@bli-cockpit/mcp 0.1.13 → 0.1.14

package/dist/cal-tools.js

@@ -181,7 +181,7 @@ export function registerCalTools(server, deps) {
             all_day: z.boolean().optional(),
             time_zone: z.string().min(1).max(80).optional(),
             attendees: z.array(z.string().email()).max(100).optional(),
-            ...CONFIRM_INPUT,
+            confirm: CONFIRM_INPUT,
         },
     }, async (args) => withSession(deps, async (session) => {
         const refusal = unconfirmed(args, `This would create "${String(args.title)}" and email every attendee from Google.`);
@@ -211,7 +211,7 @@ export function registerCalTools(server, deps) {
         inputSchema: {
             calendar_id: z.string().uuid(),
             org_visible: z.boolean(),
-            ...CONFIRM_INPUT,
+            confirm: CONFIRM_INPUT,
         },
     }, async (args) => withSession(deps, async (session) => {
         const refusal = unconfirmed(args, args.org_visible === true
@@ -251,7 +251,7 @@ export function registerCalTools(server, deps) {
         title: "Detach a calendar",
         description: "Removes a calendar and its stored events from Tower. The calendar itself is untouched at Google — this only "
             + "forgets it here. Requires confirm: true.",
-        inputSchema: { calendar_id: z.string().uuid(), ...CONFIRM_INPUT },
+        inputSchema: { calendar_id: z.string().uuid(), confirm: CONFIRM_INPUT },
     }, async (args) => withSession(deps, async (session) => {
         const refusal = unconfirmed(args, "This would detach that calendar and forget its stored events (the calendar itself is untouched at Google).");
         if (refusal)

package/dist/tool-result.d.ts

@@ -81,6 +81,17 @@ export declare function queryString(params: URLSearchParams): string;
  * `confirmation_required`, so a script branching on it reads the same word
  * from either door.
  */
+/**
+ * The `confirm` FIELD's schema, used as `confirm: CONFIRM_INPUT` inside a
+ * tool's `inputSchema`. It is a schema, not a shape: NEVER spread it
+ * (`...CONFIRM_INPUT`). Three calendar tools did, which spread the schema's own
+ * enumerable members (`def`, `type`, `unwrap`, …) into the shape as if they
+ * were fields; the SDK's 1.30 `objectFromShape` refuses a shape that mixes
+ * Zod schemas with non-schemas ("Mixed Zod versions detected"), so the
+ * published server exited at startup on every fleet machine the moment npm
+ * resolved `@modelcontextprotocol/sdk` 1.30 (QA tick 20, 2026-09-06).
+ * `server.test.ts` walks every registered tool's shape for exactly this.
+ */
 export declare const CONFIRM_INPUT: z.ZodOptional<z.ZodBoolean>;
 /** `null` when the caller confirmed; the refusal itself when they did not. */
 export declare function unconfirmed(args: Record<string, unknown>, sentence: string): ToolResult | null;

package/dist/tool-result.js

@@ -93,6 +93,17 @@ export function queryString(params) {
  * `confirmation_required`, so a script branching on it reads the same word
  * from either door.
  */
+/**
+ * The `confirm` FIELD's schema, used as `confirm: CONFIRM_INPUT` inside a
+ * tool's `inputSchema`. It is a schema, not a shape: NEVER spread it
+ * (`...CONFIRM_INPUT`). Three calendar tools did, which spread the schema's own
+ * enumerable members (`def`, `type`, `unwrap`, …) into the shape as if they
+ * were fields; the SDK's 1.30 `objectFromShape` refuses a shape that mixes
+ * Zod schemas with non-schemas ("Mixed Zod versions detected"), so the
+ * published server exited at startup on every fleet machine the moment npm
+ * resolved `@modelcontextprotocol/sdk` 1.30 (QA tick 20, 2026-09-06).
+ * `server.test.ts` walks every registered tool's shape for exactly this.
+ */
 export const CONFIRM_INPUT = z
     .boolean()
     .optional()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/mcp",
-  "version": "0.1.13",
+  "version": "0.1.14",
   "private": false,
   "description": "bli-tower \u2014 an MCP server over BLI Cockpit's agent doors: JARVIS (jarvis_*), documents (docs_*), channels (msg_*), issues (work_*), the daily page (brief_*), meeting notes (notes_*), the ops board (ops_status/slack_*), settings/team/model, Scout and the workbook, plus the legacy event-stream tools (emit_event, get_ticket_timeline, get_active_tickets).",
   "type": "module",