ourpr-mcp-server 0.2.0 → 0.4.0

package/build/safe.js

@@ -1,84 +1,32 @@
-// Runner-authored text, on its way into an agent's context.
-//
-// EVERY TOOL RESULT HERE IS UNTRUSTED CONTENT. A run's name and description
-// are free text a person typed, or that arrived from a Strava or Garmin
-// import. They travel verbatim into the same token stream as the agent's
-// instructions, and a model has no hardware boundary between the two. That is
-// the whole of the prompt-injection problem and no library fixes it.
-//
-// Two defences, and they do different jobs.
-//
-// 1. NEUTRALISE THE STRUCTURE. A `|` or a newline in a name corrupts the
-//    markdown table it lands in — an agent then reads columns that shifted,
-//    which is a wrong answer rather than a refused one. Measured against
-//    1,000 of Joey's activities: zero names carry one today, the longest name
-//    is 86 characters, and 400 runs carry a description up to 362. Nothing
-//    prevents the next one. This is a correctness fix that happens to close an
-//    injection surface.
-//
-// 2. NAME THE BOUNDARY. Wrapping the data in explicit delimiters and saying
-//    once that what is inside is data does not solve injection. It measurably
-//    reduces how often it lands, which is the honest claim for it, and it
-//    costs one line per response rather than a preamble on every field.
-//
-// What this deliberately does NOT do is pattern-match for "ignore previous
-// instructions" and friends. That is whack-a-mole against an attacker who
-// writes one sentence differently, and it would give a false sense that the
-// content had been made safe.
-/** The longest a name may be before it is cut. Long enough for every real one
- *  measured (86), short enough that a pasted paragraph cannot flood a row. */
+// Runner-authored text is untrusted; it is neutralised, never pattern-matched.
+// Longer than any measured name, shorter than a pasted paragraph.
 const MAX_NAME = 90;
-/** A description is prose and belongs on a single run, never in a table. */
+// A description belongs on one run, never in a table.
 const MAX_NOTE = 300;
-/**
- * One field of runner-authored text, made safe to put in a table cell.
- *
- * Control characters and newlines become spaces, a pipe is escaped so the
- * column it sits in survives, and the whole thing is capped.
- */
+/** One field of runner text, made safe for a table cell. */
 export function cell(value, max = MAX_NAME) {
     if (value === null || value === undefined || value === "")
         return "";
-    // TAKES `unknown`, NOT `string` (2026-08-30). It was typed `string`, and
-    // `activity_data.device` turned out to be an OBJECT, so `.replace` threw and
-    // `ourpr_get_run` failed outright for every run — a whole tool lost to one
-    // wrong field type. A tool that returns nothing for one field is a small
-    // fault; a tool that throws is a total one, and this layer sits between the
-    // agent and data whose shape the server does not control.
-    //
-    // A primitive is printed. Anything else returns "" rather than the string
-    // "[object Object]": rendering junk into an agent's context is worse than
-    // rendering nothing, and nothing is what the caller already handles.
+    // A field can be any JSON value; only a primitive is printed.
     if (typeof value !== "string" && typeof value !== "number" && typeof value !== "boolean") {
         return "";
     }
     const flat = String(value)
-        // Every control character, newline and tab included. A newline in a cell
-        // ends the row early and every column after it shifts.
+        // A newline in a cell ends the row early.
         .replace(/[\u0000-\u001F\u007F]/g, " ")
-        // Zero-width and bidirectional marks: invisible in a transcript, and they
-        // are how text can read one way to a person and another to a parser.
+        // Zero-width and bidirectional marks hide text from a reader.
         .replace(/[\u200B-\u200F\u202A-\u202E\u2066-\u2069\uFEFF\u2060\u00AD]/g, "")
-        // The tag block, U+E0000-E007F: invisible characters that mirror ASCII,
-        // which is the known channel for smuggling hidden instructions.
+        // The tag block mirrors ASCII invisibly.
         .replace(/[\u{E0000}-\u{E007F}]/gu, "")
         .replace(/\s+/g, " ")
         .trim();
     const clipped = flat.length > max ? `${flat.slice(0, max - 1)}…` : flat;
-    // Escape rather than delete: a runner who named a run "5k | tempo" should
-    // still read it back as they wrote it.
+    // Escaped, not deleted, so "5k | tempo" reads back as written.
     return clipped.replace(/\|/g, "\\|");
 }
-/** Prose from one run — a description or a note. Same cleaning, longer cap. */
+/** Prose from one run, with the longer cap. */
 export const note = (value) => cell(value, MAX_NOTE);
-/**
- * Mark a block as the runner's own data rather than instructions.
- *
- * ONE LINE, NOT A PREAMBLE. It rides on every response that carries
- * runner-authored text, so its cost is paid on every call and its length is
- * part of its design. It is a reduction in how often injection lands, never a
- * guarantee, and the code must not be written as though it were one.
- */
+/** Marks a block as data; it reduces injection and does not prevent it. */
 export function fenced(body) {
     return ("<ourpr-data>\n" +
         body +

package/build/types.js

@@ -1,8 +1,2 @@
-// What the ourpr API returns, narrowed to the fields these tools read.
-//
-// DELIBERATELY PARTIAL. `DetailedActivity` on the backend carries far more
-// than this, and copying it whole would put every field into an agent's
-// context whether or not a tool uses it. These interfaces name what is read
-// and nothing else, which is the same whitelist discipline the backend's own
-// response model keeps.
+// Deliberately partial: only the fields a tool reads.
 export {};

package/manifest.json

@@ -1,12 +1,13 @@
 {
   "manifest_version": "0.3",
   "name": "ourpr-mcp-server",
-  "display_name": "ourpr",
-  "version": "0.2.0",
-  "description": "Read your own ourpr running history in Claude.",
-  "long_description": "Runs, mile splits, watch laps, streams, interval workouts and similar terrain, from your own ourpr account. Read only. The token comes from ourpr Settings and you can revoke it there at any time.",
+  "display_name": "ourpr.",
+  "version": "0.4.0",
+  "description": "Read your own ourpr running history in Claude, and plan the week ahead.",
+  "long_description": "Runs, mile splits, watch laps, streams, interval workouts, similar terrain, your goal race and Blocks, your races and your plans, from your own ourpr account, plus one write: a plan on the week ahead, for a token made with the write scope. The token comes from ourpr Settings and you can revoke it there at any time.",
   "author": { "name": "Joey Flores", "url": "https://ourpr.app" },
   "homepage": "https://ourpr.app/your-runs",
+  "icon": "icon.png",
   "documentation": "https://github.com/joeyaflores/ourpr-mcp-server#readme",
   "support": "https://ourpr.app/support",
   "license": "MIT",
@@ -25,7 +26,7 @@
     "token": {
       "type": "string",
       "title": "Access token",
-      "description": "From ourpr: Settings, Access tokens, New token.",
+      "description": "In ourpr: Profile, Settings, ourpr. mcp, New token.",
       "sensitive": true,
       "required": true
     }
@@ -37,7 +38,11 @@
     { "name": "ourpr_run_laps", "description": "The laps the watch recorded." },
     { "name": "ourpr_rep_workouts", "description": "Every interval workout in your history." },
     { "name": "ourpr_detect_reps", "description": "Whether one run was an interval workout." },
-    { "name": "ourpr_similar_terrain", "description": "Runs that match a distance and a climb." }
+    { "name": "ourpr_similar_terrain", "description": "Runs that match a distance and a climb." },
+    { "name": "ourpr_training_blocks", "description": "The goal race, this week of its Block, and past Blocks." },
+    { "name": "ourpr_list_races", "description": "Every race in your history, with the fastest at each distance." },
+    { "name": "ourpr_list_plans", "description": "The plans already on your week." },
+    { "name": "ourpr_plan_week", "description": "Put a plan on a day still ahead. The one write." }
   ],
   "compatibility": { "claude_desktop": ">=0.10.0", "platforms": ["darwin", "win32", "linux"], "runtimes": { "node": ">=22.14.0" } }
 }