@alfe.ai/myob-mcp 0.3.15 → 0.3.16

package/dist/server.js

@@ -1,9 +1,10 @@
 #!/usr/bin/env node
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
 import { resolveConfig } from "@alfe.ai/config";
 import { AgentApiClient } from "@alfe.ai/agent-api-client";
-import { z } from "zod";
+import { assertPatternA } from "@alfe.ai/mcp-bundler";
 //#region src/myob-client.ts
 /**
 * MYOB Business API client — wraps fetch with required headers,
@@ -610,6 +611,28 @@ function log(msg) {
 	process.stderr.write(`[myob-mcp-server] ${msg}\n`);
 }
 /**
+* Convert a McpServer.registerTool Zod raw shape into the JSON-Schema-ish
+* {@link ValidatableTool} the Pattern A validator inspects. Direct-MCP
+* servers register Zod shapes (not JSON Schema), so the guard maps each
+* property's presence / optionality / string-ness across.
+*/
+function zodShapeToValidatable(name, shape) {
+	const properties = {};
+	const required = [];
+	for (const [key, schema] of Object.entries(shape ?? {})) {
+		properties[key] = { type: schema instanceof z.ZodString ? "string" : "non-string" };
+		if (!schema.safeParse(void 0).success) required.push(key);
+	}
+	return {
+		name,
+		parameters: {
+			type: "object",
+			properties,
+			required
+		}
+	};
+}
+/**
 * Resolve a `myobBusinessId` selector to its `MyobClient`. Throws if
 * unknown — the LLM should call `myob_list_businesses` to discover
 * the valid set. This is the per-call dispatch contract for Pattern A.
@@ -696,6 +719,13 @@ async function main() {
 		name: "myob-mcp-server",
 		version: "2.0.0"
 	});
+	const validatableTools = [];
+	const originalRegisterTool = server.registerTool.bind(server);
+	server.registerTool = (...args) => {
+		const [name, config] = args;
+		validatableTools.push(zodShapeToValidatable(name, config?.inputSchema));
+		return originalRegisterTool(...args);
+	};
 	registerContactTools(server, resolveMyobClient);
 	registerSalesTools(server, resolveMyobClient);
 	registerPurchaseTools(server, resolveMyobClient);
@@ -731,6 +761,10 @@ async function main() {
 			};
 		}
 	});
+	assertPatternA(validatableTools, {
+		selector: "myobBusinessId",
+		exempt: ["myob_list_businesses", "myob_refresh_token"]
+	});
 	scheduleRefresh(apiClient);
 	const transport = new StdioServerTransport();
 	await server.connect(transport);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alfe.ai/myob-mcp",
-  "version": "0.3.15",
+  "version": "0.3.16",
   "description": "MYOB Business MCP server — direct API integration with Alfe OAuth credentials and automatic token refresh",
   "type": "module",
   "main": "./dist/server.js",
@@ -19,8 +19,9 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "zod": "^4.0.5",
-    "@alfe.ai/config": "0.3.0",
-    "@alfe.ai/agent-api-client": "0.13.0"
+    "@alfe.ai/agent-api-client": "0.14.0",
+    "@alfe.ai/config": "0.4.0",
+    "@alfe.ai/mcp-bundler": "0.4.0"
   },
   "license": "UNLICENSED",
   "homepage": "https://alfe.ai",