@thehammer/schema-mcp-server 1.0.12 → 1.0.13

package/dist/index.js

@@ -19,12 +19,45 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
 import * as api from "./api-client.js";
+import { assertVersionCurrent } from "./version-check.js";
 const require = createRequire(import.meta.url);
 const pkg = require("../package.json");
+/**
+ * Version frozen into memory at module load. Compared against the on-disk
+ * package.json before every tool handler runs, so if the server's own
+ * installation is updated during runtime (npm publish, npm install,
+ * manual replacement) the next tool call halts the process instead of
+ * silently serving stale code.
+ */
+const LOADED_VERSION = pkg.version;
 const server = new McpServer({
     name: "schema-mcp-server",
-    version: pkg.version,
+    version: LOADED_VERSION,
 });
+/**
+ * Prepend the version check to every tool handler — ONE place, all tools.
+ *
+ * `server.tool(name, desc, schema, handler)` is called 35+ times throughout
+ * this file. Rather than editing every call site, we override `server.tool`
+ * once right after the server is constructed: the override wraps the handler
+ * (always the last argument across all SDK overloads) with assertVersionCurrent,
+ * then delegates to the original implementation. New tools added in the future
+ * are covered automatically — no per-tool bookkeeping required.
+ *
+ * The check reads package.json via fs.readFileSync + JSON.parse on every call.
+ * `require()` would cache the first read and defeat the purpose. Sync fs reads
+ * of a ~500-byte file are measured in microseconds, so no caching is needed.
+ */
+const __origTool = server.tool.bind(server);
+server.tool = (...args) => {
+    const handlerIdx = args.length - 1;
+    const handler = args[handlerIdx];
+    args[handlerIdx] = async (...handlerArgs) => {
+        assertVersionCurrent(LOADED_VERSION);
+        return handler(...handlerArgs);
+    };
+    return __origTool(...args);
+};
 /**
  * Role-based tool registration.
  *

package/dist/version-check.d.ts

@@ -0,0 +1 @@
+export declare function assertVersionCurrent(loadedVersion: string): void;

package/dist/version-check.js

@@ -0,0 +1,20 @@
+/**
+ * Runtime version check: compares the MCP server's in-memory version to its
+ * on-disk package.json and halts the process on mismatch so stale-code runs
+ * fail loudly instead of serving old behavior silently.
+ *
+ * Wired in once at the top of index.ts via a `server.tool` override — every
+ * tool handler runs this check before doing any work. See the override block
+ * in index.ts for the single call site.
+ */
+import fs from "node:fs";
+import { fileURLToPath } from "node:url";
+const pkgPath = fileURLToPath(new URL("../package.json", import.meta.url));
+export function assertVersionCurrent(loadedVersion) {
+    const diskVersion = JSON.parse(fs.readFileSync(pkgPath, "utf8"))
+        .version;
+    if (diskVersion !== loadedVersion) {
+        console.error(`[schema-mcp-server] VERSION MISMATCH: loaded v${loadedVersion} in memory, v${diskVersion} on disk. Restart required.`);
+        process.exit(1);
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thehammer/schema-mcp-server",
-  "version": "1.0.12",
+  "version": "1.0.13",
   "description": "MCP server for Schema Builder - translates Claude Code tool calls into Laravel API requests",
   "license": "MIT",
   "repository": {
@@ -21,7 +21,7 @@
     "node": ">=18"
   },
   "scripts": {
-    "build": "tsc",
+    "build": "tsc && chmod +x dist/index.js",
     "start": "node dist/index.js",
     "dev": "tsx watch src/index.ts"
   },