@papermark/mcp-server 0.7.0 → 0.9.0

package/dist/{chunk-YMSDUZ2I.js → chunk-STGR2RDC.js}

@@ -88,6 +88,12 @@ var linkObjectOutputSchema = z.object({
   target_type: z.enum(["document", "dataroom"]).describe(
     "The kind of resource this link points at. The matching `document_id` / `dataroom_id` field is populated; the other is null."
   ),
+  audience_type: z.enum(["general", "group", "team"]).describe(
+    "Who the link is for. `general` links are open to anyone passing the access controls; `group` links admit only members of the dataroom group in `group_id`."
+  ),
+  group_id: nullableStringOutputSchema(
+    "Dataroom group this link is scoped to. Only set when `audience_type` is `group`."
+  ),
   document_id: nullableStringOutputSchema(
     "Target document id when this is a document link, otherwise null."
   ),
@@ -374,6 +380,92 @@ var foldersListOutputSchema = z.object({
 var versionsListOutputSchema = z.object({
   versions: z.array(documentVersionObjectOutputSchema).describe("Document versions.")
 });
+var dataroomGroupObjectOutputSchema = z.object({
+  id: z.string().describe("Unique dataroom group id."),
+  object: z.literal("dataroom_group").describe(
+    "String representing the object's type. Always `dataroom_group`."
+  ),
+  name: z.string().describe("Group name."),
+  allow_all: z.boolean().describe(
+    "When true, anyone passing the link's other access gates is treated as a member \u2014 the email/domain membership check is skipped."
+  ),
+  domains: z.array(z.string()).describe(
+    "Email domains whose addresses are automatically treated as members (e.g. `acme.com`)."
+  ),
+  member_count: integerOutputSchema("Number of explicit email members."),
+  link_count: integerOutputSchema("Number of links scoped to this group."),
+  dataroom_id: z.string().describe("Dataroom the group belongs to."),
+  created: dateTimeOutputSchema("When the group was created."),
+  updated_at: dateTimeOutputSchema("When the group was last updated.")
+}).passthrough().describe("Papermark dataroom viewer group object.");
+var dataroomGroupMemberObjectOutputSchema = z.object({
+  id: z.string().describe("Membership id \u2014 use it to remove the member."),
+  object: z.literal("dataroom_group_member").describe(
+    "String representing the object's type. Always `dataroom_group_member`."
+  ),
+  email: z.string().describe("Member's email address."),
+  viewer_id: z.string().describe("Id of the team-level viewer this membership points at."),
+  created: dateTimeOutputSchema("When the member was added.")
+}).passthrough().describe("Dataroom group membership object.");
+var permissionItemTypeEnum = z.enum(["dataroom_document", "dataroom_folder"]).describe(
+  "Kind of dataroom item. `dataroom_document` targets a dataroom-document attachment id (from `list_dataroom_documents`); `dataroom_folder` targets a dataroom folder id (from `list_dataroom_folders`)."
+);
+var dataroomGroupPermissionObjectOutputSchema = z.object({
+  object: z.literal("dataroom_group_permission").describe(
+    "String representing the object's type. Always `dataroom_group_permission`."
+  ),
+  item_id: z.string().describe("Dataroom-document or dataroom-folder id."),
+  item_type: permissionItemTypeEnum,
+  can_view: z.boolean().describe("Whether the group can view the item."),
+  can_download: z.boolean().describe("Whether the group can download the item."),
+  updated_at: dateTimeOutputSchema("When the permission was last changed.")
+}).passthrough().describe("Per-item access control for a dataroom group.");
+var linkPermissionObjectOutputSchema = z.object({
+  object: z.literal("link_permission").describe(
+    "String representing the object's type. Always `link_permission`."
+  ),
+  item_id: z.string().describe("Dataroom-document or dataroom-folder id."),
+  item_type: permissionItemTypeEnum,
+  can_view: z.boolean().describe("Whether viewers can view the item."),
+  can_download: z.boolean().describe("Whether viewers can download the item."),
+  can_download_original: z.boolean().describe(
+    "Whether the original (non-watermarked) file can be downloaded. Always false for permissions written via the API."
+  ),
+  updated_at: dateTimeOutputSchema("When the permission was last changed.")
+}).passthrough().describe("Per-item file permission override on a dataroom link.");
+var permissionEntryInputSchema = z.object({
+  item_id: z.string().min(1).describe(
+    "Dataroom-document attachment id (from `list_dataroom_documents`) or dataroom folder id (from `list_dataroom_folders`) \u2014 NOT the team-library document id."
+  ),
+  item_type: permissionItemTypeEnum,
+  can_view: z.boolean().describe("Allow viewing the item."),
+  can_download: z.boolean().describe("Allow downloading the item.")
+}).describe("One per-item permission entry.");
+var dataroomGroupOutputSchema = z.object({
+  group: dataroomGroupObjectOutputSchema.describe(
+    "Dataroom group returned by the tool."
+  )
+});
+var dataroomGroupsListOutputSchema = z.object({
+  groups: z.array(dataroomGroupObjectOutputSchema).describe("Dataroom groups in the current page."),
+  next_cursor: cursorOutputSchema
+});
+var dataroomGroupMembersListOutputSchema = z.object({
+  members: z.array(dataroomGroupMemberObjectOutputSchema).describe("Group members in the current page."),
+  next_cursor: cursorOutputSchema
+});
+var dataroomGroupPermissionsListOutputSchema = z.object({
+  permissions: z.array(dataroomGroupPermissionObjectOutputSchema).describe("Per-item access controls."),
+  next_cursor: cursorOutputSchema
+});
+var dataroomGroupPermissionsSetOutputSchema = z.object({
+  permissions: z.array(dataroomGroupPermissionObjectOutputSchema).describe(
+    "Effective rows for every touched item \u2014 the entries sent plus auto-shown ancestor folders."
+  )
+});
+var linkPermissionsListOutputSchema = z.object({
+  permissions: z.array(linkPermissionObjectOutputSchema).describe("Per-item permission overrides on the link.")
+});
 var deletedObjectOutputSchema = z.object({
   id: z.string().describe("ID of the deleted object."),
   object: z.enum([
@@ -382,7 +474,9 @@ var deletedObjectOutputSchema = z.object({
     "link",
     "dataroom",
     "dataroom_folder",
-    "dataroom_document"
+    "dataroom_document",
+    "dataroom_group",
+    "dataroom_group_member"
   ]).describe("The type of object that was deleted."),
   deleted: z.literal(true).describe("Always `true`. Confirms the object was deleted.")
 });
@@ -433,11 +527,26 @@ Never share a link to a document the user didn't explicitly name. Requires scope
   inputSchema: {
     document_id: z.string().optional().describe("Document id \u2014 required unless `dataroom_id` is set"),
     dataroom_id: z.string().optional().describe("Dataroom id \u2014 alternative to document_id"),
+    audience_type: z.enum(["general", "group"]).optional().describe(
+      "Set to `group` (dataroom links only, together with `group_id`) to scope the link to a dataroom group. Group links are always email-protected; only group members (by email or domain) can open them."
+    ),
+    group_id: z.string().optional().describe(
+      "Dataroom group id from `list_dataroom_groups` \u2014 required when `audience_type` is `group`; must belong to the same dataroom"
+    ),
     name: z.string().optional().describe("Human-readable label for the link"),
     expires_at: z.string().datetime().optional().describe("ISO 8601 timestamp after which the link stops working"),
     password: z.string().optional().describe("Require viewers to enter this password"),
     email_protected: z.boolean().optional().describe("Require viewers enter an email address before viewing"),
+    email_authenticated: z.boolean().optional().describe(
+      "Require viewers to verify their email via a one-time code before viewing (stronger than `email_protected`)"
+    ),
     allow_download: z.boolean().optional().describe("Let viewers download the underlying file"),
+    allow_list: z.array(z.string()).optional().describe(
+      "Restrict access to these emails or domains (e.g. ['@acme.com', 'bob@x.com']). Empty array allows everyone."
+    ),
+    deny_list: z.array(z.string()).optional().describe(
+      "Block these emails or domains from viewing (e.g. ['@rival.com'])."
+    ),
     enable_confidential_view: z.boolean().optional().describe(
       "Enable confidential view: viewer renders only a narrow band of each page at a time (rest is blurred) to prevent capturing the whole document in a single screenshot."
     ),
@@ -446,6 +555,21 @@ Never share a link to a document the user didn't explicitly name. Requires scope
     ),
     watermark_config: watermarkConfigInputSchema.optional().describe(
       "Watermark settings. Only applied when `enable_watermark` is true. Optional even when watermark is enabled \u2014 omit to use viewer defaults."
+    ),
+    enable_screenshot_protection: z.boolean().optional().describe(
+      "Block common screenshot/screen-recording shortcuts while the document is open."
+    ),
+    enable_agreement: z.boolean().optional().describe(
+      "Require viewers to accept an agreement (NDA) before viewing. Must be paired with `agreement_id`."
+    ),
+    agreement_id: z.string().optional().describe(
+      "Id of the agreement (NDA) viewers must accept. Required when `enable_agreement` is true."
+    ),
+    domain: z.string().optional().describe(
+      "Verified custom domain to host the link on (e.g. `docs.acme.com`). Must be passed together with `slug`, and requires a plan that supports custom domains."
+    ),
+    slug: z.string().optional().describe(
+      "Path segment on the custom domain (e.g. `q3-deck` \u2192 `docs.acme.com/q3-deck`). Must be passed together with `domain`."
     )
   }
 };
@@ -456,6 +580,7 @@ var listLinksContract = {
   inputSchema: {
     document_id: z.string().optional().describe("Filter links for a specific document"),
     dataroom_id: z.string().optional().describe("Filter links for a specific dataroom"),
+    group_id: z.string().optional().describe("Filter to group links scoped to a specific dataroom group"),
     limit: z.number().int().min(1).max(100).optional().describe("Page size"),
     cursor: z.string().optional().describe("Pagination cursor")
   }
@@ -821,6 +946,12 @@ Requires scope \`links.write\`.`,
     name: z.string().optional(),
     expires_at: z.string().datetime().nullable().optional().describe("ISO 8601 timestamp, or null to clear the expiry"),
     password: z.string().min(1).nullable().optional().describe("New password, or null to remove password protection"),
+    audience_type: z.enum(["general", "group"]).optional().describe(
+      "Switch the link's audience. `group` (dataroom links only) needs a `group_id` here or already on the link and forces email protection; `general` clears the group scope."
+    ),
+    group_id: z.string().nullable().optional().describe(
+      'Dataroom group id from `list_dataroom_groups`. Set with `audience_type: "group"`, or alone to swap the group of an existing group link.'
+    ),
     email_protected: z.boolean().optional(),
     email_authenticated: z.boolean().optional(),
     allow_download: z.boolean().optional(),
@@ -831,7 +962,19 @@ Requires scope \`links.write\`.`,
       "Watermark settings. Pass an object to replace the existing config, or `null` to clear it. Omit to leave unchanged."
     ),
     enable_screenshot_protection: z.boolean().optional(),
-    enable_confidential_view: z.boolean().optional()
+    enable_confidential_view: z.boolean().optional(),
+    enable_agreement: z.boolean().optional().describe(
+      "Require viewers to accept an agreement (NDA) before viewing. Pair with `agreement_id`."
+    ),
+    agreement_id: z.string().nullable().optional().describe(
+      "Id of the agreement (NDA) viewers must accept, or null to clear it. Required when turning `enable_agreement` on."
+    ),
+    domain: z.string().optional().describe(
+      'Verified custom domain to host the link on (e.g. `docs.acme.com`). Pass together with `slug`. Pass `domain: "papermark.com"` to move the link back to the default domain.'
+    ),
+    slug: z.string().optional().describe(
+      "Path segment on the custom domain. Must be passed together with `domain`."
+    )
   }
 };
 var deleteLinkContract = {
@@ -981,6 +1124,150 @@ var moveDataroomFolderContract = {
     parent_id: z.string().nullable()
   }
 };
+var listDataroomGroupsContract = {
+  name: "list_dataroom_groups",
+  title: "List dataroom groups",
+  description: 'List viewer groups in a dataroom. Groups define an audience (members by email or domain) plus per-item view/download permissions, and are shared via group links (`create_link` with `audience_type: "group"`). Requires scope `datarooms.read`.',
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    limit: z.number().int().min(1).max(100).optional(),
+    cursor: z.string().optional()
+  }
+};
+var getDataroomGroupContract = {
+  name: "get_dataroom_group",
+  title: "Get a dataroom group",
+  description: "Fetch a single dataroom group with its domain rules, allow-all flag, and member/link counts. Requires scope `datarooms.read`.",
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    group_id: z.string().min(1)
+  }
+};
+var createDataroomGroupContract = {
+  name: "create_dataroom_group",
+  title: "Create a dataroom group",
+  description: `Create a viewer group in a dataroom.
+
+WORKFLOW:
+(1) Create the group (optionally with \`domains\` or \`allow_all\`).
+(2) Add explicit members via \`add_dataroom_group_members\`.
+(3) Grant document/folder access via \`set_dataroom_group_permissions\` \u2014 a new group sees NOTHING until permissions are set.
+(4) Share it by creating a link with \`audience_type: "group"\`.
+
+Requires scope \`datarooms.write\`.`,
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    name: z.string().min(1).max(255).describe("Group name"),
+    allow_all: z.boolean().optional().describe(
+      "Treat anyone passing the link's access gates as a member (skips the email/domain membership check)"
+    ),
+    domains: z.array(z.string().min(1)).max(100).optional().describe(
+      "Email domains treated as members, e.g. ['acme.com'] admits jane@acme.com"
+    )
+  }
+};
+var updateDataroomGroupContract = {
+  name: "update_dataroom_group",
+  title: "Update a dataroom group",
+  description: "Rename a dataroom group or change its `domains` / `allow_all` audience rules. PATCH semantics \u2014 omitted fields stay as they are; a passed `domains` array REPLACES the current one. Requires scope `datarooms.write`.",
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    group_id: z.string().min(1),
+    name: z.string().min(1).max(255).optional(),
+    allow_all: z.boolean().optional(),
+    domains: z.array(z.string().min(1)).max(100).optional()
+  }
+};
+var deleteDataroomGroupContract = {
+  name: "delete_dataroom_group",
+  title: "Delete a dataroom group",
+  description: `Delete a dataroom group, its memberships, its permissions, AND every share link pointing at it \u2014 active group links stop resolving immediately.
+
+ALWAYS confirm with the user before calling (echo the group name and its link count via \`get_dataroom_group\`). This is irreversible. Requires scope \`datarooms.write\`.`,
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    group_id: z.string().min(1)
+  }
+};
+var listDataroomGroupMembersContract = {
+  name: "list_dataroom_group_members",
+  title: "List dataroom group members",
+  description: "List a group's explicit email members with their membership ids (needed for `remove_dataroom_group_member`). Viewers admitted via the group's `domains` or `allow_all` are not listed. Requires scope `datarooms.read`.",
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    group_id: z.string().min(1),
+    limit: z.number().int().min(1).max(100).optional(),
+    cursor: z.string().optional()
+  }
+};
+var addDataroomGroupMembersContract = {
+  name: "add_dataroom_group_members",
+  title: "Add dataroom group members",
+  description: "Add members to a dataroom group by email (up to 500 per call). Idempotent \u2014 already-present members are skipped. NO invitation emails are sent; members gain access the next time they open a group link. Requires scope `datarooms.write`.",
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    group_id: z.string().min(1),
+    emails: z.array(z.string().email()).min(1).max(500).describe("Email addresses to add as members")
+  }
+};
+var removeDataroomGroupMemberContract = {
+  name: "remove_dataroom_group_member",
+  title: "Remove a dataroom group member",
+  description: "Remove a member from a dataroom group by membership id (from `list_dataroom_group_members` \u2014 NOT the email or viewer id). The viewer itself is kept; only this group membership is removed. Requires scope `datarooms.write`.",
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    group_id: z.string().min(1),
+    member_id: z.string().min(1).describe("Membership id from `list_dataroom_group_members`")
+  }
+};
+var getDataroomGroupPermissionsContract = {
+  name: "get_dataroom_group_permissions",
+  title: "Get dataroom group permissions",
+  description: "List a group's per-item access controls. Items WITHOUT an entry are invisible to the group's viewers. Requires scope `datarooms.read`.",
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    group_id: z.string().min(1),
+    limit: z.number().int().min(1).max(100).optional(),
+    cursor: z.string().optional()
+  }
+};
+var setDataroomGroupPermissionsContract = {
+  name: "set_dataroom_group_permissions",
+  title: "Set dataroom group permissions",
+  description: `Upsert per-item view/download permissions for a dataroom group. DELTA semantics: entries you send are upserted, entries you omit keep their current state. Ancestor folders of any item made visible are automatically set to \`can_view: true\`.
+
+WORKFLOW:
+(1) Get item ids from \`list_dataroom_documents\` (attachment ids) / \`list_dataroom_folders\` (folder ids) \u2014 NOT team-library document ids.
+(2) Send one entry per item to change. To hide an item, send it with \`can_view: false, can_download: false\`.
+
+Requires scope \`datarooms.write\`.`,
+  inputSchema: {
+    dataroom_id: z.string().min(1),
+    group_id: z.string().min(1),
+    permissions: z.array(permissionEntryInputSchema).min(1).max(1e3).describe("Permission entries to upsert")
+  }
+};
+var getLinkPermissionsContract = {
+  name: "get_link_permissions",
+  title: "Get link permissions",
+  description: "List a dataroom link's per-item file permission overrides. Empty when the link has no overrides \u2014 viewers then see items per the link's group (group links) or the full dataroom. On group-audience links the group's permissions win and these overrides are ignored. Requires scope `links.read`.",
+  inputSchema: {
+    link_id: z.string().min(1)
+  }
+};
+var setLinkPermissionsContract = {
+  name: "set_link_permissions",
+  title: "Set link permissions",
+  description: `Replace a dataroom link's per-item file permissions. FULL-REPLACE semantics: the payload is the complete desired state \u2014 items not listed lose their override, and an empty array clears everything (hiding every item on this link). Ancestor folders of visible items stay visible automatically.
+
+Item ids come from \`list_dataroom_documents\` / \`list_dataroom_folders\`. Has no effect on links with \`audience_type: "group"\` \u2014 their group's permissions take precedence. Requires scope \`links.write\`.`,
+  inputSchema: {
+    link_id: z.string().min(1),
+    permissions: z.array(permissionEntryInputSchema).max(1e3).describe(
+      "Complete desired permission state. Empty array clears all overrides."
+    )
+  }
+};
 var getVisitorContract = {
   name: "get_visitor",
   title: "Get a visitor",
@@ -1033,6 +1320,18 @@ var SHARED_TOOL_OUTPUT_SCHEMAS = {
   [updateDataroomFolderContract.name]: folderOutputSchema,
   [deleteDataroomFolderContract.name]: deletedObjectOutputSchema,
   [moveDataroomFolderContract.name]: folderOutputSchema,
+  [listDataroomGroupsContract.name]: dataroomGroupsListOutputSchema,
+  [getDataroomGroupContract.name]: dataroomGroupObjectOutputSchema,
+  [createDataroomGroupContract.name]: dataroomGroupOutputSchema,
+  [updateDataroomGroupContract.name]: dataroomGroupOutputSchema,
+  [deleteDataroomGroupContract.name]: deletedObjectOutputSchema,
+  [listDataroomGroupMembersContract.name]: dataroomGroupMembersListOutputSchema,
+  [addDataroomGroupMembersContract.name]: dataroomGroupMembersListOutputSchema,
+  [removeDataroomGroupMemberContract.name]: deletedObjectOutputSchema,
+  [getDataroomGroupPermissionsContract.name]: dataroomGroupPermissionsListOutputSchema,
+  [setDataroomGroupPermissionsContract.name]: dataroomGroupPermissionsSetOutputSchema,
+  [getLinkPermissionsContract.name]: linkPermissionsListOutputSchema,
+  [setLinkPermissionsContract.name]: linkPermissionsListOutputSchema,
   [getVisitorContract.name]: visitorObjectOutputSchema
 };
 
@@ -1067,6 +1366,17 @@ export {
   visitorViewsListOutputSchema,
   foldersListOutputSchema,
   versionsListOutputSchema,
+  dataroomGroupObjectOutputSchema,
+  dataroomGroupMemberObjectOutputSchema,
+  dataroomGroupPermissionObjectOutputSchema,
+  linkPermissionObjectOutputSchema,
+  permissionEntryInputSchema,
+  dataroomGroupOutputSchema,
+  dataroomGroupsListOutputSchema,
+  dataroomGroupMembersListOutputSchema,
+  dataroomGroupPermissionsListOutputSchema,
+  dataroomGroupPermissionsSetOutputSchema,
+  linkPermissionsListOutputSchema,
   deletedObjectOutputSchema,
   listDocumentsContract,
   getDocumentContract,
@@ -1111,7 +1421,19 @@ export {
   updateDataroomFolderContract,
   deleteDataroomFolderContract,
   moveDataroomFolderContract,
+  listDataroomGroupsContract,
+  getDataroomGroupContract,
+  createDataroomGroupContract,
+  updateDataroomGroupContract,
+  deleteDataroomGroupContract,
+  listDataroomGroupMembersContract,
+  addDataroomGroupMembersContract,
+  removeDataroomGroupMemberContract,
+  getDataroomGroupPermissionsContract,
+  setDataroomGroupPermissionsContract,
+  getLinkPermissionsContract,
+  setLinkPermissionsContract,
   getVisitorContract,
   SHARED_TOOL_OUTPUT_SCHEMAS
 };
-//# sourceMappingURL=chunk-YMSDUZ2I.js.map
+//# sourceMappingURL=chunk-STGR2RDC.js.map