@cookiemunch/mcp 0.1.0 → 0.1.1

package/dist/bin.cjs

@@ -767,25 +767,33 @@ function registerTools(server, client) {
   tool("get_site_config", "Get the banner/consent configuration for a site.", { ...cbid }, (a) => client.sites.getConfig(a.cbid));
   tool(
     "update_site_config",
-    "Replace (overwrite) the banner/consent configuration for a site via PUT. This is destructive, not a merge: any top-level SiteConfig field you omit from `config` reverts to its default rather than keeping its current value. To change one setting, use patch_site_config instead \u2014 it merges server-side. Prefer the narrower set_* tools (set_blocking, set_banner_basics, etc.) when they cover your change.",
-    { ...cbid, config: import_zod3.z.record(import_zod3.z.unknown()).describe("The full SiteConfig to write, not a patch. Omitted top-level fields are NOT preserved from the current config \u2014 fetch get_site_config first and merge client-side.") },
-    (a) => client.sites.putConfig(a.cbid, a.config)
+    "Replace (overwrite) the banner/consent configuration for a site via PUT. This is destructive, not a merge: any top-level SiteConfig field you omit from `config` reverts to its default rather than keeping its current value \u2014 unless keepUnspecified is true, in which case omitted top-level fields keep their stored value and only the fields you send are replaced (each whole). A top-level field sent as null reverts to its default. To change one setting, use patch_site_config instead \u2014 it merges server-side. Prefer the narrower set_* tools (set_blocking, set_banner_basics, etc.) when they cover your change.",
+    {
+      ...cbid,
+      config: import_zod3.z.record(import_zod3.z.unknown()).describe("The full SiteConfig to write, not a patch. Without keepUnspecified, omitted top-level fields are NOT preserved from the current config."),
+      keepUnspecified: import_zod3.z.boolean().optional().describe("PUT ?keep=unspecified: keep the stored value of every top-level field `config` omits, instead of reverting it to its default.")
+    },
+    (a) => a.keepUnspecified === true ? client.sites.putConfig(a.cbid, a.config, { keep: "unspecified" }) : client.sites.putConfig(a.cbid, a.config)
   );
   tool(
     "patch_site_config",
-    "Change part of a site's banner/consent configuration. The patch is deep-merged over the stored config server-side, so any field you omit keeps its current value \u2014 this is the safe way to flip one setting, and it needs no read-modify-write. Use update_site_config only when you genuinely mean to replace the whole document.",
-    { ...cbid, config: import_zod3.z.record(import_zod3.z.unknown()).describe('The subset of SiteConfig to change, e.g. { "banner": { "showRightsLink": true } }. Everything else is preserved.') },
+    `Change part of a site's banner/consent configuration. The patch is a JSON Merge Patch (RFC 7386) over the stored config server-side: any field you omit keeps its current value, and a field set to null is REMOVED (it falls back to its default) \u2014 e.g. { "banner": { "i18n": { "es": null } } } drops the Spanish override. This is the safe way to flip one setting, and it needs no read-modify-write. Use update_site_config only when you genuinely mean to replace the whole document.`,
+    { ...cbid, config: import_zod3.z.record(import_zod3.z.unknown()).describe('The subset of SiteConfig to change, e.g. { "banner": { "showRightsLink": true } }. Everything else is preserved; null removes a field.') },
     (a) => client.sites.patchConfig(a.cbid, a.config)
   );
   tool(
     "preview_site_config",
-    'Preview a config change WITHOUT saving it: returns the config as it would be saved, a diff of every field that would change, and any warnings (plan-gated or unrecognised fields). mode "patch" (default) previews patch_site_config; mode "put" previews update_site_config, and its diff lists everything a replace would revert to its default. Use it before any write you are not sure of.',
+    'Preview a config change WITHOUT saving it: returns the config as it would be saved, a diff of every field that would change, and any warnings (plan-gated or unrecognised fields). mode "patch" (default) previews patch_site_config; mode "put" previews update_site_config, and its diff lists everything a replace would revert to its default (unless keepUnspecified is true). Use it before any write you are not sure of.',
     {
       ...cbid,
       config: import_zod3.z.record(import_zod3.z.unknown()).describe('The patch (or, with mode "put", the full config) to preview.'),
-      mode: import_zod3.z.enum(["patch", "put"]).optional().describe("patch (default) merges; put replaces.")
+      mode: import_zod3.z.enum(["patch", "put"]).optional().describe("patch (default) merges; put replaces."),
+      keepUnspecified: import_zod3.z.boolean().optional().describe('With mode "put": preview update_site_config with keepUnspecified (omitted top-level fields keep their stored value).')
     },
-    (a) => client.sites.dryRunConfig(a.cbid, a.config, { mode: a.mode ?? "patch" })
+    (a) => client.sites.dryRunConfig(a.cbid, a.config, {
+      mode: a.mode ?? "patch",
+      ...a.keepUnspecified === true ? { keep: "unspecified" } : {}
+    })
   );
   tool(
     "verify_consent_log",
@@ -873,6 +881,12 @@ function registerTools(server, client) {
       return { deleted: a.id };
     }
   );
+  tool(
+    "mark_dsar_test",
+    "Mark a CLOSED rights request (completed or rejected) as a test request, after the fact \u2014 for trial requests filed before test: true existed. An open request is refused (request_not_closed), so a live obligation can never be relabelled. Recorded in the audit log; afterwards delete_test_dsar can remove it. Returns { request, changed }.",
+    { id: import_zod3.z.string().describe("The closed request id.") },
+    (a) => client.dsar.markTest(a.id)
+  );
   tool(
     "advance_dsar",
     "Advance a DSAR to a new status (received \u2192 verifying \u2192 in_progress \u2192 completed, or rejected).",
@@ -1179,6 +1193,44 @@ function registerTools(server, client) {
     { cbid: import_zod3.z.string(), data: import_zod3.z.string().describe("The exported file, as text (CSV or JSON).") },
     (a) => client.sites.importDeclaration(a.cbid, a.data)
   );
+  tool(
+    "apply_cookie_import",
+    "Import a cookie declaration exported from another CMP AND declare it: every row whose category mapped to ours and that has a purpose becomes a site declaration; the rest come back in `skipped` with the reason. Cookies the site already declared are kept unless overwrite is true. Prefer import_cookie_declaration first to review.",
+    { cbid: import_zod3.z.string(), data: import_zod3.z.string().describe("The exported file, as text (CSV or JSON)."), overwrite: import_zod3.z.boolean().optional() },
+    (a) => client.sites.applyImport(a.cbid, a.data, a.overwrite ? { overwrite: true } : void 0)
+  );
+  const declarationShape = {
+    category: import_zod3.z.string().describe("necessary, preferences, statistics, marketing, or one of the site\u2019s categories.custom ids."),
+    purpose: import_zod3.z.string().describe("What the cookie does, as visitors will read it."),
+    provider: import_zod3.z.string().optional(),
+    expiry: import_zod3.z.string().optional().describe('e.g. "Session", "30 days", "1 year" (the banner localises these forms).'),
+    domain: import_zod3.z.string().optional(),
+    pattern: import_zod3.z.boolean().optional().describe("Treat the name as a prefix wildcard (a trailing * does the same).")
+  };
+  tool(
+    "declare_cookie",
+    'Declare what one of the site\u2019s cookies is. Overrides the scanner, observed visits and the cookie database everywhere the declaration is shown (API, preference modal, data-cc="declaration"). Use for the site\u2019s own cookies the database cannot know. A name ending in * covers every cookie with that prefix.',
+    { cbid: import_zod3.z.string(), name: import_zod3.z.string(), ...declarationShape },
+    (a) => {
+      const { cbid: cbid2, name, ...rest } = a;
+      return client.sites.declareCookie(cbid2, name, rest);
+    }
+  );
+  tool(
+    "declare_cookies",
+    "Declare many cookies at once. All-or-nothing: one invalid item refuses the whole request and nothing is saved. replace: true also removes every declaration the list does not name.",
+    { cbid: import_zod3.z.string(), cookies: import_zod3.z.array(import_zod3.z.object({ name: import_zod3.z.string(), ...declarationShape })).max(500), replace: import_zod3.z.boolean().optional() },
+    (a) => client.sites.declareCookies(a.cbid, a.cookies, a.replace ? { replace: true } : void 0)
+  );
+  tool(
+    "undeclare_cookie",
+    "Remove a cookie declaration; the scanned/observed classification applies again.",
+    { cbid: import_zod3.z.string(), name: import_zod3.z.string() },
+    async (a) => {
+      await client.sites.undeclareCookie(a.cbid, a.name);
+      return { undeclared: a.name };
+    }
+  );
   tool(
     "get_blocked_pages",
     "Pages where the embed could not load its banner renderer \u2014 the page\u2019s Content Security Policy or Trusted Types policy refused it, so nobody there can be asked for consent. An empty list is healthy. Read-only.",