@pairsystems/goodmem-mcp 0.1.4 → 0.1.6

package/dist/index.js

@@ -20988,6 +20988,7 @@ var StdioServerTransport = class {
 // dist/index.js
 var goodmemBaseUrl = process.env.GOODMEM_BASE_URL || "";
 var goodmemApiKey = process.env.GOODMEM_API_KEY || "";
+var BASED_ON_GOODMEM_COMMIT = "55768baed550c339bff8ef3893a8e9a024facc90";
 function isConfigured() {
   return goodmemBaseUrl !== "" && goodmemApiKey !== "";
 }
@@ -21049,7 +21050,7 @@ async function callApiNdjson(method, path, body, query) {
     throw new Error(`GoodMem API error ${resp.status}: ${text2}`);
   }
   const text = await resp.text();
-  return text.split("\n").filter(Boolean).map((line) => JSON.parse(line));
+  return text.split("\n").map((line) => line.trim()).filter(Boolean).map((line) => JSON.parse(line));
 }
 var MODEL_REGISTRY = {
   "embedders": {
@@ -21919,7 +21920,7 @@ function autoInferFromRegistry(registryType, args) {
 }
 var server = new McpServer({
   name: "goodmem",
-  version: "0.1.4"
+  version: "0.1.6"
 });
 server.tool("goodmem_configure", "Configure GoodMem server connection. Call this before using other GoodMem tools if GOODMEM_BASE_URL and GOODMEM_API_KEY environment variables are not set. Session credentials override environment variables.", {
   base_url: external_exports.string().describe("GoodMem server URL (e.g., https://your-server.example.com)"),
@@ -21928,22 +21929,22 @@ server.tool("goodmem_configure", "Configure GoodMem server connection. Call this
   if (!/^https?:\/\//i.test(args.base_url)) {
     return { content: [{ type: "text", text: `base_url must include a scheme (e.g., http://${args.base_url} or https://${args.base_url}).` }] };
   }
-  goodmemBaseUrl = args.base_url;
-  goodmemApiKey = args.api_key;
   try {
-    const url = new URL("/v1/system/info", goodmemBaseUrl);
+    const url = new URL("/v1/system/info", args.base_url);
     const resp = await fetch(url.toString(), {
-      headers: { "x-api-key": goodmemApiKey },
+      headers: { "x-api-key": args.api_key },
       signal: AbortSignal.timeout(1e4)
     });
     if (!resp.ok) {
       const text = await resp.text();
-      return { content: [{ type: "text", text: `Credentials saved but server returned error ${resp.status}: ${text}. Check your base_url and api_key.` }] };
+      return { content: [{ type: "text", text: `Connection failed (${resp.status}): ${text}. Credentials were NOT saved. Check your base_url and api_key.` }] };
     }
+    goodmemBaseUrl = args.base_url;
+    goodmemApiKey = args.api_key;
     const info = await resp.json();
     return { content: [{ type: "text", text: `Connected to GoodMem at ${goodmemBaseUrl}. Server version: ${info.version ?? "unknown"}.` }] };
   } catch (err) {
-    return { content: [{ type: "text", text: `Credentials saved but could not connect to ${goodmemBaseUrl}: ${err}. Check your base_url.` }] };
+    return { content: [{ type: "text", text: `Could not connect to ${args.base_url}: ${err}. Credentials were NOT saved. Check your base_url.` }] };
   }
 });
 server.tool("goodmem_lookup_model", "Look up a model in the registry to see its provider, endpoint, dimensions, and other auto-inferred fields. Use this to check what models are available before creating an embedder, LLM, or reranker.", {
@@ -21967,6 +21968,12 @@ server.tool("goodmem_lookup_model", "Look up a model in the registry to see its
   return { content: [{ type: "text", text: `Model "${args.model_identifier}" not found in registry. Available models:
 ${allModels.join("\n")}` }] };
 });
+server.tool("goodmem_client_info", "Return the MCP client package version and the goodmem server commit it was built against. No server connection required.", {}, async () => {
+  return { content: [{ type: "text", text: JSON.stringify({
+    mcpVersion: "0.1.6",
+    basedOnGoodmemCommit: BASED_ON_GOODMEM_COMMIT
+  }, null, 2) }] };
+});
 function registerTools() {
   server.tool("goodmem_admin_background_jobs_purge", "Purge completed background jobs", {
     older_than: external_exports.string().describe("ISO-8601 timestamp cutoff; only terminal jobs older than this instant are eligible.").optional(),
@@ -22006,7 +22013,7 @@ function registerTools() {
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
   });
   server.tool("goodmem_apikeys_create", "Create a new API key", {
-    labels: external_exports.record(external_exports.string(), external_exports.string()).describe("Key-value pairs of metadata associated with the API key. Used for organization and filtering.").optional(),
+    labels: external_exports.any().describe("Key-value pairs of metadata associated with the API key. Used for organization and filtering.").optional(),
     expires_at: external_exports.number().int().describe("Expiration timestamp in milliseconds since epoch. If not provided, the key does not expire.").optional(),
     api_key_id: external_exports.string().describe("Optional client-provided UUID for idempotent creation. If not provided, server generates a new UUID. Returns ALREADY_EXISTS if ID is already in use.").optional()
   }, async (args) => {
@@ -22021,7 +22028,7 @@ function registerTools() {
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
   });
   server.tool("goodmem_apikeys_delete", "Delete an API key", {
-    id: external_exports.string().describe("The unique identifier of the API key to delete")
+    id: external_exports.string().describe("The UUID of the API key to delete")
   }, async (args) => {
     await callApi("DELETE", `/v1/apikeys/${encodeURIComponent(String(args.id))}`, void 0);
     return { content: [{ type: "text", text: "Deleted successfully." }] };
@@ -22031,10 +22038,10 @@ function registerTools() {
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
   });
   server.tool("goodmem_apikeys_update", "Update an API key", {
-    id: external_exports.string().describe("The unique identifier of the API key to update"),
+    id: external_exports.string().describe("The UUID of the API key to update"),
     status: external_exports.string().describe("New status for the API key. Allowed values: ACTIVE, INACTIVE.").optional(),
-    replace_labels: external_exports.record(external_exports.string(), external_exports.string()).describe("Replace all existing labels with this set. Mutually exclusive with mergeLabels.").optional(),
-    merge_labels: external_exports.record(external_exports.string(), external_exports.string()).describe("Merge these labels with existing ones. Mutually exclusive with replaceLabels.").optional()
+    replace_labels: external_exports.any().describe("Replace all existing labels with this set. Mutually exclusive with mergeLabels.").optional(),
+    merge_labels: external_exports.any().describe("Merge these labels with existing ones. Mutually exclusive with replaceLabels.").optional()
   }, async (args) => {
     const body = {};
     if (args.status !== void 0)
@@ -22059,11 +22066,22 @@ function registerTools() {
     supported_modalities: external_exports.array(external_exports.enum(["TEXT", "IMAGE", "AUDIO", "VIDEO"])).describe("Supported content modalities (defaults to TEXT if not provided) (auto-inferred from model_identifier if omitted)").optional(),
     credentials: external_exports.object({
       kind: external_exports.enum(["CREDENTIAL_KIND_UNSPECIFIED", "CREDENTIAL_KIND_API_KEY", "CREDENTIAL_KIND_GCP_ADC"]).describe("Selected credential strategy"),
-      apiKey: external_exports.any().describe("Configuration when kind is CREDENTIAL_KIND_API_KEY").optional(),
-      gcpAdc: external_exports.any().describe("Configuration when kind is CREDENTIAL_KIND_GCP_ADC").optional(),
+      apiKey: external_exports.object({
+        inlineSecret: external_exports.string().describe("Secret stored directly in GoodMem (mutually exclusive with secretRef)").optional(),
+        secretRef: external_exports.object({
+          uri: external_exports.string().describe("URI identifying where the secret can be resolved (e.g., vault://, env://)"),
+          hints: external_exports.record(external_exports.string(), external_exports.unknown()).describe('Optional metadata to help resolvers decode the secret (e.g., {"encoding":"base64"})').optional()
+        }).passthrough().describe("Reference to an external secret manager entry (mutually exclusive with inlineSecret)").optional(),
+        headerName: external_exports.string().describe("Desired HTTP header to carry the credential (defaults to Authorization)").optional(),
+        prefix: external_exports.string().describe('Optional prefix prepended to the secret (e.g., "Bearer ")').optional()
+      }).passthrough().describe("Configuration when kind is CREDENTIAL_KIND_API_KEY").optional(),
+      gcpAdc: external_exports.object({
+        scopes: external_exports.any().describe("Additional OAuth scopes. Empty list falls back to the default cloud-platform scope.").optional(),
+        quotaProjectId: external_exports.string().describe("Optional quota project used for billing").optional()
+      }).passthrough().describe("Configuration when kind is CREDENTIAL_KIND_GCP_ADC").optional(),
       labels: external_exports.record(external_exports.string(), external_exports.string()).describe('Optional annotations to aid operators (e.g., "owner=vertex")').optional()
     }).passthrough().describe("Structured credential payload describing how to authenticate with the provider. Required for SaaS providers such as COHERE, JINA, and VOYAGE; optional for local or proxy providers.").optional(),
-    labels: external_exports.record(external_exports.string(), external_exports.string()).describe("User-defined labels for categorization").optional(),
+    labels: external_exports.any().describe("User-defined labels for categorization").optional(),
     version: external_exports.string().describe("Version information").optional(),
     monitoring_endpoint: external_exports.string().describe("Monitoring endpoint URL").optional(),
     owner_id: external_exports.string().describe("Optional owner ID. If not provided, derived from the authentication context. Requires CREATE_EMBEDDER_ANY permission if specified.").optional(),
@@ -22108,13 +22126,13 @@ function registerTools() {
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
   });
   server.tool("goodmem_embedders_delete", "Delete an embedder", {
-    id: external_exports.string().describe("The unique identifier of the embedder to delete")
+    id: external_exports.string().describe("The UUID of the embedder to delete")
   }, async (args) => {
     await callApi("DELETE", `/v1/embedders/${encodeURIComponent(String(args.id))}`, void 0);
     return { content: [{ type: "text", text: "Deleted successfully." }] };
   });
   server.tool("goodmem_embedders_get", "Get an embedder by ID", {
-    id: external_exports.string().describe("The unique identifier of the embedder to retrieve")
+    id: external_exports.string().describe("The UUID of the embedder to retrieve")
   }, async (args) => {
     const result = await callApi("GET", `/v1/embedders/${encodeURIComponent(String(args.id))}`, void 0);
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
@@ -22137,7 +22155,7 @@ function registerTools() {
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
   });
   server.tool("goodmem_embedders_update", "Update an embedder", {
-    id: external_exports.string().describe("The unique identifier of the embedder to update"),
+    id: external_exports.string().describe("The UUID of the embedder to update"),
     display_name: external_exports.string().describe("User-facing name of the embedder").optional(),
     description: external_exports.string().describe("Description of the embedder").optional(),
     endpoint_url: external_exports.string().describe("API endpoint URL").optional(),
@@ -22148,12 +22166,23 @@ function registerTools() {
     supported_modalities: external_exports.array(external_exports.enum(["TEXT", "IMAGE", "AUDIO", "VIDEO"])).describe("Supported content modalities").optional(),
     credentials: external_exports.object({
       kind: external_exports.enum(["CREDENTIAL_KIND_UNSPECIFIED", "CREDENTIAL_KIND_API_KEY", "CREDENTIAL_KIND_GCP_ADC"]).describe("Selected credential strategy"),
-      apiKey: external_exports.any().describe("Configuration when kind is CREDENTIAL_KIND_API_KEY").optional(),
-      gcpAdc: external_exports.any().describe("Configuration when kind is CREDENTIAL_KIND_GCP_ADC").optional(),
+      apiKey: external_exports.object({
+        inlineSecret: external_exports.string().describe("Secret stored directly in GoodMem (mutually exclusive with secretRef)").optional(),
+        secretRef: external_exports.object({
+          uri: external_exports.string().describe("URI identifying where the secret can be resolved (e.g., vault://, env://)"),
+          hints: external_exports.record(external_exports.string(), external_exports.unknown()).describe('Optional metadata to help resolvers decode the secret (e.g., {"encoding":"base64"})').optional()
+        }).passthrough().describe("Reference to an external secret manager entry (mutually exclusive with inlineSecret)").optional(),
+        headerName: external_exports.string().describe("Desired HTTP header to carry the credential (defaults to Authorization)").optional(),
+        prefix: external_exports.string().describe('Optional prefix prepended to the secret (e.g., "Bearer ")').optional()
+      }).passthrough().describe("Configuration when kind is CREDENTIAL_KIND_API_KEY").optional(),
+      gcpAdc: external_exports.object({
+        scopes: external_exports.any().describe("Additional OAuth scopes. Empty list falls back to the default cloud-platform scope.").optional(),
+        quotaProjectId: external_exports.string().describe("Optional quota project used for billing").optional()
+      }).passthrough().describe("Configuration when kind is CREDENTIAL_KIND_GCP_ADC").optional(),
       labels: external_exports.record(external_exports.string(), external_exports.string()).describe('Optional annotations to aid operators (e.g., "owner=vertex")').optional()
     }).passthrough().describe("Structured credential payload describing how to authenticate with the provider").optional(),
-    replace_labels: external_exports.record(external_exports.string(), external_exports.string()).describe("Replace all existing labels with these (mutually exclusive with mergeLabels)").optional(),
-    merge_labels: external_exports.record(external_exports.string(), external_exports.string()).describe("Merge these labels with existing ones (mutually exclusive with replaceLabels)").optional(),
+    replace_labels: external_exports.any().describe("Replace all existing labels with these (mutually exclusive with mergeLabels)").optional(),
+    merge_labels: external_exports.any().describe("Merge these labels with existing ones (mutually exclusive with replaceLabels)").optional(),
     version: external_exports.string().describe("Version information").optional(),
     monitoring_endpoint: external_exports.string().describe("Monitoring endpoint URL").optional()
   }, async (args) => {
@@ -22197,11 +22226,22 @@ function registerTools() {
     supported_modalities: external_exports.array(external_exports.enum(["TEXT", "IMAGE", "AUDIO", "VIDEO"])).describe("Supported content modalities (defaults to TEXT if not provided) (auto-inferred from model_identifier if omitted)").optional(),
     credentials: external_exports.object({
       kind: external_exports.enum(["CREDENTIAL_KIND_UNSPECIFIED", "CREDENTIAL_KIND_API_KEY", "CREDENTIAL_KIND_GCP_ADC"]).describe("Selected credential strategy"),
-      apiKey: external_exports.any().describe("Configuration when kind is CREDENTIAL_KIND_API_KEY").optional(),
-      gcpAdc: external_exports.any().describe("Configuration when kind is CREDENTIAL_KIND_GCP_ADC").optional(),
+      apiKey: external_exports.object({
+        inlineSecret: external_exports.string().describe("Secret stored directly in GoodMem (mutually exclusive with secretRef)").optional(),
+        secretRef: external_exports.object({
+          uri: external_exports.string().describe("URI identifying where the secret can be resolved (e.g., vault://, env://)"),
+          hints: external_exports.record(external_exports.string(), external_exports.unknown()).describe('Optional metadata to help resolvers decode the secret (e.g., {"encoding":"base64"})').optional()
+        }).passthrough().describe("Reference to an external secret manager entry (mutually exclusive with inlineSecret)").optional(),
+        headerName: external_exports.string().describe("Desired HTTP header to carry the credential (defaults to Authorization)").optional(),
+        prefix: external_exports.string().describe('Optional prefix prepended to the secret (e.g., "Bearer ")').optional()
+      }).passthrough().describe("Configuration when kind is CREDENTIAL_KIND_API_KEY").optional(),
+      gcpAdc: external_exports.object({
+        scopes: external_exports.any().describe("Additional OAuth scopes. Empty list falls back to the default cloud-platform scope.").optional(),
+        quotaProjectId: external_exports.string().describe("Optional quota project used for billing").optional()
+      }).passthrough().describe("Configuration when kind is CREDENTIAL_KIND_GCP_ADC").optional(),
       labels: external_exports.record(external_exports.string(), external_exports.string()).describe('Optional annotations to aid operators (e.g., "owner=vertex")').optional()
     }).passthrough().describe("Structured credential payload describing how to authenticate with the provider. Omit for deployments that do not require credentials.").optional(),
-    labels: external_exports.record(external_exports.string(), external_exports.string()).describe("User-defined labels for categorization").optional(),
+    labels: external_exports.any().describe("User-defined labels for categorization").optional(),
     version: external_exports.string().describe("Version information").optional(),
     monitoring_endpoint: external_exports.string().describe("Monitoring endpoint URL").optional(),
     capabilities: external_exports.object({
@@ -22222,7 +22262,7 @@ function registerTools() {
       stopSequences: external_exports.any().describe("Generation stop sequences (\u226410 sequences; each \u2264100 chars; generation halts on exact match)").optional()
     }).passthrough().describe("Default sampling parameters for generation requests").optional(),
     max_context_length: external_exports.number().int().describe("Maximum context window size in tokens").optional(),
-    client_config: external_exports.record(external_exports.string(), external_exports.unknown()).describe("Provider-specific client configuration as flexible JSON structure").optional(),
+    client_config: external_exports.any().describe("Provider-specific client configuration as flexible JSON structure").optional(),
     owner_id: external_exports.string().describe("Optional owner ID. If not provided, derived from the authentication context. Requires CREATE_LLM_ANY permission if specified.").optional(),
     llm_id: external_exports.string().describe("Optional client-provided UUID for idempotent creation. If not provided, server generates a new UUID. Returns ALREADY_EXISTS if ID is already in use.").optional()
   }, async (args) => {
@@ -22267,13 +22307,13 @@ function registerTools() {
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
   });
   server.tool("goodmem_llms_delete", "Delete an LLM", {
-    id: external_exports.string().describe("The unique identifier of the LLM to delete")
+    id: external_exports.string().describe("The UUID of the LLM to delete")
   }, async (args) => {
     await callApi("DELETE", `/v1/llms/${encodeURIComponent(String(args.id))}`, void 0);
     return { content: [{ type: "text", text: "Deleted successfully." }] };
   });
   server.tool("goodmem_llms_get", "Get an LLM by ID", {
-    id: external_exports.string().describe("The unique identifier of the LLM to retrieve")
+    id: external_exports.string().describe("The UUID of the LLM to retrieve")
   }, async (args) => {
     const result = await callApi("GET", `/v1/llms/${encodeURIComponent(String(args.id))}`, void 0);
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
@@ -22296,7 +22336,7 @@ function registerTools() {
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
   });
   server.tool("goodmem_llms_update", "Update an LLM", {
-    id: external_exports.string().describe("The unique identifier of the LLM to update"),
+    id: external_exports.string().describe("The UUID of the LLM to update"),
     display_name: external_exports.string().describe("Update display name").optional(),
     description: external_exports.string().describe("Update description").optional(),
     endpoint_url: external_exports.string().describe("Update endpoint base URL (OpenAI-compatible base, typically ends with /v1)").optional(),
@@ -22305,8 +22345,19 @@ function registerTools() {
     supported_modalities: external_exports.array(external_exports.enum(["TEXT", "IMAGE", "AUDIO", "VIDEO"])).describe("Update supported modalities (if array contains \u22651 elements, replaces stored set; if empty or omitted, no change)").optional(),
     credentials: external_exports.object({
       kind: external_exports.enum(["CREDENTIAL_KIND_UNSPECIFIED", "CREDENTIAL_KIND_API_KEY", "CREDENTIAL_KIND_GCP_ADC"]).describe("Selected credential strategy"),
-      apiKey: external_exports.any().describe("Configuration when kind is CREDENTIAL_KIND_API_KEY").optional(),
-      gcpAdc: external_exports.any().describe("Configuration when kind is CREDENTIAL_KIND_GCP_ADC").optional(),
+      apiKey: external_exports.object({
+        inlineSecret: external_exports.string().describe("Secret stored directly in GoodMem (mutually exclusive with secretRef)").optional(),
+        secretRef: external_exports.object({
+          uri: external_exports.string().describe("URI identifying where the secret can be resolved (e.g., vault://, env://)"),
+          hints: external_exports.record(external_exports.string(), external_exports.unknown()).describe('Optional metadata to help resolvers decode the secret (e.g., {"encoding":"base64"})').optional()
+        }).passthrough().describe("Reference to an external secret manager entry (mutually exclusive with inlineSecret)").optional(),
+        headerName: external_exports.string().describe("Desired HTTP header to carry the credential (defaults to Authorization)").optional(),
+        prefix: external_exports.string().describe('Optional prefix prepended to the secret (e.g., "Bearer ")').optional()
+      }).passthrough().describe("Configuration when kind is CREDENTIAL_KIND_API_KEY").optional(),
+      gcpAdc: external_exports.object({
+        scopes: external_exports.any().describe("Additional OAuth scopes. Empty list falls back to the default cloud-platform scope.").optional(),
+        quotaProjectId: external_exports.string().describe("Optional quota project used for billing").optional()
+      }).passthrough().describe("Configuration when kind is CREDENTIAL_KIND_GCP_ADC").optional(),
       labels: external_exports.record(external_exports.string(), external_exports.string()).describe('Optional annotations to aid operators (e.g., "owner=vertex")').optional()
     }).passthrough().describe("Update credentials").optional(),
     version: external_exports.string().describe("Update version information").optional(),
@@ -22329,9 +22380,9 @@ function registerTools() {
       stopSequences: external_exports.any().describe("Generation stop sequences (\u226410 sequences; each \u2264100 chars; generation halts on exact match)").optional()
     }).passthrough().describe("Update default sampling parameters").optional(),
     max_context_length: external_exports.number().int().describe("Update maximum context window size in tokens").optional(),
-    client_config: external_exports.record(external_exports.string(), external_exports.unknown()).describe("Update provider-specific client configuration (replaces entire config; no merging)").optional(),
-    replace_labels: external_exports.record(external_exports.string(), external_exports.string()).describe("Replace all existing labels with this set. Empty map clears all labels. Cannot be used with mergeLabels.").optional(),
-    merge_labels: external_exports.record(external_exports.string(), external_exports.string()).describe("Merge with existing labels: upserts with overwrite. Labels not mentioned are preserved. Cannot be used with replaceLabels.").optional()
+    client_config: external_exports.any().describe("Update provider-specific client configuration (replaces entire config; no merging)").optional(),
+    replace_labels: external_exports.any().describe("Replace all existing labels with this set. Empty map clears all labels. Cannot be used with mergeLabels.").optional(),
+    merge_labels: external_exports.any().describe("Merge with existing labels: upserts with overwrite. Labels not mentioned are preserved. Cannot be used with replaceLabels.").optional()
   }, async (args) => {
     const body = {};
     if (args.display_name !== void 0)
@@ -22379,7 +22430,11 @@ function registerTools() {
   server.tool("goodmem_memories_batch_delete", "Delete memories in batch", {
     requests: external_exports.array(external_exports.object({
       memoryId: external_exports.string().describe("Deletes one specific memory by UUID").optional(),
-      filterSelector: external_exports.any().describe("Deletes a filtered set of memories within a specific space").optional()
+      filterSelector: external_exports.object({
+        spaceId: external_exports.string().describe("Space ID scope for the filtered delete"),
+        statusFilter: external_exports.string().describe("Optional processing status filter (PENDING, PROCESSING, COMPLETED, FAILED)").optional(),
+        filter: external_exports.string().describe("Optional metadata filter expression").optional()
+      }).passthrough().describe("Deletes a filtered set of memories within a specific space").optional()
     }).passthrough()).describe("Array of delete selectors")
   }, async (args) => {
     const body = {};
@@ -22410,11 +22465,23 @@ function registerTools() {
     original_content_b64: external_exports.string().describe("Original content as base64-encoded binary data (use either this or originalContent)").optional(),
     original_content_ref: external_exports.string().describe("Reference to external content location").optional(),
     content_type: external_exports.string().describe("MIME type of the content"),
-    metadata: external_exports.record(external_exports.string(), external_exports.unknown()).describe("Additional metadata for the memory").optional(),
+    metadata: external_exports.any().describe("Additional metadata for the memory").optional(),
     chunking_config: external_exports.object({
       none: external_exports.any().describe("No chunking strategy - preserve original content as single unit").optional(),
-      recursive: external_exports.any().describe("Recursive hierarchical chunking strategy with configurable separators").optional(),
-      sentence: external_exports.any().describe("Sentence-based chunking strategy with language detection").optional()
+      recursive: external_exports.object({
+        chunkSize: external_exports.number().int().describe("Maximum size of a chunk (should be \u2264 context window)"),
+        chunkOverlap: external_exports.number().int().describe("Sliding overlap between chunks"),
+        separators: external_exports.any().describe("Hierarchical separator list (order = preference)").optional(),
+        keepStrategy: external_exports.enum(["KEEP_NONE", "KEEP_START", "KEEP_END"]).describe("How to handle separators after splitting. KEEP_NONE is deprecated and behaves as KEEP_END."),
+        separatorIsRegex: external_exports.boolean().describe("Whether separators are regex patterns").optional(),
+        lengthMeasurement: external_exports.enum(["CHARACTER_COUNT", "TOKEN_COUNT", "CUSTOM"]).describe("How to measure chunk length")
+      }).passthrough().describe("Recursive hierarchical chunking strategy with configurable separators").optional(),
+      sentence: external_exports.object({
+        maxChunkSize: external_exports.number().int().describe("Maximum size of a chunk"),
+        minChunkSize: external_exports.number().int().describe("Minimum size before creating a new chunk"),
+        enableLanguageDetection: external_exports.boolean().describe("Whether to detect language for better segmentation").optional(),
+        lengthMeasurement: external_exports.enum(["CHARACTER_COUNT", "TOKEN_COUNT", "CUSTOM"]).describe("How to measure chunk length")
+      }).passthrough().describe("Sentence-based chunking strategy with language detection").optional()
     }).passthrough().describe("Chunking strategy for this memory (if not provided, uses space default)").optional(),
     extract_page_images: external_exports.boolean().describe("Optional hint to extract page images for eligible document types (for example, PDFs)").optional()
   }, async (args) => {
@@ -22441,13 +22508,13 @@ function registerTools() {
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
   });
   server.tool("goodmem_memories_delete", "Delete a memory", {
-    id: external_exports.string().describe("The unique identifier of the memory to delete")
+    id: external_exports.string().describe("The UUID of the memory to delete")
   }, async (args) => {
     await callApi("DELETE", `/v1/memories/${encodeURIComponent(String(args.id))}`, void 0);
     return { content: [{ type: "text", text: "Deleted successfully." }] };
   });
   server.tool("goodmem_memories_get", "Get a memory by ID", {
-    id: external_exports.string().describe("The unique identifier of the memory to retrieve"),
+    id: external_exports.string().describe("The UUID of the memory to retrieve"),
     include_content: external_exports.boolean().describe("Whether to include the original content in the response (defaults to false). The snake_case alias include_content is also accepted.").optional(),
     include_processing_history: external_exports.boolean().describe("Whether to include background job processing history in the response (defaults to false). The snake_case alias include_processing_history is also accepted.").optional()
   }, async (args) => {
@@ -22460,7 +22527,7 @@ function registerTools() {
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
   });
   server.tool("goodmem_memories_list", "List memories in a space", {
-    space_id: external_exports.string().describe("The unique identifier of the space containing the memories"),
+    space_id: external_exports.string().describe("The UUID of the space containing the memories"),
     include_content: external_exports.boolean().describe("Whether to include the original content in the response (defaults to false). The snake_case alias include_content is also accepted.").optional(),
     include_processing_history: external_exports.boolean().describe("Whether to include background job processing history in the response (defaults to false). The snake_case alias include_processing_history is also accepted.").optional(),
     status_filter: external_exports.string().describe("Filter memories by processing status (PENDING, PROCESSING, COMPLETED, FAILED). The snake_case alias status_filter is also accepted.").optional(),
@@ -22519,10 +22586,13 @@ function registerTools() {
     message: external_exports.string().describe("Primary query/message for semantic search."),
     context: external_exports.array(external_exports.object({
       text: external_exports.string().describe("Text content for this context item.").optional(),
-      binary: external_exports.any().describe("Binary content for this context item.").optional()
+      binary: external_exports.object({
+        contentType: external_exports.string().describe("MIME type of the binary content."),
+        data: external_exports.string().describe("Base64-encoded binary data.")
+      }).passthrough().describe("Binary content for this context item.").optional()
     }).passthrough()).describe("Optional context items (text or binary) to provide additional context for the search.").optional(),
     space_keys: external_exports.array(external_exports.object({
-      spaceId: external_exports.string().describe("The unique identifier for the space to search."),
+      spaceId: external_exports.string().describe("The UUID for the space to search."),
       embedderWeights: external_exports.any().describe("Optional per-embedder weight overrides for this space. If not specified, database defaults are used.").optional(),
       filter: external_exports.string().describe("Optional filter expression that must evaluate to true for memories in this space.").optional()
     }).passthrough()).describe("List of spaces to search with optional per-embedder weight overrides."),
@@ -22594,11 +22664,22 @@ function registerTools() {
     supported_modalities: external_exports.array(external_exports.enum(["TEXT", "IMAGE", "AUDIO", "VIDEO"])).describe("Supported content modalities (defaults to TEXT if not provided) (auto-inferred from model_identifier if omitted)").optional(),
     credentials: external_exports.object({
       kind: external_exports.enum(["CREDENTIAL_KIND_UNSPECIFIED", "CREDENTIAL_KIND_API_KEY", "CREDENTIAL_KIND_GCP_ADC"]).describe("Selected credential strategy"),
-      apiKey: external_exports.any().describe("Configuration when kind is CREDENTIAL_KIND_API_KEY").optional(),
-      gcpAdc: external_exports.any().describe("Configuration when kind is CREDENTIAL_KIND_GCP_ADC").optional(),
+      apiKey: external_exports.object({
+        inlineSecret: external_exports.string().describe("Secret stored directly in GoodMem (mutually exclusive with secretRef)").optional(),
+        secretRef: external_exports.object({
+          uri: external_exports.string().describe("URI identifying where the secret can be resolved (e.g., vault://, env://)"),
+          hints: external_exports.record(external_exports.string(), external_exports.unknown()).describe('Optional metadata to help resolvers decode the secret (e.g., {"encoding":"base64"})').optional()
+        }).passthrough().describe("Reference to an external secret manager entry (mutually exclusive with inlineSecret)").optional(),
+        headerName: external_exports.string().describe("Desired HTTP header to carry the credential (defaults to Authorization)").optional(),
+        prefix: external_exports.string().describe('Optional prefix prepended to the secret (e.g., "Bearer ")').optional()
+      }).passthrough().describe("Configuration when kind is CREDENTIAL_KIND_API_KEY").optional(),
+      gcpAdc: external_exports.object({
+        scopes: external_exports.any().describe("Additional OAuth scopes. Empty list falls back to the default cloud-platform scope.").optional(),
+        quotaProjectId: external_exports.string().describe("Optional quota project used for billing").optional()
+      }).passthrough().describe("Configuration when kind is CREDENTIAL_KIND_GCP_ADC").optional(),
       labels: external_exports.record(external_exports.string(), external_exports.string()).describe('Optional annotations to aid operators (e.g., "owner=vertex")').optional()
     }).passthrough().describe("Structured credential payload describing how to authenticate with the provider. Required for SaaS providers; optional for local deployments.").optional(),
-    labels: external_exports.record(external_exports.string(), external_exports.string()).describe("User-defined labels for categorization").optional(),
+    labels: external_exports.any().describe("User-defined labels for categorization").optional(),
     version: external_exports.string().describe("Version information").optional(),
     monitoring_endpoint: external_exports.string().describe("Monitoring endpoint URL").optional(),
     owner_id: external_exports.string().describe("Optional owner ID. If not provided, derived from the authentication context. Requires CREATE_RERANKER_ANY permission if specified.").optional(),
@@ -22637,13 +22718,13 @@ function registerTools() {
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
   });
   server.tool("goodmem_rerankers_delete", "Delete a reranker", {
-    id: external_exports.string().describe("The unique identifier of the reranker to delete")
+    id: external_exports.string().describe("The UUID of the reranker to delete")
   }, async (args) => {
     await callApi("DELETE", `/v1/rerankers/${encodeURIComponent(String(args.id))}`, void 0);
     return { content: [{ type: "text", text: "Deleted successfully." }] };
   });
   server.tool("goodmem_rerankers_get", "Get a reranker by ID", {
-    id: external_exports.string().describe("The unique identifier of the reranker to retrieve")
+    id: external_exports.string().describe("The UUID of the reranker to retrieve")
   }, async (args) => {
     const result = await callApi("GET", `/v1/rerankers/${encodeURIComponent(String(args.id))}`, void 0);
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
@@ -22666,7 +22747,7 @@ function registerTools() {
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
   });
   server.tool("goodmem_rerankers_update", "Update a reranker", {
-    id: external_exports.string().describe("The unique identifier of the reranker to update"),
+    id: external_exports.string().describe("The UUID of the reranker to update"),
     display_name: external_exports.string().describe("User-facing name of the reranker").optional(),
     description: external_exports.string().describe("Description of the reranker").optional(),
     endpoint_url: external_exports.string().describe("API endpoint URL").optional(),
@@ -22675,12 +22756,23 @@ function registerTools() {
     supported_modalities: external_exports.array(external_exports.enum(["TEXT", "IMAGE", "AUDIO", "VIDEO"])).describe("Supported content modalities").optional(),
     credentials: external_exports.object({
       kind: external_exports.enum(["CREDENTIAL_KIND_UNSPECIFIED", "CREDENTIAL_KIND_API_KEY", "CREDENTIAL_KIND_GCP_ADC"]).describe("Selected credential strategy"),
-      apiKey: external_exports.any().describe("Configuration when kind is CREDENTIAL_KIND_API_KEY").optional(),
-      gcpAdc: external_exports.any().describe("Configuration when kind is CREDENTIAL_KIND_GCP_ADC").optional(),
+      apiKey: external_exports.object({
+        inlineSecret: external_exports.string().describe("Secret stored directly in GoodMem (mutually exclusive with secretRef)").optional(),
+        secretRef: external_exports.object({
+          uri: external_exports.string().describe("URI identifying where the secret can be resolved (e.g., vault://, env://)"),
+          hints: external_exports.record(external_exports.string(), external_exports.unknown()).describe('Optional metadata to help resolvers decode the secret (e.g., {"encoding":"base64"})').optional()
+        }).passthrough().describe("Reference to an external secret manager entry (mutually exclusive with inlineSecret)").optional(),
+        headerName: external_exports.string().describe("Desired HTTP header to carry the credential (defaults to Authorization)").optional(),
+        prefix: external_exports.string().describe('Optional prefix prepended to the secret (e.g., "Bearer ")').optional()
+      }).passthrough().describe("Configuration when kind is CREDENTIAL_KIND_API_KEY").optional(),
+      gcpAdc: external_exports.object({
+        scopes: external_exports.any().describe("Additional OAuth scopes. Empty list falls back to the default cloud-platform scope.").optional(),
+        quotaProjectId: external_exports.string().describe("Optional quota project used for billing").optional()
+      }).passthrough().describe("Configuration when kind is CREDENTIAL_KIND_GCP_ADC").optional(),
       labels: external_exports.record(external_exports.string(), external_exports.string()).describe('Optional annotations to aid operators (e.g., "owner=vertex")').optional()
     }).passthrough().describe("Structured credential payload describing how to authenticate with the provider. Omit to keep existing credentials.").optional(),
-    replace_labels: external_exports.record(external_exports.string(), external_exports.string()).describe("Replace all existing labels with these (mutually exclusive with mergeLabels)").optional(),
-    merge_labels: external_exports.record(external_exports.string(), external_exports.string()).describe("Merge these labels with existing ones (mutually exclusive with replaceLabels)").optional(),
+    replace_labels: external_exports.any().describe("Replace all existing labels with these (mutually exclusive with mergeLabels)").optional(),
+    merge_labels: external_exports.any().describe("Merge these labels with existing ones (mutually exclusive with replaceLabels)").optional(),
     version: external_exports.string().describe("Version information").optional(),
     monitoring_endpoint: external_exports.string().describe("Monitoring endpoint URL").optional()
   }, async (args) => {
@@ -22712,17 +22804,29 @@ function registerTools() {
   });
   server.tool("goodmem_spaces_create", "Create a new Space", {
     name: external_exports.string().describe("The desired name for the space. Must be unique within the user's scope."),
-    labels: external_exports.record(external_exports.string(), external_exports.string()).describe("A set of key-value pairs to categorize or tag the space. Used for filtering and organizational purposes.").optional(),
+    labels: external_exports.any().describe("A set of key-value pairs to categorize or tag the space. Used for filtering and organizational purposes.").optional(),
     space_embedders: external_exports.array(external_exports.object({
-      embedderId: external_exports.string().describe("The unique identifier for the embedder to associate with the space."),
+      embedderId: external_exports.string().describe("The UUID for the embedder to associate with the space."),
       defaultRetrievalWeight: external_exports.number().describe("Relative weight for this embedder used by default during retrieval. If omitted, defaults to 1.0; values need not sum to 1 and can be overridden per request.").optional()
     }).passthrough()).describe("List of embedder configurations to associate with this space. Each specifies an embedder ID and a relative default retrieval weight used when no per-request overrides are provided."),
     public_read: external_exports.boolean().describe("Indicates if the space and its memories can be read by unauthenticated users or users other than the owner. Defaults to false.").optional(),
     owner_id: external_exports.string().describe("Optional owner ID. If not provided, derived from the authentication context. Requires CREATE_SPACE_ANY permission if specified.").optional(),
     default_chunking_config: external_exports.object({
       none: external_exports.any().describe("No chunking strategy - preserve original content as single unit").optional(),
-      recursive: external_exports.any().describe("Recursive hierarchical chunking strategy with configurable separators").optional(),
-      sentence: external_exports.any().describe("Sentence-based chunking strategy with language detection").optional()
+      recursive: external_exports.object({
+        chunkSize: external_exports.number().int().describe("Maximum size of a chunk (should be \u2264 context window)"),
+        chunkOverlap: external_exports.number().int().describe("Sliding overlap between chunks"),
+        separators: external_exports.any().describe("Hierarchical separator list (order = preference)").optional(),
+        keepStrategy: external_exports.enum(["KEEP_NONE", "KEEP_START", "KEEP_END"]).describe("How to handle separators after splitting. KEEP_NONE is deprecated and behaves as KEEP_END."),
+        separatorIsRegex: external_exports.boolean().describe("Whether separators are regex patterns").optional(),
+        lengthMeasurement: external_exports.enum(["CHARACTER_COUNT", "TOKEN_COUNT", "CUSTOM"]).describe("How to measure chunk length")
+      }).passthrough().describe("Recursive hierarchical chunking strategy with configurable separators").optional(),
+      sentence: external_exports.object({
+        maxChunkSize: external_exports.number().int().describe("Maximum size of a chunk"),
+        minChunkSize: external_exports.number().int().describe("Minimum size before creating a new chunk"),
+        enableLanguageDetection: external_exports.boolean().describe("Whether to detect language for better segmentation").optional(),
+        lengthMeasurement: external_exports.enum(["CHARACTER_COUNT", "TOKEN_COUNT", "CUSTOM"]).describe("How to measure chunk length")
+      }).passthrough().describe("Sentence-based chunking strategy with language detection").optional()
     }).passthrough().describe("Default chunking strategy for memories in this space"),
     space_id: external_exports.string().describe("Optional client-provided UUID for idempotent creation. If not provided, server generates a new UUID. Returns ALREADY_EXISTS if ID is already in use.").optional()
   }, async (args) => {
@@ -22745,13 +22849,13 @@ function registerTools() {
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
   });
   server.tool("goodmem_spaces_delete", "Delete a space", {
-    id: external_exports.string().describe("The unique identifier of the space to delete")
+    id: external_exports.string().describe("The UUID of the space to delete")
   }, async (args) => {
     await callApi("DELETE", `/v1/spaces/${encodeURIComponent(String(args.id))}`, void 0);
     return { content: [{ type: "text", text: "Deleted successfully." }] };
   });
   server.tool("goodmem_spaces_get", "Get a space by ID", {
-    id: external_exports.string().describe("The unique identifier of the space to retrieve")
+    id: external_exports.string().describe("The UUID of the space to retrieve")
   }, async (args) => {
     const result = await callApi("GET", `/v1/spaces/${encodeURIComponent(String(args.id))}`, void 0);
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
@@ -22786,11 +22890,11 @@ function registerTools() {
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
   });
   server.tool("goodmem_spaces_update", "Update a space", {
-    id: external_exports.string().describe("The unique identifier of the space to update"),
+    id: external_exports.string().describe("The UUID of the space to update"),
     name: external_exports.string().describe("The new name for the space.").optional(),
     public_read: external_exports.boolean().describe("Whether the space is publicly readable by all users.").optional(),
-    replace_labels: external_exports.record(external_exports.string(), external_exports.string()).describe("Labels to replace all existing labels. Mutually exclusive with mergeLabels.").optional(),
-    merge_labels: external_exports.record(external_exports.string(), external_exports.string()).describe("Labels to merge with existing labels. Mutually exclusive with replaceLabels.").optional()
+    replace_labels: external_exports.any().describe("Labels to replace all existing labels. Mutually exclusive with mergeLabels.").optional(),
+    merge_labels: external_exports.any().describe("Labels to merge with existing labels. Mutually exclusive with replaceLabels.").optional()
   }, async (args) => {
     const body = {};
     if (args.name !== void 0)
@@ -22813,12 +22917,12 @@ function registerTools() {
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
   });
   server.tool("goodmem_users_get", "Get a user by ID", {
-    id: external_exports.string().describe("The unique identifier of the user to retrieve").optional(),
+    id: external_exports.string().describe("The UUID of the user to retrieve").optional(),
     email: external_exports.string().describe("The email address of the user to retrieve").optional()
   }, async (args) => {
-    if (args.id && args.email)
+    if (args.id !== void 0 && args.email !== void 0)
       throw new Error("Exactly one of 'id', 'email' must be provided, not both.");
-    if (!args.id && !args.email)
+    if (args.id === void 0 && args.email === void 0)
       throw new Error("Exactly one of 'id', 'email' must be provided.");
     const url = args.email ? `/v1/users/email/${encodeURIComponent(String(args.email))}` : `/v1/users/${encodeURIComponent(String(args.id))}`;
     const result = await callApi("GET", url, void 0);
@@ -22830,9 +22934,39 @@ function registerTools() {
   });
 }
 registerTools();
+async function healthCheck() {
+  if (!isConfigured()) {
+    console.error("[goodmem-mcp] Not configured \u2014 set GOODMEM_BASE_URL and GOODMEM_API_KEY, or call goodmem_configure.");
+    return;
+  }
+  try {
+    const url = new URL("/v1/system/info", goodmemBaseUrl);
+    const resp = await fetch(url.toString(), {
+      headers: { "x-api-key": goodmemApiKey },
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (resp.ok) {
+      const info = await resp.json();
+      console.error(`[goodmem-mcp] Connected to ${goodmemBaseUrl} (server ${info.version ?? "unknown"}).`);
+    } else {
+      const text = await resp.text();
+      console.error(`[goodmem-mcp] Health check failed (${resp.status}): ${text}`);
+    }
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    if (msg.includes("CERT") || msg.includes("certificate") || msg.includes("self-signed") || msg.includes("self signed") || msg.includes("UNABLE_TO_VERIFY")) {
+      console.error(`[goodmem-mcp] TLS certificate error: ${msg}
+  If using self-signed certs, set NODE_TLS_REJECT_UNAUTHORIZED=0 (dev only)
+  or NODE_EXTRA_CA_CERTS=/path/to/rootCA.pem in your MCP server env config.`);
+    } else {
+      console.error(`[goodmem-mcp] Cannot reach ${goodmemBaseUrl}: ${msg}`);
+    }
+  }
+}
 async function main() {
   const transport = new StdioServerTransport();
   await server.connect(transport);
+  healthCheck();
 }
 main().catch((err) => {
   console.error("Fatal:", err);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pairsystems/goodmem-mcp",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "GoodMem MCP server \u2014 exposes GoodMem API as MCP tools",
   "type": "module",
   "main": "dist/index.js",