@markmnl/fmsg-mcp 1.5.1 → 1.5.2

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## Unreleased
 
+- Tool annotations follow OpenAI's plugin guidelines ("false only for additive writes without
+  destructive or irreversible effects"), after a directory review flagged them: `react`, `indicate`
+  and `mark_read` are `destructiveHint: true` (a reaction or status reaches the other participants at
+  once and supersedes the previous one; marking read can't be undone here), so a host may ask before
+  each. `get_attachment_download_url` is no longer `readOnlyHint` (its presigned link is created on the
+  server); it still needs only `fmsg:read`.
 - `send_message`, `reply` and `create_draft` take `files`: files the user shared in the chat, given by
   reference (ChatGPT's `openai/fileParams`, declared in each tool's `_meta`). The server downloads each
   one, from public HTTPS addresses only, hashes it, attaches the exact bytes and reports its sha256 in

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.5.1",
-  "commit": "78f92e1272532d7b08b98659f792b357aeea703e",
-  "describe": "v1.5.1"
+  "version": "1.5.2",
+  "commit": "03f0a9e5bef6d1d05765030d81c90c60487a6351",
+  "describe": "v1.5.2"
 }

package/dist/tools/download.js

@@ -6,7 +6,7 @@ import { toolError } from "../errors.js";
 import { localFileName, shellQuote } from "../links.js";
 import { attachmentType, isoTime, messageData } from "../render.js";
 import { FILENAME } from "./attachments.js";
-import { SENDS, attachmentMissingFrom, idSchema, openEnum, outputObject, READ_ONLY, UNTRUSTED, untrustedNotice, withCaller } from "./common.js";
+import { SENDS, attachmentMissingFrom, idSchema, openEnum, outputObject, UNTRUSTED, untrustedNotice, withCaller } from "./common.js";
 const FALLBACK = "If you cannot fetch URLs with this connection's authorization, use download_attachment instead.";
 const PRESIGNED_FALLBACK = "If you cannot fetch URLs with this connection's authorization, pass presigned: true for a single-use link that needs none.";
 const presignedOutput = outputObject({
@@ -46,7 +46,10 @@ export const registerDownloadTool = (server, deps) => {
             presigned: presignedOutput.partial().optional().describe("present when presigned was true"),
             ...untrustedNotice,
         }),
-        annotations: READ_ONLY,
+        // Not read-only: with presigned it creates a short-lived single-use
+        // download link. Not destructive: it changes no messages. Closed-world:
+        // only the caller's own attachments. Reading needs only fmsg:read.
+        annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },
     }, async ({ id, filename, presigned }, ctx) => withCaller(deps, ctx, async (caller, signal) => {
         const mid = normalizeMessageId(id);
         attachmentFilename(filename);

package/dist/tools/read.js

@@ -166,7 +166,10 @@ export const registerReadTools = (server, deps) => {
             marked: z.array(outputObject({ id: z.string(), time_read: z.string().nullable() })),
             failed: z.array(outputObject({ id: z.string(), error: z.string() })),
         }),
-        annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+        // Destructive (OpenAI's plugin guidelines): marking read changes the
+        // messages' read state, which this server cannot undo. Closed-world:
+        // only the caller's own mailbox.
+        annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: false },
     }, async ({ ids }, ctx) => withCaller(deps, ctx, async (caller, signal) => {
         deps.indicators.handled(caller, ids);
         const marked = [];

package/dist/tools/send.js

@@ -254,10 +254,11 @@ export const registerSendTools = (server, deps) => {
             emoji: z.string().max(32).nullable().describe("a single emoji; null or empty clears your reaction"),
         }),
         outputSchema: outputObject({ id: z.string(), reaction_id: z.string().nullable(), time: z.string().nullable(), cleared: z.boolean() }),
-        // Not destructive: a reaction is one emoji that its sender changes or
-        // clears with another reaction, and it alters no one's messages, so hosts
-        // needn't ask before each one (maintainer decision).
-        annotations: { ...SENDS, destructiveHint: false, idempotentHint: true },
+        // Destructive (OpenAI's plugin guidelines): a reaction is a send the
+        // other participants receive at once and cannot be recalled, and it
+        // supersedes the sender's previous reaction. Earlier reaction messages
+        // stay; setting the same emoji again is a no-op.
+        annotations: { ...SENDS, idempotentHint: true },
     }, async ({ id, emoji }, ctx) => withCaller(deps, ctx, async (caller, signal) => {
         const value = emoji && emoji.trim() ? emoji.trim() : null;
         const result = await caller.client.react(id, value, signal);
@@ -281,7 +282,9 @@ export const registerSendTools = (server, deps) => {
             ttl: z.number().describe("seconds; 0 when cleared"),
             cleared: z.boolean(),
         }),
-        annotations: { ...SENDS, destructiveHint: false, idempotentHint: true },
+        // Destructive (OpenAI's plugin guidelines): the status is shown to the
+        // other participants at once and replaces the caller's previous one.
+        annotations: { ...SENDS, idempotentHint: true },
     }, async ({ id, emoji, ttl }, ctx) => withCaller(deps, ctx, async (caller, signal) => {
         const value = emoji.trim();
         // The thread root lets a reply anywhere in the thread clear it; a failed lookup only means it is not known.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@markmnl/fmsg-mcp",
   "mcpName": "io.github.markmnl/fmsg-mcp",
-  "version": "1.5.1",
+  "version": "1.5.2",
   "description": "MCP server for fmsg: send and receive federated messages from any AI agent via a deployed fmsg Web API",
   "type": "module",
   "license": "MIT",

package/server.json

@@ -8,13 +8,13 @@
     "url": "https://github.com/markmnl/fmsg-mcp",
     "source": "github"
   },
-  "version": "1.5.1",
+  "version": "1.5.2",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@markmnl/fmsg-mcp",
-      "version": "1.5.1",
+      "version": "1.5.2",
       "transport": {
         "type": "stdio"
       },