@attrkit/mcp 1.2.0 → 1.3.0

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## 1.3.0 (2026-10-20)
+
+### Added
+
+- `list_event_deliveries` (`GET /api/v1/apps/{appId}/deliveries`, read scope): what happened to
+  each event the app sent to its ad networks, one row per delivery, newest first. Each row gives
+  the state (`held`, `queued`, `sending`, `retrying`, `sent`, `suppressed` or `failed`), the reason
+  with a one-line explanation, the attempt count, the last attempt's time and HTTP status, and for
+  a held row the time it is expected to be released. Filters: `install_id`, `event_id`,
+  `connection_id`, `network`, `state`, `from`, `to`; paged with `cursor` and `limit` (50 by
+  default, 200 at most). No other tool changes.
+
+## 1.2.1 (2026-10-03)
+
+### Fixed
+
+- `attrkit-mcp login` printed its prompt before it turned echo off, so a key that arrived in
+  between (a paste fired the moment the prompt appeared) was echoed on screen. Echo is now off
+  before the prompt is printed.
+
 ## 1.2.0 (2026-10-03)
 
 ### Added

package/README.md

@@ -7,7 +7,7 @@ tenant scope is resolved from your secret management key.
 
 ## What it exposes
 
-The server provides 38 tools.
+The server provides 39 tools.
 
 | Area | Tools |
 |---|---|
@@ -17,7 +17,7 @@ The server provides 38 tools.
 | SDK keys | `get_publishable_key`, `rotate_publishable_key` |
 | Management keys | `list_api_keys`, `create_api_key`, `revoke_api_key` |
 | Campaign links | `list_links`, `create_campaign_link`, `update_link_status` |
-| Decisions and reporting | `list_campaigns`, `list_ads`, `list_recent_events`, `get_campaign_decision`, `record_campaign_decision`, `get_attribution_rollup`, `lookup_customer_attribution` |
+| Decisions and reporting | `list_campaigns`, `list_ads`, `list_recent_events`, `list_event_deliveries`, `get_campaign_decision`, `record_campaign_decision`, `get_attribution_rollup`, `lookup_customer_attribution` |
 | Spend and costs | `get_spend`, `import_spend`, `set_cost_model`, `pull_network_spend` |
 | Ad integrations | `list_integrations`, `create_integration`, `update_integration`, `delete_integration` |
 | RevenueCat | `get_revenuecat`, `configure_revenuecat` |

package/dist/cli.js

@@ -13710,6 +13710,26 @@ var CLASS_LISTS = [
   { ipClass: "relay", parsed: parseRanges(ip_class_ranges_default.apple_private_relay_egress, "relay") }
 ];
 var IP_CLASS_RANGES_VERSION = ip_class_ranges_default.ranges_version;
+// ../shared/src/meta-errors.ts
+var META_NOT_SERVING_CODES = new Set([
+  2,
+  4,
+  17,
+  32,
+  341,
+  613,
+  80000,
+  80001,
+  80002,
+  80003,
+  80004,
+  80005,
+  80006,
+  80008,
+  80009,
+  80014
+]);
+var META_TOKEN_CODES = new Set([102, 190]);
 // ../shared/src/canonical-events.ts
 var LEDGER_ONLY_CANONICAL_EVENT_NAMES = Object.freeze(["refund_reversed"]);
 // ../shared/src/derived-events.ts
@@ -14850,11 +14870,11 @@ function invalidResult(code, message) {
     json: { error: { code, message } }
   };
 }
-function buildRequestUrl(baseUrl2, path, query) {
+function buildRequestUrl(baseUrl, path, query) {
   if (!path.startsWith("/") || hasUnsafePathCharacter(path)) {
     throw new Error("path must be an absolute URL path without whitespace or control characters");
   }
-  const url = new URL(`${baseUrl2.href.replace(/\/+$/, "")}${path}`);
+  const url = new URL(`${baseUrl.href.replace(/\/+$/, "")}${path}`);
   for (const [key, value] of Object.entries(query ?? {})) {
     if (value !== undefined && value !== "")
       url.searchParams.set(key, value);
@@ -14919,15 +14939,15 @@ function apiResultFromResponse(response, text, expectedResponse) {
 }
 async function callApi(config, path, options = {}) {
   const doFetch = options.fetchImpl ?? fetch;
-  let baseUrl2;
+  let baseUrl;
   try {
-    baseUrl2 = validatedApiBaseUrl(config.apiUrl);
+    baseUrl = validatedApiBaseUrl(config.apiUrl);
   } catch (error) {
     return invalidResult("invalid_api_url", `ATTRKIT_API_URL is invalid: ${error instanceof Error ? error.message : String(error)}`);
   }
   let url;
   try {
-    url = buildRequestUrl(baseUrl2, path, options.query);
+    url = buildRequestUrl(baseUrl, path, options.query);
   } catch (error) {
     return invalidResult("invalid_path", `AttriKit API path is invalid: ${error instanceof Error ? error.message : String(error)}`);
   }
@@ -15055,7 +15075,7 @@ ${body}`
     structuredContent: structured
   }, result.nextCursor);
 }
-var SERVER_VERSION = "1.2.0";
+var SERVER_VERSION = "1.3.0";
 var periodSchema = z5.enum(["7d", "30d", "90d", "all"]).describe("Reporting window. Omit to use the endpoint's documented default.").optional();
 var appIdSchema = z5.string().describe("Optional app id to scope the result to one app.").optional();
 var requiredAppIdSchema = z5.string().min(1).describe("The AttriKit app id.");
@@ -15413,6 +15433,35 @@ function createServer(config, fetchImpl) {
       limit: limit === undefined ? undefined : String(limit)
     }
   })));
+  server.registerTool("list_event_deliveries", {
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
+    title: "List what happened to each event sent to ad networks",
+    description: "Return one row per delivery of an event to a network connection, newest first: its state (held, queued, sending, retrying, sent, suppressed or failed), the reason with a one-line explanation (for example consent_suppressed or destination_event_too_old), attempts, the last HTTP status, and for a held row when it is expected to be released. Use it to answer why an event did not reach Meta, TikTok or Google. Read scope is enough.",
+    inputSchema: {
+      app_id: requiredAppIdSchema,
+      install_id: z5.string().optional().describe("Only this install: the install epoch id the events feed and the export call the install id."),
+      event_id: z5.string().optional().describe("Only this event's deliveries, one per connection that receives it."),
+      connection_id: z5.string().optional().describe("Only this network connection, as returned by list_integrations."),
+      network: z5.string().optional().describe("Only connections to this network, for example meta."),
+      state: z5.enum(["held", "queued", "sending", "retrying", "sent", "suppressed", "failed"]).optional().describe("Only deliveries in this state."),
+      from: calendarDaySchema.optional().describe("First UTC day the event was received, YYYY-MM-DD. May be sent without to."),
+      to: calendarDaySchema.optional().describe("Last UTC day the event was received, YYYY-MM-DD, inclusive. May be sent without from."),
+      cursor: cursorSchema,
+      limit: listLimitSchema
+    }
+  }, async ({ app_id, install_id, event_id, connection_id, network, state, from, to, cursor, limit }) => toToolResult(await call(`/api/v1/apps/${encodeOpaquePathSegment(app_id)}/deliveries`, {
+    query: {
+      installId: install_id,
+      eventId: event_id,
+      connectionId: connection_id,
+      network,
+      state,
+      from,
+      to,
+      cursor,
+      limit: limit === undefined ? undefined : String(limit)
+    }
+  })));
   server.registerTool("get_campaign_decision", {
     annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "Get campaign decisions (scale / cut / hold)",
@@ -15933,8 +15982,8 @@ function addKeyCommand(username, quotedKey) {
 }
 function readHidden(input, prompt, write, idleMs = 50) {
   return new Promise((resolve) => {
-    write(prompt);
     input.setRawMode(true);
+    write(prompt);
     input.resume();
     input.setEncoding("utf8");
     let value = "";
@@ -15957,8 +16006,15 @@ function readHidden(input, prompt, write, idleMs = 50) {
     };
     const onData = (chunk) => {
       for (const character of chunk) {
+        if (character === "\x03" || character === "\x04")
+          return finish(null);
         if (mode === "drain")
           continue;
+        if (character === "\r" || character === `
+`) {
+          mode = "drain";
+          continue;
+        }
         if (mode === "escape") {
           mode = character === "[" ? "csi" : character === "O" ? "ss3" : "text";
         } else if (mode === "csi") {
@@ -15966,13 +16022,8 @@ function readHidden(input, prompt, write, idleMs = 50) {
             mode = "text";
         } else if (mode === "ss3") {
           mode = "text";
-        } else if (character === "\x03") {
-          return finish(null);
         } else if (character === "\x1B") {
           mode = "escape";
-        } else if (character === "\r" || character === `
-`) {
-          mode = "drain";
         } else if (character === "" || character === "\b") {
           value = value.slice(0, -1);
         } else if (character >= " ") {
@@ -16071,10 +16122,19 @@ async function runLogout(options = {}) {
     return 1;
   }
   const result = await (options.runSecurity ?? defaultSecurityRunner)(["delete-generic-password", "-s", KEYCHAIN_SERVICE]);
-  write(result.code === 0 ? `Removed the attrkit-mcp item from the macOS Keychain.
-` : `Nothing was stored in the Keychain for attrkit-mcp.
+  if (result.code === 0) {
+    write(`Removed the attrkit-mcp item from the macOS Keychain.
 `);
-  return 0;
+    return 0;
+  }
+  if (result.code === 44) {
+    write(`No attrkit-mcp item was found in the macOS Keychain; nothing to remove.
+`);
+    return 0;
+  }
+  write(`Could not remove the attrkit-mcp item from the macOS Keychain (security exit ${result.code}). It may still be stored.
+`);
+  return 1;
 }
 
 // src/main.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@attrkit/mcp",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "AttriKit's stdio MCP server for its public Management API",
   "keywords": [
     "attrkit",
@@ -33,18 +33,18 @@
     "build": "bun build ./src/cli.ts --outdir ./dist --target=node --format=esm --external @modelcontextprotocol/sdk --external zod",
     "prepack": "bun run build",
     "typecheck": "../../node_modules/typescript-7/bin/tsc --noEmit",
-    "lint": "eslint .",
+    "lint": "node ../../scripts/checks/code-quality-eslint.mjs --workspace packages/mcp",
     "test": "cd ../.. && vitest run packages/mcp/src"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "1.30.0",
-    "zod": "4.4.3"
+    "@modelcontextprotocol/sdk": "1.32.1",
+    "zod": "4.6.7"
   },
   "devDependencies": {
     "@attrkit/shared": "workspace:*",
-    "@types/node": "26.1.1",
+    "@types/node": "26.6.5",
     "typescript": "6.0.3",
-    "vitest": "4.1.10"
+    "vitest": "5.0.4"
   },
   "publishConfig": {
     "access": "public"