@jclvsh/iris 0.5.3 → 0.5.5

package/dist/commands/ai.js

@@ -51,14 +51,14 @@ export function registerAICommands(program, client) {
         }
     });
     ai.command("analyze")
-        .description("analyze a response in a conversation")
+        .description("analyze an inbound message (email or DM) for sentiment, intent, and suggested reply")
         .requiredOption("--conversation-id <id>", "conversation ID")
-        .requiredOption("--email-content <text>", "email content to analyze")
+        .requiredOption("--message-content <text>", "inbound message content to analyze")
         .action(async (opts) => {
         try {
             const result = await client.post("/ai/analyze", {
                 conversation_id: opts.conversationId,
-                email_content: opts.emailContent,
+                message_content: opts.messageContent,
             });
             formatOutput(result, getFormat(program.opts()));
         }

package/dist/commands/keys.js

@@ -26,7 +26,7 @@ export function registerKeyCommands(program, client) {
     keys.command("create")
         .description("create a new API key (requires admin scope)")
         .requiredOption("-n, --name <name>", "key name")
-        .option("--scopes <list>", "comma-separated scopes: read, write, delete, generate, send, admin (defaults to all)", parseList)
+        .option("--scopes <list>", "comma-separated scopes: read, write, generate, send, admin (defaults to all; empty rejected)", parseList)
         .action(async (opts) => {
         try {
             const body = { name: opts.name };

package/dist/tools/keys.js

@@ -1,5 +1,13 @@
 import { z } from "zod";
-const SCOPES = ["read", "write", "delete", "generate", "send", "admin"];
+// Five-verb scope vocabulary. iris uses soft-deletes everywhere, so DELETE
+// routes gate on `write` — there is no separate `delete` scope.
+//
+// `*` is also accepted at the API as a wildcard sentinel (expands to all 5
+// scopes). It must be the SOLE element of the array — mixing it with named
+// scopes was a privilege-escalation footgun (round-6 audit). Same rule as the
+// API route schema in src/app/api/v1/keys/route.ts.
+const NAMED_SCOPES = ["read", "write", "generate", "send", "admin"];
+const SCOPES_WITH_WILDCARD = [...NAMED_SCOPES, "*"];
 export function registerKeyTools(server, client) {
     server.tool("get_current_api_key", "get details about the currently authenticated API key.", {}, async () => {
         try {
@@ -43,10 +51,12 @@ export function registerKeyTools(server, client) {
     server.tool("create_api_key", "create a new API key. requires admin scope.", {
         name: z.string().min(1).max(100).describe("key name for identification"),
         scopes: z
-            .array(z.enum(SCOPES))
+            .array(z.enum(SCOPES_WITH_WILDCARD))
+            .min(1, "scopes must be a non-empty array; omit the field for all scopes")
+            .refine((s) => !s.includes("*") || s.length === 1, "wildcard scope \"*\" must be the only element; mixing it with named scopes is rejected to prevent accidental privilege escalation")
             .optional()
-            .describe("permission scopes (any of: read, write, delete, generate, send, admin). defaults to all scopes"),
-        expires_at: z.string().optional().describe("expiration date in ISO 8601 format"),
+            .describe("permission scopes — any subset of [read, write, generate, send, admin], or [\"*\"] for all. omit the field for all scopes. empty array and mixed wildcard (e.g. [\"read\", \"*\"]) are rejected with 422."),
+        expires_at: z.string().optional().describe("expiration date in ISO 8601 format (must be in the future)"),
     }, async (args) => {
         try {
             const result = await client.post("/keys", args);

package/dist/tools/webhooks.js

@@ -154,7 +154,7 @@ export function registerWebhookTools(server, client) {
             };
         }
     });
-    server.tool("rotate_webhook_secret", "rotate the signing secret for a webhook. the new secret is returned in the response. the old secret is invalidated immediately — receivers must update their HMAC verification before the next delivery. requires write scope.", {
+    server.tool("rotate_webhook_secret", "rotate the signing secret for a webhook. the new secret is returned in the response. the old secret is invalidated immediately — receivers must update their HMAC verification before the next delivery. requires admin scope.", {
         id: z.string().uuid().describe("webhook ID"),
     }, async ({ id }) => {
         try {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@jclvsh/iris",
-	"version": "0.5.3",
+	"version": "0.5.5",
 	"description": "MCP server for the Iris API",
 	"type": "module",
 	"main": "dist/index.js",