mcp-scraper 0.28.2 → 0.29.0

package/README.md

@@ -88,7 +88,7 @@ Build the branded one-click bundle:
 npm run build:mcpb
 ```
 
-The generated bundle is written to `build/mcpb/mcp-scraper-<version>.mcpb` and copied to `public/downloads/` for the hosted download. The current public bundle is `https://mcpscraper.dev/downloads/mcp-scraper.mcpb` (`0.28.2`, SHA-256 `f44ab0f1ce8ef9680558b6f3e7e21cf45d1621a826f1b803180512c7baa9a4fb`). Install it by opening or dragging it into Claude Desktop. Claude displays the `MCP Scraper` install card, icon, and API-key configuration field from the bundle manifest.
+The generated bundle is written to `build/mcpb/mcp-scraper-<version>.mcpb` and copied to `public/downloads/` for the hosted download. The current public bundle is `https://mcpscraper.dev/downloads/mcp-scraper.mcpb` (`0.29.0`, SHA-256 `382bed0ad851500a9aada6b9d4b30d5c9a2da4c33faffa1b6415a18f14d6c7c0`). Install it by opening or dragging it into Claude Desktop. Claude displays the `MCP Scraper` install card, icon, and API-key configuration field from the bundle manifest.
 
 The MCPB install exposes every tool — web-intelligence plus all `browser_*` tools — through the one `mcp-scraper` server.
 

package/dist/bin/api-server.cjs

@@ -29723,7 +29723,7 @@ var PACKAGE_VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    PACKAGE_VERSION = "0.28.2";
+    PACKAGE_VERSION = "0.29.0";
   }
 });
 
@@ -29845,12 +29845,14 @@ Multi-step orchestrations \u2014 prefer these over hand-chaining primitives when
 
 ## Memory
 mcp-scraper also exposes persistent per-user memory tools (notes, facts, vaults,
-scheduled actions, tables, channels) backed by memory.mcpscraper.dev. Every account starts with 14
+scheduled actions, tables, channels) backed by memory.mcpscraper.dev. Every account starts with 15
 vaults \u2014 call **list-vaults** to see what exists before creating anything new. Pick the vault whose job
 matches the content: **Ideas** (unvalidated concepts), **Knowledge** (distilled lessons/how-tos),
 **Library** (raw source material \u2014 articles, transcripts), **People** (one durable note per person/org),
-**Communications** (individual conversation records), **Calendar** (time-anchored entries), **Tasks**
-(action items with a status), **Projects** (durable named initiatives), **Issues** (something broken),
+**Deals** (commercial opportunities tied to a known person or organization), **Communications** (individual
+conversation records and drafts), **Calendar** (time-anchored entries), **Tasks** (action items linked to a
+known Project), **Projects** (only codebases, known client projects, personal projects, or ongoing siloed
+workstreams), **Issues** (something broken),
 **Improvement Log** (receipts of changes made and whether they worked), **Experiments** (hypothesis +
 measured result), **Sprint** (current cycle's scope), **Inspiration** (other people's work worth
 studying), **Skills** (reusable skill packages; each requires \`scripts/\` and at least one of
@@ -29864,6 +29866,14 @@ deliberate edits and migrations. Use
 they'll filter/sort by exact value. **memory-search** is meaning-based over full content (embeds, slower);
 **memory-list** filters one vault by kind/tags (fast, exact).
 
+For People, Deals, Projects, Tasks, and Communications, use the returned contract rather than guessing:
+People only holds a real person or organization hub; Deals need a known party; Projects need
+\`project_kind\`; every Task needs a verified \`project_ref\` and matching project name; and email drafts
+awaiting human review need \`direction:"draft"\` with \`approval_state:"pending"\`. Link a known person,
+project, deal, or communication when verified. If a required relationship is not clear, ask the user rather
+than creating a free-floating record. Overview is the review queue: editing leaves a draft pending, and
+approval or denial records a state only\u2014it does not send email.
+
 Treat every memory create or update as a graph operation. **prepare-memory-write** supplies the initial
 shortlist; use **memory-search** when it is weak or the topic is broad, and **memory-get** to read the best
 candidates in full. Add only links supported by the notes: same-
@@ -34939,7 +34949,7 @@ var init_memory_tool_schemas = __esm({
     MemoryCaptureSchema = {
       id: "memory-capture",
       upstreamName: "memoryCaptureTool",
-      description: "Strict normal-create path for durable memory. Before capture, list the complete tag vocabulary, call prepare-memory-write, run hybrid memory-search for related notes, and read the strongest link candidates. This tool refuses incomplete notes, writes through memory-put, registers canonical tags, and verifies persisted content and props. Reserve memory-put for low-level migrations or deliberate edits.",
+      description: "Strict normal-create path for durable memory. Before capture, list the complete tag vocabulary, call prepare-memory-write, run hybrid memory-search for related notes, and read the strongest link candidates. This tool refuses incomplete notes and invalid relationship-domain writes: projects need a project kind, tasks need a verified project, deals need a known party, and draft emails need a pending approval state. It writes through memory-put, registers canonical tags, and verifies persisted content and props. Reserve memory-put for low-level migrations or deliberate edits.",
       input: {
         vault: import_zod37.z.string(),
         folder: import_zod37.z.string().optional(),
@@ -34997,7 +35007,7 @@ var init_memory_tool_schemas = __esm({
     PrepareMemoryWriteSchema = {
       id: "prepare-memory-write",
       upstreamName: "prepareMemoryWriteTool",
-      description: "Mandatory planning pass for a normal new memory. First inspect the complete tag vocabulary with list-memory-tags; then this pass routes the note, returns the live template and natural vault relationships, resolves proposed tags, and shortlists interlinks. Use hybrid memory-search (3 focused queries, 50 fused candidates, bounded graph expansion, rerank to 30 by default) and read strong related notes before capture. This is an explicit AI workflow directive, not a claim of persisted call-order enforcement.",
+      description: "Mandatory planning pass for a normal new memory. First inspect the complete tag vocabulary with list-memory-tags; then this pass routes the note, returns the live template and natural vault relationships, resolves proposed tags, and shortlists interlinks. For People, Deals, Projects, Tasks, and Communications, it also returns required relationship and approval guidance: search existing records first and ask rather than inventing a missing project or party. Use hybrid memory-search (3 focused queries, 50 fused candidates, bounded graph expansion, rerank to 30 by default) and read strong related notes before capture. This is an explicit AI workflow directive, not a claim of persisted call-order enforcement.",
       input: {
         title: import_zod37.z.string().min(1),
         content: import_zod37.z.string().min(1),
@@ -35704,10 +35714,10 @@ var init_memory_tool_schemas = __esm({
     PutSchema = {
       id: "memory-put",
       upstreamName: "putTool",
-      description: "Create or edit one note at a path in a memory vault; content is persisted and indexed for search. For row-shaped datasets you'll filter/sort by exact value, use table-create/table-insert-rows/table-query instead. Ordinary vaults are indexed and shareable \u2014 never store real secrets there; use a secure vault (create-secure-vault) instead, which is never indexed or shareable and is encrypted at rest. Requires write scope.",
+      description: "Create or deliberately edit one note at a path in a memory vault; content is persisted and indexed for search. For normal new People, Deals, Projects, Tasks, or Communications records, use prepare-memory-write then memory-capture: People must be real people or organizations, Deals need a known party, Projects need a supported kind, Tasks need a verified Project, and draft emails need pending approval. For row-shaped datasets you'll filter/sort by exact value, use table-create/table-insert-rows/table-query instead. Ordinary vaults are indexed and shareable \u2014 never store real secrets there; use a secure vault (create-secure-vault) instead, which is never indexed or shareable and is encrypted at rest. Requires write scope.",
       input: {
         vault: import_zod37.z.string().optional().describe(
-          "Vault to write to. Optional; defaults to the session active vault, then the first vault the caller is entitled to. On a default-provisioned account, pick the vault whose job matches the content (see the server instructions for the full 13-vault guide) rather than defaulting blindly \u2014 e.g. a lesson learned goes in Knowledge, the raw source it came from goes in Library, a broken feature goes in Issues, a named real-world initiative goes in Projects."
+          "Vault to write to. Optional; defaults to the session active vault, then the first vault the caller is entitled to. On a default-provisioned account, pick the vault whose job matches the content (see the server instructions for the full 15-vault guide) rather than defaulting blindly \u2014 e.g. a lesson learned goes in Knowledge, the raw source it came from goes in Library, a broken feature goes in Issues, a named real-world initiative goes in Projects. Do not use this low-level tool to create ordinary People, Deals, Projects, Tasks, or Communications records: first use prepare-memory-write then memory-capture so relationships and approval state are validated."
         ),
         path: import_zod37.z.string().optional().describe("Vault-relative note path to create or overwrite, e.g. projects/q3-plan. Writing an existing path replaces it. Required unless shareId is given."),
         shareId: import_zod37.z.string().optional().describe("Edit a note someone individually shared with you and you accepted (accept-share), by its shareId, instead of vault+path. Requires the share to grant edit permission, and baseRevision is mandatory (get the current revision first) since you are editing alongside the owner and possibly others."),
@@ -36494,9 +36504,9 @@ var init_memory_tool_schemas = __esm({
     GetVaultContractSchema = {
       id: "get-vault-contract",
       upstreamName: "getVaultContractTool",
-      description: "Read the machine-enforced purpose, template, statuses, types, natural neighbor vaults, and typed relationship guidance for one of the 13 governed Obsidian-style vaults. Call before composing a note when the correct shape is uncertain.",
+      description: "Read the machine-enforced purpose, template, statuses, types, natural neighbor vaults, and typed relationship guidance for one of the 15 governed Obsidian-style vaults. Call before composing a note when the correct shape is uncertain.",
       input: {
-        vault: import_zod37.z.string().describe("One governed vault: Ideas, Inspiration, Knowledge, Library, People, Communications, Calendar, Tasks, Projects, Issues, Improvement Log, Experiments, or Sprint.")
+        vault: import_zod37.z.string().describe("One governed vault: Ideas, Inspiration, Knowledge, Library, People, Deals, Communications, Calendar, Tasks, Projects, Issues, Improvement Log, Experiments, Sprint, or Skills.")
       },
       output: {
         ok: import_zod37.z.boolean(),
@@ -36566,17 +36576,17 @@ var init_memory_tool_schemas = __esm({
     ProvisionDefaultsSchema = {
       id: "provision-defaults",
       upstreamName: "provisionDefaultsTool",
-      description: "Provision the standard 14-vault memory structure (Ideas, Inspiration, Knowledge, Library, People, Communications, Calendar, Tasks, Projects, Issues, Improvement Log, Experiments, Sprint, Skills) for an identity. Idempotent \u2014 existing vaults are untouched. Optionally issues a fresh API key entitled to all 14. Requires admin scope.",
+      description: "Provision the standard 15-vault memory structure (Ideas, Inspiration, Knowledge, Library, People, Deals, Communications, Calendar, Tasks, Projects, Issues, Improvement Log, Experiments, Sprint, Skills) for an identity. Idempotent \u2014 existing records are untouched and existing vault contracts are refreshed. Optionally issues a fresh API key entitled to all 15. Requires admin scope.",
       input: {
-        granteeIdentity: import_zod37.z.string().min(1).describe("Identity that should OWN the 14 default vaults (e.g. an email or user id)."),
-        issueKey: import_zod37.z.boolean().optional().describe("When true, also issue a new API key for the identity entitled to all 14 vaults and return its secret once. Default false."),
+        granteeIdentity: import_zod37.z.string().min(1).describe("Identity that should OWN the 15 default vaults (e.g. an email or user id)."),
+        issueKey: import_zod37.z.boolean().optional().describe("When true, also issue a new API key for the identity entitled to all 15 vaults and return its secret once. Default false."),
         plan: import_zod37.z.enum(["free", "pro", "team", "enterprise"]).optional().describe("Subscription plan carried by the issued key. Optional; defaults to free. Only used when issueKey is true.")
       },
       output: {
         ok: import_zod37.z.boolean().describe("True when provisioning succeeded; false on auth/scope error."),
         identity: import_zod37.z.string().optional().describe("Identity the vaults were provisioned for."),
-        created: import_zod37.z.array(import_zod37.z.string()).optional().describe("Vault names newly created on this call (empty when all 14 already existed)."),
-        vaults: import_zod37.z.array(import_zod37.z.string()).optional().describe("All 14 default vault names the identity now owns."),
+        created: import_zod37.z.array(import_zod37.z.string()).optional().describe("Vault names newly created on this call (empty when all 15 already existed)."),
+        vaults: import_zod37.z.array(import_zod37.z.string()).optional().describe("All 15 default vault names the identity now owns."),
         keyId: import_zod37.z.string().optional().describe("Stable id of the issued key. Present only when issueKey was true."),
         secret: import_zod37.z.string().optional().describe("The issued key secret \u2014 RETURNED ONCE. Present only when issueKey was true."),
         plan: import_zod37.z.string().optional().describe("Plan assigned to the issued key. Present only when issueKey was true."),
@@ -41197,7 +41207,7 @@ function cors(c) {
   const local = !!origin && /^http:\/\/localhost(?::\d+)?$/.test(origin);
   if (origin && (configured.includes(origin) || local)) c.header("Access-Control-Allow-Origin", origin);
   c.header("Vary", "Origin");
-  c.header("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
+  c.header("Access-Control-Allow-Methods", "GET, POST, DELETE, OPTIONS");
   c.header("Access-Control-Allow-Headers", "content-type");
 }
 function workspaceRecord(vault, note) {
@@ -41218,16 +41228,53 @@ function workspaceRecord(vault, note) {
 }
 function defaultType(vault) {
   if (vault === "People" || vault === "Communications") return "unclassified";
+  if (vault === "Deals") return "deal";
   if (vault === "Projects") return "project";
   if (vault === "Tasks") return "task";
   return "unclassified";
 }
 function defaultStatus(vault) {
   if (vault === "People") return "active";
+  if (vault === "Deals") return "lead";
   if (vault === "Projects") return "active";
   if (vault === "Tasks") return "to_do";
   return "inbox";
 }
+function nonEmptyStrings(value) {
+  return Array.isArray(value) ? value.filter((entry) => typeof entry === "string" && entry.trim().length > 0) : [];
+}
+function validateNewRecord(vault, props) {
+  const type = typeof props.type === "string" ? props.type : "";
+  if (vault === "People" && !["person", "organization"].includes(type)) return "People records must be a person or organization";
+  if (vault === "Deals") {
+    if (type !== "deal") return "Deals records must have type deal";
+    if (typeof props.organization_ref !== "string" && nonEmptyStrings(props.person_refs).length === 0) {
+      return "Deals require a known organization or person";
+    }
+  }
+  if (vault === "Projects") {
+    if (!["project", "vault_settings"].includes(type)) return "Projects records must have type project";
+    if (type === "project" && !["codebase", "client", "personal", "workstream"].includes(String(props.project_kind ?? ""))) {
+      return "Projects require project_kind: codebase, client, personal, or workstream";
+    }
+  }
+  if (vault === "Tasks") {
+    if (!["task", "milestone"].includes(type)) return "Tasks records must have type task or milestone";
+    if (typeof props.project_ref !== "string" || !props.project_ref.trim() || typeof props.project !== "string" || !props.project.trim()) {
+      return "Tasks must be linked to an existing project";
+    }
+  }
+  if (vault === "Communications") {
+    if (!["email", "slack", "message", "call", "meeting", "social_media", "thread", "decision"].includes(type)) return "Communications records need a valid communication type";
+    if (!["none", "needs_reply", "needs_review", "waiting"].includes(String(props.attention_state ?? ""))) {
+      return "Communications require attention_state: none, needs_reply, needs_review, or waiting";
+    }
+    if (type === "email" && props.direction === "draft" && props.approval_state !== "pending") {
+      return "Email drafts awaiting review must have approval_state pending";
+    }
+  }
+  return null;
+}
 function shouldRetryMemoryRead(error) {
   return /deadlock|timeout|timed out|temporar|econnreset|fetch failed/i.test(error ?? "");
 }
@@ -41274,7 +41321,7 @@ var init_vault_routes = __esm({
     "use strict";
     import_hono22 = require("hono");
     init_memory();
-    VAULTS = ["People", "Projects", "Tasks", "Communications"];
+    VAULTS = ["People", "Deals", "Projects", "Tasks", "Communications"];
     MAX_VAULT_RECORDS = 200;
     MAX_MEMORY_READ_CONCURRENCY = 4;
     MAX_MEMORY_READ_ATTEMPTS = 3;
@@ -41308,6 +41355,8 @@ var init_vault_routes = __esm({
       const content = typeof body.content === "string" && body.content.length <= 1e5 ? body.content : "";
       const props = propsValue(body.props) ?? {};
       if (!isVault(vault) || !path6 || !title) return c.json({ ok: false, error: "vault, path, and title are required" }, 400);
+      const validationError = validateNewRecord(vault, props);
+      if (validationError) return c.json({ ok: false, error: validationError }, 400);
       const baseRevision = typeof body.baseRevision === "number" && Number.isInteger(body.baseRevision) ? body.baseRevision : void 0;
       const result = await memoryCall("putTool", { vault, path: path6, title, content: content || title, props, ...baseRevision === void 0 ? {} : { baseRevision } }, token);
       return c.json(result, result.ok ? 200 : result.conflict ? 409 : 502);
@@ -41358,6 +41407,26 @@ var init_vault_routes = __esm({
       }, token);
       return c.json(result, result.ok ? 200 : result.conflict ? 409 : 502);
     });
+    vaultApp.delete("/api/records", async (c) => {
+      const body = await c.req.json().catch(() => ({}));
+      const token = typeof body.token === "string" ? body.token : void 0;
+      if (!validToken(token)) return c.json({ ok: false, error: "missing or malformed Vault App link" }, 401);
+      const vault = body.vault;
+      const path6 = stringValue(body.path, 320);
+      const baseRevision = typeof body.baseRevision === "number" && Number.isInteger(body.baseRevision) ? body.baseRevision : void 0;
+      if (vault !== "Tasks" || !path6) return c.json({ ok: false, error: "only a valid task record can be deleted" }, 400);
+      const current = await readMemory("getTool", { vault, path: path6 }, token);
+      if (!current.ok || !current.note) return c.json(current, current.ok ? 404 : 502);
+      if (!["task", "milestone"].includes(typeof current.note.props?.type === "string" ? current.note.props.type : defaultType("Tasks"))) {
+        return c.json({ ok: false, error: "only task records can be deleted" }, 400);
+      }
+      const result = await memoryCall("deleteNoteTool", {
+        vault,
+        path: path6,
+        baseRevision: baseRevision ?? current.note.revision
+      }, token);
+      return c.json(result, result.ok ? 200 : result.conflict ? 409 : 502);
+    });
     vaultApp.post("/api/communications/review", async (c) => {
       const body = await c.req.json().catch(() => ({}));
       const token = typeof body.token === "string" ? body.token : void 0;
@@ -41368,20 +41437,25 @@ var init_vault_routes = __esm({
       const content = typeof body.content === "string" && body.content.length <= 1e5 ? body.content : void 0;
       const feedback = typeof body.feedback === "string" ? body.feedback.trim().slice(0, 1e4) : void 0;
       const baseRevision = typeof body.baseRevision === "number" && Number.isInteger(body.baseRevision) ? body.baseRevision : void 0;
-      if (!path6 || !action || !["accept", "deny", "edit"].includes(action) || body.title !== void 0 && !title) {
+      const normalizedAction = action === "accept" ? "approve" : action;
+      if (!path6 || !normalizedAction || !["approve", "deny", "edit"].includes(normalizedAction) || body.title !== void 0 && !title) {
         return c.json({ ok: false, error: "valid path, action, and optional draft fields are required" }, 400);
       }
       const current = await readMemory("getTool", { vault: "Communications", path: path6 }, token);
       if (!current.ok || !current.note) return c.json(current, current.ok ? 404 : 502);
       if (current.note.props?.type !== "email") return c.json({ ok: false, error: "only email communications can be reviewed" }, 400);
-      const reviewed = action === "accept" || action === "deny";
-      const reviewState = action === "accept" ? "accepted" : action === "deny" ? "denied" : "pending";
-      const status = action === "accept" ? "triaged" : action === "deny" ? "archived" : typeof current.note.props?.status === "string" ? current.note.props.status : "inbox";
+      const reviewed = normalizedAction === "approve" || normalizedAction === "deny";
+      const reviewState = normalizedAction === "approve" ? "accepted" : normalizedAction === "deny" ? "denied" : "pending";
+      const approvalState = normalizedAction === "approve" ? "approved" : normalizedAction === "deny" ? "denied" : "pending";
+      const status = normalizedAction === "approve" ? "triaged" : normalizedAction === "deny" ? "archived" : "inbox";
       const props = {
         ...current.note.props ?? {},
         status,
         review_state: reviewState,
+        approval_state: approvalState,
+        attention_state: normalizedAction === "edit" ? "needs_review" : "none",
         ...reviewed ? { reviewed_at: (/* @__PURE__ */ new Date()).toISOString() } : {},
+        ...normalizedAction === "approve" ? { approved_at: (/* @__PURE__ */ new Date()).toISOString() } : {},
         ...feedback ? { review_feedback: feedback } : {}
       };
       const result = await memoryCall("putTool", {
@@ -41408,7 +41482,7 @@ var init_vault_routes = __esm({
         path: `Inbox/activity-${stamp}`,
         title,
         content: content || title,
-        props: { status: "triaged", type: "decision", occurred_at: (/* @__PURE__ */ new Date()).toISOString(), ...props }
+        props: { status: "triaged", type: "decision", attention_state: "none", occurred_at: (/* @__PURE__ */ new Date()).toISOString(), ...props }
       }, token);
       return c.json(result, result.ok ? 200 : 502);
     });