@stratta/mcp 0.14.0 → 0.15.0

package/dist/confirm.js

@@ -32,6 +32,15 @@ export const CONFIRMED_TOOLS = {
         summary: () => 'remove this option; the evidence filed under it stays on the question',
         prompt: 'Remove it?',
     },
+    // The third deletion, gated since 0.15.0 on both transports: it is the one
+    // that empties a corpus rather than a dossier.
+    ingest_delete: {
+        what: 'Document',
+        summary: () => 'delete this document with all its sections, figures, tables, formulas ' +
+            'and cross-references; the dossiers that cite it keep their citations, ' +
+            'pointing at a document that no longer exists',
+        prompt: 'Delete it?',
+    },
 };
 export const CONFIRMATION_HINT = 'Not recorded: this client cannot ask the user directly. Confirm the ' +
     'decision with the user in the conversation, then call again with ' +

package/dist/tools/catalog.gen.js

@@ -1081,7 +1081,7 @@ export const CATALOG = [
     {
         "name": "ingest_delete",
         "title": "Delete document",
-        "description": "Delete a document with all its sections, figures, tables, formulas and cross-references. Irreversible; use it before re-ingesting a norm.",
+        "description": "Delete a document of your own organization with all its sections, figures, tables, formulas and cross-references. Irreversible; use it before re-ingesting a norm. The user is asked to confirm through the client before anything is deleted, unless confirmed is true because they already did in the conversation. Reserved to owners and administrators.",
         "annotations": {
             "readOnlyHint": false,
             "destructiveHint": true,
@@ -1093,7 +1093,8 @@ export const CATALOG = [
             "remote"
         ],
         "params": {
-            "documentId": "Document id from ingest_create_document."
+            "documentId": "Document id from ingest_create_document.",
+            "confirmed": "true when the user already confirmed the deletion in the conversation. Otherwise the user is asked through the client first."
         }
     }
 ];

package/dist/tools/ingest.d.ts

@@ -77,6 +77,7 @@ export declare const ingestPublish: import("./define.js").ToolDef<{
 }>;
 export declare const ingestDelete: import("./define.js").ToolDef<{
     documentId: z.ZodString;
+    confirmed: z.ZodOptional<z.ZodBoolean>;
 }>;
 export declare const ingestTools: (import("./define.js").ToolDef<{
     code: z.ZodString;
@@ -145,4 +146,7 @@ export declare const ingestTools: (import("./define.js").ToolDef<{
 }> | import("./define.js").ToolDef<{
     documentId: z.ZodString;
     force: z.ZodOptional<z.ZodBoolean>;
+}> | import("./define.js").ToolDef<{
+    documentId: z.ZodString;
+    confirmed: z.ZodOptional<z.ZodBoolean>;
 }>)[];

package/dist/tools/ingest.js

@@ -8,8 +8,10 @@ import { defineTool } from './define.js';
  * its Stratta workspace, from the user's own agent. Every call is
  * authenticated by the user's API key and scoped server-side to their
  * organisation (see convex/ingestionApi.ts). Driven by the `ingest-norm`
- * skill. Absent from the remote transport on purpose: the pipeline starts
- * with a PDF on the caller's disk.
+ * skill. ⚠️ They are served on the remote connector too since 2026-09-05
+ * (`convex/mcpIngestRegistrations.ts`): the pre-pass still reads a PDF on the
+ * caller's disk, which rules out a browser client but not Claude Code, Codex,
+ * Cursor or Gemini CLI.
  *
  * Names, descriptions and annotations come from the generated catalogue. The
  * Zod shapes below are enforced by the SDK before a handler runs, so a bad
@@ -232,7 +234,14 @@ export const ingestPublish = defineTool({
 });
 export const ingestDelete = defineTool({
     ...headOf('ingest_delete'),
-    inputSchema: { documentId: documentId('ingest_delete') },
+    inputSchema: {
+        documentId: documentId('ingest_delete'),
+        // Read by the confirmation gate in `confirm.ts`, never sent on.
+        confirmed: z
+            .boolean()
+            .optional()
+            .describe(param('ingest_delete', 'confirmed')),
+    },
     run: async (client, args) => {
         await client.action(api.ingestionApi.deleteDocument, {
             apiKey: requireApiKey(),

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@stratta/mcp",
   "mcpName": "ch.stratta/mcp",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "MCP server exposing the engineering norms your firm is licensed for (SIA / Eurocodes) to any MCP client, via Stratta TreeRAG.",
   "license": "UNLICENSED",
   "author": "SmartFlow <hello@stratta.ch>",