@papermark/mcp-server 0.6.0 → 0.8.0

package/dist/index.js

@@ -1,14 +1,17 @@
 #!/usr/bin/env node
 import {
   SHARED_TOOL_OUTPUT_SCHEMAS,
+  addDataroomGroupMembersContract,
   addDocumentVersionContract,
   attachDataroomDocumentContract,
   createDataroomContract,
   createDataroomFolderContract,
+  createDataroomGroupContract,
   createFolderContract,
   createLinkContract,
   deleteDataroomContract,
   deleteDataroomFolderContract,
+  deleteDataroomGroupContract,
   deleteDocumentContract,
   deleteFolderContract,
   deleteLinkContract,
@@ -17,16 +20,21 @@ import {
   getDataroomAnalyticsContract,
   getDataroomContract,
   getDataroomFolderContract,
+  getDataroomGroupContract,
+  getDataroomGroupPermissionsContract,
   getDocumentAnalyticsContract,
   getDocumentContract,
   getDocumentVersionContract,
   getFolderContract,
   getLinkAnalyticsContract,
   getLinkContract,
+  getLinkPermissionsContract,
   getViewAnalyticsContract,
   getVisitorContract,
   listDataroomDocumentsContract,
   listDataroomFoldersContract,
+  listDataroomGroupMembersContract,
+  listDataroomGroupsContract,
   listDataroomsContract,
   listDocumentVersionsContract,
   listDocumentsContract,
@@ -39,14 +47,18 @@ import {
   moveDataroomFolderContract,
   moveFolderContract,
   promoteDocumentVersionContract,
+  removeDataroomGroupMemberContract,
   searchDataroomsContract,
   searchDocumentsContract,
+  setDataroomGroupPermissionsContract,
+  setLinkPermissionsContract,
   updateDataroomContract,
   updateDataroomFolderContract,
+  updateDataroomGroupContract,
   updateDocumentContract,
   updateFolderContract,
   updateLinkContract
-} from "./chunk-DA26JZA2.js";
+} from "./chunk-IKMPOGEB.js";
 
 // src/index.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -249,6 +261,14 @@ var api = {
   createLink: (body, token) => request("/v1/links", { method: "POST", body, token }),
   updateLink: (id, body, token) => request(`/v1/links/${id}`, { method: "PATCH", body, token }),
   deleteLink: (id, token) => request(`/v1/links/${id}`, { method: "DELETE", token }),
+  getLinkPermissions: (id, token) => request(`/v1/links/${id}/permissions`, { token }),
+  // Full-replace semantics: the payload is the complete desired state;
+  // items not listed lose their override.
+  setLinkPermissions: (id, body, token) => request(`/v1/links/${id}/permissions`, {
+    method: "PUT",
+    body,
+    token
+  }),
   listViews: (linkId, query, token) => request(`/v1/links/${linkId}/views`, { query, token }),
   // Datarooms
   listDatarooms: (query, token) => request("/v1/datarooms", { query, token }),
@@ -299,6 +319,47 @@ var api = {
     body,
     token
   }),
+  // Dataroom groups
+  listDataroomGroups: (id, query, token) => request(`/v1/datarooms/${id}/groups`, { query, token }),
+  createDataroomGroup: (id, body, token) => request(`/v1/datarooms/${id}/groups`, {
+    method: "POST",
+    body,
+    token
+  }),
+  getDataroomGroup: (id, gid, token) => request(`/v1/datarooms/${id}/groups/${gid}`, { token }),
+  updateDataroomGroup: (id, gid, body, token) => request(`/v1/datarooms/${id}/groups/${gid}`, {
+    method: "PATCH",
+    body,
+    token
+  }),
+  // Also deletes every share link pointing at the group (matching the
+  // dashboard).
+  deleteDataroomGroup: (id, gid, token) => request(`/v1/datarooms/${id}/groups/${gid}`, {
+    method: "DELETE",
+    token
+  }),
+  listDataroomGroupMembers: (id, gid, query, token) => request(
+    `/v1/datarooms/${id}/groups/${gid}/members`,
+    { query, token }
+  ),
+  addDataroomGroupMembers: (id, gid, body, token) => request(
+    `/v1/datarooms/${id}/groups/${gid}/members`,
+    { method: "POST", body, token }
+  ),
+  removeDataroomGroupMember: (id, gid, mid, token) => request(
+    `/v1/datarooms/${id}/groups/${gid}/members/${mid}`,
+    { method: "DELETE", token }
+  ),
+  listDataroomGroupPermissions: (id, gid, query, token) => request(
+    `/v1/datarooms/${id}/groups/${gid}/permissions`,
+    { query, token }
+  ),
+  // Upsert-delta semantics: entries sent are upserted, entries omitted keep
+  // their current state; ancestor folders of visible items are auto-shown.
+  setDataroomGroupPermissions: (id, gid, body, token) => request(
+    `/v1/datarooms/${id}/groups/${gid}/permissions`,
+    { method: "PUT", body, token }
+  ),
   // Visitors
   listVisitors: (query, token) => request("/v1/visitors", { query, token }),
   getVisitor: (id, token) => request(`/v1/visitors/${id}`, { token }),
@@ -359,6 +420,18 @@ var TOOL_ANNOTATIONS = {
   update_dataroom_folder: destructiveTool(),
   delete_dataroom_folder: destructiveTool(),
   move_dataroom_folder: destructiveTool(),
+  list_dataroom_groups: readTool(),
+  get_dataroom_group: readTool(),
+  create_dataroom_group: writeTool(),
+  update_dataroom_group: destructiveTool(),
+  delete_dataroom_group: destructiveTool(),
+  list_dataroom_group_members: readTool(),
+  add_dataroom_group_members: writeTool(),
+  remove_dataroom_group_member: destructiveTool(),
+  get_dataroom_group_permissions: readTool(),
+  set_dataroom_group_permissions: destructiveTool(),
+  get_link_permissions: readTool(),
+  set_link_permissions: destructiveTool(),
   get_visitor: readTool()
 };
 var TOOL_OUTPUT_SCHEMAS = {
@@ -498,14 +571,17 @@ function registerTools(server) {
     "upload_document",
     {
       title: "Upload a document",
-      description: `Upload a document to Papermark from a local file path OR a public HTTPS URL.
+      description: `Add a document to Papermark from a local file path, a public HTTPS URL to fetch, OR a non-file source (an external link / public Notion page).
 
 WORKFLOW:
-(1) Resolve the source: the user must name either a \`file_path\` (local filesystem \u2014 stdio mode only) OR a \`source_url\` (public HTTPS). Never guess a path; if the user attached a file in chat but didn't give a local path, ASK them to save it and provide the path.
-(2) Confirm the target \`name\` if the user wants something other than the filename.
+(1) Resolve the source \u2014 exactly one of:
+    \u2022 \`file_path\` (local filesystem \u2014 stdio mode only). Never guess a path; if the user attached a file in chat but didn't give a local path, ASK them to save it and provide the path.
+    \u2022 \`source_url\` (public HTTPS) \u2014 the server fetches and stores the file.
+    \u2022 \`type\` (\`link\` or \`notion\`) + \`external_url\` \u2014 stores a document that points at the URL without downloading it. Use \`notion\` for a publicly-accessible Notion page, \`link\` for any other external page.
+(2) Confirm the target \`name\` if the user wants something other than the filename / URL.
 (3) If the user wants a share link in the same breath, set \`create_link: true\` \u2014 otherwise follow up with \`create_link\` so you can set password/expiry/email gating explicitly.
 
-Don't upload any file the user didn't explicitly point at. Requires scope \`documents.write\`.`,
+Don't add any source the user didn't explicitly point at. Requires scope \`documents.write\`.`,
       inputSchema: {
         file_path: z.string().optional().describe(
           "Absolute local path \u2014 only works when the MCP server runs on the same machine as the file (stdio mode)"
@@ -513,9 +589,17 @@ Don't upload any file the user didn't explicitly point at. Requires scope \`docu
         source_url: z.string().url().refine((s) => s.startsWith("https://"), {
           message: "source_url must use https:// (http is rejected by the API)"
         }).optional().describe(
-          "Public HTTPS URL the server should fetch (alternative to file_path)"
+          "Public HTTPS URL the server should fetch and store (alternative to file_path)"
+        ),
+        type: z.enum(["link", "notion"]).optional().describe(
+          "Create a non-file document from `external_url`: `link` (any external page) or `notion` (a public Notion page). Omit for file uploads via file_path/source_url."
+        ),
+        external_url: z.string().url().refine((s) => s.startsWith("https://"), {
+          message: "external_url must use https:// (http is rejected by the API)"
+        }).optional().describe(
+          "Target URL stored as-is (not downloaded) for `type` link/notion documents. Required when `type` is set."
         ),
-        name: z.string().optional().describe("Display name; defaults to the filename"),
+        name: z.string().optional().describe("Display name; defaults to the filename or URL"),
         content_type: z.string().optional().describe("MIME type; inferred from extension when omitted"),
         folder_id: z.string().optional().describe(
           "Destination folder id (created beforehand via `create_folder`). Omit for the team-library root."
@@ -524,6 +608,31 @@ Don't upload any file the user didn't explicitly point at. Requires scope \`docu
       }
     },
     async (args) => run(async () => {
+      if (args.type) {
+        if (!args.external_url) {
+          throw new Error(
+            `external_url is required when type is "${args.type}".`
+          );
+        }
+        if (args.file_path || args.source_url) {
+          throw new Error(
+            "For type link/notion, provide external_url only (not file_path or source_url)."
+          );
+        }
+        const doc2 = await api.createDocument({
+          name: args.name ?? args.external_url,
+          type: args.type,
+          external_url: args.external_url,
+          folder_id: args.folder_id,
+          create_link: args.create_link
+        });
+        return { document: doc2 };
+      }
+      if (args.external_url) {
+        throw new Error(
+          'external_url requires type to be "link" or "notion".'
+        );
+      }
       if (!args.file_path && !args.source_url) {
         throw new Error(
           "Provide either file_path (local) or source_url (remote)."
@@ -847,8 +956,14 @@ Don't upload any file the user didn't explicitly point at. Requires scope \`docu
       inputSchema: addDocumentVersionContract.inputSchema
     },
     async (args) => run(async () => {
+      if (!!args.source_url === !!args.external_url) {
+        throw new Error(
+          "Provide exactly one of source_url (file documents) or external_url (link/notion documents)."
+        );
+      }
       const v = await api.addDocumentVersion(args.document_id, {
-        source_url: args.source_url
+        source_url: args.source_url,
+        external_url: args.external_url
       });
       return { version: v };
     }, "add_document_version")
@@ -1153,6 +1268,186 @@ Don't upload any file the user didn't explicitly point at. Requires scope \`docu
       return { folder: f };
     }, "move_dataroom_folder")
   );
+  server.registerTool(
+    listDataroomGroupsContract.name,
+    {
+      title: listDataroomGroupsContract.title,
+      description: listDataroomGroupsContract.description,
+      inputSchema: listDataroomGroupsContract.inputSchema
+    },
+    async (args) => run(async () => {
+      const list = await api.listDataroomGroups(args.dataroom_id, {
+        limit: args.limit,
+        cursor: args.cursor
+      });
+      return { groups: list.data, next_cursor: list.next_cursor };
+    }, "list_dataroom_groups")
+  );
+  server.registerTool(
+    getDataroomGroupContract.name,
+    {
+      title: getDataroomGroupContract.title,
+      description: getDataroomGroupContract.description,
+      inputSchema: getDataroomGroupContract.inputSchema
+    },
+    async (args) => run(
+      () => api.getDataroomGroup(args.dataroom_id, args.group_id),
+      "get_dataroom_group"
+    )
+  );
+  server.registerTool(
+    createDataroomGroupContract.name,
+    {
+      title: createDataroomGroupContract.title,
+      description: createDataroomGroupContract.description,
+      inputSchema: createDataroomGroupContract.inputSchema
+    },
+    async (args) => run(async () => {
+      const { dataroom_id, ...body } = args;
+      const group = await api.createDataroomGroup(dataroom_id, body);
+      return { group };
+    }, "create_dataroom_group")
+  );
+  server.registerTool(
+    updateDataroomGroupContract.name,
+    {
+      title: updateDataroomGroupContract.title,
+      description: updateDataroomGroupContract.description,
+      inputSchema: updateDataroomGroupContract.inputSchema
+    },
+    async (args) => run(async () => {
+      const { dataroom_id, group_id, ...body } = args;
+      if (Object.keys(body).length === 0) {
+        throw new Error(
+          "Provide at least one of `name`, `allow_all`, `domains`."
+        );
+      }
+      const group = await api.updateDataroomGroup(
+        dataroom_id,
+        group_id,
+        body
+      );
+      return { group };
+    }, "update_dataroom_group")
+  );
+  server.registerTool(
+    deleteDataroomGroupContract.name,
+    {
+      title: deleteDataroomGroupContract.title,
+      description: deleteDataroomGroupContract.description,
+      inputSchema: deleteDataroomGroupContract.inputSchema
+    },
+    async (args) => run(
+      () => api.deleteDataroomGroup(args.dataroom_id, args.group_id),
+      "delete_dataroom_group"
+    )
+  );
+  server.registerTool(
+    listDataroomGroupMembersContract.name,
+    {
+      title: listDataroomGroupMembersContract.title,
+      description: listDataroomGroupMembersContract.description,
+      inputSchema: listDataroomGroupMembersContract.inputSchema
+    },
+    async (args) => run(async () => {
+      const list = await api.listDataroomGroupMembers(
+        args.dataroom_id,
+        args.group_id,
+        { limit: args.limit, cursor: args.cursor }
+      );
+      return { members: list.data, next_cursor: list.next_cursor };
+    }, "list_dataroom_group_members")
+  );
+  server.registerTool(
+    addDataroomGroupMembersContract.name,
+    {
+      title: addDataroomGroupMembersContract.title,
+      description: addDataroomGroupMembersContract.description,
+      inputSchema: addDataroomGroupMembersContract.inputSchema
+    },
+    async (args) => run(async () => {
+      const list = await api.addDataroomGroupMembers(
+        args.dataroom_id,
+        args.group_id,
+        { emails: args.emails }
+      );
+      return { members: list.data, next_cursor: list.next_cursor };
+    }, "add_dataroom_group_members")
+  );
+  server.registerTool(
+    removeDataroomGroupMemberContract.name,
+    {
+      title: removeDataroomGroupMemberContract.title,
+      description: removeDataroomGroupMemberContract.description,
+      inputSchema: removeDataroomGroupMemberContract.inputSchema
+    },
+    async (args) => run(
+      () => api.removeDataroomGroupMember(
+        args.dataroom_id,
+        args.group_id,
+        args.member_id
+      ),
+      "remove_dataroom_group_member"
+    )
+  );
+  server.registerTool(
+    getDataroomGroupPermissionsContract.name,
+    {
+      title: getDataroomGroupPermissionsContract.title,
+      description: getDataroomGroupPermissionsContract.description,
+      inputSchema: getDataroomGroupPermissionsContract.inputSchema
+    },
+    async (args) => run(async () => {
+      const list = await api.listDataroomGroupPermissions(
+        args.dataroom_id,
+        args.group_id,
+        { limit: args.limit, cursor: args.cursor }
+      );
+      return { permissions: list.data, next_cursor: list.next_cursor };
+    }, "get_dataroom_group_permissions")
+  );
+  server.registerTool(
+    setDataroomGroupPermissionsContract.name,
+    {
+      title: setDataroomGroupPermissionsContract.title,
+      description: setDataroomGroupPermissionsContract.description,
+      inputSchema: setDataroomGroupPermissionsContract.inputSchema
+    },
+    async (args) => run(async () => {
+      const res = await api.setDataroomGroupPermissions(
+        args.dataroom_id,
+        args.group_id,
+        { permissions: args.permissions }
+      );
+      return { permissions: res.data };
+    }, "set_dataroom_group_permissions")
+  );
+  server.registerTool(
+    getLinkPermissionsContract.name,
+    {
+      title: getLinkPermissionsContract.title,
+      description: getLinkPermissionsContract.description,
+      inputSchema: getLinkPermissionsContract.inputSchema
+    },
+    async (args) => run(async () => {
+      const res = await api.getLinkPermissions(args.link_id);
+      return { permissions: res.data };
+    }, "get_link_permissions")
+  );
+  server.registerTool(
+    setLinkPermissionsContract.name,
+    {
+      title: setLinkPermissionsContract.title,
+      description: setLinkPermissionsContract.description,
+      inputSchema: setLinkPermissionsContract.inputSchema
+    },
+    async (args) => run(async () => {
+      const res = await api.setLinkPermissions(args.link_id, {
+        permissions: args.permissions
+      });
+      return { permissions: res.data };
+    }, "set_link_permissions")
+  );
   server.registerTool(
     getVisitorContract.name,
     {