@fruggr/zendesk-mcp-server 3.5.3 → 3.6.0

package/dist/{http-DLa2DU80.js → http-DkjvhtQj.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { i as __toESM, n as __exportAll, r as __require, t as __commonJSMin } from "./rolldown-runtime-BbXq-jo1.js";
-import { A as createStartupError, C as WebStandardStreamableHTTPServerTransport, D as OAuthError, E as verifyBearerToken, O as OAuthErrorCode, S as DEFAULT_MAX_REQUEST_BODY_SIZE, T as isLegacyRequest, _ as zendeskGet, a as toolEnv, g as createAllTools, h as silentLogger, i as defaultServerFactory, j as errnoCode, k as STARTUP_DOCS, l as configDir, m as createRequestStateCodec, n as listenedUris, o as watchGrantAlerts, r as createServerCaches, s as startSlaRuntime, t as createListenFeed, v as REQUEST_TIMEOUT_MS, w as createMcpHandler, x as getOAuthUrls, y as deadlineSignal } from "./index.js";
+import { A as STARTUP_DOCS, C as WebStandardStreamableHTTPServerTransport, D as OAuthError, E as verifyBearerToken, M as errnoCode, O as OAuthErrorCode, S as DEFAULT_MAX_REQUEST_BODY_SIZE, T as isLegacyRequest, _ as zendeskGet, a as toolEnv, g as createAllTools, h as silentLogger, i as defaultServerFactory, j as createStartupError, k as compareCodeUnits, l as configDir, m as createRequestStateCodec, n as listenedUris, o as watchGrantAlerts, r as createServerCaches, s as startSlaRuntime, t as createListenFeed, v as REQUEST_TIMEOUT_MS, w as createMcpHandler, x as getOAuthUrls, y as deadlineSignal } from "./index.js";
 import { a as supportedScopes, i as requestedScope, n as generateCodeVerifier, o as escapeHtml, t as generateCodeChallenge } from "./pkce-DE_v9NQy.js";
 import * as util from "node:util";
 import { format, inspect } from "node:util";
@@ -2816,7 +2816,7 @@ const EXPIRED = "This sign-in has expired or was opened in another browser. Star
 const consentMemoryKey = (accountId, clientId, redirectUris) => createHash("sha256").update(JSON.stringify([
 	accountId,
 	clientId,
-	[...redirectUris].sort()
+	[...redirectUris].sort(compareCodeUnits)
 ])).digest("base64url");
 const isExpiredLink = (err) => err instanceof Error && (err.name === "SessionNotFound" || err.name === "InvalidRequest");
 const UID = /^[\w-]{1,64}$/;

package/dist/index.js

@@ -7630,6 +7630,14 @@ const isStartupError = (err) => err instanceof Error && err.name === "StartupErr
 /** The errno code of a failed filesystem call, for the message. */
 const errnoCode = (err) => err?.code ?? "unknown error";
 //#endregion
+//#region src/utils/compare.ts
+/**
+* Orders strings by UTF-16 code unit, which is what a bare `.sort()` does.
+* Not `localeCompare`: an order that feeds a hash or a stored key must not move
+* with the runtime's locale data.
+*/
+const compareCodeUnits = (a, b) => Number(a > b) - Number(a < b);
+//#endregion
 //#region src/utils/validation.ts
 const formatPath = (path) => path.map(String).join(".");
 const formatIssue$1 = (issue) => issue.path.length > 0 ? `${formatPath(issue.path)}: ${issue.message}` : issue.message;
@@ -7651,7 +7659,7 @@ const keysAt = (node, path) => {
 	const child = typeof head === "number" ? def.element : def.shape?.[String(head)];
 	return child && keysAt(child, rest);
 };
-const keyList = (keys) => [...keys].sort().join(", ") || "(none)";
+const keyList = (keys) => [...keys].sort(compareCodeUnits).join(", ") || "(none)";
 /** One sentence per object holding unknown keys, the top level first. */
 const unknownKeysMessage = (schema, issues, topLevelKeys) => [...issues].sort((a, b) => a.path.length - b.path.length).map(({ path, keys }) => {
 	if (path.length === 0) return `Unknown parameter(s): ${keys.join(", ")}. Valid parameters: ${topLevelKeys}.`;
@@ -30832,10 +30840,11 @@ const fetchAllPages = async ({ subdomain, token, tool, path, extract, params = {
 	const items = [];
 	let page = 1;
 	while (true) {
-		const response = await withForbiddenGuidance(tool, `GET ${path}`, () => zendeskGet(subdomain, token, path, {
+		const query = {
 			...params,
 			...buildOffsetParams(100, page)
-		}), forbiddenHint);
+		};
+		const response = await withForbiddenGuidance(tool, `GET ${path}`, () => zendeskGet(subdomain, token, path, query), forbiddenHint);
 		items.push(...extract(response) ?? []);
 		onPage?.(response);
 		if (!response.next_page) return items;
@@ -31273,70 +31282,6 @@ const createRequestTools = (env) => {
 	];
 };
 //#endregion
-//#region src/tools/search.ts
-const formatSearchResult = (result) => {
-	const lines = [`## [${result["result_type"]}] #${result["id"]}`];
-	if (result["subject"]) lines.push(`**Subject**: ${result["subject"]}`);
-	if (result["name"]) lines.push(`**Name**: ${result["name"]}`);
-	if (result["title"]) lines.push(`**Title**: ${result["title"]}`);
-	if (result["email"]) lines.push(`**Email**: ${result["email"]}`);
-	if (result["status"]) lines.push(`**Status**: ${result["status"]}`);
-	if (result["description"]) lines.push(descriptionExcerpt(String(result["description"])));
-	return lines.join("\n");
-};
-const createSearchTools = (env) => {
-	const { subdomain } = env;
-	return [{
-		name: "search",
-		namespace: "tickets",
-		readOnly: true,
-		title: "Zendesk Unified Search",
-		description: "Search across tickets, users, and organizations. Supports filters like \"type:ticket status:open\", \"type:user role:agent\". Returns total count and paginated results (25 per page by default, up to 100); a ticket description is cut to a 200-character excerpt, which get_ticket returns in full. Organization results include name and ID only — use get_organization for full details (tags, domains, details).",
-		inputSchema: object({
-			query: string().min(1).describe("Zendesk search query. Supports type/status/role filters (e.g. \"type:ticket status:open\", \"type:user role:agent\") and free text; omit a type filter to search tickets, users and organizations at once."),
-			per_page: number$1().int().min(1).max(100).default(25).describe(PER_PAGE_DESC),
-			page: number$1().int().min(1).default(1).describe(PAGE_DESC)
-		}),
-		annotations: {
-			readOnlyHint: true,
-			destructiveHint: false,
-			idempotentHint: true,
-			openWorldHint: true
-		},
-		handler: async (params, { caller }) => {
-			const { query, per_page, page } = params;
-			const token = await caller.getToken();
-			const response = await zendeskGet(subdomain, token, "/search", {
-				query,
-				...buildOffsetParams(per_page, page)
-			});
-			const results = response.results ?? [];
-			const meta = extractSearchPaginationMeta(response, per_page, page);
-			const header = (m) => `Total: ${m.count} | Page ${page} (${results.length} results)${m.has_more ? ` | Next page: ${m.next_page}` : ""}`;
-			return { content: [{
-				type: "text",
-				text: formatFittingList(results, formatSearchResult, meta, offsetResume(page, per_page), header)
-			}] };
-		}
-	}];
-};
-//#endregion
-//#region src/utils/elicitation.ts
-/**
-* Whether a client can answer a form elicitation. A bare `elicitation: {}`
-* predates the modes and counts as form support (spec rule the SDK follows).
-*/
-const supportsFormElicitation = (capabilities) => {
-	const elicitation = capabilities?.elicitation;
-	if (!elicitation) return false;
-	return Object.keys(elicitation).length === 0 || "form" in elicitation;
-};
-const inputRequiredError = (result) => Object.assign(/* @__PURE__ */ new Error("The tool needs input from the user before it can answer."), {
-	name: "InputRequiredError",
-	inputRequired: result
-});
-const isInputRequiredError = (err) => err instanceof Error && err.name === "InputRequiredError" && "inputRequired" in err;
-//#endregion
 //#region src/utils/sla-urgency.ts
 /** Most urgent first: the order alerts are grouped and ranked in. */
 const URGENCY_LEVELS = [
@@ -31543,6 +31488,95 @@ const fetchScope = async (scope, get, userId) => {
 	});
 	return mergeSnapshots(snapshots);
 };
+//#endregion
+//#region src/utils/group-me.ts
+const GROUP_ME = /(^|\s)(-?)group:(?:me|"me")(?=\s|$)/gi;
+const NOT_A_VALUE = "group:me is not a Zendesk search value: \"me\" works only for user keywords (assignee:, requester:, submitter:), and Zendesk would silently match nothing.";
+/**
+* Reads `group:me` in a search query as the caller's group. With exactly one
+* group it becomes `group:<id>`, with a note to show; with none or several it
+* throws, naming the groups, since one offset-paginated search cannot cover
+* several groups. Without `group:me`, nothing is looked up.
+*/
+const resolveGroupMe = async (query, get, userId) => {
+	if (query.match(GROUP_ME) === null) return { query };
+	const groupIds = await readGroupIds(get, await userId());
+	const [only, ...others] = groupIds;
+	if (only === void 0) throw new Error(`${NOT_A_VALUE} You belong to no group, so there is no group queue to search: drop group:me, or name a group with group:<id>.`);
+	if (others.length === 0) return {
+		query: query.replace(GROUP_ME, (_, lead, negation) => `${lead}${negation}group:${only}`),
+		note: `Note: group:me was read as group:${only}, your only group.`
+	};
+	const advice = [...query.matchAll(GROUP_ME)].every(([, , negation]) => negation === "-") ? `exclude a group with -group:<id> (e.g. -group:${only})` : `search one with group:<id> (e.g. group:${only}), one call per group`;
+	throw new Error(`${NOT_A_VALUE} You belong to groups ${groupIds.join(", ")}: ${advice}.`);
+};
+/** `resolveGroupMe` for a tool call: the caller comes from the SLA service when wired, else `/users/me`. */
+const resolveCallerGroupMe = (query, subdomain, token, sla) => resolveGroupMe(query, (path, params) => zendeskGet(subdomain, token, path, params), sla?.userId ?? (() => zendeskGet(subdomain, token, "/users/me").then(({ user }) => user.id)));
+//#endregion
+//#region src/tools/search.ts
+const formatSearchResult = (result) => {
+	const lines = [`## [${result["result_type"]}] #${result["id"]}`];
+	if (result["subject"]) lines.push(`**Subject**: ${result["subject"]}`);
+	if (result["name"]) lines.push(`**Name**: ${result["name"]}`);
+	if (result["title"]) lines.push(`**Title**: ${result["title"]}`);
+	if (result["email"]) lines.push(`**Email**: ${result["email"]}`);
+	if (result["status"]) lines.push(`**Status**: ${result["status"]}`);
+	if (result["description"]) lines.push(descriptionExcerpt(String(result["description"])));
+	return lines.join("\n");
+};
+const createSearchTools = (env) => {
+	const { subdomain } = env;
+	return [{
+		name: "search",
+		namespace: "tickets",
+		readOnly: true,
+		title: "Zendesk Unified Search",
+		description: "Search across tickets, users, and organizations. Supports filters like \"type:ticket status:open\", \"type:user role:agent\". Returns total count and paginated results (25 per page by default, up to 100); a ticket description is cut to a 200-character excerpt, which get_ticket returns in full. Organization results include name and ID only — use get_organization for full details (tags, domains, details).",
+		inputSchema: object({
+			query: string().min(1).describe("Zendesk search query. Supports type/status/role filters (e.g. \"type:ticket status:open\", \"type:user role:agent\") and free text; omit a type filter to search tickets, users and organizations at once. \"me\" is a value of the user keywords only (assignee:, requester:, submitter:); group:me is read as your group when you belong to exactly one, else the call fails naming your groups, so use group:<id>."),
+			per_page: number$1().int().min(1).max(100).default(25).describe(PER_PAGE_DESC),
+			page: number$1().int().min(1).default(1).describe(PAGE_DESC)
+		}),
+		annotations: {
+			readOnlyHint: true,
+			destructiveHint: false,
+			idempotentHint: true,
+			openWorldHint: true
+		},
+		handler: async (params, { caller }) => {
+			const { query, per_page, page } = params;
+			const token = await caller.getToken();
+			const resolved = await resolveCallerGroupMe(query, subdomain, token, caller.sla);
+			const response = await zendeskGet(subdomain, token, "/search", {
+				query: resolved.query,
+				...buildOffsetParams(per_page, page)
+			});
+			const results = response.results ?? [];
+			const meta = extractSearchPaginationMeta(response, per_page, page);
+			const header = (m) => [resolved.note, `Total: ${m.count} | Page ${page} (${results.length} results)${m.has_more ? ` | Next page: ${m.next_page}` : ""}`].filter(Boolean).join("\n");
+			return { content: [{
+				type: "text",
+				text: formatFittingList(results, formatSearchResult, meta, offsetResume(page, per_page), header)
+			}] };
+		}
+	}];
+};
+//#endregion
+//#region src/utils/elicitation.ts
+/**
+* Whether a client can answer a form elicitation. A bare `elicitation: {}`
+* predates the modes and counts as form support (spec rule the SDK follows).
+*/
+const supportsFormElicitation = (capabilities) => {
+	const elicitation = capabilities?.elicitation;
+	if (!elicitation) return false;
+	return Object.keys(elicitation).length === 0 || "form" in elicitation;
+};
+const inputRequiredError = (result) => Object.assign(/* @__PURE__ */ new Error("The tool needs input from the user before it can answer."), {
+	name: "InputRequiredError",
+	inputRequired: result
+});
+const isInputRequiredError = (err) => err instanceof Error && err.name === "InputRequiredError" && "inputRequired" in err;
 /** Where the thresholds in force come from, as the report states it. */
 const thresholdsSource = (sla, prefs, overridden) => {
 	if (overridden) return "overridden for this call";
@@ -32244,7 +32278,7 @@ const createTicketTools = (env) => {
 			title: "Search Zendesk Tickets",
 			description: `Search tickets using Zendesk query syntax, returning each result with its live SLA state (per-metric stage and breach countdown) when an SLA policy applies. Examples: "status:open assignee:me", "priority:urgent ticket_type:incident". Returns total count, so queue triage like "breaching today" works without a per-ticket fetch. When the operator turned SLA push on, each SLA block also carries an Urgency line (BREACHED, CRITICAL or WARNING) against the caller's alert thresholds. ${EXCERPT_NOTE}`,
 			inputSchema: object({
-				query: string().min(1).describe("Zendesk ticket search query — field filters like \"status:open\", \"assignee:me\", \"priority:urgent ticket_type:incident\", combined with free text. A \"type:ticket\" scope is added automatically, so filter the ticket kind with ticket_type: (e.g. ticket_type:incident), never type: (which the API rejects here)."),
+				query: string().min(1).describe("Zendesk ticket search query — field filters like \"status:open\", \"assignee:me\", \"priority:urgent ticket_type:incident\", combined with free text. A \"type:ticket\" scope is added automatically, so filter the ticket kind with ticket_type: (e.g. ticket_type:incident), never type: (which the API rejects here). \"me\" is a value of the user keywords only (assignee:, requester:, submitter:); group:me is read as your group when you belong to exactly one, else the call fails naming your groups, so use group:<id>."),
 				per_page: number$1().int().min(1).max(100).default(25).describe(PER_PAGE_DESC),
 				page: number$1().int().min(1).default(1).describe(PAGE_DESC)
 			}),
@@ -32257,15 +32291,22 @@ const createTicketTools = (env) => {
 			handler: async (params, { caller }) => {
 				const { query, per_page, page } = params;
 				const token = await caller.getToken();
-				const [response, urgency] = await Promise.all([zendeskGet(subdomain, token, "/search", {
-					query: `type:ticket ${query}`,
-					include: "tickets(slas)",
-					...buildOffsetParams(per_page, page)
-				}), urgencyRenderer(caller.sla)]);
+				const search = async () => {
+					const resolved = await resolveCallerGroupMe(query, subdomain, token, caller.sla);
+					return {
+						resolved,
+						response: await zendeskGet(subdomain, token, "/search", {
+							query: `type:ticket ${resolved.query}`,
+							include: "tickets(slas)",
+							...buildOffsetParams(per_page, page)
+						})
+					};
+				};
+				const [{ resolved, response }, urgency] = await Promise.all([search(), urgencyRenderer(caller.sla)]);
 				const formatTicketWithSla = (ticket) => formatTicketSummary(ticket) + formatSlaBlock(ticket.slas, urgency(ticket.slas));
 				return { content: [{
 					type: "text",
-					text: formatFittingList(response.results ?? [], formatTicketWithSla, extractSearchPaginationMeta(response, per_page, page), offsetResume(page, per_page))
+					text: formatFittingList(response.results ?? [], formatTicketWithSla, extractSearchPaginationMeta(response, per_page, page), offsetResume(page, per_page), (meta) => [resolved.note, formatPagination(meta)].filter(Boolean).join("\n"))
 				}] };
 			}
 		},
@@ -35136,7 +35177,7 @@ const main = async () => {
 		logger,
 		cleanup: async () => (await starting?.catch(() => void 0))?.close()
 	});
-	const { startHttpTransport } = await import("./http-DLa2DU80.js");
+	const { startHttpTransport } = await import("./http-DkjvhtQj.js");
 	starting = startHttpTransport(config, logger);
 	await starting;
 };
@@ -35146,4 +35187,4 @@ main().catch((error) => {
 	process.exit(1);
 });
 //#endregion
-export { createStartupError as A, WebStandardStreamableHTTPServerTransport as C, OAuthError as D, verifyBearerToken as E, OAuthErrorCode as O, DEFAULT_MAX_REQUEST_BODY_SIZE as S, isLegacyRequest as T, zendeskGet as _, toolEnv as a, DEFAULT_CALLBACK_PORT as b, clearToken as c, resolveTokenPath as d, saveToken as f, createAllTools as g, silentLogger as h, defaultServerFactory as i, errnoCode as j, STARTUP_DOCS as k, configDir as l, createRequestStateCodec as m, listenedUris as n, watchGrantAlerts as o, signInRequiredError as p, createServerCaches as r, startSlaRuntime as s, createListenFeed as t, loadToken as u, REQUEST_TIMEOUT_MS as v, createMcpHandler as w, getOAuthUrls as x, deadlineSignal as y };
+export { STARTUP_DOCS as A, WebStandardStreamableHTTPServerTransport as C, OAuthError as D, verifyBearerToken as E, errnoCode as M, OAuthErrorCode as O, DEFAULT_MAX_REQUEST_BODY_SIZE as S, isLegacyRequest as T, zendeskGet as _, toolEnv as a, DEFAULT_CALLBACK_PORT as b, clearToken as c, resolveTokenPath as d, saveToken as f, createAllTools as g, silentLogger as h, defaultServerFactory as i, createStartupError as j, compareCodeUnits as k, configDir as l, createRequestStateCodec as m, listenedUris as n, watchGrantAlerts as o, signInRequiredError as p, createServerCaches as r, startSlaRuntime as s, createListenFeed as t, loadToken as u, REQUEST_TIMEOUT_MS as v, createMcpHandler as w, getOAuthUrls as x, deadlineSignal as y };

package/dist/sbom.cdx.json

@@ -1,15 +1,15 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:a211fb6c-e170-5986-a3aa-bdfae383496b",
+  "serialNumber": "urn:uuid:dbd14c1f-e90e-5bea-b648-7853fb8ee967",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
-      "bom-ref": "pkg:npm/%40fruggr/zendesk-mcp-server@3.5.3",
+      "bom-ref": "pkg:npm/%40fruggr/zendesk-mcp-server@3.6.0",
       "name": "@fruggr/zendesk-mcp-server",
-      "version": "3.5.3",
-      "purl": "pkg:npm/%40fruggr/zendesk-mcp-server@3.5.3"
+      "version": "3.6.0",
+      "purl": "pkg:npm/%40fruggr/zendesk-mcp-server@3.6.0"
     }
   },
   "components": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fruggr/zendesk-mcp-server",
-  "version": "3.5.3",
+  "version": "3.6.0",
   "mcpName": "io.github.fruggr/zendesk-mcp-server",
   "description": "Deep Zendesk MCP server for your AI assistant: search, draft, update and translate Help Center articles and manage Support tickets end to end — comments, triage and image attachments.",
   "type": "module",
@@ -21,8 +21,8 @@
     "dev:http": "tsx src/index.ts --transport http --host 127.0.0.1 --port 3000 --public-url http://localhost:3000 --mode all --namespace tickets --namespace help_center --namespace users --namespace requests",
     "prepare": "npm run build && (lefthook install || true)",
     "prepublishOnly": "npm run build",
-    "check": "node scripts/biome.mjs check --error-on-warnings .",
-    "check:fix": "node scripts/biome.mjs check --write .",
+    "check": "biome check --error-on-warnings .",
+    "check:fix": "biome check --write .",
     "test": "vitest run",
     "test:watch": "vitest watch",
     "test:coverage": "vitest run --coverage",
@@ -75,7 +75,7 @@
   },
   "packageManager": "pnpm@12.15.0+sha512.b3951d6d6ff4a9f13dc7cf56cd28d2b8eb37dbcc9c68e52e1e1191873ea9f82a017287ab50baadc5ccc494f036c67c0e47eb13608c2fa36f47711b61ea128e61",
   "devDependencies": {
-    "@biomejs/biome": "2.5.15",
+    "@biomejs/biome": "2.6.2",
     "@modelcontextprotocol/client": "2.3.1",
     "@modelcontextprotocol/node": "2.1.1",
     "@modelcontextprotocol/server": "2.3.1",