whistler-mcp 1.0.6 → 1.0.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "whistler-mcp",
-  "version": "1.0.6",
+  "version": "1.0.8",
   "description": "An MCP Server for retrieving placement data, job roles, and platform statistics from the Whistler API.",
   "main": "server.js",
   "bin": {

package/server.js

@@ -109,7 +109,7 @@ const toolsDefinition = {
 
   // Read PDF
   view_job_pdf: {
-    description: "Read the specific textual content of a company's job role PDF. This will consume 1 from the user's daily PDF view limit. Ensure you pass the exact `pdfUrl` obtained from `get_company_roles`.",
+    description: "Extract and read the textual content of a company's job role PDF. (Consumes 1 daily view).",
     schema: z.object({ pdfUrl: z.string() }),
     inputSchema: { type: "object", properties: { pdfUrl: { type: "string" } }, required: ["pdfUrl"] }
   }
@@ -169,7 +169,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         if (!loginData.token) throw new Error('Login succeeded but no token was returned.');
         
         saveToken(loginData.token, loginData);
-        result = { success: true, message: `Successfully authenticated! Token saved securely.` };
+        result = { success: true, message: `Authenticated!` };
         break;
       }
       case 'signup_to_whistler': {
@@ -191,12 +191,12 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         if (!signupData.token) throw new Error('Signup succeeded but no token was returned.');
 
         saveToken(signupData.token, signupData);
-        result = { success: true, message: `Account created and authenticated successfully! Welcome to Whistler.` };
+        result = { success: true, message: `Account created!` };
         break;
       }
       case 'logout_whistler':
         clearToken();
-        result = { success: true, message: 'Logged out successfully. Token cleared.' };
+        result = { success: true, message: 'Logged out.' };
         break;
       case 'get_companies':
         result = await invokeApi(`/pdfs/companies${params.year ? '?year='+params.year : ''}`);
@@ -217,6 +217,21 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         result = await invokeApi('/buy-bid', 'POST', params);
         break;
       case 'view_job_pdf': {
+        // Guard: pdfUrl must exist and look like a valid API path
+        if (!params.pdfUrl || params.pdfUrl === 'undefined' || params.pdfUrl === 'null') {
+          result = {
+            success: false,
+            message: "This job does not have a PDF available. The 'pdfUrl' field was not returned by get_company_roles, which means no JD PDF exists for this role."
+          };
+          break;
+        }
+        if (!params.pdfUrl.startsWith('/api/pdfs/')) {
+          result = {
+            success: false,
+            message: `Invalid pdfUrl format: "${params.pdfUrl}". You must pass the exact 'pdfUrl' value returned by get_company_roles (e.g. /api/pdfs/secure/<id>).`
+          };
+          break;
+        }
         // pdfUrl from the backend is a relative path like /api/pdfs/secure/:id
         // invokeApiBinary prepends API_BASE_URL which already ends in /api,
         // so we must strip the leading /api prefix to avoid doubling it.
@@ -228,7 +243,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
           success: true, 
           text: pdfData.text,
           pages: pdfData.numpages,
-          message: "PDF successfully read and your daily limit has been updated."
+          message: "PDF read successfully."
         };
         break;
       }