@mgcrea/mcp-unifi-protect 0.3.0 → 0.4.0

package/README.md

@@ -261,7 +261,11 @@ Two prompts carry the procedure, which is the part a tool list cannot express:
 - **`check_camera_settings`** — run the audit and interpret it, changing nothing. Several
   findings have two valid opposite fixes, and which is right depends on what the camera is for.
 - **`who_passed`** — find who was present in a window, and **fall back to motion frames on any
-  camera whose detector is off** rather than reporting a zero count as an absence.
+  camera whose detector is off** rather than reporting a zero count as an absence. It takes the
+  question as one free-text argument, so **quote it**: slash-command arguments are split
+  shell-style and mapped positionally, so `who_passed in front of the house last night?` arrives
+  as just `"in"`, while `who_passed "in front of the house last night?"` arrives whole. A
+  single-word question is treated as that truncation and refused rather than answered.
 
 ## Worked example: what happened at the front door last night
 

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { G as BUILD_INFO, L as setupInstructions, M as isConfigured, N as loadConfig, i as createServer } from "./server-B1wSHfi7.js";
+import { G as BUILD_INFO, L as setupInstructions, M as isConfigured, N as loadConfig, i as createServer } from "./server-9inOsyBi.js";
 import { ZodError } from "zod";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { StdioServerTransport } from "@modelcontextprotocol/server/stdio";
 //#region src/cli.ts
 const stderrLogger = {
 	debug: (...args) => {

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","names":[],"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { StdioServerTransport } from \"@modelcontextprotocol/sdk/server/stdio.js\";\nimport { ZodError } from \"zod\";\n\nimport { BUILD_INFO } from \"#/build-info\";\nimport { isConfigured, loadConfig, setupInstructions } from \"#/config\";\nimport { createServer } from \"#/server\";\n\n// Everything goes to stderr: stdout is the MCP protocol channel, and a stray\n// log line there corrupts the JSON-RPC stream — usually failing the client's\n// next parse, far from the cause.\n// oxlint-disable no-console -- this is the process entry point; stderr is the log channel.\nconst stderrLogger = {\n  debug: (...args: unknown[]) => {\n    if (process.env.UNIFI_PROTECT_DEBUG) console.error(\"[unifi-protect-mcp]\", ...args);\n  },\n  warn: (...args: unknown[]) => console.error(\"[unifi-protect-mcp]\", ...args),\n  error: (...args: unknown[]) => console.error(\"[unifi-protect-mcp]\", ...args),\n};\n\n/** Show a config mistake as its field messages, not 40 frames of zod internals. */\nconst describeFatal = (err: unknown): string => {\n  if (err instanceof ZodError) {\n    return err.issues\n      .map((issue) => {\n        const path = issue.path.join(\".\");\n        return path ? `${path}: ${issue.message}` : issue.message;\n      })\n      .join(\"\\n\");\n  }\n  return err instanceof Error ? err.message : String(err);\n};\n\nconst main = async (): Promise<void> => {\n  stderrLogger.warn(\n    `${BUILD_INFO.name}@${BUILD_INFO.version} (git ${BUILD_INFO.gitCommit} ${BUILD_INFO.gitCommitDate}, node ${process.version})`,\n  );\n\n  const config = loadConfig();\n  // Before anything can open a socket.\n\n  const { server } = createServer({ config, logger: stderrLogger });\n  const transport = new StdioServerTransport();\n  await server.connect(transport);\n\n  stderrLogger.warn(\n    `unifi-protect-mcp connected (mode=${config.mode}, ` +\n      (config.mode === \"cloud\"\n        ? `console=${config.consoleId ?? \"MISSING\"}, auth=${config.apiKey ? \"api-key\" : \"MISSING\"}, `\n        : `host=${config.baseUrl ?? \"MISSING\"}, user=${config.username ?? \"MISSING\"}, `) +\n      `writes=${config.allowWrites ? \"ENABLED\" : \"disabled\"}, ` +\n      `tls=${config.mode === \"cloud\" || config.verifyTls ? \"verified\" : \"UNVERIFIED\"})`,\n  );\n\n  // Connecting successfully but exposing one tool is confusing unless we say\n  // why. The server no longer refuses to start over this, so the banner and\n  // unifi_protect_auth_status are the only channels left.\n  for (const issue of config.issues) stderrLogger.warn(`  ${issue}`);\n\n  if (!isConfigured(config)) {\n    stderrLogger.warn(\"  not configured — only unifi_protect_auth_status is available:\");\n    for (const line of setupInstructions(config)) stderrLogger.warn(`  ${line}`);\n    stderrLogger.warn(\"  Call unifi_protect_auth_status for this same guidance in your client.\");\n  }\n\n  const shutdown = (signal: string): void => {\n    stderrLogger.warn(`received ${signal}, shutting down`);\n    process.exit(0);\n  };\n  process.on(\"SIGINT\", () => shutdown(\"SIGINT\"));\n  process.on(\"SIGTERM\", () => shutdown(\"SIGTERM\"));\n};\n\nmain().catch((err: unknown) => {\n  console.error(`[unifi-protect-mcp] fatal: ${describeFatal(err)}`);\n  if (process.env.UNIFI_PROTECT_DEBUG && err instanceof Error) console.error(err.stack);\n  process.exit(1);\n});\n"],"mappings":";;;;;AAYA,MAAM,eAAe;CACnB,QAAQ,GAAG,SAAoB;EAC7B,IAAI,QAAQ,IAAI,qBAAqB,QAAQ,MAAM,uBAAuB,GAAG,IAAI;CACnF;CACA,OAAO,GAAG,SAAoB,QAAQ,MAAM,uBAAuB,GAAG,IAAI;CAC1E,QAAQ,GAAG,SAAoB,QAAQ,MAAM,uBAAuB,GAAG,IAAI;AAC7E;;AAGA,MAAM,iBAAiB,QAAyB;CAC9C,IAAI,eAAe,UACjB,OAAO,IAAI,OACR,KAAK,UAAU;EACd,MAAM,OAAO,MAAM,KAAK,KAAK,GAAG;EAChC,OAAO,OAAO,GAAG,KAAK,IAAI,MAAM,YAAY,MAAM;CACpD,CAAC,CAAC,CACD,KAAK,IAAI;CAEd,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACxD;AAEA,MAAM,OAAO,YAA2B;CACtC,aAAa,KACX,GAAG,WAAW,KAAK,GAAG,WAAW,QAAQ,QAAQ,WAAW,UAAU,GAAG,WAAW,cAAc,SAAS,QAAQ,QAAQ,EAC7H;CAEA,MAAM,SAAS,WAAW;CAG1B,MAAM,EAAE,WAAW,aAAa;EAAE;EAAQ,QAAQ;CAAa,CAAC;CAChE,MAAM,YAAY,IAAI,qBAAqB;CAC3C,MAAM,OAAO,QAAQ,SAAS;CAE9B,aAAa,KACX,qCAAqC,OAAO,KAAK,OAC9C,OAAO,SAAS,UACb,WAAW,OAAO,aAAa,UAAU,SAAS,OAAO,SAAS,YAAY,UAAU,MACxF,QAAQ,OAAO,WAAW,UAAU,SAAS,OAAO,YAAY,UAAU,OAC9E,UAAU,OAAO,cAAc,YAAY,WAAW,QAC/C,OAAO,SAAS,WAAW,OAAO,YAAY,aAAa,aAAa,EACnF;CAKA,KAAK,MAAM,SAAS,OAAO,QAAQ,aAAa,KAAK,KAAK,OAAO;CAEjE,IAAI,CAAC,aAAa,MAAM,GAAG;EACzB,aAAa,KAAK,iEAAiE;EACnF,KAAK,MAAM,QAAQ,kBAAkB,MAAM,GAAG,aAAa,KAAK,KAAK,MAAM;EAC3E,aAAa,KAAK,yEAAyE;CAC7F;CAEA,MAAM,YAAY,WAAyB;EACzC,aAAa,KAAK,YAAY,OAAO,gBAAgB;EACrD,QAAQ,KAAK,CAAC;CAChB;CACA,QAAQ,GAAG,gBAAgB,SAAS,QAAQ,CAAC;CAC7C,QAAQ,GAAG,iBAAiB,SAAS,SAAS,CAAC;AACjD;AAEA,KAAK,CAAC,CAAC,OAAO,QAAiB;CAC7B,QAAQ,MAAM,8BAA8B,cAAc,GAAG,GAAG;CAChE,IAAI,QAAQ,IAAI,uBAAuB,eAAe,OAAO,QAAQ,MAAM,IAAI,KAAK;CACpF,QAAQ,KAAK,CAAC;AAChB,CAAC"}
+{"version":3,"file":"cli.js","names":[],"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { StdioServerTransport } from \"@modelcontextprotocol/server/stdio\";\nimport { ZodError } from \"zod\";\n\nimport { BUILD_INFO } from \"#/build-info\";\nimport { isConfigured, loadConfig, setupInstructions } from \"#/config\";\nimport { createServer } from \"#/server\";\n\n// Everything goes to stderr: stdout is the MCP protocol channel, and a stray\n// log line there corrupts the JSON-RPC stream — usually failing the client's\n// next parse, far from the cause.\n// oxlint-disable no-console -- this is the process entry point; stderr is the log channel.\nconst stderrLogger = {\n  debug: (...args: unknown[]) => {\n    if (process.env.UNIFI_PROTECT_DEBUG) console.error(\"[unifi-protect-mcp]\", ...args);\n  },\n  warn: (...args: unknown[]) => console.error(\"[unifi-protect-mcp]\", ...args),\n  error: (...args: unknown[]) => console.error(\"[unifi-protect-mcp]\", ...args),\n};\n\n/** Show a config mistake as its field messages, not 40 frames of zod internals. */\nconst describeFatal = (err: unknown): string => {\n  if (err instanceof ZodError) {\n    return err.issues\n      .map((issue) => {\n        const path = issue.path.join(\".\");\n        return path ? `${path}: ${issue.message}` : issue.message;\n      })\n      .join(\"\\n\");\n  }\n  return err instanceof Error ? err.message : String(err);\n};\n\nconst main = async (): Promise<void> => {\n  stderrLogger.warn(\n    `${BUILD_INFO.name}@${BUILD_INFO.version} (git ${BUILD_INFO.gitCommit} ${BUILD_INFO.gitCommitDate}, node ${process.version})`,\n  );\n\n  const config = loadConfig();\n  // Before anything can open a socket.\n\n  const { server } = createServer({ config, logger: stderrLogger });\n  const transport = new StdioServerTransport();\n  await server.connect(transport);\n\n  stderrLogger.warn(\n    `unifi-protect-mcp connected (mode=${config.mode}, ` +\n      (config.mode === \"cloud\"\n        ? `console=${config.consoleId ?? \"MISSING\"}, auth=${config.apiKey ? \"api-key\" : \"MISSING\"}, `\n        : `host=${config.baseUrl ?? \"MISSING\"}, user=${config.username ?? \"MISSING\"}, `) +\n      `writes=${config.allowWrites ? \"ENABLED\" : \"disabled\"}, ` +\n      `tls=${config.mode === \"cloud\" || config.verifyTls ? \"verified\" : \"UNVERIFIED\"})`,\n  );\n\n  // Connecting successfully but exposing one tool is confusing unless we say\n  // why. The server no longer refuses to start over this, so the banner and\n  // unifi_protect_auth_status are the only channels left.\n  for (const issue of config.issues) stderrLogger.warn(`  ${issue}`);\n\n  if (!isConfigured(config)) {\n    stderrLogger.warn(\"  not configured — only unifi_protect_auth_status is available:\");\n    for (const line of setupInstructions(config)) stderrLogger.warn(`  ${line}`);\n    stderrLogger.warn(\"  Call unifi_protect_auth_status for this same guidance in your client.\");\n  }\n\n  const shutdown = (signal: string): void => {\n    stderrLogger.warn(`received ${signal}, shutting down`);\n    process.exit(0);\n  };\n  process.on(\"SIGINT\", () => shutdown(\"SIGINT\"));\n  process.on(\"SIGTERM\", () => shutdown(\"SIGTERM\"));\n};\n\nmain().catch((err: unknown) => {\n  console.error(`[unifi-protect-mcp] fatal: ${describeFatal(err)}`);\n  if (process.env.UNIFI_PROTECT_DEBUG && err instanceof Error) console.error(err.stack);\n  process.exit(1);\n});\n"],"mappings":";;;;;AAYA,MAAM,eAAe;CACnB,QAAQ,GAAG,SAAoB;EAC7B,IAAI,QAAQ,IAAI,qBAAqB,QAAQ,MAAM,uBAAuB,GAAG,IAAI;CACnF;CACA,OAAO,GAAG,SAAoB,QAAQ,MAAM,uBAAuB,GAAG,IAAI;CAC1E,QAAQ,GAAG,SAAoB,QAAQ,MAAM,uBAAuB,GAAG,IAAI;AAC7E;;AAGA,MAAM,iBAAiB,QAAyB;CAC9C,IAAI,eAAe,UACjB,OAAO,IAAI,OACR,KAAK,UAAU;EACd,MAAM,OAAO,MAAM,KAAK,KAAK,GAAG;EAChC,OAAO,OAAO,GAAG,KAAK,IAAI,MAAM,YAAY,MAAM;CACpD,CAAC,CAAC,CACD,KAAK,IAAI;CAEd,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACxD;AAEA,MAAM,OAAO,YAA2B;CACtC,aAAa,KACX,GAAG,WAAW,KAAK,GAAG,WAAW,QAAQ,QAAQ,WAAW,UAAU,GAAG,WAAW,cAAc,SAAS,QAAQ,QAAQ,EAC7H;CAEA,MAAM,SAAS,WAAW;CAG1B,MAAM,EAAE,WAAW,aAAa;EAAE;EAAQ,QAAQ;CAAa,CAAC;CAChE,MAAM,YAAY,IAAI,qBAAqB;CAC3C,MAAM,OAAO,QAAQ,SAAS;CAE9B,aAAa,KACX,qCAAqC,OAAO,KAAK,OAC9C,OAAO,SAAS,UACb,WAAW,OAAO,aAAa,UAAU,SAAS,OAAO,SAAS,YAAY,UAAU,MACxF,QAAQ,OAAO,WAAW,UAAU,SAAS,OAAO,YAAY,UAAU,OAC9E,UAAU,OAAO,cAAc,YAAY,WAAW,QAC/C,OAAO,SAAS,WAAW,OAAO,YAAY,aAAa,aAAa,EACnF;CAKA,KAAK,MAAM,SAAS,OAAO,QAAQ,aAAa,KAAK,KAAK,OAAO;CAEjE,IAAI,CAAC,aAAa,MAAM,GAAG;EACzB,aAAa,KAAK,iEAAiE;EACnF,KAAK,MAAM,QAAQ,kBAAkB,MAAM,GAAG,aAAa,KAAK,KAAK,MAAM;EAC3E,aAAa,KAAK,yEAAyE;CAC7F;CAEA,MAAM,YAAY,WAAyB;EACzC,aAAa,KAAK,YAAY,OAAO,gBAAgB;EACrD,QAAQ,KAAK,CAAC;CAChB;CACA,QAAQ,GAAG,gBAAgB,SAAS,QAAQ,CAAC;CAC7C,QAAQ,GAAG,iBAAiB,SAAS,SAAS,CAAC;AACjD;AAEA,KAAK,CAAC,CAAC,OAAO,QAAiB;CAC7B,QAAQ,MAAM,8BAA8B,cAAc,GAAG,GAAG;CAChE,IAAI,QAAQ,IAAI,uBAAuB,eAAe,OAAO,QAAQ,MAAM,IAAI,KAAK;CACpF,QAAQ,KAAK,CAAC;AAChB,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 import { z } from "zod";
 //#region src/config.d.ts
 /**

package/dist/index.js

@@ -1,2 +1,2 @@
-import { A as UPDATES_WS_PATH, B as saveSession, C as buildQuery, D as staticSessionProvider, E as createSessionProvider, F as resolveConfigPath, H as ProtectApiError, I as resolveSessionPath, L as setupInstructions, M as isConfigured, N as loadConfig, O as LOGIN_PATH, P as normalizeBaseUrl, R as clearSession, S as backoffMs, T as createDeviceCache, U as ProtectAuthError, V as NotConfiguredError, W as WritesDisabledError, _ as summarizeNvr, a as registerTools, b as summarizeViewer, c as buildNameIndex, d as summarizeCamera, f as summarizeChime, g as summarizeLiveview, h as summarizeLight, i as createServer, j as expandTilde, k as PRIVATE_API_PATH, l as isoTime, m as summarizeEvent, n as SERVER_VERSION, o as assertSafePath, p as summarizeEach, r as USER_AGENT, s as toEpochMs, t as SERVER_NAME, u as summarizeBootstrap, v as summarizeSensor, w as retryAfterMs, x as ProtectClient, y as summarizeUser, z as loadSession } from "./server-B1wSHfi7.js";
+import { A as UPDATES_WS_PATH, B as saveSession, C as buildQuery, D as staticSessionProvider, E as createSessionProvider, F as resolveConfigPath, H as ProtectApiError, I as resolveSessionPath, L as setupInstructions, M as isConfigured, N as loadConfig, O as LOGIN_PATH, P as normalizeBaseUrl, R as clearSession, S as backoffMs, T as createDeviceCache, U as ProtectAuthError, V as NotConfiguredError, W as WritesDisabledError, _ as summarizeNvr, a as registerTools, b as summarizeViewer, c as buildNameIndex, d as summarizeCamera, f as summarizeChime, g as summarizeLiveview, h as summarizeLight, i as createServer, j as expandTilde, k as PRIVATE_API_PATH, l as isoTime, m as summarizeEvent, n as SERVER_VERSION, o as assertSafePath, p as summarizeEach, r as USER_AGENT, s as toEpochMs, t as SERVER_NAME, u as summarizeBootstrap, v as summarizeSensor, w as retryAfterMs, x as ProtectClient, y as summarizeUser, z as loadSession } from "./server-9inOsyBi.js";
 export { LOGIN_PATH, NotConfiguredError, PRIVATE_API_PATH, ProtectApiError, ProtectAuthError, ProtectClient, SERVER_NAME, SERVER_VERSION, UPDATES_WS_PATH, USER_AGENT, WritesDisabledError, assertSafePath, backoffMs, buildNameIndex, buildQuery, clearSession, createDeviceCache, createServer, createSessionProvider, expandTilde, isConfigured, isoTime, loadConfig, loadSession, normalizeBaseUrl, registerTools, resolveConfigPath, resolveSessionPath, retryAfterMs, saveSession, setupInstructions, staticSessionProvider, summarizeBootstrap, summarizeCamera, summarizeChime, summarizeEach, summarizeEvent, summarizeLight, summarizeLiveview, summarizeNvr, summarizeSensor, summarizeUser, summarizeViewer, toEpochMs };

package/dist/{server-B1wSHfi7.js → server-9inOsyBi.js}

@@ -1,4 +1,4 @@
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 import { readFileSync, statSync } from "node:fs";
 import { chmod, mkdir, readFile, unlink, writeFile } from "node:fs/promises";
 import { dirname, join } from "node:path";
@@ -21,8 +21,8 @@ const pkg = readPackageJson();
 const BUILD_INFO = {
 	name: pkg.name,
 	version: pkg.version,
-	gitCommit: "b29aa8b",
-	gitCommitDate: "2026-08-30T15:19:08+02:00"
+	gitCommit: "b8d2fd6",
+	gitCommitDate: "2026-08-30T21:31:50+02:00"
 };
 //#endregion
 //#region src/client/errors.ts
@@ -1082,34 +1082,60 @@ const registerPrompts = (server) => {
 	server.registerPrompt("who_passed", {
 		title: "Who passed by",
 		description: "Find out who or what was present at a place during a time window, falling back to motion frames on cameras whose detectors are off.",
-		argsSchema: {
-			location: z.string().optional().describe("Place to look at, e.g. \"front\". Omit to search every camera."),
-			start: z.string().describe("Start of the window in the console's local clock, e.g. \"1am\" or \"22:00\"."),
-			end: z.string().describe("End of the window, e.g. \"6am\".")
-		}
-	}, ({ location, start, end }) => text([
-		`Find out who or what passed ${location ? `the ${location}` : "any camera"} between ${start} and ${end}.`,
-		"",
-		"Times are in the console's local zone; `unifi_protect_list_events` accepts them",
-		"directly, so pass them through rather than converting by hand.",
-		"",
-		"1. Search with `unifi_protect_list_events`, types `[\"smartDetectZone\"]` and",
-		`   smartDetectTypes ["person"]${location ? `, location "${location}"` : ""}.`,
-		"2. READ THE `warnings` FIELD BEFORE REPORTING ANYTHING. A camera with person",
-		"   detection disabled contributes zero matches, and zero is NOT evidence that nobody",
-		"   was there. If any warning says a detector is off, you have not answered the",
-		"   question yet — continue to step 3 for those cameras.",
-		"3. For each camera whose detector was off, search the same window again with types",
-		"   `[\"motion\"]` restricted to that camera, then call",
-		"   `unifi_protect_get_event_thumbnails` on the results and LOOK at the frames. This",
-		"   is the only way to tell a person from a branch on such a camera.",
-		"4. Report each sighting with its LOCAL time and camera name, and say how it was",
-		"   established — classified by the camera, or seen by you in a frame. Keep those",
-		"   two apart: one is the console's judgement and one is yours.",
-		"5. Say plainly what was NOT covered: cameras that were offline, not recording, or",
-		"   whose motion zone excludes part of the scene. A thumbnail is the triggering frame",
-		"   only, so someone entering later in a clip does not appear in it."
-	].join("\n")));
+		argsSchema: z.object({ query: z.string().optional().describe("What to look for, in plain language — where and when, as you would say it. QUOTE IT: arguments are split shell-style, so /who_passed \"in front of the house last night\" arrives whole while the same words unquoted arrive as just \"in\". Leave empty for everything in the last 24 hours.") })
+	}, ({ query }) => {
+		const asked = query?.trim();
+		const looksTruncated = asked !== void 0 && asked.length > 0 && !/\s/.test(asked);
+		return text([
+			asked ? `Find out who or what passed, per this question: "${asked}"` : "Find out who or what passed any camera in the last 24 hours.",
+			...looksTruncated ? [
+				"",
+				"STOP — that is a single word, which usually means the question was cut off.",
+				"Slash-command arguments are split shell-style and only the first word reaches",
+				"here, so `who_passed in front of the house last night?` arrives as \"in\".",
+				"Do not answer a fragment. Ask what was meant, and mention that quoting the",
+				"sentence — who_passed \"in front of the house last night?\" — passes it whole."
+			] : [],
+			"",
+			...asked ? [
+				"Interpret that question yourself — it is one sentence of free text, and the",
+				"place and period are in it. Do not pass it to a tool verbatim.",
+				"",
+				"  * The PERIOD: `unifi_protect_list_events` takes local times directly",
+				"    (\"1am\", \"22:00\", \"2h ago\"), read in the console's own time zone, so",
+				"    translate the phrasing into start/end rather than converting by hand.",
+				"    \"This night\" or \"last night\" means roughly 22:00 to 08:00.",
+				"  * The PLACE: read `unifi-protect://locations` for the configured names and",
+				"    pass `location`. If it names nowhere that is configured, look at",
+				"    `unifi_protect_list_cameras`, choose the cameras that plausibly cover it,",
+				"    pass them as `cameraIds`, and SAY which you chose and that it was your",
+				"    inference — the console does not know where anything is.",
+				""
+			] : [
+				"No question was given, so this covers every camera over the last 24 hours. If",
+				"a narrower period or place was meant, say so.",
+				""
+			],
+			"1. Search with `unifi_protect_list_events`, types `[\"smartDetectZone\"]` and",
+			"   smartDetectTypes [\"person\"], over the window and cameras you settled on.",
+			"2. READ THE `warnings` FIELD BEFORE REPORTING ANYTHING. A camera with person",
+			"   detection disabled contributes zero matches, and zero is NOT evidence that nobody",
+			"   was there. If any warning says a detector is off, you have not answered the",
+			"   question yet — continue to step 3 for those cameras.",
+			"3. For each camera whose detector was off, search the same window again with types",
+			"   `[\"motion\"]` restricted to that camera, then call",
+			"   `unifi_protect_get_event_thumbnails` on the results and LOOK at the frames. This",
+			"   is the only way to tell a person from a branch on such a camera.",
+			"4. Report each sighting with its LOCAL time and camera name, and say how it was",
+			"   established — classified by the camera, or seen by you in a frame. Keep those",
+			"   two apart: one is the console's judgement and one is yours.",
+			"5. Say plainly what was NOT covered: cameras that were offline, not recording, or",
+			"   whose motion zone excludes part of the scene. A thumbnail is the triggering frame",
+			"   only, so someone entering later in a clip does not appear in it. The warnings in",
+			"   step 2 describe each camera's setting NOW — if the window reaches back before a",
+			"   recent settings change, a detector may have been off then with nothing to say so."
+		].join("\n"));
+	});
 };
 //#endregion
 //#region src/client/locations.ts
@@ -1734,8 +1760,9 @@ const auditCameras = (cameras, nvr) => {
 };
 const registerAuditTools = (server, client, _ctx) => {
 	server.registerTool("unifi_protect_check_settings", {
+		title: "UniFi Protect: Check Settings",
 		description: "Check every camera and the console for settings that are inconsistent, or that mean the system is not doing what someone believes it is. Finds detectors that look enabled but are gated off, cameras keeping no footage, offline devices, motion detection switched off, and storage about to stop recording. This is the tool for \"are my camera settings correct\" — the checks encode traps that are invisible in the Protect UI, notably a detection zone asking for an object type the device list blocks. Read-only: it reports findings and names the tool that would fix each one, and changes nothing.",
-		inputSchema: {},
+		inputSchema: z.object({}),
 		annotations: { readOnlyHint: true }
 	}, async () => wrap(async () => {
 		const [rawCameras, nvr] = await Promise.all([client.get("cameras"), client.get("nvr")]);
@@ -1770,23 +1797,26 @@ const RECORDING_MODES = [
 const slug = (value) => value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "camera";
 const registerCameraTools = (server, client, ctx) => {
 	server.registerTool("unifi_protect_list_cameras", {
+		title: "UniFi Protect: List Cameras",
 		description: "List every camera on the console with its id, name, connection state, recording mode, firmware and what it can do (PTZ, package camera, smart detection, and which object types it detects). Returns a summary rather than the console's full camera record, which runs to thousands of fields across encoder profiles, zones and feature flags — use unifi_protect_get_camera when you need all of it for one camera.",
-		inputSchema: {},
+		inputSchema: z.object({}),
 		annotations: { readOnlyHint: true }
 	}, async () => wrap(async () => summarizeEach(await client.get("cameras"), summarizeCamera)));
 	server.registerTool("unifi_protect_get_camera", {
+		title: "UniFi Protect: Get Camera",
 		description: "Get one camera's complete record — every setting the console holds, including encoder channels, motion and smart-detection zones, privacy masks, OSD and LED settings, ISP tuning and live statistics. This is large (roughly 8-15 KB of JSON). Prefer unifi_protect_list_cameras unless you specifically need a field it does not carry.",
-		inputSchema: { cameraId: cameraIdArg },
+		inputSchema: z.object({ cameraId: cameraIdArg }),
 		annotations: { readOnlyHint: true }
 	}, async ({ cameraId }) => wrap(() => client.get(`cameras/${encodeURIComponent(cameraId)}`)));
 	server.registerTool("unifi_protect_get_camera_snapshot", {
+		title: "UniFi Protect: Get Camera Snapshot",
 		description: "Capture a still frame from a camera as it looks right now. Writes the JPEG to disk and returns its path, size and content type by default. Set output=\"image\" to get the frame inline instead so a vision model can actually look at it — that costs roughly 300,000 to 700,000 characters of context per call, so choose it deliberately rather than by default. A fresh capture is forced; without that the console can hand back a cached frame that is minutes old.",
-		inputSchema: {
+		inputSchema: z.object({
 			cameraId: cameraIdArg,
 			output: z.enum(["file", "image"]).default("file").describe("Where the frame goes. \"file\" writes it to disk and returns the path — cheap, and you can read the file later if it turns out to matter. \"image\" returns it inline for a model to look at, at a large cost in context."),
 			highQuality: z.boolean().default(false).describe("Request the camera's full resolution rather than a scaled frame. Larger and slower; with output=\"image\" it multiplies an already expensive call."),
 			savePath: z.string().optional().describe("Absolute path to write the JPEG to. Defaults to a timestamped file under UNIFI_PROTECT_SNAPSHOT_DIR. Parent directories are created.")
-		},
+		}),
 		annotations: { readOnlyHint: true }
 	}, async ({ cameraId, output, highQuality, savePath }) => wrapResult(async () => {
 		const { bytes, contentType } = await client.requestBytes(`cameras/${encodeURIComponent(cameraId)}/snapshot`, {
@@ -1817,19 +1847,22 @@ const registerCameraTools = (server, client, ctx) => {
 		});
 	}));
 	server.registerTool("unifi_protect_list_ptz_presets", {
+		title: "UniFi Protect: List PTZ Presets",
 		description: "List a PTZ camera's saved preset positions, with the slot number each one lives at. Only meaningful for cameras reporting hasPtz: true in unifi_protect_list_cameras. There is no tool to MOVE a PTZ camera or run a patrol: those commands exist only on Ubiquiti's official Integration API (a separate X-API-KEY auth this server does not use), not on the private API this server wraps — presets are created and driven from the Protect app itself.",
-		inputSchema: { cameraId: cameraIdArg },
+		inputSchema: z.object({ cameraId: cameraIdArg }),
 		annotations: { readOnlyHint: true }
 	}, async ({ cameraId }) => wrap(() => client.get(`cameras/${encodeURIComponent(cameraId)}/ptz/preset`)));
 	server.registerTool("unifi_protect_list_ptz_patrols", {
+		title: "UniFi Protect: List PTZ Patrols",
 		description: "List a PTZ camera's saved patrol routes. See unifi_protect_list_ptz_presets for why there is no tool to start or stop one.",
-		inputSchema: { cameraId: cameraIdArg },
+		inputSchema: z.object({ cameraId: cameraIdArg }),
 		annotations: { readOnlyHint: true }
 	}, async ({ cameraId }) => wrap(() => client.get(`cameras/${encodeURIComponent(cameraId)}/ptz/patrol`)));
 	if (!ctx.allowWrites) return;
 	server.registerTool("unifi_protect_update_camera", {
+		title: "UniFi Protect: Update Camera",
 		description: "Change a camera's settings in place. Only the fields you pass are sent, and the console merges them — sibling settings inside the same block are preserved, so setting osdDate alone does not clear osdName. Use unifi_protect_set_camera_recording_mode for recording mode alone — it is the setting people mean most often and it is easy to send wrongly here.",
-		inputSchema: {
+		inputSchema: z.object({
 			cameraId: cameraIdArg,
 			name: z.string().min(1).optional().describe("Display name shown throughout Protect."),
 			micVolume: z.number().int().min(0).max(100).optional().describe("Microphone sensitivity, 0-100. 0 mutes the microphone."),
@@ -1837,7 +1870,7 @@ const registerCameraTools = (server, client, ctx) => {
 			statusLedEnabled: z.boolean().optional().describe("Whether the camera's status LED lights up at all."),
 			osdName: z.boolean().optional().describe("Overlay the camera name on the video."),
 			osdDate: z.boolean().optional().describe("Overlay the date and time on the video.")
-		},
+		}),
 		annotations: {
 			readOnlyHint: false,
 			destructiveHint: false,
@@ -1860,13 +1893,14 @@ const registerCameraTools = (server, client, ctx) => {
 		return summarizeCamera(await client.patch(`cameras/${encodeURIComponent(cameraId)}`, body));
 	}));
 	server.registerTool("unifi_protect_set_camera_detections", {
+		title: "UniFi Protect: Set Camera Detections",
 		description: "Turn a camera's smart detections on or off — which objects it looks for (person, vehicle, animal, package) and which sounds it listens for. THIS is the setting that decides whether a person search can ever match: a detection zone may list `person` while the device list omits it, and the console then reports nothing at all, with no error. Pass objectTypes to set the device list, and leave syncZones true so the zones are brought into line rather than left making a promise the device does not keep. Values the camera does not support are rejected by name rather than silently dropped.",
-		inputSchema: {
+		inputSchema: z.object({
 			cameraId: cameraIdArg,
 			objectTypes: z.array(z.enum(GATED_OBJECT_TYPES)).optional().describe("What the camera should detect. This REPLACES the current list, so include everything you want kept. Check the camera's supported types with unifi_protect_list_cameras first; `package` only works on a doorbell's second lens, which the console handles on its own."),
 			audioTypes: z.array(z.string().min(1)).optional().describe("Audio detections to enable, e.g. [\"alrmSmoke\",\"alrmSpeak\"]. Replaces the current list. `alrmSpeak` catches conversation, which is often the only signal on a camera with object detection off."),
 			syncZones: z.boolean().default(true).describe("Also rewrite the detection zones to match objectTypes. Leave this true: a zone asking for a type the device list blocks is the misconfiguration this tool exists to prevent.")
-		},
+		}),
 		annotations: {
 			readOnlyHint: false,
 			destructiveHint: false,
@@ -1910,11 +1944,12 @@ const registerCameraTools = (server, client, ctx) => {
 		};
 	}));
 	server.registerTool("unifi_protect_set_camera_recording_mode", {
+		title: "UniFi Protect: Set Camera Recording Mode",
 		description: "Set what a camera records. `never` stops recording entirely — the camera stays online and streams live, but nothing is written, so there will be no footage to search later. `detections` records only motion and smart detections; `always` records continuously; `schedule` follows the schedule configured in Protect.",
-		inputSchema: {
+		inputSchema: z.object({
 			cameraId: cameraIdArg,
 			mode: z.enum(RECORDING_MODES).describe("Recording mode. `never` means no footage is kept from now on — this is the one worth pausing over.")
-		},
+		}),
 		annotations: {
 			readOnlyHint: false,
 			destructiveHint: false,
@@ -1922,11 +1957,12 @@ const registerCameraTools = (server, client, ctx) => {
 		}
 	}, async ({ cameraId, mode }) => wrap(async () => summarizeCamera(await client.patch(`cameras/${encodeURIComponent(cameraId)}`, { recordingSettings: { mode } }))));
 	server.registerTool("unifi_protect_reboot_camera", {
+		title: "UniFi Protect: Reboot Camera",
 		description: "Reboot a camera. It stops recording and goes offline for roughly a minute, and any footage during that window is lost. Useful for a camera that has stopped responding.",
-		inputSchema: {
+		inputSchema: z.object({
 			cameraId: cameraIdArg,
 			confirm: confirmArg
-		},
+		}),
 		annotations: {
 			readOnlyHint: false,
 			destructiveHint: true,
@@ -1939,34 +1975,39 @@ const registerCameraTools = (server, client, ctx) => {
 const idArg = (kind, listTool) => z.string().min(1).describe(`${kind} id — the \`id\` from ${listTool}.`);
 const registerDeviceTools = (server, client, ctx) => {
 	server.registerTool("unifi_protect_list_lights", {
+		title: "UniFi Protect: List Lights",
 		description: "List UniFi Protect floodlights with their connection state, whether the light is currently on, whether PIR motion is being detected, and brightness.",
-		inputSchema: {},
+		inputSchema: z.object({}),
 		annotations: { readOnlyHint: true }
 	}, async () => wrap(async () => summarizeEach(await client.get("lights"), summarizeLight)));
 	server.registerTool("unifi_protect_list_sensors", {
+		title: "UniFi Protect: List Sensors",
 		description: "List UniFi Protect sensors with their current readings — temperature, humidity, light level — plus open/closed state, motion, and battery percentage. The readings are lifted out of the console's per-metric history arrays, which are far larger than the values themselves.",
-		inputSchema: {},
+		inputSchema: z.object({}),
 		annotations: { readOnlyHint: true }
 	}, async () => wrap(async () => summarizeEach(await client.get("sensors"), summarizeSensor)));
 	server.registerTool("unifi_protect_list_viewers", {
+		title: "UniFi Protect: List Viewers",
 		description: "List UniFi Protect Viewport devices and which live view each is currently displaying.",
-		inputSchema: {},
+		inputSchema: z.object({}),
 		annotations: { readOnlyHint: true }
 	}, async () => wrap(async () => summarizeEach(await client.get("viewers"), summarizeViewer)));
 	server.registerTool("unifi_protect_list_chimes", {
+		title: "UniFi Protect: List Chimes",
 		description: "List UniFi Protect chimes, their volume, and which doorbell cameras each is paired to.",
-		inputSchema: {},
+		inputSchema: z.object({}),
 		annotations: { readOnlyHint: true }
 	}, async () => wrap(async () => summarizeEach(await client.get("chimes"), summarizeChime)));
 	if (!ctx.allowWrites) return;
 	server.registerTool("unifi_protect_update_light", {
+		title: "UniFi Protect: Update Light",
 		description: "Change a floodlight's settings — brightness, whether the light is on, and the PIR sensitivity that decides when it triggers. Only the fields you pass are sent, and the console merges them, so the PIR duration and lux sensitivity you do not pass survive.",
-		inputSchema: {
+		inputSchema: z.object({
 			lightId: idArg("Light", "unifi_protect_list_lights"),
 			isLightOn: z.boolean().optional().describe("Turn the light on or off right now."),
 			ledLevel: z.number().int().min(1).max(6).optional().describe("Brightness, 1 (dimmest) to 6 (brightest)."),
 			pirSensitivity: z.number().int().min(0).max(100).optional().describe("Motion sensitivity, 0-100. Higher triggers on smaller movement.")
-		},
+		}),
 		annotations: {
 			readOnlyHint: false,
 			destructiveHint: false,
@@ -1986,15 +2027,16 @@ const registerDeviceTools = (server, client, ctx) => {
 		return summarizeLight(await client.patch(`lights/${encodeURIComponent(lightId)}`, body));
 	}));
 	server.registerTool("unifi_protect_update_sensor", {
+		title: "UniFi Protect: Update Sensor",
 		description: "Rename a sensor or change which of its capabilities are enabled. Only the fields you pass are sent.",
-		inputSchema: {
+		inputSchema: z.object({
 			sensorId: idArg("Sensor", "unifi_protect_list_sensors"),
 			name: z.string().min(1).optional().describe("Display name for the sensor."),
 			motionEnabled: z.boolean().optional().describe("Whether motion detection reports events."),
 			temperatureEnabled: z.boolean().optional().describe("Whether temperature is reported."),
 			humidityEnabled: z.boolean().optional().describe("Whether humidity is reported."),
 			lightEnabled: z.boolean().optional().describe("Whether the light level is reported.")
-		},
+		}),
 		annotations: {
 			readOnlyHint: false,
 			destructiveHint: false,
@@ -2012,12 +2054,13 @@ const registerDeviceTools = (server, client, ctx) => {
 		return summarizeSensor(await client.patch(`sensors/${encodeURIComponent(sensorId)}`, body));
 	}));
 	server.registerTool("unifi_protect_update_viewer", {
+		title: "UniFi Protect: Update Viewer",
 		description: "Put a saved live view on a Viewport screen, or rename the viewer. The liveview id comes from unifi_protect_list_liveviews — this changes what is displayed on a physical screen, so someone watching will see it switch.",
-		inputSchema: {
+		inputSchema: z.object({
 			viewerId: idArg("Viewer", "unifi_protect_list_viewers"),
 			liveview: z.string().min(1).optional().describe("Live view id from unifi_protect_list_liveviews — the layout to display."),
 			name: z.string().min(1).optional().describe("Display name for the viewer.")
-		},
+		}),
 		annotations: {
 			readOnlyHint: false,
 			destructiveHint: false,
@@ -2032,12 +2075,13 @@ const registerDeviceTools = (server, client, ctx) => {
 		return summarizeViewer(await client.patch(`viewers/${encodeURIComponent(viewerId)}`, body));
 	}));
 	server.registerTool("unifi_protect_update_chime", {
+		title: "UniFi Protect: Update Chime",
 		description: "Change a chime's volume or rename it. Volume 0 silences it, so a doorbell press will make no sound.",
-		inputSchema: {
+		inputSchema: z.object({
 			chimeId: idArg("Chime", "unifi_protect_list_chimes"),
 			volume: z.number().int().min(0).max(100).optional().describe("Volume, 0-100. 0 means the chime stays silent when the doorbell is pressed."),
 			name: z.string().min(1).optional().describe("Display name for the chime.")
-		},
+		}),
 		annotations: {
 			readOnlyHint: false,
 			destructiveHint: false,
@@ -2103,8 +2147,9 @@ const SMART_DETECT_TYPES = [
 ];
 const registerEventTools = (server, client, ctx) => {
 	server.registerTool("unifi_protect_list_events", {
+		title: "UniFi Protect: List Events",
 		description: "Search recorded events over any time range — motion, smart detections (person, vehicle, animal, package, licence plate), doorbell rings, and camera connection changes. This is the tool for questions like \"what happened at the front door last night\". Each result carries its camera's NAME as well as its id, so no second lookup is needed. Times may be given in the console's own local clock (\"1am\"), which is what a question about last night means. READ ANY `warnings` IN THE RESULT BEFORE REPORTING A COUNT: a camera with the detector switched off returns zero matches, which is not the same as nothing having happened, and this tool says which case it is. Narrow with `types`, `smartDetectTypes` and `cameraIds` wherever you can: a busy system logs thousands of motion events a day.",
-		inputSchema: {
+		inputSchema: z.object({
 			start: timeArg("Beginning of the search window."),
 			end: timeArg("End of the search window."),
 			types: z.array(z.enum(EVENT_TYPES)).optional().describe("Event types to include. Defaults to motion, smart detections and rings. `smartDetectZone` is the object-detection type — pair it with smartDetectTypes to ask for people or vehicles specifically."),
@@ -2114,7 +2159,7 @@ const registerEventTools = (server, client, ctx) => {
 			location: z.string().optional().describe("A configured place name, e.g. \"front\". Resolves to the cameras covering it — the console has no idea where anything is, so this comes from UNIFI_PROTECT_LOCATIONS. Read unifi-protect://locations to see what is defined."),
 			limit: limitArg,
 			order: z.enum(["newest", "oldest"]).default("newest").describe("Which end of the window to return first.")
-		},
+		}),
 		annotations: { readOnlyHint: true }
 	}, async ({ start, end, types, smartDetectTypes, cameraId, cameraIds, location, limit, order }) => wrap(async () => {
 		const facts = await ctx.devices.facts();
@@ -2176,17 +2221,19 @@ const registerEventTools = (server, client, ctx) => {
 		};
 	}));
 	server.registerTool("unifi_protect_get_event", {
+		title: "UniFi Protect: Get Event",
 		description: "Get one event's full record, including detection metadata the search results leave out — per-object tracking, detected zones, licence plate text and vehicle attributes where the camera captured them. Use the `id` from unifi_protect_list_events.",
-		inputSchema: { eventId: z.string().min(1).describe("Event id — the `id` from unifi_protect_list_events.") },
+		inputSchema: z.object({ eventId: z.string().min(1).describe("Event id — the `id` from unifi_protect_list_events.") }),
 		annotations: { readOnlyHint: true }
 	}, async ({ eventId }) => wrap(() => client.get(`events/${encodeURIComponent(eventId)}`)));
 	server.registerTool("unifi_protect_get_event_thumbnail", {
+		title: "UniFi Protect: Get Event Thumbnail",
 		description: "Fetch the still image Protect captured for an event — the frame that triggered the detection. Writes it to disk and returns the path by default; set output=\"image\" to return it inline for a vision model to look at, which costs a large amount of context. Pass the event's `id` from unifi_protect_list_events; results showing `hasThumbnail: true` have one.",
-		inputSchema: {
+		inputSchema: z.object({
 			eventId: z.string().min(1).describe("Event id — the `id` from unifi_protect_list_events. Results with `hasThumbnail: true` have an image; others return 404. A raw `e-…` value from the console's own payload is also accepted."),
 			output: z.enum(["file", "image"]).default("file").describe("\"file\" writes it to disk and returns the path; \"image\" returns it inline."),
 			savePath: z.string().optional().describe("Absolute path to write the JPEG to. Defaults to a file under UNIFI_PROTECT_SNAPSHOT_DIR. Parent directories are created.")
-		},
+		}),
 		annotations: { readOnlyHint: true }
 	}, async ({ eventId, output, savePath }) => wrapResult(async () => {
 		const id = eventId.startsWith("e-") ? eventId.slice(2) : eventId;
@@ -2206,11 +2253,12 @@ const registerEventTools = (server, client, ctx) => {
 		});
 	}));
 	server.registerTool("unifi_protect_get_event_thumbnails", {
+		title: "UniFi Protect: Get Event Thumbnails",
 		description: "Fetch the still frames for SEVERAL events at once and return them inline to look at. This is the tool for answering who or what was actually there, and it matters most when a camera has no smart detection: motion events carry no classification, so the only way to tell a person from a branch is to look. Prefer this over calling unifi_protect_get_event_thumbnail repeatedly. Costs roughly 1-2K tokens per image, so it is capped at 6 — pick the events worth seeing from unifi_protect_list_events rather than sweeping a whole night. Events that have no thumbnail are reported by id instead of failing the call.",
-		inputSchema: {
+		inputSchema: z.object({
 			eventIds: z.array(z.string().min(1)).min(1).max(6).describe("Event ids from unifi_protect_list_events, at most 6. Results showing `hasThumbnail: true` have an image."),
 			output: z.enum(["image", "file"]).default("image").describe("\"image\" returns the frames inline for a vision model to look at, which is the point of this tool; \"file\" writes them to disk and returns paths instead.")
-		},
+		}),
 		annotations: { readOnlyHint: true }
 	}, async ({ eventIds, output }) => wrapResult(async () => {
 		const content = [];
@@ -2259,14 +2307,15 @@ const registerEventTools = (server, client, ctx) => {
 		return { content };
 	}));
 	server.registerTool("unifi_protect_export_video", {
+		title: "UniFi Protect: Export Video",
 		description: "Export recorded footage from one camera over a time range as an MP4 file on disk. Always writes to a file and returns the path — video is never returned inline. Size grows quickly with the window: expect tens of megabytes per minute at full quality, and the call fails rather than exhausting memory if the export exceeds UNIFI_PROTECT_MAX_DOWNLOAD_BYTES. Footage only exists if the camera was recording at the time, so check the recording mode before concluding that nothing happened.",
-		inputSchema: {
+		inputSchema: z.object({
 			cameraId: cameraIdArg,
 			start: requiredTimeArg("Beginning of the footage to export."),
 			end: requiredTimeArg("End of the footage to export."),
 			savePath: z.string().optional().describe("Absolute path to write the MP4 to. Defaults to a timestamped file under UNIFI_PROTECT_SNAPSHOT_DIR. Parent directories are created."),
 			channel: z.number().int().min(0).max(3).default(0).describe("Encoder channel: 0 is the high-quality stream, higher numbers are progressively lower bitrate. Use a higher channel to keep a long export manageable.")
-		},
+		}),
 		annotations: { readOnlyHint: true }
 	}, async ({ cameraId, start, end, savePath, channel }) => wrap(async () => {
 		const startMs = toEpochMs(start);
@@ -2318,13 +2367,14 @@ const registerRequestTool = (server, client, allowWrites) => {
 		"DELETE"
 	] : ["GET"];
 	server.registerTool("unifi_protect_request", {
+		title: "UniFi Protect: Request",
 		description: "Escape hatch: call any private Protect API endpoint directly, relative to /proxy/protect/api. This exists because the private API is undocumented and Ubiquiti moves endpoints between Protect releases — when a wrapped tool starts returning 404, this reaches the replacement without waiting for a new version of this server. Responses are returned RAW and unshaped, so a broad endpoint like `bootstrap` can return hundreds of kilobytes; prefer the wrapped tools, which summarize. " + (allowWrites ? "Writes are ENABLED, so POST, PATCH and DELETE are permitted — there is no confirmation step here, so check the path before you call it." : "Writes are DISABLED: only GET is permitted. Set UNIFI_PROTECT_ALLOW_WRITES=1 to allow mutations."),
-		inputSchema: {
+		inputSchema: z.object({
 			path: z.string().min(1).describe("Path relative to /proxy/protect/api, without a leading slash, e.g. \"cameras\", \"nvr\", \"events/abc123\". Not an absolute URL."),
 			method: z.enum(methods).default("GET").describe("HTTP method."),
 			query: z.record(z.string(), z.string()).optional().describe("Query parameters as a flat string map, e.g. {\"start\":\"1756500000000\"}. Remember that Protect times are milliseconds since the epoch."),
 			body: z.record(z.string(), z.unknown()).optional().describe("JSON request body, for POST and PATCH.")
-		},
+		}),
 		annotations: {
 			readOnlyHint: !allowWrites,
 			destructiveHint: allowWrites
@@ -2349,8 +2399,9 @@ const fileMode = (path) => {
 };
 const registerStatusTools = (server, client, ctx) => {
 	server.registerTool("unifi_protect_auth_status", {
+		title: "UniFi Protect: Auth Status",
 		description: "Check whether this server can actually reach your UniFi Protect console. By default it logs in and makes a real call, so the answer reflects the console rather than cached state — this is the tool to run when something is not working. Reports the host, the account, the Protect version, whether TLS is verified, and whether writes are enabled; when nothing is configured it returns the exact setup steps instead. Call this first when a tool you expected is not listed: an absent tool means missing configuration or writes being off, not a bug.",
-		inputSchema: { probe: z.boolean().default(true).describe("Actually contact the console (logging in if needed) rather than only reporting what is already cached. Set false for a fast, purely local answer.") },
+		inputSchema: z.object({ probe: z.boolean().default(true).describe("Actually contact the console (logging in if needed) rather than only reporting what is already cached. Set false for a fast, purely local answer.") }),
 		annotations: { readOnlyHint: true }
 	}, async ({ probe }) => wrap(async () => {
 		if (!isConfigured(ctx.config)) return {
@@ -2408,8 +2459,9 @@ const registerStatusTools = (server, client, ctx) => {
 	}));
 	if (!isConfigured(ctx.config) || ctx.config.mode === "cloud") return;
 	server.registerTool("unifi_protect_auth_login", {
+		title: "UniFi Protect: Auth Login",
 		description: "Force a fresh login to the console, replacing any cached session. Normally unnecessary — the server logs in on demand and re-authenticates automatically on a 401. Use it to supply a two-factor code, which cannot be done unattended: the code is single-use and expires in about 30 seconds, so it is passed here once and the resulting session is then cached and reused.",
-		inputSchema: { totp: z.string().regex(/^\d{6,8}$/, "A two-factor code is 6 to 8 digits.").optional().describe("Current code from your authenticator app. Omit if the account has no 2FA.") },
+		inputSchema: z.object({ totp: z.string().regex(/^\d{6,8}$/, "A two-factor code is 6 to 8 digits.").optional().describe("Current code from your authenticator app. Omit if the account has no 2FA.") }),
 		annotations: {
 			readOnlyHint: false,
 			destructiveHint: false,
@@ -2426,8 +2478,9 @@ const registerStatusTools = (server, client, ctx) => {
 		};
 	}));
 	server.registerTool("unifi_protect_auth_logout", {
+		title: "UniFi Protect: Auth Logout",
 		description: "Drop the cached session and delete the session file. The next call logs in again from the configured username and password, so this does not lock anything out — use it to clear a session after changing accounts, or to remove the cookie from disk.",
-		inputSchema: { confirm: confirmArg },
+		inputSchema: z.object({ confirm: confirmArg }),
 		annotations: {
 			readOnlyHint: false,
 			destructiveHint: true,
@@ -2445,28 +2498,32 @@ const registerStatusTools = (server, client, ctx) => {
 //#region src/tools/system.ts
 const registerSystemTools = (server, client, ctx) => {
 	server.registerTool("unifi_protect_get_system_info", {
+		title: "UniFi Protect: Get System Info",
 		description: "Overview of the console: model, Protect version, firmware, timezone, uptime, storage use and how many devices of each type are adopted. Worth calling first on an unfamiliar system. The reported Protect version matters: this server talks to Protect's private API, which Ubiquiti changes between releases, so a version that differs from the one in the README is the first thing to check if a tool starts returning 404.",
-		inputSchema: {},
+		inputSchema: z.object({}),
 		annotations: { readOnlyHint: true }
 	}, async () => wrap(async () => summarizeBootstrap(await client.get("bootstrap"))));
 	server.registerTool("unifi_protect_list_users", {
+		title: "UniFi Protect: List Users",
 		description: "List the accounts that can sign in to Protect, with their role and last login. Useful for auditing who has access to the cameras.",
-		inputSchema: {},
+		inputSchema: z.object({}),
 		annotations: { readOnlyHint: true }
 	}, async () => wrap(async () => summarizeEach(await client.get("users"), summarizeUser)));
 	server.registerTool("unifi_protect_list_liveviews", {
+		title: "UniFi Protect: List Liveviews",
 		description: "List the saved live views — the named camera grid layouts shown on viewers and in the Protect app. The returned id is what unifi_protect_update_viewer needs to put a layout on a screen.",
-		inputSchema: {},
+		inputSchema: z.object({}),
 		annotations: { readOnlyHint: true }
 	}, async () => wrap(async () => summarizeEach(await client.get("liveviews"), summarizeLiveview)));
 	if (!ctx.allowWrites) return;
 	server.registerTool("unifi_protect_update_nvr_settings", {
+		title: "UniFi Protect: Update NVR Settings",
 		description: "Change console-wide settings. `isRecordingDisabled` is the significant one: turning it on stops recording on EVERY camera at once, so nothing is written until it is turned back off. Only the fields you pass are sent.",
-		inputSchema: {
+		inputSchema: z.object({
 			name: z.string().min(1).optional().describe("Display name for the console."),
 			timezone: z.string().min(1).optional().describe("IANA timezone, e.g. \"Europe/Paris\". Affects event timestamps and schedules."),
 			isRecordingDisabled: z.boolean().optional().describe("Disable recording across every camera. True means no footage is kept, system-wide.")
-		},
+		}),
 		annotations: {
 			readOnlyHint: false,
 			destructiveHint: false,
@@ -2482,8 +2539,9 @@ const registerSystemTools = (server, client, ctx) => {
 		return client.patch("nvr", body);
 	}));
 	server.registerTool("unifi_protect_reboot_nvr", {
+		title: "UniFi Protect: Reboot NVR",
 		description: "REBOOT THE CONSOLE. Every camera stops recording for the two to five minutes it takes to come back, and footage from that window is lost permanently. This also drops the network if the console is your router (a UDM or UDM Pro), taking down everything behind it. Reboot a single unresponsive camera with unifi_protect_reboot_camera instead wherever that would do.",
-		inputSchema: { confirm: confirmArg },
+		inputSchema: z.object({ confirm: confirmArg }),
 		annotations: {
 			readOnlyHint: false,
 			destructiveHint: true,
@@ -2569,4 +2627,4 @@ const createServer = (opts) => {
 //#endregion
 export { UPDATES_WS_PATH as A, saveSession as B, buildQuery as C, staticSessionProvider as D, createSessionProvider as E, resolveConfigPath as F, BUILD_INFO as G, ProtectApiError as H, resolveSessionPath as I, setupInstructions as L, isConfigured as M, loadConfig as N, LOGIN_PATH as O, normalizeBaseUrl as P, clearSession as R, backoffMs as S, createDeviceCache as T, ProtectAuthError as U, NotConfiguredError as V, WritesDisabledError as W, summarizeNvr as _, registerTools as a, summarizeViewer as b, buildNameIndex as c, summarizeCamera as d, summarizeChime as f, summarizeLiveview as g, summarizeLight as h, createServer as i, expandTilde as j, PRIVATE_API_PATH as k, isoTime as l, summarizeEvent as m, SERVER_VERSION as n, assertSafePath as o, summarizeEach as p, USER_AGENT as r, toEpochMs as s, SERVER_NAME as t, summarizeBootstrap as u, summarizeSensor as v, retryAfterMs as w, ProtectClient as x, summarizeUser as y, loadSession as z };
 
-//# sourceMappingURL=server-B1wSHfi7.js.map
+//# sourceMappingURL=server-9inOsyBi.js.map