whistler-mcp 1.0.8 → 1.0.9

package/adapters/apiClient.js

@@ -11,7 +11,7 @@ export function getSavedToken() {
     try {
       const data = JSON.parse(fs.readFileSync(TOKEN_PATH, 'utf8'));
       return data.token;
-    } catch(e) {}
+    } catch (e) { }
   }
   return process.env.WHISTLER_API_TOKEN || null;
 }
@@ -29,7 +29,7 @@ export function clearToken() {
  */
 export async function invokeApi(endpoint, method = 'GET', body = null) {
   const headers = { 'Content-Type': 'application/json' };
-  
+
   const token = getSavedToken();
   if (!token) {
     throw new Error('Not authenticated. Please ask the user for their email and password, and run the login_to_whistler tool to log them in automatically.');
@@ -49,7 +49,7 @@ export async function invokeApi(endpoint, method = 'GET', body = null) {
   } catch (error) {
     throw new Error(`Failed to connect to API at ${API_BASE_URL}. Is the server running? ${error.message}`);
   }
-  
+
   let data;
   try {
     data = await response.json();
@@ -65,7 +65,7 @@ export async function invokeApi(endpoint, method = 'GET', body = null) {
     }
     throw new Error(`API Error ${response.status}: ${data.message || JSON.stringify(data)}`);
   }
-  
+
   return data;
 }
 
@@ -74,7 +74,7 @@ export async function invokeApi(endpoint, method = 'GET', body = null) {
  */
 export async function invokeApiBinary(endpoint, method = 'GET', body = null) {
   const headers = {};
-  
+
   const token = getSavedToken();
   if (!token) {
     throw new Error('Not authenticated. Please ask the user for their email and password, and run the login_to_whistler tool to log them in automatically.');
@@ -103,6 +103,6 @@ export async function invokeApiBinary(endpoint, method = 'GET', body = null) {
     const text = await response.text();
     throw new Error(`API Error ${response.status}: ${text}`);
   }
-  
+
   return await response.arrayBuffer();
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "whistler-mcp",
-  "version": "1.0.8",
+  "version": "1.0.9",
   "description": "An MCP Server for retrieving placement data, job roles, and platform statistics from the Whistler API.",
   "main": "server.js",
   "bin": {

package/server.js

@@ -44,9 +44,9 @@ const toolsDefinition = {
       graduationYear: z.number().int(),
       currentCPI: z.number().min(0).max(10)
     }),
-    inputSchema: { 
-      type: "object", 
-      properties: { 
+    inputSchema: {
+      type: "object",
+      properties: {
         name: { type: "string" },
         email: { type: "string" },
         password: { type: "string" },
@@ -54,8 +54,8 @@ const toolsDefinition = {
         program: { type: "string" },
         graduationYear: { type: "number" },
         currentCPI: { type: "number" }
-      }, 
-      required: ["name", "email", "password", "branch", "program", "graduationYear", "currentCPI"] 
+      },
+      required: ["name", "email", "password", "branch", "program", "graduationYear", "currentCPI"]
     }
   },
   logout_whistler: {
@@ -75,7 +75,7 @@ const toolsDefinition = {
     schema: z.object({ companyName: z.string(), year: z.number().optional() }),
     inputSchema: { type: "object", properties: { companyName: { type: "string" }, year: { type: "number" } }, required: ["companyName"] }
   },
-  
+
   // Platform Stats
   get_public_stats: {
     description: "Retrieve public platform statistics.",
@@ -129,7 +129,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => {
 // Execute logic (Mapping Tools to the API Adapter)
 server.setRequestHandler(CallToolRequestSchema, async (request) => {
   const { name, arguments: args } = request.params;
-  
+
   if (!toolsDefinition[name]) {
     throw new Error(`Unknown tool: ${name}`);
   }
@@ -155,19 +155,19 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
           headers: { 'Content-Type': 'application/json' },
           body: JSON.stringify({ email: params.email, password: params.password })
         });
-        
+
         // Handle non-JSON or weird responses gracefully
         let loginData = {};
         try {
           loginData = await loginRes.json();
-        } catch(e) {
+        } catch (e) {
           const text = await loginRes.text();
           throw new Error(`Login failed with weird response: ${text.substring(0, 100)}`);
         }
 
         if (!loginRes.ok) throw new Error(loginData.message || 'Login failed');
         if (!loginData.token) throw new Error('Login succeeded but no token was returned.');
-        
+
         saveToken(loginData.token, loginData);
         result = { success: true, message: `Authenticated!` };
         break;
@@ -182,7 +182,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         let signupData = {};
         try {
           signupData = await signupRes.json();
-        } catch(e) {
+        } catch (e) {
           const text = await signupRes.text();
           throw new Error(`Signup failed with weird response: ${text.substring(0, 100)}`);
         }
@@ -199,10 +199,10 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         result = { success: true, message: 'Logged out.' };
         break;
       case 'get_companies':
-        result = await invokeApi(`/pdfs/companies${params.year ? '?year='+params.year : ''}`);
+        result = await invokeApi(`/pdfs/companies${params.year ? '?year=' + params.year : ''}`);
         break;
       case 'get_company_roles':
-        result = await invokeApi(`/pdfs/company/${params.companyName}${params.year ? '?year='+params.year : ''}`, 'GET');
+        result = await invokeApi(`/pdfs/company/${params.companyName}${params.year ? '?year=' + params.year : ''}`, 'GET');
         break;
       case 'get_public_stats':
         result = await invokeApi('/pdfs/stats');
@@ -228,19 +228,31 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         if (!params.pdfUrl.startsWith('/api/pdfs/')) {
           result = {
             success: false,
-            message: `Invalid pdfUrl format: "${params.pdfUrl}". You must pass the exact 'pdfUrl' value returned by get_company_roles (e.g. /api/pdfs/secure/<id>).`
+            message: `Invalid pdfUrl format: "${params.pdfUrl}". You must pass the exact 'pdfUrl' value returned by get_company_roles (e.g. /api/pdfs/view/<token>).`
           };
           break;
         }
-        // pdfUrl from the backend is a relative path like /api/pdfs/secure/:id
+        // pdfUrl from the backend is a relative path like /api/pdfs/view/:token
         // invokeApiBinary prepends API_BASE_URL which already ends in /api,
         // so we must strip the leading /api prefix to avoid doubling it.
         const normalizedPdfUrl = params.pdfUrl.replace(/^\/api/, '');
-        const arrayBuffer = await invokeApiBinary(normalizedPdfUrl);
+        let binaryEndpoint = normalizedPdfUrl;
+
+        // New flow: redeem token and download through viewer session document endpoint.
+        if (/^\/pdfs\/view\/.+/.test(normalizedPdfUrl)) {
+          const viewPayload = await invokeApi(normalizedPdfUrl, 'GET');
+          const sessionToken = viewPayload?.viewer?.sessionToken;
+          if (!sessionToken) {
+            throw new Error('Viewer session was not created for this pdfUrl.');
+          }
+          binaryEndpoint = `/pdfs/viewer/${sessionToken}/document`;
+        }
+
+        const arrayBuffer = await invokeApiBinary(binaryEndpoint);
         const buffer = Buffer.from(arrayBuffer);
         const pdfData = await pdfParse(buffer);
-        result = { 
-          success: true, 
+        result = {
+          success: true,
           text: pdfData.text,
           pages: pdfData.numpages,
           message: "PDF read successfully."