honeybook-mcp 0.10.2 → 0.10.3

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "HoneyBook client-portal tools for Claude Code",
-    "version": "0.10.2"
+    "version": "0.10.3"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "HoneyBook",
       "source": "./",
       "description": "HoneyBook client-portal MCP for Claude — view wedding-vendor contracts and invoices via MCP",
-      "version": "0.10.2",
+      "version": "0.10.3",
       "author": {
         "name": "Chris Chall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "honeybook",
   "displayName": "HoneyBook",
-  "version": "0.10.2",
+  "version": "0.10.3",
   "description": "HoneyBook client-portal MCP for Claude — view wedding-vendor contracts and invoices via MCP",
   "author": {
     "name": "Chris Chall",

package/dist/bundle.js

@@ -40549,6 +40549,11 @@ function validateInnerRequest(raw) {
     if (raw.init.inPage !== void 0) {
       assertBoolean(raw.init.inPage, "inner.init.inPage");
     }
+    if (raw.init.credentials !== void 0) {
+      if (raw.init.credentials !== "include" && raw.init.credentials !== "omit") {
+        throw new ProtocolError("inner.init.credentials: must be 'include' or 'omit'");
+      }
+    }
     return raw;
   }
   if (raw.op === "read_cookies") {
@@ -42827,9 +42832,9 @@ var FetchproxyServer = class {
   async _fetchOnceWithTimeout(init) {
     const id = this.nextRequestId++;
     const inner = { type: "request", id, op: "fetch", init };
-    const pending = new Promise((resolve2) => {
+    const pending = this.guardPending(new Promise((resolve2) => {
       this.pending.set(id, resolve2);
-    });
+    }));
     await this.sendInnerFrame(inner);
     const timeoutMs = this.opts.fetchTimeoutMs;
     if (timeoutMs === void 0 || timeoutMs <= 0)
@@ -42876,6 +42881,34 @@ var FetchproxyServer = class {
    * already surface for fetch timeouts). `0`/unset opts out (unbounded),
    * matching the fetch path.
    */
+  /**
+   * Register a verb's pending promise and keep an early rejection from being
+   * fatal.
+   *
+   * Every verb stores its resolver, then AWAITS `sendInnerFrame` before the
+   * caller attaches a handler — and that send does real work (sealing, a
+   * socket write), so it yields across event-loop turns. Anything that drains
+   * the pending maps inside that window rejects a promise nothing is
+   * listening to yet: a refused pairing (`rejectAllPending(pairingErrorMessage
+   * (code))`), an extension disconnect, a `close()`. Under Node's default
+   * `--unhandled-rejections=throw` that ends the PROCESS, so an MCP that
+   * should have reported "approve pair code NNN-NN" dies instead, and each
+   * respawn mints a fresh code nobody can approve (#329).
+   *
+   * The no-op catch is a listener, not a swallow. `.catch()` derives a NEW
+   * promise and leaves this one's rejection intact, so `_withVerbTimeout` and
+   * the caller still see it — the only thing that changes is that the
+   * rejection is never unhandled.
+   *
+   * This is the same hazard `_withVerbTimeout`'s timer already guards against
+   * from the other side, where it drops the resolver "so a late bridge
+   * response doesn't become an unhandled promise that crashes the host".
+   */
+  guardPending(pending) {
+    pending.catch(() => {
+    });
+    return pending;
+  }
   async _withVerbTimeout(pending, pendingMap, id, url2, requestedTimeoutMs) {
     const timeoutMs = this.opts.fetchTimeoutMs;
     if (timeoutMs === void 0 || timeoutMs <= 0)
@@ -42987,7 +43020,11 @@ var FetchproxyServer = class {
       // Spread rather than `inPage: opts.inPage`: the wire's validator treats
       // the key's PRESENCE as the request, and a literal `undefined` would
       // both serialize away inconsistently and read as "asked for" here.
-      ...opts.inPage === true ? { inPage: true } : {}
+      ...opts.inPage === true ? { inPage: true } : {},
+      // Spread for the reason `inPage` is: only a deliberate 'omit' goes on
+      // the wire, so an untouched request serialises byte-identically to
+      // every version before this option existed.
+      ...opts.credentials === "omit" ? { credentials: "omit" } : {}
     };
     const result = await this.fetch(init);
     if (!result.ok) {
@@ -43215,9 +43252,9 @@ var FetchproxyServer = class {
       const tabUrl = `https://${host}/`;
       inner = { type: "request", id, op: "read_cookies", init: { tabUrl } };
     }
-    const pending = new Promise((resolve2) => {
+    const pending = this.guardPending(new Promise((resolve2) => {
       this.pendingReadCookies.set(id, resolve2);
-    });
+    }));
     await this.sendInnerFrame(inner);
     const result = await this._withVerbTimeout(pending, this.pendingReadCookies, id, `https://${host}`);
     if (!result.ok) {
@@ -43274,9 +43311,9 @@ var FetchproxyServer = class {
         ...cookiePath !== void 0 ? { path: cookiePath } : {}
       }
     };
-    const pending = new Promise((resolve2, reject) => {
+    const pending = this.guardPending(new Promise((resolve2, reject) => {
       this.pendingWriteCookies.set(id, { resolve: resolve2, reject });
-    });
+    }));
     await this.sendInnerFrame(inner);
     return this._withVerbTimeout(pending, this.pendingWriteCookies, id, `https://${host}`);
   }
@@ -43337,9 +43374,9 @@ var FetchproxyServer = class {
         ...opts.pointers ? { pointers: { ...opts.pointers } } : {}
       }
     };
-    const pending = new Promise((resolve2, reject) => {
+    const pending = this.guardPending(new Promise((resolve2, reject) => {
       this.pendingStorage.set(id, { resolve: resolve2, reject });
-    });
+    }));
     await this.sendInnerFrame(inner);
     return this._withVerbTimeout(pending, this.pendingStorage, id, `https://${host}`);
   }
@@ -43442,9 +43479,9 @@ var FetchproxyServer = class {
         ...opts.timeoutMs !== void 0 ? { timeoutMs: opts.timeoutMs } : {}
       }
     };
-    const pending = new Promise((resolve2, reject) => {
+    const pending = this.guardPending(new Promise((resolve2, reject) => {
       this.pendingCapture.set(id, { resolve: resolve2, reject });
-    });
+    }));
     await this.sendInnerFrame(inner);
     return this._withVerbTimeout(
       pending,
@@ -43535,9 +43572,9 @@ var FetchproxyServer = class {
         ...opts.timeoutMs !== void 0 ? { timeoutMs: opts.timeoutMs } : {}
       }
     };
-    const pending = new Promise((resolve2, reject) => {
+    const pending = this.guardPending(new Promise((resolve2, reject) => {
       this.pendingRedirect.set(id, { resolve: resolve2, reject });
-    });
+    }));
     await this.sendInnerFrame(inner);
     return this._withVerbTimeout(
       pending,
@@ -43625,9 +43662,9 @@ var FetchproxyServer = class {
         ...opts.timeoutMs !== void 0 ? { timeoutMs: opts.timeoutMs } : {}
       }
     };
-    const pending = new Promise((resolve2, reject) => {
+    const pending = this.guardPending(new Promise((resolve2, reject) => {
       this.pendingDownload.set(id, { resolve: resolve2, reject });
-    });
+    }));
     await this.sendInnerFrame(inner);
     return this._withVerbTimeout(
       pending,
@@ -43683,9 +43720,9 @@ var FetchproxyServer = class {
         keys: [...opts.keys]
       }
     };
-    const pending = new Promise((resolve2, reject) => {
+    const pending = this.guardPending(new Promise((resolve2, reject) => {
       this.pendingIdb.set(id, { resolve: resolve2, reject });
-    });
+    }));
     await this.sendInnerFrame(inner);
     return this._withVerbTimeout(pending, this.pendingIdb, id, origin);
   }
@@ -43723,9 +43760,9 @@ var FetchproxyServer = class {
       op: "read_dom",
       init: { origin, names: [...opts.names] }
     };
-    const pending = new Promise((resolve2, reject) => {
+    const pending = this.guardPending(new Promise((resolve2, reject) => {
       this.pendingStorage.set(id, { resolve: resolve2, reject });
-    });
+    }));
     await this.sendInnerFrame(inner);
     return this._withVerbTimeout(pending, this.pendingStorage, id, origin);
   }
@@ -43769,9 +43806,9 @@ var FetchproxyServer = class {
         ...opts.tabUrl !== void 0 ? { tabUrl: opts.tabUrl } : {}
       }
     };
-    const pending = new Promise((resolve2, reject) => {
+    const pending = this.guardPending(new Promise((resolve2, reject) => {
       this.pendingGraphql.set(id, { resolve: resolve2, reject });
-    });
+    }));
     await this.sendInnerFrame(inner);
     return this._withVerbTimeout(pending, this.pendingGraphql, id, opts.name);
   }
@@ -44239,6 +44276,8 @@ var CREDENTIAL_ARMS = /* @__PURE__ */ new Set([
   "ok",
   "no_credential",
   "credential_rejected",
+  "session_expired",
+  "verification_pending",
   "timeout",
   "http",
   "transport",
@@ -44255,6 +44294,10 @@ function credentialHint(arm, prefix, hostLabel, source) {
       return `No credential resolved. Nothing was available to authenticate with \u2014 sign in and reconnect the connector so ${prefix} receives a token, or set the documented environment variable.`;
     case "credential_rejected":
       return `${hostLabel} rejected the credential from '${source}'. It is present but no longer valid \u2014 most often expired or revoked upstream. Re-authenticate and reconnect; retrying will not fix it.`;
+    case "session_expired":
+      return `The credential from '${source}' is configured, but no session is live \u2014 ${hostLabel} served a sign-in page rather than the data. Sign in again; a cookie-session portal expires these on its own, so this recurs between uses.`;
+    case "verification_pending":
+      return `${hostLabel} is holding the sign-in on a second factor rather than refusing it. Supply the verification code the ACCOUNT HOLDER received \u2014 the credential itself is not the problem, so changing it will not help.`;
     case "timeout":
       return `The credential from '${source}' resolved, but ${hostLabel} did not answer in time. Usually transient \u2014 retry. If it persists, ${hostLabel} is slow or unreachable from here.`;
     case "http":
@@ -44265,12 +44308,102 @@ function credentialHint(arm, prefix, hostLabel, source) {
       return `Unexpected failure \u2014 see error.message.`;
   }
 }
+function credentialHealthcheckDescription(hostLabel) {
+  return `Resolves the credential the way real tools do, then makes one authenticated request to ${hostLabel}. Reports which source supplied the credential, whether ${hostLabel} accepted it, the round-trip time, and a plain-English hint distinguishing 'no credential' from 'credential rejected' from 'a ${hostLabel}-side problem'. Read-only; never returns the credential itself.`;
+}
+async function runCredentialHealthcheck(args) {
+  const { prefix, hostLabel, probePath, resolveCredential, probeFn, classifyThrown, hints } = args;
+  const probeUrl = probePath ? `https://${hostLabel}${probePath.startsWith("/") ? "" : "/"}${probePath}` : void 0;
+  let probeStarted = 0;
+  let state;
+  try {
+    state = await resolveCredential();
+  } catch (e) {
+    const classified = classifyThrown?.(e);
+    const result2 = {
+      ok: false,
+      // Still false, and still no source: a classification explains WHY
+      // nothing resolved, it does not invent a credential that did.
+      credential: { source: null, resolved: false },
+      // No `url`: nothing was probed, and naming one implies it was tried.
+      probe: { elapsed_ms: 0 },
+      error: {
+        kind: classified?.kind ?? "no_credential",
+        message: truncateErrorMessage(messageOf(e)),
+        ...classified?.detail !== void 0 ? { detail: classified.detail } : {}
+      },
+      // The hint must follow the KIND beside it. Falling back to
+      // `no_credential`'s copy under a classified kind would state a cause
+      // the kind contradicts — the same disagreement this path exists to
+      // remove. So: an inline hint wins; else the classified arm's own
+      // copy (consumer override first); else, for a kind this module has
+      // no copy for, the neutral `unknown` text rather than one that
+      // asserts a cause; else the unclassified `no_credential` default.
+      hint: classified?.hint ?? (isArm(classified?.kind) ? hints?.[classified.kind] ?? credentialHint(classified.kind, prefix, hostLabel, null) : classified !== void 0 ? credentialHint("unknown", prefix, hostLabel, null) : hints?.no_credential ?? credentialHint("no_credential", prefix, hostLabel, null))
+    };
+    return { content: [{ type: "text", text: JSON.stringify(result2, null, 2) }] };
+  }
+  const credential = {
+    source: state.source,
+    resolved: state.source !== null,
+    ...state.detail !== void 0 ? { detail: state.detail } : {}
+  };
+  if (!credential.resolved) {
+    const result2 = {
+      ok: false,
+      credential,
+      probe: { elapsed_ms: 0 },
+      error: { kind: "no_credential", message: "no credential source resolved" },
+      hint: hints?.no_credential ?? credentialHint("no_credential", prefix, hostLabel, null)
+    };
+    return { content: [{ type: "text", text: JSON.stringify(result2, null, 2) }] };
+  }
+  let arm = "ok";
+  let error61;
+  let status;
+  let customHint;
+  probeStarted = Date.now();
+  try {
+    await probeFn();
+  } catch (e) {
+    status = statusOf(e);
+    const aborted2 = e instanceof Error && e.name === "AbortError";
+    arm = status === 401 || status === 403 ? "credential_rejected" : status !== void 0 ? "http" : aborted2 || /timeout|timed out|ETIMEDOUT/i.test(messageOf(e)) ? "timeout" : /fetch failed|ENOTFOUND|ECONNREFUSED|ECONNRESET|network/i.test(messageOf(e)) ? "transport" : "unknown";
+    let kind = arm;
+    let detail;
+    const custom2 = classifyThrown?.(e);
+    if (custom2) {
+      kind = custom2.kind;
+      customHint = custom2.hint;
+      detail = custom2.detail;
+      arm = isArm(kind) ? kind : "unknown";
+    }
+    error61 = {
+      kind,
+      // Redacted AND bounded before it reaches the result: an upstream
+      // failure routinely quotes what it was sent, and a healthcheck is
+      // the tool people paste into a chat when something is broken.
+      message: truncateErrorMessage(messageOf(e)),
+      ...detail !== void 0 ? { detail } : {}
+    };
+  }
+  const result = {
+    ok: error61 === void 0,
+    credential,
+    probe: {
+      ...probeUrl ? { url: probeUrl } : {},
+      elapsed_ms: Date.now() - probeStarted,
+      ...status !== void 0 ? { status } : {}
+    },
+    ...error61 ? { error: error61 } : {},
+    hint: customHint ?? hints?.[arm] ?? credentialHint(arm, prefix, hostLabel, state.source)
+  };
+  return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+}
 function registerCredentialHealthcheckTool(args) {
-  const { server, prefix, hostLabel, probePath, resolveCredential, probeFn, classifyThrown, hints } = args;
-  const probeUrl = probePath ? `https://${hostLabel}${probePath}` : void 0;
-  server.registerTool(`${prefix}_healthcheck`, {
+  args.server.registerTool(`${args.prefix}_healthcheck`, {
     title: "Verify credentials and upstream reachability",
-    description: `Resolves the credential the way real tools do, then makes one authenticated request to ${hostLabel}. Reports which source supplied the credential, whether ${hostLabel} accepted it, the round-trip time, and a plain-English hint distinguishing 'no credential' from 'credential rejected' from 'a ${hostLabel}-side problem'. Call this when a real tool fails and you want to know which hop broke. Read-only; never returns the credential itself.`,
+    description: `${credentialHealthcheckDescription(args.hostLabel)} Call this when a real tool fails and you want to know which hop broke.`,
     annotations: {
       title: "Verify credentials and upstream reachability",
       readOnlyHint: true,
@@ -44278,92 +44411,7 @@ function registerCredentialHealthcheckTool(args) {
       openWorldHint: true
     },
     inputSchema: {}
-  }, async () => {
-    let probeStarted = 0;
-    let state;
-    try {
-      state = await resolveCredential();
-    } catch (e) {
-      const classified = classifyThrown?.(e);
-      const result2 = {
-        ok: false,
-        // Still false, and still no source: a classification explains WHY
-        // nothing resolved, it does not invent a credential that did.
-        credential: { source: null, resolved: false },
-        // No `url`: nothing was probed, and naming one implies it was tried.
-        probe: { elapsed_ms: 0 },
-        error: {
-          kind: classified?.kind ?? "no_credential",
-          message: truncateErrorMessage(messageOf(e)),
-          ...classified?.detail !== void 0 ? { detail: classified.detail } : {}
-        },
-        // The hint must follow the KIND beside it. Falling back to
-        // `no_credential`'s copy under a classified kind would state a cause
-        // the kind contradicts — the same disagreement this path exists to
-        // remove. So: an inline hint wins; else the classified arm's own
-        // copy (consumer override first); else, for a kind this module has
-        // no copy for, the neutral `unknown` text rather than one that
-        // asserts a cause; else the unclassified `no_credential` default.
-        hint: classified?.hint ?? (isArm(classified?.kind) ? hints?.[classified.kind] ?? credentialHint(classified.kind, prefix, hostLabel, null) : classified !== void 0 ? credentialHint("unknown", prefix, hostLabel, null) : hints?.no_credential ?? credentialHint("no_credential", prefix, hostLabel, null))
-      };
-      return { content: [{ type: "text", text: JSON.stringify(result2, null, 2) }] };
-    }
-    const credential = {
-      source: state.source,
-      resolved: state.source !== null,
-      ...state.detail !== void 0 ? { detail: state.detail } : {}
-    };
-    if (!credential.resolved) {
-      const result2 = {
-        ok: false,
-        credential,
-        probe: { elapsed_ms: 0 },
-        error: { kind: "no_credential", message: "no credential source resolved" },
-        hint: hints?.no_credential ?? credentialHint("no_credential", prefix, hostLabel, null)
-      };
-      return { content: [{ type: "text", text: JSON.stringify(result2, null, 2) }] };
-    }
-    let arm = "ok";
-    let error61;
-    let status;
-    let customHint;
-    probeStarted = Date.now();
-    try {
-      await probeFn();
-    } catch (e) {
-      status = statusOf(e);
-      const aborted2 = e instanceof Error && e.name === "AbortError";
-      arm = status === 401 || status === 403 ? "credential_rejected" : status !== void 0 ? "http" : aborted2 || /timeout|timed out|ETIMEDOUT/i.test(messageOf(e)) ? "timeout" : /fetch failed|ENOTFOUND|ECONNREFUSED|ECONNRESET|network/i.test(messageOf(e)) ? "transport" : "unknown";
-      let kind = arm;
-      let detail;
-      const custom2 = classifyThrown?.(e);
-      if (custom2) {
-        kind = custom2.kind;
-        customHint = custom2.hint;
-        detail = custom2.detail;
-      }
-      error61 = {
-        kind,
-        // Redacted AND bounded before it reaches the result: an upstream
-        // failure routinely quotes what it was sent, and a healthcheck is
-        // the tool people paste into a chat when something is broken.
-        message: truncateErrorMessage(messageOf(e)),
-        ...detail !== void 0 ? { detail } : {}
-      };
-    }
-    const result = {
-      ok: error61 === void 0,
-      credential,
-      probe: {
-        ...probeUrl ? { url: probeUrl } : {},
-        elapsed_ms: Date.now() - probeStarted,
-        ...status !== void 0 ? { status } : {}
-      },
-      ...error61 ? { error: error61 } : {},
-      hint: customHint ?? hints?.[arm] ?? credentialHint(arm, prefix, hostLabel, state.source)
-    };
-    return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
-  });
+  }, async () => runCredentialHealthcheck(args));
 }
 
 // node_modules/@chrischall/mcp-utils/dist/fetchproxy/index.js
@@ -44409,7 +44457,7 @@ function bridgeErrorInfo(err) {
 // package.json
 var package_default = {
   name: "honeybook-mcp",
-  version: "0.10.2",
+  version: "0.10.3",
   mcpName: "io.github.chrischall/honeybook-mcp",
   description: "HoneyBook client-portal MCP server for Claude",
   author: "Claude Code (AI) <https://www.anthropic.com/claude>",
@@ -44453,12 +44501,12 @@ var package_default = {
     typecheck: "tsc -p tsconfig.json --noEmit"
   },
   dependencies: {
-    "@chrischall/mcp-utils": "^0.23.0",
+    "@chrischall/mcp-utils": "^0.26.1",
     "@fetchproxy/bootstrap": "^2.7.0",
-    "@fetchproxy/server": "^2.7.0",
-    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@fetchproxy/server": "^2.10.0",
+    "@modelcontextprotocol/sdk": "^1.30.0",
     dotenv: "^17.4.2",
-    zod: "^4.4.3"
+    zod: "^4.5.4"
   },
   devDependencies: {
     "@types/node": "^26.0.0",
@@ -46225,7 +46273,7 @@ var __dirname = dirname2(fileURLToPath(import.meta.url));
 await loadDotenvSafely({ path: join6(__dirname, "..", ".env"), override: false });
 await runMcp({
   name: "honeybook-mcp",
-  version: "0.10.2",
+  version: "0.10.3",
   // x-release-please-version
   tools: [
     registerSessionTools,

package/dist/index.js

@@ -20,7 +20,7 @@ import { registerAttachmentTools } from './tools/attachments.js';
 import { registerPaymentTools } from './tools/payments.js';
 await runMcp({
     name: 'honeybook-mcp',
-    version: '0.10.2', // x-release-please-version
+    version: '0.10.3', // x-release-please-version
     tools: [
         registerSessionTools,
         registerFlowTools,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "honeybook-mcp",
-  "version": "0.10.2",
+  "version": "0.10.3",
   "mcpName": "io.github.chrischall/honeybook-mcp",
   "description": "HoneyBook client-portal MCP server for Claude",
   "author": "Claude Code (AI) <https://www.anthropic.com/claude>",
@@ -44,12 +44,12 @@
     "typecheck": "tsc -p tsconfig.json --noEmit"
   },
   "dependencies": {
-    "@chrischall/mcp-utils": "^0.23.0",
+    "@chrischall/mcp-utils": "^0.26.1",
     "@fetchproxy/bootstrap": "^2.7.0",
-    "@fetchproxy/server": "^2.7.0",
-    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@fetchproxy/server": "^2.10.0",
+    "@modelcontextprotocol/sdk": "^1.30.0",
     "dotenv": "^17.4.2",
-    "zod": "^4.4.3"
+    "zod": "^4.5.4"
   },
   "devDependencies": {
     "@types/node": "^26.0.0",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/honeybook-mcp",
     "source": "github"
   },
-  "version": "0.10.2",
+  "version": "0.10.3",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "honeybook-mcp",
-      "version": "0.10.2",
+      "version": "0.10.3",
       "transport": {
         "type": "stdio"
       },