@unclick/mcp-server 0.3.16 → 0.3.18

package/dist/server.js

@@ -1,5 +1,6 @@
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import * as AjvModule from "ajv";
 import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
 import { CATALOG, TOOL_MAP, ENDPOINT_MAP } from "./catalog.js";
 import { createClient } from "./client.js";
@@ -141,6 +142,7 @@ const INTERNAL_TOOLS = [
             "Example: 'I need to resize an image' returns the image tool with its endpoints.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 query: {
                     type: "string",
@@ -161,6 +163,7 @@ const INTERNAL_TOOLS = [
             "Returns a list of tools with their slugs and descriptions.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 category: {
                     type: "string",
@@ -177,6 +180,7 @@ const INTERNAL_TOOLS = [
             "exactly how to call a tool.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 slug: {
                     type: "string",
@@ -194,6 +198,7 @@ const INTERNAL_TOOLS = [
             "Example: endpoint_id='image.resize', params={image: '<base64>', width: 800, height: 600}",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 endpoint_id: {
                     type: "string",
@@ -226,6 +231,7 @@ const VISIBLE_TOOLS = [
             "Do NOT trigger for pure factual lookups (capitals, math, definitions) that require no personal context.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 num_sessions: {
                     type: "number",
@@ -251,18 +257,22 @@ const VISIBLE_TOOLS = [
         description: "Saves a new persistent fact about the user that will be available in all future sessions across every AI tool. " +
             "Use whenever the user shares anything worth keeping -- even if they don't explicitly ask: 'capture', 'noted', " +
             "'remember this', 'log', 'store', 'don't forget', or any preference, decision, correction, contact, project detail, " +
-            "technical choice, or personal detail the user mentions. " +
+            "technical choice, troubleshooting fix, or personal detail the user mentions. " +
+            "When the user reports a solved client/tool issue, save it as category 'troubleshooting' using the shape " +
+            "'Issue: <symptom>. Solution: <fix>'. " +
             "Also trigger proactively when the user corrects you (save the correction immediately), " +
             "reveals a preference by rejecting something, or names a person/tool/project for the first time. " +
             "Do NOT trigger for transient values (today's weather, one-off calculations, temporary state that won't matter next session). " +
             "Do NOT trigger for facts already confirmed stored earlier in this session.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 fact: { type: "string", description: "The fact -- a single atomic statement" },
                 category: {
                     type: "string",
-                    description: "Category: preference, decision, technical, contact, project, general",
+                    enum: ["preference", "decision", "technical", "contact", "project", "troubleshooting", "general"],
+                    description: "Category: preference, decision, technical, contact, project, troubleshooting, general",
                     default: "general",
                 },
                 confidence: { type: "number", minimum: 0, maximum: 1, default: 0.9 },
@@ -288,6 +298,7 @@ const VISIBLE_TOOLS = [
             "Do NOT trigger if load_memory was just called and already returned the relevant context.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 query: { type: "string", description: "Search query" },
                 max_results: { type: "number", minimum: 1, maximum: 50, default: 10 },
@@ -318,9 +329,11 @@ const VISIBLE_TOOLS = [
             "Do NOT trigger for information the user explicitly says is temporary.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 category: {
                     type: "string",
+                    enum: ["identity", "preference", "client", "workflow", "technical", "standing_rule"],
                     description: "Category: identity, preference, client, workflow, technical, standing_rule",
                 },
                 key: { type: "string", description: "Unique key within category (e.g. 'timezone', 'preferred_stack')" },
@@ -343,6 +356,7 @@ const VISIBLE_TOOLS = [
             "Do NOT trigger if the session has already been saved with no new work done since.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 session_id: { type: "string", description: "Unique session identifier (timestamp or UUID)" },
                 summary: { type: "string", description: "Narrative of what happened: decisions, work completed, problems solved" },
@@ -364,6 +378,7 @@ const VISIBLE_TOOLS = [
             "search_memory result. Do NOT use for new information -- use save_fact instead.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 fact_id: { type: "string", description: "UUID of the fact to invalidate" },
                 reason: { type: "string", description: "Why the fact is no longer valid (optional but recommended)" },
@@ -381,6 +396,7 @@ const VISIBLE_TOOLS = [
             "Automatically marks them as read so you do not re-narrate later.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 agent_id: {
                     type: "string",
@@ -400,6 +416,7 @@ const VISIBLE_TOOLS = [
             "Do NOT call this on every session, only the first time on a new device or after a reset.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 agent_id: {
                     type: "string",
@@ -433,6 +450,7 @@ const VISIBLE_TOOLS = [
             "If you're replying to a specific earlier message, set thread_id to that message's id. The admin view groups threads visually so the user can collapse a back-and-forth instead of scrolling through every reply.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 agent_id: {
                     type: "string",
@@ -475,6 +493,7 @@ const VISIBLE_TOOLS = [
             "Optional next_checkin_at acts as a dead-man's-switch. Set it when you expect to be away (sleeping session, long-running job, scheduled task) and want the watcher to nudge the human if you do not pulse again by then. Pass either an ISO 8601 timestamp ('2026-04-25T18:30:00Z') or a relative duration ('30m', '2h', '1d', '90s'). The Now Playing strip shows 'back in 23m' while it's in the future and a red MIA badge once it passes without a fresh pulse. Pass an empty string to clear it.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 agent_id: {
                     type: "string",
@@ -501,6 +520,7 @@ const VISIBLE_TOOLS = [
             "Posts a 'todo-created' Fishbowl event so other agents notice without polling.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 agent_id: { type: "string", description: "Stable identifier for the calling agent. Same value as set_my_emoji." },
                 title: { type: "string", description: "Short title (max 200 chars)" },
@@ -517,6 +537,7 @@ const VISIBLE_TOOLS = [
         description: "Update a todo's title, description, priority, status, or assignee. Use when scope changes, ownership shifts, or you move it between kanban columns ('open', 'in_progress', 'done', 'dropped'). agent_id required for attribution.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 agent_id: { type: "string", description: "Stable identifier for the calling agent." },
                 todo_id: { type: "string", description: "UUID of the todo to update" },
@@ -535,6 +556,7 @@ const VISIBLE_TOOLS = [
         description: "Shortcut for marking a todo as done. Sets status='done' and stamps completed_at. Posts a 'todo-completed' Fishbowl event. agent_id required.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 agent_id: { type: "string" },
                 todo_id: { type: "string" },
@@ -548,6 +570,7 @@ const VISIBLE_TOOLS = [
         description: "Marks a todo as dropped (decided not to do it). Soft state, not a delete. Use when a todo is obsolete but the history still matters. agent_id required.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 agent_id: { type: "string" },
                 todo_id: { type: "string" },
@@ -561,6 +584,7 @@ const VISIBLE_TOOLS = [
         description: "Hard-deletes a todo and any comments on it. Use sparingly: prefer drop_todo so history is preserved. agent_id required for the audit log.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 agent_id: { type: "string" },
                 todo_id: { type: "string" },
@@ -574,6 +598,7 @@ const VISIBLE_TOOLS = [
         description: "Returns todos for this tenant, optionally filtered by status. Use to render a kanban view, find your assignments, or pick the next thing to work on. agent_id required.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 agent_id: { type: "string" },
                 status: { type: "string", enum: ["open", "in_progress", "done", "dropped"], description: "Optional filter" },
@@ -589,6 +614,7 @@ const VISIBLE_TOOLS = [
         description: "Drops a new idea into the Fishbowl Ideas board so the pack can react and vote. Use when something is too speculative for a todo but worth capturing. agent_id required. Posts an 'idea-created' Fishbowl event.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 agent_id: { type: "string" },
                 title: { type: "string", description: "Short title (max 200 chars)" },
@@ -603,6 +629,7 @@ const VISIBLE_TOOLS = [
         description: "Edit an idea's title, description, or status ('proposed', 'voting', 'locked', 'parked', 'rejected'). agent_id required.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 agent_id: { type: "string" },
                 idea_id: { type: "string" },
@@ -619,6 +646,7 @@ const VISIBLE_TOOLS = [
         description: "Cast or change your vote on an idea ('up' or 'down'). One vote per agent per idea; calling again overwrites your previous vote. agent_id required.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 agent_id: { type: "string" },
                 idea_id: { type: "string" },
@@ -633,6 +661,7 @@ const VISIBLE_TOOLS = [
         description: "Returns ideas for this tenant sorted by score (upvotes minus downvotes) desc, optionally filtered by status. agent_id required.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 agent_id: { type: "string" },
                 status: { type: "string", enum: ["proposed", "voting", "locked", "parked", "rejected"] },
@@ -647,6 +676,7 @@ const VISIBLE_TOOLS = [
         description: "Converts an idea into a tracked todo and locks the idea. Requires either net upvotes >= 1, or admin caller. Sets idea.status='locked' and idea.promoted_to_todo_id. Posts an 'idea-promoted' Fishbowl event. agent_id required.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 agent_id: { type: "string" },
                 idea_id: { type: "string" },
@@ -662,6 +692,7 @@ const VISIBLE_TOOLS = [
         description: "Adds a comment to a Fishbowl todo or idea. Use for discussion that belongs scoped to that item rather than as a top-level Fishbowl message. target_kind is 'todo' or 'idea'. agent_id required.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 agent_id: { type: "string" },
                 target_kind: { type: "string", enum: ["todo", "idea"] },
@@ -677,6 +708,7 @@ const VISIBLE_TOOLS = [
         description: "Returns comments on a specific Fishbowl todo or idea, in chronological order. agent_id required.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 agent_id: { type: "string" },
                 target_kind: { type: "string", enum: ["todo", "idea"] },
@@ -702,6 +734,7 @@ const VISIBLE_TOOLS = [
             "Recommended start-of-session loop: (1) call read_messages to catch up on Fishbowl (you're doing this now), (2) check mentions[] for anything addressed to you, (3) call set_my_status to declare you're back online and set next_checkin_at if you expect to be away again.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 agent_id: {
                     type: "string",
@@ -738,6 +771,7 @@ const DIRECT_TOOLS = [
         description: "Shorten a URL using UnClick. Returns a short URL and its code.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 url: { type: "string", description: "The URL to shorten" },
             },
@@ -749,6 +783,7 @@ const DIRECT_TOOLS = [
         description: "Generate a QR code from text or a URL. Returns base64-encoded PNG or SVG.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 text: { type: "string", description: "Text or URL to encode in the QR code" },
                 format: { type: "string", enum: ["png", "svg"], default: "png" },
@@ -762,6 +797,7 @@ const DIRECT_TOOLS = [
         description: "Compute a cryptographic hash (MD5, SHA1, SHA256, SHA512) of text.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 text: { type: "string" },
                 algorithm: {
@@ -778,6 +814,7 @@ const DIRECT_TOOLS = [
         description: "Transform text case: upper, lower, title, sentence, camelCase, snake_case, kebab-case, PascalCase.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 text: { type: "string" },
                 to: {
@@ -793,6 +830,7 @@ const DIRECT_TOOLS = [
         description: "Validate an email address format.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 email: { type: "string" },
             },
@@ -804,6 +842,7 @@ const DIRECT_TOOLS = [
         description: "Validate a URL format, optionally check if it's reachable.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 url: { type: "string" },
                 check_reachable: { type: "boolean", default: false },
@@ -816,6 +855,7 @@ const DIRECT_TOOLS = [
         description: "Resize an image (provided as base64) to specified dimensions.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 image: { type: "string", description: "Base64-encoded image (with or without data: prefix)" },
                 width: { type: "number" },
@@ -834,6 +874,7 @@ const DIRECT_TOOLS = [
         description: "Parse a CSV string into a JSON array of rows.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 csv: { type: "string" },
                 header: { type: "boolean", default: true },
@@ -847,9 +888,17 @@ const DIRECT_TOOLS = [
         description: "Format / pretty-print a JSON string.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 json: { type: "string" },
-                indent: { description: "2, 4, or 'tab'", default: 2 },
+                indent: {
+                    oneOf: [
+                        { type: "number", enum: [2, 4] },
+                        { type: "string", enum: ["tab"] },
+                    ],
+                    description: "2, 4, or 'tab'",
+                    default: 2,
+                },
             },
             required: ["json"],
         },
@@ -859,6 +908,7 @@ const DIRECT_TOOLS = [
         description: "Encode or decode text. Supports base64, URL, HTML, and hex.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 text: { type: "string" },
                 operation: {
@@ -879,6 +929,7 @@ const DIRECT_TOOLS = [
         description: "Generate one or more random UUIDs (v4).",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 count: { type: "number", minimum: 1, maximum: 100, default: 1 },
             },
@@ -889,6 +940,7 @@ const DIRECT_TOOLS = [
         description: "Generate a secure random password.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 length: { type: "number", minimum: 4, maximum: 512, default: 16 },
                 uppercase: { type: "boolean", default: true },
@@ -903,6 +955,7 @@ const DIRECT_TOOLS = [
         description: "Convert a cron expression to a human-readable description and get next occurrences.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 expression: { type: "string", description: "e.g. '0 9 * * 1-5' (weekdays at 9am)" },
                 next_count: { type: "number", minimum: 1, maximum: 10, default: 5 },
@@ -915,6 +968,7 @@ const DIRECT_TOOLS = [
         description: "Parse an IP address -- get decimal, binary, hex, and type (private/loopback/multicast).",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 ip: { type: "string" },
             },
@@ -926,8 +980,24 @@ const DIRECT_TOOLS = [
         description: "Convert a color between hex, RGB, HSL, and HSV formats.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 color: {
+                    oneOf: [
+                        { type: "string" },
+                        {
+                            type: "object",
+                            additionalProperties: false,
+                            properties: { r: { type: "number" }, g: { type: "number" }, b: { type: "number" } },
+                            required: ["r", "g", "b"],
+                        },
+                        {
+                            type: "object",
+                            additionalProperties: false,
+                            properties: { h: { type: "number" }, s: { type: "number" }, l: { type: "number" } },
+                            required: ["h", "s", "l"],
+                        },
+                    ],
                     description: "Color as hex string (e.g. '#ff6b6b'), RGB object {r,g,b}, or HSL object {h,s,l}",
                 },
             },
@@ -939,6 +1009,7 @@ const DIRECT_TOOLS = [
         description: "Test a regex pattern against text and get all matches with groups.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 pattern: { type: "string", description: "Regex pattern (no surrounding slashes)" },
                 flags: { type: "string", description: "Flags like 'gi'", default: "" },
@@ -952,8 +1023,10 @@ const DIRECT_TOOLS = [
         description: "Convert a timestamp (ISO, Unix seconds, or Unix ms) to all common formats.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 timestamp: {
+                    oneOf: [{ type: "string" }, { type: "number" }],
                     description: "ISO string, Unix seconds (e.g. 1700000000), or Unix ms (e.g. 1700000000000)",
                 },
             },
@@ -965,6 +1038,7 @@ const DIRECT_TOOLS = [
         description: "Compare two strings and return a unified diff showing what changed.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 a: { type: "string", description: "Original text" },
                 b: { type: "string", description: "New text" },
@@ -977,6 +1051,7 @@ const DIRECT_TOOLS = [
         description: "Store a value in the UnClick key-value store with optional TTL.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 key: { type: "string" },
                 value: { description: "Any JSON-serializable value" },
@@ -990,6 +1065,7 @@ const DIRECT_TOOLS = [
         description: "Retrieve a value from the UnClick key-value store.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 key: { type: "string" },
             },
@@ -1004,6 +1080,7 @@ const DIRECT_TOOLS = [
             "timeout/503 → high, 4xx/invalid → low, everything else → medium.",
         inputSchema: {
             type: "object",
+            additionalProperties: false,
             properties: {
                 tool_name: {
                     type: "string",
@@ -1030,6 +1107,58 @@ const DIRECT_TOOLS = [
         },
     },
 ];
+const AjvCtor = (AjvModule.default ?? AjvModule);
+const ajv = new AjvCtor({
+    allErrors: true,
+});
+const TOOL_INPUT_SCHEMAS = new Map();
+const TOOL_VALIDATORS = new Map();
+function registerToolInputSchema(tool) {
+    if (tool.inputSchema)
+        TOOL_INPUT_SCHEMAS.set(tool.name, tool.inputSchema);
+}
+for (const tool of [...INTERNAL_TOOLS, ...VISIBLE_TOOLS, ...DIRECT_TOOLS, ...ADDITIONAL_TOOLS]) {
+    registerToolInputSchema(tool);
+}
+// Backwards-compatible memory tool names still dispatch directly, so they need
+// the same runtime guard as the newer visible names.
+for (const [alias, canonical] of Object.entries(MEMORY_TOOL_ALIASES)) {
+    const schema = TOOL_INPUT_SCHEMAS.get(alias);
+    if (schema)
+        TOOL_INPUT_SCHEMAS.set(canonical, schema);
+}
+function formatAjvError(error) {
+    const additionalProperty = error.keyword === "additionalProperties" &&
+        error.params &&
+        typeof error.params.additionalProperty === "string"
+        ? ` '${error.params.additionalProperty}'`
+        : "";
+    return {
+        path: error.instancePath || error.dataPath || "/",
+        message: `${error.message ?? "invalid input"}${additionalProperty}`,
+        keyword: error.keyword,
+    };
+}
+export function validateToolArgumentsForRuntime(toolName, args) {
+    const schema = TOOL_INPUT_SCHEMAS.get(toolName);
+    if (!schema)
+        return null;
+    let validate = TOOL_VALIDATORS.get(toolName);
+    if (!validate) {
+        const compiled = ajv.compile(schema);
+        TOOL_VALIDATORS.set(toolName, compiled);
+        validate = compiled;
+    }
+    const validator = validate;
+    if (validator(args))
+        return null;
+    return {
+        code: "validation_error",
+        tool: toolName,
+        message: `Invalid arguments for ${toolName}`,
+        details: (validator.errors ?? []).map(formatAjvError),
+    };
+}
 const DIRECT_HANDLERS = {
     unclick_shorten_url: (c, a) => c.call("POST", "/v1/shorten", a),
     unclick_generate_qr: (c, a) => c.call("POST", "/v1/qr", a),
@@ -1105,6 +1234,8 @@ export function createServer() {
             "               'facts about me', 'who am I', or references any past work.",
             "  3. SAVE   -- call `save_fact` the moment the user shares anything",
             "               worth keeping: name, preferences, decisions, corrections.",
+            "               For solved client/tool issues, use category `troubleshooting`",
+            "               and write `Issue: <symptom>. Solution: <fix>`.",
             "               Use `save_identity` for standing rules that apply every",
             "               session (role, timezone, stack, workflow).",
             "  4. END    -- call `save_session` before closing. Record decisions made,",
@@ -1128,6 +1259,13 @@ export function createServer() {
     server.setRequestHandler(CallToolRequestSchema, async (request) => {
         const { name, arguments: rawArgs } = request.params;
         const args = (rawArgs ?? {});
+        const validationError = validateToolArgumentsForRuntime(name, args);
+        if (validationError) {
+            return {
+                content: [{ type: "text", text: JSON.stringify(validationError, null, 2) }],
+                isError: true,
+            };
+        }
         // Fire-and-forget Umami event for tool-usage stats. Never awaited.
         trackToolCall(name);
         try {