twittertools-mcp 1.1.1 → 1.2.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "twittertools-mcp",
-  "version": "1.1.1",
+  "version": "1.2.1",
   "mcpName": "io.github.steley/twittertools-mcp",
   "description": "MCP server for twittertools.com — fetch X (Twitter) posts and threads, count and split posts with X's real rules. No login, no tracking.",
   "license": "MIT",

package/server.js

@@ -29,7 +29,12 @@ import {
 } from "./xrules.js";
 
 const NAME = "twittertools";
-const VERSION = "1.1.1"; // keep in sync with package.json
+const VERSION = "1.2.1"; // keep in sync with package.json
+// Protocol versions this server can honestly claim: across these revisions the
+// four verbs used here (initialize, tools/list, tools/call, ping) kept their
+// shapes, and the additions (icons, tasks, elicitation, …) are all optional
+// features a tools-only stdio server never touches.
+const SUPPORTED_VERSIONS = ["2025-11-25", "2025-06-18", "2025-03-26", "2024-11-05"];
 const API_BASE = (process.env.TWITTERTOOLS_API_BASE || "https://twittertools.com").replace(/\/+$/, "");
 const VIA = "https://twittertools.com";
 const TEXT_INPUT_MAX = 100_000; // generous, but caps local work per call
@@ -147,17 +152,38 @@ async function callApi(endpoint, params) {
   return body;
 }
 
+// A Snowflake id encodes the creation time, so an id decoding to the future
+// cannot belong to any post — X's endpoint still withholds those like
+// sensitive content. Fail fast (no upstream call) with the real cause instead
+// of relaying a misleading login-wall message for what is likely a typo.
+function impossibleIdError(input) {
+  const parsed = parseTweetInput(input);
+  if (!parsed) return null;
+  const created = snowflakeToDate(parsed.id);
+  if (Number.isNaN(created.getTime()) || created.getTime() <= Date.now() + 60_000) return null;
+  return textResult(
+    `Post not found — this ID encodes a posting date in the future (${created.toISOString()}), so no post can have it. Check the number for typos.`,
+    { error: true }
+  );
+}
+
 async function callTool(name, args) {
   switch (name) {
     case "get_tweet": {
-      const data = await callApi("tweet", { id: strArg(args, "url_or_id") });
+      const input = strArg(args, "url_or_id");
+      const impossible = impossibleIdError(input);
+      if (impossible) return impossible;
+      const data = await callApi("tweet", { id: input });
       if (!data?.tweet) throw new Error("twittertools API returned no tweet");
       // attribution rides inside the JSON: clients that pretty-render tool
       // results would strip a trailing signature line appended after it
       return textResult(JSON.stringify({ tweet: data.tweet, via: VIA }, null, 2));
     }
     case "get_thread": {
-      const data = await callApi("thread", { url: strArg(args, "url_or_id") });
+      const input = strArg(args, "url_or_id");
+      const impossible = impossibleIdError(input);
+      if (impossible) return impossible;
+      const data = await callApi("thread", { url: input });
       if (!data?.tweets) throw new Error("twittertools API returned no thread");
       const head = data.partial
         ? `Note: this thread result is PARTIAL (${data.reason || "incomplete"}) — posts may be missing.\n\n`
@@ -181,6 +207,7 @@ async function callTool(name, args) {
         JSON.stringify(
           {
             id: parsed.id,
+            source: parsed.source,
             screenName: parsed.screenName,
             createdAt: Number.isNaN(created.getTime()) ? null : created.toISOString(),
             permalink: permalinkFor(parsed.id, parsed.screenName),
@@ -216,15 +243,20 @@ async function dispatch(msg) {
   const isRequest = "id" in msg;
   try {
     switch (method) {
-      case "initialize":
-        // echo the client's requested version: every current client accepts
-        // its own, and we make no use of newer protocol features
+      case "initialize": {
+        // Answer with a version we actually implement: echoing whatever the
+        // client asked for would claim support for versions we've never seen.
+        // A client that can't accept our answer disconnects, per spec.
+        const requested = params?.protocolVersion;
         sendResult(id, {
-          protocolVersion: params?.protocolVersion || "2024-11-05",
+          protocolVersion: SUPPORTED_VERSIONS.includes(requested)
+            ? requested
+            : SUPPORTED_VERSIONS[0],
           capabilities: { tools: {} },
           serverInfo: { name: NAME, version: VERSION },
         });
         return;
+      }
       case "notifications/initialized":
         return; // notification — no response
       case "tools/list":

package/xrules.js

@@ -217,19 +217,23 @@ const STATUS_RE =
   /(?:^|[^A-Za-z0-9-])(?:https?:\/\/)?(?:www\.|mobile\.)?(?:x|twitter)\.com\/([A-Za-z0-9_]{1,15})\/status(?:es)?\/(\d{5,25})/i;
 const BARE_ID_RE = /^\d{5,25}$/;
 
-/** Extract a status id (and screen name when present) from a URL, bare ID, or free text. */
+/** Extract a status id (and screen name when present) from a URL, bare ID, or free
+ * text. `source` records which form matched — the one field the standalone port
+ * adds beyond the TypeScript original. */
 export function parseTweetInput(input) {
   const text = (input ?? '').trim();
   if (!text) return null;
 
   const m = text.match(STATUS_RE);
-  if (m) return { id: m[2], screenName: m[1].toLowerCase() === 'i' ? null : m[1] };
+  if (m) return { id: m[2], screenName: m[1].toLowerCase() === 'i' ? null : m[1], source: 'url' };
 
-  if (BARE_ID_RE.test(text)) return { id: text, screenName: null };
+  if (BARE_ID_RE.test(text)) return { id: text, screenName: null, source: 'bare_id' };
 
-  // A bare ID hidden inside longer text
-  const idMatch = text.match(/(\d{15,25})/);
-  if (idMatch) return { id: idMatch[1], screenName: null };
+  // A bare ID hidden inside longer text. Both edges are digit-guarded so a
+  // longer digit run (order number, hash) yields nothing instead of a
+  // silently clipped pseudo-ID.
+  const idMatch = text.match(/(?<!\d)(\d{15,25})(?!\d)/);
+  if (idMatch) return { id: idMatch[1], screenName: null, source: 'text' };
 
   return null;
 }