@nooticr/mcp 1.26.24 → 1.26.25

package/dist/shared/output-schemas.js

@@ -18,6 +18,49 @@
 import { z } from "zod";
 /** Loose by construction: see the note above. */
 const open = (shape) => z.object(shape).passthrough();
+/**
+ * A union branch that renders as its own `type`, instead of being folded into
+ * a `type` array with its siblings.
+ *
+ * `z.union([z.string(), z.number(), z.boolean()])` renders as
+ * `{ type: ["string", "number", "boolean"] }`. That is legal JSON Schema and
+ * the wrong thing to send: a client that reads `type` as a single string
+ * either rejects the tool or drops the constraint, and both failures are
+ * invisible from here — a rejected tool just stops appearing in `tools/list`,
+ * with no error this repo would ever see. The whole surface emitted 1,286 of
+ * them, from this helper and `listOf` alone.
+ *
+ * The fold happens in zod-to-json-schema's union parser, which collapses a
+ * union whose every member is a bare primitive carrying no checks. There are
+ * only two ways out, and only one of them is free:
+ *
+ *   - Give a member a check. `z.number().finite()` renders as plain
+ *     `{ type: "number" }` and defeats the fold, but it also stops accepting
+ *     `Infinity` — which a ratio-to-baseline division by a zero median really
+ *     does produce, and which this file exists to keep from turning a working
+ *     call into a hard failure. Rejected for that reason, not on taste.
+ *   - Give a member a wrapper whose type name is not a primitive.
+ *     `.readonly()` is the one that costs nothing: on a primitive it is a
+ *     runtime no-op (`Object.freeze` of a string is that string), the parsed
+ *     value is discarded by the SDK's output validation anyway, and
+ *     `Readonly<string>` is `string`, so nothing downstream sees a new type.
+ *     It also happens to be true — these are output schemas.
+ *
+ * So the wrapper is load-bearing and is not about readonly-ness. Removing it
+ * silently reintroduces all 1,286, which is what
+ * `tests/output-schema-shape.test.ts` is there to catch.
+ */
+const oneType = (branch) => branch.readonly();
+/**
+ * "This type, or null" — as `anyOf`, not as a two-element `type` array.
+ *
+ * `z.number().nullish()` renders as `{ type: ["number", "null"] }`, which is
+ * the same portability problem as `scalar()` in miniature. The three inline
+ * output schemas in `watchlist.ts` contributed 5 of the 1,286 this way, and
+ * they are the reason this is exported rather than kept private: a tool that
+ * declares its schema inline should not have to re-derive why.
+ */
+export const orNull = (inner) => z.union([oneType(inner), z.null()]).optional();
 /**
  * One scalar type for every leaf, and it accepts null.
  *
@@ -33,10 +76,15 @@ const open = (shape) => z.object(shape).passthrough();
  * agent needs from this file is which keys exist and what they mean. So the
  * keys and their descriptions are the contract, and the types are deliberately
  * as wide as the data can be.
+ *
+ * Which is why the branches are wrapped in `oneType()` and null is a member of
+ * the union rather than a `.nullish()` around it. Both exist to control the
+ * JSON Schema this renders as, and neither changes what the schema accepts —
+ * see `oneType` below.
  */
-const scalar = () => z.union([z.string(), z.number(), z.boolean()]).nullish();
+const scalar = () => z.union([oneType(z.string()), oneType(z.number()), oneType(z.boolean()), z.null()]).optional();
 /** Same reasoning for lists: a null list, and a null element, must both pass. */
-const listOf = (item) => z.array(z.union([item, z.null()])).nullish();
+const listOf = (item) => z.array(z.union([oneType(item), z.null()])).nullish();
 /**
  * A list whose elements are not one shape — themes, fixes, failures.
  *
@@ -49,6 +97,23 @@ const listOf = (item) => z.array(z.union([item, z.null()])).nullish();
  * empty schema in item position, which accepts anything, which is the point.
  */
 const anyList = () => z.array(z.any()).nullish();
+/**
+ * "An object whose contents we are not constraining" — for input schemas.
+ *
+ * Exported from a file about output schemas because the concern is the same
+ * one documented above: what a zod type renders as on the wire. The natural
+ * spelling, `z.record(z.unknown())`, renders as
+ * `{ type: "object", additionalProperties: {} }`, and that `{}` carries no
+ * validation keyword at all — the object-literal spelling of a bare `true`,
+ * which reads to a strict client as an unvalidated schema rather than a
+ * deliberately open one. `z.object({}).passthrough()` accepts exactly the same
+ * values and says `additionalProperties: true`, which is the same permission
+ * stated in a keyword rather than by omission.
+ *
+ * The array counterpart needs no helper: `z.array(z.unknown())` emits
+ * `items: {}` for the same reason, and `z.array(z.any())` simply omits `items`.
+ */
+export const anyObject = () => z.object({}).passthrough();
 /** Every paid tool reports what it charged. */
 const mcpCredits = open({
     cost: scalar().describe("Credits this call consumed."),

package/dist/shared/own-account.js

@@ -411,7 +411,7 @@ export function registerOwnAccountTools(server, makeClient) {
             caption: z.string().optional(),
             contentType: z.string().optional(),
             thumbnailUrl: z.string().optional().describe("Looked at by the reviewer when given."),
-            mediaItems: z.array(z.unknown()).optional(),
+            mediaItems: z.array(z.any()).optional(),
             platform: z.string().optional(),
             influencerId: z.number().int().optional(),
         })

package/dist/shared/tools-def.js

@@ -160,13 +160,13 @@ export const TOOL_DEFINITIONS = [
         name: "show_comparison",
         title: "Show Comparison",
         description: "Display a comparison you wrote after compare_posts fetched the first post and you fetched the rest yourself. Free, and makes no requests — it only draws what you pass it: each post with a BEST badge on the winner, what differed, shared strengths and the next experiment worth running. Call this after you have done the comparing, not instead of it.",
-        inputSchema: z.object({ posts: z.array(z.record(z.unknown())).min(2).max(5), winner: z.number().int(), winnerReason: z.string().optional(), differences: z.array(z.object({ factor: z.string(), detail: z.string() })).optional(), lessons: z.array(z.string()).optional(), nextTest: z.string().optional() }).strict(),
+        inputSchema: z.object({ posts: z.array(z.object({}).passthrough()).min(2).max(5), winner: z.number().int(), winnerReason: z.string().optional(), differences: z.array(z.object({ factor: z.string(), detail: z.string() })).optional(), lessons: z.array(z.string()).optional(), nextTest: z.string().optional() }).strict(),
     },
     {
         name: "show_analysis",
         title: "Show Analysis",
         description: "Display an analysis you wrote after analyze_post, analyze_post_fast or understand_social_post handed you the material. Free, and makes no requests — it only draws what you pass it: hook strength, script structure, quotable lines, hashtags, target audience, viral triggers and more, whichever of these you actually produced. Call this after you have done the analysing, not instead of it.",
-        inputSchema: z.object({ url: z.string(), post: z.record(z.unknown()).optional(), analysis: z.record(z.unknown()) }).strict(),
+        inputSchema: z.object({ url: z.string(), post: z.object({}).passthrough().optional(), analysis: z.object({}).passthrough() }).strict(),
     },
     {
         name: "show_hooks",
@@ -178,7 +178,7 @@ export const TOOL_DEFINITIONS = [
         name: "show_variants",
         title: "Show Variants",
         description: "Display the post variants you wrote after create_variants handed you the original post's material. Free, and makes no requests — it only draws what you pass it: each variant's hook, the angle that changes, its shot beats and its call to action. Call this after you have written the variants, not instead of writing them.",
-        inputSchema: z.object({ sourceUrl: z.string(), post: z.record(z.unknown()).optional(), variants: z.array(z.object({ title: z.string(), hook: z.string(), angle: z.string().optional(), beats: z.array(z.string()).optional(), cta: z.string().optional(), whyItCouldWork: z.string().optional() })).min(1) }).strict(),
+        inputSchema: z.object({ sourceUrl: z.string(), post: z.object({}).passthrough().optional(), variants: z.array(z.object({ title: z.string(), hook: z.string(), angle: z.string().optional(), beats: z.array(z.string()).optional(), cta: z.string().optional(), whyItCouldWork: z.string().optional() })).min(1) }).strict(),
     },
     {
         name: "show_repurposed_post",
@@ -292,7 +292,7 @@ export const TOOL_DEFINITIONS = [
         name: "review_post",
         title: "Review Post",
         description: "Score a post before you publish it: hook strength, an optional A-vs-B hook comparison, aesthetic and storytelling notes, and rewritten hook/caption suggestions. Pass postId for something already in your pipeline, or appId plus draft fields otherwise. Nothing is published. Free — nothing is billed for this, same as the dashboard's own pre-publish review.",
-        inputSchema: z.object({ postId: z.number().int().optional(), appId: z.number().int().optional(), title: z.string().optional(), titleB: z.string().optional(), caption: z.string().optional(), contentType: z.string().optional(), thumbnailUrl: z.string().optional(), mediaItems: z.array(z.unknown()).optional(), platform: z.string().optional(), influencerId: z.number().int().optional() }).strict(),
+        inputSchema: z.object({ postId: z.number().int().optional(), appId: z.number().int().optional(), title: z.string().optional(), titleB: z.string().optional(), caption: z.string().optional(), contentType: z.string().optional(), thumbnailUrl: z.string().optional(), mediaItems: z.array(z.any()).optional(), platform: z.string().optional(), influencerId: z.number().int().optional() }).strict(),
     },
     {
         name: "draft_post",

package/dist/shared/tools.js

@@ -10,7 +10,7 @@ import { z } from "zod";
 import { NooticrError } from "./nooticr.js";
 import { NOOTICR_UI_TEMPLATE } from "./ui-template.js";
 import { registerPrompts } from "./prompts.js";
-import { OUTPUT_SCHEMAS } from "./output-schemas.js";
+import { OUTPUT_SCHEMAS, anyObject } from "./output-schemas.js";
 import { createTaskStore, registerSlowTool } from "./tasks.js";
 import { COMMENT_CATEGORIES, COMMENT_SENTIMENTS, platformFromUrl, reviewGuidance, toEvidence, } from "./comment-review.js";
 import { costSentence, EVIDENCE_PLANS, fetchBillingNote, frameIndex, framesToBlocks, planCalls, scoreDraftGuidance, } from "./evidence.js";
@@ -24,7 +24,7 @@ import { loadingPlansJson } from "./loading-plans.js";
 import { registerHandoff } from "./handoff.js";
 import { registerCollabTools } from "./collab.js";
 /** Current MCP server version — bumped on every deploy for traceability. */
-export const MCP_SERVER_VERSION = "1.26.24";
+export const MCP_SERVER_VERSION = "1.26.25";
 /** MCP Apps extension identifier */
 const UI_EXTENSION = "io.modelcontextprotocol/ui";
 /** MIME type for MCP Apps HTML resources */
@@ -1350,7 +1350,7 @@ export function createMcpServer(rawMakeClient, opts) {
         inputSchema: z
             .object({
             posts: z
-                .array(z.record(z.unknown()))
+                .array(anyObject())
                 .min(2)
                 .max(5)
                 .describe("The 2-5 posts compared, in the order you compared them — the same shape get_social_media " +
@@ -1403,12 +1403,10 @@ export function createMcpServer(rawMakeClient, opts) {
         inputSchema: z
             .object({
             url: z.string().describe("The post you analyzed."),
-            post: z
-                .record(z.unknown())
+            post: anyObject()
                 .optional()
                 .describe("The post object analyze_post/analyze_post_fast/understand_social_post handed you, unchanged."),
-            analysis: z
-                .record(z.unknown())
+            analysis: anyObject()
                 .describe("Your own analysis. Any of: summary, hookStrength (1-10), commentBaitLevel (1-10), " +
                 "scriptStructure {hook,buildUp,payoff,cta}, whyItWorks, suggestedHook, keyQuotes[], " +
                 "suggestedHashtags[], targetAudience, viralTriggers[], negativeSignals[], variationIdeas[], " +
@@ -1480,7 +1478,7 @@ export function createMcpServer(rawMakeClient, opts) {
         inputSchema: z
             .object({
             sourceUrl: z.string().describe("The post these variants riff on."),
-            post: z.record(z.unknown()).optional().describe("The post object create_variants handed you, unchanged."),
+            post: anyObject().optional().describe("The post object create_variants handed you, unchanged."),
             variants: z
                 .array(z.object({
                 title: z.string().describe("A short label for this variant."),

package/dist/shared/watchlist.js

@@ -46,6 +46,7 @@
 import { z } from "zod";
 import { confirmSpend, declinedResult, CREDITS_PER_CREATOR } from "./spend.js";
 import { PLATFORM_ARG } from "./evidence.js";
+import { orNull } from "./output-schemas.js";
 export const WATCHLIST_URI = "nooticr://watchlist";
 /** Default, and what the tests use. Fine for a single process. */
 export class MemoryWatchStore {
@@ -455,8 +456,8 @@ export function registerWatchlist(server, makeClient, store) {
             .strict(),
         outputSchema: z
             .object({
-            watching: z.number().nullish(),
-            added: z.string().nullish(),
+            watching: orNull(z.number()),
+            added: orNull(z.string()),
             entries: z.array(z.union([z.object({}).passthrough(), z.null()])).nullish(),
         })
             .passthrough(),
@@ -491,8 +492,8 @@ export function registerWatchlist(server, makeClient, store) {
             .strict(),
         outputSchema: z
             .object({
-            removed: z.boolean().nullish(),
-            watching: z.number().nullish(),
+            removed: orNull(z.boolean()),
+            watching: orNull(z.number()),
             entries: z.array(z.union([z.object({}).passthrough(), z.null()])).nullish(),
         })
             .passthrough(),
@@ -525,7 +526,7 @@ export function registerWatchlist(server, makeClient, store) {
             .strict(),
         outputSchema: z
             .object({
-            checked: z.number().nullish(),
+            checked: orNull(z.number()),
             creators: z.array(z.union([z.object({}).passthrough(), z.null()])).nullish(),
             posts: z.array(z.union([z.object({}).passthrough(), z.null()])).nullish().describe("Everything new, flattened, for the card view."),
             mcpCredits: z.object({}).passthrough().nullish(),

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nooticr/mcp",
   "mcpName": "com.nooticr/mcp",
-  "version": "1.26.24",
+  "version": "1.26.25",
   "description": "MCP server for nooticr - fetch, discover and understand TikTok/Instagram/YouTube/X/Reddit/LinkedIn/Weibo posts with AI (media metadata, niche discovery, brand monitoring, hook & viral analysis)",
   "type": "module",
   "main": "dist/index.js",