fix(crunchbase): widen tier-gated collection allowlists and cap the deleted feed

The deleted-entity, autocomplete, and fields-metadata allowlists each held only
the collections the narrowest package tier publishes, so requests valid on a
richer package were rejected locally before any request went out. An Advanced
Financials key could not read the funding-round deletion feed at all.

- deleted-entity collections: 9 -> the 14-collection union across all tiers
- autocomplete and fields-metadata: 14 -> all 43 collections
- clamp the deleted feed to its documented max of 25, not Search's 1000
- offer "All collections" so the cross-collection feed stays reachable
- name the richer-tier card additions instead of presenting the base set as exhaustive

Also rewrites a test that asserted the broken behavior and tightens a
substring URL assertion that passed on the value it was meant to reject.

Author: waleedlatif1

apps/docs/content/docs/en/integrations/crunchbase.mdx

@@ -79,7 +79,7 @@ Look up a single Crunchbase organization by permalink or UUID, returning the req
 | `apiKey` | string | Yes | Crunchbase API key, sent as the X-cb-user-key header |
 | `entityId` | string | Yes | Organization permalink \(e.g. "tesla-motors"\) or UUID |
 | `fieldIds` | json | No | Organization fields to return, e.g. \["identifier","name","founded_on","categories"\]. Defaults to identifier, name, short_description, website_url, linkedin, location_identifiers, categories, founded_on, num_employees_enum, operating_status, rank_org, permalink. |
-| `cardIds` | json | No | Related-entity cards to include, e.g. \["founders","headquarters_address"\]. Available on every license tier: child_organizations, child_ownerships, event_appearances, fields, founders, headquarters_address, parent_organization, parent_ownership. A card returns at most 100 items. |
+| `cardIds` | json | No | Related-entity cards to include, e.g. \["founders","headquarters_address"\]. Available on every license tier: child_organizations, child_ownerships, event_appearances, fields, founders, headquarters_address, parent_organization, parent_ownership. Richer packages add acquiree_acquisitions, acquirer_acquisitions, investors, ipos, jobs, participated_funding_rounds, participated_funds, participated_investments, press_references, raised_funding_rounds, raised_funds, raised_investments. A card returns at most 100 items. |
 
 #### Output
 
@@ -126,7 +126,7 @@ Look up a single Crunchbase person by permalink or UUID, returning the requested
 | `apiKey` | string | Yes | Crunchbase API key, sent as the X-cb-user-key header |
 | `entityId` | string | Yes | Person permalink \(e.g. "elon-musk"\) or UUID |
 | `fieldIds` | json | No | Person fields to return, e.g. \["identifier","name","primary_job_title","primary_organization"\]. Defaults to identifier, name, first_name, last_name, primary_job_title, primary_organization, short_description, location_identifiers, linkedin, rank_person, permalink. |
-| `cardIds` | json | No | Related-entity cards to include, e.g. \["jobs","primary_organization"\]. Available: degrees, event_appearances, fields, founded_organizations, jobs, primary_job, primary_organization. A card returns at most 100 items. |
+| `cardIds` | json | No | Related-entity cards to include, e.g. \["jobs","primary_organization"\]. Available on every license tier: degrees, event_appearances, fields, founded_organizations, jobs, primary_job, primary_organization. Advanced Financials adds participated_funding_rounds, participated_funds, participated_investments, partner_funding_rounds, partner_investments, press_references. A card returns at most 100 items. |
 
 #### Output
 
@@ -317,7 +317,7 @@ Suggest Crunchbase entities matching a typed query, returning the permalinks and
 | --------- | ---- | -------- | ----------- |
 | `apiKey` | string | Yes | Crunchbase API key, sent as the X-cb-user-key header |
 | `query` | string | Yes | Text to autocomplete against, e.g. "airbnb" |
-| `collectionIds` | json | No | Collections to search, e.g. \["organizations","people"\]. One or more of: addresses, categories, category_groups, degrees, diversity_spotlights, event_appearances, events, ipos, jobs, locations, organizations, ownerships, people, principals. Defaults to every collection. |
+| `collectionIds` | json | No | Collections to search, e.g. \["organizations","people"\]. One or more of: acquisition_predictions, acquisitions, addresses, awards, categories, category_groups, closure_predictions, current_valuation_estimates, degrees, diversity_spotlights, event_appearances, events, funding_predictions, funding_rounds, funds, growth_insights, growth_predictions, investments, investor_insights, investor_matches, ipo_predictions, ipos, jobs, key_employee_changes, layoff_predictions, layoffs, legal_proceedings, locations, market_insight_reasons, market_insights, micro_categories, org_similarities, organizations, ownerships, partnership_announcements, people, press_references, principals, product_launches, product_similarities, products, remain_private_predictions, research_insights. Which of them your key can read depends on your Crunchbase package. Defaults to every collection. |
 | `limit` | number | No | Suggestions to return, max 25 \(default 10\) |
 
 #### Output
@@ -335,10 +335,10 @@ List entities Crunchbase has deleted, so a mirrored copy can be pruned in step w
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `apiKey` | string | Yes | Crunchbase API key, sent as the X-cb-user-key header |
-| `collection` | string | No | Restrict the feed to a single collection: categories, event_appearances, events, ipos, jobs, locations, organizations, ownerships, or people. Leave empty to read the feed across collections. |
-| `collectionIds` | json | No | Collections to include when reading the cross-collection feed, e.g. \["organizations","people"\]. Ignored when a single collection is set. |
+| `collection` | string | No | Restrict the feed to a single collection: acquisitions, categories, event_appearances, events, funding_rounds, funds, investments, ipos, jobs, locations, organizations, ownerships, people, or press_references. Which of them your key can read depends on your Crunchbase package. Leave empty to read the feed across collections. |
+| `collectionIds` | json | No | Collections to include when reading the cross-collection feed, e.g. \["organizations","people"\]. One or more of: acquisitions, categories, event_appearances, events, funding_rounds, funds, investments, ipos, jobs, locations, organizations, ownerships, people, press_references. Ignored when a single collection is set. |
 | `deletedAtOrder` | string | No | Order by deletion time: "asc" \(default\) or "desc" |
-| `limit` | number | No | Rows to return per page |
+| `limit` | number | No | Rows to return per page, 1-25 \(default 10\) |
 | `afterId` | string | No | UUID of the last row on the current page, to fetch the next page |
 | `beforeId` | string | No | UUID of the first row on the current page, to fetch the previous page |
 
@@ -358,7 +358,7 @@ List the field ids, types, and descriptions each Crunchbase collection publishes
 | Parameter | Type | Required | Description |
 | --------- | ---- | -------- | ----------- |
 | `apiKey` | string | Yes | Crunchbase API key, sent as the X-cb-user-key header |
-| `collectionIds` | json | No | Collections to describe, e.g. \["organizations","people"\]. One or more of: addresses, categories, category_groups, degrees, diversity_spotlights, event_appearances, events, ipos, jobs, locations, organizations, ownerships, people, principals. Defaults to every collection. |
+| `collectionIds` | json | No | Collections to describe, e.g. \["organizations","people"\]. One or more of: acquisition_predictions, acquisitions, addresses, awards, categories, category_groups, closure_predictions, current_valuation_estimates, degrees, diversity_spotlights, event_appearances, events, funding_predictions, funding_rounds, funds, growth_insights, growth_predictions, investments, investor_insights, investor_matches, ipo_predictions, ipos, jobs, key_employee_changes, layoff_predictions, layoffs, legal_proceedings, locations, market_insight_reasons, market_insights, micro_categories, org_similarities, organizations, ownerships, partnership_announcements, people, press_references, principals, product_launches, product_similarities, products, remain_private_predictions, research_insights. Which of them your key can read depends on your Crunchbase package. Defaults to every collection. |
 
 #### Output
 

apps/sim/blocks/blocks/crunchbase.ts

@@ -59,7 +59,14 @@ function toCollectionOption(id: string) {
 
 const COLLECTION_OPTIONS = CRUNCHBASE_COLLECTIONS.map(toCollectionOption)
 const CARD_COLLECTION_OPTIONS = CRUNCHBASE_CARD_COLLECTIONS.map(toCollectionOption)
-const DELETED_COLLECTION_OPTIONS = CRUNCHBASE_DELETED_COLLECTIONS.map(toCollectionOption)
+/**
+ * The empty id is what returns the picker to the cross-collection feed — without
+ * it a chosen collection can be swapped but never cleared.
+ */
+const DELETED_COLLECTION_OPTIONS = [
+  { label: 'All collections', id: '' },
+  ...CRUNCHBASE_DELETED_COLLECTIONS.map(toCollectionOption),
+]
 
 const QUERY_WAND_PROMPT = `Generate a Crunchbase Search API "query" array.
 
@@ -303,7 +310,8 @@ export const CrunchbaseBlock: BlockConfig<CrunchbaseResponse> = {
       title: 'Limit',
       type: 'short-input',
       mode: 'advanced',
-      placeholder: 'Search: 1-1000 (default 100). Card: 1-100. Autocomplete: 1-25 (default 10)',
+      placeholder:
+        'Search: 1-1000 (default 100). Card: 1-100. Autocomplete and deleted feed: 1-25 (default 10)',
       condition: { field: 'operation', value: LIMITED_OPERATIONS },
     },
     {

apps/sim/tools/crunchbase/autocomplete.ts

@@ -47,7 +47,7 @@ export const crunchbaseAutocompleteTool: ToolConfig<
       required: false,
       visibility: 'user-or-llm',
       description:
-        'Collections to search, e.g. ["organizations","people"]. One or more of: addresses, categories, category_groups, degrees, diversity_spotlights, event_appearances, events, ipos, jobs, locations, organizations, ownerships, people, principals. Defaults to every collection.',
+        'Collections to search, e.g. ["organizations","people"]. One or more of: acquisition_predictions, acquisitions, addresses, awards, categories, category_groups, closure_predictions, current_valuation_estimates, degrees, diversity_spotlights, event_appearances, events, funding_predictions, funding_rounds, funds, growth_insights, growth_predictions, investments, investor_insights, investor_matches, ipo_predictions, ipos, jobs, key_employee_changes, layoff_predictions, layoffs, legal_proceedings, locations, market_insight_reasons, market_insights, micro_categories, org_similarities, organizations, ownerships, partnership_announcements, people, press_references, principals, product_launches, product_similarities, products, remain_private_predictions, research_insights. Which of them your key can read depends on your Crunchbase package. Defaults to every collection.',
     },
     limit: {
       type: 'number',

apps/sim/tools/crunchbase/crunchbase.test.ts

@@ -167,7 +167,9 @@ describe('crunchbase request building', () => {
       cardId: 'participated_investments',
       cardFieldIds: '["uuid","announced_on"]',
     })
-    expect(alreadyPresent).toContain('card_field_ids=uuid%2Cannounced_on')
+    /* Substring-matching the prefix would also pass on a list that appended
+       "identifier" anyway — only the exact value proves it was left alone. */
+    expect(new URL(alreadyPresent).searchParams.get('card_field_ids')).toBe('uuid,announced_on')
   })
 
   it('rejects both cursors on every paged endpoint, not just search', () => {
@@ -203,16 +205,45 @@ describe('crunchbase request building', () => {
     )
   })
 
-  it('rejects a collection the constrained endpoints do not accept', () => {
+  it('rejects a collection no Crunchbase package publishes', () => {
     expect(() =>
       buildUrl(crunchbaseAutocompleteTool, {
         apiKey: 'k',
         query: 'airbnb',
-        collectionIds: ['funds'],
+        collectionIds: ['unicorns'],
       })
     ).toThrow(/unsupported collection/)
   })
 
+  it('accepts a collection only a richer package publishes', () => {
+    /* The allowlist is the union across packages, not the narrowest one — the
+       Firmographic enum omits these, so a tier-narrow list would reject a
+       request an Advanced Financials key answers. */
+    expect(
+      new URL(
+        buildUrl(crunchbaseAutocompleteTool, {
+          apiKey: 'k',
+          query: 'sequoia',
+          collectionIds: ['funds', 'funding_rounds', 'acquisitions'],
+        })
+      ).searchParams.get('collection_ids')
+    ).toBe('funds,funding_rounds,acquisitions')
+
+    expect(
+      buildUrl(crunchbaseListDeletedEntitiesTool, { apiKey: 'k', collection: 'funding_rounds' })
+    ).toBe('https://api.crunchbase.com/v4/data/deleted_entities/funding_rounds')
+  })
+
+  it('caps the deleted feed at its own documented maximum, not the search maximum', () => {
+    /* `/data/deleted_entities` documents "default = 10, max = 25" while Search
+       allows 1000, and the block shares one Limit subblock across both. */
+    expect(
+      new URL(
+        buildUrl(crunchbaseListDeletedEntitiesTool, { apiKey: 'k', limit: 1000 })
+      ).searchParams.get('limit')
+    ).toBe('25')
+  })
+
   it('reads fields metadata from the /md path, not /data', () => {
     expect(
       buildUrl(crunchbaseGetFieldsMetadataTool, { apiKey: 'k', collectionIds: ['organizations'] })

apps/sim/tools/crunchbase/get_fields_metadata.ts

@@ -43,7 +43,7 @@ export const crunchbaseGetFieldsMetadataTool: ToolConfig<
       required: false,
       visibility: 'user-or-llm',
       description:
-        'Collections to describe, e.g. ["organizations","people"]. One or more of: addresses, categories, category_groups, degrees, diversity_spotlights, event_appearances, events, ipos, jobs, locations, organizations, ownerships, people, principals. Defaults to every collection.',
+        'Collections to describe, e.g. ["organizations","people"]. One or more of: acquisition_predictions, acquisitions, addresses, awards, categories, category_groups, closure_predictions, current_valuation_estimates, degrees, diversity_spotlights, event_appearances, events, funding_predictions, funding_rounds, funds, growth_insights, growth_predictions, investments, investor_insights, investor_matches, ipo_predictions, ipos, jobs, key_employee_changes, layoff_predictions, layoffs, legal_proceedings, locations, market_insight_reasons, market_insights, micro_categories, org_similarities, organizations, ownerships, partnership_announcements, people, press_references, principals, product_launches, product_similarities, products, remain_private_predictions, research_insights. Which of them your key can read depends on your Crunchbase package. Defaults to every collection.',
     },
   },
 

apps/sim/tools/crunchbase/get_organization.ts

@@ -44,7 +44,7 @@ export const crunchbaseGetOrganizationTool: ToolConfig<
       required: false,
       visibility: 'user-or-llm',
       description:
-        'Related-entity cards to include, e.g. ["founders","headquarters_address"]. Available on every license tier: child_organizations, child_ownerships, event_appearances, fields, founders, headquarters_address, parent_organization, parent_ownership. A card returns at most 100 items.',
+        'Related-entity cards to include, e.g. ["founders","headquarters_address"]. Available on every license tier: child_organizations, child_ownerships, event_appearances, fields, founders, headquarters_address, parent_organization, parent_ownership. Richer packages add acquiree_acquisitions, acquirer_acquisitions, investors, ipos, jobs, participated_funding_rounds, participated_funds, participated_investments, press_references, raised_funding_rounds, raised_funds, raised_investments. A card returns at most 100 items.',
     },
   },
 

apps/sim/tools/crunchbase/get_person.ts

@@ -42,7 +42,7 @@ export const crunchbaseGetPersonTool: ToolConfig<CrunchbaseEntityParams, Crunchb
         required: false,
         visibility: 'user-or-llm',
         description:
-          'Related-entity cards to include, e.g. ["jobs","primary_organization"]. Available: degrees, event_appearances, fields, founded_organizations, jobs, primary_job, primary_organization. A card returns at most 100 items.',
+          'Related-entity cards to include, e.g. ["jobs","primary_organization"]. Available on every license tier: degrees, event_appearances, fields, founded_organizations, jobs, primary_job, primary_organization. Advanced Financials adds participated_funding_rounds, participated_funds, participated_investments, partner_funding_rounds, partner_investments, press_references. A card returns at most 100 items.',
       },
     },
 

apps/sim/tools/crunchbase/list_deleted_entities.ts

@@ -9,9 +9,9 @@ import {
   clampLimit,
   crunchbaseError,
   crunchbaseHeaders,
+  DELETED_LIMIT_MAX,
   parseIdListParam,
   readJson,
-  SEARCH_LIMIT_MAX,
 } from '@/tools/crunchbase/utils'
 import { ErrorExtractorId } from '@/tools/error-extractors'
 import type { ToolConfig, ToolResponse } from '@/tools/types'
@@ -61,14 +61,14 @@ export const crunchbaseListDeletedEntitiesTool: ToolConfig<
       required: false,
       visibility: 'user-or-llm',
       description:
-        'Restrict the feed to a single collection: categories, event_appearances, events, ipos, jobs, locations, organizations, ownerships, or people. Leave empty to read the feed across collections.',
+        'Restrict the feed to a single collection: acquisitions, categories, event_appearances, events, funding_rounds, funds, investments, ipos, jobs, locations, organizations, ownerships, people, or press_references. Which of them your key can read depends on your Crunchbase package. Leave empty to read the feed across collections.',
     },
     collectionIds: {
       type: 'json',
       required: false,
       visibility: 'user-or-llm',
       description:
-        'Collections to include when reading the cross-collection feed, e.g. ["organizations","people"]. Ignored when a single collection is set.',
+        'Collections to include when reading the cross-collection feed, e.g. ["organizations","people"]. One or more of: acquisitions, categories, event_appearances, events, funding_rounds, funds, investments, ipos, jobs, locations, organizations, ownerships, people, press_references. Ignored when a single collection is set.',
     },
     deletedAtOrder: {
       type: 'string',
@@ -80,7 +80,7 @@ export const crunchbaseListDeletedEntitiesTool: ToolConfig<
       type: 'number',
       required: false,
       visibility: 'user-or-llm',
-      description: 'Rows to return per page',
+      description: 'Rows to return per page, 1-25 (default 10)',
     },
     afterId: {
       type: 'string',
@@ -117,7 +117,7 @@ export const crunchbaseListDeletedEntitiesTool: ToolConfig<
       if (params.deletedAtOrder === 'desc' || params.deletedAtOrder === 'asc') {
         search.set('deleted_at_order', params.deletedAtOrder)
       }
-      const limit = clampLimit(params.limit, SEARCH_LIMIT_MAX)
+      const limit = clampLimit(params.limit, DELETED_LIMIT_MAX)
       if (limit !== undefined) search.set('limit', String(limit))
       if (params.afterId) search.set('after_id', params.afterId)
       if (params.beforeId) search.set('before_id', params.beforeId)