twittertools-mcp 1.2.0 → 1.2.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "twittertools-mcp",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "mcpName": "io.github.steley/twittertools-mcp",
   "description": "MCP server for twittertools.com — fetch X (Twitter) posts and threads, count and split posts with X's real rules. No login, no tracking.",
   "license": "MIT",

package/server.js

@@ -29,7 +29,12 @@ import {
 } from "./xrules.js";
 
 const NAME = "twittertools";
-const VERSION = "1.2.0"; // keep in sync with package.json
+const VERSION = "1.2.2"; // keep in sync with package.json
+// Protocol versions this server can honestly claim: across these revisions the
+// four verbs used here (initialize, tools/list, tools/call, ping) kept their
+// shapes, and the additions (icons, tasks, elicitation, …) are all optional
+// features a tools-only stdio server never touches.
+const SUPPORTED_VERSIONS = ["2025-11-25", "2025-06-18", "2025-03-26", "2024-11-05"];
 const API_BASE = (process.env.TWITTERTOOLS_API_BASE || "https://twittertools.com").replace(/\/+$/, "");
 const VIA = "https://twittertools.com";
 const TEXT_INPUT_MAX = 100_000; // generous, but caps local work per call
@@ -51,15 +56,18 @@ const TOOLS = [
     description:
       "Fetch one public X (Twitter) post by URL or ID: text, author, engagement counts, " +
       "and media with direct CDN URLs (photos, or MP4 video variants sorted by quality). " +
-      "Deleted, protected, or age-restricted posts are not available without an X login.",
+      "Use for a specific post the user links or cites — not for searching X, timelines, " +
+      "bookmarks, or DMs. Deleted, protected, or age-restricted posts are not available " +
+      "without an X login.",
     inputSchema: urlOrIdSchema,
   },
   {
     name: "get_thread",
     description:
-      "Unroll a public X thread into its posts in order. Expensive upstream — call sparingly, " +
-      "and prefer pasting the thread's LAST post, which returns the whole chain. Results may " +
-      "be partial; the response says so when they are.",
+      "Unroll a public X thread into its posts in order. For a single post, use get_tweet " +
+      "instead. Expensive upstream — call sparingly, and prefer pasting the thread's LAST " +
+      "post, which returns the whole chain. Results may be partial; the response says so " +
+      "when they are.",
     inputSchema: urlOrIdSchema,
   },
   {
@@ -202,6 +210,7 @@ async function callTool(name, args) {
         JSON.stringify(
           {
             id: parsed.id,
+            source: parsed.source,
             screenName: parsed.screenName,
             createdAt: Number.isNaN(created.getTime()) ? null : created.toISOString(),
             permalink: permalinkFor(parsed.id, parsed.screenName),
@@ -237,15 +246,20 @@ async function dispatch(msg) {
   const isRequest = "id" in msg;
   try {
     switch (method) {
-      case "initialize":
-        // echo the client's requested version: every current client accepts
-        // its own, and we make no use of newer protocol features
+      case "initialize": {
+        // Answer with a version we actually implement: echoing whatever the
+        // client asked for would claim support for versions we've never seen.
+        // A client that can't accept our answer disconnects, per spec.
+        const requested = params?.protocolVersion;
         sendResult(id, {
-          protocolVersion: params?.protocolVersion || "2024-11-05",
+          protocolVersion: SUPPORTED_VERSIONS.includes(requested)
+            ? requested
+            : SUPPORTED_VERSIONS[0],
           capabilities: { tools: {} },
           serverInfo: { name: NAME, version: VERSION },
         });
         return;
+      }
       case "notifications/initialized":
         return; // notification — no response
       case "tools/list":

package/xrules.js

@@ -217,19 +217,23 @@ const STATUS_RE =
   /(?:^|[^A-Za-z0-9-])(?:https?:\/\/)?(?:www\.|mobile\.)?(?:x|twitter)\.com\/([A-Za-z0-9_]{1,15})\/status(?:es)?\/(\d{5,25})/i;
 const BARE_ID_RE = /^\d{5,25}$/;
 
-/** Extract a status id (and screen name when present) from a URL, bare ID, or free text. */
+/** Extract a status id (and screen name when present) from a URL, bare ID, or free
+ * text. `source` records which form matched — the one field the standalone port
+ * adds beyond the TypeScript original. */
 export function parseTweetInput(input) {
   const text = (input ?? '').trim();
   if (!text) return null;
 
   const m = text.match(STATUS_RE);
-  if (m) return { id: m[2], screenName: m[1].toLowerCase() === 'i' ? null : m[1] };
+  if (m) return { id: m[2], screenName: m[1].toLowerCase() === 'i' ? null : m[1], source: 'url' };
 
-  if (BARE_ID_RE.test(text)) return { id: text, screenName: null };
+  if (BARE_ID_RE.test(text)) return { id: text, screenName: null, source: 'bare_id' };
 
-  // A bare ID hidden inside longer text
-  const idMatch = text.match(/(\d{15,25})/);
-  if (idMatch) return { id: idMatch[1], screenName: null };
+  // A bare ID hidden inside longer text. Both edges are digit-guarded so a
+  // longer digit run (order number, hash) yields nothing instead of a
+  // silently clipped pseudo-ID.
+  const idMatch = text.match(/(?<!\d)(\d{15,25})(?!\d)/);
+  if (idMatch) return { id: idMatch[1], screenName: null, source: 'text' };
 
   return null;
 }