@floomhq/floom-mcp-sync 1.0.7 → 1.0.9

package/dist/auto-sync.js

@@ -174,6 +174,7 @@ function normalizePackageFilePath(path) {
 async function planPackageSync(root, files, manifest) {
     let missing = 0;
     let unchanged = 0;
+    let firstMissingTarget = null;
     for (const file of files) {
         const targetKey = manifestKey(root, file.target);
         const tracked = manifest.files[targetKey];
@@ -194,8 +195,7 @@ async function planPackageSync(root, files, manifest) {
         if (state.kind === "conflict")
             return { kind: "conflict", target: file.target, reason: state.reason };
         if (state.kind === "missing") {
-            if (tracked && files.length > 1)
-                return { kind: "conflict", target: file.target, reason: "local package file missing since the last Floom sync" };
+            firstMissingTarget ??= file.target;
             missing += 1;
             continue;
         }
@@ -211,10 +211,9 @@ async function planPackageSync(root, files, manifest) {
         return { kind: "unchanged" };
     if (missing === files.length)
         return { kind: "write" };
-    const missingFile = files.find((file) => !manifest.files[manifestKey(root, file.target)]);
     return {
         kind: "conflict",
-        target: missingFile?.target ?? files[0]?.target ?? root,
+        target: firstMissingTarget ?? files[0]?.target ?? root,
         reason: "local package is only partially installed",
     };
 }
@@ -565,7 +564,7 @@ function maybeAuthWarning(log, message) {
     log(message);
     lastAuthWarningAt = now;
 }
-// TODO(option-B): swap polling for SSE. Add `/api/v1/sync-stream` route that
+// Future option: swap polling for SSE. Add `/api/v1/sync-stream` route that
 // holds a per-user EventSource open and pushes `{type:"skills-updated"}` from a
 // Supabase post-write trigger or webhook. MCP listens, calls autoSync() on
 // event. Drops sync latency from <=60s to <=2s. Trade-off: needs reconnect

package/dist/server.js

@@ -5,7 +5,7 @@ import { autoSync } from "./auto-sync.js";
 import { getSkill } from "./tools/get.js";
 import { searchSkills } from "./tools/search.js";
 import { syncStatus } from "./tools/status.js";
-const SERVER_VERSION = "1.0.7";
+const SERVER_VERSION = "1.0.8";
 const DEFAULT_INTERVAL_MS = 60_000;
 const MIN_INTERVAL_MS = 10_000;
 const SEARCH_TYPES = new Set(["knowledge", "instruction", "workflow", "skill"]);
@@ -143,6 +143,12 @@ function asObject(value) {
         throw new Error("Expected object arguments.");
     return value;
 }
+function assertOnlyKeys(value, allowed, label) {
+    const allowedSet = new Set(allowed);
+    const extra = Object.keys(value).find((key) => !allowedSet.has(key));
+    if (extra)
+        throw new Error(`Unexpected ${label} argument: ${extra}`);
+}
 function asString(value, label, min, max) {
     if (typeof value !== "string" || value.length < min || value.length > max) {
         throw new Error(`Invalid ${label}.`);
@@ -176,9 +182,11 @@ async function callTool(params) {
     const name = asString(parsed.name, "tool name", 1, 200);
     const args = asObject(parsed.arguments ?? {});
     if (name === "floom_get_skill") {
+        assertOnlyKeys(args, ["slug"], "floom_get_skill");
         return ok(await getSkill(asString(args.slug, "slug", 1, 128)));
     }
     if (name === "floom_search_skills") {
+        assertOnlyKeys(args, ["query", "library", "type", "limit"], "floom_search_skills");
         const opts = {};
         const library = optionalString(args.library, "library", 64);
         const type = optionalEnumValue(args.type, "type", SEARCH_TYPES);
@@ -192,9 +200,11 @@ async function callTool(params) {
         return ok(await searchSkills(asString(args.query, "query", 1, 120), opts));
     }
     if (name === "floom_status") {
+        assertOnlyKeys(args, [], "floom_status");
         return ok(await syncStatus());
     }
     if (name === "floom_sync") {
+        assertOnlyKeys(args, [], "floom_sync");
         return ok(await runAutoSync());
     }
     throw new Error(`Unknown tool: ${name}`);
@@ -263,21 +273,27 @@ async function main() {
     process.once("SIGINT", () => shutdown("SIGINT"));
     process.once("SIGTERM", () => shutdown("SIGTERM"));
     const rl = createInterface({ input: stdin, crlfDelay: Infinity });
-    for await (const line of rl) {
-        if (!line.trim())
-            continue;
-        try {
-            const message = JSON.parse(line);
-            if (!message || typeof message !== "object" || Array.isArray(message)) {
-                stdout.write(errorResponse(null, -32600, "Invalid request."));
+    try {
+        for await (const line of rl) {
+            if (!line.trim())
                 continue;
+            try {
+                const message = JSON.parse(line);
+                if (!message || typeof message !== "object" || Array.isArray(message)) {
+                    stdout.write(errorResponse(null, -32600, "Invalid request."));
+                    continue;
+                }
+                await handleRequest(message);
+            }
+            catch {
+                stdout.write(errorResponse(null, -32700, "Parse error."));
             }
-            await handleRequest(message);
-        }
-        catch {
-            stdout.write(errorResponse(null, -32700, "Parse error."));
         }
     }
+    finally {
+        clearInterval(pollHandle);
+        process.stderr.write("[floom] stdin closed, stopping sync poller\n");
+    }
 }
 main().catch((err) => {
     process.stderr.write(`[floom] fatal: ${err instanceof Error ? err.message : String(err)}\n`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floomhq/floom-mcp-sync",
-  "version": "1.0.7",
+  "version": "1.0.9",
   "description": "Lightweight Floom MCP server for installing, publishing, and startup-syncing skills.",
   "license": "MIT",
   "type": "module",