@questpie/mcp 3.28.8 → 3.28.10

package/dist/{create-server-Ty80vPGh.mjs → create-server-DvumhdI_.mjs}

@@ -615,13 +615,37 @@ const PUBLIC_ERROR_CODES = new Set([
 var McpPublicError = class extends Error {
 	code;
 	correlationId;
-	constructor(code, correlationId = randomUUID()) {
-		super(`${publicMessage(code)} (${code}; correlationId=${correlationId})`);
+	/** Caller-safe text appended to the public message; see {@link mcpInvalidInputError}. */
+	detail;
+	constructor(code, correlationId = randomUUID(), detail) {
+		super(`${publicMessage(code, detail)} (${code}; correlationId=${correlationId})`);
 		this.name = "McpPublicError";
 		this.code = code;
 		this.correlationId = correlationId;
+		this.detail = detail;
 	}
 };
+const MAX_INPUT_ISSUES = 8;
+const MAX_ISSUE_PATH_SEGMENT_CHARS = 128;
+const MAX_ISSUE_MESSAGE_CHARS = 200;
+const MAX_INPUT_DETAIL_CHARS = 4096;
+/**
+* The caller's own arguments failed the tool's input schema. Zod's own
+* messages name only schema facts and the caller's keys, so the paths and
+* messages go back to the caller — without them it can only guess which field
+* to fix. Messages an app writes in `refine`/`superRefine`/`addIssue` are
+* returned verbatim, exactly as the MCP SDK already returns them over HTTP;
+* they must not carry server data. Only the input parse may use this: a
+* ZodError thrown later, inside a handler, stays the opaque `invalid_input`.
+*/
+function mcpInvalidInputError(error, correlationId) {
+	const issues = error.issues.slice(0, MAX_INPUT_ISSUES).map((issue) => {
+		return `${issue.path.map((segment) => String(segment).slice(0, MAX_ISSUE_PATH_SEGMENT_CHARS)).join(".") || "(root)"}: ${issue.message.slice(0, MAX_ISSUE_MESSAGE_CHARS)}`;
+	});
+	const omitted = error.issues.length - issues.length;
+	if (omitted > 0) issues.push(`(${omitted} more)`);
+	return new McpPublicError("invalid_input", correlationId, `invalid input — ${issues.join("; ")}`.slice(0, MAX_INPUT_DETAIL_CHARS));
+}
 var McpAccessDeniedError = class extends Error {
 	constructor() {
 		super("MCP access denied");
@@ -762,8 +786,9 @@ function snapshotBoundedMcpValue(value, limits, code, correlationId = randomUUID
 	if (!snapshot.ok) throw new McpPublicError(code, correlationId);
 	return snapshot.value;
 }
-function publicMessage(code) {
-	return code === "access_denied" ? "MCP access denied" : "MCP operation failed";
+function publicMessage(code, detail) {
+	if (code === "access_denied") return "MCP access denied";
+	return detail ? `MCP operation failed: ${detail}` : "MCP operation failed";
 }
 function classifyError(error, correlationId) {
 	if (!!error && (typeof error === "object" || typeof error === "function") && types.isProxy(error)) return new McpPublicError("internal", correlationId);
@@ -825,7 +850,7 @@ function toMcpToolError(error) {
 		isError: true,
 		content: [{
 			type: "text",
-			text: publicMessage(resolved.code)
+			text: publicMessage(resolved.code, resolved.detail)
 		}],
 		_meta: { [PUBLIC_ERROR_META_KEY]: {
 			code: resolved.code,
@@ -1989,7 +2014,9 @@ async function executeCustomToolCall(scope, toolName, tool, input, extra) {
 		},
 		concurrencyKey: () => workloadAuthorization?.concurrencyKey,
 		invoke: async ({ ctx, signal, requestId, correlationId }) => {
-			const parsedInput = tool.config.inputSchema ? await tool.config.inputSchema.parseAsync(input) : await z.object({}).strict().parseAsync(input);
+			const parsed = await (tool.config.inputSchema ?? z.object({}).strict()).safeParseAsync(input);
+			if (!parsed.success) throw mcpInvalidInputError(parsed.error, correlationId);
+			const parsedInput = parsed.data;
 			const invoke = () => tool.handler({
 				input: parsedInput,
 				ctx,

package/dist/index.mjs

@@ -1,7 +1,7 @@
-import { S as scopesFromContext, _ as resolveMcpCatalog, a as customToolWorkloadIdentity, b as requiredScopesForOperation, c as createWorkloadMcpBoundary, f as McpAccessDeniedError, g as toMcpToolError, h as mcpPublicErrorCode, i as customToolDescriptor, l as createRuntimeScope, m as assertBoundedMcpValue, n as createWorkloadMcpServer, o as executeCustomToolCall, p as McpPublicError, r as customToolAllows, s as authorizeWorkload, t as createMcpServer, u as createWorkloadMcpRelease, v as defaultOperationScope, w as mcpTool, x as scopeGateAllows, y as normalizeRequiredScopes } from "./create-server-Ty80vPGh.mjs";
-import { n as mcp_default, t as mcpModule } from "./mcp-BVefYLQh.mjs";
+import { S as scopesFromContext, _ as resolveMcpCatalog, a as customToolWorkloadIdentity, b as requiredScopesForOperation, c as createWorkloadMcpBoundary, f as McpAccessDeniedError, g as toMcpToolError, h as mcpPublicErrorCode, i as customToolDescriptor, l as createRuntimeScope, m as assertBoundedMcpValue, n as createWorkloadMcpServer, o as executeCustomToolCall, p as McpPublicError, r as customToolAllows, s as authorizeWorkload, t as createMcpServer, u as createWorkloadMcpRelease, v as defaultOperationScope, w as mcpTool, x as scopeGateAllows, y as normalizeRequiredScopes } from "./create-server-DvumhdI_.mjs";
+import { n as mcp_default, t as mcpModule } from "./mcp-uf7du4OS.mjs";
 import { t as mcpPlugin } from "./plugin-BZQe1pji.mjs";
-import { t as startStdioServer } from "./stdio-CiEieZ1y.mjs";
+import { t as startStdioServer } from "./stdio-HmbmENQN.mjs";
 import { randomUUID } from "node:crypto";
 
 //#region src/server/workload-tool-port.ts

package/dist/{mcp-BVefYLQh.mjs → mcp-uf7du4OS.mjs}

@@ -1,4 +1,4 @@
-import { C as validateMcpPrincipal, d as getAppMcpRelease, m as assertBoundedMcpValue, t as createMcpServer } from "./create-server-Ty80vPGh.mjs";
+import { C as validateMcpPrincipal, d as getAppMcpRelease, m as assertBoundedMcpValue, t as createMcpServer } from "./create-server-DvumhdI_.mjs";
 import { t as mcpPlugin } from "./plugin-BZQe1pji.mjs";
 import { route } from "questpie";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";

package/dist/modules/mcp.mjs

@@ -1,3 +1,3 @@
-import { t as mcpModule } from "../mcp-BVefYLQh.mjs";
+import { t as mcpModule } from "../mcp-uf7du4OS.mjs";
 
 export { mcpModule };

package/dist/{stdio-CiEieZ1y.mjs → stdio-HmbmENQN.mjs}

@@ -1,4 +1,4 @@
-import { t as createMcpServer } from "./create-server-Ty80vPGh.mjs";
+import { t as createMcpServer } from "./create-server-DvumhdI_.mjs";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 
 //#region src/server/stdio.ts

package/dist/stdio.mjs

@@ -1,3 +1,3 @@
-import { t as startStdioServer } from "./stdio-CiEieZ1y.mjs";
+import { t as startStdioServer } from "./stdio-HmbmENQN.mjs";
 
 export { startStdioServer };

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@questpie/mcp",
-	"version": "3.28.8",
+	"version": "3.28.10",
 	"description": "Model Context Protocol server for QUESTPIE apps, under the app's own access rules",
 	"repository": {
 		"type": "git",
@@ -70,16 +70,16 @@
 	},
 	"dependencies": {
 		"@modelcontextprotocol/sdk": "^1.29.0",
-		"questpie": "^3.28.8",
+		"questpie": "^3.28.10",
 		"zod": "^4.2.1"
 	},
 	"devDependencies": {
-		"@better-auth/oauth-provider": "^1.6.23",
-		"better-auth": "^1.6.23",
+		"@better-auth/oauth-provider": "^1.7.4",
+		"better-auth": "^1.7.4",
 		"bun-types": "latest",
 		"tsdown": "^0.18.3"
 	},
 	"peerDependencies": {
-		"questpie": "^3.28.8"
+		"questpie": "^3.28.10"
 	}
 }