@hapticpaper/mcp-server 1.0.13 → 1.0.14

package/dist/client/hapticPaperClient.js

@@ -53,6 +53,10 @@ export class HapticPaperClient {
         const response = await this.client.post(`/gpt/tasks/${taskId}/cancel`, { reason }, { headers: await this.authHeaders(accessToken) });
         return response.data;
     }
+    async updateTask(taskId, data, accessToken) {
+        const response = await this.client.patch(`/gpt/tasks/${taskId}`, data, { headers: await this.authHeaders(accessToken) });
+        return response.data;
+    }
     // Worker Methods
     async searchWorkers(params, accessToken) {
         const response = await this.client.post('/gpt/workers/search', params, { headers: await this.authHeaders(accessToken) });

package/dist/index.js

@@ -303,11 +303,29 @@ ${widgetJs}
         }
         const tokenVerifier = {
             verifyAccessToken: async (token) => {
+                const publicKey = process.env.JWT_PUBLIC_KEY ? process.env.JWT_PUBLIC_KEY.replace(/\\n/g, '\n') : undefined;
                 const secret = process.env.JWT_SECRET;
-                if (!secret) {
-                    throw new Error('Server misconfigured: JWT_SECRET is not set');
+                let decoded;
+                if (publicKey) {
+                    try {
+                        decoded = jwt.verify(token, publicKey, { algorithms: ['ES256'] });
+                    }
+                    catch (e) {
+                        // If ES256 fails, and we have a secret, try HS256 (migration path)
+                        if (secret && e.message === 'invalid signature') {
+                            decoded = jwt.verify(token, secret, { algorithms: ['HS256'] });
+                        }
+                        else {
+                            throw e;
+                        }
+                    }
+                }
+                else if (secret) {
+                    decoded = jwt.verify(token, secret, { algorithms: ['HS256'] });
+                }
+                else {
+                    throw new Error('Server misconfigured: Neither JWT_PUBLIC_KEY nor JWT_SECRET is set');
                 }
-                const decoded = jwt.verify(token, secret);
                 if (!decoded || typeof decoded !== 'object') {
                     throw new Error('Invalid token');
                 }

package/dist/tools/tasks.js

@@ -243,4 +243,47 @@ export function registerTaskTools(server, client) {
             _meta: toolDescriptorMeta(cancelTaskInvoking, cancelTaskInvoked, ['tasks:write']),
         }, cancelTaskHandler);
     }
+    const updateTaskInvoking = 'Updating task';
+    const updateTaskInvoked = 'Task updated';
+    const updateTaskHandler = async (args, extra) => {
+        try {
+            const auth = requireScopes(extra, ['tasks:write']);
+            const task = await client.updateTask(args.taskId, args, auth?.token);
+            const widgetSessionId = `task:${args.taskId}`;
+            return {
+                structuredContent: {
+                    task: {
+                        id: task.id,
+                        title: task.title,
+                        status: task.status,
+                        budget: task.budget,
+                    },
+                },
+                content: [{ type: 'text', text: `Updated task ${task.id}.` }],
+                _meta: {
+                    ...toolInvocationMeta(updateTaskInvoking, updateTaskInvoked, widgetSessionId),
+                    task,
+                },
+            };
+        }
+        catch (err) {
+            return {
+                content: [{ type: 'text', text: `Error: ${err.message}` }],
+                isError: true,
+            };
+        }
+    };
+    for (const toolName of ['update_task', 'tasks_update']) {
+        server.registerTool(toolName, {
+            title: 'Update task',
+            description: 'Update an existing task.',
+            inputSchema: CreateTaskSchema.partial().extend({ taskId: z.string().uuid() }),
+            annotations: {
+                readOnlyHint: false,
+                openWorldHint: false,
+                destructiveHint: false, // Generally safe to update
+            },
+            _meta: toolDescriptorMeta(updateTaskInvoking, updateTaskInvoked, ['tasks:write']),
+        }, updateTaskHandler);
+    }
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hapticpaper/mcp-server",
   "mcpName": "com.hapticpaper/mcp",
-  "version": "1.0.13",
+  "version": "1.0.14",
   "description": "Official MCP Server for Haptic Paper - Connect your account to create human tasks from agentic pipelines.",
   "type": "module",
   "main": "dist/index.js",