@oss-scout/mcp 0.10.0 → 0.10.2

package/dist/tools.js

@@ -16,6 +16,12 @@ const PERSIST_WARNING = "Checkpoint failed: changes were applied in memory but c
 function withPersistWarning(payload, persisted) {
     return persisted ? payload : { ...payload, persistWarning: PERSIST_WARNING };
 }
+/**
+ * Rejects when `ms` elapses, but does NOT cancel the underlying work — the
+ * scout call keeps running (consuming API budget and mutating scout state)
+ * after the tool has returned its timeout error. Acceptable for a local
+ * stdio server; revisit with AbortSignal threading if it ever matters (#295).
+ */
 function withTimeout(promise, ms = TOOL_TIMEOUT_MS) {
     let timeoutId;
     const timer = new Promise((_, reject) => {
@@ -27,8 +33,14 @@ export function registerTools(server, scout) {
     server.tool("search", "Search for open source issues matching your preferences", {
         maxResults: z
             .number()
+            .int()
+            .min(1)
+            // 100, not 50: the CLI's search count is unbounded, so a tight MCP
+            // cap made the two surfaces disagree for 1.5.0 clients while still
+            // needing SOME ceiling against absurd values (#317).
+            .max(100)
             .optional()
-            .describe("Maximum number of results to return (default 10)"),
+            .describe("Maximum number of results to return (1-100, default 10)"),
         strategies: z
             .string()
             .optional()
@@ -57,10 +69,17 @@ export function registerTools(server, scout) {
             .describe("Diversity counterweight (#1244): fraction of result slots reserved for candidates that matched NEITHER preference list. Counters echo-chamber bias when boosts accumulate over time. 0 disables, 1 reserves every slot for diversity. Default 0."),
     }, async ({ maxResults, strategies, preferLanguages, preferRepos, avoidRepos, boostIssueTypes, diversityRatio, }) => {
         try {
+            // Validate each CSV entry with a readable error instead of letting a
+            // raw ZodError string reach the model (#295).
             const parsedStrategies = strategies
-                ? strategies
-                    .split(",")
-                    .map((s) => SearchStrategySchema.parse(s.trim()))
+                ? strategies.split(",").map((s) => {
+                    const trimmed = s.trim();
+                    const parsed = SearchStrategySchema.safeParse(trimmed);
+                    if (!parsed.success) {
+                        throw new Error(`Invalid strategy "${trimmed}". Valid strategies: ${SearchStrategySchema.options.join(", ")}`);
+                    }
+                    return parsed.data;
+                })
                 : undefined;
             const result = await withTimeout(scout.search({
                 maxResults: maxResults ?? 10,
@@ -97,8 +116,11 @@ export function registerTools(server, scout) {
     server.tool("scout-features", "Surface feature-scoped contribution opportunities in repos where you have 3+ merged PRs", {
         maxResults: z
             .number()
+            .int()
+            .min(1)
+            .max(50)
             .optional()
-            .describe("Maximum number of results to return (default 10)"),
+            .describe("Maximum number of results to return (1-50, default 10)"),
         anchorThreshold: z
             .number()
             .int()
@@ -225,6 +247,9 @@ export function registerTools(server, scout) {
                 };
             }
             if (action === "remove") {
+                // Deliberately no URL validation, matching the CLI's runSkipRemove:
+                // entries stored before skip-add validation existed may be junk,
+                // and exact-match removal is the only way to clean them up.
                 const wasPresent = scout
                     .getSkippedIssues()
                     .some((s) => s.url === issueUrl);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oss-scout/mcp",
-  "version": "0.10.0",
+  "version": "0.10.2",
   "description": "MCP server for oss-scout — exposes issue discovery and vetting as MCP tools",
   "type": "module",
   "bin": {
@@ -8,8 +8,8 @@
   },
   "exports": {
     ".": {
-      "import": "./dist/index.js",
-      "types": "./dist/index.d.ts"
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
     }
   },
   "files": [
@@ -18,7 +18,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.27.1",
     "zod": "^4.3.6",
-    "@oss-scout/core": "^1.1.0"
+    "@oss-scout/core": "^1.5.2"
   },
   "devDependencies": {
     "@types/node": "^25.5.0",