@formstr/mcp 0.3.2 → 0.5.0

package/dist/index.js

@@ -24568,7 +24568,13 @@ function fileBackend() {
       if (!passphrase) {
         throw new Error("Encrypted keystore file exists but FORMSTR_MCP_PASSPHRASE is not set.");
       }
-      return parseMap(decryptBlob((0, import_node_fs.readFileSync)(path, "utf8"), passphrase));
+      try {
+        return parseMap(decryptBlob((0, import_node_fs.readFileSync)(path, "utf8"), passphrase));
+      } catch {
+        throw new Error(
+          `Could not decrypt the keystore file (${path}): FORMSTR_MCP_PASSPHRASE does not match the passphrase it was encrypted with (or the file is corrupt). Fix the passphrase, or delete the file and run \`formstr-mcp login\` to sign in again.`
+        );
+      }
     },
     save(map) {
       const passphrase = process.env.FORMSTR_MCP_PASSPHRASE;
@@ -27493,12 +27499,23 @@ async function unlockNcryptsec(signer, account, deps) {
 }
 
 // src/cli.ts
-var SUBCOMMANDS = /* @__PURE__ */ new Set(["login", "logout", "whoami", "accounts", "switch", "help"]);
+var SUBCOMMANDS = /* @__PURE__ */ new Set([
+  "login",
+  "logout",
+  "whoami",
+  "accounts",
+  "switch",
+  "help",
+  "version"
+]);
 function parseCli(argv) {
   const rest = [...argv];
   if (rest.includes("-h") || rest.includes("--help")) {
     return { command: "help", allowWrites: false };
   }
+  if (rest.includes("-v") || rest.includes("--version")) {
+    return { command: "version", allowWrites: false };
+  }
   let command = "run";
   if (rest[0] && SUBCOMMANDS.has(rest[0])) {
     command = rest.shift();
@@ -27539,15 +27556,40 @@ function helpText() {
     "  accounts          List stored accounts ('*' marks the active one).",
     "  switch <npub>     Set the active account (accepts an npub or hex pubkey).",
     "  help              Show this help (also -h, --help).",
+    "  version           Print the installed version and check for an update (also -v, --version).",
     "",
     "Flags:",
     "  --allow-writes         Enable gated write tools (update / delete / share / submit).",
+    "                         Note: create/import tools (create_form, create_calendar_event, \u2026)",
+    "                         are ALWAYS enabled and publish to relays even without this flag.",
     "  --account <npub|hex>   Boot a specific account instead of the active one.",
     "  --relays <a,b,\u2026>       Override relays (comma-separated).",
     "",
     "Env:",
     "  FORMSTR_MCP_NCRYPTSEC_PASSPHRASE   Unlock the active ncryptsec account at boot.",
-    "  FORMSTR_MCP_PASSPHRASE             Encrypt the keystore file (keychain-less hosts)."
+    "  FORMSTR_MCP_PASSPHRASE             Encrypt the keystore file (keychain-less hosts).",
+    "",
+    "Setting the passphrase in your MCP host config:",
+    "  When an MCP host (Claude Desktop/Code, Cursor, \u2026) spawns the server, stdin is the",
+    "  JSON-RPC channel, so it can't prompt for your ncryptsec passphrase. Pass it via an",
+    '  "env" block in the server entry of your MCP config (e.g. mcp_config.json /',
+    "  claude_desktop_config.json) so the host hands it to the server at startup:",
+    "",
+    "    {",
+    '      "mcpServers": {',
+    '        "formstr": {',
+    '          "command": "npx",',
+    '          "args": ["-y", "@formstr/mcp"],',
+    '          "env": {',
+    '            "FORMSTR_MCP_NCRYPTSEC_PASSPHRASE": "your-passphrase-here"',
+    "          }",
+    "        }",
+    "      }",
+    "    }",
+    "",
+    "  Tip: a NIP-46 (bunker) account needs no passphrase \u2014 `switch` to one and the config",
+    '  can stay secret-free. Add "--allow-writes" to args to enable gated write tools',
+    "  (creates are always on)."
   ].join("\n");
 }
 
@@ -32373,11 +32415,11 @@ async function decryptListEntries(signer, userPubkey, content) {
   const parsed = JSON.parse(decrypted);
   return Array.isArray(parsed) ? parsed : [];
 }
-async function publishMyFormsList(signer, relays, entries) {
+async function publishMyFormsList(signer, relays, entries, prevCreatedAt) {
   const encrypted = await nip44SelfEncrypt(signer, JSON.stringify(entries));
   const event = {
     kind: FORM_KINDS.myFormsList,
-    created_at: Math.floor(Date.now() / 1e3),
+    created_at: Math.max(Math.floor(Date.now() / 1e3), prevCreatedAt + 1),
     tags: [],
     content: encrypted
   };
@@ -32431,20 +32473,33 @@ async function fetchMyForms() {
     return summary;
   }).filter((s) => s !== null);
 }
+var MY_FORMS_LIST_READ_ATTEMPTS = 3;
+async function readMyFormsEntriesForWrite(signer, userPubkey, relays) {
+  let listEvent = null;
+  for (let attempt = 0; attempt < MY_FORMS_LIST_READ_ATTEMPTS; attempt++) {
+    listEvent = await fetchLatestMyFormsEvent(relays, userPubkey);
+    if (listEvent?.content) break;
+  }
+  if (!listEvent?.content) return { entries: [], prevCreatedAt: 0 };
+  try {
+    const entries = await decryptListEntries(signer, userPubkey, listEvent.content);
+    return { entries, prevCreatedAt: listEvent.created_at };
+  } catch (err) {
+    throw new Error(
+      `Could not read your existing forms list to add this form, so it was left unchanged to avoid losing your other forms. The form itself was published \u2014 retry to add it. (${err instanceof Error ? err.message : String(err)})`
+    );
+  }
+}
 async function appendToMyFormsList(formPubkey, formId, relay, signingKeyHex, viewKeyHex) {
   const signer = await signerManager.getSigner();
   const userPubkey = await signer.getPublicKey();
   const relays = relayManager.getRelaysForModule("forms");
-  const existing = await fetchLatestMyFormsEvent(relays, userPubkey);
-  let entries = [];
-  if (existing?.content) {
-    try {
-      entries = await decryptListEntries(signer, userPubkey, existing.content);
-    } catch {
-      entries = [];
-    }
-  }
-  entries = entries.map(
+  const { entries: existing, prevCreatedAt } = await readMyFormsEntriesForWrite(
+    signer,
+    userPubkey,
+    relays
+  );
+  const entries = existing.map(
     (e) => e[0] === "f" && e.length < 4 ? ["f", e[1] ?? "", e[2] ?? "", ""] : e
   );
   const coordKey = `${formPubkey}:${formId}`;
@@ -32452,10 +32507,11 @@ async function appendToMyFormsList(formPubkey, formId, relay, signingKeyHex, vie
     const secrets = signingKeyHex ? encodeFormKeys(signingKeyHex, viewKeyHex) : "";
     entries.push(["f", coordKey, relay, secrets]);
   }
-  await publishMyFormsList(signer, relays, entries);
+  await publishMyFormsList(signer, relays, entries, prevCreatedAt);
 }
 async function saveToMyForms(summaries) {
   const signer = await signerManager.getSigner();
+  const userPubkey = await signer.getPublicKey();
   const relays = relayManager.getRelaysForModule("forms");
   const entries = summaries.map((s) => [
     "f",
@@ -32463,7 +32519,8 @@ async function saveToMyForms(summaries) {
     s.relay ?? "",
     s.signingKey ? encodeFormKeys(s.signingKey, s.viewKey) : ""
   ]);
-  await publishMyFormsList(signer, relays, entries);
+  const prev = await fetchLatestMyFormsEvent(relays, userPubkey);
+  await publishMyFormsList(signer, relays, entries, prev?.created_at ?? 0);
 }
 async function fetchMyFormsByAuthor(pubkey, relays) {
   const filter = {
@@ -32510,7 +32567,7 @@ async function deleteForm(formId, formPubkey) {
   const coordKey = `${formPubkey}:${formId}`;
   const trimmed = entries.filter((e) => e[1] !== coordKey);
   if (trimmed.length === entries.length) return;
-  await publishMyFormsList(signer, relays, trimmed);
+  await publishMyFormsList(signer, relays, trimmed, listEvent.created_at);
 }
 async function updateForm(params) {
   const relays = relayManager.getRelaysForModule("forms");
@@ -32627,9 +32684,13 @@ async function fetchFormSummaryFromRef(pubkey, formId) {
   };
 }
 async function importForm(summary) {
-  const current = await fetchMyForms();
-  if (current.some((f) => f.id === summary.id && f.pubkey === summary.pubkey)) return;
-  await saveToMyForms([...current, summary]);
+  await appendToMyFormsList(
+    summary.pubkey,
+    summary.id,
+    summary.relay ?? "",
+    summary.signingKey,
+    summary.viewKey
+  );
 }
 function parseFormEvent(event, decryptedRows) {
   const merged = decryptedRows ? [...event.tags, ...decryptedRows] : event.tags;
@@ -34242,7 +34303,7 @@ async function fetchAllDocMetadata() {
   }
   return result;
 }
-async function fetchDocMetadata(address) {
+async function fetchNewestDocMetadataEvent(address) {
   const signer = await signerManager.getSigner();
   const pubkey = await signer.getPublicKey();
   const events = await nostrRuntime.querySync(RELAYS(), {
@@ -34251,7 +34312,12 @@ async function fetchDocMetadata(address) {
     "#d": [address]
   });
   if (events.length === 0) return void 0;
-  const newest = events.reduce((a, b) => b.created_at > a.created_at ? b : a);
+  return events.reduce((a, b) => b.created_at > a.created_at ? b : a);
+}
+async function fetchDocMetadata(address) {
+  const signer = await signerManager.getSigner();
+  const newest = await fetchNewestDocMetadataEvent(address);
+  if (!newest) return void 0;
   try {
     return parseMetadataJson(await nip44SelfDecrypt(signer, newest.content));
   } catch {
@@ -34259,14 +34325,24 @@ async function fetchDocMetadata(address) {
   }
 }
 async function saveDocMetadata(address, patch) {
-  const existing = await fetchDocMetadata(address) ?? {};
+  const signer = await signerManager.getSigner();
+  const prevEvent = await fetchNewestDocMetadataEvent(address);
+  let existing = {};
+  if (prevEvent) {
+    try {
+      existing = parseMetadataJson(await nip44SelfDecrypt(signer, prevEvent.content)) ?? {};
+    } catch {
+    }
+  }
   const merged = { ...existing, ...patch };
   if (!Array.isArray(merged.tags)) merged.tags = [];
-  const signer = await signerManager.getSigner();
   const content = await nip44SelfEncrypt(signer, JSON.stringify(merged));
   const signed = await signer.signEvent({
     kind: PAGES_KINDS.docMetadata,
-    created_at: Math.floor(Date.now() / 1e3),
+    // Strictly supersede the event this merge was read from: two saves in the
+    // same second otherwise tie on created_at and NIP-01 tie-breaking (lowest
+    // id wins) can resurrect the stale copy — losing a just-saved viewKey/title.
+    created_at: Math.max(Math.floor(Date.now() / 1e3), (prevEvent?.created_at ?? 0) + 1),
     tags: [["d", address]],
     content
   });
@@ -34515,14 +34591,22 @@ async function fetchFileIndex() {
 }
 async function saveFileMetadata(metadata) {
   const signer = await signerManager.getSigner();
+  const relays = relayManager.getRelaysForModule("drive");
   const full = {
     ...metadata,
     encryptionAlgorithm: metadata.encryptionAlgorithm ?? "aes-gcm"
   };
   const encrypted = await nip44SelfEncrypt(signer, JSON.stringify(full));
+  const pubkey = await signer.getPublicKey();
+  const existing = await nostrRuntime.querySync(relays, {
+    kinds: [DRIVE_KINDS.fileMetadata],
+    authors: [pubkey],
+    "#d": [metadata.hash]
+  });
+  const prevCreatedAt = existing.reduce((max, e) => Math.max(max, e.created_at), 0);
   const event = {
     kind: DRIVE_KINDS.fileMetadata,
-    created_at: Math.floor(Date.now() / 1e3),
+    created_at: Math.max(Math.floor(Date.now() / 1e3), prevCreatedAt + 1),
     tags: [
       ["d", metadata.hash],
       ["client", "formstr-drive"],
@@ -34531,7 +34615,6 @@ async function saveFileMetadata(metadata) {
     content: encrypted
   };
   const signed = await signer.signEvent(event);
-  const relays = relayManager.getRelaysForModule("drive");
   await nostrRuntime.publish(relays, signed);
 }
 async function updateFileMetadata(hash, updates) {
@@ -34616,6 +34699,7 @@ __export(service_exports5, {
 });
 
 // ../agent/src/services/polls/pow.ts
+var MAX_MINED_POW_DIFFICULTY = 20;
 function minePollEvent(unsigned, difficulty) {
   const event = unsigned;
   const nonceTag = ["nonce", "0", difficulty.toString()];
@@ -34708,6 +34792,11 @@ async function submitPollResponse(pollId, pollAuthor, selectedOptionIds, pollRel
     tags,
     content: ""
   };
+  if (powDifficulty && powDifficulty > MAX_MINED_POW_DIFFICULTY) {
+    throw new Error(
+      `This poll demands proof-of-work difficulty ${powDifficulty}, above the supported maximum of ${MAX_MINED_POW_DIFFICULTY} \u2014 refusing to mine (it could take hours).`
+    );
+  }
   if (powDifficulty && powDifficulty > 0) {
     const unsigned = { ...event, pubkey: await signer.getPublicKey() };
     const mined = minePollEvent(unsigned, powDifficulty);
@@ -34898,6 +34987,16 @@ function normalizePubkeyList(values) {
 }
 
 // ../agent/src/tools/calendar.ts
+function parseIsoDate(value) {
+  const date3 = new Date(value);
+  return Number.isFinite(date3.getTime()) ? date3 : null;
+}
+function badDate(field, value) {
+  return fail(
+    `Could not parse ${field} "${value}" \u2014 pass an ISO 8601 date-time (e.g. 2026-07-02T15:00:00Z).`,
+    "BAD_INPUT"
+  );
+}
 var calendarTools = buildCalendarTools();
 function buildCalendarTools() {
   const tools = [];
@@ -34914,11 +35013,15 @@ function buildCalendarTools() {
       inputSchema: { since: external_exports.string().optional(), until: external_exports.string().optional() }
     },
     async ({ since, until }) => {
+      const sinceDate = since ? parseIsoDate(since) : void 0;
+      if (since && !sinceDate) return badDate("since", since);
+      const untilDate = until ? parseIsoDate(until) : void 0;
+      if (until && !untilDate) return badDate("until", until);
       const pubkey = signerManager.getPublicKey();
       const events = await service_exports2.fetchCalendarEventsSync({
         authors: pubkey ? [pubkey] : void 0,
-        since: since ? Math.floor(new Date(since).getTime() / 1e3) : void 0,
-        until: until ? Math.floor(new Date(until).getTime() / 1e3) : void 0
+        since: sinceDate ? Math.floor(sinceDate.getTime() / 1e3) : void 0,
+        until: untilDate ? Math.floor(untilDate.getTime() / 1e3) : void 0
       });
       return ok(`Found ${events.length} event(s).`, {
         events: events.map((e) => ({
@@ -34936,7 +35039,7 @@ function buildCalendarTools() {
   server.registerTool(
     "create_calendar_event",
     {
-      description: "Schedule a calendar event. start/end are ISO 8601. Events default to PRIVATE (encrypted) and are linked into a calendar list \u2014 that is the only way they show on calendar.formstr.app, which renders only events referenced in a calendar list. Pass calendarId to choose which calendar; if omitted and the user already has calendars, this tool returns the list so you can ASK the user which one (then re-run with calendarId). Set isPrivate:false for a public, unencrypted event \u2014 note public events do NOT sync to calendar.formstr.app. participants (npub or hex) receive NIP-59 invitations.",
+      description: "Schedule a calendar event. start/end are ISO 8601. Events default to PRIVATE (encrypted) and are linked into a calendar list \u2014 that is the only way they show on calendar.formstr.app, which renders only events referenced in a calendar list. Pass calendarId to choose which calendar; if omitted and the user already has calendars, this tool returns the list so you can ASK the user which one (then re-run with calendarId). Set isPrivate:false for a public, unencrypted event \u2014 note public events do NOT sync to calendar.formstr.app. participants (npub or hex) receive NIP-59 invitations. registrationFormRef attaches a Formstr form; for an ENCRYPTED form also pass registrationFormViewKey or attendees cannot read it.",
       inputSchema: {
         title: external_exports.string(),
         description: external_exports.string().optional(),
@@ -34948,10 +35051,15 @@ function buildCalendarTools() {
         participants: external_exports.array(external_exports.string()).optional(),
         rrule: external_exports.string().optional(),
         startTzid: external_exports.string().optional(),
-        registrationFormRef: external_exports.string().optional()
+        registrationFormRef: external_exports.string().optional(),
+        registrationFormViewKey: external_exports.string().optional()
       }
     },
     async (args) => {
+      const begin = parseIsoDate(args.start);
+      if (!begin) return badDate("start", args.start);
+      const end = args.end ? parseIsoDate(args.end) : new Date(begin.getTime() + 36e5);
+      if (!end) return badDate("end", args.end);
       const isPrivate = args.isPrivate ?? true;
       const calendars = await service_exports2.fetchCalendarLists();
       if (isPrivate && !args.calendarId && calendars.length > 0) {
@@ -34968,8 +35076,6 @@ function buildCalendarTools() {
           "NOT_FOUND"
         );
       }
-      const begin = new Date(args.start);
-      const end = args.end ? new Date(args.end) : new Date(begin.getTime() + 36e5);
       const draft = {
         title: args.title,
         description: args.description ?? "",
@@ -34983,17 +35089,20 @@ function buildCalendarTools() {
         calendarId: args.calendarId,
         rrule: args.rrule,
         startTzid: args.startTzid,
-        registrationFormRef: args.registrationFormRef
+        registrationFormRef: args.registrationFormRef,
+        registrationFormViewKey: args.registrationFormViewKey
       };
       const { event, calendar: list } = await service_exports2.createCalendarEvent(draft, { calendars });
       const coordinate = `${event.kind}:${event.user}:${event.id}`;
+      const invitationsSent = isPrivate ? draft.participants?.length ?? 0 : 0;
       return ok(
-        `Created ${isPrivate ? "private" : "public"} event "${args.title}"${list ? ` in calendar "${list.title}"` : ""}.`,
+        `Created ${isPrivate ? "private" : "public"} event "${args.title}"${list ? ` in calendar "${list.title}"` : ""}${invitationsSent ? ` \u2014 sent ${invitationsSent} invitation(s)` : ""}.`,
         {
           id: event.id,
           eventId: event.eventId,
           coordinate,
-          calendarId: list?.id
+          calendarId: list?.id,
+          invitationsSent
         }
       );
     }
@@ -35012,12 +35121,19 @@ function buildCalendarTools() {
         event: {
           id: event.id,
           title: event.title,
+          description: event.description,
           begin: event.begin,
           end: event.end,
           location: event.location,
           isPrivate: event.isPrivate,
           rrule: event.repeat?.rrule ?? null,
-          participants: event.participants
+          startTzid: event.startTzid ?? null,
+          participants: event.participants,
+          calendarId: event.calendarId ?? null,
+          // The attached form ref is surfaced so a write can be verified; the
+          // form's viewKey itself is never returned (no key material in results).
+          registrationFormRef: event.registrationFormRef ?? null,
+          registrationFormHasViewKey: Boolean(event.registrationFormViewKey)
         }
       });
     }
@@ -35028,7 +35144,12 @@ function buildCalendarTools() {
     async () => {
       const lists = await service_exports2.fetchCalendarLists();
       return ok(`Found ${lists.length} calendar(s).`, {
-        calendars: lists.map((c) => ({ id: c.id, title: c.title, color: c.color }))
+        calendars: lists.map((c) => ({
+          id: c.id,
+          title: c.title,
+          color: c.color,
+          description: c.description
+        }))
       });
     }
   );
@@ -35237,7 +35358,7 @@ function buildCalendarTools() {
   server.registerTool(
     "update_calendar_event",
     {
-      description: "Update a calendar event by its coordinate kind:pubkey:d. Only changed fields need be sent. Requires confirm:true.",
+      description: "Update a calendar event by its coordinate kind:pubkey:d. Only changed fields need be sent. registrationFormRef attaches/replaces the event's registration form (empty string detaches it); for an ENCRYPTED form also pass registrationFormViewKey or attendees cannot read it. Requires confirm:true.",
       inputSchema: {
         coordinate: external_exports.string(),
         title: external_exports.string().optional(),
@@ -35247,6 +35368,8 @@ function buildCalendarTools() {
         location: external_exports.string().optional(),
         rrule: external_exports.string().optional(),
         startTzid: external_exports.string().optional(),
+        registrationFormRef: external_exports.string().optional(),
+        registrationFormViewKey: external_exports.string().optional(),
         confirm: external_exports.boolean().optional()
       }
     },
@@ -35257,21 +35380,27 @@ function buildCalendarTools() {
         `updates event ${args.coordinate}`
       );
       if (blocked) return blocked;
+      const newBegin = args.start ? parseIsoDate(args.start) : void 0;
+      if (args.start && !newBegin) return badDate("start", args.start);
+      const newEnd = args.end ? parseIsoDate(args.end) : void 0;
+      if (args.end && !newEnd) return badDate("end", args.end);
       const viewKey = await service_exports2.lookupEventViewKey(args.coordinate);
       const existing = await service_exports2.fetchCalendarEventByCoordinate(args.coordinate, viewKey);
       if (!existing) return fail(`No event found for ${args.coordinate}.`, "NOT_FOUND");
+      const formRef = args.registrationFormRef === void 0 ? existing.registrationFormRef : args.registrationFormRef || void 0;
+      const formViewKey = !formRef ? void 0 : args.registrationFormViewKey ?? (formRef === existing.registrationFormRef ? existing.registrationFormViewKey : void 0);
       const draft = {
         title: args.title ?? existing.title,
         description: args.description ?? existing.description,
-        begin: args.start ? new Date(args.start) : new Date(existing.begin),
-        end: args.end ? new Date(args.end) : new Date(existing.end),
+        begin: newBegin ?? new Date(existing.begin),
+        end: newEnd ?? new Date(existing.end),
         location: args.location ?? existing.location[0],
         participants: existing.participants,
         isPrivate: existing.isPrivate,
         rrule: args.rrule ?? existing.repeat.rrule ?? void 0,
         startTzid: args.startTzid ?? existing.startTzid,
-        registrationFormRef: existing.registrationFormRef,
-        registrationFormViewKey: existing.registrationFormViewKey,
+        registrationFormRef: formRef,
+        registrationFormViewKey: formViewKey,
         notificationPreference: existing.notificationPreference,
         viewKey: existing.viewKey,
         existingId: existing.id
@@ -35286,14 +35415,15 @@ function buildCalendarTools() {
   server.registerTool(
     "attach_form_to_event",
     {
-      description: "Attach a Formstr form (naddr or coordinate) as an event's registration form. Requires confirm:true.",
+      description: "Attach a Formstr form (naddr or coordinate) as an event's registration form. For an ENCRYPTED form, also pass formViewKey (the form's view key) \u2014 without it attendees cannot read the attached form. Requires confirm:true.",
       inputSchema: {
         coordinate: external_exports.string(),
         formRef: external_exports.string(),
+        formViewKey: external_exports.string().optional(),
         confirm: external_exports.boolean().optional()
       }
     },
-    async ({ coordinate, formRef, confirm }) => {
+    async ({ coordinate, formRef, formViewKey, confirm }) => {
       const blocked = requireConfirm(
         "attach_form_to_event",
         { confirm },
@@ -35303,6 +35433,7 @@ function buildCalendarTools() {
       const viewKey = await service_exports2.lookupEventViewKey(coordinate);
       const existing = await service_exports2.fetchCalendarEventByCoordinate(coordinate, viewKey);
       if (!existing) return fail(`No event found for ${coordinate}.`, "NOT_FOUND");
+      const registrationFormViewKey = formViewKey ?? (formRef === existing.registrationFormRef ? existing.registrationFormViewKey : void 0);
       const draft = {
         title: existing.title,
         description: existing.description,
@@ -35314,6 +35445,7 @@ function buildCalendarTools() {
         rrule: existing.repeat.rrule ?? void 0,
         startTzid: existing.startTzid,
         registrationFormRef: formRef,
+        registrationFormViewKey,
         notificationPreference: existing.notificationPreference,
         viewKey: existing.viewKey,
         existingId: existing.id
@@ -35506,7 +35638,7 @@ function buildDriveTools() {
   server.registerTool(
     "delete_file",
     {
-      description: "Delete a file from your drive by name. Requires confirm:true.",
+      description: "Remove a file from your drive index by name. This is a soft delete: the encrypted blob stays on the Blossom server (unreadable without your key) \u2014 only the drive listing forgets it. Requires confirm:true.",
       inputSchema: {
         name: external_exports.string(),
         folder: external_exports.string().optional(),
@@ -35519,7 +35651,9 @@ function buildDriveTools() {
       const resolved = await resolveFile(name, folder);
       if ("error" in resolved) return resolved.error;
       await service_exports4.deleteFile(resolved.file);
-      return ok(`Deleted "${name}".`);
+      return ok(
+        `Removed "${name}" from your drive index. The encrypted blob remains on the Blossom server; it is unreadable without your key.`
+      );
     }
   );
   server.registerTool(
@@ -36053,16 +36187,29 @@ function buildPagesTools() {
       return ok(`Saved page "${title}".`, { address: page.address });
     }
   );
+  server.registerTool(
+    "set_page_tags",
+    {
+      description: "Set the private labels/tags for a document address.",
+      inputSchema: { address: external_exports.string(), tags: external_exports.array(external_exports.string()) }
+    },
+    async ({ address, tags }) => {
+      await service_exports3.setDocTags(address, tags);
+      return ok(`Set ${tags.length} tag(s) on ${address}.`);
+    }
+  );
+  write = true;
   server.registerTool(
     "update_page",
     {
-      description: "Update an existing document. Pass its docId (d-tag) and the new Markdown.",
+      description: "Update an existing document, replacing its content. Pass its docId (d-tag) and the new Markdown. Requires confirm:true.",
       inputSchema: {
         docId: external_exports.string(),
         content: external_exports.string(),
         title: external_exports.string().optional(),
         viewKey: external_exports.string().optional(),
-        editKey: external_exports.string().optional()
+        editKey: external_exports.string().optional(),
+        confirm: external_exports.boolean().optional()
       }
     },
     async ({
@@ -36070,8 +36217,15 @@ function buildPagesTools() {
       content,
       title,
       viewKey,
-      editKey
+      editKey,
+      confirm
     }) => {
+      const blocked = requireConfirm(
+        "update_page",
+        { confirm },
+        `overwrites document ${docId} with new content`
+      );
+      if (blocked) return blocked;
       const page = await service_exports3.savePage({
         existingId: docId,
         content: withTitle(title, content),
@@ -36081,18 +36235,6 @@ function buildPagesTools() {
       return ok(`Updated page ${docId}.`, { address: page.address });
     }
   );
-  server.registerTool(
-    "set_page_tags",
-    {
-      description: "Set the private labels/tags for a document address.",
-      inputSchema: { address: external_exports.string(), tags: external_exports.array(external_exports.string()) }
-    },
-    async ({ address, tags }) => {
-      await service_exports3.setDocTags(address, tags);
-      return ok(`Set ${tags.length} tag(s) on ${address}.`);
-    }
-  );
-  write = true;
   server.registerTool(
     "delete_page",
     {
@@ -36242,7 +36384,11 @@ function buildPollsTools() {
           pubkey: poll.pubkey,
           createdAt: poll.createdAt,
           endsAt: poll.endsAt,
-          hashtags: poll.hashtags
+          hashtags: poll.hashtags,
+          // Votes on a PoW-gated poll must be NIP-13 mined to this difficulty
+          // (submit_poll_response caps mining at 20) — surface it so callers
+          // know why a vote may be slow or refused.
+          powDifficulty: poll.powDifficulty ?? null
         }
       });
     }
@@ -36281,11 +36427,18 @@ function buildPollsTools() {
       }
     },
     async (args) => {
+      const endsAt = args.endsAt ? new Date(args.endsAt) : void 0;
+      if (args.endsAt && !Number.isFinite(endsAt.getTime())) {
+        return fail(
+          `Could not parse endsAt "${args.endsAt}" \u2014 pass an ISO 8601 date-time (e.g. 2026-07-02T15:00:00Z).`,
+          "BAD_INPUT"
+        );
+      }
       const poll = await service_exports5.createPoll({
         question: args.question,
         options: args.options.map((label) => ({ label })),
         pollType: args.pollType ?? "singlechoice",
-        endsAt: args.endsAt ? new Date(args.endsAt) : void 0,
+        endsAt,
         hashtags: args.hashtags
       });
       return ok(`Created poll "${args.question}".`, { id: poll.id });
@@ -36356,6 +36509,26 @@ function buildPollsTools() {
   return tools;
 }
 
+// ../agent/src/tools/validate.ts
+function withStrictArgs(entry) {
+  const schema = external_exports.object(entry.inputSchema).strict();
+  return {
+    ...entry,
+    handler: async (args, ctx) => {
+      const parsed = schema.safeParse(args ?? {});
+      if (!parsed.success) {
+        const problems = parsed.error.issues.map((i4) => i4.path.length ? `${i4.path.join(".")}: ${i4.message}` : i4.message).join("; ");
+        const valid = Object.keys(entry.inputSchema);
+        return fail(
+          `Invalid arguments for ${entry.name}: ${problems}. Valid parameters: ${valid.length ? valid.join(", ") : "(none)"}.`,
+          "BAD_INPUT"
+        );
+      }
+      return entry.handler(parsed.data, ctx);
+    }
+  };
+}
+
 // ../agent/src/tools/index.ts
 var toolRegistry = [
   ...formsTools,
@@ -36363,7 +36536,7 @@ var toolRegistry = [
   ...pagesTools,
   ...pollsTools,
   ...driveTools
-];
+].map(withStrictArgs);
 
 // ../../node_modules/.pnpm/zod-to-json-schema@3.25.2_zod@3.25.76/node_modules/zod-to-json-schema/dist/esm/Options.js
 var ignoreOverride = /* @__PURE__ */ Symbol("Let zodToJsonSchema decide on which parser to use");
@@ -46536,6 +46709,95 @@ var StdioServerTransport = class {
   }
 };
 
+// src/version.ts
+var import_node_fs2 = require("fs");
+var import_node_path2 = require("path");
+var PACKAGE_NAME = "@formstr/mcp";
+function readInstalledVersion() {
+  try {
+    const pkg = JSON.parse((0, import_node_fs2.readFileSync)((0, import_node_path2.join)(__dirname, "..", "package.json"), "utf8"));
+    return pkg.version ?? "0.0.0";
+  } catch {
+    return "0.0.0";
+  }
+}
+function parseSemver(version2) {
+  const cleaned = version2.trim().replace(/^v/i, "").split("+")[0];
+  const [core, pre] = cleaned.split("-", 2);
+  const release = core.split(".").map((n) => Number.parseInt(n, 10) || 0);
+  while (release.length < 3) release.push(0);
+  return { release, prerelease: pre ? pre.split(".") : [] };
+}
+function compareIdentifiers(a, b) {
+  const na = /^\d+$/.test(a);
+  const nb = /^\d+$/.test(b);
+  if (na && nb) return Number(a) - Number(b) < 0 ? -1 : Number(a) === Number(b) ? 0 : 1;
+  if (na) return -1;
+  if (nb) return 1;
+  return a < b ? -1 : a > b ? 1 : 0;
+}
+function compareVersions(a, b) {
+  const va = parseSemver(a);
+  const vb = parseSemver(b);
+  for (let i4 = 0; i4 < 3; i4++) {
+    if (va.release[i4] !== vb.release[i4]) return va.release[i4] < vb.release[i4] ? -1 : 1;
+  }
+  if (va.prerelease.length === 0 && vb.prerelease.length === 0) return 0;
+  if (va.prerelease.length === 0) return 1;
+  if (vb.prerelease.length === 0) return -1;
+  const len = Math.max(va.prerelease.length, vb.prerelease.length);
+  for (let i4 = 0; i4 < len; i4++) {
+    const ia = va.prerelease[i4];
+    const ib = vb.prerelease[i4];
+    if (ia === void 0) return -1;
+    if (ib === void 0) return 1;
+    const c = compareIdentifiers(ia, ib);
+    if (c !== 0) return c < 0 ? -1 : 1;
+  }
+  return 0;
+}
+async function fetchLatestVersion(pkgName, opts = {}) {
+  const fetchImpl = opts.fetchImpl ?? fetch;
+  const timeoutMs = opts.timeoutMs ?? 3e3;
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    const res = await fetchImpl(`https://registry.npmjs.org/${pkgName}/latest`, {
+      signal: controller.signal,
+      // The abbreviated metadata document is far smaller than the full packument.
+      headers: { accept: "application/vnd.npm.install-v1+json" }
+    });
+    if (!res.ok) return null;
+    const body = await res.json();
+    return typeof body.version === "string" ? body.version : null;
+  } catch {
+    return null;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function formatVersionReport(installed, latest) {
+  const head = `${PACKAGE_NAME} ${installed}`;
+  if (!latest) {
+    return `${head}
+(could not check for updates \u2014 offline or registry unreachable)`;
+  }
+  const cmp = compareVersions(installed, latest);
+  if (cmp < 0) {
+    return [
+      head,
+      `Update available: ${latest} (you have ${installed}).`,
+      `Upgrade: npm install -g ${PACKAGE_NAME}@latest`,
+      `Or just re-run via: npx -y ${PACKAGE_NAME}@latest`
+    ].join("\n");
+  }
+  if (cmp > 0) {
+    return `${head}
+(ahead of the latest published release ${latest})`;
+  }
+  return `${head} (latest)`;
+}
+
 // src/server.ts
 function adapt(r) {
   const text = r.ok || r.errorCode === void 0 ? r.text : `${r.text} (${r.errorCode})`;
@@ -46546,12 +46808,16 @@ function adapt(r) {
   };
 }
 function buildServer(ctx) {
-  const server = new McpServer({ name: "formstr", version: "0.1.0" });
+  const server = new McpServer({ name: "formstr", version: readInstalledVersion() });
   for (const t of toolRegistry) {
     if (t.write && !ctx.allowWrites) continue;
     server.registerTool(
       t.name,
-      { description: t.description, inputSchema: t.inputSchema },
+      // Strict object, not the raw shape: the SDK's own parse would silently
+      // STRIP unknown keys before our handler runs, so a misspelled parameter
+      // looked accepted while doing nothing. Strict makes it an InvalidParams
+      // error the model can react to (and advertises additionalProperties:false).
+      { description: t.description, inputSchema: external_exports.object(t.inputSchema).strict() },
       async (args) => adapt(await t.handler(args, ctx))
     );
   }
@@ -46578,7 +46844,7 @@ async function runServer(cli) {
   } : {};
   const account = await bootstrap({ account: cfg.account, relays: cfg.relays }, deps);
   console.error(
-    `formstr-mcp: signed in as ${account.npub} (${account.method}), writes ${cfg.allowWrites ? "ENABLED" : "disabled"}`
+    `formstr-mcp: signed in as ${account.npub} (${account.method}), gated writes ${cfg.allowWrites ? "ENABLED" : "disabled (creates always on)"}`
   );
   await startStdio({ allowWrites: cfg.allowWrites });
   console.error("formstr-mcp: server running on stdio");
@@ -46653,6 +46919,12 @@ async function main() {
     case "help":
       console.error(helpText());
       return cli.command;
+    case "version": {
+      const installed = readInstalledVersion();
+      const latest = await fetchLatestVersion(PACKAGE_NAME);
+      console.log(formatVersionReport(installed, latest));
+      return cli.command;
+    }
     case "run":
     default:
       await runServer(cli);