whistler-mcp 1.0.6 → 1.0.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "whistler-mcp",
-  "version": "1.0.6",
+  "version": "1.0.7",
   "description": "An MCP Server for retrieving placement data, job roles, and platform statistics from the Whistler API.",
   "main": "server.js",
   "bin": {

package/server.js

@@ -217,6 +217,21 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         result = await invokeApi('/buy-bid', 'POST', params);
         break;
       case 'view_job_pdf': {
+        // Guard: pdfUrl must exist and look like a valid API path
+        if (!params.pdfUrl || params.pdfUrl === 'undefined' || params.pdfUrl === 'null') {
+          result = {
+            success: false,
+            message: "This job does not have a PDF available. The 'pdfUrl' field was not returned by get_company_roles, which means no JD PDF exists for this role."
+          };
+          break;
+        }
+        if (!params.pdfUrl.startsWith('/api/pdfs/')) {
+          result = {
+            success: false,
+            message: `Invalid pdfUrl format: "${params.pdfUrl}". You must pass the exact 'pdfUrl' value returned by get_company_roles (e.g. /api/pdfs/secure/<id>).`
+          };
+          break;
+        }
         // pdfUrl from the backend is a relative path like /api/pdfs/secure/:id
         // invokeApiBinary prepends API_BASE_URL which already ends in /api,
         // so we must strip the leading /api prefix to avoid doubling it.