@edda-business/mcp 0.58.0 → 0.59.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edda-business/mcp",
-  "version": "0.58.0",
+  "version": "0.59.0",
   "description": "Edda — the company data layer for AI agents.",
   "license": "Apache-2.0",
   "repository": {

package/src/server.js

@@ -691,44 +691,41 @@ export function createServer() {
   );
 
   // ===========================================================================
-  // TOOL: propose_company_file  —  POST /v2/company/propose
+  // TOOL: propose_company_file  —  POST /v2/company/pages
   // The WRITE side of the company vault (search_company_knowledge is the read side).
-  // Admin-only: only an owner/admin may add to the shared knowledge; a member's agent
-  // can read the company vault but gets a permission message here.
+  // Writes an in-app company page directly (no GitHub). Members with a write role
+  // publish it live; viewers land it in the company inbox for an admin to approve.
   // ===========================================================================
   server.tool(
     "propose_company_file",
-    "Propose a markdown file for the SHARED COMPANY vault — the workspace's declared knowledge " +
+    "Add a markdown page to the SHARED COMPANY vault — the workspace's declared knowledge " +
     "(policies, playbooks, decisions, SOPs, how-we-work) that every member's agent can read via " +
-    "search_company_knowledge. This OPENS A PULL REQUEST against the connected company repo for a " +
-    "human to review and merge in GitHub — nothing goes live until it's merged (company knowledge " +
-    "is shared + institutional, so review-before-publish is the default; on merge the normal git " +
-    "sync ingests it). Use it to contribute company-wide knowledge. ADMIN-ONLY: only an owner/admin " +
-    "may propose; a regular member's agent can READ the vault but gets a permission message here. " +
-    "NOT the member's private notes (use propose_vault_file), NOT a note on a contact (use save_note).",
+    "search_company_knowledge. This writes the page IN-APP: a member with a write role publishes " +
+    "it live immediately; a viewer's page lands in the company inbox for an admin to approve. Set " +
+    "`visibility` to scope who sees it — 'company' (everyone, the default), 'department' (the team), " +
+    "or 'owner' (just you). Use it to contribute company-wide knowledge. " +
+    "NOT the member's private vault (use save_to_vault), NOT a note on a contact (use save_note).",
     {
-      folder: z.string().describe("The company-vault folder to file under (e.g. 'company-wiki', 'decisions', 'projects', 'clients'). Must be an existing company folder; no slashes."),
-      name: z.string().describe("The file name, ending in .md, e.g. 'Refund Policy.md' or 'Q3 Planning — 2026-08-22.md'."),
-      content: z.string().describe("The full markdown content of the file."),
-      subfolder: z.string().optional().describe("Optional subfolder within the folder."),
-      message: z.string().optional().describe("Optional PR title / commit message describing the change."),
-      pr_group: z.string().optional().describe("Optional key to batch several proposals from one work session into a SINGLE pull request (same key → same PR)."),
+      name: z.string().describe("The page name, e.g. 'Refund Policy' or 'Q3 Planning — 2026-08-22'. A '.md' suffix is added if missing."),
+      content: z.string().describe("The full markdown content of the page."),
+      visibility: z.enum(["owner", "department", "company"]).optional().describe("Who can see the page: 'company' (everyone — default), 'department' (the team), or 'owner' (just you)."),
+      folder_id: z.string().optional().describe("Optional id of an existing company folder to file under. Omit to land it in the default 'wiki' folder."),
     },
-    async ({ folder, name, content, subfolder, message, pr_group }) => {
+    async ({ name, content, visibility, folder_id }) => {
       try {
-        const r = await post("/v2/company/propose", { folder, name, content, subfolder, message, pr_group });
-        const how = r?.added_to_existing ? "added to the open PR" : "opened a pull request";
-        return { content: [{ type: "text", text: `Proposed "${name}" — ${how}${r?.pr_url ? `: ${r.pr_url}` : ""}. Review the diff and merge it in GitHub to publish into company knowledge.` }] };
+        const r = await post("/v2/company/pages", { name, content, visibility: visibility ?? "company", folder_id });
+        const live = r?.page?.status === "live";
+        const where = live
+          ? `published live to the company vault — searchable now`
+          : `sent to the company inbox for an admin to approve`;
+        return { content: [{ type: "text", text: `"${r?.page?.name ?? name}" ${where}.` }] };
       } catch (e) {
         const msg = String(e?.message || e);
-        if (msg.includes("admins_only") || msg.includes("(403)")) {
-          return { content: [{ type: "text", text: `Not proposed — writing to the company vault is admin-only. You can READ it with search_company_knowledge, but only an owner/admin can propose changes.` }] };
-        }
-        if (msg.includes("no_company_repo")) {
-          return { content: [{ type: "text", text: `Not proposed — no company GitHub repo is connected. An admin connects one under Company vault first.` }] };
+        if (msg.includes("forbidden") || msg.includes("(403)")) {
+          return { content: [{ type: "text", text: `Not saved — you don't have access to write to this company vault.` }] };
         }
-        if (msg.includes("repo_write_denied")) {
-          return { content: [{ type: "text", text: `Not proposed — the connected repo token is read-only. An admin must reconnect it with Contents:write + Pull requests:write.` }] };
+        if (msg.includes("bad_folder")) {
+          return { content: [{ type: "text", text: `Not saved — that folder_id isn't a company folder in this workspace. Omit it to use the default 'wiki' folder.` }] };
         }
         throw e;
       }