drawio-mcp-server 2.1.0 → 2.1.1

package/README.md

@@ -41,7 +41,7 @@ Experimental: integration with the **draw.io desktop (Electron) app** is in prog
 
 ## Requirements
 
-- **Node.js** (v20 or higher) - Runtime environment for the MCP server
+- **Node.js** (v22 or higher; tested against v22 LTS and v24 LTS) - Runtime environment for the MCP server
 - **MCP client** - Claude Desktop, Claude Code, Zed, Codex, OpenCode, or any MCP-compatible host
 
 ### For Built-in Editor

package/build/index.js

@@ -12,7 +12,7 @@ import { join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { readFileSync, existsSync, statSync, readdirSync, realpathSync, } from "node:fs";
 import { WebSocket, WebSocketServer } from "ws";
-const VERSION = process.env.npm_package_version ?? "2.1.0";
+const VERSION = process.env.npm_package_version ?? "2.1.1";
 import { buildConfig, defaultConfig, hasFlag, shouldShowHelp, getHttpFeatureConfig, } from "./config.js";
 import { installDesktopPlugin } from "./install-desktop-plugin.js";
 import { bus_reply_stream, bus_request_stream, } from "./types.js";

package/build/register-tool.js

@@ -1,31 +1,83 @@
 import { stripSchemaRecursively } from "./strip-schema.js";
 /**
- * Creates a wrapped version of McpServer.tool that automatically strips
- * `$schema` from the inputSchema after tool registration.
+ * Wraps an `McpServer` so that the `tools/list` response strips the
+ * `$schema` key from every tool's `inputSchema` and `outputSchema`.
  *
- * The `$schema` key injected by zodToJsonSchema causes Claude Code to silently
- * drop tools because the `$` character fails Anthropic's validation regex
- * `^[a-zA-Z0-9_.-]{1,64}$`.
+ * Why this is necessary:
  *
- * @param server - The McpServer instance to wrap
- * @returns The same server instance, but with a modified tool() method
+ * - The MCP SDK lazily serializes tool schemas: it stores the Zod object
+ *   verbatim at registration time and only converts to JSON Schema
+ *   (via `zodToJsonSchema` / `z4mini.toJSONSchema`) when a client issues
+ *   `tools/list`. The conversion emits a top-level
+ *   `"$schema": "http://json-schema.org/draft-07/schema#"` field.
+ *
+ * - Claude Code's MCP ingest layer can't tolerate the `$` character in
+ *   schema keys (Anthropic's parameter-name regex is
+ *   `^[a-zA-Z0-9_.-]{1,64}$`). When `$schema` is present, the entire
+ *   `properties` object is dropped, leaving tools effectively schemaless.
+ *   The user can see the tool name but the LLM has no way to know which
+ *   arguments to send, so calls fail at runtime.
+ *
+ * - A previous attempt at this fix tried to strip `$schema` from the
+ *   stored `_registeredTools[name].inputSchema` via `setTimeout(0)`.
+ *   That was a no-op against modern SDKs because the stored value at
+ *   that point is the raw Zod object (which doesn't have `$schema`).
+ *   The `$schema` key is added by `toJsonSchemaCompat` at serialization
+ *   time, not at registration time.
+ *
+ * The fix here intercepts the `tools/list` request handler that the SDK
+ * registers internally on the first `server.tool(...)` call, and wraps
+ * it so the response runs through `stripSchemaRecursively` before being
+ * returned to the client.
  */
 export function createServerWithSchemaStripping(server) {
-    // Store original tool method
     const originalTool = server.tool.bind(server);
-    // Override tool method
-    server.tool = function tool(name, description, inputSchema, handler) {
-        // Call original tool method
-        const result = originalTool(name, description, inputSchema, handler);
-        // Strip $schema from the registered tool's inputSchema
-        // This must be done after registration
-        setTimeout(() => {
-            const registeredTool = server._registeredTools?.[name];
-            if (registeredTool?.inputSchema) {
-                registeredTool.inputSchema = stripSchemaRecursively(registeredTool.inputSchema);
-            }
-        }, 0);
+    let patched = false;
+    server.tool = function tool(...args) {
+        const result = originalTool(...args);
+        // The SDK lazily registers the tools/list handler on the first
+        // server.tool() call (via setToolRequestHandlers). After that call
+        // returns, the handler is in place and we can wrap it.
+        if (!patched) {
+            patched = true;
+            patchToolsListHandler(server);
+        }
         return result;
     };
     return server;
 }
+function patchToolsListHandler(server) {
+    // The McpServer wraps an inner Server (the low-level protocol layer).
+    // Its `_requestHandlers` Map stores per-method handlers keyed by the
+    // method name literal (e.g. "tools/list").
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const innerServer = server.server;
+    const handlers = innerServer?._requestHandlers;
+    if (!handlers) {
+        // SDK internals changed; fail closed (no-op) so we don't crash the
+        // server. The tools will still work but schemas will leak `$schema`.
+        return;
+    }
+    const original = handlers.get("tools/list");
+    if (!original) {
+        return;
+    }
+    handlers.set("tools/list", async (...callArgs) => {
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const response = await original(...callArgs);
+        if (response && Array.isArray(response.tools)) {
+            response.tools = response.tools.map(stripToolSchemas);
+        }
+        return response;
+    });
+}
+function stripToolSchemas(tool) {
+    const next = { ...tool };
+    if (next.inputSchema) {
+        next.inputSchema = stripSchemaRecursively(next.inputSchema);
+    }
+    if (next.outputSchema) {
+        next.outputSchema = stripSchemaRecursively(next.outputSchema);
+    }
+    return next;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "drawio-mcp-server",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "description": "Provides Draw.io services to MCP Clients",
   "type": "module",
   "main": "build/index.js",
@@ -34,11 +34,11 @@
     "@hono/node-server": "1.19.13",
     "@modelcontextprotocol/sdk": "1.29.0",
     "cachedir": "2.4.0",
-    "hono": "4.12.14",
+    "hono": "4.12.23",
     "nanoid": "5.1.6",
     "node-forge": "1.4.0",
     "unzipper": "0.12.3",
-    "ws": "8.18.3",
+    "ws": "8.21.0",
     "zod": "4.2.1"
   },
   "devDependencies": {