@jtalk22/slack-mcp 4.4.1 → 4.4.2

package/lib/handlers.js

@@ -336,14 +336,17 @@ export async function handleListConversations(args) {
 export async function handleConversationsHistory(args) {
   const resolveUsers = args.resolve_users !== false;
   const includeRichMessageFields = parseBool(args.include_rich_message_fields);
-  const result = await slackAPI("conversations.history", {
+  const historyParams = {
     channel: args.channel_id,
     limit: args.limit || 50,
     oldest: args.oldest,
     latest: args.latest,
-    inclusive: true,
     include_all_metadata: parseBool(args.include_all_metadata)
-  });
+  };
+  // Only opt into boundary-inclusive reads when a boundary was actually
+  // provided — otherwise leave Slack's default behavior untouched.
+  if (args.oldest || args.latest) historyParams.inclusive = true;
+  const result = await slackAPI("conversations.history", historyParams);
 
   const messages = await Promise.all((result.messages || []).map(async (msg) => {
     const userName = resolveUsers ? await resolveUser(msg.user) : msg.user;
@@ -384,15 +387,18 @@ export async function handleGetFullConversation(args) {
 
   // Fetch all messages with pagination
   while (hasMore && allMessages.length < maxMessages) {
-    const result = await slackAPI("conversations.history", {
+    const historyParams = {
       channel: args.channel_id,
       limit: Math.min(100, maxMessages - allMessages.length),
       oldest: args.oldest,
       latest: args.latest,
       cursor,
-      inclusive: true,
       include_all_metadata: parseBool(args.include_all_metadata)
-    });
+    };
+    // Boundary-inclusive only when a boundary was actually provided —
+    // otherwise leave Slack's default behavior untouched.
+    if (args.oldest || args.latest) historyParams.inclusive = true;
+    const result = await slackAPI("conversations.history", historyParams);
 
     for (const msg of result.messages || []) {
       const userName = await resolveUser(msg.user);
@@ -738,13 +744,32 @@ export async function handleConversationsUnreads(args) {
 /**
  * Search users handler - client-side filter on users.list
  */
+// Explicit scan cap for client-side user search: stop paginating after
+// scanning this many workspace users (or when the cursor is exhausted) and
+// flag the result as truncated so total_matches is never misreported as
+// complete.
+const USERS_SEARCH_MAX_SCANNED = 1000;
+
 export async function handleUsersSearch(args) {
-  const query = (args.query || "").toLowerCase();
+  const rawQuery = typeof args.query === "string" ? args.query : "";
+  const query = rawQuery.trim().toLowerCase();
   const limit = args.limit || 20;
 
-  // Fetch all users (paginated)
+  // An empty/whitespace query would match every user in the workspace.
+  if (!query) {
+    return asMcpJson({
+      status: "error",
+      code: "invalid_arguments",
+      message: "query must be a non-empty string (an empty query would match all users).",
+      next_action: "Provide a name, display name, real name, or email fragment to search for."
+    }, true);
+  }
+
+  // Fetch users (paginated) and filter client-side
   const allUsers = [];
   let cursor;
+  let scannedUsers = 0;
+  let truncated = false;
 
   do {
     const result = await slackAPI("users.list", {
@@ -753,6 +778,7 @@ export async function handleUsersSearch(args) {
     });
 
     for (const u of (result.members || [])) {
+      scannedUsers++;
       if (u.deleted || u.is_bot || u.id === "USLACKBOT") continue;
 
       const searchFields = [
@@ -776,13 +802,18 @@ export async function handleUsersSearch(args) {
     }
 
     cursor = result.response_metadata?.next_cursor;
+    if (cursor && scannedUsers >= USERS_SEARCH_MAX_SCANNED) {
+      truncated = true;
+      break;
+    }
     if (cursor) await sleep(100);
-  } while (cursor && allUsers.length < 500);
+  } while (cursor);
 
   return asMcpJson({
     query: args.query,
     count: Math.min(allUsers.length, limit),
     total_matches: allUsers.length,
+    truncated,
     users: allUsers.slice(0, limit)
   });
 }
@@ -841,7 +872,7 @@ const HOSTED_UPGRADE_PAYLOAD = {
   signup_url: "https://mcp.revasserlabs.com/signup",
   upgrade_url: "https://mcp.revasserlabs.com/pricing",
   free_tier_quota: "10 smart_search + 3 catch_me_up per month, 5 triage per day",
-  pro_value_prop: "Pro $9/mo unlocks unlimited AI tools (scheduled morning catch-up DM at 8am workspace time rolling out Q2 2026).",
+  pro_value_prop: "Pro $9/mo unlocks unlimited AI tools (scheduled morning catch-up DM at 8am workspace time in development).",
 };
 
 export async function handleSmartSearch(args) {
@@ -873,3 +904,35 @@ export async function handleTriage(args) {
     true
   );
 }
+
+// ============ Shared Tool Dispatch Map ============
+// Single source of truth mapping every advertised tool name (lib/tools.js)
+// to its handler. Both transports — stdio (src/server.js) and HTTP
+// (src/server-http.js) — dispatch through this map so the advertised tool
+// list and the dispatch surface cannot drift apart.
+
+export const TOOL_HANDLERS = Object.freeze({
+  slack_token_status: handleTokenStatus,
+  slack_health_check: handleHealthCheck,
+  slack_refresh_tokens: handleRefreshTokens,
+  slack_list_conversations: handleListConversations,
+  slack_conversations_history: handleConversationsHistory,
+  slack_get_full_conversation: handleGetFullConversation,
+  slack_search_messages: handleSearchMessages,
+  slack_users_info: handleUsersInfo,
+  slack_send_message: handleSendMessage,
+  slack_get_thread: handleGetThread,
+  slack_list_users: handleListUsers,
+  slack_add_reaction: handleAddReaction,
+  slack_remove_reaction: handleRemoveReaction,
+  slack_conversations_mark: handleConversationsMark,
+  slack_conversations_unreads: handleConversationsUnreads,
+  slack_users_search: handleUsersSearch,
+  // Workflow profile primitives (OSS local JSON store)
+  slack_workflow_save: handleWorkflowSave,
+  slack_workflows: handleWorkflows,
+  // Hosted-only AI tools (OSS = upgrade stubs)
+  slack_smart_search: handleSmartSearch,
+  slack_catch_me_up: handleCatchMeUp,
+  slack_triage: handleTriage,
+});

package/lib/public-pages.js

@@ -63,7 +63,7 @@ function shareLinks() {
 }
 
 function shareNote() {
-  return `<strong>Verify in 30 seconds:</strong> <code>--version</code>, <code>--doctor</code>, <code>--status</code>. Self-host gives ${PUBLIC_METADATA.selfHostedToolCount} tools with session-based auth. Works with any MCP client — Claude, ChatGPT, Cursor, Copilot, Gemini, Windsurf. Hosted free tier (no card) live at <a href="${PUBLIC_METADATA.canonicalSiteUrl}">mcp.revasserlabs.com</a> — Pro $9/mo unlocks unlimited AI tools (scheduled morning catch-up DM rolling out Q2 2026).`;
+  return `<strong>Verify in 30 seconds:</strong> <code>--version</code>, <code>--doctor</code>, <code>--status</code>. Self-host gives ${PUBLIC_METADATA.selfHostedToolCount} tools with session-based auth. Works with any MCP client — Claude, ChatGPT, Cursor, Copilot, Gemini, Windsurf. Hosted free tier (no card) live at <a href="${PUBLIC_METADATA.canonicalSiteUrl}">mcp.revasserlabs.com</a> — Pro $9/mo unlocks unlimited AI tools (scheduled morning catch-up DM in development).`;
 }
 
 function demoLinks() {
@@ -75,7 +75,7 @@ function demoLinks() {
 }
 
 function demoNote() {
-  return `Self-host free for ${PUBLIC_METADATA.selfHostedToolCount} tools with session-based auth. Works with Claude, ChatGPT, Cursor, Copilot, Gemini, Windsurf, and any other MCP client. No OAuth app, no admin approval. Hosted free tier (no card) live at <a href="${PUBLIC_METADATA.canonicalSiteUrl}" target="_blank" rel="noopener noreferrer">mcp.revasserlabs.com</a> — Pro $9/mo unlocks unlimited AI tools (scheduled morning catch-up DM rolling out Q2 2026).`;
+  return `Self-host free for ${PUBLIC_METADATA.selfHostedToolCount} tools with session-based auth. Works with Claude, ChatGPT, Cursor, Copilot, Gemini, Windsurf, and any other MCP client. No OAuth app, no admin approval. Hosted free tier (no card) live at <a href="${PUBLIC_METADATA.canonicalSiteUrl}" target="_blank" rel="noopener noreferrer">mcp.revasserlabs.com</a> — Pro $9/mo unlocks unlimited AI tools (scheduled morning catch-up DM in development).`;
 }
 
 function demoFooterLinks() {

package/lib/token-store.js

@@ -8,7 +8,7 @@
  * 4. Chrome auto-extraction (fallback)
  */
 
-import { readFileSync, writeFileSync, existsSync, renameSync, unlinkSync, chmodSync, copyFileSync, mkdtempSync, statSync, readdirSync } from "fs";
+import { readFileSync, writeFileSync, existsSync, renameSync, unlinkSync, rmSync, chmodSync, copyFileSync, mkdtempSync, statSync, readdirSync } from "fs";
 import { homedir, platform, tmpdir } from "os";
 import { join } from "path";
 import { execFileSync } from "child_process";
@@ -265,13 +265,22 @@ function extractCookieForProfile(profileDir) {
   const tmpDb = join(tmpDir, 'Cookies');
   try {
     copyFileSync(cookiesPath, tmpDb);
+    // Chrome keeps recent writes in the SQLite WAL sidecar until the next
+    // checkpoint — copy Cookies-wal (and -shm) too when present so the
+    // snapshot isn't stale.
+    for (const suffix of ['-wal', '-shm']) {
+      const sidecarPath = `${cookiesPath}${suffix}`;
+      if (existsSync(sidecarPath)) {
+        try { copyFileSync(sidecarPath, `${tmpDb}${suffix}`); } catch {}
+      }
+    }
 
     const queryResult = execFileSync('sqlite3', [
       tmpDb,
       "SELECT hex(encrypted_value) FROM cookies WHERE host_key LIKE '%.slack.com%' AND name = 'd' LIMIT 1;"
     ], { encoding: 'utf-8', timeout: 5000 }).trim();
 
-    try { unlinkSync(tmpDb); unlinkSync(tmpDir); } catch {}
+    try { rmSync(tmpDir, { recursive: true, force: true }); } catch {}
 
     if (!queryResult) return null;
 
@@ -304,7 +313,7 @@ function extractCookieForProfile(profileDir) {
     if (xoxdIndex < 0) return null;
     return text.substring(xoxdIndex);
   } catch {
-    try { unlinkSync(tmpDb); unlinkSync(tmpDir); } catch {}
+    try { rmSync(tmpDir, { recursive: true, force: true }); } catch {}
     return null;
   }
 }
@@ -358,7 +367,10 @@ function extractTokenFromLevelDB(profileDir) {
       const txt = readFileSync(f.path).toString('binary');
       XOXC_TOKEN_RE.lastIndex = 0;
       const matches = txt.match(XOXC_TOKEN_RE);
-      if (matches && matches.length) return matches[0];
+      // LevelDB .log/.ldb files append newer records after older ones, so
+      // the LAST match in a file is the most recently cached token — the
+      // first match can be a stale, already-rotated token.
+      if (matches && matches.length) return matches[matches.length - 1];
     } catch {
       continue;
     }

package/lib/tools.js

@@ -537,7 +537,7 @@ export const TOOLS = [
   },
   {
     name: "slack_catch_me_up",
-    description: "Run a structured catch-up against a saved workflow profile. Returns structured JSON per the profile's workflow_kind: support_inbox returns {open_threads, ack_lag, owner_gaps, escalations, next_actions}; incident_room returns {incident_summary, timeline, open_risks, owner_gaps, next_actions}; exec_brief returns {summary, decisions, risks, asks, action_items}; product_launch_watch returns {launch_signals, feedback_themes, blockers, metrics, next_actions}; custom returns {summary, highlights, open_questions, next_actions}. Hosted-only. Free tier ships 3 calls/month; Pro $9/mo unlocks unlimited (scheduled morning DM at 8am workspace tz rolling out Q2 2026).",
+    description: "Run a structured catch-up against a saved workflow profile. Returns structured JSON per the profile's workflow_kind: support_inbox returns {open_threads, ack_lag, owner_gaps, escalations, next_actions}; incident_room returns {incident_summary, timeline, open_risks, owner_gaps, next_actions}; exec_brief returns {summary, decisions, risks, asks, action_items}; product_launch_watch returns {launch_signals, feedback_themes, blockers, metrics, next_actions}; custom returns {summary, highlights, open_questions, next_actions}. Hosted-only. Free tier ships 3 calls/month; Pro $9/mo unlocks unlimited (scheduled morning DM at 8am workspace tz in development).",
     inputSchema: {
       type: "object",
       properties: {

package/lib/workflow-store.js

@@ -70,32 +70,47 @@ export function loadStore() {
   try {
     const data = JSON.parse(raw);
     if (!data || typeof data !== "object" || !data.profiles) {
-      backupCorruptStore(raw, "shape-invalid");
+      quarantineCorruptStore("shape-invalid");
       return emptyStore();
     }
     if (data.version !== STORE_VERSION) {
-      // Future: migration logic. For now, back up the unrecognized version
-      // before falling back to empty so the old data is recoverable.
-      backupCorruptStore(raw, `version-${data.version}`);
+      // Future: migration logic. For now, quarantine the unrecognized
+      // version before falling back to empty so the old data is recoverable.
+      quarantineCorruptStore(`version-${data.version}`);
       return emptyStore();
     }
     return data;
   } catch {
-    backupCorruptStore(raw, "json-parse-error");
+    quarantineCorruptStore("json-parse-error");
     return emptyStore();
   }
 }
 
-function backupCorruptStore(raw, reasonTag) {
+/**
+ * Move an unreadable store aside to <store>.corrupt-<timestamp> before
+ * loadStore falls back to an empty store. MOVING (not copying) matters:
+ * it guarantees the next saveStore cannot clobber the user's only copy of
+ * their profiles, and repeated loads don't spawn one backup per call.
+ * Warns on stderr (stdout belongs to the MCP stdio protocol).
+ */
+function quarantineCorruptStore(reasonTag) {
+  const stamp = new Date().toISOString().replace(/[:.]/g, "-");
+  const quarantinePath = `${STORE_FILE}.corrupt-${stamp}`;
   try {
-    const stamp = new Date().toISOString().replace(/[:.]/g, "-");
-    const backupPath = `${STORE_FILE}.bak.${reasonTag}.${stamp}`;
-    writeFileSync(backupPath, raw);
+    renameSync(STORE_FILE, quarantinePath);
     if (platform() === "darwin" || platform() === "linux") {
-      try { chmodSync(backupPath, 0o600); } catch {}
+      try { chmodSync(quarantinePath, 0o600); } catch {}
     }
-  } catch {
-    // Backup is best-effort; do not throw on backup failure.
+    console.error(
+      `[slack-mcp] WARNING: workflow store ${STORE_FILE} is unreadable (${reasonTag}). ` +
+      `Quarantined it to ${quarantinePath} and continuing with an empty store.`
+    );
+  } catch (e) {
+    // Quarantine is best-effort; never let it break loadStore.
+    console.error(
+      `[slack-mcp] WARNING: workflow store ${STORE_FILE} is unreadable (${reasonTag}) ` +
+      `and could not be quarantined: ${e?.message || e}`
+    );
   }
 }
 

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@jtalk22/slack-mcp",
   "mcpName": "io.github.jtalk22/slack-mcp-server",
-  "version": "4.4.1",
-  "description": "Slack MCP without OAuth \u2014 21 tools, session-based, local-first. Free OSS + hosted tier from $9/mo.",
+  "version": "4.4.2",
+  "description": "Slack MCP without OAuth — 21 tools, session-based, local-first. Free OSS + hosted tier from $9/mo.",
   "type": "module",
   "main": "src/server.js",
   "bin": {

package/public/share.html

@@ -124,7 +124,7 @@
       <a href="https://mcp.revasserlabs.com" rel="noopener" style="background:rgba(240,194,70,0.18);border-color:rgba(240,194,70,0.45);color:#f0c246">Hosted</a>
     </div>
 
-    <p class="note"><strong>Verify in 30 seconds:</strong> <code>--version</code>, <code>--doctor</code>, <code>--status</code>. Self-host gives 21 tools with session-based auth. Works with any MCP client — Claude, ChatGPT, Cursor, Copilot, Gemini, Windsurf. Hosted free tier (no card) live at <a href="https://mcp.revasserlabs.com">mcp.revasserlabs.com</a> — Pro $9/mo unlocks unlimited AI tools (scheduled morning catch-up DM rolling out Q2 2026).</p>
+    <p class="note"><strong>Verify in 30 seconds:</strong> <code>--version</code>, <code>--doctor</code>, <code>--status</code>. Self-host gives 21 tools with session-based auth. Works with any MCP client — Claude, ChatGPT, Cursor, Copilot, Gemini, Windsurf. Hosted free tier (no card) live at <a href="https://mcp.revasserlabs.com">mcp.revasserlabs.com</a> — Pro $9/mo unlocks unlimited AI tools (scheduled morning catch-up DM in development).</p>
   </main>
 </body>
 </html>

package/scripts/apply-template.js

@@ -113,5 +113,5 @@ if (!profile.channels.length) {
   console.log("Or call slack_workflow_save from your MCP client to update.");
 } else {
   console.log("Profile is ready. Run slack_catch_me_up against it from your MCP client.");
-  console.log(`(Free tier: 3 catch_me_up calls/month. Pro $9/mo unlocks unlimited; scheduled morning DM rolling out Q2 2026.)`);
+  console.log(`(Free tier: 3 catch_me_up calls/month. Pro $9/mo unlocks unlimited; scheduled morning DM in development.)`);
 }

package/server.json

@@ -17,7 +17,7 @@
     "url": "https://github.com/jtalk22/slack-mcp-server",
     "source": "github"
   },
-  "version": "4.4.1",
+  "version": "4.4.2",
   "remotes": [
     {
       "type": "streamable-http",
@@ -28,7 +28,7 @@
     {
       "registryType": "npm",
       "identifier": "@jtalk22/slack-mcp",
-      "version": "4.4.1",
+      "version": "4.4.2",
       "transport": {
         "type": "stdio"
       },

package/src/server-http.js

@@ -15,24 +15,7 @@ import {
 } from "@modelcontextprotocol/sdk/types.js";
 
 import { TOOLS } from "../lib/tools.js";
-import {
-  handleTokenStatus,
-  handleHealthCheck,
-  handleRefreshTokens,
-  handleListConversations,
-  handleConversationsHistory,
-  handleGetFullConversation,
-  handleSearchMessages,
-  handleUsersInfo,
-  handleSendMessage,
-  handleGetThread,
-  handleListUsers,
-  handleAddReaction,
-  handleRemoveReaction,
-  handleConversationsMark,
-  handleConversationsUnreads,
-  handleUsersSearch,
-} from "../lib/handlers.js";
+import { TOOL_HANDLERS } from "../lib/handlers.js";
 import { RELEASE_VERSION } from "../lib/public-metadata.js";
 
 const SERVER_NAME = "slack-mcp-server";
@@ -98,53 +81,24 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
   const { name, arguments: args } = request.params;
 
   try {
-    switch (name) {
-      case "slack_token_status":
-        return await handleTokenStatus();
-      case "slack_health_check":
-        return await handleHealthCheck();
-      case "slack_refresh_tokens":
-        return await handleRefreshTokens();
-      case "slack_list_conversations":
-        return await handleListConversations(args);
-      case "slack_conversations_history":
-        return await handleConversationsHistory(args);
-      case "slack_get_full_conversation":
-        return await handleGetFullConversation(args);
-      case "slack_search_messages":
-        return await handleSearchMessages(args);
-      case "slack_users_info":
-        return await handleUsersInfo(args);
-      case "slack_send_message":
-        return await handleSendMessage(args);
-      case "slack_get_thread":
-        return await handleGetThread(args);
-      case "slack_list_users":
-        return await handleListUsers(args);
-      case "slack_add_reaction":
-        return await handleAddReaction(args);
-      case "slack_remove_reaction":
-        return await handleRemoveReaction(args);
-      case "slack_conversations_mark":
-        return await handleConversationsMark(args);
-      case "slack_conversations_unreads":
-        return await handleConversationsUnreads(args);
-      case "slack_users_search":
-        return await handleUsersSearch(args);
-      default:
-        return {
-          content: [{
-            type: "text",
-            text: JSON.stringify({
-              status: "error",
-              code: "unknown_tool",
-              message: `Unknown tool: ${name}`,
-              next_action: "Call tools/list to inspect available tool names."
-            }, null, 2)
-          }],
-          isError: true
-        };
+    // Shared dispatch map keeps this transport in lockstep with the stdio
+    // server and the advertised TOOLS list.
+    const handler = TOOL_HANDLERS[name];
+    if (!handler) {
+      return {
+        content: [{
+          type: "text",
+          text: JSON.stringify({
+            status: "error",
+            code: "unknown_tool",
+            message: `Unknown tool: ${name}`,
+            next_action: "Call tools/list to inspect available tool names."
+          }, null, 2)
+        }],
+        isError: true
+      };
     }
+    return await handler(args);
   } catch (error) {
     return {
       content: [{

package/src/server.js

@@ -30,27 +30,9 @@ import { RELEASE_VERSION } from "../lib/public-metadata.js";
 import { checkTokenHealth } from "../lib/slack-client.js";
 import { TOOLS } from "../lib/tools.js";
 import {
-  handleTokenStatus,
+  TOOL_HANDLERS,
   handleHealthCheck,
-  handleRefreshTokens,
   handleListConversations,
-  handleConversationsHistory,
-  handleGetFullConversation,
-  handleSearchMessages,
-  handleUsersInfo,
-  handleSendMessage,
-  handleGetThread,
-  handleListUsers,
-  handleAddReaction,
-  handleRemoveReaction,
-  handleConversationsMark,
-  handleConversationsUnreads,
-  handleUsersSearch,
-  handleWorkflowSave,
-  handleWorkflows,
-  handleSmartSearch,
-  handleCatchMeUp,
-  handleTriage,
 } from "../lib/handlers.js";
 
 // Background refresh interval (4 hours)
@@ -231,86 +213,24 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
   const { name, arguments: args } = request.params;
 
   try {
-    switch (name) {
-      case "slack_token_status":
-        return await handleTokenStatus();
-
-      case "slack_health_check":
-        return await handleHealthCheck();
-
-      case "slack_refresh_tokens":
-        return await handleRefreshTokens();
-
-      case "slack_list_conversations":
-        return await handleListConversations(args);
-
-      case "slack_conversations_history":
-        return await handleConversationsHistory(args);
-
-      case "slack_get_full_conversation":
-        return await handleGetFullConversation(args);
-
-      case "slack_search_messages":
-        return await handleSearchMessages(args);
-
-      case "slack_users_info":
-        return await handleUsersInfo(args);
-
-      case "slack_send_message":
-        return await handleSendMessage(args);
-
-      case "slack_get_thread":
-        return await handleGetThread(args);
-
-      case "slack_list_users":
-        return await handleListUsers(args);
-
-      case "slack_add_reaction":
-        return await handleAddReaction(args);
-
-      case "slack_remove_reaction":
-        return await handleRemoveReaction(args);
-
-      case "slack_conversations_mark":
-        return await handleConversationsMark(args);
-
-      case "slack_conversations_unreads":
-        return await handleConversationsUnreads(args);
-
-      case "slack_users_search":
-        return await handleUsersSearch(args);
-
-      // Workflow profile primitives (OSS local JSON store)
-      case "slack_workflow_save":
-        return await handleWorkflowSave(args);
-
-      case "slack_workflows":
-        return await handleWorkflows(args);
-
-      // Hosted-only AI tools (OSS = upgrade stubs)
-      case "slack_smart_search":
-        return await handleSmartSearch(args);
-
-      case "slack_catch_me_up":
-        return await handleCatchMeUp(args);
-
-      case "slack_triage":
-        return await handleTriage(args);
-
-      default:
-        return {
-          content: [{
-            type: "text",
-            text: JSON.stringify({
-              status: "error",
-              code: "unknown_tool",
-              message: `Unknown tool: ${name}`,
-              next_action: "Use tools/list to discover available tools."
-            }, null, 2)
-          }],
-          isError: true
-        };
+    // Shared dispatch map (lib/handlers.js) keeps this transport in lockstep
+    // with the HTTP server and the advertised TOOLS list.
+    const handler = TOOL_HANDLERS[name];
+    if (!handler) {
+      return {
+        content: [{
+          type: "text",
+          text: JSON.stringify({
+            status: "error",
+            code: "unknown_tool",
+            message: `Unknown tool: ${name}`,
+            next_action: "Use tools/list to discover available tools."
+          }, null, 2)
+        }],
+        isError: true
+      };
     }
+    return await handler(args);
   } catch (error) {
     if (error?.code === "token_auth_failed") {
       return {