@edda-business/mcp 0.58.0 → 0.60.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edda-business/mcp",
-  "version": "0.58.0",
+  "version": "0.60.0",
   "description": "Edda — the company data layer for AI agents.",
   "license": "Apache-2.0",
   "repository": {

package/src/server.js

@@ -13,7 +13,8 @@
  * Tools, by group (v0.56 — consolidated, Cerebras-style):
  *   RETRIEVE  search (unified, scope=all|company|personal|notes) · get_context ·
  *             get_account · who_knows · query · attention · verify
- *   WRITE     save_note · save_to_vault · update_vault_file · propose_company_file
+ *   WRITE     save_note · save_to_vault · update_vault_file · propose_company_file ·
+ *             propose_company_files (bulk) · create_folder
  *   FIX       merge_contacts (action=merge|split)
  *   RUN       list_integrations · connect_integration
  *
@@ -26,7 +27,7 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
 import { get, post, del } from "./client.js";
 
-export const SERVER_VERSION = "0.58.0";
+export const SERVER_VERSION = "0.60.0";
 
 // ─── helpers ──────────────────────────────────────────────────────────────────
 
@@ -691,44 +692,45 @@ export function createServer() {
   );
 
   // ===========================================================================
-  // TOOL: propose_company_file  —  POST /v2/company/propose
+  // TOOL: propose_company_file  —  POST /v2/company/pages
   // The WRITE side of the company vault (search_company_knowledge is the read side).
-  // Admin-only: only an owner/admin may add to the shared knowledge; a member's agent
-  // can read the company vault but gets a permission message here.
+  // Writes an in-app company page directly (no GitHub). Members with a write role
+  // publish it live; viewers land it in the company inbox for an admin to approve.
   // ===========================================================================
   server.tool(
     "propose_company_file",
-    "Propose a markdown file for the SHARED COMPANY vault — the workspace's declared knowledge " +
+    "Add a markdown page to the SHARED COMPANY vault — the workspace's declared knowledge " +
     "(policies, playbooks, decisions, SOPs, how-we-work) that every member's agent can read via " +
-    "search_company_knowledge. This OPENS A PULL REQUEST against the connected company repo for a " +
-    "human to review and merge in GitHub — nothing goes live until it's merged (company knowledge " +
-    "is shared + institutional, so review-before-publish is the default; on merge the normal git " +
-    "sync ingests it). Use it to contribute company-wide knowledge. ADMIN-ONLY: only an owner/admin " +
-    "may propose; a regular member's agent can READ the vault but gets a permission message here. " +
-    "NOT the member's private notes (use propose_vault_file), NOT a note on a contact (use save_note).",
+    "search_company_knowledge. This writes the page IN-APP: a member with a write role publishes " +
+    "it live immediately; a viewer's page lands in the company inbox for an admin to approve. File " +
+    "it with `folder` — a name or path like 'Projects/Data Centre' (created if missing) — plus an " +
+    "optional `subfolder`. Set `visibility` to scope who sees it: 'department' (the team it's filed " +
+    "in — the default), 'company' (everyone), or 'owner' (just you). A page in a project inherits the " +
+    "project's Shared-with setting for OTHER departments. To add many pages at once, use " +
+    "propose_company_files. NOT the member's private vault (use save_to_vault), NOT a contact note (save_note).",
     {
-      folder: z.string().describe("The company-vault folder to file under (e.g. 'company-wiki', 'decisions', 'projects', 'clients'). Must be an existing company folder; no slashes."),
-      name: z.string().describe("The file name, ending in .md, e.g. 'Refund Policy.md' or 'Q3 Planning — 2026-08-22.md'."),
-      content: z.string().describe("The full markdown content of the file."),
-      subfolder: z.string().optional().describe("Optional subfolder within the folder."),
-      message: z.string().optional().describe("Optional PR title / commit message describing the change."),
-      pr_group: z.string().optional().describe("Optional key to batch several proposals from one work session into a SINGLE pull request (same key → same PR)."),
+      name: z.string().describe("The page name, e.g. 'Refund Policy' or 'Q3 Planning — 2026-08-22'. A '.md' suffix is added if missing."),
+      content: z.string().describe("The full markdown content of the page."),
+      visibility: z.enum(["owner", "department", "company"]).optional().describe("Who can see the page: 'department' (the team it's filed in — default), 'company' (everyone), or 'owner' (just you)."),
+      folder: z.string().optional().describe("Folder to file under, by NAME or path, e.g. 'Projects/Data Centre'. Created if it doesn't exist (needs a write role). Use this OR folder_id."),
+      subfolder: z.string().optional().describe("Optional subfolder within `folder`, e.g. 'Specs'."),
+      folder_id: z.string().optional().describe("Id of an existing company folder to file under (alternative to `folder`). Omit both to use the default 'wiki' folder."),
     },
-    async ({ folder, name, content, subfolder, message, pr_group }) => {
+    async ({ name, content, visibility, folder, subfolder, folder_id }) => {
       try {
-        const r = await post("/v2/company/propose", { folder, name, content, subfolder, message, pr_group });
-        const how = r?.added_to_existing ? "added to the open PR" : "opened a pull request";
-        return { content: [{ type: "text", text: `Proposed "${name}" — ${how}${r?.pr_url ? `: ${r.pr_url}` : ""}. Review the diff and merge it in GitHub to publish into company knowledge.` }] };
+        const r = await post("/v2/company/pages", { name, content, visibility, folder, subfolder, folder_id });
+        const live = r?.page?.status === "live";
+        const where = live
+          ? `published live to the company vault — searchable now`
+          : `sent to the company inbox for an admin to approve`;
+        return { content: [{ type: "text", text: `"${r?.page?.name ?? name}" ${where}.` }] };
       } catch (e) {
         const msg = String(e?.message || e);
-        if (msg.includes("admins_only") || msg.includes("(403)")) {
-          return { content: [{ type: "text", text: `Not proposed — writing to the company vault is admin-only. You can READ it with search_company_knowledge, but only an owner/admin can propose changes.` }] };
-        }
-        if (msg.includes("no_company_repo")) {
-          return { content: [{ type: "text", text: `Not proposed — no company GitHub repo is connected. An admin connects one under Company vault first.` }] };
+        if (msg.includes("forbidden") || msg.includes("(403)")) {
+          return { content: [{ type: "text", text: `Not saved — you don't have access to write to this company vault.` }] };
         }
-        if (msg.includes("repo_write_denied")) {
-          return { content: [{ type: "text", text: `Not proposed — the connected repo token is read-only. An admin must reconnect it with Contents:write + Pull requests:write.` }] };
+        if (msg.includes("bad_folder")) {
+          return { content: [{ type: "text", text: `Not saved — that folder_id isn't a company folder in this workspace. Omit it to use the default 'wiki' folder.` }] };
         }
         throw e;
       }
@@ -736,6 +738,69 @@ export function createServer() {
   );
 
 
+  // ===========================================================================
+  // TOOL: create_folder  —  POST /v2/company/folders { path }
+  // Create a folder / nested path in the shared company tree so pages can be filed into it.
+  // ===========================================================================
+  server.tool(
+    "create_folder",
+    "Create a folder (or a nested path) in the SHARED COMPANY knowledge tree so you can file pages into it. " +
+    "Pass `path` as a name or slash-path, e.g. 'Projects/Data Centre' — every missing level is created. A " +
+    "folder directly under 'Projects' becomes a project (it gets a 'Shared with' control the Ambassador uses " +
+    "to grant departments). A write role is required and the folder appears immediately. Then add pages with " +
+    "propose_company_file / propose_company_files using the same `folder` path. Returns the folder id.",
+    { path: z.string().describe("Folder name or path, e.g. 'Projects/Data Centre' or 'Playbooks'.") },
+    async ({ path }) => {
+      try {
+        const r = await post("/v2/company/folders", { path });
+        const made = r?.created?.length ? ` (created ${r.created.join(" / ")})` : " (already existed)";
+        return { content: [{ type: "text", text: `Folder "${r?.folder?.name ?? path}" ready${made}. folder_id: ${r?.folder?.id ?? "?"}` }] };
+      } catch (e) {
+        const msg = String(e?.message || e);
+        if (msg.includes("read_only") || msg.includes("(403)")) return { content: [{ type: "text", text: "You don't have a write role in this company vault, so you can't create folders here." }] };
+        if (msg.includes("bad_path")) return { content: [{ type: "text", text: "Couldn't create that path — give a folder name or 'Parent/Child' path." }] };
+        throw e;
+      }
+    },
+  );
+
+  // ===========================================================================
+  // TOOL: propose_company_files  —  POST /v2/company/pages/batch
+  // Bulk-add many pages into ONE company folder (resolved/created once).
+  // ===========================================================================
+  server.tool(
+    "propose_company_files",
+    "Add MANY markdown pages to the shared company vault in ONE call — all into the SAME folder (resolved or " +
+    "created once). Use it to bulk-file: 'put these 10 docs in Data Centre'. Same rules as propose_company_file: " +
+    "a write role publishes them live; a viewer sends the whole batch to the company inbox. Name the target with " +
+    "`folder` (a path, created if missing) + optional `subfolder`, or an existing `folder_id`. Max 50 pages.",
+    {
+      folder: z.string().optional().describe("Folder path to file all pages under, e.g. 'Projects/Data Centre'. Created if missing."),
+      subfolder: z.string().optional().describe("Optional subfolder within `folder`."),
+      folder_id: z.string().optional().describe("Id of an existing folder (alternative to `folder`)."),
+      visibility: z.enum(["owner", "department", "company"]).optional().describe("Default visibility for the pages (a page can override its own). Default 'department'."),
+      pages: z.array(z.object({
+        name: z.string().describe("Page name."),
+        content: z.string().optional().describe("Markdown content."),
+        visibility: z.enum(["owner", "department", "company"]).optional().describe("Optional per-page visibility."),
+      })).describe("The pages to add: each { name, content, visibility? }."),
+    },
+    async ({ folder, subfolder, folder_id, visibility, pages }) => {
+      try {
+        const r = await post("/v2/company/pages/batch", { folder, subfolder, folder_id, visibility, pages });
+        const where = r?.status === "live" ? "published live — searchable now" : "sent to the company inbox for an admin to approve";
+        return { content: [{ type: "text", text: `${r?.count ?? 0} page(s) ${where} in "${r?.folder ?? folder ?? "wiki"}".` }] };
+      } catch (e) {
+        const msg = String(e?.message || e);
+        if (msg.includes("forbidden") || msg.includes("(403)")) return { content: [{ type: "text", text: "You don't have access to write to this company vault." }] };
+        if (msg.includes("bad_folder")) return { content: [{ type: "text", text: "That folder path couldn't be resolved or created — check the name, or pass folder_id." }] };
+        if (msg.includes("too_many")) return { content: [{ type: "text", text: "Too many pages — max 50 per call. Split into batches." }] };
+        if (msg.includes("pages_required")) return { content: [{ type: "text", text: "Give at least one page ({ name, content })." }] };
+        throw e;
+      }
+    },
+  );
+
   // ===========================================================================
   // TOOL: connect_integration  —  POST /v2/workspace/integrations
   // The agent connects a KEY-BASED integration for the user (no clicking through