@freelancercom/phabricator-mcp 1.0.0 → 1.0.3

package/README.md

@@ -11,7 +11,7 @@ An [MCP (Model Context Protocol)](https://modelcontextprotocol.io/) server that
 ### Claude Code (CLI)
 
 ```bash
-claude mcp add --scope user phabricator -- npx github:freelancer/phabricator-mcp
+claude mcp add --scope user phabricator -- npx @freelancercom/phabricator-mcp@latest
 ```
 
 Or with environment variables (if not using `~/.arcrc`):
@@ -20,7 +20,7 @@ Or with environment variables (if not using `~/.arcrc`):
 claude mcp add --scope user phabricator \
   -e PHABRICATOR_URL=https://phabricator.example.com \
   -e PHABRICATOR_API_TOKEN=api-xxxxx \
-  -- npx github:freelancer/phabricator-mcp
+  -- npx @freelancercom/phabricator-mcp@latest
 ```
 
 The `--scope user` flag installs the server globally, making it available in all projects.
@@ -34,7 +34,7 @@ Add to your Codex config (`~/.codex/config.json`):
   "mcpServers": {
     "phabricator": {
       "command": "npx",
-      "args": ["github:freelancer/phabricator-mcp"],
+      "args": ["@freelancercom/phabricator-mcp@latest"],
       "env": {
         "PHABRICATOR_URL": "https://phabricator.example.com",
         "PHABRICATOR_API_TOKEN": "api-xxxxxxxxxxxxx"
@@ -54,7 +54,7 @@ Add to your opencode config (`~/.config/opencode/config.json`):
     "servers": {
       "phabricator": {
         "command": "npx",
-        "args": ["github:freelancer/phabricator-mcp"],
+        "args": ["@freelancercom/phabricator-mcp@latest"],
         "env": {
           "PHABRICATOR_URL": "https://phabricator.example.com",
           "PHABRICATOR_API_TOKEN": "api-xxxxxxxxxxxxx"
@@ -74,7 +74,7 @@ Add to your VS Code `settings.json`:
   "claude.mcpServers": {
     "phabricator": {
       "command": "npx",
-      "args": ["github:freelancer/phabricator-mcp"],
+      "args": ["@freelancercom/phabricator-mcp@latest"],
       "env": {
         "PHABRICATOR_URL": "https://phabricator.example.com",
         "PHABRICATOR_API_TOKEN": "api-xxxxxxxxxxxxx"
@@ -93,7 +93,7 @@ Add to your Cursor MCP config (`~/.cursor/mcp.json`):
   "mcpServers": {
     "phabricator": {
       "command": "npx",
-      "args": ["github:freelancer/phabricator-mcp"],
+      "args": ["@freelancercom/phabricator-mcp@latest"],
       "env": {
         "PHABRICATOR_URL": "https://phabricator.example.com",
         "PHABRICATOR_API_TOKEN": "api-xxxxxxxxxxxxx"
@@ -112,7 +112,7 @@ Add to your VS Code `settings.json`:
   "github.copilot.chat.mcp.servers": {
     "phabricator": {
       "command": "npx",
-      "args": ["github:freelancer/phabricator-mcp"],
+      "args": ["@freelancercom/phabricator-mcp@latest"],
       "env": {
         "PHABRICATOR_URL": "https://phabricator.example.com",
         "PHABRICATOR_API_TOKEN": "api-xxxxxxxxxxxxx"
@@ -122,6 +122,32 @@ Add to your VS Code `settings.json`:
 }
 ```
 
+## Upgrading
+
+The default install uses `@freelancercom/phabricator-mcp@latest`, which tells npx to check for updates on each run. No action needed.
+
+If you pinned a specific version (e.g. `@freelancercom/phabricator-mcp@1.0.0`) or omitted the version suffix, npx caches the package and won't pick up new versions. To upgrade:
+
+```bash
+npx clear-npx-cache
+```
+
+Then restart your MCP client.
+
+### Migrating from `github:freelancer/phabricator-mcp`
+
+If you previously installed using the GitHub URL, update your config to use the npm package instead:
+
+```bash
+# Remove old server
+claude mcp remove phabricator -s user
+
+# Add new one
+claude mcp add --scope user phabricator -- npx @freelancercom/phabricator-mcp@latest
+```
+
+For JSON configs, replace `["github:freelancer/phabricator-mcp"]` with `["@freelancercom/phabricator-mcp@latest"]` in your args.
+
 ## Configuration
 
 The server automatically reads configuration from `~/.arcrc` (created by [Arcanist](https://secure.phabricator.com/book/phabricator/article/arcanist/)). No additional configuration is needed if you've already set up `arc`.

package/dist/tools/coerce.d.ts

@@ -0,0 +1,9 @@
+import { z } from 'zod';
+/**
+ * Coerce a JSON string into an object before Zod validation.
+ *
+ * Some MCP clients may send object parameters as JSON strings when they
+ * haven't loaded the tool schema. This wrapper gracefully handles that
+ * by parsing the string before validation.
+ */
+export declare function jsonCoerce<T extends z.ZodTypeAny>(schema: T): z.ZodEffects<T, T["_output"], unknown>;

package/dist/tools/coerce.js

@@ -0,0 +1,21 @@
+import { z } from 'zod';
+/**
+ * Coerce a JSON string into an object before Zod validation.
+ *
+ * Some MCP clients may send object parameters as JSON strings when they
+ * haven't loaded the tool schema. This wrapper gracefully handles that
+ * by parsing the string before validation.
+ */
+export function jsonCoerce(schema) {
+    return z.preprocess((val) => {
+        if (typeof val === 'string') {
+            try {
+                return JSON.parse(val);
+            }
+            catch {
+                return val;
+            }
+        }
+        return val;
+    }, schema);
+}

package/dist/tools/differential.js

@@ -1,23 +1,24 @@
 import { z } from 'zod';
+import { jsonCoerce } from './coerce.js';
 export function registerDifferentialTools(server, client) {
     // Search revisions
     server.tool('phabricator_revision_search', 'Search Differential revisions (code reviews)', {
         queryKey: z.string().optional().describe('Built-in query: "all", "active", "authored", "waiting"'),
-        constraints: z.object({
-            ids: z.array(z.number()).optional().describe('Revision IDs'),
+        constraints: jsonCoerce(z.object({
+            ids: z.array(z.coerce.number()).optional().describe('Revision IDs'),
             phids: z.array(z.string()).optional().describe('Revision PHIDs'),
             authorPHIDs: z.array(z.string()).optional().describe('Author PHIDs'),
             reviewerPHIDs: z.array(z.string()).optional().describe('Reviewer PHIDs'),
             repositoryPHIDs: z.array(z.string()).optional().describe('Repository PHIDs'),
             statuses: z.array(z.string()).optional().describe('Statuses: needs-review, needs-revision, accepted, published, abandoned, changes-planned'),
-        }).optional().describe('Search constraints'),
-        attachments: z.object({
+        })).optional().describe('Search constraints'),
+        attachments: jsonCoerce(z.object({
             reviewers: z.boolean().optional().describe('Include reviewers'),
             subscribers: z.boolean().optional().describe('Include subscribers'),
             projects: z.boolean().optional().describe('Include projects'),
-        }).optional().describe('Data attachments'),
+        })).optional().describe('Data attachments'),
         order: z.string().optional().describe('Result order'),
-        limit: z.number().max(100).optional().describe('Maximum results'),
+        limit: z.coerce.number().max(100).optional().describe('Maximum results'),
         after: z.string().optional().describe('Pagination cursor'),
     }, async (params) => {
         const result = await client.call('differential.revision.search', params);
@@ -71,7 +72,7 @@ export function registerDifferentialTools(server, client) {
     });
     // Get raw diff content
     server.tool('phabricator_get_raw_diff', 'Get the raw diff/patch content for a Differential diff by diff ID. Use phabricator_diff_search to find the diff ID from a revision PHID first.', {
-        diffID: z.number().describe('The diff ID (numeric, e.g., 1392561). Use phabricator_diff_search to find this from a revision.'),
+        diffID: z.coerce.number().describe('The diff ID (numeric, e.g., 1392561). Use phabricator_diff_search to find this from a revision.'),
     }, async (params) => {
         const result = await client.call('differential.getrawdiff', {
             diffID: params.diffID,
@@ -80,15 +81,15 @@ export function registerDifferentialTools(server, client) {
     });
     // Search diffs
     server.tool('phabricator_diff_search', 'Search Differential diffs', {
-        constraints: z.object({
-            ids: z.array(z.number()).optional().describe('Diff IDs'),
+        constraints: jsonCoerce(z.object({
+            ids: z.array(z.coerce.number()).optional().describe('Diff IDs'),
             phids: z.array(z.string()).optional().describe('Diff PHIDs'),
             revisionPHIDs: z.array(z.string()).optional().describe('Revision PHIDs'),
-        }).optional().describe('Search constraints'),
-        attachments: z.object({
+        })).optional().describe('Search constraints'),
+        attachments: jsonCoerce(z.object({
             commits: z.boolean().optional().describe('Include commit info'),
-        }).optional().describe('Data attachments'),
-        limit: z.number().max(100).optional().describe('Maximum results'),
+        })).optional().describe('Data attachments'),
+        limit: z.coerce.number().max(100).optional().describe('Maximum results'),
         after: z.string().optional().describe('Pagination cursor'),
     }, async (params) => {
         const result = await client.call('differential.diff.search', params);

package/dist/tools/diffusion.js

@@ -1,24 +1,25 @@
 import { z } from 'zod';
+import { jsonCoerce } from './coerce.js';
 export function registerDiffusionTools(server, client) {
     // Search repositories
     server.tool('phabricator_repository_search', 'Search Diffusion repositories', {
         queryKey: z.string().optional().describe('Built-in query: "all", "active"'),
-        constraints: z.object({
-            ids: z.array(z.number()).optional().describe('Repository IDs'),
+        constraints: jsonCoerce(z.object({
+            ids: z.array(z.coerce.number()).optional().describe('Repository IDs'),
             phids: z.array(z.string()).optional().describe('Repository PHIDs'),
             callsigns: z.array(z.string()).optional().describe('Repository callsigns'),
             shortNames: z.array(z.string()).optional().describe('Repository short names'),
             types: z.array(z.string()).optional().describe('VCS types: git, hg, svn'),
             uris: z.array(z.string()).optional().describe('Repository URIs'),
             query: z.string().optional().describe('Full-text search query'),
-        }).optional().describe('Search constraints'),
-        attachments: z.object({
+        })).optional().describe('Search constraints'),
+        attachments: jsonCoerce(z.object({
             uris: z.boolean().optional().describe('Include repository URIs'),
             metrics: z.boolean().optional().describe('Include metrics'),
             projects: z.boolean().optional().describe('Include projects'),
-        }).optional().describe('Data attachments'),
+        })).optional().describe('Data attachments'),
         order: z.string().optional().describe('Result order'),
-        limit: z.number().max(100).optional().describe('Maximum results'),
+        limit: z.coerce.number().max(100).optional().describe('Maximum results'),
         after: z.string().optional().describe('Pagination cursor'),
     }, async (params) => {
         const result = await client.call('diffusion.repository.search', params);
@@ -26,20 +27,20 @@ export function registerDiffusionTools(server, client) {
     });
     // Search commits
     server.tool('phabricator_commit_search', 'Search Diffusion commits', {
-        constraints: z.object({
-            ids: z.array(z.number()).optional().describe('Commit IDs'),
+        constraints: jsonCoerce(z.object({
+            ids: z.array(z.coerce.number()).optional().describe('Commit IDs'),
             phids: z.array(z.string()).optional().describe('Commit PHIDs'),
             repositoryPHIDs: z.array(z.string()).optional().describe('Repository PHIDs'),
             identifiers: z.array(z.string()).optional().describe('Commit identifiers (hashes)'),
             authorPHIDs: z.array(z.string()).optional().describe('Author PHIDs'),
             query: z.string().optional().describe('Full-text search query'),
-        }).optional().describe('Search constraints'),
-        attachments: z.object({
+        })).optional().describe('Search constraints'),
+        attachments: jsonCoerce(z.object({
             projects: z.boolean().optional().describe('Include projects'),
             subscribers: z.boolean().optional().describe('Include subscribers'),
-        }).optional().describe('Data attachments'),
+        })).optional().describe('Data attachments'),
         order: z.string().optional().describe('Result order'),
-        limit: z.number().max(100).optional().describe('Maximum results'),
+        limit: z.coerce.number().max(100).optional().describe('Maximum results'),
         after: z.string().optional().describe('Pagination cursor'),
     }, async (params) => {
         const result = await client.call('diffusion.commit.search', params);

package/dist/tools/maniphest.js

@@ -1,27 +1,28 @@
 import { z } from 'zod';
+import { jsonCoerce } from './coerce.js';
 export function registerManiphestTools(server, client) {
     // Search tasks
     server.tool('phabricator_task_search', 'Search Maniphest tasks with optional filters', {
         queryKey: z.string().optional().describe('Built-in query: "all", "open", "authored", "assigned"'),
-        constraints: z.object({
-            ids: z.array(z.number()).optional().describe('Task IDs to search for'),
+        constraints: jsonCoerce(z.object({
+            ids: z.array(z.coerce.number()).optional().describe('Task IDs to search for'),
             phids: z.array(z.string()).optional().describe('Task PHIDs to search for'),
             assigned: z.array(z.string()).optional().describe('Assigned user PHIDs'),
             authorPHIDs: z.array(z.string()).optional().describe('Author PHIDs'),
             statuses: z.array(z.string()).optional().describe('Task statuses: open, resolved, wontfix, invalid, spite, duplicate'),
-            priorities: z.array(z.number()).optional().describe('Priority levels'),
+            priorities: z.array(z.coerce.number()).optional().describe('Priority levels'),
             subtypes: z.array(z.string()).optional().describe('Task subtypes'),
             columnPHIDs: z.array(z.string()).optional().describe('Workboard column PHIDs'),
             projectPHIDs: z.array(z.string()).optional().describe('Project PHIDs (tasks tagged with these projects)'),
             query: z.string().optional().describe('Full-text search query'),
-        }).optional().describe('Search constraints'),
-        attachments: z.object({
+        })).optional().describe('Search constraints'),
+        attachments: jsonCoerce(z.object({
             columns: z.boolean().optional().describe('Include workboard column info'),
             projects: z.boolean().optional().describe('Include project info'),
             subscribers: z.boolean().optional().describe('Include subscriber info'),
-        }).optional().describe('Data attachments to include'),
+        })).optional().describe('Data attachments to include'),
         order: z.string().optional().describe('Result order: "priority", "updated", "newest", "oldest"'),
-        limit: z.number().max(100).optional().describe('Maximum results (max 100)'),
+        limit: z.coerce.number().max(100).optional().describe('Maximum results (max 100)'),
         after: z.string().optional().describe('Cursor for pagination'),
     }, async (params) => {
         const result = await client.call('maniphest.search', params);

package/dist/tools/paste.js

@@ -1,20 +1,21 @@
 import { z } from 'zod';
+import { jsonCoerce } from './coerce.js';
 export function registerPasteTools(server, client) {
     // Search pastes
     server.tool('phabricator_paste_search', 'Search Phabricator pastes', {
         queryKey: z.string().optional().describe('Built-in query: "all", "authored"'),
-        constraints: z.object({
-            ids: z.array(z.number()).optional().describe('Paste IDs'),
+        constraints: jsonCoerce(z.object({
+            ids: z.array(z.coerce.number()).optional().describe('Paste IDs'),
             phids: z.array(z.string()).optional().describe('Paste PHIDs'),
             authorPHIDs: z.array(z.string()).optional().describe('Author PHIDs'),
             languages: z.array(z.string()).optional().describe('Languages'),
             query: z.string().optional().describe('Full-text search query'),
-        }).optional().describe('Search constraints'),
-        attachments: z.object({
+        })).optional().describe('Search constraints'),
+        attachments: jsonCoerce(z.object({
             content: z.boolean().optional().describe('Include paste content'),
-        }).optional().describe('Data attachments'),
+        })).optional().describe('Data attachments'),
         order: z.string().optional().describe('Result order'),
-        limit: z.number().max(100).optional().describe('Maximum results'),
+        limit: z.coerce.number().max(100).optional().describe('Maximum results'),
         after: z.string().optional().describe('Pagination cursor'),
     }, async (params) => {
         const result = await client.call('paste.search', params);

package/dist/tools/phame.js

@@ -1,15 +1,16 @@
 import { z } from 'zod';
+import { jsonCoerce } from './coerce.js';
 export function registerPhameTools(server, client) {
     // Search blogs
     server.tool('phabricator_blog_search', 'Search Phame blogs', {
         queryKey: z.string().optional().describe('Built-in query: "all", "active"'),
-        constraints: z.object({
-            ids: z.array(z.number()).optional().describe('Blog IDs'),
+        constraints: jsonCoerce(z.object({
+            ids: z.array(z.coerce.number()).optional().describe('Blog IDs'),
             phids: z.array(z.string()).optional().describe('Blog PHIDs'),
             query: z.string().optional().describe('Full-text search query'),
-        }).optional().describe('Search constraints'),
+        })).optional().describe('Search constraints'),
         order: z.string().optional().describe('Result order'),
-        limit: z.number().max(100).optional().describe('Maximum results (max 100)'),
+        limit: z.coerce.number().max(100).optional().describe('Maximum results (max 100)'),
         after: z.string().optional().describe('Cursor for pagination'),
     }, async (params) => {
         const result = await client.call('phame.blog.search', params);
@@ -18,15 +19,15 @@ export function registerPhameTools(server, client) {
     // Search blog posts
     server.tool('phabricator_blog_post_search', 'Search Phame blog posts', {
         queryKey: z.string().optional().describe('Built-in query: "all", "live"'),
-        constraints: z.object({
-            ids: z.array(z.number()).optional().describe('Post IDs'),
+        constraints: jsonCoerce(z.object({
+            ids: z.array(z.coerce.number()).optional().describe('Post IDs'),
             phids: z.array(z.string()).optional().describe('Post PHIDs'),
             blogPHIDs: z.array(z.string()).optional().describe('Filter by blog PHIDs'),
             visibility: z.array(z.string()).optional().describe('Visibility: "published", "draft", "archived"'),
             query: z.string().optional().describe('Full-text search query'),
-        }).optional().describe('Search constraints'),
+        })).optional().describe('Search constraints'),
         order: z.string().optional().describe('Result order'),
-        limit: z.number().max(100).optional().describe('Maximum results (max 100)'),
+        limit: z.coerce.number().max(100).optional().describe('Maximum results (max 100)'),
         after: z.string().optional().describe('Cursor for pagination'),
     }, async (params) => {
         const result = await client.call('phame.post.search', params);

package/dist/tools/phriction.js

@@ -1,21 +1,22 @@
 import { z } from 'zod';
+import { jsonCoerce } from './coerce.js';
 export function registerPhrictionTools(server, client) {
     // Search wiki documents
     server.tool('phabricator_document_search', 'Search Phriction wiki documents', {
         queryKey: z.string().optional().describe('Built-in query: "all", "active"'),
-        constraints: z.object({
-            ids: z.array(z.number()).optional().describe('Document IDs'),
+        constraints: jsonCoerce(z.object({
+            ids: z.array(z.coerce.number()).optional().describe('Document IDs'),
             phids: z.array(z.string()).optional().describe('Document PHIDs'),
             paths: z.array(z.string()).optional().describe('Document paths'),
             ancestorPaths: z.array(z.string()).optional().describe('Ancestor paths to search under'),
             statuses: z.array(z.string()).optional().describe('Document statuses'),
             query: z.string().optional().describe('Full-text search query'),
-        }).optional().describe('Search constraints'),
-        attachments: z.object({
+        })).optional().describe('Search constraints'),
+        attachments: jsonCoerce(z.object({
             content: z.boolean().optional().describe('Include document content'),
-        }).optional().describe('Data attachments'),
+        })).optional().describe('Data attachments'),
         order: z.string().optional().describe('Result order'),
-        limit: z.number().max(100).optional().describe('Maximum results'),
+        limit: z.coerce.number().max(100).optional().describe('Maximum results'),
         after: z.string().optional().describe('Pagination cursor'),
     }, async (params) => {
         const result = await client.call('phriction.document.search', params);

package/dist/tools/project.js

@@ -1,10 +1,11 @@
 import { z } from 'zod';
+import { jsonCoerce } from './coerce.js';
 export function registerProjectTools(server, client) {
     // Search projects
     server.tool('phabricator_project_search', 'Search Phabricator projects', {
         queryKey: z.string().optional().describe('Built-in query: "all", "active", "joined"'),
-        constraints: z.object({
-            ids: z.array(z.number()).optional().describe('Project IDs'),
+        constraints: jsonCoerce(z.object({
+            ids: z.array(z.coerce.number()).optional().describe('Project IDs'),
             phids: z.array(z.string()).optional().describe('Project PHIDs'),
             slugs: z.array(z.string()).optional().describe('Project slugs'),
             name: z.string().optional().describe('Exact name match'),
@@ -14,14 +15,14 @@ export function registerProjectTools(server, client) {
             isMilestone: z.boolean().optional().describe('Filter milestones'),
             isRoot: z.boolean().optional().describe('Filter root projects'),
             query: z.string().optional().describe('Full-text search query'),
-        }).optional().describe('Search constraints'),
-        attachments: z.object({
+        })).optional().describe('Search constraints'),
+        attachments: jsonCoerce(z.object({
             members: z.boolean().optional().describe('Include members'),
             watchers: z.boolean().optional().describe('Include watchers'),
             ancestors: z.boolean().optional().describe('Include ancestors'),
-        }).optional().describe('Data attachments'),
+        })).optional().describe('Data attachments'),
         order: z.string().optional().describe('Result order'),
-        limit: z.number().max(100).optional().describe('Maximum results'),
+        limit: z.coerce.number().max(100).optional().describe('Maximum results'),
         after: z.string().optional().describe('Pagination cursor'),
     }, async (params) => {
         const result = await client.call('project.search', params);
@@ -67,13 +68,13 @@ export function registerProjectTools(server, client) {
     });
     // Search workboard columns
     server.tool('phabricator_column_search', 'Search project workboard columns', {
-        constraints: z.object({
-            ids: z.array(z.number()).optional().describe('Column IDs'),
+        constraints: jsonCoerce(z.object({
+            ids: z.array(z.coerce.number()).optional().describe('Column IDs'),
             phids: z.array(z.string()).optional().describe('Column PHIDs'),
             projects: z.array(z.string()).optional().describe('Project PHIDs'),
-        }).optional().describe('Search constraints'),
+        })).optional().describe('Search constraints'),
         order: z.string().optional().describe('Result order'),
-        limit: z.number().max(100).optional().describe('Maximum results'),
+        limit: z.coerce.number().max(100).optional().describe('Maximum results'),
         after: z.string().optional().describe('Pagination cursor'),
     }, async (params) => {
         const result = await client.call('project.column.search', params);

package/dist/tools/transaction.js

@@ -1,12 +1,13 @@
 import { z } from 'zod';
+import { jsonCoerce } from './coerce.js';
 export function registerTransactionTools(server, client) {
     server.tool('phabricator_transaction_search', 'Search transactions (comments, status changes, etc.) on any Phabricator object (e.g., "D123", "T456")', {
         objectIdentifier: z.string().describe('Object ID (e.g., "D123", "T456") or PHID'),
-        constraints: z.object({
+        constraints: jsonCoerce(z.object({
             phids: z.array(z.string()).optional().describe('Transaction PHIDs'),
             authorPHIDs: z.array(z.string()).optional().describe('Author PHIDs'),
-        }).optional().describe('Search constraints'),
-        limit: z.number().max(100).optional().describe('Maximum results (max 100)'),
+        })).optional().describe('Search constraints'),
+        limit: z.coerce.number().max(100).optional().describe('Maximum results (max 100)'),
         after: z.string().optional().describe('Pagination cursor'),
     }, async (params) => {
         const { objectIdentifier, ...searchParams } = params;

package/dist/tools/user.js

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+import { jsonCoerce } from './coerce.js';
 export function registerUserTools(server, client) {
     // Get current user
     server.tool('phabricator_user_whoami', 'Get information about the current authenticated user', {}, async () => {
@@ -8,8 +9,8 @@ export function registerUserTools(server, client) {
     // Search users
     server.tool('phabricator_user_search', 'Search Phabricator users', {
         queryKey: z.string().optional().describe('Built-in query: "all", "active", "approval"'),
-        constraints: z.object({
-            ids: z.array(z.number()).optional().describe('User IDs'),
+        constraints: jsonCoerce(z.object({
+            ids: z.array(z.coerce.number()).optional().describe('User IDs'),
             phids: z.array(z.string()).optional().describe('User PHIDs'),
             usernames: z.array(z.string()).optional().describe('Usernames'),
             nameLike: z.string().optional().describe('Name prefix search'),
@@ -18,12 +19,12 @@ export function registerUserTools(server, client) {
             isBot: z.boolean().optional().describe('Filter by bot status'),
             isMailingList: z.boolean().optional().describe('Filter by mailing list status'),
             query: z.string().optional().describe('Full-text search query'),
-        }).optional().describe('Search constraints'),
-        attachments: z.object({
+        })).optional().describe('Search constraints'),
+        attachments: jsonCoerce(z.object({
             availability: z.boolean().optional().describe('Include availability info'),
-        }).optional().describe('Data attachments'),
+        })).optional().describe('Data attachments'),
         order: z.string().optional().describe('Result order'),
-        limit: z.number().max(100).optional().describe('Maximum results'),
+        limit: z.coerce.number().max(100).optional().describe('Maximum results'),
         after: z.string().optional().describe('Pagination cursor'),
     }, async (params) => {
         const result = await client.call('user.search', params);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@freelancercom/phabricator-mcp",
-  "version": "1.0.0",
+  "version": "1.0.3",
   "description": "MCP server for Phabricator Conduit API - manage tasks, code reviews, repositories, and more",
   "type": "module",
   "main": "dist/index.js",
@@ -15,8 +15,7 @@
     "prepare": "npm run build",
     "start": "node dist/index.js",
     "dev": "tsx --watch src/index.ts",
-    "typecheck": "tsc --noEmit",
-    "test": "node --test --import tsx 'src/**/*.test.ts'"
+    "typecheck": "tsc --noEmit"
   },
   "keywords": [
     "mcp",

package/dist/client/conduit.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/client/conduit.test.js

@@ -1,97 +0,0 @@
-import { describe, it, mock, beforeEach, afterEach } from 'node:test';
-import assert from 'node:assert';
-import { ConduitClient, ConduitError } from './conduit.js';
-describe('ConduitClient', () => {
-    const mockConfig = {
-        phabricatorUrl: 'https://phabricator.example.com',
-        apiToken: 'api-test-token',
-    };
-    let originalFetch;
-    beforeEach(() => {
-        originalFetch = global.fetch;
-    });
-    afterEach(() => {
-        global.fetch = originalFetch;
-    });
-    it('should construct correct API URL', async () => {
-        let capturedUrl;
-        global.fetch = mock.fn(async (url) => {
-            capturedUrl = url;
-            return new Response(JSON.stringify({ result: {}, error_code: null, error_info: null }));
-        });
-        const client = new ConduitClient(mockConfig);
-        await client.call('user.whoami');
-        assert.strictEqual(capturedUrl, 'https://phabricator.example.com/api/user.whoami');
-    });
-    it('should include API token in request body', async () => {
-        let capturedBody;
-        global.fetch = mock.fn(async (_url, init) => {
-            capturedBody = init?.body;
-            return new Response(JSON.stringify({ result: {}, error_code: null, error_info: null }));
-        });
-        const client = new ConduitClient(mockConfig);
-        await client.call('user.whoami');
-        assert.ok(capturedBody);
-        const params = new URLSearchParams(capturedBody);
-        const paramsJson = JSON.parse(params.get('params'));
-        assert.strictEqual(paramsJson.__conduit__.token, 'api-test-token');
-    });
-    it('should pass parameters to the API', async () => {
-        let capturedBody;
-        global.fetch = mock.fn(async (_url, init) => {
-            capturedBody = init?.body;
-            return new Response(JSON.stringify({ result: {}, error_code: null, error_info: null }));
-        });
-        const client = new ConduitClient(mockConfig);
-        await client.call('maniphest.search', { queryKey: 'assigned', limit: 10 });
-        const params = new URLSearchParams(capturedBody);
-        const paramsJson = JSON.parse(params.get('params'));
-        assert.strictEqual(paramsJson.queryKey, 'assigned');
-        assert.strictEqual(paramsJson.limit, 10);
-    });
-    it('should return result on success', async () => {
-        const expectedResult = { userName: 'testuser', realName: 'Test User' };
-        global.fetch = mock.fn(async () => {
-            return new Response(JSON.stringify({ result: expectedResult, error_code: null, error_info: null }));
-        });
-        const client = new ConduitClient(mockConfig);
-        const result = await client.call('user.whoami');
-        assert.deepStrictEqual(result, expectedResult);
-    });
-    it('should throw ConduitError on API error', async () => {
-        global.fetch = mock.fn(async () => {
-            return new Response(JSON.stringify({
-                result: null,
-                error_code: 'ERR-CONDUIT-CORE',
-                error_info: 'Invalid token',
-            }));
-        });
-        const client = new ConduitClient(mockConfig);
-        await assert.rejects(() => client.call('user.whoami'), (err) => {
-            assert.ok(err instanceof ConduitError);
-            assert.strictEqual(err.code, 'ERR-CONDUIT-CORE');
-            assert.strictEqual(err.message, 'Invalid token');
-            return true;
-        });
-    });
-    it('should throw ConduitError on HTTP error', async () => {
-        global.fetch = mock.fn(async () => {
-            return new Response('Not Found', { status: 404, statusText: 'Not Found' });
-        });
-        const client = new ConduitClient(mockConfig);
-        await assert.rejects(() => client.call('user.whoami'), (err) => {
-            assert.ok(err instanceof ConduitError);
-            assert.strictEqual(err.code, 'HTTP_ERROR');
-            assert.ok(err.message.includes('404'));
-            return true;
-        });
-    });
-});
-describe('ConduitError', () => {
-    it('should have correct name and properties', () => {
-        const error = new ConduitError('TEST_CODE', 'Test message');
-        assert.strictEqual(error.name, 'ConduitError');
-        assert.strictEqual(error.code, 'TEST_CODE');
-        assert.strictEqual(error.message, 'Test message');
-    });
-});

package/dist/config.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/config.test.js

@@ -1,54 +0,0 @@
-import { describe, it, beforeEach, afterEach } from 'node:test';
-import assert from 'node:assert';
-describe('loadConfig', () => {
-    const originalEnv = { ...process.env };
-    beforeEach(() => {
-        // Clear relevant env vars
-        delete process.env.PHABRICATOR_URL;
-        delete process.env.PHABRICATOR_API_TOKEN;
-    });
-    afterEach(() => {
-        process.env = { ...originalEnv };
-    });
-    it('should load config from environment variables', async () => {
-        process.env.PHABRICATOR_URL = 'https://phabricator.example.com';
-        process.env.PHABRICATOR_API_TOKEN = 'api-test-token';
-        // Re-import to get fresh module
-        const { loadConfig } = await import('./config.js');
-        const config = loadConfig();
-        assert.strictEqual(config.phabricatorUrl, 'https://phabricator.example.com');
-        assert.strictEqual(config.apiToken, 'api-test-token');
-    });
-    it('should strip trailing slash from URL', async () => {
-        process.env.PHABRICATOR_URL = 'https://phabricator.example.com/';
-        process.env.PHABRICATOR_API_TOKEN = 'api-test-token';
-        const { loadConfig } = await import('./config.js');
-        const config = loadConfig();
-        assert.strictEqual(config.phabricatorUrl, 'https://phabricator.example.com');
-    });
-    it('should throw error for invalid URL', async () => {
-        process.env.PHABRICATOR_URL = 'not-a-valid-url';
-        process.env.PHABRICATOR_API_TOKEN = 'api-test-token';
-        const { loadConfig } = await import('./config.js?v=1');
-        assert.throws(() => loadConfig(), /Invalid url/);
-    });
-    it('should throw error for empty token', async () => {
-        process.env.PHABRICATOR_URL = 'https://phabricator.example.com';
-        process.env.PHABRICATOR_API_TOKEN = '';
-        // When token is empty string, it should either throw or fall back to arcrc
-        // Since arcrc exists on this machine, it will use that - so we skip this test
-        // if arcrc is present. The important thing is it doesn't accept empty string.
-        const { loadConfig } = await import('./config.js?v=2');
-        // This test verifies the schema validation - empty string should fail zod validation
-        // but it may fall back to arcrc first, so we just verify it doesn't crash
-        try {
-            const config = loadConfig();
-            // If it succeeds, it used arcrc fallback which is fine
-            assert.ok(config.apiToken.length > 0);
-        }
-        catch (e) {
-            // If it throws, that's also fine - means it correctly rejected empty token
-            assert.ok(e.message.includes('too_small') || e.message.includes('API_TOKEN'));
-        }
-    });
-});