@attrkit/mcp 1.0.0 → 1.1.0

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 1.1.0 (unreleased: not yet published to npm)
+
+### Added
+
+- `send_server_event` accepts an optional `consent.dma` object: `eea`, and optionally
+  `ad_user_data` and `ad_personalization`, the user's answers to Google's EU consent questions. It
+  is forwarded to the API as `consent.dma` with `source: "manual"`, and only when you give it; a
+  call without it sends exactly what 1.0.0 sent. A key the object does not define (`adUserData`
+  for `ad_user_data`) is refused before any request, as the API refuses it.
+
 ## 1.0.0 (2026-09-30)
 
 Major version release with input contract formalization, bug fixes, and security hardening.

package/dist/cli.js

@@ -13876,6 +13876,13 @@ var consentStateSchema = z3.object({
   policy_version: z3.number().int().positive(),
   framework_string: z3.string().max(512).optional()
 }).strict();
+var dmaConsentSchema = z3.object({
+  eea: z3.boolean(),
+  ad_user_data: z3.boolean().optional(),
+  ad_personalization: z3.boolean().optional(),
+  source: z3.enum(["tcf", "manual"])
+}).strict();
+var firstOpenConsentSchema = consentStateSchema.extend({ dma: dmaConsentSchema.optional() }).strict();
 var coarseContextSchema = z3.object({
   country_code: z3.string().regex(/^[A-Z]{2}$/).optional(),
   region_code: z3.string().max(16).optional(),
@@ -13940,7 +13947,7 @@ var firstOpenEnvelopeSchema = z3.object({
   occurred_at: z3.string().datetime({ offset: true }),
   app_version: z3.string().min(1).max(128),
   coarse_context: coarseContextSchema,
-  consent: consentStateSchema,
+  consent: firstOpenConsentSchema,
   app_transaction_jws: z3.string().min(16).max(32768).optional(),
   asa_token: z3.string().min(8).max(8192).optional(),
   exact_token_ref: exactTokenReferenceSchema.optional(),
@@ -13969,7 +13976,8 @@ var identifyEnvelopeSchema = z3.object({
 var eventConsentSchema = z3.object({
   measurement: z3.enum(["granted", "denied", "unknown"]),
   tracking: z3.enum(["granted", "denied", "unknown"]),
-  policy_version: z3.number().int().positive()
+  policy_version: z3.number().int().positive(),
+  dma: dmaConsentSchema.optional()
 }).strict();
 var propertyScalarSchema = z3.union([
   z3.string().max(1024),
@@ -15047,7 +15055,7 @@ ${body}`
     structuredContent: structured
   }, result.nextCursor);
 }
-var SERVER_VERSION = "1.0.0";
+var SERVER_VERSION = "1.1.0";
 var periodSchema = z5.enum(["7d", "30d", "90d", "all"]).describe("Reporting window. Omit to use the endpoint's documented default.").optional();
 var appIdSchema = z5.string().describe("Optional app id to scope the result to one app.").optional();
 var requiredAppIdSchema = z5.string().min(1).describe("The AttriKit app id.");
@@ -15802,13 +15810,31 @@ function createServer(config, fetchImpl) {
       consent: z5.object({
         measurement: z5.enum(["granted", "denied", "unknown"]),
         tracking: z5.enum(["granted", "denied", "unknown"]),
-        policy_version: z5.number().int().positive()
+        policy_version: z5.number().int().positive(),
+        dma: z5.object({
+          eea: z5.boolean().describe("Whether EEA, UK or Swiss rules apply to this user."),
+          ad_user_data: z5.boolean().optional().describe("The user's ad_user_data consent."),
+          ad_personalization: z5.boolean().optional().describe("The user's ad_personalization consent.")
+        }).strict().optional().describe("Optional. The user's answers to Google's EU consent questions, sent to Google with this event. A value left out is derived from tracking; an unknown key is refused, as the API refuses it.")
       }).describe("The per-event consent SDK events carry. An event whose measurement is not granted is not collected."),
       properties: z5.record(z5.string(), z5.union([z5.string().max(1024), z5.number(), z5.boolean(), z5.null()])).optional().describe("Scalar values only, at most 64 keys. Revenue is value (major units) or price_minor_units with currency, an ISO 4217 code."),
       idempotency_key: idempotencyKeySchema
     }
   }, async ({ app_id, customer_user_id, event_id, event_name, event_version, occurred_at, consent, properties, idempotency_key }) => {
-    const body = { customer_user_id, event_id, event_name, event_version, occurred_at, consent };
+    const forwardedConsent = {
+      measurement: consent.measurement,
+      tracking: consent.tracking,
+      policy_version: consent.policy_version
+    };
+    if (consent.dma !== undefined) {
+      const dma = { eea: consent.dma.eea, source: "manual" };
+      if (consent.dma.ad_user_data !== undefined)
+        dma.ad_user_data = consent.dma.ad_user_data;
+      if (consent.dma.ad_personalization !== undefined)
+        dma.ad_personalization = consent.dma.ad_personalization;
+      forwardedConsent.dma = dma;
+    }
+    const body = { customer_user_id, event_id, event_name, event_version, occurred_at, consent: forwardedConsent };
     if (properties !== undefined)
       body.properties = properties;
     return toToolResult(await call(`/api/v1/apps/${encodeOpaquePathSegment(app_id)}/events`, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@attrkit/mcp",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "AttriKit's stdio MCP server for its public Management API",
   "keywords": [
     "attrkit",