myhotlunchbox-mcp 0.3.0 → 0.5.0

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for My Hot Lunchbox — order school lunches, manage students, and track payments via natural language",
-    "version": "0.3.0"
+    "version": "0.5.0"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "My Hot Lunchbox",
       "source": "./",
       "description": "MCP server for My Hot Lunchbox — school lunch calendar, ordering, and payments. Signs in server-side with the parent account credentials.",
-      "version": "0.3.0",
+      "version": "0.5.0",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "myhotlunchbox-mcp",
   "displayName": "My Hot Lunchbox",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "MCP server for My Hot Lunchbox — order school lunches, manage students, and track payments via natural language",
   "author": {
     "name": "Chris Hall",

package/README.md

@@ -38,10 +38,12 @@ still works; the configuration error surfaces on the first tool call.
 
 ## Tools
 
-34 tools, all prefixed `mhlb_`. All 20 read tools are verified live against a real parent account (`node scripts/verify-reads.mjs`); the 14 write tools are not — see below.
+35 tools, all prefixed `mhlb_`. All 20 read tools are verified live against a real parent account (`node scripts/verify-reads.mjs`); the 14 write tools are not — see below.
 
 **Account** — `mhlb_whoami`, `mhlb_session_reset`
 
+**Health** — `mhlb_healthcheck` (is this connector working? reports whether the credential resolved, whether My Hot Lunchbox accepted it, and what to fix — unlike `mhlb_whoami`, which throws instead of answering)
+
 **Students** — `mhlb_list_students`, `mhlb_get_student_form`,
 `mhlb_new_student_form`, `mhlb_create_student`, `mhlb_update_student`,
 `mhlb_delete_student`

package/dist/bundle.js

@@ -31343,14 +31343,22 @@ function truncateErrorMessage(text, max = DEFAULT_ERROR_MESSAGE_MAX) {
     return redacted;
   return `${redacted.slice(0, max)}\u2026 [truncated]`;
 }
+function messageOf(err) {
+  if (err instanceof Error)
+    return err.message;
+  return String(err);
+}
 
-// node_modules/@chrischall/mcp-utils/dist/response/index.js
-function textResult(data) {
-  return {
-    content: [{ type: "text", text: JSON.stringify(data, null, 2) }]
-  };
+// node_modules/@chrischall/mcp-utils/dist/response/view.js
+function minifiedResult(data) {
+  return { content: [{ type: "text", text: JSON.stringify(data) }] };
 }
-var jsonResult = textResult;
+
+// node_modules/@chrischall/mcp-utils/dist/response/media.js
+var MEDIA_NOUN = "(?:avatar|tall_avatar|cover_photo|cover_image|picture|photo|thumbnail|thumb|image|icon|banner|profile_pic(?:ture)?|logo)";
+var MEDIA_KEY = new RegExp(`^${MEDIA_NOUN}s?(?:(?:link|uri|url)s?)?$`, "i");
+
+// node_modules/@chrischall/mcp-utils/dist/response/index.js
 function errorResult(message) {
   return {
     content: [{ type: "text", text: redactSecrets(message) }],
@@ -32240,11 +32248,11 @@ var MhlbClient = class {
 };
 
 // src/version.ts
-var VERSION = "0.3.0";
+var VERSION = "0.5.0";
 
 // src/tools/_shared.ts
 function preview(action, request, notes) {
-  return jsonResult({
+  return minifiedResult({
     dryRun: true,
     action,
     wouldSend: request,
@@ -32265,7 +32273,7 @@ function registerAccountTools(server, client2) {
       annotations: toolAnnotations({ title: "Who am I", openWorld: true }),
       inputSchema: {}
     },
-    async () => jsonResult(await client2.get("/auth/userinfo"))
+    async () => minifiedResult(await client2.get("/auth/userinfo"))
   );
   server.registerTool(
     "mhlb_session_reset",
@@ -32277,7 +32285,7 @@ function registerAccountTools(server, client2) {
     async () => {
       const wasAuthenticated = client2.isAuthenticated;
       client2.resetSession();
-      return jsonResult({ reset: true, hadActiveSession: wasAuthenticated });
+      return minifiedResult({ reset: true, hadActiveSession: wasAuthenticated });
     }
   );
 }
@@ -32292,7 +32300,7 @@ function registerStudentTools(server, client2) {
       annotations: toolAnnotations({ title: "List students", openWorld: true }),
       inputSchema: {}
     },
-    async () => jsonResult(await client2.get("/parent/childrenInfo"))
+    async () => minifiedResult(await client2.get("/parent/childrenInfo"))
   );
   server.registerTool(
     "mhlb_get_student_form",
@@ -32301,7 +32309,7 @@ function registerStudentTools(server, client2) {
       annotations: toolAnnotations({ title: "Get student form", openWorld: true }),
       inputSchema: { studentId: PositiveInt.describe("Student id from mhlb_list_students.") }
     },
-    async ({ studentId }) => jsonResult(await client2.get("/parent/editChild", { childId: studentId }))
+    async ({ studentId }) => minifiedResult(await client2.get("/parent/editChild", { childId: studentId }))
   );
   server.registerTool(
     "mhlb_new_student_form",
@@ -32310,7 +32318,7 @@ function registerStudentTools(server, client2) {
       annotations: toolAnnotations({ title: "New student form", openWorld: true }),
       inputSchema: {}
     },
-    async () => jsonResult(await client2.get("/parent/createChild"))
+    async () => minifiedResult(await client2.get("/parent/createChild"))
   );
   server.registerTool(
     "mhlb_create_student",
@@ -32321,7 +32329,7 @@ function registerStudentTools(server, client2) {
     },
     async ({ student, confirm }) => {
       if (!confirm) return preview("Create student", { method: "POST", path: "/parent/createChild", body: student });
-      return jsonResult(await client2.write("/parent/createChild", student));
+      return minifiedResult(await client2.write("/parent/createChild", student));
     }
   );
   server.registerTool(
@@ -32337,7 +32345,7 @@ function registerStudentTools(server, client2) {
           "This is a whole-record replace: any field missing from `student` is cleared, not preserved."
         ]);
       }
-      return jsonResult(await client2.write("/parent/editChild", student));
+      return minifiedResult(await client2.write("/parent/editChild", student));
     }
   );
   server.registerTool(
@@ -32358,7 +32366,7 @@ function registerStudentTools(server, client2) {
           ["Deleting a student is not reversible through this API."]
         );
       }
-      return jsonResult(await client2.write("/parent/deleteChild", void 0, { id: studentId }));
+      return minifiedResult(await client2.write("/parent/deleteChild", void 0, { id: studentId }));
     }
   );
 }
@@ -32378,7 +32386,7 @@ function registerCalendarTools(server, client2) {
     // Field names are `start`/`end`, captured from the live app. Sending
     // `startDate`/`endDate` returns 200 with an empty `events` array — a silent
     // wrong answer, not an error.
-    async ({ startDate, endDate }) => jsonResult(await client2.write("/calendar/studentSchoolData", { start: startDate, end: endDate }))
+    async ({ startDate, endDate }) => minifiedResult(await client2.write("/calendar/studentSchoolData", { start: startDate, end: endDate }))
   );
   server.registerTool(
     "mhlb_get_day",
@@ -32390,7 +32398,7 @@ function registerCalendarTools(server, client2) {
         date: IsoDate.describe("The day to look at (YYYY-MM-DD).")
       }
     },
-    async ({ studentId, date: date5 }) => jsonResult(await client2.get("/calendar/studentOrderItems", { studentId, date: date5 }))
+    async ({ studentId, date: date5 }) => minifiedResult(await client2.get("/calendar/studentOrderItems", { studentId, date: date5 }))
   );
 }
 
@@ -32426,7 +32434,7 @@ function registerOrderTools(server, client2) {
         studentId: PositiveInt.optional().describe("Limit to one student.")
       }
     },
-    async ({ orderStatus, period, studentId }) => jsonResult(
+    async ({ orderStatus, period, studentId }) => minifiedResult(
       await client2.get("/event/shoppingCart", {
         orderStatus,
         selectedPeriod: period,
@@ -32445,7 +32453,7 @@ function registerOrderTools(server, client2) {
         studentId: PositiveInt.optional().describe("Limit to one student.")
       }
     },
-    async ({ tabName, period, studentId }) => jsonResult(
+    async ({ tabName, period, studentId }) => minifiedResult(
       await client2.get("/event/ShoppingCartBaseData", {
         shopingCartTabsName: tabName,
         selectedPeriod: period,
@@ -32463,7 +32471,7 @@ function registerOrderTools(server, client2) {
         date: IsoDate.describe("The lunch date (YYYY-MM-DD).")
       }
     },
-    async ({ studentId, date: date5 }) => jsonResult(await client2.get("/event/orderBaseData", { studentId, eventDate: date5 }))
+    async ({ studentId, date: date5 }) => minifiedResult(await client2.get("/event/orderBaseData", { studentId, eventDate: date5 }))
   );
   server.registerTool(
     "mhlb_get_order_form",
@@ -32475,7 +32483,7 @@ function registerOrderTools(server, client2) {
         studentId: PositiveInt.describe("Student id from mhlb_list_students.")
       }
     },
-    async ({ eventId, studentId }) => jsonResult(await client2.get("/event/createOrder", { eventId, studentId }))
+    async ({ eventId, studentId }) => minifiedResult(await client2.get("/event/createOrder", { eventId, studentId }))
   );
   server.registerTool(
     "mhlb_get_order",
@@ -32488,7 +32496,7 @@ function registerOrderTools(server, client2) {
         studentId: PositiveInt.optional().describe("Student id.")
       }
     },
-    async ({ orderId, eventId, studentId }) => jsonResult(await client2.get("/event/editOrder", { orderId, eventId, studentId }))
+    async ({ orderId, eventId, studentId }) => minifiedResult(await client2.get("/event/editOrder", { orderId, eventId, studentId }))
   );
   server.registerTool(
     "mhlb_create_order",
@@ -32503,7 +32511,7 @@ function registerOrderTools(server, client2) {
           "This adds the lunch to the cart. Payment is a separate step (mhlb_checkout)."
         ]);
       }
-      return jsonResult(await client2.write("/event/createOrder", order));
+      return minifiedResult(await client2.write("/event/createOrder", order));
     }
   );
   server.registerTool(
@@ -32519,7 +32527,7 @@ function registerOrderTools(server, client2) {
           "This is a whole-order replace: items missing from `order` are removed, not preserved."
         ]);
       }
-      return jsonResult(await client2.write("/event/editOrder", order));
+      return minifiedResult(await client2.write("/event/editOrder", order));
     }
   );
   server.registerTool(
@@ -32537,7 +32545,7 @@ function registerOrderTools(server, client2) {
           "isRepeated: true removes the whole recurring series, not just this date."
         ]);
       }
-      return jsonResult(await client2.write("/event/deleteOrder", body));
+      return minifiedResult(await client2.write("/event/deleteOrder", body));
     }
   );
 }
@@ -32554,7 +32562,7 @@ function registerBillingTools(server, client2) {
         studentId: PositiveInt.optional().describe("Limit to one student.")
       }
     },
-    async ({ period, studentId }) => jsonResult(await client2.get("/event/transactionsList", { selectedPeriod: period, selectedStudentId: studentId }))
+    async ({ period, studentId }) => minifiedResult(await client2.get("/event/transactionsList", { selectedPeriod: period, selectedStudentId: studentId }))
   );
   server.registerTool(
     "mhlb_get_transaction",
@@ -32564,7 +32572,7 @@ function registerBillingTools(server, client2) {
       inputSchema: { transactionId: PositiveInt.describe("Transaction id (the `id` field from mhlb_list_transactions).") }
     },
     // The query parameter is `id`, not `transactionId` — verified live.
-    async ({ transactionId }) => jsonResult(await client2.get("/event/transactionDetails", { id: transactionId }))
+    async ({ transactionId }) => minifiedResult(await client2.get("/event/transactionDetails", { id: transactionId }))
   );
   server.registerTool(
     "mhlb_list_subscriptions",
@@ -32573,7 +32581,7 @@ function registerBillingTools(server, client2) {
       annotations: toolAnnotations({ title: "List subscriptions", openWorld: true }),
       inputSchema: { period: external_exports.string().optional().describe("Ordering period to scope to.") }
     },
-    async ({ period }) => jsonResult(await client2.get("/event/upcomingSubscriptions", { period }))
+    async ({ period }) => minifiedResult(await client2.get("/event/upcomingSubscriptions", { period }))
   );
   server.registerTool(
     "mhlb_get_subscription_settings",
@@ -32582,7 +32590,7 @@ function registerBillingTools(server, client2) {
       annotations: toolAnnotations({ title: "Get subscription settings", openWorld: true }),
       inputSchema: {}
     },
-    async () => jsonResult(await client2.get("/event/subscription"))
+    async () => minifiedResult(await client2.get("/event/subscription"))
   );
   server.registerTool(
     "mhlb_set_subscription_enabled",
@@ -32602,7 +32610,7 @@ function registerBillingTools(server, client2) {
           enabled ? ["Enabling means future lunches are ordered and charged automatically."] : []
         );
       }
-      return jsonResult(
+      return minifiedResult(
         await client2.write("/parent/changeSubscriptionStatus", void 0, { isEnableSubscription: enabled })
       );
     }
@@ -32624,7 +32632,7 @@ function registerBillingTools(server, client2) {
           "isRepeated: true stops the whole recurring series, not just this date."
         ]);
       }
-      return jsonResult(await client2.write("/event/unsubcribeOrder", body));
+      return minifiedResult(await client2.write("/event/unsubcribeOrder", body));
     }
   );
   server.registerTool(
@@ -32634,7 +32642,7 @@ function registerBillingTools(server, client2) {
       annotations: toolAnnotations({ title: "List gift cards", openWorld: true }),
       inputSchema: {}
     },
-    async () => jsonResult(await client2.get("/parent/giftCardDataTables"))
+    async () => minifiedResult(await client2.get("/parent/giftCardDataTables"))
   );
   server.registerTool(
     "mhlb_apply_gift_card",
@@ -32647,7 +32655,7 @@ function registerBillingTools(server, client2) {
       if (!confirm) {
         return preview("Apply gift card", { method: "POST", path: "/parent/applyGiftCard", query: { giftCardCode: code } });
       }
-      return jsonResult(await client2.write("/parent/applyGiftCard", void 0, { giftCardCode: code }));
+      return minifiedResult(await client2.write("/parent/applyGiftCard", void 0, { giftCardCode: code }));
     }
   );
   server.registerTool(
@@ -32657,7 +32665,7 @@ function registerBillingTools(server, client2) {
       annotations: toolAnnotations({ title: "Get applied coupon", openWorld: true }),
       inputSchema: {}
     },
-    async () => jsonResult(await client2.get("/parent/coupon"))
+    async () => minifiedResult(await client2.get("/parent/coupon"))
   );
   server.registerTool(
     "mhlb_apply_coupon",
@@ -32670,7 +32678,7 @@ function registerBillingTools(server, client2) {
       if (!confirm) {
         return preview("Apply coupon", { method: "POST", path: "/parent/applyCoupon", query: { couponCode: code } });
       }
-      return jsonResult(await client2.write("/parent/applyCoupon", void 0, { couponCode: code }));
+      return minifiedResult(await client2.write("/parent/applyCoupon", void 0, { couponCode: code }));
     }
   );
   server.registerTool(
@@ -32682,7 +32690,7 @@ function registerBillingTools(server, client2) {
     },
     async ({ confirm }) => {
       if (!confirm) return preview("Remove coupon", { method: "POST", path: "/parent/removeCoupon" });
-      return jsonResult(await client2.write("/parent/removeCoupon"));
+      return minifiedResult(await client2.write("/parent/removeCoupon"));
     }
   );
 }
@@ -32707,7 +32715,7 @@ function registerCheckoutTools(server, client2) {
           "This step prices the cart and returns payment options. It does not charge a card."
         ]);
       }
-      return jsonResult(await client2.write("/payment/initCheckout", body));
+      return minifiedResult(await client2.write("/payment/initCheckout", body));
     }
   );
   server.registerTool(
@@ -32747,7 +32755,7 @@ function registerCheckoutTools(server, client2) {
         });
       }
       const result = await client2.write("/payment/checkout", body);
-      return jsonResult({ result, expectedTotal, idempotencyKey: key });
+      return minifiedResult({ result, expectedTotal, idempotencyKey: key });
     }
   );
 }
@@ -32823,7 +32831,7 @@ function deliver(bytes, contentType, filename, inline) {
         { hint: "Call again with inline: false to write it to a file instead." }
       );
     }
-    return jsonResult({
+    return minifiedResult({
       filename,
       contentType,
       bytes: bytes.byteLength,
@@ -32842,7 +32850,7 @@ function deliver(bytes, contentType, filename, inline) {
       cause
     });
   }
-  return jsonResult({ path, contentType, bytes: bytes.byteLength });
+  return minifiedResult({ path, contentType, bytes: bytes.byteLength });
 }
 function midpoint(start, end) {
   const mid = new Date((Date.parse(start) + Date.parse(end)) / 2);
@@ -32919,6 +32927,181 @@ function registerReportTools(server, client2) {
   );
 }
 
+// node_modules/@chrischall/mcp-utils/dist/healthcheck/index.js
+function statusOf(err) {
+  if (typeof err !== "object" || err === null)
+    return void 0;
+  const s = err.status ?? err.statusCode;
+  return typeof s === "number" ? s : void 0;
+}
+var CREDENTIAL_ARMS = /* @__PURE__ */ new Set([
+  "ok",
+  "no_credential",
+  "credential_rejected",
+  "timeout",
+  "http",
+  "transport",
+  "unknown"
+]);
+function isArm(kind) {
+  return kind !== void 0 && CREDENTIAL_ARMS.has(kind);
+}
+function credentialHint(arm, prefix, hostLabel, source) {
+  switch (arm) {
+    case "ok":
+      return `Credential from '${source}' works: ${hostLabel} accepted an authenticated request. If a real tool still fails, the problem is that tool, not auth.`;
+    case "no_credential":
+      return `No credential resolved. Nothing was available to authenticate with \u2014 sign in and reconnect the connector so ${prefix} receives a token, or set the documented environment variable.`;
+    case "credential_rejected":
+      return `${hostLabel} rejected the credential from '${source}'. It is present but no longer valid \u2014 most often expired or revoked upstream. Re-authenticate and reconnect; retrying will not fix it.`;
+    case "timeout":
+      return `The credential from '${source}' resolved, but ${hostLabel} did not answer in time. Usually transient \u2014 retry. If it persists, ${hostLabel} is slow or unreachable from here.`;
+    case "http":
+      return `${hostLabel} answered with an error status that is not an auth rejection. That is USUALLY a ${hostLabel}-side problem rather than an auth one \u2014 but a 404 here more often means the probe path is wrong than that ${hostLabel} is broken, so check error.message and probe.url before concluding anything about the credential.`;
+    case "transport":
+      return `Could not reach ${hostLabel} at all. Check network egress; the credential itself was never judged.`;
+    default:
+      return `Unexpected failure \u2014 see error.message.`;
+  }
+}
+function registerCredentialHealthcheckTool(args) {
+  const { server, prefix, hostLabel, probePath, resolveCredential, probeFn, classifyThrown, hints } = args;
+  const probeUrl = probePath ? `https://${hostLabel}${probePath}` : void 0;
+  server.registerTool(`${prefix}_healthcheck`, {
+    title: "Verify credentials and upstream reachability",
+    description: `Resolves the credential the way real tools do, then makes one authenticated request to ${hostLabel}. Reports which source supplied the credential, whether ${hostLabel} accepted it, the round-trip time, and a plain-English hint distinguishing 'no credential' from 'credential rejected' from 'a ${hostLabel}-side problem'. Call this when a real tool fails and you want to know which hop broke. Read-only; never returns the credential itself.`,
+    annotations: {
+      title: "Verify credentials and upstream reachability",
+      readOnlyHint: true,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    inputSchema: {}
+  }, async () => {
+    let probeStarted = 0;
+    let state;
+    try {
+      state = await resolveCredential();
+    } catch (e) {
+      const classified = classifyThrown?.(e);
+      const result2 = {
+        ok: false,
+        // Still false, and still no source: a classification explains WHY
+        // nothing resolved, it does not invent a credential that did.
+        credential: { source: null, resolved: false },
+        // No `url`: nothing was probed, and naming one implies it was tried.
+        probe: { elapsed_ms: 0 },
+        error: {
+          kind: classified?.kind ?? "no_credential",
+          message: truncateErrorMessage(messageOf(e)),
+          ...classified?.detail !== void 0 ? { detail: classified.detail } : {}
+        },
+        // The hint must follow the KIND beside it. Falling back to
+        // `no_credential`'s copy under a classified kind would state a cause
+        // the kind contradicts — the same disagreement this path exists to
+        // remove. So: an inline hint wins; else the classified arm's own
+        // copy (consumer override first); else, for a kind this module has
+        // no copy for, the neutral `unknown` text rather than one that
+        // asserts a cause; else the unclassified `no_credential` default.
+        hint: classified?.hint ?? (isArm(classified?.kind) ? hints?.[classified.kind] ?? credentialHint(classified.kind, prefix, hostLabel, null) : classified !== void 0 ? credentialHint("unknown", prefix, hostLabel, null) : hints?.no_credential ?? credentialHint("no_credential", prefix, hostLabel, null))
+      };
+      return { content: [{ type: "text", text: JSON.stringify(result2, null, 2) }] };
+    }
+    const credential = {
+      source: state.source,
+      resolved: state.source !== null,
+      ...state.detail !== void 0 ? { detail: state.detail } : {}
+    };
+    if (!credential.resolved) {
+      const result2 = {
+        ok: false,
+        credential,
+        probe: { elapsed_ms: 0 },
+        error: { kind: "no_credential", message: "no credential source resolved" },
+        hint: hints?.no_credential ?? credentialHint("no_credential", prefix, hostLabel, null)
+      };
+      return { content: [{ type: "text", text: JSON.stringify(result2, null, 2) }] };
+    }
+    let arm = "ok";
+    let error51;
+    let status;
+    let customHint;
+    probeStarted = Date.now();
+    try {
+      await probeFn();
+    } catch (e) {
+      status = statusOf(e);
+      const aborted2 = e instanceof Error && e.name === "AbortError";
+      arm = status === 401 || status === 403 ? "credential_rejected" : status !== void 0 ? "http" : aborted2 || /timeout|timed out|ETIMEDOUT/i.test(messageOf(e)) ? "timeout" : /fetch failed|ENOTFOUND|ECONNREFUSED|ECONNRESET|network/i.test(messageOf(e)) ? "transport" : "unknown";
+      let kind = arm;
+      let detail;
+      const custom2 = classifyThrown?.(e);
+      if (custom2) {
+        kind = custom2.kind;
+        customHint = custom2.hint;
+        detail = custom2.detail;
+      }
+      error51 = {
+        kind,
+        // Redacted AND bounded before it reaches the result: an upstream
+        // failure routinely quotes what it was sent, and a healthcheck is
+        // the tool people paste into a chat when something is broken.
+        message: truncateErrorMessage(messageOf(e)),
+        ...detail !== void 0 ? { detail } : {}
+      };
+    }
+    const result = {
+      ok: error51 === void 0,
+      credential,
+      probe: {
+        ...probeUrl ? { url: probeUrl } : {},
+        elapsed_ms: Date.now() - probeStarted,
+        ...status !== void 0 ? { status } : {}
+      },
+      ...error51 ? { error: error51 } : {},
+      hint: customHint ?? hints?.[arm] ?? credentialHint(arm, prefix, hostLabel, state.source)
+    };
+    return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+  });
+}
+
+// src/tools/health.ts
+var NOT_CONFIGURED = "credentials are not configured";
+function classifyMhlbError(err) {
+  const msg = err instanceof Error ? err.message : String(err);
+  if (msg.includes(NOT_CONFIGURED)) return { kind: "no_credential" };
+  if (msg.includes("Could not reach My Hot Lunchbox")) {
+    return {
+      kind: "unreachable",
+      hint: "Could not reach My Hot Lunchbox at all, so the credential was never tested. Check network connectivity, or MYHOTLUNCHBOX_BASE_URL if the app has moved."
+    };
+  }
+  if (msg.includes("rejected the sign-in")) {
+    return {
+      kind: "credential_rejected",
+      hint: "My Hot Lunchbox rejected the sign-in. Check MYHOTLUNCHBOX_USERNAME / MYHOTLUNCHBOX_PASSWORD against https://ordernow.myhotlunchbox.com \u2014 but do NOT re-run this with guesses: repeated failures can lock the account or force a CAPTCHA that blocks server-side sign-in entirely."
+    };
+  }
+  return void 0;
+}
+function registerHealthcheckTools(server, client2, readConfig = () => loadConfig()) {
+  registerCredentialHealthcheckTool({
+    server,
+    prefix: "mhlb",
+    hostLabel: "ordernow.myhotlunchbox.com",
+    probePath: "/api/auth/userinfo",
+    resolveCredential: async () => {
+      const { username, password, baseUrl } = readConfig();
+      const source = username && password ? "MYHOTLUNCHBOX_USERNAME+MYHOTLUNCHBOX_PASSWORD" : null;
+      return { source, detail: { base_url: baseUrl } };
+    },
+    // The same authenticated read `mhlb_whoami` makes: cheap, and it changes
+    // nothing — no order is placed, no balance moved.
+    probeFn: () => client2.get("/auth/userinfo"),
+    classifyThrown: classifyMhlbError
+  });
+}
+
 // src/index.ts
 await loadDotenvSafely();
 var client = new MhlbClient();
@@ -32934,6 +33117,7 @@ await runMcp({
     registerOrderTools,
     registerBillingTools,
     registerCheckoutTools,
-    registerReportTools
+    registerReportTools,
+    registerHealthcheckTools
   ]
 });

package/dist/index.js

@@ -9,6 +9,7 @@ import { registerOrderTools } from './tools/orders.js';
 import { registerBillingTools } from './tools/billing.js';
 import { registerCheckoutTools } from './tools/checkout.js';
 import { registerReportTools } from './tools/reports.js';
+import { registerHealthcheckTools } from './tools/health.js';
 await loadDotenvSafely();
 // Built here, in the caller, so the deferred-config-error pattern holds: the
 // server still boots (and answers the host's install-time tools/list probe)
@@ -27,5 +28,6 @@ await runMcp({
         registerBillingTools,
         registerCheckoutTools,
         registerReportTools,
+        registerHealthcheckTools,
     ],
 });

package/dist/tools/_shared.js

@@ -1,4 +1,4 @@
-import { jsonResult, textResult } from '@chrischall/mcp-utils';
+import { minifiedResult } from '@chrischall/mcp-utils';
 /**
  * Standard dry-run envelope for a confirm-gated write.
  *
@@ -6,7 +6,7 @@ import { jsonResult, textResult } from '@chrischall/mcp-utils';
  * returns exactly what it would have sent, so the caller can inspect it first.
  */
 export function preview(action, request, notes) {
-    return jsonResult({
+    return minifiedResult({
         dryRun: true,
         action,
         wouldSend: request,
@@ -16,7 +16,12 @@ export function preview(action, request, notes) {
         ],
     });
 }
-export { jsonResult, textResult };
+// `minifiedResult` only. This seam re-exported both for a while, and every
+// tool went on importing `jsonResult` — @chrischall/mcp-utils' alias for the
+// PRETTY `textResult` — so the re-export was the only trace of a minification
+// that never happened. Exporting one name makes the wrong choice unavailable
+// rather than merely discouraged.
+export { minifiedResult };
 /**
  * Marker appended to the description of every tool whose request shape was
  * derived from the web app's compiled client but never exercised against a

package/dist/tools/account.js

@@ -1,5 +1,5 @@
 import { toolAnnotations } from '@chrischall/mcp-utils';
-import { jsonResult } from './_shared.js';
+import { minifiedResult } from './_shared.js';
 export function registerAccountTools(server, client) {
     server.registerTool('mhlb_whoami', {
         description: 'Get the signed-in My Hot Lunchbox account: name, email, role, number of students, ' +
@@ -7,7 +7,7 @@ export function registerAccountTools(server, client) {
             'Start here to confirm the session works.',
         annotations: toolAnnotations({ title: 'Who am I', openWorld: true }),
         inputSchema: {},
-    }, async () => jsonResult(await client.get('/auth/userinfo')));
+    }, async () => minifiedResult(await client.get('/auth/userinfo')));
     server.registerTool('mhlb_session_reset', {
         description: 'Discard the cached My Hot Lunchbox access token so the next tool call signs in again. ' +
             'Use after changing credentials, or if calls start failing with stale-session errors.',
@@ -16,6 +16,6 @@ export function registerAccountTools(server, client) {
     }, async () => {
         const wasAuthenticated = client.isAuthenticated;
         client.resetSession();
-        return jsonResult({ reset: true, hadActiveSession: wasAuthenticated });
+        return minifiedResult({ reset: true, hadActiveSession: wasAuthenticated });
     });
 }

package/dist/tools/billing.js

@@ -1,6 +1,6 @@
 import { toolAnnotations, PositiveInt, NonEmptyString, schemaConfirm } from '@chrischall/mcp-utils';
 import { z } from 'zod';
-import { jsonResult, preview, UNVERIFIED } from './_shared.js';
+import { UNVERIFIED, minifiedResult, preview } from './_shared.js';
 import { OrderRefShape, orderRefBody } from './orders.js';
 export function registerBillingTools(server, client) {
     server.registerTool('mhlb_list_transactions', {
@@ -10,24 +10,24 @@ export function registerBillingTools(server, client) {
             period: z.string().optional().describe('Ordering period to scope to, from mhlb_get_cart_tabs.'),
             studentId: PositiveInt.optional().describe('Limit to one student.'),
         },
-    }, async ({ period, studentId }) => jsonResult(await client.get('/event/transactionsList', { selectedPeriod: period, selectedStudentId: studentId })));
+    }, async ({ period, studentId }) => minifiedResult(await client.get('/event/transactionsList', { selectedPeriod: period, selectedStudentId: studentId })));
     server.registerTool('mhlb_get_transaction', {
         description: 'Get the line-item detail of one transaction — which lunches it paid for.',
         annotations: toolAnnotations({ title: 'Get transaction', openWorld: true }),
         inputSchema: { transactionId: PositiveInt.describe('Transaction id (the `id` field from mhlb_list_transactions).') },
     }, 
     // The query parameter is `id`, not `transactionId` — verified live.
-    async ({ transactionId }) => jsonResult(await client.get('/event/transactionDetails', { id: transactionId })));
+    async ({ transactionId }) => minifiedResult(await client.get('/event/transactionDetails', { id: transactionId })));
     server.registerTool('mhlb_list_subscriptions', {
         description: 'List upcoming lunch subscriptions — the recurring orders that will be placed and charged automatically.',
         annotations: toolAnnotations({ title: 'List subscriptions', openWorld: true }),
         inputSchema: { period: z.string().optional().describe('Ordering period to scope to.') },
-    }, async ({ period }) => jsonResult(await client.get('/event/upcomingSubscriptions', { period })));
+    }, async ({ period }) => minifiedResult(await client.get('/event/upcomingSubscriptions', { period })));
     server.registerTool('mhlb_get_subscription_settings', {
         description: 'Get the account’s subscription configuration — whether recurring ordering is on, and its terms.',
         annotations: toolAnnotations({ title: 'Get subscription settings', openWorld: true }),
         inputSchema: {},
-    }, async () => jsonResult(await client.get('/event/subscription')));
+    }, async () => minifiedResult(await client.get('/event/subscription')));
     server.registerTool('mhlb_set_subscription_enabled', {
         description: 'Turn recurring lunch subscriptions on or off for the account. Turning it ON means future lunches are ' +
             'ordered and charged automatically.' + UNVERIFIED,
@@ -40,7 +40,7 @@ export function registerBillingTools(server, client) {
         if (!confirm) {
             return preview(`${enabled ? 'Enable' : 'Disable'} subscriptions`, { method: 'POST', path: '/parent/changeSubscriptionStatus', query: { isEnableSubscription: enabled } }, enabled ? ['Enabling means future lunches are ordered and charged automatically.'] : []);
         }
-        return jsonResult(await client.write('/parent/changeSubscriptionStatus', undefined, { isEnableSubscription: enabled }));
+        return minifiedResult(await client.write('/parent/changeSubscriptionStatus', undefined, { isEnableSubscription: enabled }));
     });
     server.registerTool('mhlb_unsubscribe_order', {
         description: 'Stop a recurring subscription for a specific lunch order.' + UNVERIFIED,
@@ -57,13 +57,13 @@ export function registerBillingTools(server, client) {
                 'isRepeated: true stops the whole recurring series, not just this date.',
             ]);
         }
-        return jsonResult(await client.write('/event/unsubcribeOrder', body));
+        return minifiedResult(await client.write('/event/unsubcribeOrder', body));
     });
     server.registerTool('mhlb_list_gift_cards', {
         description: 'List gift cards on the account — codes, balances and status.',
         annotations: toolAnnotations({ title: 'List gift cards', openWorld: true }),
         inputSchema: {},
-    }, async () => jsonResult(await client.get('/parent/giftCardDataTables')));
+    }, async () => minifiedResult(await client.get('/parent/giftCardDataTables')));
     server.registerTool('mhlb_apply_gift_card', {
         description: 'Redeem a gift card code onto the account balance.' + UNVERIFIED,
         annotations: toolAnnotations({ title: 'Apply gift card', readOnly: false, openWorld: true }),
@@ -72,13 +72,13 @@ export function registerBillingTools(server, client) {
         if (!confirm) {
             return preview('Apply gift card', { method: 'POST', path: '/parent/applyGiftCard', query: { giftCardCode: code } });
         }
-        return jsonResult(await client.write('/parent/applyGiftCard', undefined, { giftCardCode: code }));
+        return minifiedResult(await client.write('/parent/applyGiftCard', undefined, { giftCardCode: code }));
     });
     server.registerTool('mhlb_get_coupon', {
         description: 'Get the coupon currently applied to the account, if any.',
         annotations: toolAnnotations({ title: 'Get applied coupon', openWorld: true }),
         inputSchema: {},
-    }, async () => jsonResult(await client.get('/parent/coupon')));
+    }, async () => minifiedResult(await client.get('/parent/coupon')));
     server.registerTool('mhlb_apply_coupon', {
         description: 'Apply a coupon code to the account.' + UNVERIFIED,
         annotations: toolAnnotations({ title: 'Apply coupon', readOnly: false, openWorld: true }),
@@ -87,7 +87,7 @@ export function registerBillingTools(server, client) {
         if (!confirm) {
             return preview('Apply coupon', { method: 'POST', path: '/parent/applyCoupon', query: { couponCode: code } });
         }
-        return jsonResult(await client.write('/parent/applyCoupon', undefined, { couponCode: code }));
+        return minifiedResult(await client.write('/parent/applyCoupon', undefined, { couponCode: code }));
     });
     server.registerTool('mhlb_remove_coupon', {
         description: 'Remove the coupon currently applied to the account.' + UNVERIFIED,
@@ -96,6 +96,6 @@ export function registerBillingTools(server, client) {
     }, async ({ confirm }) => {
         if (!confirm)
             return preview('Remove coupon', { method: 'POST', path: '/parent/removeCoupon' });
-        return jsonResult(await client.write('/parent/removeCoupon'));
+        return minifiedResult(await client.write('/parent/removeCoupon'));
     });
 }

package/dist/tools/calendar.js

@@ -1,5 +1,5 @@
 import { toolAnnotations, PositiveInt, IsoDate } from '@chrischall/mcp-utils';
-import { jsonResult } from './_shared.js';
+import { minifiedResult } from './_shared.js';
 export function registerCalendarTools(server, client) {
     server.registerTool('mhlb_get_calendar', {
         description: 'Get the lunch calendar for the account over a date range: which days are open for ordering, already ' +
@@ -13,7 +13,7 @@ export function registerCalendarTools(server, client) {
     // Field names are `start`/`end`, captured from the live app. Sending
     // `startDate`/`endDate` returns 200 with an empty `events` array — a silent
     // wrong answer, not an error.
-    async ({ startDate, endDate }) => jsonResult(await client.write('/calendar/studentSchoolData', { start: startDate, end: endDate })));
+    async ({ startDate, endDate }) => minifiedResult(await client.write('/calendar/studentSchoolData', { start: startDate, end: endDate })));
     server.registerTool('mhlb_get_day', {
         description: 'Get what a student has ordered on one specific date — the items, sizes, quantities, add-ons and prices.',
         annotations: toolAnnotations({ title: 'Get a day’s order', openWorld: true }),
@@ -21,5 +21,5 @@ export function registerCalendarTools(server, client) {
             studentId: PositiveInt.describe('Student id from mhlb_list_students.'),
             date: IsoDate.describe('The day to look at (YYYY-MM-DD).'),
         },
-    }, async ({ studentId, date }) => jsonResult(await client.get('/calendar/studentOrderItems', { studentId, date })));
+    }, async ({ studentId, date }) => minifiedResult(await client.get('/calendar/studentOrderItems', { studentId, date })));
 }

package/dist/tools/checkout.js

@@ -1,7 +1,7 @@
 import { randomUUID } from 'node:crypto';
 import { McpToolError, toolAnnotations, PositiveInt, schemaConfirm } from '@chrischall/mcp-utils';
 import { z } from 'zod';
-import { jsonResult, preview, UNVERIFIED } from './_shared.js';
+import { UNVERIFIED, minifiedResult, preview } from './_shared.js';
 /**
  * Checkout is the only pair of tools that moves money. Both are confirm-gated
  * like every other write.
@@ -30,7 +30,7 @@ export function registerCheckoutTools(server, client) {
                 'This step prices the cart and returns payment options. It does not charge a card.',
             ]);
         }
-        return jsonResult(await client.write('/payment/initCheckout', body));
+        return minifiedResult(await client.write('/payment/initCheckout', body));
     });
     server.registerTool('mhlb_checkout', {
         description: 'PAY for the lunches in the cart. This charges a real payment method on the My Hot Lunchbox account. ' +
@@ -86,7 +86,7 @@ export function registerCheckoutTools(server, client) {
         // would mangle a non-object and would let `expectedTotal`/`idempotencyKey`
         // silently shadow same-named server fields.
         const result = await client.write('/payment/checkout', body);
-        return jsonResult({ result, expectedTotal, idempotencyKey: key });
+        return minifiedResult({ result, expectedTotal, idempotencyKey: key });
     });
 }
 /**

package/dist/tools/health.js

@@ -0,0 +1,65 @@
+import { registerCredentialHealthcheckTool } from '@chrischall/mcp-utils/healthcheck';
+import { loadConfig } from '../config.js';
+/**
+ * `mhlb_healthcheck` — the one call that answers "is this connector
+ * working?", and the only tool here that reports a failure as DATA rather
+ * than throwing.
+ *
+ * My Hot Lunchbox had none. `mhlb_whoami` looks like one — its own
+ * description says "Start here to confirm the session works" — and is not: it
+ * is a plain data read that THROWS when auth fails, so the caller gets an
+ * exception, not an answer, and cannot tell a bad password from an
+ * unreachable host from a lockout.
+ *
+ * The lockout is why this matters more here than elsewhere. This account
+ * counts failed sign-ins and will lock or force a CAPTCHA that blocks
+ * server-side sign-in entirely, so a `credential_rejected` hint that invites
+ * retrying is actively harmful. {@link classifyMhlbError} carries that
+ * warning instead.
+ */
+const NOT_CONFIGURED = 'credentials are not configured';
+export function classifyMhlbError(err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    if (msg.includes(NOT_CONFIGURED))
+        return { kind: 'no_credential' };
+    // The host is unreachable, or MYHOTLUNCHBOX_BASE_URL points somewhere wrong.
+    // Nothing here says the credential is bad — do not send anyone to change it.
+    if (msg.includes('Could not reach My Hot Lunchbox')) {
+        return {
+            kind: 'unreachable',
+            hint: 'Could not reach My Hot Lunchbox at all, so the credential was never tested. ' +
+                'Check network connectivity, or MYHOTLUNCHBOX_BASE_URL if the app has moved.',
+        };
+    }
+    if (msg.includes('rejected the sign-in')) {
+        return {
+            kind: 'credential_rejected',
+            hint: 'My Hot Lunchbox rejected the sign-in. Check MYHOTLUNCHBOX_USERNAME / MYHOTLUNCHBOX_PASSWORD against ' +
+                'https://ordernow.myhotlunchbox.com — but do NOT re-run this with guesses: repeated failures can lock ' +
+                'the account or force a CAPTCHA that blocks server-side sign-in entirely.',
+        };
+    }
+    return undefined;
+}
+export function registerHealthcheckTools(server, client, 
+/** Seam: injectable so tests need no process env. */
+readConfig = () => loadConfig()) {
+    registerCredentialHealthcheckTool({
+        server,
+        prefix: 'mhlb',
+        hostLabel: 'ordernow.myhotlunchbox.com',
+        probePath: '/api/auth/userinfo',
+        resolveCredential: async () => {
+            const { username, password, baseUrl } = readConfig();
+            // Both halves or nothing: a username with no password cannot sign in,
+            // and sending it to the API would spend a failed attempt against an
+            // account that locks.
+            const source = username && password ? 'MYHOTLUNCHBOX_USERNAME+MYHOTLUNCHBOX_PASSWORD' : null;
+            return { source, detail: { base_url: baseUrl } };
+        },
+        // The same authenticated read `mhlb_whoami` makes: cheap, and it changes
+        // nothing — no order is placed, no balance moved.
+        probeFn: () => client.get('/auth/userinfo'),
+        classifyThrown: classifyMhlbError,
+    });
+}

package/dist/tools/orders.js

@@ -1,6 +1,6 @@
 import { toolAnnotations, PositiveInt, IsoDate, schemaConfirm } from '@chrischall/mcp-utils';
 import { z } from 'zod';
-import { jsonResult, preview, UNVERIFIED } from './_shared.js';
+import { UNVERIFIED, minifiedResult, preview } from './_shared.js';
 /**
  * Ordering is read-modify-write throughout: `GET /event/createOrder` and
  * `GET /event/editOrder` return a populated model (menu items, sizes, add-ons,
@@ -54,7 +54,7 @@ export function registerOrderTools(server, client) {
             period: z.string().optional().describe('Ordering period value from mhlb_get_cart_tabs.'),
             studentId: PositiveInt.optional().describe('Limit to one student.'),
         },
-    }, async ({ orderStatus, period, studentId }) => jsonResult(await client.get('/event/shoppingCart', {
+    }, async ({ orderStatus, period, studentId }) => minifiedResult(await client.get('/event/shoppingCart', {
         orderStatus,
         selectedPeriod: period,
         selectedStudentId: studentId,
@@ -68,7 +68,7 @@ export function registerOrderTools(server, client) {
             period: z.string().optional().describe('Ordering period to scope the tabs to.'),
             studentId: PositiveInt.optional().describe('Limit to one student.'),
         },
-    }, async ({ tabName, period, studentId }) => jsonResult(await client.get('/event/ShoppingCartBaseData', {
+    }, async ({ tabName, period, studentId }) => minifiedResult(await client.get('/event/ShoppingCartBaseData', {
         shopingCartTabsName: tabName,
         selectedPeriod: period,
         selectedStudentId: studentId,
@@ -81,7 +81,7 @@ export function registerOrderTools(server, client) {
             studentId: PositiveInt.describe('Student id from mhlb_list_students.'),
             date: IsoDate.describe('The lunch date (YYYY-MM-DD).'),
         },
-    }, async ({ studentId, date }) => jsonResult(await client.get('/event/orderBaseData', { studentId, eventDate: date })));
+    }, async ({ studentId, date }) => minifiedResult(await client.get('/event/orderBaseData', { studentId, eventDate: date })));
     server.registerTool('mhlb_get_order_form', {
         description: 'Get the blank order model for a student on a specific lunch event — the exact structure that ' +
             'mhlb_create_order expects back, pre-populated with the available items.',
@@ -90,7 +90,7 @@ export function registerOrderTools(server, client) {
             eventId: PositiveInt.describe('Lunch event id, from mhlb_get_menu or mhlb_get_calendar.'),
             studentId: PositiveInt.describe('Student id from mhlb_list_students.'),
         },
-    }, async ({ eventId, studentId }) => jsonResult(await client.get('/event/createOrder', { eventId, studentId })));
+    }, async ({ eventId, studentId }) => minifiedResult(await client.get('/event/createOrder', { eventId, studentId })));
     server.registerTool('mhlb_get_order', {
         description: 'Get an existing order in editable form — the model mhlb_update_order expects back.',
         annotations: toolAnnotations({ title: 'Get order', openWorld: true }),
@@ -99,7 +99,7 @@ export function registerOrderTools(server, client) {
             eventId: PositiveInt.optional().describe('Lunch event id.'),
             studentId: PositiveInt.optional().describe('Student id.'),
         },
-    }, async ({ orderId, eventId, studentId }) => jsonResult(await client.get('/event/editOrder', { orderId, eventId, studentId })));
+    }, async ({ orderId, eventId, studentId }) => minifiedResult(await client.get('/event/editOrder', { orderId, eventId, studentId })));
     server.registerTool('mhlb_create_order', {
         description: 'Place a lunch order into the cart. Call mhlb_get_order_form first and send that model back with ' +
             'quantities set. This adds to the cart — it does not pay; use mhlb_checkout for that.' + UNVERIFIED,
@@ -111,7 +111,7 @@ export function registerOrderTools(server, client) {
                 'This adds the lunch to the cart. Payment is a separate step (mhlb_checkout).',
             ]);
         }
-        return jsonResult(await client.write('/event/createOrder', order));
+        return minifiedResult(await client.write('/event/createOrder', order));
     });
     server.registerTool('mhlb_update_order', {
         description: 'Change an existing lunch order. Call mhlb_get_order first and send that model back with your edits — ' +
@@ -124,7 +124,7 @@ export function registerOrderTools(server, client) {
                 'This is a whole-order replace: items missing from `order` are removed, not preserved.',
             ]);
         }
-        return jsonResult(await client.write('/event/editOrder', order));
+        return minifiedResult(await client.write('/event/editOrder', order));
     });
     server.registerTool('mhlb_delete_order', {
         description: 'Cancel a lunch order. If it was already paid for, the refund behaviour is whatever My Hot Lunchbox ' +
@@ -139,6 +139,6 @@ export function registerOrderTools(server, client) {
                 'isRepeated: true removes the whole recurring series, not just this date.',
             ]);
         }
-        return jsonResult(await client.write('/event/deleteOrder', body));
+        return minifiedResult(await client.write('/event/deleteOrder', body));
     });
 }

package/dist/tools/reports.js

@@ -2,7 +2,7 @@ import { mkdirSync, writeFileSync } from 'node:fs';
 import { isAbsolute, join, resolve } from 'node:path';
 import { McpToolError, readEnvVar, toolAnnotations, PositiveInt, IsoDate } from '@chrischall/mcp-utils';
 import { z } from 'zod';
-import { jsonResult } from './_shared.js';
+import { minifiedResult } from './_shared.js';
 /**
  * The `/parentReports/print*` endpoints are declared `responseType: 'blob'` in
  * the site's own client and stream a wkhtmltopdf-generated PDF. They generate a
@@ -73,7 +73,7 @@ function deliver(bytes, contentType, filename, inline) {
         if (bytes.byteLength > MAX_INLINE_BYTES) {
             throw new McpToolError(`Report is ${bytes.byteLength} bytes — too large to return inline (limit ${MAX_INLINE_BYTES}).`, { hint: 'Call again with inline: false to write it to a file instead.' });
         }
-        return jsonResult({
+        return minifiedResult({
             filename,
             contentType,
             bytes: bytes.byteLength,
@@ -96,7 +96,7 @@ function deliver(bytes, contentType, filename, inline) {
             cause,
         });
     }
-    return jsonResult({ path, contentType, bytes: bytes.byteLength });
+    return minifiedResult({ path, contentType, bytes: bytes.byteLength });
 }
 /** The midpoint date the calendar report uses to title the PDF. */
 export function midpoint(start, end) {

package/dist/tools/students.js

@@ -1,6 +1,6 @@
 import { toolAnnotations, PositiveInt, schemaConfirm } from '@chrischall/mcp-utils';
 import { z } from 'zod';
-import { jsonResult, preview, UNVERIFIED } from './_shared.js';
+import { UNVERIFIED, minifiedResult, preview } from './_shared.js';
 /**
  * The student form is a read-modify-write pair: `GET /parent/editChild` returns
  * the populated model, `POST /parent/editChild` takes it back. Rather than
@@ -16,19 +16,19 @@ export function registerStudentTools(server, client) {
             'calendar and ordering tool.',
         annotations: toolAnnotations({ title: 'List students', openWorld: true }),
         inputSchema: {},
-    }, async () => jsonResult(await client.get('/parent/childrenInfo')));
+    }, async () => minifiedResult(await client.get('/parent/childrenInfo')));
     server.registerTool('mhlb_get_student_form', {
         description: 'Get the editable profile for one student — school, grade, teacher, delivery location, allergies and ' +
             'the dropdown options for each. Returns the exact model that mhlb_update_student expects back.',
         annotations: toolAnnotations({ title: 'Get student form', openWorld: true }),
         inputSchema: { studentId: PositiveInt.describe('Student id from mhlb_list_students.') },
-    }, async ({ studentId }) => jsonResult(await client.get('/parent/editChild', { childId: studentId })));
+    }, async ({ studentId }) => minifiedResult(await client.get('/parent/editChild', { childId: studentId })));
     server.registerTool('mhlb_new_student_form', {
         description: 'Get a blank student profile plus the school/grade/teacher dropdown options, ready to fill in and ' +
             'pass to mhlb_create_student.',
         annotations: toolAnnotations({ title: 'New student form', openWorld: true }),
         inputSchema: {},
-    }, async () => jsonResult(await client.get('/parent/createChild')));
+    }, async () => minifiedResult(await client.get('/parent/createChild')));
     server.registerTool('mhlb_create_student', {
         description: 'Add a student to the account. Call mhlb_new_student_form first and send that model back with the ' +
             'fields filled in.' + UNVERIFIED,
@@ -37,7 +37,7 @@ export function registerStudentTools(server, client) {
     }, async ({ student, confirm }) => {
         if (!confirm)
             return preview('Create student', { method: 'POST', path: '/parent/createChild', body: student });
-        return jsonResult(await client.write('/parent/createChild', student));
+        return minifiedResult(await client.write('/parent/createChild', student));
     });
     server.registerTool('mhlb_update_student', {
         description: 'Update a student profile. Call mhlb_get_student_form first and send that model back with your edits — ' +
@@ -50,7 +50,7 @@ export function registerStudentTools(server, client) {
                 'This is a whole-record replace: any field missing from `student` is cleared, not preserved.',
             ]);
         }
-        return jsonResult(await client.write('/parent/editChild', student));
+        return minifiedResult(await client.write('/parent/editChild', student));
     });
     server.registerTool('mhlb_delete_student', {
         description: 'Remove a student from the account. Irreversible from this API — their order history goes with them.' +
@@ -64,6 +64,6 @@ export function registerStudentTools(server, client) {
         if (!confirm) {
             return preview('Delete student', { method: 'POST', path: '/parent/deleteChild', query: { id: studentId } }, ['Deleting a student is not reversible through this API.']);
         }
-        return jsonResult(await client.write('/parent/deleteChild', undefined, { id: studentId }));
+        return minifiedResult(await client.write('/parent/deleteChild', undefined, { id: studentId }));
     });
 }

package/dist/version.js

@@ -1,2 +1,2 @@
 /** Single source of truth for the server version; release-please rewrites it. */
-export const VERSION = '0.3.0'; // x-release-please-version
+export const VERSION = '0.5.0'; // x-release-please-version

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "myhotlunchbox-mcp",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "mcpName": "io.github.chrischall/myhotlunchbox-mcp",
   "description": "My Hot Lunchbox MCP server for Claude — developed and maintained by AI (Claude Code)",
   "author": "Claude Code (AI) <https://www.anthropic.com/claude>",
@@ -45,7 +45,7 @@
     "capture:writes": "node scripts/capture-writes.mjs"
   },
   "dependencies": {
-    "@chrischall/mcp-utils": "^0.17.1",
+    "@chrischall/mcp-utils": "^0.23.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "dotenv": "^17.4.0",
     "zod": "^4.4.2"

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/myhotlunchbox-mcp",
     "source": "github"
   },
-  "version": "0.3.0",
+  "version": "0.5.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "myhotlunchbox-mcp",
-      "version": "0.3.0",
+      "version": "0.5.0",
       "transport": {
         "type": "stdio"
       },