@formstr/mcp 0.4.0 → 0.5.0

package/dist/index.js

@@ -24568,7 +24568,13 @@ function fileBackend() {
       if (!passphrase) {
         throw new Error("Encrypted keystore file exists but FORMSTR_MCP_PASSPHRASE is not set.");
       }
-      return parseMap(decryptBlob((0, import_node_fs.readFileSync)(path, "utf8"), passphrase));
+      try {
+        return parseMap(decryptBlob((0, import_node_fs.readFileSync)(path, "utf8"), passphrase));
+      } catch {
+        throw new Error(
+          `Could not decrypt the keystore file (${path}): FORMSTR_MCP_PASSPHRASE does not match the passphrase it was encrypted with (or the file is corrupt). Fix the passphrase, or delete the file and run \`formstr-mcp login\` to sign in again.`
+        );
+      }
     },
     save(map) {
       const passphrase = process.env.FORMSTR_MCP_PASSPHRASE;
@@ -27554,6 +27560,8 @@ function helpText() {
     "",
     "Flags:",
     "  --allow-writes         Enable gated write tools (update / delete / share / submit).",
+    "                         Note: create/import tools (create_form, create_calendar_event, \u2026)",
+    "                         are ALWAYS enabled and publish to relays even without this flag.",
     "  --account <npub|hex>   Boot a specific account instead of the active one.",
     "  --relays <a,b,\u2026>       Override relays (comma-separated).",
     "",
@@ -27580,7 +27588,8 @@ function helpText() {
     "    }",
     "",
     "  Tip: a NIP-46 (bunker) account needs no passphrase \u2014 `switch` to one and the config",
-    '  can stay secret-free. Add "--allow-writes" to args to enable gated write tools.'
+    '  can stay secret-free. Add "--allow-writes" to args to enable gated write tools',
+    "  (creates are always on)."
   ].join("\n");
 }
 
@@ -32406,11 +32415,11 @@ async function decryptListEntries(signer, userPubkey, content) {
   const parsed = JSON.parse(decrypted);
   return Array.isArray(parsed) ? parsed : [];
 }
-async function publishMyFormsList(signer, relays, entries) {
+async function publishMyFormsList(signer, relays, entries, prevCreatedAt) {
   const encrypted = await nip44SelfEncrypt(signer, JSON.stringify(entries));
   const event = {
     kind: FORM_KINDS.myFormsList,
-    created_at: Math.floor(Date.now() / 1e3),
+    created_at: Math.max(Math.floor(Date.now() / 1e3), prevCreatedAt + 1),
     tags: [],
     content: encrypted
   };
@@ -32471,9 +32480,10 @@ async function readMyFormsEntriesForWrite(signer, userPubkey, relays) {
     listEvent = await fetchLatestMyFormsEvent(relays, userPubkey);
     if (listEvent?.content) break;
   }
-  if (!listEvent?.content) return [];
+  if (!listEvent?.content) return { entries: [], prevCreatedAt: 0 };
   try {
-    return await decryptListEntries(signer, userPubkey, listEvent.content);
+    const entries = await decryptListEntries(signer, userPubkey, listEvent.content);
+    return { entries, prevCreatedAt: listEvent.created_at };
   } catch (err) {
     throw new Error(
       `Could not read your existing forms list to add this form, so it was left unchanged to avoid losing your other forms. The form itself was published \u2014 retry to add it. (${err instanceof Error ? err.message : String(err)})`
@@ -32484,8 +32494,12 @@ async function appendToMyFormsList(formPubkey, formId, relay, signingKeyHex, vie
   const signer = await signerManager.getSigner();
   const userPubkey = await signer.getPublicKey();
   const relays = relayManager.getRelaysForModule("forms");
-  let entries = await readMyFormsEntriesForWrite(signer, userPubkey, relays);
-  entries = entries.map(
+  const { entries: existing, prevCreatedAt } = await readMyFormsEntriesForWrite(
+    signer,
+    userPubkey,
+    relays
+  );
+  const entries = existing.map(
     (e) => e[0] === "f" && e.length < 4 ? ["f", e[1] ?? "", e[2] ?? "", ""] : e
   );
   const coordKey = `${formPubkey}:${formId}`;
@@ -32493,10 +32507,11 @@ async function appendToMyFormsList(formPubkey, formId, relay, signingKeyHex, vie
     const secrets = signingKeyHex ? encodeFormKeys(signingKeyHex, viewKeyHex) : "";
     entries.push(["f", coordKey, relay, secrets]);
   }
-  await publishMyFormsList(signer, relays, entries);
+  await publishMyFormsList(signer, relays, entries, prevCreatedAt);
 }
 async function saveToMyForms(summaries) {
   const signer = await signerManager.getSigner();
+  const userPubkey = await signer.getPublicKey();
   const relays = relayManager.getRelaysForModule("forms");
   const entries = summaries.map((s) => [
     "f",
@@ -32504,7 +32519,8 @@ async function saveToMyForms(summaries) {
     s.relay ?? "",
     s.signingKey ? encodeFormKeys(s.signingKey, s.viewKey) : ""
   ]);
-  await publishMyFormsList(signer, relays, entries);
+  const prev = await fetchLatestMyFormsEvent(relays, userPubkey);
+  await publishMyFormsList(signer, relays, entries, prev?.created_at ?? 0);
 }
 async function fetchMyFormsByAuthor(pubkey, relays) {
   const filter = {
@@ -32551,7 +32567,7 @@ async function deleteForm(formId, formPubkey) {
   const coordKey = `${formPubkey}:${formId}`;
   const trimmed = entries.filter((e) => e[1] !== coordKey);
   if (trimmed.length === entries.length) return;
-  await publishMyFormsList(signer, relays, trimmed);
+  await publishMyFormsList(signer, relays, trimmed, listEvent.created_at);
 }
 async function updateForm(params) {
   const relays = relayManager.getRelaysForModule("forms");
@@ -34287,7 +34303,7 @@ async function fetchAllDocMetadata() {
   }
   return result;
 }
-async function fetchDocMetadata(address) {
+async function fetchNewestDocMetadataEvent(address) {
   const signer = await signerManager.getSigner();
   const pubkey = await signer.getPublicKey();
   const events = await nostrRuntime.querySync(RELAYS(), {
@@ -34296,7 +34312,12 @@ async function fetchDocMetadata(address) {
     "#d": [address]
   });
   if (events.length === 0) return void 0;
-  const newest = events.reduce((a, b) => b.created_at > a.created_at ? b : a);
+  return events.reduce((a, b) => b.created_at > a.created_at ? b : a);
+}
+async function fetchDocMetadata(address) {
+  const signer = await signerManager.getSigner();
+  const newest = await fetchNewestDocMetadataEvent(address);
+  if (!newest) return void 0;
   try {
     return parseMetadataJson(await nip44SelfDecrypt(signer, newest.content));
   } catch {
@@ -34304,14 +34325,24 @@ async function fetchDocMetadata(address) {
   }
 }
 async function saveDocMetadata(address, patch) {
-  const existing = await fetchDocMetadata(address) ?? {};
+  const signer = await signerManager.getSigner();
+  const prevEvent = await fetchNewestDocMetadataEvent(address);
+  let existing = {};
+  if (prevEvent) {
+    try {
+      existing = parseMetadataJson(await nip44SelfDecrypt(signer, prevEvent.content)) ?? {};
+    } catch {
+    }
+  }
   const merged = { ...existing, ...patch };
   if (!Array.isArray(merged.tags)) merged.tags = [];
-  const signer = await signerManager.getSigner();
   const content = await nip44SelfEncrypt(signer, JSON.stringify(merged));
   const signed = await signer.signEvent({
     kind: PAGES_KINDS.docMetadata,
-    created_at: Math.floor(Date.now() / 1e3),
+    // Strictly supersede the event this merge was read from: two saves in the
+    // same second otherwise tie on created_at and NIP-01 tie-breaking (lowest
+    // id wins) can resurrect the stale copy — losing a just-saved viewKey/title.
+    created_at: Math.max(Math.floor(Date.now() / 1e3), (prevEvent?.created_at ?? 0) + 1),
     tags: [["d", address]],
     content
   });
@@ -34560,14 +34591,22 @@ async function fetchFileIndex() {
 }
 async function saveFileMetadata(metadata) {
   const signer = await signerManager.getSigner();
+  const relays = relayManager.getRelaysForModule("drive");
   const full = {
     ...metadata,
     encryptionAlgorithm: metadata.encryptionAlgorithm ?? "aes-gcm"
   };
   const encrypted = await nip44SelfEncrypt(signer, JSON.stringify(full));
+  const pubkey = await signer.getPublicKey();
+  const existing = await nostrRuntime.querySync(relays, {
+    kinds: [DRIVE_KINDS.fileMetadata],
+    authors: [pubkey],
+    "#d": [metadata.hash]
+  });
+  const prevCreatedAt = existing.reduce((max, e) => Math.max(max, e.created_at), 0);
   const event = {
     kind: DRIVE_KINDS.fileMetadata,
-    created_at: Math.floor(Date.now() / 1e3),
+    created_at: Math.max(Math.floor(Date.now() / 1e3), prevCreatedAt + 1),
     tags: [
       ["d", metadata.hash],
       ["client", "formstr-drive"],
@@ -34576,7 +34615,6 @@ async function saveFileMetadata(metadata) {
     content: encrypted
   };
   const signed = await signer.signEvent(event);
-  const relays = relayManager.getRelaysForModule("drive");
   await nostrRuntime.publish(relays, signed);
 }
 async function updateFileMetadata(hash, updates) {
@@ -34661,6 +34699,7 @@ __export(service_exports5, {
 });
 
 // ../agent/src/services/polls/pow.ts
+var MAX_MINED_POW_DIFFICULTY = 20;
 function minePollEvent(unsigned, difficulty) {
   const event = unsigned;
   const nonceTag = ["nonce", "0", difficulty.toString()];
@@ -34753,6 +34792,11 @@ async function submitPollResponse(pollId, pollAuthor, selectedOptionIds, pollRel
     tags,
     content: ""
   };
+  if (powDifficulty && powDifficulty > MAX_MINED_POW_DIFFICULTY) {
+    throw new Error(
+      `This poll demands proof-of-work difficulty ${powDifficulty}, above the supported maximum of ${MAX_MINED_POW_DIFFICULTY} \u2014 refusing to mine (it could take hours).`
+    );
+  }
   if (powDifficulty && powDifficulty > 0) {
     const unsigned = { ...event, pubkey: await signer.getPublicKey() };
     const mined = minePollEvent(unsigned, powDifficulty);
@@ -34943,6 +34987,16 @@ function normalizePubkeyList(values) {
 }
 
 // ../agent/src/tools/calendar.ts
+function parseIsoDate(value) {
+  const date3 = new Date(value);
+  return Number.isFinite(date3.getTime()) ? date3 : null;
+}
+function badDate(field, value) {
+  return fail(
+    `Could not parse ${field} "${value}" \u2014 pass an ISO 8601 date-time (e.g. 2026-07-02T15:00:00Z).`,
+    "BAD_INPUT"
+  );
+}
 var calendarTools = buildCalendarTools();
 function buildCalendarTools() {
   const tools = [];
@@ -34959,11 +35013,15 @@ function buildCalendarTools() {
       inputSchema: { since: external_exports.string().optional(), until: external_exports.string().optional() }
     },
     async ({ since, until }) => {
+      const sinceDate = since ? parseIsoDate(since) : void 0;
+      if (since && !sinceDate) return badDate("since", since);
+      const untilDate = until ? parseIsoDate(until) : void 0;
+      if (until && !untilDate) return badDate("until", until);
       const pubkey = signerManager.getPublicKey();
       const events = await service_exports2.fetchCalendarEventsSync({
         authors: pubkey ? [pubkey] : void 0,
-        since: since ? Math.floor(new Date(since).getTime() / 1e3) : void 0,
-        until: until ? Math.floor(new Date(until).getTime() / 1e3) : void 0
+        since: sinceDate ? Math.floor(sinceDate.getTime() / 1e3) : void 0,
+        until: untilDate ? Math.floor(untilDate.getTime() / 1e3) : void 0
       });
       return ok(`Found ${events.length} event(s).`, {
         events: events.map((e) => ({
@@ -34981,7 +35039,7 @@ function buildCalendarTools() {
   server.registerTool(
     "create_calendar_event",
     {
-      description: "Schedule a calendar event. start/end are ISO 8601. Events default to PRIVATE (encrypted) and are linked into a calendar list \u2014 that is the only way they show on calendar.formstr.app, which renders only events referenced in a calendar list. Pass calendarId to choose which calendar; if omitted and the user already has calendars, this tool returns the list so you can ASK the user which one (then re-run with calendarId). Set isPrivate:false for a public, unencrypted event \u2014 note public events do NOT sync to calendar.formstr.app. participants (npub or hex) receive NIP-59 invitations.",
+      description: "Schedule a calendar event. start/end are ISO 8601. Events default to PRIVATE (encrypted) and are linked into a calendar list \u2014 that is the only way they show on calendar.formstr.app, which renders only events referenced in a calendar list. Pass calendarId to choose which calendar; if omitted and the user already has calendars, this tool returns the list so you can ASK the user which one (then re-run with calendarId). Set isPrivate:false for a public, unencrypted event \u2014 note public events do NOT sync to calendar.formstr.app. participants (npub or hex) receive NIP-59 invitations. registrationFormRef attaches a Formstr form; for an ENCRYPTED form also pass registrationFormViewKey or attendees cannot read it.",
       inputSchema: {
         title: external_exports.string(),
         description: external_exports.string().optional(),
@@ -34993,10 +35051,15 @@ function buildCalendarTools() {
         participants: external_exports.array(external_exports.string()).optional(),
         rrule: external_exports.string().optional(),
         startTzid: external_exports.string().optional(),
-        registrationFormRef: external_exports.string().optional()
+        registrationFormRef: external_exports.string().optional(),
+        registrationFormViewKey: external_exports.string().optional()
       }
     },
     async (args) => {
+      const begin = parseIsoDate(args.start);
+      if (!begin) return badDate("start", args.start);
+      const end = args.end ? parseIsoDate(args.end) : new Date(begin.getTime() + 36e5);
+      if (!end) return badDate("end", args.end);
       const isPrivate = args.isPrivate ?? true;
       const calendars = await service_exports2.fetchCalendarLists();
       if (isPrivate && !args.calendarId && calendars.length > 0) {
@@ -35013,8 +35076,6 @@ function buildCalendarTools() {
           "NOT_FOUND"
         );
       }
-      const begin = new Date(args.start);
-      const end = args.end ? new Date(args.end) : new Date(begin.getTime() + 36e5);
       const draft = {
         title: args.title,
         description: args.description ?? "",
@@ -35028,17 +35089,20 @@ function buildCalendarTools() {
         calendarId: args.calendarId,
         rrule: args.rrule,
         startTzid: args.startTzid,
-        registrationFormRef: args.registrationFormRef
+        registrationFormRef: args.registrationFormRef,
+        registrationFormViewKey: args.registrationFormViewKey
       };
       const { event, calendar: list } = await service_exports2.createCalendarEvent(draft, { calendars });
       const coordinate = `${event.kind}:${event.user}:${event.id}`;
+      const invitationsSent = isPrivate ? draft.participants?.length ?? 0 : 0;
       return ok(
-        `Created ${isPrivate ? "private" : "public"} event "${args.title}"${list ? ` in calendar "${list.title}"` : ""}.`,
+        `Created ${isPrivate ? "private" : "public"} event "${args.title}"${list ? ` in calendar "${list.title}"` : ""}${invitationsSent ? ` \u2014 sent ${invitationsSent} invitation(s)` : ""}.`,
         {
           id: event.id,
           eventId: event.eventId,
           coordinate,
-          calendarId: list?.id
+          calendarId: list?.id,
+          invitationsSent
         }
       );
     }
@@ -35057,12 +35121,19 @@ function buildCalendarTools() {
         event: {
           id: event.id,
           title: event.title,
+          description: event.description,
           begin: event.begin,
           end: event.end,
           location: event.location,
           isPrivate: event.isPrivate,
           rrule: event.repeat?.rrule ?? null,
-          participants: event.participants
+          startTzid: event.startTzid ?? null,
+          participants: event.participants,
+          calendarId: event.calendarId ?? null,
+          // The attached form ref is surfaced so a write can be verified; the
+          // form's viewKey itself is never returned (no key material in results).
+          registrationFormRef: event.registrationFormRef ?? null,
+          registrationFormHasViewKey: Boolean(event.registrationFormViewKey)
         }
       });
     }
@@ -35073,7 +35144,12 @@ function buildCalendarTools() {
     async () => {
       const lists = await service_exports2.fetchCalendarLists();
       return ok(`Found ${lists.length} calendar(s).`, {
-        calendars: lists.map((c) => ({ id: c.id, title: c.title, color: c.color }))
+        calendars: lists.map((c) => ({
+          id: c.id,
+          title: c.title,
+          color: c.color,
+          description: c.description
+        }))
       });
     }
   );
@@ -35282,7 +35358,7 @@ function buildCalendarTools() {
   server.registerTool(
     "update_calendar_event",
     {
-      description: "Update a calendar event by its coordinate kind:pubkey:d. Only changed fields need be sent. Requires confirm:true.",
+      description: "Update a calendar event by its coordinate kind:pubkey:d. Only changed fields need be sent. registrationFormRef attaches/replaces the event's registration form (empty string detaches it); for an ENCRYPTED form also pass registrationFormViewKey or attendees cannot read it. Requires confirm:true.",
       inputSchema: {
         coordinate: external_exports.string(),
         title: external_exports.string().optional(),
@@ -35292,6 +35368,8 @@ function buildCalendarTools() {
         location: external_exports.string().optional(),
         rrule: external_exports.string().optional(),
         startTzid: external_exports.string().optional(),
+        registrationFormRef: external_exports.string().optional(),
+        registrationFormViewKey: external_exports.string().optional(),
         confirm: external_exports.boolean().optional()
       }
     },
@@ -35302,21 +35380,27 @@ function buildCalendarTools() {
         `updates event ${args.coordinate}`
       );
       if (blocked) return blocked;
+      const newBegin = args.start ? parseIsoDate(args.start) : void 0;
+      if (args.start && !newBegin) return badDate("start", args.start);
+      const newEnd = args.end ? parseIsoDate(args.end) : void 0;
+      if (args.end && !newEnd) return badDate("end", args.end);
       const viewKey = await service_exports2.lookupEventViewKey(args.coordinate);
       const existing = await service_exports2.fetchCalendarEventByCoordinate(args.coordinate, viewKey);
       if (!existing) return fail(`No event found for ${args.coordinate}.`, "NOT_FOUND");
+      const formRef = args.registrationFormRef === void 0 ? existing.registrationFormRef : args.registrationFormRef || void 0;
+      const formViewKey = !formRef ? void 0 : args.registrationFormViewKey ?? (formRef === existing.registrationFormRef ? existing.registrationFormViewKey : void 0);
       const draft = {
         title: args.title ?? existing.title,
         description: args.description ?? existing.description,
-        begin: args.start ? new Date(args.start) : new Date(existing.begin),
-        end: args.end ? new Date(args.end) : new Date(existing.end),
+        begin: newBegin ?? new Date(existing.begin),
+        end: newEnd ?? new Date(existing.end),
         location: args.location ?? existing.location[0],
         participants: existing.participants,
         isPrivate: existing.isPrivate,
         rrule: args.rrule ?? existing.repeat.rrule ?? void 0,
         startTzid: args.startTzid ?? existing.startTzid,
-        registrationFormRef: existing.registrationFormRef,
-        registrationFormViewKey: existing.registrationFormViewKey,
+        registrationFormRef: formRef,
+        registrationFormViewKey: formViewKey,
         notificationPreference: existing.notificationPreference,
         viewKey: existing.viewKey,
         existingId: existing.id
@@ -35331,14 +35415,15 @@ function buildCalendarTools() {
   server.registerTool(
     "attach_form_to_event",
     {
-      description: "Attach a Formstr form (naddr or coordinate) as an event's registration form. Requires confirm:true.",
+      description: "Attach a Formstr form (naddr or coordinate) as an event's registration form. For an ENCRYPTED form, also pass formViewKey (the form's view key) \u2014 without it attendees cannot read the attached form. Requires confirm:true.",
       inputSchema: {
         coordinate: external_exports.string(),
         formRef: external_exports.string(),
+        formViewKey: external_exports.string().optional(),
         confirm: external_exports.boolean().optional()
       }
     },
-    async ({ coordinate, formRef, confirm }) => {
+    async ({ coordinate, formRef, formViewKey, confirm }) => {
       const blocked = requireConfirm(
         "attach_form_to_event",
         { confirm },
@@ -35348,6 +35433,7 @@ function buildCalendarTools() {
       const viewKey = await service_exports2.lookupEventViewKey(coordinate);
       const existing = await service_exports2.fetchCalendarEventByCoordinate(coordinate, viewKey);
       if (!existing) return fail(`No event found for ${coordinate}.`, "NOT_FOUND");
+      const registrationFormViewKey = formViewKey ?? (formRef === existing.registrationFormRef ? existing.registrationFormViewKey : void 0);
       const draft = {
         title: existing.title,
         description: existing.description,
@@ -35359,6 +35445,7 @@ function buildCalendarTools() {
         rrule: existing.repeat.rrule ?? void 0,
         startTzid: existing.startTzid,
         registrationFormRef: formRef,
+        registrationFormViewKey,
         notificationPreference: existing.notificationPreference,
         viewKey: existing.viewKey,
         existingId: existing.id
@@ -35551,7 +35638,7 @@ function buildDriveTools() {
   server.registerTool(
     "delete_file",
     {
-      description: "Delete a file from your drive by name. Requires confirm:true.",
+      description: "Remove a file from your drive index by name. This is a soft delete: the encrypted blob stays on the Blossom server (unreadable without your key) \u2014 only the drive listing forgets it. Requires confirm:true.",
       inputSchema: {
         name: external_exports.string(),
         folder: external_exports.string().optional(),
@@ -35564,7 +35651,9 @@ function buildDriveTools() {
       const resolved = await resolveFile(name, folder);
       if ("error" in resolved) return resolved.error;
       await service_exports4.deleteFile(resolved.file);
-      return ok(`Deleted "${name}".`);
+      return ok(
+        `Removed "${name}" from your drive index. The encrypted blob remains on the Blossom server; it is unreadable without your key.`
+      );
     }
   );
   server.registerTool(
@@ -36098,16 +36187,29 @@ function buildPagesTools() {
       return ok(`Saved page "${title}".`, { address: page.address });
     }
   );
+  server.registerTool(
+    "set_page_tags",
+    {
+      description: "Set the private labels/tags for a document address.",
+      inputSchema: { address: external_exports.string(), tags: external_exports.array(external_exports.string()) }
+    },
+    async ({ address, tags }) => {
+      await service_exports3.setDocTags(address, tags);
+      return ok(`Set ${tags.length} tag(s) on ${address}.`);
+    }
+  );
+  write = true;
   server.registerTool(
     "update_page",
     {
-      description: "Update an existing document. Pass its docId (d-tag) and the new Markdown.",
+      description: "Update an existing document, replacing its content. Pass its docId (d-tag) and the new Markdown. Requires confirm:true.",
       inputSchema: {
         docId: external_exports.string(),
         content: external_exports.string(),
         title: external_exports.string().optional(),
         viewKey: external_exports.string().optional(),
-        editKey: external_exports.string().optional()
+        editKey: external_exports.string().optional(),
+        confirm: external_exports.boolean().optional()
       }
     },
     async ({
@@ -36115,8 +36217,15 @@ function buildPagesTools() {
       content,
       title,
       viewKey,
-      editKey
+      editKey,
+      confirm
     }) => {
+      const blocked = requireConfirm(
+        "update_page",
+        { confirm },
+        `overwrites document ${docId} with new content`
+      );
+      if (blocked) return blocked;
       const page = await service_exports3.savePage({
         existingId: docId,
         content: withTitle(title, content),
@@ -36126,18 +36235,6 @@ function buildPagesTools() {
       return ok(`Updated page ${docId}.`, { address: page.address });
     }
   );
-  server.registerTool(
-    "set_page_tags",
-    {
-      description: "Set the private labels/tags for a document address.",
-      inputSchema: { address: external_exports.string(), tags: external_exports.array(external_exports.string()) }
-    },
-    async ({ address, tags }) => {
-      await service_exports3.setDocTags(address, tags);
-      return ok(`Set ${tags.length} tag(s) on ${address}.`);
-    }
-  );
-  write = true;
   server.registerTool(
     "delete_page",
     {
@@ -36287,7 +36384,11 @@ function buildPollsTools() {
           pubkey: poll.pubkey,
           createdAt: poll.createdAt,
           endsAt: poll.endsAt,
-          hashtags: poll.hashtags
+          hashtags: poll.hashtags,
+          // Votes on a PoW-gated poll must be NIP-13 mined to this difficulty
+          // (submit_poll_response caps mining at 20) — surface it so callers
+          // know why a vote may be slow or refused.
+          powDifficulty: poll.powDifficulty ?? null
         }
       });
     }
@@ -36326,11 +36427,18 @@ function buildPollsTools() {
       }
     },
     async (args) => {
+      const endsAt = args.endsAt ? new Date(args.endsAt) : void 0;
+      if (args.endsAt && !Number.isFinite(endsAt.getTime())) {
+        return fail(
+          `Could not parse endsAt "${args.endsAt}" \u2014 pass an ISO 8601 date-time (e.g. 2026-07-02T15:00:00Z).`,
+          "BAD_INPUT"
+        );
+      }
       const poll = await service_exports5.createPoll({
         question: args.question,
         options: args.options.map((label) => ({ label })),
         pollType: args.pollType ?? "singlechoice",
-        endsAt: args.endsAt ? new Date(args.endsAt) : void 0,
+        endsAt,
         hashtags: args.hashtags
       });
       return ok(`Created poll "${args.question}".`, { id: poll.id });
@@ -36401,6 +36509,26 @@ function buildPollsTools() {
   return tools;
 }
 
+// ../agent/src/tools/validate.ts
+function withStrictArgs(entry) {
+  const schema = external_exports.object(entry.inputSchema).strict();
+  return {
+    ...entry,
+    handler: async (args, ctx) => {
+      const parsed = schema.safeParse(args ?? {});
+      if (!parsed.success) {
+        const problems = parsed.error.issues.map((i4) => i4.path.length ? `${i4.path.join(".")}: ${i4.message}` : i4.message).join("; ");
+        const valid = Object.keys(entry.inputSchema);
+        return fail(
+          `Invalid arguments for ${entry.name}: ${problems}. Valid parameters: ${valid.length ? valid.join(", ") : "(none)"}.`,
+          "BAD_INPUT"
+        );
+      }
+      return entry.handler(parsed.data, ctx);
+    }
+  };
+}
+
 // ../agent/src/tools/index.ts
 var toolRegistry = [
   ...formsTools,
@@ -36408,7 +36536,7 @@ var toolRegistry = [
   ...pagesTools,
   ...pollsTools,
   ...driveTools
-];
+].map(withStrictArgs);
 
 // ../../node_modules/.pnpm/zod-to-json-schema@3.25.2_zod@3.25.76/node_modules/zod-to-json-schema/dist/esm/Options.js
 var ignoreOverride = /* @__PURE__ */ Symbol("Let zodToJsonSchema decide on which parser to use");
@@ -46581,33 +46709,6 @@ var StdioServerTransport = class {
   }
 };
 
-// src/server.ts
-function adapt(r) {
-  const text = r.ok || r.errorCode === void 0 ? r.text : `${r.text} (${r.errorCode})`;
-  return {
-    content: [{ type: "text", text }],
-    ...r.data !== void 0 ? { structuredContent: r.data } : {},
-    ...r.ok ? {} : { isError: true }
-  };
-}
-function buildServer(ctx) {
-  const server = new McpServer({ name: "formstr", version: "0.1.0" });
-  for (const t of toolRegistry) {
-    if (t.write && !ctx.allowWrites) continue;
-    server.registerTool(
-      t.name,
-      { description: t.description, inputSchema: t.inputSchema },
-      async (args) => adapt(await t.handler(args, ctx))
-    );
-  }
-  return server;
-}
-async function startStdio(ctx) {
-  const server = buildServer(ctx);
-  const transport = new StdioServerTransport();
-  await server.connect(transport);
-}
-
 // src/version.ts
 var import_node_fs2 = require("fs");
 var import_node_path2 = require("path");
@@ -46697,6 +46798,37 @@ function formatVersionReport(installed, latest) {
   return `${head} (latest)`;
 }
 
+// src/server.ts
+function adapt(r) {
+  const text = r.ok || r.errorCode === void 0 ? r.text : `${r.text} (${r.errorCode})`;
+  return {
+    content: [{ type: "text", text }],
+    ...r.data !== void 0 ? { structuredContent: r.data } : {},
+    ...r.ok ? {} : { isError: true }
+  };
+}
+function buildServer(ctx) {
+  const server = new McpServer({ name: "formstr", version: readInstalledVersion() });
+  for (const t of toolRegistry) {
+    if (t.write && !ctx.allowWrites) continue;
+    server.registerTool(
+      t.name,
+      // Strict object, not the raw shape: the SDK's own parse would silently
+      // STRIP unknown keys before our handler runs, so a misspelled parameter
+      // looked accepted while doing nothing. Strict makes it an InvalidParams
+      // error the model can react to (and advertises additionalProperties:false).
+      { description: t.description, inputSchema: external_exports.object(t.inputSchema).strict() },
+      async (args) => adapt(await t.handler(args, ctx))
+    );
+  }
+  return server;
+}
+async function startStdio(ctx) {
+  const server = buildServer(ctx);
+  const transport = new StdioServerTransport();
+  await server.connect(transport);
+}
+
 // src/index.ts
 async function runServer(cli) {
   const cfg = resolveConfig(cli, process.env);
@@ -46712,7 +46844,7 @@ async function runServer(cli) {
   } : {};
   const account = await bootstrap({ account: cfg.account, relays: cfg.relays }, deps);
   console.error(
-    `formstr-mcp: signed in as ${account.npub} (${account.method}), writes ${cfg.allowWrites ? "ENABLED" : "disabled"}`
+    `formstr-mcp: signed in as ${account.npub} (${account.method}), gated writes ${cfg.allowWrites ? "ENABLED" : "disabled (creates always on)"}`
   );
   await startStdio({ allowWrites: cfg.allowWrites });
   console.error("formstr-mcp: server running on stdio");