@markmnl/fmsg-mcp 1.4.0 → 1.4.1

package/CHANGELOG.md

@@ -2,6 +2,9 @@
 
 ## Unreleased
 
+- Mailbox tools set `openWorldHint: false` (inbox, threads, drafts, mark read, attachment URLs).
+  `react` is `destructiveHint: true` because a reaction message cannot be recalled, so a host may ask
+  before one. `indicate` stays non-destructive. Sends to other addresses stay open-world and destructive.
 - FMSG-006 indicators. The new `indicate` tool shows the other participants of a message a short-lived
   status such as ⏳ or ✍️, refreshed at half its ttl (every 1–30 s) and cleared when the agent replies in
   that thread, reacts, marks it read, after 5 minutes, or when the session ends; an empty emoji clears it

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.4.0",
-  "commit": "36e8dafb2afbee867f5518c63b662cd500f24ddb",
-  "describe": "v1.4.0"
+  "version": "1.4.1",
+  "commit": "1bf42526079a845e7a27c01be60c0c38eae9c7f0",
+  "describe": "v1.4.1"
 }

package/dist/tools/common.js

@@ -4,7 +4,10 @@ import { toolError } from "../errors.js";
 import { OAuthRequestError } from "../oauth/errors.js";
 import { FmsgHttpError } from "../client/client.js";
 import { UNTRUSTED_CONTENT_NOTICE, attachmentType, headerValue, isoTime, preview, sortAttachments } from "../render.js";
-export const READ_ONLY = { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true };
+// Mailbox reads stay inside the signed-in address, so openWorldHint is false.
+// Hosts that treat open-world tools as reaching arbitrary other parties otherwise
+// flag an inbox read. SENDS stays open-world: a send can reach any fmsg address.
+export const READ_ONLY = { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false };
 export const SENDS = { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true };
 export const idSchema = z.string().regex(/^[0-9]+$/u, "fmsg message ids are decimal integers").describe("fmsg message id");
 /**

package/dist/tools/download.js

@@ -105,7 +105,7 @@ export const registerDownloadTool = (server, deps) => {
             content_type: z.string().regex(/^[\x20-\x7e]+$/u).optional().describe("inferred from the filename when omitted"),
         }),
         outputSchema: outputObject({ draft_id: z.string(), filename: z.string(), ...presignedOutput.shape }),
-        annotations: { ...SENDS, destructiveHint: false },
+        annotations: { ...SENDS, destructiveHint: false, openWorldHint: false },
     }, async ({ id, filename, size, sha256, content_type }, ctx) => withCaller(deps, ctx, async (caller, signal) => {
         const draft = await caller.client.getMessage(id, signal);
         if (draft.time !== null && draft.time !== undefined)

package/dist/tools/draft.js

@@ -51,7 +51,7 @@ export const registerDraftTools = (server, deps) => {
             next: z.string(),
             hint: hintOutput,
         }),
-        annotations: { ...SENDS, destructiveHint: false },
+        annotations: { ...SENDS, destructiveHint: false, openWorldHint: false },
     }, async ({ to, topic, reply_to, body, type, important, no_reply, allow_no_reply, include_owner, attachments }, ctx) => {
         if (reply_to && topic)
             return toolError("a reply has no topic: pass topic only for a new message");
@@ -151,7 +151,7 @@ export const registerDraftTools = (server, deps) => {
         description: "Delete an unsent draft and its attachments. Sent messages cannot be deleted.",
         inputSchema: z.strictObject({ id: idSchema.describe("the draft to delete") }),
         outputSchema: outputObject({ id: z.string(), deleted: z.boolean() }),
-        annotations: { ...SENDS, idempotentHint: true },
+        annotations: { ...SENDS, idempotentHint: true, openWorldHint: false },
     }, async ({ id }, ctx) => withCaller(deps, ctx, async (caller, signal) => {
         const draft = await caller.client.getMessage(id, signal);
         if (draft.time !== null && draft.time !== undefined)

package/dist/tools/read.js

@@ -166,7 +166,7 @@ export const registerReadTools = (server, deps) => {
             marked: z.array(outputObject({ id: z.string(), time_read: z.string().nullable() })),
             failed: z.array(outputObject({ id: z.string(), error: z.string() })),
         }),
-        annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: true },
+        annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false },
     }, async ({ ids }, ctx) => withCaller(deps, ctx, async (caller, signal) => {
         deps.indicators.handled(caller, ids);
         const marked = [];

package/dist/tools/send.js

@@ -245,7 +245,8 @@ export const registerSendTools = (server, deps) => {
             emoji: z.string().max(32).nullable().describe("a single emoji; null or empty clears your reaction"),
         }),
         outputSchema: outputObject({ id: z.string(), reaction_id: z.string().nullable(), time: z.string().nullable(), cleared: z.boolean() }),
-        annotations: { ...SENDS, destructiveHint: false, idempotentHint: true },
+        // A reaction is itself a message and cannot be recalled, so it stays destructive.
+        annotations: { ...SENDS, idempotentHint: true },
     }, async ({ id, emoji }, ctx) => withCaller(deps, ctx, async (caller, signal) => {
         const value = emoji && emoji.trim() ? emoji.trim() : null;
         const result = await caller.client.react(id, value, signal);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@markmnl/fmsg-mcp",
   "mcpName": "io.github.markmnl/fmsg-mcp",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "description": "MCP server for fmsg: send and receive federated messages from any AI agent via a deployed fmsg Web API",
   "type": "module",
   "license": "MIT",

package/server.json

@@ -8,13 +8,13 @@
     "url": "https://github.com/markmnl/fmsg-mcp",
     "source": "github"
   },
-  "version": "1.4.0",
+  "version": "1.4.1",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@markmnl/fmsg-mcp",
-      "version": "1.4.0",
+      "version": "1.4.1",
       "transport": {
         "type": "stdio"
       },