@runpod/mcp-server 4.7.0 → 4.8.0

package/dist/http.d.cts

@@ -1,4 +1,5 @@
 import { JSONRPCMessage } from '@modelcontextprotocol/sdk/types.js';
+import { ServerProfile } from './specgen/profile.cjs';
 import { IncomingMessage, ServerResponse } from 'node:http';
 
 type CredentialVerdict = {
@@ -32,8 +33,6 @@ interface RpcSummary {
     client?: string;
 }
 
-type ServerProfile = 'default' | 'directory';
-
 /**
  * Extract the bearer token from an HTTP request's Authorization header.
  * Returns null if the header is missing or malformed.

package/dist/http.d.ts

@@ -1,4 +1,5 @@
 import { JSONRPCMessage } from '@modelcontextprotocol/sdk/types.js';
+import { ServerProfile } from './specgen/profile.js';
 import { IncomingMessage, ServerResponse } from 'node:http';
 
 type CredentialVerdict = {
@@ -32,8 +33,6 @@ interface RpcSummary {
     client?: string;
 }
 
-type ServerProfile = 'default' | 'directory';
-
 /**
  * Extract the bearer token from an HTTP request's Authorization header.
  * Returns null if the header is missing or malformed.

package/dist/http.mjs

@@ -1,3 +1,10 @@
+import {
+  DIRECTORY_PATH,
+  directoryIncludes,
+  directoryOmittedInputs,
+  profileForPath
+} from "./chunk-6IETGSON.mjs";
+
 // src/http.ts
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
 import {
@@ -543,9 +550,36 @@ var generatedTools = [
         },
         ClusterMounts: {
           description: "Storage mounts for a cluster create: `persistent` or `network`, not both. Clusters cannot mount global volumes, so `global` is rejected.",
+          "x-go-type": "BaseMounts",
           allOf: [
             {
               $ref: "#/$defs/BaseMounts"
+            },
+            {
+              type: "object",
+              properties: {
+                persistent: {
+                  type: "object",
+                  properties: {
+                    path: {
+                      type: "string",
+                      minLength: 1
+                    }
+                  }
+                },
+                network: {
+                  type: "array",
+                  items: {
+                    type: "object",
+                    properties: {
+                      path: {
+                        type: "string",
+                        minLength: 1
+                      }
+                    }
+                  }
+                }
+              }
             }
           ],
           unevaluatedProperties: false
@@ -2621,6 +2655,37 @@ var generatedTools = [
       properties: {}
     }
   },
+  {
+    name: "get-organization-user",
+    title: "Get organization user",
+    operationId: "getOrganizationUser",
+    description: "Get an organization member. Returns one member of the authenticated caller's organization by user ID, with the role they hold. Any member can read it. A user who is not a member, including one from another organization, returns 404. Returns 404 when the caller does not belong to an organization, or 403 when organizations are unavailable to the caller.",
+    method: "GET",
+    path: "/v2/organization/users/{id}",
+    params: [
+      {
+        name: "id",
+        location: "path"
+      }
+    ],
+    hasBody: false,
+    annotations: {
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    inputSchema: {
+      type: "object",
+      properties: {
+        id: {
+          type: "string",
+          description: "User identifier"
+        }
+      },
+      required: ["id"]
+    }
+  },
   {
     name: "get-pod",
     title: "Get Pod",
@@ -3760,6 +3825,26 @@ var generatedTools = [
       }
     }
   },
+  {
+    name: "list-organization-users",
+    title: "List organization users",
+    operationId: "listOrganizationUsers",
+    description: "List organization members. Returns every member of the authenticated caller's organization with the role each holds. Any member can read the roster. The list is complete and takes no pagination parameters. Returns 404 when the caller does not belong to an organization, or 403 when organizations are unavailable to the caller.",
+    method: "GET",
+    path: "/v2/organization/users",
+    params: [],
+    hasBody: false,
+    annotations: {
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    inputSchema: {
+      type: "object",
+      properties: {}
+    }
+  },
   {
     name: "list-pod-billing",
     title: "List Pod billing",
@@ -5316,6 +5401,7 @@ function networkFailureResult(error) {
   return {
     ok: false,
     status: unreached ? 503 : 502,
+    requestDelivery: unreached ? "not_sent" : "uncertain",
     payload: unreached ? {
       error: "Could not reach the Runpod API.",
       cause: code,
@@ -5342,6 +5428,7 @@ async function runTool(body) {
       return {
         ok: false,
         status: 504,
+        requestDelivery: "uncertain",
         payload: {
           error: "The Runpod API did not respond before the request deadline.",
           hint: "Transient upstream stall: retry the same call once; if it persists, check https://uptime.runpod.io."
@@ -5400,131 +5487,6 @@ var podTransitionTools = [
   )
 ];
 
-// src/specgen/profile.ts
-var DIRECTORY_PATH = "/directory";
-var IN = { include: true };
-var CREDENTIAL_MANAGEMENT = "Manages stored credentials; OpenAI restricts plugins that handle access credentials, so the directory leaves the whole credential family out.";
-var CREDENTIAL_INPUT = "Takes a secret or password as input; directories forbid collecting credentials.";
-var ALP = "Collects conversation-derived data beyond the task; the directory profile never serves it.";
-var DIRECTORY_TOOLS = {
-  "cancel-job": IN,
-  "create-cluster": IN,
-  "create-delegation": IN,
-  "create-endpoint": IN,
-  "create-global-volume": IN,
-  "create-network-volume": IN,
-  "create-pod": IN,
-  "create-template": IN,
-  "delete-cluster": IN,
-  "delete-endpoint": IN,
-  "delete-global-volume": IN,
-  "delete-network-volume": IN,
-  "delete-pod": IN,
-  "delete-template": IN,
-  "deploy-hub-repo": IN,
-  "endpoint-health": IN,
-  "get-capacity": IN,
-  "get-cluster": IN,
-  "get-cpu-type": IN,
-  "get-data-center": IN,
-  "get-endpoint": IN,
-  "get-endpoint-build": IN,
-  "get-global-volume": IN,
-  "get-gpu-type": IN,
-  "get-job-status": IN,
-  "get-network-volume": IN,
-  "get-organization": IN,
-  "get-pod": IN,
-  "get-ssh-keys": IN,
-  "get-template": IN,
-  "list-audit-logs": IN,
-  "list-billing": IN,
-  "list-cluster-billing": IN,
-  "list-cluster-pods": IN,
-  "list-clusters": IN,
-  "list-cpu-types": IN,
-  "list-data-centers": IN,
-  "list-delegations": IN,
-  "list-endpoint-billing": IN,
-  "list-endpoint-builds": IN,
-  "list-endpoint-releases": IN,
-  "list-endpoint-workers": IN,
-  "list-endpoints": IN,
-  "list-global-volumes": IN,
-  "list-gpu-types": IN,
-  "list-hub-repos": IN,
-  "list-network-volume-billing": IN,
-  "list-network-volumes": IN,
-  "list-pod-billing": IN,
-  "list-pods": IN,
-  "list-public-endpoints": IN,
-  "list-public-templates": IN,
-  "list-serverless-billing": IN,
-  "list-templates": IN,
-  "lookup-concept": IN,
-  "purge-endpoint-queue": IN,
-  "retry-job": IN,
-  "revoke-delegation": IN,
-  "search-concepts": IN,
-  "search-docs": IN,
-  "set-endpoint-gpus": IN,
-  "stream-job": IN,
-  "stream-pod-logs": IN,
-  "stream-worker-logs": IN,
-  "update-cluster": IN,
-  "update-endpoint": IN,
-  "update-global-volume": IN,
-  "update-network-volume": IN,
-  "update-pod": IN,
-  "update-ssh-keys": IN,
-  "update-template": IN,
-  "run-endpoint": { include: true, omitInputs: ["s3Config"] },
-  "runsync-endpoint": { include: true, omitInputs: ["s3Config"] },
-  "pod-action": {
-    include: false,
-    reason: "Takes the transition as an argument; OpenAI asks for one tool per operation, so the directory serves start-pod, stop-pod and restart-pod (terminate is delete-pod)."
-  },
-  "start-pod": IN,
-  "stop-pod": IN,
-  "restart-pod": IN,
-  "list-guides": {
-    include: false,
-    reason: "Serves playbooks that instruct the model how to behave."
-  },
-  "read-guide": {
-    include: false,
-    reason: "Serves playbooks that instruct the model how to behave."
-  },
-  "describe-tool": {
-    include: false,
-    reason: "Fetches schemas the directory already lists in full; directories reject schema fetching."
-  },
-  "create-secret": { include: false, reason: CREDENTIAL_INPUT },
-  "get-secret": { include: false, reason: CREDENTIAL_MANAGEMENT },
-  "list-secrets": { include: false, reason: CREDENTIAL_MANAGEMENT },
-  "delete-secret": { include: false, reason: CREDENTIAL_MANAGEMENT },
-  "get-registry": { include: false, reason: CREDENTIAL_MANAGEMENT },
-  "list-registries": { include: false, reason: CREDENTIAL_MANAGEMENT },
-  "delete-registry": { include: false, reason: CREDENTIAL_MANAGEMENT },
-  "update-secret": { include: false, reason: CREDENTIAL_INPUT },
-  "create-registry": { include: false, reason: CREDENTIAL_INPUT },
-  report_feedback: { include: false, reason: ALP },
-  report_how_user_found_runpod: { include: false, reason: ALP },
-  save_to_journal: { include: false, reason: ALP },
-  read_journal: { include: false, reason: ALP },
-  ask_question: { include: false, reason: ALP }
-};
-function directoryIncludes(name) {
-  return DIRECTORY_TOOLS[name]?.include === true;
-}
-function directoryOmittedInputs(name) {
-  const decision = DIRECTORY_TOOLS[name];
-  return decision?.include ? decision.omitInputs ?? [] : [];
-}
-function profileForPath(pathname) {
-  return pathname.replace(/\/+$/, "") === DIRECTORY_PATH ? "directory" : "default";
-}
-
 // src/specgen/redact.ts
 var REDACTED = "[redacted]";
 var SECRET_KEY = /pass(word|wd)?|secret|token|api_?key|private_?key|credential|auth/i;
@@ -9076,7 +9038,7 @@ function words2(name) {
 
 // src/server.ts
 var SERVER_NAME = "Runpod API Server";
-var SERVER_VERSION = true ? "4.7.0" : "dev";
+var SERVER_VERSION = true ? "4.8.0" : "dev";
 
 // src/specgen/analytics.ts
 import { createHmac } from "crypto";
@@ -9145,6 +9107,7 @@ function captureToolCall(apiKey, event) {
     ...event.clientName ? { client_name: event.clientName } : {},
     ...event.guideKind ? { guide_kind: event.guideKind } : {},
     ...event.blockedBy ? { blocked_by: event.blockedBy } : {},
+    ...event.profile ? { profile: event.profile } : {},
     ...args
   });
 }
@@ -9777,6 +9740,7 @@ function createSpecgenServer(ctx, version = "0.1.0", opts = {}) {
           status: 429,
           durationMs: 0,
           ...verdict.reason ? { blockedBy: verdict.reason } : {},
+          profile,
           ...opts.analytics
         });
       }
@@ -9797,6 +9761,9 @@ function createSpecgenServer(ctx, version = "0.1.0", opts = {}) {
     const curated = servedCuratedTools.find(
       (tool) => tool.name === request.params.name
     );
+    const generated = servedGeneratedTools.find(
+      (tool) => tool.name === request.params.name
+    );
     const omitted = directory ? directoryOmittedInputs(request.params.name).filter((key) => key in args) : [];
     const rejected = omitted.length ? {
       ok: false,
@@ -9809,7 +9776,7 @@ function createSpecgenServer(ctx, version = "0.1.0", opts = {}) {
       args
     ) : null;
     const result = rejected ?? await runTool(
-      () => curated ? curated.handler(ctx, args) : dispatchTool(request.params.name, args)
+      () => curated ? curated.handler(ctx, args) : dispatchTool(generated, request.params.name, args)
     );
     logToolCall({
       tool: request.params.name,
@@ -9829,23 +9796,27 @@ function createSpecgenServer(ctx, version = "0.1.0", opts = {}) {
           args: recordedArgumentValues(curated?.recordedArguments, args),
           guideKind: curated?.recordedGuideKind?.(args)
         },
+        profile,
         ...opts.analytics
       });
     }
     opts.onToolResult?.(request.params.name, result.status);
     if (!result.ok && result.status === 401) opts.onUnauthorized?.();
+    const annotations = curated?.annotations ?? generated?.annotations;
     const payload = redactSecretEnv(
-      result.ok ? result.payload : withRecoveryHint(result, callShapeOnlyTools.has(request.params.name))
+      result.ok ? result.payload : withRecoveryHint(
+        result,
+        annotations?.idempotentHint === true,
+        request.params.name,
+        callShapeOnlyTools.has(request.params.name)
+      )
     );
     return {
       content: [{ type: "text", text: JSON.stringify(payload, null, 2) }],
       isError: !result.ok
     };
   });
-  async function dispatchTool(name, args) {
-    const tool = servedGeneratedTools.find(
-      (candidate) => candidate.name === name
-    );
+  async function dispatchTool(tool, name, args) {
     if (!tool)
       return {
         ok: false,
@@ -9893,8 +9864,24 @@ function errorHint(status, detail) {
   return void 0;
 }
 var CALL_SHAPE_ONLY_HINT = `This tool lists its call shape only; ${DESCRIBE_TOOL_NAME} serves the full argument schema.`;
-function withRecoveryHint(result, listsCallShapeOnly = false) {
+var OUTCOME_UNKNOWN_HINT = "Runpod may have completed this operation even though its response failed. Do not submit it again yet. Check the matching get- or list- tool or the Runpod console using the original request details and time. Lists can lag; if you cannot confirm the outcome, stop and ask the user to verify before retrying.";
+var JOB_OUTCOME_UNKNOWN_HINT = "Runpod may have submitted this Serverless job even though its response failed. Do not submit it again yet. No job-list tool is available, and get-job-status requires a job ID that this failed response may not have returned. Check the endpoint in the Runpod console or ask the user to verify the submission. If the outcome remains uncertain, stop instead of retrying.";
+var RETRY_JOB_OUTCOME_UNKNOWN_HINT = "Runpod may have requeued this Serverless job even though its response failed. Do not retry it again yet. Check get-job-status with the endpoint and job IDs you supplied, or check the Runpod console. If you cannot confirm the outcome, stop and ask the user to verify before retrying.";
+var JOB_SUBMISSION_TOOLS = /* @__PURE__ */ new Set(["run-endpoint", "runsync-endpoint"]);
+function withRecoveryHint(result, idempotent, toolName, listsCallShapeOnly = false) {
   const payload = asRecord(result.payload) ?? { error: result.payload };
+  if (!idempotent && result.status >= 500 && result.requestDelivery !== "not_sent") {
+    const detail = asRecord(payload.detail);
+    const safeDetail = detail ? { ...detail } : void 0;
+    if (safeDetail) delete safeDetail.hint;
+    return {
+      ...payload,
+      ...safeDetail ? { detail: safeDetail } : {},
+      ...payload.code !== void 0 ? { upstreamCode: payload.code } : {},
+      code: "outcome_unknown",
+      hint: toolName === "retry-job" ? RETRY_JOB_OUTCOME_UNKNOWN_HINT : JOB_SUBMISSION_TOOLS.has(toolName) ? JOB_OUTCOME_UNKNOWN_HINT : OUTCOME_UNKNOWN_HINT
+    };
+  }
   const hint = payload.hint ?? asRecord(payload.detail)?.hint ?? errorHint(result.status, detailText(payload));
   const shapeRejected = result.status === 400 || result.status === 422;
   return {