@mgsoftwarebv/mcp-server-bridge 3.5.4 → 3.5.5

package/dist/index.js

@@ -105991,6 +105991,22 @@ var TOOLS = [
       required: ["ticketId"]
     }
   },
+  {
+    name: "delete-ticket-attachment",
+    description: "Safely remove a ticket or comment attachment by id. Validates provider/team access and that the attachment belongs to the requested ticket. Hard-deletes the DB row and vault file, and logs ticket activity with the filename. Find attachment ids via get-ticket-by-id.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        teamId: teamIdProp,
+        ticketId: ticketIdentifierProp,
+        attachmentId: {
+          type: "string",
+          description: "Attachment ID from get-ticket-by-id (ticket or comment attachment)."
+        }
+      },
+      required: ["ticketId", "attachmentId"]
+    }
+  },
   {
     name: "get-customers",
     description: "Get customers with optional search. Each result includes its ID (UUID), name, email, website, phone, status, archived flag, and created date. Archived customers are hidden by default; pass status 'archived' or 'all' to include them.",
@@ -120639,6 +120655,36 @@ function validateAttachmentBuffer(buffer2, mimeType) {
   return null;
 }
 
+// src/tools/ticket-attachment-delete-util.ts
+function validateDeleteAttachmentInput(attachmentId) {
+  if (!attachmentId?.trim()) {
+    return "missing_attachment_id";
+  }
+  return null;
+}
+function validateAttachmentBelongsToTicket(attachmentTicketId, requestedTicketId) {
+  return attachmentTicketId === requestedTicketId;
+}
+function buildDeleteAttachmentResult(input) {
+  return {
+    deleted: true,
+    attachmentId: input.attachmentId,
+    ticketId: input.ticketId,
+    fileName: input.fileName,
+    source: input.source
+  };
+}
+function formatDeleteAttachmentRefusal(reason, context2) {
+  switch (reason) {
+    case "missing_attachment_id":
+      return "attachmentId is required. Use get-ticket-by-id to list attachment ids.";
+    case "attachment_not_found":
+      return `Attachment not found: ${context2.attachmentId}. Use get-ticket-by-id on ${context2.ticketNumber} to list valid attachment ids.`;
+    case "wrong_ticket":
+      return `Attachment ${context2.attachmentId} (${context2.fileName ?? "unknown file"}) belongs to ticket ${context2.actualTicketId}, not ${context2.ticketNumber}. Pass the correct ticketId or choose an attachment id from that ticket.`;
+  }
+}
+
 // src/tools/ticket-attachments.ts
 function textResponse5(text3) {
   return { content: [{ type: "text", text: text3 }] };
@@ -120785,6 +120831,72 @@ Download URL (valid 1 hour):
 ${url3}` : "")
   );
 }
+async function handleDeleteTicketAttachment(input) {
+  const ctx = getAuthContext() ?? authContext;
+  if (!ctx) {
+    return textResponse5("Error: Not authenticated.");
+  }
+  const inputError = validateDeleteAttachmentInput(input.attachmentId);
+  if (inputError) {
+    return textResponse5(formatDeleteAttachmentRefusal(inputError, { ticketNumber: input.ticketId }));
+  }
+  const access = await loadAccessibleTicket(input.teamId, input.ticketId);
+  if (!access.ok) return access.response;
+  const ticket = access.ticket;
+  const attachment = await findAttachment(input.attachmentId);
+  if (!attachment) {
+    return textResponse5(
+      formatDeleteAttachmentRefusal("attachment_not_found", {
+        attachmentId: input.attachmentId,
+        ticketNumber: ticket.ticketNumber
+      })
+    );
+  }
+  if (!validateAttachmentBelongsToTicket(attachment.ticketId, ticket.id)) {
+    return textResponse5(
+      formatDeleteAttachmentRefusal("wrong_ticket", {
+        attachmentId: input.attachmentId,
+        ticketNumber: ticket.ticketNumber,
+        fileName: attachment.fileName,
+        actualTicketId: attachment.ticketId
+      })
+    );
+  }
+  const table = attachment.source === "ticket" ? schema_exports.ticketAttachments : schema_exports.ticketCommentAttachments;
+  const [deletedRow] = await db.delete(table).where(eq(table.id, input.attachmentId)).returning({ id: table.id });
+  if (!deletedRow) {
+    return textResponse5(
+      `Failed to delete attachment ${input.attachmentId}. It may have been removed already.`
+    );
+  }
+  try {
+    await storage.remove({
+      bucket: "vault",
+      paths: [attachment.storageKey]
+    });
+  } catch {
+  }
+  await db.insert(schema_exports.ticketActivity).values({
+    ticketId: ticket.id,
+    teamId: ticket.teamId,
+    userId: ctx.userId,
+    activityType: "attachment_removed",
+    metadata: {
+      attachmentId: input.attachmentId,
+      fileName: attachment.fileName,
+      source: attachment.source,
+      removedBy: "mcp"
+    }
+  });
+  await db.update(schema_exports.tickets).set({ updatedAt: sql`NOW()`, updatedBy: ctx.userId }).where(eq(schema_exports.tickets.id, ticket.id));
+  const result = buildDeleteAttachmentResult({
+    attachmentId: input.attachmentId,
+    ticketId: ticket.id,
+    fileName: attachment.fileName,
+    source: attachment.source
+  });
+  return textResponse5(JSON.stringify(result, null, 2));
+}
 
 // src/tools/tiptap-text.ts
 function renderNode(node) {
@@ -122861,6 +122973,10 @@ function createMcpServer() {
           return await handleUploadTicketAttachment(
             asToolArgs(toolArgs)
           );
+        case "delete-ticket-attachment":
+          return await handleDeleteTicketAttachment(
+            asToolArgs(toolArgs)
+          );
         case "get-customers":
           return await handleGetCustomers(asToolArgs(toolArgs));
         case "create-customer":