Date: Wed, 16 Sep 2026 15:01:08 -0700 Subject: [PATCH 2/2] Recompute the Nix vendorHash for the v0.19.0 pin Computed and verified locally with make update-nix-hash: the go.mod and go.sum change invalidates the old hash, and the CI job that would refresh it cannot mint a token because cli-release-bot has no installation on this repository. --- nix/package.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nix/package.nix b/nix/package.nix index c68146eaf..06dd7f9a6 100644 --- a/nix/package.nix +++ b/nix/package.nix @@ -8,7 +8,7 @@ buildGoModule.override { go = go_1_26; } (finalAttrs: { src = lib.cleanSource ./..; # To update: set to lib.fakeHash, run `nix build`, use the hash from the error. - vendorHash = "sha256-mT0oVMMRcmpbszb0zVYd1k8cZfMHKHZRbhsy/+8GHxo="; + vendorHash = "sha256-uiNB0+zjvdDTI7RbC1hwiuUGNJzh7P1DFnr7rInjco0="; subPackages = [ "cmd/basecamp" ];