@socialneuron/mcp-server 1.7.15 → 1.7.18
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +28 -0
- package/dist/http.js +669 -207
- package/dist/index.js +15502 -14769
- package/dist/sn.js +13797 -213
- package/package.json +9 -11
- package/tools.lock.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -2,6 +2,34 @@
|
|
|
2
2
|
|
|
3
3
|
All notable changes to `@socialneuron/mcp-server` will be documented in this file.
|
|
4
4
|
|
|
5
|
+
## [1.7.18] - 2026-07-06
|
|
6
|
+
|
|
7
|
+
### Added
|
|
8
|
+
|
|
9
|
+
- **REST API is real.** `POST /v1/tools/{name}`, `GET /v1/tools`, and `GET /v1/openapi.json` are now served (previously documented but 404). The REST surface is a faithful projection of the MCP engine — same auth, scopes, rate limits, credit pool, and tool handlers — not a second implementation.
|
|
10
|
+
- **Generated OpenAPI 3.1 spec** at `/v1/openapi.json` (unauthenticated), built from the tool catalog + the same input schemas `tools/list` serves, so it can never drift from the tools. Import into Postman/Swagger or generate a client.
|
|
11
|
+
- **`sn call <tool> [--json|--arg]`** — CLI tool invoker that mirrors the same projection, resolving the caller's scopes from their key. Four surfaces (MCP · REST · SDK · CLI), one catalog.
|
|
12
|
+
|
|
13
|
+
### Fixed
|
|
14
|
+
|
|
15
|
+
- Scrubbed an internal codename from `schedule_post`'s param descriptions (exposed via the new unauthenticated OpenAPI). Added a regression guard.
|
|
16
|
+
|
|
17
|
+
### Changed
|
|
18
|
+
|
|
19
|
+
- `docs/rest-api.md` updated to the real response shape (MCP result on success, `error_type` on error) and re-links the live OpenAPI spec.
|
|
20
|
+
|
|
21
|
+
## [1.7.16] - 2026-07-06
|
|
22
|
+
|
|
23
|
+
### Fixed
|
|
24
|
+
|
|
25
|
+
- **Structured tool errors (audit #188).** New `toolError()` helper attaches a machine-readable `error_type` (`policy_block` / `validation_error` / `permission_denied` / `billing_error` / `rate_limited` / `not_found` / `upstream_error` / `server_error`) in `structuredContent`, mirrored to the text block — matching the 2025-11-25 spec convention (SEP-1303) so clients can programmatically distinguish a policy block from a validation, permission, or billing error. Input-safety blocks and scope denials are the first adopters.
|
|
26
|
+
- **Rate-limit category bug.** `getRateLimiter` resolved its config from the full `category:key` bucket string, so every per-user/per-tool call silently fell back to the loose 60/min `read` bucket — the intended `posting` (30/min) and `screenshot` (10/min) limits never applied. Config now resolves from the bare category; added `generation` (15/min) and `upload` (20/min) categories.
|
|
27
|
+
- **Capabilities pricing table drift.** The `socialneuron://docs/capabilities` resource showed the Free tier at 100 credits (canonical monthly allocation is 50; 100 is the spending cap) and omitted the 14-day Trial tier. Corrected.
|
|
28
|
+
|
|
29
|
+
### Changed
|
|
30
|
+
|
|
31
|
+
- Removed unused `cors` and `express-rate-limit` dependencies.
|
|
32
|
+
|
|
5
33
|
## [1.7.15] - 2026-07-06
|
|
6
34
|
|
|
7
35
|
### Changed
|