@loopops/mcp-server 3.1.0 → 3.3.0

package/dist/api-client.js

@@ -272,10 +272,11 @@ function persistRotatedRefreshToken(newToken) {
  */
 async function diagnoseRefreshFailure(status, body) {
     const head = `Okta refresh failed (HTTP ${status}). Detail: ${body.slice(0, 300)}`;
-    const generic = "Your refresh token may be revoked or idle-expired. Re-run " +
-        "`npx @loopops/mcp-cli@latest login` (the `@latest` pin bypasses the " +
-        "npx cache, which can serve a stale cli with old tenant defaults for " +
-        "up to 24h after a publish).";
+    const generic = "Your refresh token may be revoked or idle-expired.\n" +
+        "  Diagnose: `npx @loopops/mcp-cli@latest doctor` — checks tenant config + token.\n" +
+        "  Fix:      `npx @loopops/mcp-cli@latest login` — re-authenticates from scratch.\n" +
+        "(The `@latest` pin matters: bare `npx @loopops/mcp-cli` may serve a " +
+        "cached older cli with stale tenant defaults for up to 24h after a publish.)";
     if (!apiUrl)
         return `${head}\n\n${generic}`;
     try {

package/dist/index.js

@@ -1,14 +1,26 @@
 #!/usr/bin/env node
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
 import { trpcQuery } from "./api-client.js";
+import { registerIdentityTools } from "./tools/identity.js";
 import { registerReportingTools } from "./tools/reporting.js";
 import { registerConfigTools } from "./tools/config.js";
 import { registerEngTools } from "./tools/eng.js";
 import { registerCrmTools } from "./tools/crm.js";
 import { registerEngageTools } from "./tools/engage.js";
 import { registerAccountMasterTools } from "./tools/account-master.js";
+// Read our own package.json at runtime so the version baked into MCP
+// initialize-handshake `serverInfo.version` matches the published npm
+// version. Was hardcoded "1.0.0" — confusing in Claude Desktop logs and
+// any other MCP client that displays server version. `package.json` is
+// always included in npm tarballs, so the relative path `../package.json`
+// (from dist/index.js) resolves cleanly post-publish.
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const pkg = JSON.parse(readFileSync(join(__dirname, "..", "package.json"), "utf-8"));
 const skillsResponseSchema = z.object({
     role: z.string(),
     skills: z.array(z.string()),
@@ -34,8 +46,9 @@ const allowedSkills = new Set(skills);
 console.error(`[MCP] Connected — role: ${role}, ${skills.length} skills`);
 const server = new McpServer({
     name: "loop-operations",
-    version: "1.0.0",
+    version: pkg.version,
 });
+registerIdentityTools(server, allowedSkills);
 registerReportingTools(server, allowedSkills);
 registerConfigTools(server, allowedSkills);
 registerEngTools(server, allowedSkills);

package/dist/tools/account-master.js

@@ -160,6 +160,61 @@ export function registerAccountMasterTools(server, allowed) {
                 .describe("Re-run the resolver for this (account, attribute) immediately so the golden record updates now. Default: true."),
         }, safeTool(async (input) => trpcMutation("mcp.overrideAccountAttribute", input)));
     }
+    if (allowed.has("deactivate_account_attribute_override")) {
+        server.tool("deactivate_account_attribute_override", [
+            "Soft-toggle off a manual override on one (account, attribute). Writes a new manual",
+            "`provider_attribute_value` row with `confidence_score=0` and `attribute_value=NULL`.",
+            "The resolver's latest-period semantic (PR #148) makes the manual provider drop out,",
+            "so other providers (D&B, PDL, ZoomInfo, etc.) take over for this attribute.",
+            "",
+            "Append-only: the original override row stays in place historically. To re-enable, call",
+            "`override_account_attribute` again with a fresh value — the new manual row supersedes",
+            "this deactivation because the resolver picks the most-recent manual row.",
+            "",
+            "Identify the account by ANY ONE of: accountId / domain / sfAccountId / accountName.",
+            "Refuses to write if no prior manual override exists for the (account, attribute).",
+            "",
+            "Common workflow: PDL data was stale → manual override applied →",
+            "PDL/D&B refreshes with correct data → deactivate the manual override so the new",
+            "provider data takes over without manual maintenance.",
+        ].join(" "), {
+            accountId: z
+                .string()
+                .uuid()
+                .optional()
+                .describe("Account Master account_id (UUID)."),
+            domain: z
+                .string()
+                .min(1)
+                .optional()
+                .describe("Domain (e.g. 'snowflake.com')."),
+            sfAccountId: z
+                .string()
+                .min(3)
+                .optional()
+                .describe("Salesforce Account ID."),
+            accountName: z
+                .string()
+                .min(1)
+                .optional()
+                .describe("Company name. Use accountId or domain when possible — accountName can be ambiguous."),
+            attribute: z
+                .string()
+                .min(1)
+                .max(64)
+                .regex(/^[a-z0-9_]+$/)
+                .describe("Attribute name (e.g. 'hq_state'). Must match a prior manual override row."),
+            reason: z
+                .string()
+                .min(3)
+                .max(512)
+                .describe("Why is this override no longer warranted? Stored in audit payload."),
+            resolveAfter: z
+                .boolean()
+                .optional()
+                .describe("Re-run the resolver immediately so the golden record updates. Default: true."),
+        }, safeTool(async (input) => trpcMutation("mcp.deactivateAccountAttributeOverride", input)));
+    }
     if (allowed.has("show_account_master_config")) {
         server.tool("show_account_master_config", [
             "Read the current contents of a Account Master YAML config from the repo.",

package/dist/tools/identity.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Identity / connection-check tools.
+ *
+ * Currently just `mcp_whoami` — a data-independent first-call sanity check.
+ * Returns the caller's email, MCP role, SF user link state, and tool count.
+ * Designed for the onboarding flow: after install + restart, asking Claude
+ * "are you connected?" should resolve to this and confirm everything wired
+ * correctly without depending on having any actual Loop data yet.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerIdentityTools(server: McpServer, allowed: Set<string>): void;

package/dist/tools/identity.js

@@ -0,0 +1,21 @@
+/**
+ * Identity / connection-check tools.
+ *
+ * Currently just `mcp_whoami` — a data-independent first-call sanity check.
+ * Returns the caller's email, MCP role, SF user link state, and tool count.
+ * Designed for the onboarding flow: after install + restart, asking Claude
+ * "are you connected?" should resolve to this and confirm everything wired
+ * correctly without depending on having any actual Loop data yet.
+ */
+import { trpcQuery } from "../api-client.js";
+import { safeTool } from "./_helpers.js";
+export function registerIdentityTools(server, allowed) {
+    if (allowed.has("mcp_whoami")) {
+        server.tool("mcp_whoami", [
+            "Connection sanity check. Returns your email, MCP role, Salesforce user link state,",
+            "and the number of tools available to you. Use as a first-call verification after",
+            "install — works regardless of whether you have any Loop data yet, so it's a clean",
+            "way to confirm the auth chain (Okta → Loop → role resolution) is wired correctly.",
+        ].join(" "), {}, safeTool(async () => trpcQuery("mcp.whoami")));
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@loopops/mcp-server",
-  "version": "3.1.0",
+  "version": "3.3.0",
   "description": "Loop Operations MCP Server — AI skills for RevOps",
   "license": "UNLICENSED",
   "type": "module",