circal-mcp 0.4.0 → 0.4.1

package/dist/circal-mcp.mjs

@@ -5182,7 +5182,13 @@ function performQuickAdd(contents, text, date, pin) {
   };
 }
 var KEYED_ID_PREFIX = "x-";
+var UPSERT_KEY_RE = /^[A-Za-z0-9._:-]{1,64}$/;
 function keyedId(key) {
+  if (!UPSERT_KEY_RE.test(key)) {
+    throw new RefusalError(
+      `"key" must be 1-64 characters of letters, digits and . _ : - \u2014 it becomes the record's id`
+    );
+  }
   return `${KEYED_ID_PREFIX}${key}`;
 }
 function performCreateEvent(contents, input, key, pin) {
@@ -5569,8 +5575,8 @@ function eventFieldsShape() {
     recurrence: recurrenceSchema.optional()
   };
 }
-var upsertKeySchema = z.string().regex(/^[A-Za-z0-9._:-]{1,64}$/, "letters, digits, . _ : -, up to 64").describe(
-  "Caller-chosen external key for idempotent upsert: the same key always names the same event, so re-running a mirror updates in place instead of duplicating. Omitted, every call creates a fresh event."
+var upsertKeySchema = z.string().regex(UPSERT_KEY_RE, "letters, digits, . _ : -, up to 64").describe(
+  "Caller-chosen external key for idempotent upsert: the same key always names the same event, so re-running a mirror updates in place instead of duplicating. A keyed create also overrides a prior deletion \u2014 the source of truth re-asserts \u2014 so to drop a record for good, remove it from the source, not just the calendar. Omitted, every call creates a fresh event."
 );
 var createEventFieldsSchema = z.strictObject({
   ...eventFieldsShape(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "circal-mcp",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "type": "module",
   "description": "MCP server for circal — read and write your calendar through its mirror file or its encrypted cloud copy",
   "license": "AGPL-3.0-only",