rentahuman-mcp 3.2.0 → 3.3.0

package/README.md

@@ -211,9 +211,11 @@ worker (`escrow_recipient_mismatch`).
 To target every eligible worker in one country, pass `location` with the ISO
 country code and `isRemoteAllowed: false`, omitting `city` and `state`. The
 same shape works with `update_bounty`. Platform-blocked countries are rejected.
+To open one bounty to several countries, pass `supportedCountries` instead.
 
 ```text
 location: { country: "US", isRemoteAllowed: false }
+supportedCountries: ["US", "CA", "GB", "NZ", "AU"]
 ```
 
 For ordinary accepted one-shot bounties, the worker marks the task complete by
@@ -307,6 +309,32 @@ Only workers whose profile country matches can apply or receive automatic
 outreach. The country gate still applies when remote work is allowed. Include a
 `city` for city-level targeting instead.
 
+To recruit across several countries, pass `supportedCountries` with the ISO
+codes (country names are recognized too). Omit `location.country`, or keep it
+and make sure it appears in the list:
+
+```json
+{
+  "location": { "isRemoteAllowed": true },
+  "supportedCountries": ["US", "CA", "GB", "NZ", "AU"],
+  "identityRequired": true
+}
+```
+
+The list is normalized to uppercase ISO codes and deduplicated; blocked or
+unrecognized countries are rejected with a `400`. With `identityRequired`, the
+list is enforced against the applicant's verified document country. Use
+`isRemoteAllowed: true`: an on-site bounty (`isRemoteAllowed: false`) with a
+location country is gated by that country alone and accepts no other list. On
+`update_bounty`, send the full new list to change it. Omitting it leaves an
+explicit multi-country list in place, so editing `location` alone never drops
+it; legacy bounties that only mirror a country-only `location` keep deriving
+that single country from `location`. An empty array is stored as an explicit
+empty list; it never lifts a country-only or on-site country restriction
+(remove `location.country` first), and a remote city location with a country
+stays unrestricted as before. `aiManaged` bounties do not accept
+`supportedCountries`.
+
 #### Completion deadline (auto-reassign)
 
 The bounty-level `deadline` is the application cutoff. At or after that time,

package/dist/serve.js

@@ -1326,6 +1326,7 @@ var agentCheckoutTools = [
 var BOUNTY_PRICE_TYPES = ["fixed", "hourly"];
 var BOUNTY_MIN_PRICE_USD = 3;
 var MAX_EXCLUDED_PARTICIPANT_SOURCE_BOUNTIES = 1e3;
+var MAX_BOUNTY_SUPPORTED_COUNTRIES = 250;
 var HUMANIZATION_FORMATS = ["text"];
 var HUMANIZATION_TRANSFORMATIONS = [
   "paraphrase",
@@ -1480,6 +1481,11 @@ var BountyLocationRequest = Schema5.Struct({
   isRemoteAllowed: Schema5.optional(Schema5.Boolean)
 });
 var BOUNTY_LOCATION_DESCRIPTION = "Worker location target. Set country to an ISO country code without city or state to target every eligible worker in that country, including when remote work is allowed. Include city (and optionally state/country) for city-level targeting. Platform-blocked countries are rejected.";
+var BountySupportedCountriesRequest = Schema5.Array(
+  Schema5.String.pipe(Schema5.minLength(1), Schema5.maxLength(100))
+).pipe(Schema5.maxItems(MAX_BOUNTY_SUPPORTED_COUNTRIES));
+var BOUNTY_SUPPORTED_COUNTRIES_CREATE_DESCRIPTION = 'Countries whose workers may see and apply, as ISO country codes (country names are also recognized), e.g. ["US", "CA", "GB", "NZ", "AU"]. Omit it to keep the location-derived policy: a country-only location restricts the bounty to that country, an on-site city location keeps its existing country gate, and other locations stay unrestricted. When location.country is set it must appear in this list, and on-site bounties (isRemoteAllowed false) with a location country accept only that one country; use isRemoteAllowed true for a remote multi-country bounty. Platform-blocked countries and unrecognized values are rejected. With identityRequired, the list is enforced against the verified document country. Not accepted on aiManaged bounties.';
+var BOUNTY_SUPPORTED_COUNTRIES_UPDATE_DESCRIPTION = 'Replace the eligible-country list with the full new list of ISO country codes (country names are also recognized), e.g. ["US", "CA", "GB", "NZ", "AU"]. Omitting it leaves an explicit multi-country list in place, so a location-only edit never drops it; legacy bounties that only mirror a country-only location keep deriving that single country from location. On-site bounties (isRemoteAllowed false) with a location country accept only that one country. An empty array is stored as an explicit empty list; it never lifts a country-only or on-site country restriction (remove location.country first), while a remote city location with a country stays unrestricted as before. When location.country is set it must appear in the list. Platform-blocked countries and unrecognized values are rejected.';
 var LIFECYCLE_MESSAGES_DESCRIPTION = "Auto-sent to the doer in the bounty conversation on lifecycle transitions. Supports {{name}}, {{bountyTitle}}, {{deadline}}, {{reason}} interpolation. Accepted/submission templates are only ever delivered to accepted applicants.";
 var LifecycleMessageTemplateSchema = Schema5.String.pipe(
   Schema5.maxLength(BOUNTY_LIFECYCLE_TEMPLATE_MAX_LENGTH)
@@ -1627,6 +1633,11 @@ var CreateBountyRequest = Schema5.Struct({
   location: Schema5.optional(BountyLocationRequest).annotations({
     description: BOUNTY_LOCATION_DESCRIPTION
   }),
+  supportedCountries: Schema5.optional(
+    BountySupportedCountriesRequest
+  ).annotations({
+    description: BOUNTY_SUPPORTED_COUNTRIES_CREATE_DESCRIPTION
+  }),
   deadline: Schema5.optional(Schema5.String).annotations({
     description: "Application cutoff (ISO 8601 format). At or after this time, the listing is removed from discovery and no new applications or direct uploads are accepted. Use completionWindowHours for a post-acceptance completion deadline."
   }),
@@ -1892,6 +1903,11 @@ var UpdateBountyRequest = Schema5.Struct({
   location: Schema5.optional(BountyLocationRequest).annotations({
     description: BOUNTY_LOCATION_DESCRIPTION
   }),
+  supportedCountries: Schema5.optional(
+    BountySupportedCountriesRequest
+  ).annotations({
+    description: BOUNTY_SUPPORTED_COUNTRIES_UPDATE_DESCRIPTION
+  }),
   status: Schema5.optional(
     Schema5.Literal("open", "in_review", "paused", "closed")
   ).annotations({
@@ -2383,7 +2399,7 @@ var CancelBountyRequest = BountyCancellationFeedbackRequest.pipe(
 );
 var createBountySpec = {
   name: "create_bounty",
-  description: `Create a one-shot task bounty for humans to apply to. Dry-run preview.fundingTotal is the total funding requirement before any existing wallet balance is applied; show that estimate to the operator before posting. Live pending_deposit responses include checkout_total, the exact hosted charge after wallet balance is applied, next to deposit_url. To target an entire country, pass location with an ISO country code and isRemoteAllowed=false while omitting city and state. Standard application bounties support application detail items via applicationDetails, including text questions, optional or required acknowledgment checkboxes, one-file uploads (allowedFileTypes: image, docx, pdf, txt, video, audio), and one required live_video field whose label is the script applicants record with the in-browser camera. For appearance-based bounties where the worker appears on camera or their presence is part of the deliverable (sign holding, UGC, sponsored posts, on-camera video, promo/GTM appearances), always include one required live_video field with a label asking the applicant to explain in two sentences why they are a good fit. Set liveCaptureRequirement to photo or video when accepted workers must capture new camera evidence after acceptance; neither camera-only workflow is cryptographic liveness verification. Do not ask for passwords, OTP/2FA codes, API keys, private keys, seed phrases, government IDs, bank/card details, exact home addresses, dates of birth, or other sensitive personal information. Blank rows are ignored; uploads are capped at 3 fields, acknowledgments at 5 fields, and live video at 1 field. Direct-review photo, video, or document collection bounties use submissionMode and matching upload settings instead of applicationDetails. lifecycleMessages can define auto-message templates for acceptance, rejection, and submission review transitions. Set completionWindowHours (any whole number of hours from 1 to 720, e.g. 36) to give confirmed workers a completion deadline: overdue seats are automatically released and reopened for other applicants (auto-reassign), workers can request extensions, and you approve/deny/grant them per worker. Pass optional \`idempotencyKey\` to make this safe to retry (a replayed key returns the original result instead of duplicating). Applicants are auto-reviewed by default (autoAccept, default true): deterministic checks always run and an AI review runs only for free-text screening answers \u2014 qualified applicants are accepted, clear mismatches rejected with a reason, uncertain cases left pending for manual review; pass autoAccept: false to review and accept every application yourself; on micCheckRequired bounties, set autoAcceptMinMicScore (1-5) to make the mic score a hard cutoff: applications below it are auto-rejected, at/above proceed toward acceptance, and unscored recordings stay pending. When omitted, the platform default 3.0 applies and lower scores only stay pending for manual review. To keep previous participants out, pass excludedParticipantSourceBountyIds with up to ${MAX_EXCLUDED_PARTICIPANT_SOURCE_BOUNTIES} ids of your OWN earlier bounties: any worker who was ever accepted on one of them cannot see or apply to the new bounty, and you can change the list later with update_bounty. AI-managed, QA, and taste run bounties, and never-funded drafts are rejected as sources. BETA: pass aiManaged: true to have the platform fully manage the bounty \u2014 automated recruiting, vetting, submission review, payment release, and a final report. Fixed price USD only, 1-50 spots. Poll the bounty's managed run or subscribe to run.report_ready for the finished work.`,
+  description: `Create a one-shot task bounty for humans to apply to. Dry-run preview.fundingTotal is the total funding requirement before any existing wallet balance is applied; show that estimate to the operator before posting. Live pending_deposit responses include checkout_total, the exact hosted charge after wallet balance is applied, next to deposit_url. To target an entire country, pass location with an ISO country code and isRemoteAllowed=false while omitting city and state. To open one bounty to several countries, pass supportedCountries with the ISO codes (e.g. ["US", "CA", "GB", "NZ", "AU"]); when location.country is set it must be in that list, on-site bounties (isRemoteAllowed=false) accept only their location country, and with identityRequired the list is enforced against the verified document country. Standard application bounties support application detail items via applicationDetails, including text questions, optional or required acknowledgment checkboxes, one-file uploads (allowedFileTypes: image, docx, pdf, txt, video, audio), and one required live_video field whose label is the script applicants record with the in-browser camera. For appearance-based bounties where the worker appears on camera or their presence is part of the deliverable (sign holding, UGC, sponsored posts, on-camera video, promo/GTM appearances), always include one required live_video field with a label asking the applicant to explain in two sentences why they are a good fit. Set liveCaptureRequirement to photo or video when accepted workers must capture new camera evidence after acceptance; neither camera-only workflow is cryptographic liveness verification. Do not ask for passwords, OTP/2FA codes, API keys, private keys, seed phrases, government IDs, bank/card details, exact home addresses, dates of birth, or other sensitive personal information. Blank rows are ignored; uploads are capped at 3 fields, acknowledgments at 5 fields, and live video at 1 field. Direct-review photo, video, or document collection bounties use submissionMode and matching upload settings instead of applicationDetails. lifecycleMessages can define auto-message templates for acceptance, rejection, and submission review transitions. Set completionWindowHours (any whole number of hours from 1 to 720, e.g. 36) to give confirmed workers a completion deadline: overdue seats are automatically released and reopened for other applicants (auto-reassign), workers can request extensions, and you approve/deny/grant them per worker. Pass optional \`idempotencyKey\` to make this safe to retry (a replayed key returns the original result instead of duplicating). Applicants are auto-reviewed by default (autoAccept, default true): deterministic checks always run and an AI review runs only for free-text screening answers \u2014 qualified applicants are accepted, clear mismatches rejected with a reason, uncertain cases left pending for manual review; pass autoAccept: false to review and accept every application yourself; on micCheckRequired bounties, set autoAcceptMinMicScore (1-5) to make the mic score a hard cutoff: applications below it are auto-rejected, at/above proceed toward acceptance, and unscored recordings stay pending. When omitted, the platform default 3.0 applies and lower scores only stay pending for manual review. To keep previous participants out, pass excludedParticipantSourceBountyIds with up to ${MAX_EXCLUDED_PARTICIPANT_SOURCE_BOUNTIES} ids of your OWN earlier bounties: any worker who was ever accepted on one of them cannot see or apply to the new bounty, and you can change the list later with update_bounty. AI-managed, QA, and taste run bounties, and never-funded drafts are rejected as sources. BETA: pass aiManaged: true to have the platform fully manage the bounty \u2014 automated recruiting, vetting, submission review, payment release, and a final report. Fixed price USD only, 1-50 spots. Poll the bounty's managed run or subscribe to run.report_ready for the finished work.`,
   input: CreateBountyRequest
 };
 var getBountySpec = {
@@ -2424,7 +2440,7 @@ var decideExtensionSpec = {
 };
 var updateBountySpec = {
   name: "update_bounty",
-  description: `Update ordinary one-shot bounty details. You can modify the title, description, price, application-cutoff deadline, location, requiredLinks, applicationDetails, lifecycleMessages, liveCaptureRequirement, reactivate hidden inactive bounties, and more. The deadline stops new applications and direct uploads; completionWindowHours controls post-acceptance completion timing. To target an entire country, pass location with an ISO country code and isRemoteAllowed=false while omitting city and state. Live capture and required-link requirements can only be changed before applications are received. applicationDetails may be changed after applications are received; existing applications keep their original answers, while future applications use the latest fields. applicationDetails are application detail items for standard application bounties only; blank rows are ignored, uploads are capped at 3 fields, acknowledgments at 5 fields, and camera-only live_video at 1 required field. lifecycleMessages can define auto-message templates for acceptance, rejection, and submission review transitions. Admin-only ongoing bounty settings are intentionally not exposed through MCP. You can also pause/unpause a bounty (status 'paused' stops new applications and outreach, including on a fully staffed bounty; status 'open' resumes it, and the resumed status is derived from its seats: open, partially_filled, or assigned when every seat is still filled), close an unassigned bounty and return its unused funding (status 'closed'), increase seats via spotsAvailable, keep pending applicants on fill via keepApplicantsOnFill, and change the auto-reassign completion deadline via completionWindowHours (any whole number of hours from 1 to 720; null disables; only affects seats confirmed after the edit), and toggle automatic applicant review via autoAccept (applications received while off stay pending; toggling on affects future applications only; ignored on aiManaged bounties) or adjust its mic-quality cutoff via autoAcceptMinMicScore (1-5 \u2014 applications scoring below your configured cutoff are auto-rejected, at/above proceed; null resets to the 3.0 default, below which applications only stay pending). The exclude-previous-participants list can be changed after posting: pass excludedParticipantSourceBountyIds with the full new list of up to ${MAX_EXCLUDED_PARTICIPANT_SOURCE_BOUNTIES} ids of your OWN earlier bounties (an empty array clears it); the same source rules as create_bounty apply, and a bounty can never exclude itself. Use cancel_bounty for cancellation and refund handling. Work completion and payment are system-managed from escrow and payout evidence; status 'completed' and 'paid' cannot be set directly.`,
+  description: `Update ordinary one-shot bounty details. You can modify the title, description, price, application-cutoff deadline, location, requiredLinks, applicationDetails, lifecycleMessages, liveCaptureRequirement, reactivate hidden inactive bounties, and more. The deadline stops new applications and direct uploads; completionWindowHours controls post-acceptance completion timing. To target an entire country, pass location with an ISO country code and isRemoteAllowed=false while omitting city and state. To change which countries may apply, pass supportedCountries with the full new list of ISO codes; omitting it leaves an explicit multi-country list in place (legacy bounties that only mirror a country-only location keep deriving that country from location), an empty array is stored as an explicit empty list but never lifts a country-only or on-site country restriction, and on-site bounties accept only their location country. Live capture and required-link requirements can only be changed before applications are received. applicationDetails may be changed after applications are received; existing applications keep their original answers, while future applications use the latest fields. applicationDetails are application detail items for standard application bounties only; blank rows are ignored, uploads are capped at 3 fields, acknowledgments at 5 fields, and camera-only live_video at 1 required field. lifecycleMessages can define auto-message templates for acceptance, rejection, and submission review transitions. Admin-only ongoing bounty settings are intentionally not exposed through MCP. You can also pause/unpause a bounty (status 'paused' stops new applications and outreach, including on a fully staffed bounty; status 'open' resumes it, and the resumed status is derived from its seats: open, partially_filled, or assigned when every seat is still filled), close an unassigned bounty and return its unused funding (status 'closed'), increase seats via spotsAvailable, keep pending applicants on fill via keepApplicantsOnFill, and change the auto-reassign completion deadline via completionWindowHours (any whole number of hours from 1 to 720; null disables; only affects seats confirmed after the edit), and toggle automatic applicant review via autoAccept (applications received while off stay pending; toggling on affects future applications only; ignored on aiManaged bounties) or adjust its mic-quality cutoff via autoAcceptMinMicScore (1-5 \u2014 applications scoring below your configured cutoff are auto-rejected, at/above proceed; null resets to the 3.0 default, below which applications only stay pending). The exclude-previous-participants list can be changed after posting: pass excludedParticipantSourceBountyIds with the full new list of up to ${MAX_EXCLUDED_PARTICIPANT_SOURCE_BOUNTIES} ids of your OWN earlier bounties (an empty array clears it); the same source rules as create_bounty apply, and a bounty can never exclude itself. Use cancel_bounty for cancellation and refund handling. Work completion and payment are system-managed from escrow and payout evidence; status 'completed' and 'paid' cannot be set directly.`,
   input: UpdateBountyRequest
 };
 var cancelBountySpec = {
@@ -3175,7 +3191,12 @@ var common = {
   invalidTimeFormat: "Invalid time format. Use HH:mm (e.g., 09:00, 14:30)."
 };
 var bounties = {
-  dryRunPreview: "This is a preview \u2014 the bounty has NOT been created yet. preview.fundingTotal is the total funding requirement (including the platform fee) before any existing wallet balance is applied, so it may be higher than the hosted checkout charge. Show this estimate to the operator and ask if they'd like to edit anything before posting. To create the bounty, call create_bounty again with the same parameters and dryRun omitted or set to false.",
+  dryRunPreview: "This is a preview \u2014 the bounty has NOT been created yet, no funds were reserved, and no checkout was started. preview.fundingTotal is the total funding requirement (including the platform fee) before any existing wallet balance is applied, so it may be higher than the hosted checkout charge. Show this estimate to the operator and ask if they'd like to edit anything before posting. To create the bounty, call create_bounty again with the same parameters and dryRun omitted or set to false.",
+  dryRunServerValidated: "serverValidation=passed: the RentAHuman API validated and normalized these parameters with the same rules as a real create (country targeting, pricing, screening fields, content moderation). The AI content review runs only on the real create, so a live bounty can additionally land in pending_review.",
+  dryRunServerUnavailable: "serverValidation=unavailable: the RentAHuman API could not be reached, so this preview was computed locally and has NOT been validated by the server (country targeting, pricing rules and screening fields are only checked there). Tell the operator the preview is unverified and retry the preview before creating.",
+  dryRunMockPreview: "serverValidation=skipped: mock mode computes the preview locally without contacting the API.",
+  retryWithSameKey: (idempotencyKey) => `The API did not confirm whether the bounty was created. Retry create_bounty with the same parameters and the same idempotencyKey ("${idempotencyKey}") after about 30 seconds: a replay returns the original bounty (including its deposit_url) instead of creating a duplicate, and a 409 idempotency_in_progress means the first attempt is still running \u2014 wait and retry again. Do not change the idempotencyKey.`,
+  retryWithoutKey: "The API did not confirm whether the bounty was created, and this call had no idempotencyKey, so a plain retry could create a duplicate. First call list_bounties (mine=true) to check for a bounty with this title (an unfunded one is in pending_deposit status and is not publicly visible). If it is missing, retry with an idempotencyKey so further retries are safe.",
   createdMultiPerson: (spotsAvailable) => `Multi-person bounty created successfully. Looking for ${spotsAvailable} humans.`,
   createdSingle: "Bounty created successfully. Humans can now view and apply.",
   depositRequired: "DEPOSIT REQUIRED: The bounty has been created but is NOT visible yet. Tell the operator checkout_total (it includes a platform fee) before they pay. They must complete checkout at the deposit_url to make the bounty live. Share this URL with the human who owns this account.",
@@ -3300,6 +3321,12 @@ var MOCK_HIRING_STATUSES = /* @__PURE__ */ new Set([
   "pending_funding",
   "partially_filled"
 ]);
+var asRecord = (value) => {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    return {};
+  }
+  return Object.fromEntries(Object.entries(value));
+};
 var mockHiringSpotsRemaining = (bounty) => MOCK_HIRING_STATUSES.has(bounty.status) ? Math.max(0, (bounty.spotsAvailable || 1) - (bounty.spotsFilled || 0)) : 0;
 var handleCreateBounty = (args) => Effect9.gen(function* () {
   const params = yield* decode(CreateBountyRequest)(args);
@@ -3317,6 +3344,11 @@ var handleCreateBounty = (args) => Effect9.gen(function* () {
   const screeningFields = screeningFieldsResult.fields;
   const excludedParticipantSourceBountyIds = params.excludedParticipantSourceBountyIds?.length ? params.excludedParticipantSourceBountyIds : void 0;
   const exclusionFields = excludedParticipantSourceBountyIds ? { excludedParticipantSourceBountyIds } : {};
+  const {
+    dryRun: _dryRun,
+    excludedParticipantSourceBountyIds: _rawExclusion,
+    ...createParams
+  } = params;
   if (params.dryRun) {
     const spotsAvailable = params.spotsAvailable || 1;
     const currency = params.currency || "USD";
@@ -3329,6 +3361,7 @@ var handleCreateBounty = (args) => Effect9.gen(function* () {
       liveCaptureRequirement: params.liveCaptureRequirement || null,
       category: params.category || "computer-gigs",
       location: params.location || { isRemoteAllowed: true },
+      supportedCountries: params.supportedCountries ?? null,
       deadline: params.deadline || null,
       estimatedHours: params.estimatedHours,
       estimatedDurationUnit: params.estimatedDurationUnit || null,
@@ -3365,11 +3398,66 @@ var handleCreateBounty = (args) => Effect9.gen(function* () {
         spotsAvailable
       })
     };
+    if (config.mockMode) {
+      return ok({
+        success: true,
+        dryRun: true,
+        serverValidation: "skipped",
+        preview,
+        message: `${messages.bounties.dryRunPreview} ${messages.bounties.dryRunMockPreview}`
+      });
+    }
+    const verification2 = yield* identity2.createVerification("create_bounty");
+    const { idempotencyKey: _previewKey, ...previewParams } = createParams;
+    const outcome = yield* api.post("/bounties", {
+      ...previewParams,
+      ...exclusionFields,
+      applicationDetails: screeningFields,
+      dryRun: true,
+      ...verification2
+    }).pipe(
+      Effect9.map((result2) => ({
+        kind: "server",
+        result: asRecord(result2)
+      })),
+      Effect9.catchTag(
+        "TimeoutError",
+        () => Effect9.succeed({ kind: "unreachable" })
+      ),
+      Effect9.catchTag(
+        "ApiError",
+        (error) => Effect9.succeed(
+          error.statusCode === 0 ? { kind: "unreachable" } : { kind: "rejected", error }
+        )
+      )
+    );
+    if (outcome.kind === "rejected") {
+      return err({
+        success: false,
+        dryRun: true,
+        error: outcome.error.body,
+        errorType: "ApiError",
+        statusCode: outcome.error.statusCode,
+        endpoint: outcome.error.endpoint
+      });
+    }
+    if (outcome.kind === "unreachable") {
+      return ok({
+        success: true,
+        dryRun: true,
+        serverValidation: "unavailable",
+        preview,
+        message: `${messages.bounties.dryRunPreview} ${messages.bounties.dryRunServerUnavailable}`
+      });
+    }
+    const serverPreview = asRecord(outcome.result.preview);
+    const fundingTotal = typeof outcome.result.fundingTotal === "number" ? outcome.result.fundingTotal : preview.fundingTotal;
     return ok({
       success: true,
       dryRun: true,
-      preview,
-      message: messages.bounties.dryRunPreview
+      serverValidation: "passed",
+      preview: { ...serverPreview, fundingTotal },
+      message: `${messages.bounties.dryRunPreview} ${messages.bounties.dryRunServerValidated}`
     });
   }
   yield* rateLimit.check("create_bounty");
@@ -3387,6 +3475,7 @@ var handleCreateBounty = (args) => Effect9.gen(function* () {
       skillsNeeded: params.skillsNeeded || [],
       category: params.category || "computer-gigs",
       location: params.location || { isRemoteAllowed: true },
+      ...params.supportedCountries !== void 0 ? { supportedCountries: params.supportedCountries } : {},
       deadline: params.deadline,
       estimatedHours: params.estimatedHours,
       priceType: params.priceType,
@@ -3428,18 +3517,42 @@ var handleCreateBounty = (args) => Effect9.gen(function* () {
       })
     );
   }
-  const {
-    dryRun: _,
-    excludedParticipantSourceBountyIds: _rawExclusion,
-    ...createParams
-  } = params;
   const verification = yield* identity2.createVerification("create_bounty");
-  const result = yield* api.post("/bounties", {
+  const created = yield* api.post("/bounties", {
     ...createParams,
     ...exclusionFields,
     applicationDetails: screeningFields,
     ...verification
-  });
+  }).pipe(
+    Effect9.map((result2) => ({
+      ok: true,
+      result: asRecord(result2)
+    })),
+    // Upstream failures (gateway errors, timeouts, no response) leave the
+    // agent unsure whether the bounty exists. Client errors keep their
+    // normal error path — they are answers, not uncertainty.
+    Effect9.catchTag(
+      "TimeoutError",
+      (error) => Effect9.succeed({ ok: false, error })
+    ),
+    Effect9.catchTag(
+      "ApiError",
+      (error) => error.statusCode === 0 || error.statusCode >= 500 ? Effect9.succeed({ ok: false, error }) : Effect9.fail(error)
+    )
+  );
+  if (!created.ok) {
+    const failure = created.error;
+    const isApiError = "statusCode" in failure;
+    return err({
+      success: false,
+      error: failure.message,
+      errorType: isApiError ? "ApiError" : "TimeoutError",
+      ...isApiError ? { statusCode: failure.statusCode } : {},
+      endpoint: failure.endpoint,
+      retry_guidance: params.idempotencyKey ? messages.bounties.retryWithSameKey(params.idempotencyKey) : messages.bounties.retryWithoutKey
+    });
+  }
+  const result = created.result;
   if (result.deposit_url) {
     return ok({
       ...result,
@@ -3908,7 +4021,7 @@ var payEnterpriseBountyTool = toMcpTool(
 var bountyTools = [
   {
     name: "create_bounty",
-    description: `Create a one-shot task bounty for humans to apply to. To target an entire country, pass location with an ISO country code and isRemoteAllowed=false while omitting city and state. **IMPORTANT: Always call with dryRun=true first** to preview the bounty. Dry-run \`preview.fundingTotal\` is the total funding requirement before any existing wallet balance is applied. Show that estimate to the operator before posting. Show the preview to the user and ask 'Here's your bounty \u2014 would you like to edit anything before posting?' Only call again with dryRun=false (or omitted) after the user confirms. **You MUST help the user define completionCriteria and evidenceTypes** \u2014 ask what 'done' looks like and what proof they need (text/data, photos, video, or links). For specialized standard-application tasks, configure applicationDetails so applicants provide application details before review. Blank rows are ignored; application upload fields are one file each and capped at 3 total; acknowledgment checkboxes are capped at 5 total and can be optional or required; and one required live_video field may contain a script applicants must record with the in-browser camera. For appearance-based bounties where the worker appears on camera or their presence is part of the deliverable (sign holding, UGC, sponsored posts, on-camera video, promo/GTM appearances), always include one required live_video field with a label asking the applicant to explain in two sentences why they are a good fit \u2014 this gates applications on a live self-recorded video so the poster sees each applicant before accepting. Do not ask for passwords, OTP/2FA codes, API keys, private keys, seed phrases, government IDs, bank/card details, exact home addresses, dates of birth, or other sensitive personal information. For direct-review collection bounties, use submissionMode='photo_upload', 'video_upload', or 'document_upload' with matching submission settings instead of applicationDetails. lifecycleMessages can define auto-message templates for acceptance, rejection, and submission review transitions. You can require applicants to provide specific links (LinkedIn, GitHub, resume, etc.) using the requiredLinks parameter. Requires RENTAHUMAN_API_KEY from the account owner. Standard accounts use available wallet balance first; if the wallet cannot cover the bounty, the response includes deposit_url and checkout_total (the hosted charge after wallet balance is applied) and the account owner must complete checkout before the bounty is visible. Supports multi-person bounties by setting spotsAvailable > 1. Set completionWindowHours (any whole number of hours from 1 to 720, e.g. 36) to give confirmed workers a completion deadline: overdue seats auto-release and reopen for other applicants; workers may request extensions you answer with decide_extension_request. Pass optional \`idempotencyKey\` to make this safe to retry (a replayed key returns the original result instead of duplicating). Applicants are auto-reviewed by default (autoAccept, default true): deterministic checks always run and an AI review runs only for free-text screening answers \u2014 qualified applicants are accepted, clear mismatches rejected with a reason, uncertain cases left pending for manual review; pass autoAccept: false to review and accept every application yourself; on micCheckRequired bounties, set autoAcceptMinMicScore (1-5) to make the mic score a hard cutoff: applications below it are auto-rejected, at/above proceed toward acceptance, and unscored recordings stay pending. When omitted, the platform default 3.0 applies and lower scores only stay pending for manual review. To keep previous participants out, pass excludedParticipantSourceBountyIds with up to ${MAX_EXCLUDED_PARTICIPANT_SOURCE_BOUNTIES} ids of your OWN earlier bounties: any worker who was ever accepted on one of them cannot see or apply to the new bounty, and you can change the list later with update_bounty. AI-managed, QA, and taste run bounties, and never-funded drafts are rejected as sources. BETA: pass aiManaged: true to have the platform fully manage the bounty \u2014 automated recruiting, vetting, submission review, payment release, and a final report. Fixed price USD only, 1-50 spots. Poll the bounty's managed run or subscribe to run.report_ready for the finished work.`,
+    description: `Create a one-shot task bounty for humans to apply to. To target an entire country, pass location with an ISO country code and isRemoteAllowed=false while omitting city and state. **IMPORTANT: Always call with dryRun=true first** to preview the bounty. A preview never creates a bounty, reserves funds, or starts a checkout. When the API is reachable it validates and normalizes the parameters with the same rules as a real create and the response carries serverValidation=passed; if the API cannot be reached the preview is computed locally and carries serverValidation=unavailable \u2014 tell the operator it is unverified. Dry-run \`preview.fundingTotal\` is the total funding requirement before any existing wallet balance is applied. Show that estimate to the operator before posting. Show the preview to the user and ask 'Here's your bounty \u2014 would you like to edit anything before posting?' Only call again with dryRun=false (or omitted) after the user confirms. **You MUST help the user define completionCriteria and evidenceTypes** \u2014 ask what 'done' looks like and what proof they need (text/data, photos, video, or links). For specialized standard-application tasks, configure applicationDetails so applicants provide application details before review. Blank rows are ignored; application upload fields are one file each and capped at 3 total; acknowledgment checkboxes are capped at 5 total and can be optional or required; and one required live_video field may contain a script applicants must record with the in-browser camera. For appearance-based bounties where the worker appears on camera or their presence is part of the deliverable (sign holding, UGC, sponsored posts, on-camera video, promo/GTM appearances), always include one required live_video field with a label asking the applicant to explain in two sentences why they are a good fit \u2014 this gates applications on a live self-recorded video so the poster sees each applicant before accepting. Do not ask for passwords, OTP/2FA codes, API keys, private keys, seed phrases, government IDs, bank/card details, exact home addresses, dates of birth, or other sensitive personal information. For direct-review collection bounties, use submissionMode='photo_upload', 'video_upload', or 'document_upload' with matching submission settings instead of applicationDetails. lifecycleMessages can define auto-message templates for acceptance, rejection, and submission review transitions. You can require applicants to provide specific links (LinkedIn, GitHub, resume, etc.) using the requiredLinks parameter. Requires RENTAHUMAN_API_KEY from the account owner. Standard accounts use available wallet balance first; if the wallet cannot cover the bounty, the response includes deposit_url and checkout_total (the hosted charge after wallet balance is applied) and the account owner must complete checkout before the bounty is visible. Supports multi-person bounties by setting spotsAvailable > 1. Set completionWindowHours (any whole number of hours from 1 to 720, e.g. 36) to give confirmed workers a completion deadline: overdue seats auto-release and reopen for other applicants; workers may request extensions you answer with decide_extension_request. Pass optional \`idempotencyKey\` to make this safe to retry (a replayed key returns the original result instead of duplicating). Applicants are auto-reviewed by default (autoAccept, default true): deterministic checks always run and an AI review runs only for free-text screening answers \u2014 qualified applicants are accepted, clear mismatches rejected with a reason, uncertain cases left pending for manual review; pass autoAccept: false to review and accept every application yourself; on micCheckRequired bounties, set autoAcceptMinMicScore (1-5) to make the mic score a hard cutoff: applications below it are auto-rejected, at/above proceed toward acceptance, and unscored recordings stay pending. When omitted, the platform default 3.0 applies and lower scores only stay pending for manual review. To keep previous participants out, pass excludedParticipantSourceBountyIds with up to ${MAX_EXCLUDED_PARTICIPANT_SOURCE_BOUNTIES} ids of your OWN earlier bounties: any worker who was ever accepted on one of them cannot see or apply to the new bounty, and you can change the list later with update_bounty. AI-managed, QA, and taste run bounties, and never-funded drafts are rejected as sources. BETA: pass aiManaged: true to have the platform fully manage the bounty \u2014 automated recruiting, vetting, submission review, payment release, and a final report. Fixed price USD only, 1-50 spots. Poll the bounty's managed run or subscribe to run.report_ready for the finished work.`,
     inputSchema: toInputSchema(CreateBountyRequest),
     handler: handleCreateBounty
   },

package/dist/types/index.d.ts

@@ -49,7 +49,7 @@ declare const CreateBountyRequest: Schema.Struct<{
     title: Schema.refine<string, Schema.filter<typeof Schema.String>>;
     description: Schema.refine<string, Schema.filter<typeof Schema.String>>;
     completionCriteria: Schema.refine<string, Schema.filter<typeof Schema.String>>;
-    evidenceTypes: Schema.refine<readonly ("link" | "text" | "photo" | "video")[], Schema.Array$<Schema.Literal<["text", "photo", "video", "link"]>>>;
+    evidenceTypes: Schema.refine<readonly ("text" | "link" | "photo" | "video")[], Schema.Array$<Schema.Literal<["text", "photo", "video", "link"]>>>;
     evidenceCriteria: Schema.optional<Schema.filter<typeof Schema.String>>;
     liveCaptureRequirement: Schema.optional<Schema.Literal<["photo", "video"]>>;
     requirements: Schema.optional<Schema.Array$<typeof Schema.String>>;
@@ -61,6 +61,7 @@ declare const CreateBountyRequest: Schema.Struct<{
         country: Schema.optional<Schema.filter<typeof Schema.String>>;
         isRemoteAllowed: Schema.optional<typeof Schema.Boolean>;
     }>>;
+    supportedCountries: Schema.optional<Schema.filter<Schema.Array$<Schema.filter<Schema.filter<typeof Schema.String>>>>>;
     deadline: Schema.optional<typeof Schema.String>;
     estimatedHours: Schema.refine<number, Schema.filter<typeof Schema.Number>>;
     priceType: Schema.Literal<["fixed", "hourly"]>;
@@ -145,6 +146,7 @@ declare const UpdateBountyRequest: Schema.Struct<{
         country: Schema.optional<Schema.filter<typeof Schema.String>>;
         isRemoteAllowed: Schema.optional<typeof Schema.Boolean>;
     }>>;
+    supportedCountries: Schema.optional<Schema.filter<Schema.Array$<Schema.filter<Schema.filter<typeof Schema.String>>>>>;
     status: Schema.optional<Schema.Literal<["open", "in_review", "paused", "closed"]>>;
     identityRequired: Schema.optional<typeof Schema.Boolean>;
     excludedParticipantSourceBountyIds: Schema.optional<Schema.filter<Schema.Array$<typeof Schema.String>>>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rentahuman-mcp",
-  "version": "3.2.0",
+  "version": "3.3.0",
   "description": "MCP server for AI agents to browse and book humans on rentahuman.ai",
   "keywords": [
     "ai",