@loopops/mcp-server 3.2.0 → 3.3.0

package/dist/api-client.js

@@ -272,10 +272,11 @@ function persistRotatedRefreshToken(newToken) {
  */
 async function diagnoseRefreshFailure(status, body) {
     const head = `Okta refresh failed (HTTP ${status}). Detail: ${body.slice(0, 300)}`;
-    const generic = "Your refresh token may be revoked or idle-expired. Re-run " +
-        "`npx @loopops/mcp-cli@latest login` (the `@latest` pin bypasses the " +
-        "npx cache, which can serve a stale cli with old tenant defaults for " +
-        "up to 24h after a publish).";
+    const generic = "Your refresh token may be revoked or idle-expired.\n" +
+        "  Diagnose: `npx @loopops/mcp-cli@latest doctor` — checks tenant config + token.\n" +
+        "  Fix:      `npx @loopops/mcp-cli@latest login` — re-authenticates from scratch.\n" +
+        "(The `@latest` pin matters: bare `npx @loopops/mcp-cli` may serve a " +
+        "cached older cli with stale tenant defaults for up to 24h after a publish.)";
     if (!apiUrl)
         return `${head}\n\n${generic}`;
     try {

package/dist/index.js

@@ -1,14 +1,26 @@
 #!/usr/bin/env node
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
 import { trpcQuery } from "./api-client.js";
+import { registerIdentityTools } from "./tools/identity.js";
 import { registerReportingTools } from "./tools/reporting.js";
 import { registerConfigTools } from "./tools/config.js";
 import { registerEngTools } from "./tools/eng.js";
 import { registerCrmTools } from "./tools/crm.js";
 import { registerEngageTools } from "./tools/engage.js";
 import { registerAccountMasterTools } from "./tools/account-master.js";
+// Read our own package.json at runtime so the version baked into MCP
+// initialize-handshake `serverInfo.version` matches the published npm
+// version. Was hardcoded "1.0.0" — confusing in Claude Desktop logs and
+// any other MCP client that displays server version. `package.json` is
+// always included in npm tarballs, so the relative path `../package.json`
+// (from dist/index.js) resolves cleanly post-publish.
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const pkg = JSON.parse(readFileSync(join(__dirname, "..", "package.json"), "utf-8"));
 const skillsResponseSchema = z.object({
     role: z.string(),
     skills: z.array(z.string()),
@@ -34,8 +46,9 @@ const allowedSkills = new Set(skills);
 console.error(`[MCP] Connected — role: ${role}, ${skills.length} skills`);
 const server = new McpServer({
     name: "loop-operations",
-    version: "1.0.0",
+    version: pkg.version,
 });
+registerIdentityTools(server, allowedSkills);
 registerReportingTools(server, allowedSkills);
 registerConfigTools(server, allowedSkills);
 registerEngTools(server, allowedSkills);

package/dist/tools/identity.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Identity / connection-check tools.
+ *
+ * Currently just `mcp_whoami` — a data-independent first-call sanity check.
+ * Returns the caller's email, MCP role, SF user link state, and tool count.
+ * Designed for the onboarding flow: after install + restart, asking Claude
+ * "are you connected?" should resolve to this and confirm everything wired
+ * correctly without depending on having any actual Loop data yet.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerIdentityTools(server: McpServer, allowed: Set<string>): void;

package/dist/tools/identity.js

@@ -0,0 +1,21 @@
+/**
+ * Identity / connection-check tools.
+ *
+ * Currently just `mcp_whoami` — a data-independent first-call sanity check.
+ * Returns the caller's email, MCP role, SF user link state, and tool count.
+ * Designed for the onboarding flow: after install + restart, asking Claude
+ * "are you connected?" should resolve to this and confirm everything wired
+ * correctly without depending on having any actual Loop data yet.
+ */
+import { trpcQuery } from "../api-client.js";
+import { safeTool } from "./_helpers.js";
+export function registerIdentityTools(server, allowed) {
+    if (allowed.has("mcp_whoami")) {
+        server.tool("mcp_whoami", [
+            "Connection sanity check. Returns your email, MCP role, Salesforce user link state,",
+            "and the number of tools available to you. Use as a first-call verification after",
+            "install — works regardless of whether you have any Loop data yet, so it's a clean",
+            "way to confirm the auth chain (Okta → Loop → role resolution) is wired correctly.",
+        ].join(" "), {}, safeTool(async () => trpcQuery("mcp.whoami")));
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@loopops/mcp-server",
-  "version": "3.2.0",
+  "version": "3.3.0",
   "description": "Loop Operations MCP Server — AI skills for RevOps",
   "license": "UNLICENSED",
   "type": "module",