@posthog/mcp 0.16.2 → 0.16.4

package/README.md

@@ -81,6 +81,8 @@ Protocol revision is a property of each **request**, not of the server: a v2 ser
 - **On `2026-07-28`** there is no `initialize` and no session header — the revision removed
   protocol-level sessions, and this SDK will not mint one. Session correlation therefore comes from
   `enableConversationId`, which is **opt-in**. Without it every request is its own `$session_id`.
+  The `get_more_tools` and `send_feedback` virtual tools also use this handle, including calls handled
+  by a fresh server instance.
 - **On `2025-11-25`**, the session id and the client's name and version are exchanged once at
   `initialize`. If your server builds a fresh `McpServer` per HTTP request — which
   `createMcpHandler` does by default — the instance serving a later `tools/call` never saw that
@@ -283,10 +285,11 @@ both advertises both tools. Like `get_more_tools`, a real tool that already uses
 wins: the SDK warns, skips injection, and delegates calls to the real handler.
 
 On a paginated catalogue (a `tools/list` response with a `nextCursor`), `instrument()` injects
-`send_feedback` on the first page only — the page every client reads, including clients that never
-follow `nextCursor` — so a compliant client's concatenated list carries it once. "First page" means
-a `tools/list` request with no cursor; an empty string is a valid cursor, so `cursor: ""` is a
-continuation page. Hosts using `prepareToolList()` directly own this rule themselves: pass
+its virtual tools (`send_feedback` and `get_more_tools`) on the first page only — the page every
+client reads, including clients that never follow `nextCursor` — so a compliant client's
+concatenated list carries each once. "First page" means a `tools/list` request with no cursor; an
+empty string is a valid cursor, so `cursor: ""` is a continuation page. Hosts using
+`prepareToolList()` directly own this rule themselves: pass `reportMissing: true` and
 `collectFeedback: true` only for the first page.
 
 Name collisions are detected on the first page only. A real tool named `send_feedback` (or

package/dist/extensions/instrument-highlevel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instrument-highlevel.d.ts","sourceRoot":"","sources":["../../src/extensions/instrument-highlevel.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAGV,sBAAsB,EAIvB,MAAM,UAAU,CAAA;AAmBjB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAgSxC,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,QAAQ,GAAG,IAAI,CA+BhG"}
+{"version":3,"file":"instrument-highlevel.d.ts","sourceRoot":"","sources":["../../src/extensions/instrument-highlevel.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAGV,sBAAsB,EAIvB,MAAM,UAAU,CAAA;AAmBjB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAuRxC,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,QAAQ,GAAG,IAAI,CA+BhG"}

package/dist/extensions/instrument-highlevel.js

@@ -172,7 +172,7 @@ async function handleToolCallRequest(highLevelServer, server, originalCallToolHa
             extra,
             eventType: external_event_types_js_namespaceObject.MCPAnalyticsEventType.mcpMissingCapability,
             explicitContextIntent: context,
-            parameterOwnership: (0, external_instrumentation_js_namespaceObject.getVirtualToolParameterOwnership)(data, toolName, (0, external_tools_js_namespaceObject.getReportMissingToolDescriptor)(toolName).inputSchema),
+            parameterOwnership: (0, external_analytics_parameters_js_namespaceObject.getAnalyticsParameterOwnership)((0, external_tools_js_namespaceObject.getReportMissingToolDescriptor)(toolName).inputSchema),
             execute: async ()=>(0, external_tools_js_namespaceObject.handleReportMissing)({
                     context
                 }, data.logger)
@@ -191,7 +191,7 @@ async function handleToolCallRequest(highLevelServer, server, originalCallToolHa
             explicitContextIntent: (0, external_feedback_js_namespaceObject.buildFeedbackIntent)(report),
             omitCapturedParameters: true,
             extraEventProperties: (0, external_feedback_js_namespaceObject.buildFeedbackEventProperties)(report),
-            parameterOwnership: (0, external_instrumentation_js_namespaceObject.getVirtualToolParameterOwnership)(data, toolName, (0, external_feedback_js_namespaceObject.getFeedbackToolDescriptor)(feedbackOptions).inputSchema),
+            parameterOwnership: (0, external_analytics_parameters_js_namespaceObject.getAnalyticsParameterOwnership)((0, external_feedback_js_namespaceObject.getFeedbackToolDescriptor)(feedbackOptions).inputSchema),
             execute: async ()=>(0, external_feedback_js_namespaceObject.handleFeedback)(report, feedbackOptions, data.logger)
         });
     }

package/dist/extensions/instrument-highlevel.mjs

@@ -6,7 +6,7 @@ import { MCPAnalyticsEventType } from "./event-types.mjs";
 import { getServerTrackingData } from "./internal.mjs";
 import { createWrappedTool, getToolFunction, hasToolFunction } from "./mcp-sdk-compat.mjs";
 import { getReportMissingToolDescriptor, handleReportMissing, resolveMissingCapabilityToolName } from "./tools.mjs";
-import { captureToolCall, getVirtualToolParameterOwnership, handleInitializeRequest, handleListToolsRequest, isToolAdvertised, patchRequestHandlers, readToolMetaCategory, traceResourceRequest } from "./instrumentation.mjs";
+import { captureToolCall, handleInitializeRequest, handleListToolsRequest, isToolAdvertised, patchRequestHandlers, readToolMetaCategory, traceResourceRequest } from "./instrumentation.mjs";
 import { getContextArgument } from "./tracing-helpers.mjs";
 const wrappedCallbacks = new WeakMap();
 const MCP_ANALYTICS_PROCESSED = Symbol('__posthog_mcp_analytics_processed__');
@@ -140,7 +140,7 @@ async function handleToolCallRequest(highLevelServer, server, originalCallToolHa
             extra,
             eventType: MCPAnalyticsEventType.mcpMissingCapability,
             explicitContextIntent: context,
-            parameterOwnership: getVirtualToolParameterOwnership(data, toolName, getReportMissingToolDescriptor(toolName).inputSchema),
+            parameterOwnership: getAnalyticsParameterOwnership(getReportMissingToolDescriptor(toolName).inputSchema),
             execute: async ()=>handleReportMissing({
                     context
                 }, data.logger)
@@ -159,7 +159,7 @@ async function handleToolCallRequest(highLevelServer, server, originalCallToolHa
             explicitContextIntent: buildFeedbackIntent(report),
             omitCapturedParameters: true,
             extraEventProperties: buildFeedbackEventProperties(report),
-            parameterOwnership: getVirtualToolParameterOwnership(data, toolName, getFeedbackToolDescriptor(feedbackOptions).inputSchema),
+            parameterOwnership: getAnalyticsParameterOwnership(getFeedbackToolDescriptor(feedbackOptions).inputSchema),
             execute: async ()=>handleFeedback(report, feedbackOptions, data.logger)
         });
     }

package/dist/extensions/instrument-lowlevel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instrument-lowlevel.d.ts","sourceRoot":"","sources":["../../src/extensions/instrument-lowlevel.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAiD,aAAa,EAAE,MAAM,UAAU,CAAA;AAY5F,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAqBxC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,GAAG,IAAI,CA8BtF"}
+{"version":3,"file":"instrument-lowlevel.d.ts","sourceRoot":"","sources":["../../src/extensions/instrument-lowlevel.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAiD,aAAa,EAAE,MAAM,UAAU,CAAA;AAa5F,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAoBxC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,GAAG,IAAI,CA8BtF"}

package/dist/extensions/instrument-lowlevel.js

@@ -31,6 +31,7 @@ __webpack_require__.d(__webpack_exports__, {
     instrumentLowLevelServer: ()=>instrumentLowLevelServer
 });
 const external_feedback_js_namespaceObject = require("./feedback.js");
+const external_analytics_parameters_js_namespaceObject = require("./analytics-parameters.js");
 const external_event_types_js_namespaceObject = require("./event-types.js");
 const external_internal_js_namespaceObject = require("./internal.js");
 const external_tools_js_namespaceObject = require("./tools.js");
@@ -75,7 +76,7 @@ async function handleToolCallRequest(server, originalCallToolHandler, request, e
             extra,
             eventType: external_event_types_js_namespaceObject.MCPAnalyticsEventType.mcpMissingCapability,
             explicitContextIntent: context,
-            parameterOwnership: (0, external_instrumentation_js_namespaceObject.getVirtualToolParameterOwnership)(data, toolName, (0, external_tools_js_namespaceObject.getReportMissingToolDescriptor)(toolName).inputSchema),
+            parameterOwnership: (0, external_analytics_parameters_js_namespaceObject.getAnalyticsParameterOwnership)((0, external_tools_js_namespaceObject.getReportMissingToolDescriptor)(toolName).inputSchema),
             execute: async ()=>(0, external_tools_js_namespaceObject.handleReportMissing)({
                     context
                 }, data.logger)
@@ -94,7 +95,7 @@ async function handleToolCallRequest(server, originalCallToolHandler, request, e
             explicitContextIntent: (0, external_feedback_js_namespaceObject.buildFeedbackIntent)(report),
             omitCapturedParameters: true,
             extraEventProperties: (0, external_feedback_js_namespaceObject.buildFeedbackEventProperties)(report),
-            parameterOwnership: (0, external_instrumentation_js_namespaceObject.getVirtualToolParameterOwnership)(data, toolName, (0, external_feedback_js_namespaceObject.getFeedbackToolDescriptor)(feedbackOptions).inputSchema),
+            parameterOwnership: (0, external_analytics_parameters_js_namespaceObject.getAnalyticsParameterOwnership)((0, external_feedback_js_namespaceObject.getFeedbackToolDescriptor)(feedbackOptions).inputSchema),
             execute: async ()=>(0, external_feedback_js_namespaceObject.handleFeedback)(report, feedbackOptions, data.logger)
         });
     }

package/dist/extensions/instrument-lowlevel.mjs

@@ -1,8 +1,9 @@
 import { SEND_FEEDBACK_TOOL_NAME, buildFeedbackEventProperties, buildFeedbackIntent, getFeedbackToolDescriptor, handleFeedback, parseFeedbackReport, resolveCollectFeedbackOptions } from "./feedback.mjs";
+import { getAnalyticsParameterOwnership } from "./analytics-parameters.mjs";
 import { MCPAnalyticsEventType } from "./event-types.mjs";
 import { getServerTrackingData } from "./internal.mjs";
 import { getReportMissingToolDescriptor, handleReportMissing, resolveMissingCapabilityToolName } from "./tools.mjs";
-import { captureToolCall, getVirtualToolParameterOwnership, handleInitializeRequest, handleListToolsRequest, isToolAdvertised, patchRequestHandlers, registerFallbackRequestHandler, traceResourceRequest } from "./instrumentation.mjs";
+import { captureToolCall, handleInitializeRequest, handleListToolsRequest, isToolAdvertised, patchRequestHandlers, registerFallbackRequestHandler, traceResourceRequest } from "./instrumentation.mjs";
 import { getContextArgument } from "./tracing-helpers.mjs";
 function instrumentLowLevelServer(server, logger) {
     try {
@@ -43,7 +44,7 @@ async function handleToolCallRequest(server, originalCallToolHandler, request, e
             extra,
             eventType: MCPAnalyticsEventType.mcpMissingCapability,
             explicitContextIntent: context,
-            parameterOwnership: getVirtualToolParameterOwnership(data, toolName, getReportMissingToolDescriptor(toolName).inputSchema),
+            parameterOwnership: getAnalyticsParameterOwnership(getReportMissingToolDescriptor(toolName).inputSchema),
             execute: async ()=>handleReportMissing({
                     context
                 }, data.logger)
@@ -62,7 +63,7 @@ async function handleToolCallRequest(server, originalCallToolHandler, request, e
             explicitContextIntent: buildFeedbackIntent(report),
             omitCapturedParameters: true,
             extraEventProperties: buildFeedbackEventProperties(report),
-            parameterOwnership: getVirtualToolParameterOwnership(data, toolName, getFeedbackToolDescriptor(feedbackOptions).inputSchema),
+            parameterOwnership: getAnalyticsParameterOwnership(getFeedbackToolDescriptor(feedbackOptions).inputSchema),
             execute: async ()=>handleFeedback(report, feedbackOptions, data.logger)
         });
     }

package/dist/extensions/instrumentation.d.ts

@@ -100,26 +100,6 @@ export declare function registerFallbackRequestHandler(server: MCPServerLike, ha
  * bare server to instrument() and only then registers its handlers.
  */
 export declare function patchRequestHandlers(server: MCPServerLike, patches: Record<string, HandlerPatch>): void;
-/**
- * Ownership for an SDK-owned virtual tool (`get_more_tools`, `send_feedback`),
- * resolved from its own descriptor rather than the `tools/list` cache.
- *
- * A virtual-tool branch is only entered when the application does not advertise
- * a tool by this name, so the descriptor is the SDK's own and what it declares
- * is known statically. An instance that never served a listing — a per-request
- * `McpServer`/`Server`, the topology in ADR-0011 — would otherwise read every
- * injected parameter as not-ours and neither capture nor strip it.
- *
- * `conversation_id` still comes from the cache on purpose: resolving it here too
- * would start minting a handle, and appending its prompt-back block, on
- * instances that today mint none. That changes session anchoring (ADR-0004)
- * rather than closing this gap.
- *
- * `virtualToolInputSchema` is required (not defaulted to one specific virtual
- * tool's descriptor) so every call site names the tool it means; each caller
- * passes its own descriptor's `inputSchema`.
- */
-export declare function getVirtualToolParameterOwnership(data: MCPAnalyticsData, toolName: string, virtualToolInputSchema: unknown): AnalyticsParameterOwnership;
 /**
  * Checks the server's raw listing for a real owner of a candidate virtual tool.
  * This does not depend on a previous client request and does not call the

package/dist/extensions/instrumentation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instrumentation.d.ts","sourceRoot":"","sources":["../../src/extensions/instrumentation.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,2BAA2B,EAC3B,6BAA6B,EAC7B,uBAAuB,EACvB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,aAAa,EAId,MAAM,UAAU,CAAA;AAqBjB,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAIrD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAUxC;;;;;;GAMG;AAEH,KAAK,iBAAiB,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,6BAA6B,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAE7G,2EAA2E;AAC3E,KAAK,YAAY,GAAG,CAAC,iBAAiB,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAE3E,UAAU,mBAAmB;IAC3B,MAAM,EAAE,aAAa,CAAA;IACrB,IAAI,EAAE,gBAAgB,CAAA;IACtB,OAAO,EAAE,cAAc,CAAA;IACvB,KAAK,CAAC,EAAE,6BAA6B,CAAA;IACrC,OAAO,EAAE,YAAY,CAAA;IACrB,2FAA2F;IAC3F,kBAAkB,CAAC,EAAE,2BAA2B,CAAA;IAChD;;;;;OAKG;IACH,SAAS,CAAC,EAAE,qBAAqB,CAAA;IACjC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;OAGG;IACH,oBAAoB,CAAC,EAAE,UAAU,CAAA;IACjC;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAA;IAChC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,OAAO,CAAA;CAClC;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,CA2EnF;AA4OD,KAAK,iBAAiB,GAAG,OAAO,qBAAqB,CAAC,gBAAgB,GAAG,OAAO,qBAAqB,CAAC,gBAAgB,CAAA;AAuDtH,sFAAsF;AACtF,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,GAAG,YAAY,CAGjG;AAgDD;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CACzB,MAAM,EAAE,aAAa,EACrB,eAAe,EAAE,iBAAiB,EAClC,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,6BAA6B,GAAG,SAAS,KAC7C,OAAO,CAAC,OAAO,CAAC,CAAA;AAkBrB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,iBAAiB,EAClC,KAAK,EAAE,YAAY,GAClB,IAAI,CAGN;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,IAAI,CA0CvG;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,gBAAgB,EACtB,QAAQ,EAAE,MAAM,EAChB,sBAAsB,EAAE,OAAO,GAC9B,2BAA2B,CAK7B;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,6BAA6B,GAAG,SAAS,EAChD,MAAM,EAAE,QAAQ,GACf,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAoB9B;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,aAAa,EACrB,wBAAwB,EAAE,iBAAiB,EAC3C,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,6BAA6B,GAAG,SAAS,EAChD,MAAM,EAAE,QAAQ,GACf,OAAO,CAAC,uBAAuB,CAAC,CAmElC;AA4HD,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC1B,KAAK,EAAE,uBAAuB,CAAC,OAAO,CAAC,GAAG,SAAS,GAClD,IAAI,CASN;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAGtE;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC1B,KAAK,EAAE,uBAAuB,CAAC,OAAO,CAAC,GAAG,SAAS,GAClD,IAAI,CAUN;AAuHD;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,aAAa,EACrB,yBAAyB,EAAE,iBAAiB,EAC5C,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,6BAA6B,GAAG,SAAS,EAChD,MAAM,EAAE,QAAQ,GACf,OAAO,CAAC,OAAO,CAAC,CA2ElB"}
+{"version":3,"file":"instrumentation.d.ts","sourceRoot":"","sources":["../../src/extensions/instrumentation.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,2BAA2B,EAC3B,6BAA6B,EAC7B,uBAAuB,EACvB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,aAAa,EAId,MAAM,UAAU,CAAA;AAqBjB,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAIrD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAUxC;;;;;;GAMG;AAEH,KAAK,iBAAiB,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,6BAA6B,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAE7G,2EAA2E;AAC3E,KAAK,YAAY,GAAG,CAAC,iBAAiB,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAE3E,UAAU,mBAAmB;IAC3B,MAAM,EAAE,aAAa,CAAA;IACrB,IAAI,EAAE,gBAAgB,CAAA;IACtB,OAAO,EAAE,cAAc,CAAA;IACvB,KAAK,CAAC,EAAE,6BAA6B,CAAA;IACrC,OAAO,EAAE,YAAY,CAAA;IACrB,2FAA2F;IAC3F,kBAAkB,CAAC,EAAE,2BAA2B,CAAA;IAChD;;;;;OAKG;IACH,SAAS,CAAC,EAAE,qBAAqB,CAAA;IACjC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;OAGG;IACH,oBAAoB,CAAC,EAAE,UAAU,CAAA;IACjC;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAA;IAChC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,OAAO,CAAA;CAClC;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,CA2EnF;AA4OD,KAAK,iBAAiB,GAAG,OAAO,qBAAqB,CAAC,gBAAgB,GAAG,OAAO,qBAAqB,CAAC,gBAAgB,CAAA;AAuDtH,sFAAsF;AACtF,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,GAAG,YAAY,CAGjG;AAgDD;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CACzB,MAAM,EAAE,aAAa,EACrB,eAAe,EAAE,iBAAiB,EAClC,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,6BAA6B,GAAG,SAAS,KAC7C,OAAO,CAAC,OAAO,CAAC,CAAA;AAkBrB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,iBAAiB,EAClC,KAAK,EAAE,YAAY,GAClB,IAAI,CAGN;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,IAAI,CA0CvG;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,6BAA6B,GAAG,SAAS,EAChD,MAAM,EAAE,QAAQ,GACf,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAoB9B;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,aAAa,EACrB,wBAAwB,EAAE,iBAAiB,EAC3C,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,6BAA6B,GAAG,SAAS,EAChD,MAAM,EAAE,QAAQ,GACf,OAAO,CAAC,uBAAuB,CAAC,CAmElC;AAoID,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC1B,KAAK,EAAE,uBAAuB,CAAC,OAAO,CAAC,GAAG,SAAS,GAClD,IAAI,CASN;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAGtE;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC1B,KAAK,EAAE,uBAAuB,CAAC,OAAO,CAAC,GAAG,SAAS,GAClD,IAAI,CAUN;AAuHD;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,aAAa,EACrB,yBAAyB,EAAE,iBAAiB,EAC5C,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,6BAA6B,GAAG,SAAS,EAChD,MAAM,EAAE,QAAQ,GACf,OAAO,CAAC,OAAO,CAAC,CA2ElB"}

package/dist/extensions/instrumentation.js

@@ -31,7 +31,6 @@ __webpack_require__.d(__webpack_exports__, {
     cacheToolCategories: ()=>cacheToolCategories,
     cacheToolDescriptions: ()=>cacheToolDescriptions,
     captureToolCall: ()=>captureToolCall,
-    getVirtualToolParameterOwnership: ()=>getVirtualToolParameterOwnership,
     handleInitializeRequest: ()=>handleInitializeRequest,
     handleListToolsRequest: ()=>handleListToolsRequest,
     isToolAdvertised: ()=>isToolAdvertised,
@@ -296,12 +295,6 @@ function patchRequestHandlers(server, patches) {
         return result;
     };
 }
-function getVirtualToolParameterOwnership(data, toolName, virtualToolInputSchema) {
-    return {
-        ...(0, external_analytics_parameters_js_namespaceObject.getAnalyticsParameterOwnership)(virtualToolInputSchema),
-        conversationId: data.toolAnalyticsParameterOwnership.get(toolName)?.conversationId === true
-    };
-}
 async function isToolAdvertised(server, toolName, extra, logger) {
     const listHandler = originalRequestHandlers.get(server)?.get('tools/list');
     if (!listHandler || !server._requestHandlers.has('tools/list')) return;
@@ -372,23 +365,23 @@ async function getTracedToolsList(server, originalListToolsHandler, request, ext
         if (data) cacheToolAnalyticsParameterOwnership(data.toolAnalyticsParameterOwnership, tools);
         if (data && (0, external_context_parameters_js_namespaceObject.isContextEnabled)(data.options.context)) tools = (0, external_context_parameters_js_namespaceObject.addContextParameterToTools)(tools, (0, external_context_parameters_js_namespaceObject.getContextDescription)(data.options.context), data.logger);
         if (data) {
+            const isFirstPage = request.params?.cursor == null;
             const missingToolName = (0, external_tools_js_namespaceObject.resolveMissingCapabilityToolName)(data.options);
             if (data.options.reportMissing) {
                 const alreadyPresent = tools.some((tool)=>tool?.name === missingToolName);
-                if (alreadyPresent) data.logger(`Warning: Cannot inject missing-capability tool "${missingToolName}" because a real tool already uses that name. The real tool will not be intercepted.`);
-                else {
+                if (isFirstPage && alreadyPresent) data.logger(`Warning: Cannot inject missing-capability tool "${missingToolName}" because a real tool already uses that name. The real tool will not be intercepted. To keep missing-capability reports, rename the SDK's tool with the missingCapabilityToolName option.`);
+                else if (isFirstPage) {
                     const virtualTool = (0, external_tools_js_namespaceObject.getReportMissingToolDescriptor)(missingToolName);
                     tools.push(virtualTool);
                     cacheToolAnalyticsParameterOwnership(data.toolAnalyticsParameterOwnership, [
                         virtualTool
                     ]);
-                }
+                } else if (alreadyPresent) data.logger(`Warning: A real tool "${missingToolName}" on a later tools/list page is shadowed by the SDK's missing-capability tool. Its calls will be intercepted. Rename the SDK's tool with the missingCapabilityToolName option to keep both.`);
             }
             const feedbackOptions = (0, external_feedback_js_namespaceObject.resolveCollectFeedbackOptions)(data.options.collectFeedback);
             if (feedbackOptions) {
                 const feedbackToolName = feedbackOptions.toolName ?? external_feedback_js_namespaceObject.SEND_FEEDBACK_TOOL_NAME;
                 const alreadyPresent = tools.some((tool)=>tool?.name === feedbackToolName);
-                const isFirstPage = request.params?.cursor == null;
                 if (isFirstPage && alreadyPresent) data.logger(`Warning: Cannot inject agent-feedback tool "${feedbackToolName}" because a real tool already uses that name. The real tool will not be intercepted. To collect feedback alongside it, rename the SDK's tool with collectFeedback: { toolName: "..." }.`);
                 else if (isFirstPage) {
                     const virtualTool = (0, external_feedback_js_namespaceObject.getFeedbackToolDescriptor)(feedbackOptions);
@@ -547,7 +540,6 @@ function readProtocolVersion(result, request) {
 exports.cacheToolCategories = __webpack_exports__.cacheToolCategories;
 exports.cacheToolDescriptions = __webpack_exports__.cacheToolDescriptions;
 exports.captureToolCall = __webpack_exports__.captureToolCall;
-exports.getVirtualToolParameterOwnership = __webpack_exports__.getVirtualToolParameterOwnership;
 exports.handleInitializeRequest = __webpack_exports__.handleInitializeRequest;
 exports.handleListToolsRequest = __webpack_exports__.handleListToolsRequest;
 exports.isToolAdvertised = __webpack_exports__.isToolAdvertised;
@@ -559,7 +551,6 @@ for(var __rspack_i in __webpack_exports__)if (-1 === [
     "cacheToolCategories",
     "cacheToolDescriptions",
     "captureToolCall",
-    "getVirtualToolParameterOwnership",
     "handleInitializeRequest",
     "handleListToolsRequest",
     "isToolAdvertised",

package/dist/extensions/instrumentation.mjs

@@ -254,12 +254,6 @@ function patchRequestHandlers(server, patches) {
         return result;
     };
 }
-function getVirtualToolParameterOwnership(data, toolName, virtualToolInputSchema) {
-    return {
-        ...getAnalyticsParameterOwnership(virtualToolInputSchema),
-        conversationId: data.toolAnalyticsParameterOwnership.get(toolName)?.conversationId === true
-    };
-}
 async function isToolAdvertised(server, toolName, extra, logger) {
     const listHandler = originalRequestHandlers.get(server)?.get('tools/list');
     if (!listHandler || !server._requestHandlers.has('tools/list')) return;
@@ -330,23 +324,23 @@ async function getTracedToolsList(server, originalListToolsHandler, request, ext
         if (data) cacheToolAnalyticsParameterOwnership(data.toolAnalyticsParameterOwnership, tools);
         if (data && isContextEnabled(data.options.context)) tools = addContextParameterToTools(tools, getContextDescription(data.options.context), data.logger);
         if (data) {
+            const isFirstPage = request.params?.cursor == null;
             const missingToolName = resolveMissingCapabilityToolName(data.options);
             if (data.options.reportMissing) {
                 const alreadyPresent = tools.some((tool)=>tool?.name === missingToolName);
-                if (alreadyPresent) data.logger(`Warning: Cannot inject missing-capability tool "${missingToolName}" because a real tool already uses that name. The real tool will not be intercepted.`);
-                else {
+                if (isFirstPage && alreadyPresent) data.logger(`Warning: Cannot inject missing-capability tool "${missingToolName}" because a real tool already uses that name. The real tool will not be intercepted. To keep missing-capability reports, rename the SDK's tool with the missingCapabilityToolName option.`);
+                else if (isFirstPage) {
                     const virtualTool = getReportMissingToolDescriptor(missingToolName);
                     tools.push(virtualTool);
                     cacheToolAnalyticsParameterOwnership(data.toolAnalyticsParameterOwnership, [
                         virtualTool
                     ]);
-                }
+                } else if (alreadyPresent) data.logger(`Warning: A real tool "${missingToolName}" on a later tools/list page is shadowed by the SDK's missing-capability tool. Its calls will be intercepted. Rename the SDK's tool with the missingCapabilityToolName option to keep both.`);
             }
             const feedbackOptions = resolveCollectFeedbackOptions(data.options.collectFeedback);
             if (feedbackOptions) {
                 const feedbackToolName = feedbackOptions.toolName ?? SEND_FEEDBACK_TOOL_NAME;
                 const alreadyPresent = tools.some((tool)=>tool?.name === feedbackToolName);
-                const isFirstPage = request.params?.cursor == null;
                 if (isFirstPage && alreadyPresent) data.logger(`Warning: Cannot inject agent-feedback tool "${feedbackToolName}" because a real tool already uses that name. The real tool will not be intercepted. To collect feedback alongside it, rename the SDK's tool with collectFeedback: { toolName: "..." }.`);
                 else if (isFirstPage) {
                     const virtualTool = getFeedbackToolDescriptor(feedbackOptions);
@@ -502,4 +496,4 @@ function readProtocolVersion(result, request) {
     const requested = request.params?.protocolVersion;
     return 'string' == typeof requested && requested.length > 0 ? requested : void 0;
 }
-export { cacheToolCategories, cacheToolDescriptions, captureToolCall, getVirtualToolParameterOwnership, handleInitializeRequest, handleListToolsRequest, isToolAdvertised, patchRequestHandlers, readToolMetaCategory, registerFallbackRequestHandler, traceResourceRequest };
+export { cacheToolCategories, cacheToolDescriptions, captureToolCall, handleInitializeRequest, handleListToolsRequest, isToolAdvertised, patchRequestHandlers, readToolMetaCategory, registerFallbackRequestHandler, traceResourceRequest };

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const version = "0.16.2";
+export declare const version = "0.16.4";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -27,7 +27,7 @@ var __webpack_require__ = {};
 })();
 var __webpack_exports__ = {};
 __webpack_require__.r(__webpack_exports__);
-const version = '0.16.2';
+const version = '0.16.4';
 __webpack_require__.d(__webpack_exports__, {}, {
     version: version
 });

package/dist/version.mjs

@@ -1,2 +1,2 @@
-const version = '0.16.2';
+const version = '0.16.4';
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@posthog/mcp",
-  "version": "0.16.2",
+  "version": "0.16.4",
   "bugs": {
     "url": "https://github.com/PostHog/posthog-js/issues"
   },
@@ -28,7 +28,7 @@
   "module": "dist/index.mjs",
   "types": "dist/index.d.ts",
   "dependencies": {
-    "@posthog/core": "^1.54.2"
+    "@posthog/core": "^1.54.3"
   },
   "devDependencies": {
     "@babel/preset-env": "^7.27.1",
@@ -84,6 +84,7 @@
     }
   },
   "scripts": {
+    "check-types": "pnpm prebuild && tsc --noEmit --project tsconfig.build.json",
     "clean": "rimraf dist coverage",
     "lint": "oxlint --report-unused-disable-directives-severity error src && oxfmt --check harness",
     "lint:fix": "oxlint --report-unused-disable-directives-severity error src --fix && oxfmt --write harness",

package/src/extensions/instrument-highlevel.ts

@@ -38,7 +38,6 @@ import {
   traceResourceRequest,
   patchRequestHandlers,
   captureToolCall,
-  getVirtualToolParameterOwnership,
   isToolAdvertised,
   readToolMetaCategory,
   type HandlerPatch,
@@ -260,11 +259,7 @@ async function handleToolCallRequest(
       extra,
       eventType: MCPAnalyticsEventType.mcpMissingCapability,
       explicitContextIntent: context,
-      parameterOwnership: getVirtualToolParameterOwnership(
-        data,
-        toolName,
-        getReportMissingToolDescriptor(toolName).inputSchema
-      ),
+      parameterOwnership: getAnalyticsParameterOwnership(getReportMissingToolDescriptor(toolName).inputSchema),
       execute: async () => handleReportMissing({ context }, data.logger),
     })
   }
@@ -284,11 +279,7 @@ async function handleToolCallRequest(
       explicitContextIntent: buildFeedbackIntent(report),
       omitCapturedParameters: true,
       extraEventProperties: buildFeedbackEventProperties(report),
-      parameterOwnership: getVirtualToolParameterOwnership(
-        data,
-        toolName,
-        getFeedbackToolDescriptor(feedbackOptions).inputSchema
-      ),
+      parameterOwnership: getAnalyticsParameterOwnership(getFeedbackToolDescriptor(feedbackOptions).inputSchema),
       execute: async () => handleFeedback(report, feedbackOptions, data.logger),
     })
   }

package/src/extensions/instrument-lowlevel.ts

@@ -13,6 +13,7 @@ import {
   resolveCollectFeedbackOptions,
   SEND_FEEDBACK_TOOL_NAME,
 } from './feedback'
+import { getAnalyticsParameterOwnership } from './analytics-parameters'
 import { MCPAnalyticsEventType } from './event-types'
 import { getServerTrackingData } from './internal'
 import type { LoggerFn } from './logger'
@@ -24,7 +25,6 @@ import {
   patchRequestHandlers,
   registerFallbackRequestHandler,
   captureToolCall,
-  getVirtualToolParameterOwnership,
   isToolAdvertised,
   type HandlerPatch,
 } from './instrumentation'
@@ -107,11 +107,7 @@ async function handleToolCallRequest(
       extra,
       eventType: MCPAnalyticsEventType.mcpMissingCapability,
       explicitContextIntent: context,
-      parameterOwnership: getVirtualToolParameterOwnership(
-        data,
-        toolName,
-        getReportMissingToolDescriptor(toolName).inputSchema
-      ),
+      parameterOwnership: getAnalyticsParameterOwnership(getReportMissingToolDescriptor(toolName).inputSchema),
       execute: async () => handleReportMissing({ context }, data.logger),
     })
   }
@@ -131,11 +127,7 @@ async function handleToolCallRequest(
       explicitContextIntent: buildFeedbackIntent(report),
       omitCapturedParameters: true,
       extraEventProperties: buildFeedbackEventProperties(report),
-      parameterOwnership: getVirtualToolParameterOwnership(
-        data,
-        toolName,
-        getFeedbackToolDescriptor(feedbackOptions).inputSchema
-      ),
+      parameterOwnership: getAnalyticsParameterOwnership(getFeedbackToolDescriptor(feedbackOptions).inputSchema),
       execute: async () => handleFeedback(report, feedbackOptions, data.logger),
     })
   }

package/src/extensions/instrumentation.ts

@@ -640,36 +640,6 @@ export function patchRequestHandlers(server: MCPServerLike, patches: Record<stri
   }) as MCPServerLike['setRequestHandler']
 }
 
-/**
- * Ownership for an SDK-owned virtual tool (`get_more_tools`, `send_feedback`),
- * resolved from its own descriptor rather than the `tools/list` cache.
- *
- * A virtual-tool branch is only entered when the application does not advertise
- * a tool by this name, so the descriptor is the SDK's own and what it declares
- * is known statically. An instance that never served a listing — a per-request
- * `McpServer`/`Server`, the topology in ADR-0011 — would otherwise read every
- * injected parameter as not-ours and neither capture nor strip it.
- *
- * `conversation_id` still comes from the cache on purpose: resolving it here too
- * would start minting a handle, and appending its prompt-back block, on
- * instances that today mint none. That changes session anchoring (ADR-0004)
- * rather than closing this gap.
- *
- * `virtualToolInputSchema` is required (not defaulted to one specific virtual
- * tool's descriptor) so every call site names the tool it means; each caller
- * passes its own descriptor's `inputSchema`.
- */
-export function getVirtualToolParameterOwnership(
-  data: MCPAnalyticsData,
-  toolName: string,
-  virtualToolInputSchema: unknown
-): AnalyticsParameterOwnership {
-  return {
-    ...getAnalyticsParameterOwnership(virtualToolInputSchema),
-    conversationId: data.toolAnalyticsParameterOwnership.get(toolName)?.conversationId === true,
-  }
-}
-
 /**
  * Checks the server's raw listing for a real owner of a candidate virtual tool.
  * This does not depend on a previous client request and does not call the
@@ -825,19 +795,32 @@ async function getTracedToolsList(
     }
 
     if (data) {
+      // A compliant client concatenates every page into one list, so only the
+      // first page — the one every client reads, including clients that never
+      // follow `nextCursor` — may carry a virtual tool. Presence, not
+      // truthiness: `cursor: ""` is a continuation page.
+      const isFirstPage = request.params?.cursor == null
+
       const missingToolName = resolveMissingCapabilityToolName(data.options)
       if (data.options.reportMissing) {
         const alreadyPresent = tools.some((tool) => tool?.name === missingToolName)
-        if (alreadyPresent) {
+        if (isFirstPage && alreadyPresent) {
           data.logger(
-            `Warning: Cannot inject missing-capability tool "${missingToolName}" because a real tool already uses that name. The real tool will not be intercepted.`
+            `Warning: Cannot inject missing-capability tool "${missingToolName}" because a real tool already uses that name. The real tool will not be intercepted. To keep missing-capability reports, rename the SDK's tool with the missingCapabilityToolName option.`
           )
-        } else {
+        } else if (isFirstPage) {
           const virtualTool = getReportMissingToolDescriptor(missingToolName)
           tools.push(virtualTool)
           // Cached separately because the virtual tool is added after the listing
           // was cached, and its calls need ownership like any other tool's.
           cacheToolAnalyticsParameterOwnership(data.toolAnalyticsParameterOwnership, [virtualTool])
+        } else if (alreadyPresent) {
+          // Conflicts are only detected on the pages a client actually
+          // fetches; a real owner here is already shadowed by the first-page
+          // injection, so the host must rename the SDK's tool.
+          data.logger(
+            `Warning: A real tool "${missingToolName}" on a later tools/list page is shadowed by the SDK's missing-capability tool. Its calls will be intercepted. Rename the SDK's tool with the missingCapabilityToolName option to keep both.`
+          )
         }
       }
 
@@ -845,11 +828,6 @@ async function getTracedToolsList(
       if (feedbackOptions) {
         const feedbackToolName = feedbackOptions.toolName ?? SEND_FEEDBACK_TOOL_NAME
         const alreadyPresent = tools.some((tool) => tool?.name === feedbackToolName)
-        // A compliant client concatenates every page into one list, so only the
-        // first page — the one every client reads, including clients that never
-        // follow `nextCursor` — may carry the virtual tool. Presence, not
-        // truthiness: `cursor: ""` is a continuation page.
-        const isFirstPage = request.params?.cursor == null
         if (isFirstPage && alreadyPresent) {
           data.logger(
             `Warning: Cannot inject agent-feedback tool "${feedbackToolName}" because a real tool already uses that name. The real tool will not be intercepted. To collect feedback alongside it, rename the SDK's tool with collectFeedback: { toolName: "..." }.`

package/src/version.ts

@@ -1 +1 @@
-export const version = '0.16.2'
+export const version = '0.16.4'