@chainpatrol/mcp 1.10.0 → 1.10.2

package/CHANGELOG.md

@@ -1,5 +1,54 @@
 # @chainpatrol/mcp
 
+## 1.10.2
+
+### Patch Changes
+
+- aa164fd: Fixed the MCP handshake `instructions` to reflect the tools actually exposed
+  when a server is narrowed with `only` (the CLI's `--tools` flag, or a caller
+  like the web app's blocklist-only endpoint). Previously every server —
+  narrowed or not — advertised the full-API instructions and told the client to
+  call `user_orgs` first, even when `user_orgs` wasn't in the exposed tool set.
+  A client following that advice would hit "unknown tool" before ever reaching
+  the tool it wanted. Supporting work in `@chainpatrol/web` (a new
+  blocklist-only MCP route) is a private package and doesn't need a version
+  bump.
+- adce1d5: The MCP server now reports its real version in the initialize handshake.
+
+  `PACKAGE_VERSION` was a hand-maintained literal that changesets does not
+  know about, so it went stale on every release: 1.10.1 shipped announcing
+  itself as `1.10.0`, the same drift #7804 had already corrected once. It is
+  now read from package.json and inlined by tsup at build time, so the
+  published server still does no filesystem lookup and the two cannot
+  disagree again.
+
+## 1.10.1
+
+### Patch Changes
+
+- a6ffc93: The `attachmentUrls` argument on `report_create` is no longer described as images only.
+  It has always accepted a URL to any file, but the description read "URLs of images to
+  attach to the report", which led API clients to believe evidence files such as `.eml`
+  messages were out of scope and had to be left out or hosted elsewhere.
+
+  It now says that any file type is accepted and points at `POST /attachment/upload` for
+  callers who want to send us the bytes rather than host the file themselves. No behaviour
+  changes — the schema still accepts the same array of URLs. The wording comes from
+  @chainpatrol/validation, a private package, and reaches the manifest and the published
+  OpenAPI spec through the external API router.
+
+- 4481e9c: Filtering reports by `reviewStatuses: ["ESCALATE"]` now matches proposals escalated to
+  the customer. The filter previously read `Proposal.isEscalated`, which is only written
+  for team escalations, so customer escalations were invisible to it. It now also matches
+  a live `ESCALATE` review, the way `SKIP` already reads review history.
+
+  Expect larger result sets and higher report counts for organizations that use customer
+  escalations. The same fix applies to the report list, the per-status counts, and the CSV
+  export, backed by changes in the private packages @chainpatrol/core, @chainpatrol/trpc,
+  and @chainpatrol/external-trpc. The generated MCP tool manifest picks up a new
+  description for the `reviewStatuses` argument spelling out which options read current
+  status and which read review history.
+
 ## 1.10.0
 
 ### Minor Changes

package/dist/{chunk-AHMNJBKL.js → chunk-JBDTADFL.js}

@@ -622,7 +622,7 @@ var tools_default = {
           },
           source: {
             type: "string",
-            description: "Detection source key, from `GET /detection/sources`. The source must support the `organization` scope; global-only sources cannot be configured per organization. One of 55 values, e.g. meta_ads_search, telegram_channels_search, telegram_user_search, telegram_channels_search_vetric, telegram_user_search_vetric, facebook_page_search_vetric, facebook_user_search_vetric, instagram_account_search_vetric. Full list: resource chainpatrol://enums/source"
+            description: "Detection source key, from `GET /detection/sources`. The source must support the `organization` scope; global-only sources cannot be configured per organization. One of 57 values, e.g. meta_ads_search, telegram_channels_search, telegram_user_search, telegram_channels_search_vetric, telegram_user_search_vetric, facebook_page_search_vetric, facebook_user_search_vetric, facebook_post_search_vetric. Full list: resource chainpatrol://enums/source"
           },
           status: {
             type: "string",
@@ -1023,7 +1023,7 @@ var tools_default = {
           },
           filters: {
             type: "array",
-            description: "Filters to apply to the results. Each clause filters on one property. Accepted values per property \u2014 `source`: One of 55 values, e.g. meta_ads_search, telegram_channels_search, telegram_user_search, telegram_channels_search_vetric, telegram_user_search_vetric, facebook_page_search_vetric, facebook_user_search_vetric, instagram_account_search_vetric. Full list: resource chainpatrol://enums/source; `confidence`: none, low, medium, high; `liveness`: UNKNOWN, ALIVE, DEAD; `watchlist`: ENABLED, DISABLED; `assetStatus`: UNKNOWN, ALLOWED, BLOCKED; `reported`: reported, not_reported; `assetType`: One of 92 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type; `brand`: number values; `deleted`: string values; `countryCode`: string values.",
+            description: "Filters to apply to the results. Each clause filters on one property. Accepted values per property \u2014 `source`: One of 57 values, e.g. meta_ads_search, telegram_channels_search, telegram_user_search, telegram_channels_search_vetric, telegram_user_search_vetric, facebook_page_search_vetric, facebook_user_search_vetric, facebook_post_search_vetric. Full list: resource chainpatrol://enums/source; `confidence`: none, low, medium, high; `liveness`: UNKNOWN, ALIVE, DEAD; `watchlist`: ENABLED, DISABLED; `assetStatus`: UNKNOWN, ALLOWED, BLOCKED; `reported`: reported, not_reported; `assetType`: One of 92 values, e.g. URL, PAGE, ADDRESS, DISCORD, LINKEDIN, TWITTER, FACEBOOK, YOUTUBE. Full list: resource chainpatrol://enums/asset_type; `brand`: number values; `deleted`: string values; `countryCode`: string values.",
             items: {
               type: "object",
               properties: {
@@ -3016,7 +3016,8 @@ var tools_default = {
                 "SKIP",
                 "ESCALATE"
               ]
-            }
+            },
+            description: "Filter to reports with at least one proposal matching any of these review outcomes. `APPROVE` and `REJECT` match the proposal's current review status. `SKIP` and `ESCALATE` match the review history, so a proposal that was escalated still matches after the escalation is answered."
           },
           assetTypes: {
             type: "array",
@@ -3111,7 +3112,7 @@ var tools_default = {
               type: "string",
               format: "uri"
             },
-            description: "URLs of images to attach to the report"
+            description: "URLs of files to attach to the report as evidence. Any file type, not only images: .eml/.msg messages, PDFs, and documents are all supported. Upload a file to POST /attachment/upload to get a URL, or pass a publicly reachable URL you host yourself."
           },
           externalSubmissionLink: {
             type: "string",
@@ -3165,7 +3166,7 @@ var tools_default = {
                     properties: {
                       type: {
                         type: "string",
-                        description: "Enrichment type One of 39 values, e.g. content_and_metadata, browser_capture, ownership_and_registration, geolocation_and_ip, dns, tls, tcp, post. Full list: resource chainpatrol://enums/asset_scan_enrichment_type"
+                        description: "Enrichment type One of 40 values, e.g. content_and_metadata, browser_capture, ownership_and_registration, geolocation_and_ip, dns, tls, tcp, post. Full list: resource chainpatrol://enums/asset_scan_enrichment_type"
                       },
                       source: {
                         type: "string",
@@ -3990,6 +3991,7 @@ var tools_default = {
         "linkedin_profile",
         "meta_ad",
         "google_ad",
+        "adlibrary_ad",
         "contract_deployer"
       ],
       usedBy: [
@@ -4115,6 +4117,7 @@ var tools_default = {
         "telegram_user_search_vetric",
         "facebook_page_search_vetric",
         "facebook_user_search_vetric",
+        "facebook_post_search_vetric",
         "instagram_account_search_vetric",
         "twitter_search_vetric",
         "linkedin_people_search_vetric",
@@ -4160,6 +4163,7 @@ var tools_default = {
         "linkedin_company_search",
         "bing_ads_search",
         "tik_tok_ads_search",
+        "adlibrary_ads_search",
         "dnsdb",
         "daily_motion_search",
         "watchlist"
@@ -4220,6 +4224,17 @@ function toErrorResult(error) {
     content: [{ type: "text", text: message }]
   };
 }
+var RESOURCE_HINT = "Where a parameter's description points at a `chainpatrol://` resource, read it before guessing a value.";
+function buildInstructions(tools, isNarrowed) {
+  if (!isNarrowed) {
+    return "ChainPatrol threat intelligence and brand protection. Every public API capability is available here as a tool: checking and searching assets, reports, proposals, detections, takedowns, metrics, healthchecks and organization management.\n\nMost tools are scoped to one organization. Credentials can reach more than one, and there is no implicit default, so call `user_orgs` first and pass the slug explicitly.\n\n" + RESOURCE_HINT;
+  }
+  const names = tools.map((tool) => tool.name).sort().join(", ");
+  const orgScoping = tools.some((tool) => tool.name === "user_orgs") ? "Most tools are scoped to one organization. Credentials can reach more than one, and there is no implicit default, so call `user_orgs` first and pass the slug explicitly.\n\n" : "These tools resolve their organization from the credential in use \u2014 there is no org slug to pass.\n\n";
+  return `ChainPatrol threat intelligence. This server exposes a narrowed set of tools: ${names}.
+
+${orgScoping}${RESOURCE_HINT}`;
+}
 function createChainPatrolMcpServer(options) {
   const tools = selectTools(options.only);
   const resources = buildResources(manifest, tools);
@@ -4228,6 +4243,7 @@ function createChainPatrolMcpServer(options) {
     tools.map((tool) => tool.name)
   );
   const byName = new Map(tools.map((tool) => [tool.name, tool]));
+  const isNarrowed = Boolean(options.only && options.only.length > 0);
   const server = new Server(
     {
       name: options.serverName ?? "chainpatrol",
@@ -4235,7 +4251,7 @@ function createChainPatrolMcpServer(options) {
     },
     {
       capabilities: { tools: {}, resources: {}, prompts: {} },
-      instructions: "ChainPatrol threat intelligence and brand protection. Every public API capability is available here as a tool: checking and searching assets, reports, proposals, detections, takedowns, metrics, healthchecks and organization management.\n\nMost tools are scoped to one organization. Credentials can reach more than one, and there is no implicit default, so call `user_orgs` first and pass the slug explicitly.\n\nWhere a parameter's description points at a `chainpatrol://` resource, read it before guessing a value."
+      instructions: buildInstructions(tools, isNarrowed)
     }
   );
   server.setRequestHandler(ListToolsRequestSchema, () => ({
@@ -4448,8 +4464,73 @@ function toolsFromEnvironment(env = process.env) {
   return names.length > 0 ? names : void 0;
 }
 
+// package.json
+var package_default = {
+  name: "@chainpatrol/mcp",
+  description: "The official ChainPatrol MCP server \u2014 every public API capability as an MCP tool",
+  author: "ChainPatrol <support@chainpatrol.io>",
+  version: "1.10.2",
+  license: "UNLICENSED",
+  homepage: "https://chainpatrol.com/docs/mcp",
+  keywords: [
+    "chainpatrol",
+    "mcp",
+    "model-context-protocol",
+    "agent"
+  ],
+  type: "module",
+  exports: {
+    ".": {
+      types: "./dist/index.d.ts",
+      import: "./dist/index.js"
+    },
+    "./config": {
+      types: "./dist/chainpatrol-config.d.ts",
+      import: "./dist/chainpatrol-config.js"
+    }
+  },
+  bin: {
+    "chainpatrol-mcp": "./dist/stdio-bin.js"
+  },
+  files: [
+    "./dist/**"
+  ],
+  publishConfig: {
+    access: "public",
+    provenance: false
+  },
+  scripts: {
+    build: "tsup",
+    dev: "tsup --watch",
+    "tools:generate": "tsx scripts/generate-tools.ts",
+    "tools:check": "tsx scripts/generate-tools.ts --check",
+    typecheck: "tsc --noEmit",
+    test: "vitest run --config vitest.config.unit.ts",
+    "lint:eslint": "eslint . --flag unstable_native_nodejs_ts_config --cache --cache-location .cache/.eslintcache",
+    lint: "npx oxlint ."
+  },
+  dependencies: {
+    "@modelcontextprotocol/sdk": "catalog:",
+    luxon: "catalog:",
+    zod: "catalog:"
+  },
+  devDependencies: {
+    "@chainpatrol/eslint-config": "workspace:*",
+    "@chainpatrol/external-trpc": "workspace:*",
+    "@chainpatrol/tsconfig": "workspace:*",
+    "@types/luxon": "catalog:",
+    "@types/node": "catalog:",
+    eslint: "catalog:",
+    tsup: "^8.5.0",
+    tsx: "catalog:",
+    typescript: "catalog:",
+    vitest: "catalog:",
+    "zod-to-json-schema": "^3.24.5"
+  }
+};
+
 // src/version.ts
-var PACKAGE_VERSION = "1.10.0";
+var PACKAGE_VERSION = package_default.version;
 
 export {
   PROMPTS,
@@ -4465,4 +4546,4 @@ export {
   toolsFromEnvironment,
   PACKAGE_VERSION
 };
-//# sourceMappingURL=chunk-AHMNJBKL.js.map
+//# sourceMappingURL=chunk-JBDTADFL.js.map