@avallon-labs/mcp 60.0.0 → 60.1.0-staging.1322

package/dist/index.js

@@ -56,5 +56,5 @@ function describeErrors(body) {
 
 // src/index.ts
 setupFetch();
-await import("./server-NRTUNVHI.js");
+await import("./server-FHO2NMID.js");
 //# sourceMappingURL=index.js.map

package/dist/{server-NRTUNVHI.js → server-FHO2NMID.js}

@@ -1951,6 +1951,29 @@ var updateAccess = async (entityType, entityId, updateAccessBody, options) => {
   const data = body ? JSON.parse(body) : {};
   return { data, status: res.status, headers: res.headers };
 };
+var getChangeAccessUrl = (entityType, entityId) => {
+  return `/v1/access/${entityType}/${entityId}`;
+};
+var changeAccess = async (entityType, entityId, changeAccessBody, options) => {
+  const getHeaders = (h) => {
+    if (!h) return {};
+    if (h instanceof Headers) return Object.fromEntries(h.entries());
+    if (Array.isArray(h)) return Object.fromEntries(h);
+    return h;
+  };
+  const res = await fetch(
+    getChangeAccessUrl(entityType, entityId),
+    {
+      ...options,
+      method: "PATCH",
+      headers: { "Content-Type": "application/json", ...getHeaders(options?.headers) },
+      body: JSON.stringify(changeAccessBody)
+    }
+  );
+  const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+  const data = body ? JSON.parse(body) : {};
+  return { data, status: res.status, headers: res.headers };
+};
 var getGetMyAccessUrl = (entityType, entityId) => {
   return `/v1/access/${entityType}/${entityId}/me`;
 };
@@ -6145,6 +6168,29 @@ var updateAccessHandler = async (args, options) => {
     structuredContent: res.data
   };
 };
+var changeAccessHandler = async (args, options) => {
+  const res = await changeAccess(args.pathParams.entityType, args.pathParams.entityId, args.bodyParams, options);
+  if (res.status >= 400) {
+    return {
+      content: [
+        {
+          type: "text",
+          text: JSON.stringify(res.data ?? null)
+        }
+      ],
+      isError: true
+    };
+  }
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(res.data ?? null)
+      }
+    ],
+    structuredContent: res.data
+  };
+};
 var getMyAccessHandler = async (args, options) => {
   const res = await getMyAccess(args.pathParams.entityType, args.pathParams.entityId, options);
   if (res.status >= 400) {
@@ -11381,6 +11427,36 @@ var UpdateAccessResponse = zod.object({
   }),
   "message": zod.string()
 });
+var ChangeAccessParams = zod.object({
+  "entityType": zod.enum(["worker", "case_type"]),
+  "entityId": zod.string().describe("The worker's id or the case type's slug.")
+});
+var changeAccessBodyGrantsDefault = [];
+var changeAccessBodyGrantsMax = 1e3;
+var changeAccessBodyRevocationsDefault = [];
+var changeAccessBodyRevocationsMax = 1e3;
+var ChangeAccessBody = zod.object({
+  "grants": zod.array(zod.object({
+    "principal_type": zod.enum(["profile", "worker", "tenant"]).describe("Who holds the grant: a team member's `profile`, a `worker`, whose runs act with it, or the whole `tenant`. `tenant` is not supported yet."),
+    "principal_id": zod.string().uuid(),
+    "level": zod.enum(["viewer", "editor"]).describe("`viewer` can see and use the entity. `editor` can also change and share it. On a `worker`, `viewer` sees the worker, its prompt and everything it owns, and can start it; `editor` can also edit, promote, delete and share it. Attaching secrets and managing schedules still need the matching role permission. On a `case_type`, `editor` can also edit, promote and share it.")
+  })).max(changeAccessBodyGrantsMax).default(changeAccessBodyGrantsDefault).describe("Grants to create, or whose level to change."),
+  "revocations": zod.array(zod.object({
+    "principal_type": zod.enum(["profile", "worker", "tenant"]).describe("Who holds the grant: a team member's `profile`, a `worker`, whose runs act with it, or the whole `tenant`. `tenant` is not supported yet."),
+    "principal_id": zod.string().uuid()
+  })).max(changeAccessBodyRevocationsMax).default(changeAccessBodyRevocationsDefault).describe("Grants to remove. Revoking a principal without a grant has no effect.")
+});
+var ChangeAccessResponse = zod.object({
+  "data": zod.object({
+    "grants": zod.array(zod.object({
+      "principal_type": zod.enum(["profile", "worker", "tenant"]).describe("Who holds the grant: a team member's `profile`, a `worker`, whose runs act with it, or the whole `tenant`. `tenant` is not supported yet."),
+      "principal_id": zod.string().uuid(),
+      "level": zod.enum(["viewer", "editor"]).describe("`viewer` can see and use the entity. `editor` can also change and share it. On a `worker`, `viewer` sees the worker, its prompt and everything it owns, and can start it; `editor` can also edit, promote, delete and share it. Attaching secrets and managing schedules still need the matching role permission. On a `case_type`, `editor` can also edit, promote and share it."),
+      "created_at": zod.string().datetime({ "offset": true })
+    }))
+  }),
+  "message": zod.string()
+});
 var GetMyAccessParams = zod.object({
   "entityType": zod.enum(["worker", "case_type"]),
   "entityId": zod.string().describe("The worker's id or the case type's slug.")
@@ -15660,8 +15736,8 @@ var createMcpServer = (options) => {
   tools.updateAccess = server2.registerTool(
     "updateAccess",
     {
-      title: "Update access",
-      description: "Replace who an entity is shared with. Each grantee must be a team member or a worker of the tenant. Requires `workers:write` on a worker and `case-types:write` on a case type. An editor who leaves their own grant out loses access, unless their role gives it.",
+      title: "Update access (deprecated)",
+      description: "Replace who an entity is shared with. Each grantee must be a team member or a worker of the tenant. Requires `workers:write` on a worker and `case-types:write` on a case type. An editor who leaves their own grant out loses access, unless their role gives it.\n\n**Deprecated:** Use `PATCH /v1/access/{entityType}/{entityId}` instead.",
       inputSchema: {
         pathParams: UpdateAccessParams,
         bodyParams: UpdateAccessBody.optional()
@@ -15674,6 +15750,23 @@ var createMcpServer = (options) => {
       signal: options?.signal ? AbortSignal.any([options.signal, ctx.signal]) : ctx.signal
     })
   );
+  tools.changeAccess = server2.registerTool(
+    "changeAccess",
+    {
+      title: "Change access",
+      description: "Grant, change or revoke access for specific team members and workers. Everyone not named keeps their access. Each grantee must be a team member or a worker of the tenant. Requires `workers:write` on a worker and `case-types:write` on a case type. An editor who revokes their own grant loses access, and one who downgrades it can no longer change or share the entity, unless their role gives it.",
+      inputSchema: {
+        pathParams: ChangeAccessParams,
+        bodyParams: ChangeAccessBody.optional()
+      },
+      outputSchema: ChangeAccessResponse,
+      annotations: { destructiveHint: true }
+    },
+    (args, ctx) => changeAccessHandler(args, {
+      ...options,
+      signal: options?.signal ? AbortSignal.any([options.signal, ctx.signal]) : ctx.signal
+    })
+  );
   tools.getMyAccess = server2.registerTool(
     "getMyAccess",
     {
@@ -17336,4 +17429,4 @@ var transport = new StdioServerTransport();
 server.connect(transport).then(() => {
   console.error("MCP server running on stdio");
 }).catch(console.error);
-//# sourceMappingURL=server-NRTUNVHI.js.map
+//# sourceMappingURL=server-FHO2NMID.js.map