@functional-systems/lambdadb-mcp 0.1.5-dev.16 → 0.1.5-dev.18

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 ## Unreleased
 
+- Pin MCP SDK 1.32.2, raise the Zod minimum to 4.6.7, and refresh the affected
+  transitive dependencies to clear six npm audit findings. Keep the LambdaDB
+  SDK, Node.js floor, tool schemas and read-only defaults unchanged. The new SDK
+  input-element cap remains unset; omitted tool arguments now behave as an empty
+  object while required inputs still fail validation.
+
+- Replace the query tool's top-level `allOf` with equivalent conditionals so
+  Claude through Kiro/Bedrock can accept the tool inventory. Preserve facet and
+  rerank schema constraints, runtime validation and read-only defaults.
+
 ## [0.1.4] - 2026-10-07
 
 - Standardize feature guidance as native embedding and native reranking; pin the

package/CONTRIBUTING.md

@@ -8,7 +8,7 @@ changes outside the PR. Use a dedicated worktree when another checkout is in use
 
 Use Node.js 22.14.0 or newer. CI verifies the exact minimum 22.14.0 and current
 22.x and 24.x LTS releases. Node 20 is end-of-life and is no longer supported.
-The runtime dependencies permit older Node versions (MCP SDK 1.31.0 declares
+The runtime dependencies permit older Node versions (MCP SDK 1.32.2 declares
 Node >=18), but that is not a promise to support end-of-life runtimes. The
 22.14.0 floor also aligns with the CLI and npm's OIDC publishing runtime floor.
 See the [Node release schedule](https://nodejs.org/en/about/previous-releases)

package/README.md

@@ -27,6 +27,14 @@ and read-only defaults remain unchanged. This checkout starts the next
 Existing installations need an MCP release containing these changes; upgrading
 the SDK separately does not update them.
 
+This checkout pins MCP SDK `1.32.2` and requires Zod `^4.6.7`, with patched
+transitive dependencies in the lockfile. The SDK now treats omitted tool
+arguments as an empty object; required inputs still fail validation. Its new
+`maxToolInputElements` option remains unset, preserving existing input limits.
+Upstream HTTP redirect/authentication and experimental-task fixes do not add
+those features to this stdio-only server. See the
+[upstream upgrade notes](https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/1.32.0).
+
 ```sh
 npx --yes @functional-systems/lambdadb-mcp
 # Pin the stable release:

package/dist/tools/read.js

@@ -94,18 +94,18 @@ export function registerReadTools(server, config) {
                 context.addIssue({ code: "custom", path: ["facets"], message: "size: 0 requires at least one facet." });
             }
         }).meta({
-            // Keep the cross-field rule visible to MCP clients as well as tools/call.
-            allOf: [{
-                    if: { properties: { size: { const: 0 } }, required: ["size"] },
-                    then: { required: ["facets"], properties: { facets: { minProperties: 1 } } }
-                }, {
-                    if: { properties: { rerank: { type: "object" } }, required: ["rerank"] },
-                    then: {
-                        required: ["query"],
-                        properties: { size: { minimum: 1 } },
-                        not: { required: ["sort"] }
-                    }
-                }]
+            // Claude on Bedrock rejects top-level allOf/anyOf/oneOf. Preserve both
+            // cross-field rules with conditionals; reranking already forbids size: 0.
+            if: { properties: { rerank: { type: "object" } }, required: ["rerank"] },
+            then: {
+                required: ["query"],
+                properties: { size: { minimum: 1 } },
+                not: { required: ["sort"] }
+            },
+            else: {
+                if: { properties: { size: { const: 0 } }, required: ["size"] },
+                then: { required: ["facets"], properties: { facets: { minProperties: 1 } } }
+            }
         })
     }, async ({ collectionName, size, candidateSize, query, facets, rerank, ref, consistentRead, includeVectors, sort, fields, partitionFilter }) => {
         try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@functional-systems/lambdadb-mcp",
-  "version": "0.1.5-dev.16",
+  "version": "0.1.5-dev.18",
   "private": false,
   "description": "MCP server for LambdaDB data plane",
   "type": "module",
@@ -25,8 +25,8 @@
   },
   "dependencies": {
     "@functional-systems/lambdadb": "0.8.1",
-    "@modelcontextprotocol/sdk": "1.31.0",
-    "zod": "^4.1.12"
+    "@modelcontextprotocol/sdk": "1.32.2",
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@types/node": "^22.12.0",
@@ -62,5 +62,5 @@
     "access": "public",
     "registry": "https://registry.npmjs.org"
   },
-  "gitHead": "27f128b9edbde67dde7624c7bd29d4fcc8cbf9dd"
+  "gitHead": "bf4536f5a8256a4193e8dcea86f1ecedc626294d"
 }