@leadbay/mcp 0.34.0 → 0.34.1

package/CHANGELOG.md

@@ -1,5 +1,43 @@
 # Changelog — @leadbay/mcp
 
+## 0.34.1 — 2026-09-07
+
+`leadbay_set_lead_status` threw `TypeError: (params.lead_ids ?? []).filter is
+not a function` five times in 29 s on the hosted route (product#4079, Sentry
+MCP-3T): a scheduled agent passed `lead_ids` as something other than an array.
+The same class hit `leadbay_new_lens` on 2026-08-04 (`texts.filter is not a
+function`, `locations` as a string, MCP-3B). Both times the agent retried the
+identical call four or five times, because a raw TypeError names no argument.
+
+The CallTool handler in `server.ts` never checked `inputSchema` before
+`tool.execute`; its own comment said enforcement was ours, and it only enforced
+`_triggered_by`. 32 tools declare a top-level `array` or `object` parameter and
+none of them defended against a string: four threw, two silently corrupted
+(`adjust_audience` spread `"tech"` into `["t","e","c","h"]`), the rest forwarded
+the string to the backend.
+
+One guard now runs before `execute`, after the `LAST_PROMPT_REQUIRED` check
+(`findShapeMismatch`): for each top-level schema property whose `type` is
+`array` or `object`, a present non-null argument of the wrong JSON shape returns
+`BAD_INPUT` naming the field, the expected shape and the received type
+(`lead_ids must be a JSON array (got string)`), through the same envelope branch
+a tool's own `BAD_INPUT` takes. So PostHog sees `ok:false error_code:BAD_INPUT`
+and Sentry groups the event with the tool's existing `BAD_INPUT` issue
+(`source:business`) instead of a `source:unexpected` stack fingerprint.
+
+Deliberately not done: no coercion of a bare string into a one-element array (a
+JSON-stringified array would become one bogus id and fail per lead inside
+`failed[]`); no scalar checks (hosts send `"20"` for a number and tools coerce);
+no `required`, `items`, nested or `additionalProperties` validation; no runtime
+dependency. `null` counts as absent. One visible change on an existing tool:
+`leadbay_report_outreach` with `verification` given as a string answered
+`VERIFICATION_REQUIRED`; it now answers `BAD_INPUT … must be a JSON object (got
+string)`. Tools executed directly outside the MCP server (OpenClaw consumes
+`@leadbay/core` without `buildServer`) keep the raw throw.
+
+Test: `packages/mcp/test/unit/input-shape-guard.test.ts` drives `tools/call`
+through `buildServer` with the incident shapes.
+
 ## 0.34.0 — 2026-09-02
 
 The OpenAI app directory rejects an app that sells digital goods — "plugins may

package/dist/bin.js

@@ -26300,6 +26300,40 @@ function extractTriggeredBy(args) {
   const trimmed = raw.length > 500 ? `${raw.slice(0, 500)}\u2026` : raw;
   return { triggered_by: trimmed, cleaned };
 }
+function findShapeMismatch(tool, args) {
+  const schema = tool.inputSchema;
+  if (!schema || schema.type !== "object") return void 0;
+  const props = schema.properties;
+  if (!props || typeof props !== "object") return void 0;
+  for (const [key, spec] of Object.entries(props)) {
+    if (key === TRIGGERED_BY_FIELD || !spec || typeof spec !== "object") continue;
+    const declared = spec.type;
+    if (declared !== "array" && declared !== "object") continue;
+    const value = args[key];
+    if (value === void 0 || value === null) continue;
+    const isArray = Array.isArray(value);
+    const got = isArray ? "array" : typeof value;
+    if (declared === "array" && !isArray) {
+      const items = spec.items;
+      const of = typeof items?.type === "string" ? ` of ${items.type}s` : "";
+      return {
+        error: true,
+        code: "BAD_INPUT",
+        message: `${key} must be a JSON array (got ${got})`,
+        hint: `Re-call with ${key} as a JSON array${of}, e.g. ${key}: ["\u2026"]. Do not JSON-stringify the array.`
+      };
+    }
+    if (declared === "object" && (typeof value !== "object" || isArray)) {
+      return {
+        error: true,
+        code: "BAD_INPUT",
+        message: `${key} must be a JSON object (got ${got})`,
+        hint: `Re-call with ${key} as a JSON object, e.g. ${key}: {\u2026}.`
+      };
+    }
+  }
+  return void 0;
+}
 function toolsListPayload(tools2) {
   return tools2.map((t) => {
     const out = {
@@ -26680,7 +26714,8 @@ ${url}
           isError: true
         };
       }
-      const result = await runWithRequestSignal(extra.signal, () => tool.execute(client, args, {
+      const shapeError = findShapeMismatch(tool, args);
+      const result = shapeError ?? await runWithRequestSignal(extra.signal, () => tool.execute(client, args, {
         logger: opts.logger,
         bulkTracker: opts.bulkTracker,
         notificationsInbox: opts.notificationsInbox,
@@ -28366,7 +28401,7 @@ var OAUTH_BASE_URLS = {
     fr: "https://staging.api.leadbay.app"
   }
 };
-var VERSION = "0.34.0";
+var VERSION = "0.34.1";
 var HELP = `
 leadbay-mcp ${VERSION} \u2014 Leadbay Model Context Protocol server
 

package/dist/http-server.js

@@ -24319,6 +24319,40 @@ function extractTriggeredBy(args) {
   const trimmed = raw.length > 500 ? `${raw.slice(0, 500)}\u2026` : raw;
   return { triggered_by: trimmed, cleaned };
 }
+function findShapeMismatch(tool, args) {
+  const schema = tool.inputSchema;
+  if (!schema || schema.type !== "object") return void 0;
+  const props = schema.properties;
+  if (!props || typeof props !== "object") return void 0;
+  for (const [key, spec] of Object.entries(props)) {
+    if (key === TRIGGERED_BY_FIELD || !spec || typeof spec !== "object") continue;
+    const declared = spec.type;
+    if (declared !== "array" && declared !== "object") continue;
+    const value = args[key];
+    if (value === void 0 || value === null) continue;
+    const isArray = Array.isArray(value);
+    const got = isArray ? "array" : typeof value;
+    if (declared === "array" && !isArray) {
+      const items = spec.items;
+      const of = typeof items?.type === "string" ? ` of ${items.type}s` : "";
+      return {
+        error: true,
+        code: "BAD_INPUT",
+        message: `${key} must be a JSON array (got ${got})`,
+        hint: `Re-call with ${key} as a JSON array${of}, e.g. ${key}: ["\u2026"]. Do not JSON-stringify the array.`
+      };
+    }
+    if (declared === "object" && (typeof value !== "object" || isArray)) {
+      return {
+        error: true,
+        code: "BAD_INPUT",
+        message: `${key} must be a JSON object (got ${got})`,
+        hint: `Re-call with ${key} as a JSON object, e.g. ${key}: {\u2026}.`
+      };
+    }
+  }
+  return void 0;
+}
 function toolsListPayload(tools2) {
   return tools2.map((t) => {
     const out = {
@@ -24699,7 +24733,8 @@ ${url}
           isError: true
         };
       }
-      const result = await runWithRequestSignal(extra.signal, () => tool.execute(client, args, {
+      const shapeError = findShapeMismatch(tool, args);
+      const result = shapeError ?? await runWithRequestSignal(extra.signal, () => tool.execute(client, args, {
         logger: opts.logger,
         bulkTracker: opts.bulkTracker,
         notificationsInbox: opts.notificationsInbox,
@@ -25130,7 +25165,7 @@ function parseWriteEnv(env = process.env) {
 }
 
 // src/http-server.ts
-var VERSION = true ? "0.34.0" : "0.0.0-dev";
+var VERSION = true ? "0.34.1" : "0.0.0-dev";
 var PORT = Number(process.env.PORT ?? 8080);
 var HOST = process.env.HOST ?? "0.0.0.0";
 var logger = {
@@ -25263,6 +25298,7 @@ function buildServerFromClient(client, requestTelemetry, resourcePath) {
     telemetry: requestTelemetry
   });
 }
+var OPENAI_APPS_CHALLENGE = process.env.OPENAI_APPS_CHALLENGE ?? "vsJ51IZ_3AqM10YZxXQFmB29IGIMDOZGbpbEgRIT4r4";
 var PRM_PREFIX = "/.well-known/oauth-protected-resource";
 var RESOURCE_PATHS = ["/mcp", "/sse", "/fr/mcp", "/fr/sse", "/chatgpt/mcp"];
 function requestOrigin(c) {
@@ -25310,6 +25346,10 @@ function sendChallenge(c, resourcePath, authState) {
 }
 var app = new Hono();
 app.get("/healthz", (c) => c.json({ ok: true, version: VERSION }));
+app.get(
+  "/.well-known/openai-apps-challenge",
+  (c) => c.text(OPENAI_APPS_CHALLENGE, 200, { "Cache-Control": "no-store" })
+);
 app.get(PRM_PREFIX, (c) => servePrm(c, "/mcp"));
 app.get(`${PRM_PREFIX}/*`, (c) => {
   const suffix = c.req.path.slice(PRM_PREFIX.length);

package/dist/installer-electron.js

@@ -1805,7 +1805,7 @@ var init_installer_gui = __esm({
     init_install_dxt();
     init_install_shared();
     init_oauth();
-    VERSION = true ? "0.34.0" : "0.0.0-dev";
+    VERSION = true ? "0.34.1" : "0.0.0-dev";
     MESSAGES = {
       en: {
         installer: {

package/dist/installer-gui.js

@@ -1068,7 +1068,7 @@ async function oauthLogin(opts) {
 }
 
 // installer/installer-gui.ts
-var VERSION = true ? "0.34.0" : "0.0.0-dev";
+var VERSION = true ? "0.34.1" : "0.0.0-dev";
 var MESSAGES = {
   en: {
     installer: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leadbay/mcp",
-  "version": "0.34.0",
+  "version": "0.34.1",
   "mcpName": "io.github.leadbay/leadbay-mcp",
   "description": "Model Context Protocol (MCP) server for Leadbay — AI lead discovery, qualification, and enrichment for Claude Desktop, Cursor, and Claude Code.",
   "type": "module",