@fruggr/zendesk-mcp-server 3.4.0 → 3.5.0

package/README.md

@@ -224,13 +224,16 @@ clients, MCP client wiring, CORS and what stays the operator's job:
 ## Tool surface
 
 Tools are grouped into namespaces: **Tickets**, **Help Center**, **Users &
-Organizations**, **Search**, and **Requests** — the end-user surface, which is
-opt-in and covered under [End-user mode](#end-user-mode). The server registers
+Organizations**, **Search**, **Connector preferences** — this server's own
+per-user settings, such as SLA alert thresholds, never written to Zendesk — and
+**Requests** — the end-user surface, which is opt-in and covered under
+[End-user mode](#end-user-mode). The server registers
 them in one of three modes, so you can trade granularity against context budget:
 
 - **`all`**: every operation as its own tool, for clients with good tool selection;
 - **`namespace`** (default): one proxy tool per namespace, a balanced middle ground;
-- **`single`**: a single `zendesk` tool, for models with limited tool slots.
+- **`single`**: a single `zendesk` tool, for models with limited tool slots (the
+  connector's own preferences keep their `connector_preferences` proxy beside it).
 
 Proxies take `{ "operation": "<tool_name>", "params": { … } }` and validate
 `params` through the original schema. `--namespace`, `--tool` and `--read-only`

package/dist/THIRD-PARTY-NOTICES.md

@@ -5198,7 +5198,7 @@ The above copyright notice and this permission notice shall be included in all c
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 ```
 
-## zod@4.6.6
+## zod@4.6.7
 
 License: MIT
 

package/dist/{http-DU1dSrPe.js → http-DDdso3Av.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { C as __exportAll, S as __commonJSMin, T as __toESM, _ as OAuthErrorCode, a as silentLogger, b as errnoCode, c as deadlineSignal, d as DEFAULT_MAX_REQUEST_BODY_SIZE, f as WebStandardStreamableHTTPServerTransport, g as OAuthError, h as verifyBearerToken, m as isLegacyRequest, n as defaultServerFactory, o as zendeskGet, p as createMcpHandler, r as createRequestStateCodec, s as REQUEST_TIMEOUT_MS, t as createServerCaches, u as getOAuthUrls, v as STARTUP_DOCS, w as __require, y as createStartupError } from "./index.js";
-import { d as escapeHtml, l as requestedScope, n as configDir, o as generateCodeChallenge, s as generateCodeVerifier, u as supportedScopes } from "./token-persistence-r0v9RO3q.js";
+import { A as __commonJSMin, C as isLegacyRequest, D as STARTUP_DOCS, E as OAuthErrorCode, M as __require, N as __toESM, O as createStartupError, S as createMcpHandler, T as OAuthError, _ as deadlineSignal, a as watchGrantAlerts, b as DEFAULT_MAX_REQUEST_BODY_SIZE, c as configDir, g as REQUEST_TIMEOUT_MS, h as zendeskGet, i as defaultServerFactory, j as __exportAll, k as errnoCode, m as silentLogger, n as listenedUris, o as startSlaRuntime, p as createRequestStateCodec, r as createServerCaches, t as createListenFeed, w as verifyBearerToken, x as WebStandardStreamableHTTPServerTransport, y as getOAuthUrls } from "./index.js";
+import { a as supportedScopes, i as requestedScope, n as generateCodeVerifier, o as escapeHtml, t as generateCodeChallenge } from "./pkce-DE_v9NQy.js";
 import * as util$1 from "node:util";
 import { format, inspect } from "node:util";
 import * as crypto$2 from "node:crypto";
@@ -36703,7 +36703,6 @@ const sendUnauthorized = (res, issuer) => {
 	sendJsonRpcError(res, 401, -32e3, MISSING_BEARER_MESSAGE, { "WWW-Authenticate": wwwAuthenticate });
 };
 const asNodeRequest = (req) => req;
-const isListenRequest = (body) => typeof body === "object" && body !== null && body.method === "subscriptions/listen";
 const MAX_BODY_BYTES = 4194304;
 const readJsonBody = (req, maxBodyBytes) => new Promise((resolve) => {
 	const chunks = [];
@@ -36772,6 +36771,7 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 	const buildAuthorizationServer = await prepareAuthorizationServer(config, logger);
 	let authorizationServer;
 	const sessions = /* @__PURE__ */ new Map();
+	const sla = startSlaRuntime(config);
 	const idleTimeoutMs = options.sessionIdleTimeoutMs ?? SESSION_IDLE_TIMEOUT_MS;
 	const maxBodyBytes = options.maxBodyBytes ?? 4194304;
 	const serverFactory = options.serverFactory ?? defaultServerFactory;
@@ -36807,6 +36807,7 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 			getToken: () => auth.zendeskToken,
 			logger,
 			onUnauthorized: () => void as.revokeGrant(auth.grantId),
+			slaRuntime: sla.runtime,
 			requestStateCodec: createRequestStateCodec({
 				key: as.requestStateKey,
 				principal: () => auth.grantId
@@ -36860,18 +36861,36 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 				onUnauthorized,
 				caches,
 				requestStateCodec,
+				slaRuntime: sla.runtime,
+				alertPolling: "grant",
 				notifyResourceUpdated: (uri) => handler.notify.resourceUpdated(uri)
 			});
 		}, {
 			legacy: "reject",
 			onerror: (err) => logger.debug("mcp_request_rejected", { error: err.message })
 		});
+		const listens = createListenFeed();
+		const stopAlerts = watchGrantAlerts({
+			config,
+			getToken,
+			caches,
+			slaRuntime: sla.runtime,
+			logger,
+			listens,
+			notify: (uri) => handler.notify.resourceUpdated(uri),
+			onUnauthorized
+		});
 		const entry = {
 			auth,
 			revoked: false,
 			inFlight: 0,
+			listens,
 			handle: toNodeHandler(handler),
-			close: () => handler.close()
+			close: () => {
+				stopAlerts();
+				listens.closeAll();
+				return handler.close();
+			}
 		};
 		return entry;
 	};
@@ -36890,7 +36909,13 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 			expiresAt: token.expiresAt,
 			extra: { verified: token }
 		};
-		const counted = !isListenRequest(body);
+		const listened = listenedUris(body);
+		const counted = listened === void 0;
+		if (listened) {
+			const stream = Symbol("listen");
+			res.once("close", () => entry.listens.close(stream));
+			entry.listens.open(stream, listened);
+		}
 		if (counted) entry.inFlight += 1;
 		try {
 			await entry.handle(request, res, body);
@@ -37004,6 +37029,7 @@ const startHttpTransport = async (config, logger = silentLogger, options = {}) =
 		port: boundPort,
 		close: async () => {
 			clearInterval(sweeper);
+			sla.stop();
 			await Promise.all([...sessions.values()].map((session) => session.close()));
 			sessions.clear();
 			await grants.closeAll();