mcp-data-platform-v1.89.2

A patch release that closes the last gap in the insight discovery path: retracted insights no longer surface in intent/text search.

Retracted insights no longer surface in intent search (#684)

The unified search has two insight discovery arms. The entity-keyed path (search(entity_urns=...)) already dropped retracted insights (rejected, superseded, rolled_back) when no explicit status was requested, but the intent/text path (search(intent=...)) did not. The same retracted insight was therefore hidden by an entity lookup yet still listed by an intent search.

The intent path now applies the same retraction as the entity path: with no explicit status, a rejected, superseded, or rolled_back insight is omitted; with an explicit status (for example status=superseded), the record is still returned. This is the read-time complement to the v1.89.1 fix, which advanced a superseded insight's review status and removed it from the pending review queue but left it listed in intent search.

Scope of the audit

Every other path that surfaces insights to an agent was checked and already excludes retracted records:

• The memory_context enrichment on datahub_get_entity (the highest-stakes path, since it injects context as if live) hard-filters to active records.
• The memory search source filters to active records.
• The review queue filters by explicit status.

The intent discovery arm was the only place a retracted insight could leak.

Testing

• make verify green: race plus real-Postgres, package budget, lint, gosec/govulncheck, semgrep, CodeQL, mutation, swagger-check, GoReleaser. Patch coverage 100%.
• Unit coverage of both discovery arms (retracted statuses dropped with no status; explicit status still returns them).
• An end-to-end real-Postgres test exercising the assembled chain (memory store to insight adapter to the insights provider): a recall-first superseded insight is retracted from both the intent and entity paths, the live successor surfaces, and status=superseded still returns it. This assembled-path test is the coverage whose absence let the gap ship.

Full changelog: v1.89.1...v1.89.2

Installation

Homebrew (macOS)

brew install txn2/tap/mcp-data-platform

Claude Code CLI

claude mcp add mcp-data-platform -- mcp-data-platform

Docker

docker pull ghcr.io/txn2/mcp-data-platform:v1.89.2

Verification

All release artifacts are signed with Cosign. Verify with:

cosign verify-blob --bundle mcp-data-platform_1.89.2_linux_amd64.tar.gz.sigstore.json \
  mcp-data-platform_1.89.2_linux_amd64.tar.gz