@papermark/mcp-server 0.6.0 → 0.8.0

package/dist/{chunk-DA26JZA2.js → chunk-IKMPOGEB.js}

@@ -67,6 +67,9 @@ var documentObjectOutputSchema = z.object({
   content_type: nullableStringOutputSchema(
     "Document MIME type, such as `application/pdf`, or null when unknown."
   ),
+  url: nullableStringOutputSchema(
+    "For `link` and `notion` documents, the external target URL the document points to. Null for file-based documents."
+  ),
   num_pages: nullableIntegerOutputSchema(
     "Number of pages, or null when unknown."
   ),
@@ -85,6 +88,12 @@ var linkObjectOutputSchema = z.object({
   target_type: z.enum(["document", "dataroom"]).describe(
     "The kind of resource this link points at. The matching `document_id` / `dataroom_id` field is populated; the other is null."
   ),
+  audience_type: z.enum(["general", "group", "team"]).describe(
+    "Who the link is for. `general` links are open to anyone passing the access controls; `group` links admit only members of the dataroom group in `group_id`."
+  ),
+  group_id: nullableStringOutputSchema(
+    "Dataroom group this link is scoped to. Only set when `audience_type` is `group`."
+  ),
   document_id: nullableStringOutputSchema(
     "Target document id when this is a document link, otherwise null."
   ),
@@ -371,6 +380,92 @@ var foldersListOutputSchema = z.object({
 var versionsListOutputSchema = z.object({
   versions: z.array(documentVersionObjectOutputSchema).describe("Document versions.")
 });
+var dataroomGroupObjectOutputSchema = z.object({
+  id: z.string().describe("Unique dataroom group id."),
+  object: z.literal("dataroom_group").describe(
+    "String representing the object's type. Always `dataroom_group`."
+  ),
+  name: z.string().describe("Group name."),
+  allow_all: z.boolean().describe(
+    "When true, anyone passing the link's other access gates is treated as a member \u2014 the email/domain membership check is skipped."
+  ),
+  domains: z.array(z.string()).describe(
+    "Email domains whose addresses are automatically treated as members (e.g. `acme.com`)."
+  ),
+  member_count: integerOutputSchema("Number of explicit email members."),
+  link_count: integerOutputSchema("Number of links scoped to this group."),
+  dataroom_id: z.string().describe("Dataroom the group belongs to."),
+  created: dateTimeOutputSchema("When the group was created."),
+  updated_at: dateTimeOutputSchema("When the group was last updated.")
+}).passthrough().describe("Papermark dataroom viewer group object.");
+var dataroomGroupMemberObjectOutputSchema = z.object({
+  id: z.string().describe("Membership id \u2014 use it to remove the member."),
+  object: z.literal("dataroom_group_member").describe(
+    "String representing the object's type. Always `dataroom_group_member`."
+  ),
+  email: z.string().describe("Member's email address."),
+  viewer_id: z.string().describe("Id of the team-level viewer this membership points at."),
+  created: dateTimeOutputSchema("When the member was added.")
+}).passthrough().describe("Dataroom group membership object.");
+var permissionItemTypeEnum = z.enum(["dataroom_document", "dataroom_folder"]).describe(
+  "Kind of dataroom item. `dataroom_document` targets a dataroom-document attachment id (from `list_dataroom_documents`); `dataroom_folder` targets a dataroom folder id (from `list_dataroom_folders`)."
+);
+var dataroomGroupPermissionObjectOutputSchema = z.object({
+  object: z.literal("dataroom_group_permission").describe(
+    "String representing the object's type. Always `dataroom_group_permission`."
+  ),
+  item_id: z.string().describe("Dataroom-document or dataroom-folder id."),
+  item_type: permissionItemTypeEnum,
+  can_view: z.boolean().describe("Whether the group can view the item."),
+  can_download: z.boolean().describe("Whether the group can download the item."),
+  updated_at: dateTimeOutputSchema("When the permission was last changed.")
+}).passthrough().describe("Per-item access control for a dataroom group.");
+var linkPermissionObjectOutputSchema = z.object({
+  object: z.literal("link_permission").describe(
+    "String representing the object's type. Always `link_permission`."
+  ),
+  item_id: z.string().describe("Dataroom-document or dataroom-folder id."),
+  item_type: permissionItemTypeEnum,
+  can_view: z.boolean().describe("Whether viewers can view the item."),
+  can_download: z.boolean().describe("Whether viewers can download the item."),
+  can_download_original: z.boolean().describe(
+    "Whether the original (non-watermarked) file can be downloaded. Always false for permissions written via the API."
+  ),
+  updated_at: dateTimeOutputSchema("When the permission was last changed.")
+}).passthrough().describe("Per-item file permission override on a dataroom link.");
+var permissionEntryInputSchema = z.object({
+  item_id: z.string().min(1).describe(
+    "Dataroom-document attachment id (from `list_dataroom_documents`) or dataroom folder id (from `list_dataroom_folders`) \u2014 NOT the team-library document id."
+  ),
+  item_type: permissionItemTypeEnum,
+  can_view: z.boolean().describe("Allow viewing the item."),
+  can_download: z.boolean().describe("Allow downloading the item.")
+}).describe("One per-item permission entry.");
+var dataroomGroupOutputSchema = z.object({
+  group: dataroomGroupObjectOutputSchema.describe(
+    "Dataroom group returned by the tool."
+  )
+});
+var dataroomGroupsListOutputSchema = z.object({
+  groups: z.array(dataroomGroupObjectOutputSchema).describe("Dataroom groups in the current page."),
+  next_cursor: cursorOutputSchema
+});
+var dataroomGroupMembersListOutputSchema = z.object({
+  members: z.array(dataroomGroupMemberObjectOutputSchema).describe("Group members in the current page."),
+  next_cursor: cursorOutputSchema
+});
+var dataroomGroupPermissionsListOutputSchema = z.object({
+  permissions: z.array(dataroomGroupPermissionObjectOutputSchema).describe("Per-item access controls."),
+  next_cursor: cursorOutputSchema
+});
+var dataroomGroupPermissionsSetOutputSchema = z.object({
+  permissions: z.array(dataroomGroupPermissionObjectOutputSchema).describe(
+    "Effective rows for every touched item \u2014 the entries sent plus auto-shown ancestor folders."
+  )
+});
+var linkPermissionsListOutputSchema = z.object({
+  permissions: z.array(linkPermissionObjectOutputSchema).describe("Per-item permission overrides on the link.")
+});
 var deletedObjectOutputSchema = z.object({
   id: z.string().describe("ID of the deleted object."),
   object: z.enum([
@@ -379,7 +474,9 @@ var deletedObjectOutputSchema = z.object({
     "link",
     "dataroom",
     "dataroom_folder",
-    "dataroom_document"
+    "dataroom_document",
+    "dataroom_group",
+    "dataroom_group_member"
   ]).describe("The type of object that was deleted."),
   deleted: z.literal(true).describe("Always `true`. Confirms the object was deleted.")
 });
@@ -430,6 +527,12 @@ Never share a link to a document the user didn't explicitly name. Requires scope
   inputSchema: {
     document_id: z.string().optional().describe("Document id \u2014 required unless `dataroom_id` is set"),
     dataroom_id: z.string().optional().describe("Dataroom id \u2014 alternative to document_id"),
+    audience_type: z.enum(["general", "group"]).optional().describe(
+      "Set to `group` (dataroom links only, together with `group_id`) to scope the link to a dataroom group. Group links are always email-protected; only group members (by email or domain) can open them."
+    ),
+    group_id: z.string().optional().describe(
+      "Dataroom group id from `list_dataroom_groups` \u2014 required when `audience_type` is `group`; must belong to the same dataroom"
+    ),
     name: z.string().optional().describe("Human-readable label for the link"),
     expires_at: z.string().datetime().optional().describe("ISO 8601 timestamp after which the link stops working"),
     password: z.string().optional().describe("Require viewers to enter this password"),
@@ -453,6 +556,7 @@ var listLinksContract = {
   inputSchema: {
     document_id: z.string().optional().describe("Filter links for a specific document"),
     dataroom_id: z.string().optional().describe("Filter links for a specific dataroom"),
+    group_id: z.string().optional().describe("Filter to group links scoped to a specific dataroom group"),
     limit: z.number().int().min(1).max(100).optional().describe("Page size"),
     cursor: z.string().optional().describe("Pagination cursor")
   }
@@ -679,11 +783,13 @@ var getDocumentVersionContract = {
 var addDocumentVersionContract = {
   name: "add_document_version",
   title: "Add a new document version",
-  description: `Upload a new version of an existing document, fetched from a public HTTPS URL. The new version becomes primary by default; live links automatically serve the new file.
+  description: `Add a new version of an existing document. The new version becomes primary by default; live links automatically serve it.
+
+For a file document, pass \`source_url\` \u2014 a public HTTPS URL the server fetches as the new file. For a \`link\`/\`notion\` document, pass \`external_url\` to repoint it at a new URL (its type is preserved; the URL is stored as-is, not downloaded). Provide exactly one.
 
 WORKFLOW:
 (1) Resolve the target document via \`search_documents\` or \`list_documents\`.
-(2) The user must give you a public HTTPS URL the API can fetch. Don't fabricate URLs.
+(2) The user must give you the URL \u2014 don't fabricate one.
 (3) After creation, mention the version_number so the user can promote/rollback later.
 
 NOTE: Adding a version from a local file path is not supported by this MCP tool \u2014 for that, use the \`upload_document\` tool to create a new document, or have the user upload via the Papermark UI.
@@ -693,7 +799,14 @@ Requires scope \`documents.write\`.`,
     document_id: z.string().min(1),
     source_url: z.string().url().refine((s) => s.startsWith("https://"), {
       message: "source_url must use https://"
-    }).describe("Public HTTPS URL the server should fetch as the new version")
+    }).optional().describe(
+      "Public HTTPS URL the server fetches as the new version (file documents only)"
+    ),
+    external_url: z.string().url().refine((s) => s.startsWith("https://"), {
+      message: "external_url must use https://"
+    }).optional().describe(
+      "New target URL for a link/notion document, stored as-is (not downloaded). The document's type is preserved."
+    )
   }
 };
 var promoteDocumentVersionContract = {
@@ -809,6 +922,12 @@ Requires scope \`links.write\`.`,
     name: z.string().optional(),
     expires_at: z.string().datetime().nullable().optional().describe("ISO 8601 timestamp, or null to clear the expiry"),
     password: z.string().min(1).nullable().optional().describe("New password, or null to remove password protection"),
+    audience_type: z.enum(["general", "group"]).optional().describe(
+      "Switch the link's audience. `group` (dataroom links only) needs a `group_id` here or already on the link and forces email protection; `general` clears the group scope."
+    ),
+    group_id: z.string().nullable().optional().describe(
+      'Dataroom group id from `list_dataroom_groups`. Set with `audience_type: "group"`, or alone to swap the group of an existing group link.'
+    ),
     email_protected: z.boolean().optional(),
     email_authenticated: z.boolean().optional(),
     allow_download: z.boolean().optional(),
@@ -969,6 +1088,150 @@ var moveDataroomFolderContract = {
     parent_id: z.string().nullable()
   }
 };
+var listDataroomGroupsContract = {
+  name: "list_dataroom_groups",
+  title: "List dataroom groups",
+  description: 'List viewer groups in a dataroom. Groups define an audience (members by email or domain) plus per-item view/download permissions, and are shared via group links (`create_link` with `audience_type: "group"`). Requires scope `datarooms.read`.',
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    limit: z.number().int().min(1).max(100).optional(),
+    cursor: z.string().optional()
+  }
+};
+var getDataroomGroupContract = {
+  name: "get_dataroom_group",
+  title: "Get a dataroom group",
+  description: "Fetch a single dataroom group with its domain rules, allow-all flag, and member/link counts. Requires scope `datarooms.read`.",
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    group_id: z.string().min(1)
+  }
+};
+var createDataroomGroupContract = {
+  name: "create_dataroom_group",
+  title: "Create a dataroom group",
+  description: `Create a viewer group in a dataroom.
+
+WORKFLOW:
+(1) Create the group (optionally with \`domains\` or \`allow_all\`).
+(2) Add explicit members via \`add_dataroom_group_members\`.
+(3) Grant document/folder access via \`set_dataroom_group_permissions\` \u2014 a new group sees NOTHING until permissions are set.
+(4) Share it by creating a link with \`audience_type: "group"\`.
+
+Requires scope \`datarooms.write\`.`,
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    name: z.string().min(1).max(255).describe("Group name"),
+    allow_all: z.boolean().optional().describe(
+      "Treat anyone passing the link's access gates as a member (skips the email/domain membership check)"
+    ),
+    domains: z.array(z.string().min(1)).max(100).optional().describe(
+      "Email domains treated as members, e.g. ['acme.com'] admits jane@acme.com"
+    )
+  }
+};
+var updateDataroomGroupContract = {
+  name: "update_dataroom_group",
+  title: "Update a dataroom group",
+  description: "Rename a dataroom group or change its `domains` / `allow_all` audience rules. PATCH semantics \u2014 omitted fields stay as they are; a passed `domains` array REPLACES the current one. Requires scope `datarooms.write`.",
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    group_id: z.string().min(1),
+    name: z.string().min(1).max(255).optional(),
+    allow_all: z.boolean().optional(),
+    domains: z.array(z.string().min(1)).max(100).optional()
+  }
+};
+var deleteDataroomGroupContract = {
+  name: "delete_dataroom_group",
+  title: "Delete a dataroom group",
+  description: `Delete a dataroom group, its memberships, its permissions, AND every share link pointing at it \u2014 active group links stop resolving immediately.
+
+ALWAYS confirm with the user before calling (echo the group name and its link count via \`get_dataroom_group\`). This is irreversible. Requires scope \`datarooms.write\`.`,
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    group_id: z.string().min(1)
+  }
+};
+var listDataroomGroupMembersContract = {
+  name: "list_dataroom_group_members",
+  title: "List dataroom group members",
+  description: "List a group's explicit email members with their membership ids (needed for `remove_dataroom_group_member`). Viewers admitted via the group's `domains` or `allow_all` are not listed. Requires scope `datarooms.read`.",
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    group_id: z.string().min(1),
+    limit: z.number().int().min(1).max(100).optional(),
+    cursor: z.string().optional()
+  }
+};
+var addDataroomGroupMembersContract = {
+  name: "add_dataroom_group_members",
+  title: "Add dataroom group members",
+  description: "Add members to a dataroom group by email (up to 500 per call). Idempotent \u2014 already-present members are skipped. NO invitation emails are sent; members gain access the next time they open a group link. Requires scope `datarooms.write`.",
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    group_id: z.string().min(1),
+    emails: z.array(z.string().email()).min(1).max(500).describe("Email addresses to add as members")
+  }
+};
+var removeDataroomGroupMemberContract = {
+  name: "remove_dataroom_group_member",
+  title: "Remove a dataroom group member",
+  description: "Remove a member from a dataroom group by membership id (from `list_dataroom_group_members` \u2014 NOT the email or viewer id). The viewer itself is kept; only this group membership is removed. Requires scope `datarooms.write`.",
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    group_id: z.string().min(1),
+    member_id: z.string().min(1).describe("Membership id from `list_dataroom_group_members`")
+  }
+};
+var getDataroomGroupPermissionsContract = {
+  name: "get_dataroom_group_permissions",
+  title: "Get dataroom group permissions",
+  description: "List a group's per-item access controls. Items WITHOUT an entry are invisible to the group's viewers. Requires scope `datarooms.read`.",
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    group_id: z.string().min(1),
+    limit: z.number().int().min(1).max(100).optional(),
+    cursor: z.string().optional()
+  }
+};
+var setDataroomGroupPermissionsContract = {
+  name: "set_dataroom_group_permissions",
+  title: "Set dataroom group permissions",
+  description: `Upsert per-item view/download permissions for a dataroom group. DELTA semantics: entries you send are upserted, entries you omit keep their current state. Ancestor folders of any item made visible are automatically set to \`can_view: true\`.
+
+WORKFLOW:
+(1) Get item ids from \`list_dataroom_documents\` (attachment ids) / \`list_dataroom_folders\` (folder ids) \u2014 NOT team-library document ids.
+(2) Send one entry per item to change. To hide an item, send it with \`can_view: false, can_download: false\`.
+
+Requires scope \`datarooms.write\`.`,
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    group_id: z.string().min(1),
+    permissions: z.array(permissionEntryInputSchema).min(1).max(1e3).describe("Permission entries to upsert")
+  }
+};
+var getLinkPermissionsContract = {
+  name: "get_link_permissions",
+  title: "Get link permissions",
+  description: "List a dataroom link's per-item file permission overrides. Empty when the link has no overrides \u2014 viewers then see items per the link's group (group links) or the full dataroom. On group-audience links the group's permissions win and these overrides are ignored. Requires scope `links.read`.",
+  inputSchema: {
+    link_id: z.string().min(1)
+  }
+};
+var setLinkPermissionsContract = {
+  name: "set_link_permissions",
+  title: "Set link permissions",
+  description: `Replace a dataroom link's per-item file permissions. FULL-REPLACE semantics: the payload is the complete desired state \u2014 items not listed lose their override, and an empty array clears everything (hiding every item on this link). Ancestor folders of visible items stay visible automatically.
+
+Item ids come from \`list_dataroom_documents\` / \`list_dataroom_folders\`. Has no effect on links with \`audience_type: "group"\` \u2014 their group's permissions take precedence. Requires scope \`links.write\`.`,
+  inputSchema: {
+    link_id: z.string().min(1),
+    permissions: z.array(permissionEntryInputSchema).max(1e3).describe(
+      "Complete desired permission state. Empty array clears all overrides."
+    )
+  }
+};
 var getVisitorContract = {
   name: "get_visitor",
   title: "Get a visitor",
@@ -1021,6 +1284,18 @@ var SHARED_TOOL_OUTPUT_SCHEMAS = {
   [updateDataroomFolderContract.name]: folderOutputSchema,
   [deleteDataroomFolderContract.name]: deletedObjectOutputSchema,
   [moveDataroomFolderContract.name]: folderOutputSchema,
+  [listDataroomGroupsContract.name]: dataroomGroupsListOutputSchema,
+  [getDataroomGroupContract.name]: dataroomGroupObjectOutputSchema,
+  [createDataroomGroupContract.name]: dataroomGroupOutputSchema,
+  [updateDataroomGroupContract.name]: dataroomGroupOutputSchema,
+  [deleteDataroomGroupContract.name]: deletedObjectOutputSchema,
+  [listDataroomGroupMembersContract.name]: dataroomGroupMembersListOutputSchema,
+  [addDataroomGroupMembersContract.name]: dataroomGroupMembersListOutputSchema,
+  [removeDataroomGroupMemberContract.name]: deletedObjectOutputSchema,
+  [getDataroomGroupPermissionsContract.name]: dataroomGroupPermissionsListOutputSchema,
+  [setDataroomGroupPermissionsContract.name]: dataroomGroupPermissionsSetOutputSchema,
+  [getLinkPermissionsContract.name]: linkPermissionsListOutputSchema,
+  [setLinkPermissionsContract.name]: linkPermissionsListOutputSchema,
   [getVisitorContract.name]: visitorObjectOutputSchema
 };
 
@@ -1055,6 +1330,17 @@ export {
   visitorViewsListOutputSchema,
   foldersListOutputSchema,
   versionsListOutputSchema,
+  dataroomGroupObjectOutputSchema,
+  dataroomGroupMemberObjectOutputSchema,
+  dataroomGroupPermissionObjectOutputSchema,
+  linkPermissionObjectOutputSchema,
+  permissionEntryInputSchema,
+  dataroomGroupOutputSchema,
+  dataroomGroupsListOutputSchema,
+  dataroomGroupMembersListOutputSchema,
+  dataroomGroupPermissionsListOutputSchema,
+  dataroomGroupPermissionsSetOutputSchema,
+  linkPermissionsListOutputSchema,
   deletedObjectOutputSchema,
   listDocumentsContract,
   getDocumentContract,
@@ -1099,7 +1385,19 @@ export {
   updateDataroomFolderContract,
   deleteDataroomFolderContract,
   moveDataroomFolderContract,
+  listDataroomGroupsContract,
+  getDataroomGroupContract,
+  createDataroomGroupContract,
+  updateDataroomGroupContract,
+  deleteDataroomGroupContract,
+  listDataroomGroupMembersContract,
+  addDataroomGroupMembersContract,
+  removeDataroomGroupMemberContract,
+  getDataroomGroupPermissionsContract,
+  setDataroomGroupPermissionsContract,
+  getLinkPermissionsContract,
+  setLinkPermissionsContract,
   getVisitorContract,
   SHARED_TOOL_OUTPUT_SCHEMAS
 };
-//# sourceMappingURL=chunk-DA26JZA2.js.map
+//# sourceMappingURL=chunk-IKMPOGEB.js.map