@avallon-labs/mcp 52.7.0 → 52.8.0

package/dist/index.js

@@ -46,5 +46,5 @@ function setupFetch() {
 
 // src/index.ts
 setupFetch();
-await import("./server-YOC5SGIR.js");
+await import("./server-5KHVVGKL.js");
 //# sourceMappingURL=index.js.map

package/dist/{server-YOC5SGIR.js → server-5KHVVGKL.js}

@@ -1837,6 +1837,59 @@ var updateWorkerMcps = async (workerId, updateWorkerMcpsBody, options) => {
   const data = body ? JSON.parse(body) : {};
   return { data, status: res.status, headers: res.headers };
 };
+var getGetAccessUrl = (entityType, entityId) => {
+  return `/v1/access/${entityType}/${entityId}`;
+};
+var getAccess = async (entityType, entityId, options) => {
+  const res = await fetch(
+    getGetAccessUrl(entityType, entityId),
+    {
+      ...options,
+      method: "GET"
+    }
+  );
+  const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+  const data = body ? JSON.parse(body) : {};
+  return { data, status: res.status, headers: res.headers };
+};
+var getUpdateAccessUrl = (entityType, entityId) => {
+  return `/v1/access/${entityType}/${entityId}`;
+};
+var updateAccess = async (entityType, entityId, updateAccessBody, options) => {
+  const getHeaders = (h) => {
+    if (!h) return {};
+    if (h instanceof Headers) return Object.fromEntries(h.entries());
+    if (Array.isArray(h)) return Object.fromEntries(h);
+    return h;
+  };
+  const res = await fetch(
+    getUpdateAccessUrl(entityType, entityId),
+    {
+      ...options,
+      method: "PUT",
+      headers: { "Content-Type": "application/json", ...getHeaders(options?.headers) },
+      body: JSON.stringify(updateAccessBody)
+    }
+  );
+  const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+  const data = body ? JSON.parse(body) : {};
+  return { data, status: res.status, headers: res.headers };
+};
+var getGetMyAccessUrl = (entityType, entityId) => {
+  return `/v1/access/${entityType}/${entityId}/me`;
+};
+var getMyAccess = async (entityType, entityId, options) => {
+  const res = await fetch(
+    getGetMyAccessUrl(entityType, entityId),
+    {
+      ...options,
+      method: "GET"
+    }
+  );
+  const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+  const data = body ? JSON.parse(body) : {};
+  return { data, status: res.status, headers: res.headers };
+};
 var getListWorkerVersionsUrl = (workerId, params) => {
   const normalizedParams = new URLSearchParams();
   Object.entries(params || {}).forEach(([key, value]) => {
@@ -5578,6 +5631,75 @@ var updateWorkerMcpsHandler = async (args, options) => {
     structuredContent: res.data
   };
 };
+var getAccessHandler = async (args, options) => {
+  const res = await getAccess(args.pathParams.entityType, args.pathParams.entityId, options);
+  if (res.status >= 400) {
+    return {
+      content: [
+        {
+          type: "text",
+          text: JSON.stringify(res.data ?? null)
+        }
+      ],
+      isError: true
+    };
+  }
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(res.data ?? null)
+      }
+    ],
+    structuredContent: res.data
+  };
+};
+var updateAccessHandler = async (args, options) => {
+  const res = await updateAccess(args.pathParams.entityType, args.pathParams.entityId, args.bodyParams, options);
+  if (res.status >= 400) {
+    return {
+      content: [
+        {
+          type: "text",
+          text: JSON.stringify(res.data ?? null)
+        }
+      ],
+      isError: true
+    };
+  }
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(res.data ?? null)
+      }
+    ],
+    structuredContent: res.data
+  };
+};
+var getMyAccessHandler = async (args, options) => {
+  const res = await getMyAccess(args.pathParams.entityType, args.pathParams.entityId, options);
+  if (res.status >= 400) {
+    return {
+      content: [
+        {
+          type: "text",
+          text: JSON.stringify(res.data ?? null)
+        }
+      ],
+      isError: true
+    };
+  }
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(res.data ?? null)
+      }
+    ],
+    structuredContent: res.data
+  };
+};
 var listWorkerVersionsHandler = async (args, options) => {
   const res = await listWorkerVersions(args.pathParams.workerId, args.queryParams, options);
   if (res.status >= 400) {
@@ -10243,6 +10365,54 @@ var UpdateWorkerMcpsResponse = zod.object({
   }),
   "message": zod.string()
 });
+var GetAccessParams = zod.object({
+  "entityType": zod.enum(["worker"]),
+  "entityId": zod.string().uuid()
+});
+var GetAccessResponse = zod.object({
+  "data": zod.object({
+    "grants": zod.array(zod.object({
+      "principal_type": zod.enum(["profile", "worker"]).describe("Who holds the grant: a team member's `profile`, or a `worker`, whose runs act with it."),
+      "principal_id": zod.string().uuid(),
+      "level": zod.enum(["viewer", "editor"]).describe("`viewer` can see and use the entity. `editor` can also change and share it. On a `worker`, `viewer` sees the worker, its prompt and everything it owns, and can start it; `editor` can also edit, promote, delete and share it. Attaching secrets and managing schedules still need the matching role permission."),
+      "created_at": zod.string().datetime({ "offset": true })
+    }))
+  }),
+  "message": zod.string()
+});
+var UpdateAccessParams = zod.object({
+  "entityType": zod.enum(["worker"]),
+  "entityId": zod.string().uuid()
+});
+var updateAccessBodyGrantsMax = 1e3;
+var UpdateAccessBody = zod.object({
+  "grants": zod.array(zod.object({
+    "principal_type": zod.enum(["profile", "worker"]).describe("Who holds the grant: a team member's `profile`, or a `worker`, whose runs act with it."),
+    "principal_id": zod.string().uuid(),
+    "level": zod.enum(["viewer", "editor"]).describe("`viewer` can see and use the entity. `editor` can also change and share it. On a `worker`, `viewer` sees the worker, its prompt and everything it owns, and can start it; `editor` can also edit, promote, delete and share it. Attaching secrets and managing schedules still need the matching role permission.")
+  })).max(updateAccessBodyGrantsMax).describe("Everyone the entity is shared with, replacing the current set. Pass an empty array to share it with no one.")
+});
+var UpdateAccessResponse = zod.object({
+  "data": zod.object({
+    "grants": zod.array(zod.object({
+      "principal_type": zod.enum(["profile", "worker"]).describe("Who holds the grant: a team member's `profile`, or a `worker`, whose runs act with it."),
+      "principal_id": zod.string().uuid(),
+      "level": zod.enum(["viewer", "editor"]).describe("`viewer` can see and use the entity. `editor` can also change and share it. On a `worker`, `viewer` sees the worker, its prompt and everything it owns, and can start it; `editor` can also edit, promote, delete and share it. Attaching secrets and managing schedules still need the matching role permission."),
+      "created_at": zod.string().datetime({ "offset": true })
+    }))
+  }),
+  "message": zod.string()
+});
+var GetMyAccessParams = zod.object({
+  "entityType": zod.enum(["worker"]),
+  "entityId": zod.string().uuid()
+});
+var GetMyAccessResponse = zod.object({
+  "data": zod.object({
+    "permissions": zod.array(zod.enum(["workers:read", "workers:run", "workers:write", "workers:promote"])).describe("What the caller may do with the entity, through their role or a grant on it. On a worker, `workers:write` also lets the caller share it.")
+  }),
+  "message": zod.string()
+});
 var ListWorkerVersionsParams = zod.object({
   "workerId": zod.string().uuid()
 });
@@ -10888,7 +11058,7 @@ var GetProfileResponse = zod.object({
     "last_name": zod.union([zod.string(), zod.null()]),
     "email": zod.string(),
     "role": zod.enum(["admin", "avallon_admin", "member"]),
-    "permissions": zod.array(zod.enum(["voice-agents:write", "voice-agents:promote", "tools:write", "tools:execute", "tools:promote", "extractors:write", "inboxes:write", "inboxes:send", "artifacts:write", "api-keys:write", "teams:write", "cases:write", "cases:delete", "information-requests:write", "information-requests:resolve", "feedback:write", "outbound-jobs:write", "outbound-jobs:schedule", "workers:write", "workers:execute", "workers:write-mcp", "workers:run", "workers:promote", "chat-agents:write", "notifications:write", "prompts:read", "prompts:write", "secrets:read", "secrets:write", "schedules:read", "schedules:write", "tenants:write"])),
+    "permissions": zod.array(zod.enum(["voice-agents:write", "voice-agents:promote", "tools:write", "tools:execute", "tools:promote", "extractors:write", "inboxes:write", "inboxes:send", "artifacts:write", "api-keys:write", "teams:write", "cases:write", "cases:delete", "information-requests:write", "information-requests:resolve", "feedback:write", "outbound-jobs:write", "outbound-jobs:schedule", "workers:read", "workers:create", "workers:write", "workers:execute", "workers:write-mcp", "workers:run", "workers:promote", "chat-agents:write", "notifications:write", "prompts:read", "prompts:write", "secrets:read", "secrets:write", "schedules:read", "schedules:write", "tenants:write"])),
     "tenants": zod.object({
       "active": zod.object({
         "id": zod.string(),
@@ -13702,6 +13872,55 @@ var createMcpServer = (options) => {
       signal: options?.signal ? AbortSignal.any([options.signal, ctx.signal]) : ctx.signal
     })
   );
+  tools.getAccess = server2.registerTool(
+    "getAccess",
+    {
+      title: "Get access",
+      description: "List who an entity is shared with. Admins see every entity through their role, whether or not they are listed. Requires `workers:write` on a worker.",
+      inputSchema: {
+        pathParams: GetAccessParams
+      },
+      outputSchema: GetAccessResponse,
+      annotations: { readOnlyHint: true }
+    },
+    (args, ctx) => getAccessHandler(args, {
+      ...options,
+      signal: options?.signal ? AbortSignal.any([options.signal, ctx.signal]) : ctx.signal
+    })
+  );
+  tools.updateAccess = server2.registerTool(
+    "updateAccess",
+    {
+      title: "Update access",
+      description: "Replace who an entity is shared with. Each grantee must be a team member or a worker of the tenant. Requires `workers:write` on a worker. An editor who leaves their own grant out loses access, unless their role gives it.",
+      inputSchema: {
+        pathParams: UpdateAccessParams,
+        bodyParams: UpdateAccessBody.optional()
+      },
+      outputSchema: UpdateAccessResponse,
+      annotations: { destructiveHint: true, idempotentHint: true }
+    },
+    (args, ctx) => updateAccessHandler(args, {
+      ...options,
+      signal: options?.signal ? AbortSignal.any([options.signal, ctx.signal]) : ctx.signal
+    })
+  );
+  tools.getMyAccess = server2.registerTool(
+    "getMyAccess",
+    {
+      title: "Get my access",
+      description: "List what the caller may do with an entity, through their role or a grant on it, to decide which controls to show. An entity the caller cannot see is not found.",
+      inputSchema: {
+        pathParams: GetMyAccessParams
+      },
+      outputSchema: GetMyAccessResponse,
+      annotations: { readOnlyHint: true }
+    },
+    (args, ctx) => getMyAccessHandler(args, {
+      ...options,
+      signal: options?.signal ? AbortSignal.any([options.signal, ctx.signal]) : ctx.signal
+    })
+  );
   tools.listWorkerVersions = server2.registerTool(
     "listWorkerVersions",
     {
@@ -15105,4 +15324,4 @@ var transport = new StdioServerTransport();
 server.connect(transport).then(() => {
   console.error("MCP server running on stdio");
 }).catch(console.error);
-//# sourceMappingURL=server-YOC5SGIR.js.map
+//# sourceMappingURL=server-5KHVVGKL.js.map