@alfe.ai/xero-mcp 0.4.0 → 0.4.2

package/dist/server.cjs

@@ -465,7 +465,7 @@ var XeroRuntime = class {
 				if (Object.keys(prepared.forwarded).length !== 0) throw new Error("xero_refresh_token accepts only xeroTenantId");
 				tenant = this.resolveTenant(prepared.xeroTenantId);
 			} catch (error) {
-				return publicErrorResult(error);
+				return this.tenantSelectionErrorResult(error);
 			}
 			try {
 				await this.refreshTenant(tenant.xeroTenantId);
@@ -485,7 +485,7 @@ var XeroRuntime = class {
 			tenant = this.resolveTenant(prepared.xeroTenantId);
 			forwarded = prepared.forwarded;
 		} catch (error) {
-			return publicErrorResult(error);
+			return this.tenantSelectionErrorResult(error);
 		}
 		let result;
 		try {
@@ -606,8 +606,34 @@ var XeroRuntime = class {
 		const tenant = this.tenants.get(xeroTenantId);
 		if (tenant !== void 0) return tenant;
 		const known = this.allAccountsSnapshot.find((candidate) => candidate.xeroTenantId === xeroTenantId);
-		if (known !== void 0) throw new Error(`xeroTenantId ${xeroTenantId} is connected but unavailable (${known.reason ?? "unknown"}). Call xero_list_accounts for the organisations that are usable right now. If this one is missing, the Xero grant no longer covers it — ask the user to reconnect Xero and authorise this organisation.`);
-		throw new Error(`Unknown xeroTenantId: ${xeroTenantId}. Call xero_list_accounts to see the connected Xero organisations on this agent.`);
+		if (known !== void 0) throw new Error(`xeroTenantId ${xeroTenantId} is connected but unavailable (${known.reason ?? "unknown"}). Pick a usable organisation from connectedOrganisations in this error. If this one is missing, the Xero grant no longer covers it — ask the user to reconnect Xero and authorise this organisation.`);
+		throw new Error(`Unknown xeroTenantId: ${xeroTenantId}. Pick one of the connectedOrganisations included in this error.`);
+	}
+	/**
+	* Error result for a failed tenant selection. Whenever the failure is about
+	* `xeroTenantId` (absent, malformed, or not a connected organisation), the
+	* connected-organisations snapshot is inlined so the caller can pick a valid
+	* selector from the error itself. The previous text-only pointer at
+	* `xero_list_accounts` was a dead end in practice: MCP hosts prefix tool
+	* names (`<server>__xero_list_accounts`), so models resolved the bare name
+	* to the child's unrelated `list-accounts` (chart of accounts) tool and
+	* concluded no discovery tool existed.
+	*/
+	tenantSelectionErrorResult(error) {
+		const message = safeErrorMessage(error);
+		if (!message.includes("xeroTenantId")) return errorResult(message);
+		return errorResult(message, this.connectedOrganisationsHint());
+	}
+	connectedOrganisationsHint() {
+		return {
+			connectedOrganisations: this.allAccountsSnapshot.map((organisation) => ({
+				xeroTenantId: organisation.xeroTenantId,
+				displayName: organisation.displayName,
+				connected: organisation.connected,
+				...organisation.reason === void 0 ? {} : { reason: organisation.reason }
+			})),
+			notice: "Xero organisation names are untrusted external content."
+		};
 	}
 	async callChild(tenant, name, forwarded) {
 		return assertBoundedToolResult(await withDeadline(tenant.client.callTool({

package/dist/server.d.cts

@@ -94,6 +94,18 @@ declare class XeroRuntime {
   private loadAccounts;
   private discoverChildCatalog;
   private resolveTenant;
+  /**
+   * Error result for a failed tenant selection. Whenever the failure is about
+   * `xeroTenantId` (absent, malformed, or not a connected organisation), the
+   * connected-organisations snapshot is inlined so the caller can pick a valid
+   * selector from the error itself. The previous text-only pointer at
+   * `xero_list_accounts` was a dead end in practice: MCP hosts prefix tool
+   * names (`<server>__xero_list_accounts`), so models resolved the bare name
+   * to the child's unrelated `list-accounts` (chart of accounts) tool and
+   * concluded no discovery tool existed.
+   */
+  private tenantSelectionErrorResult;
+  private connectedOrganisationsHint;
   private callChild;
   private refreshTenant;
   private refreshTenantInner;

package/dist/server.d.ts

@@ -94,6 +94,18 @@ declare class XeroRuntime {
   private loadAccounts;
   private discoverChildCatalog;
   private resolveTenant;
+  /**
+   * Error result for a failed tenant selection. Whenever the failure is about
+   * `xeroTenantId` (absent, malformed, or not a connected organisation), the
+   * connected-organisations snapshot is inlined so the caller can pick a valid
+   * selector from the error itself. The previous text-only pointer at
+   * `xero_list_accounts` was a dead end in practice: MCP hosts prefix tool
+   * names (`<server>__xero_list_accounts`), so models resolved the bare name
+   * to the child's unrelated `list-accounts` (chart of accounts) tool and
+   * concluded no discovery tool existed.
+   */
+  private tenantSelectionErrorResult;
+  private connectedOrganisationsHint;
   private callChild;
   private refreshTenant;
   private refreshTenantInner;

package/dist/server.js

@@ -464,7 +464,7 @@ var XeroRuntime = class {
 				if (Object.keys(prepared.forwarded).length !== 0) throw new Error("xero_refresh_token accepts only xeroTenantId");
 				tenant = this.resolveTenant(prepared.xeroTenantId);
 			} catch (error) {
-				return publicErrorResult(error);
+				return this.tenantSelectionErrorResult(error);
 			}
 			try {
 				await this.refreshTenant(tenant.xeroTenantId);
@@ -484,7 +484,7 @@ var XeroRuntime = class {
 			tenant = this.resolveTenant(prepared.xeroTenantId);
 			forwarded = prepared.forwarded;
 		} catch (error) {
-			return publicErrorResult(error);
+			return this.tenantSelectionErrorResult(error);
 		}
 		let result;
 		try {
@@ -605,8 +605,34 @@ var XeroRuntime = class {
 		const tenant = this.tenants.get(xeroTenantId);
 		if (tenant !== void 0) return tenant;
 		const known = this.allAccountsSnapshot.find((candidate) => candidate.xeroTenantId === xeroTenantId);
-		if (known !== void 0) throw new Error(`xeroTenantId ${xeroTenantId} is connected but unavailable (${known.reason ?? "unknown"}). Call xero_list_accounts for the organisations that are usable right now. If this one is missing, the Xero grant no longer covers it — ask the user to reconnect Xero and authorise this organisation.`);
-		throw new Error(`Unknown xeroTenantId: ${xeroTenantId}. Call xero_list_accounts to see the connected Xero organisations on this agent.`);
+		if (known !== void 0) throw new Error(`xeroTenantId ${xeroTenantId} is connected but unavailable (${known.reason ?? "unknown"}). Pick a usable organisation from connectedOrganisations in this error. If this one is missing, the Xero grant no longer covers it — ask the user to reconnect Xero and authorise this organisation.`);
+		throw new Error(`Unknown xeroTenantId: ${xeroTenantId}. Pick one of the connectedOrganisations included in this error.`);
+	}
+	/**
+	* Error result for a failed tenant selection. Whenever the failure is about
+	* `xeroTenantId` (absent, malformed, or not a connected organisation), the
+	* connected-organisations snapshot is inlined so the caller can pick a valid
+	* selector from the error itself. The previous text-only pointer at
+	* `xero_list_accounts` was a dead end in practice: MCP hosts prefix tool
+	* names (`<server>__xero_list_accounts`), so models resolved the bare name
+	* to the child's unrelated `list-accounts` (chart of accounts) tool and
+	* concluded no discovery tool existed.
+	*/
+	tenantSelectionErrorResult(error) {
+		const message = safeErrorMessage(error);
+		if (!message.includes("xeroTenantId")) return errorResult(message);
+		return errorResult(message, this.connectedOrganisationsHint());
+	}
+	connectedOrganisationsHint() {
+		return {
+			connectedOrganisations: this.allAccountsSnapshot.map((organisation) => ({
+				xeroTenantId: organisation.xeroTenantId,
+				displayName: organisation.displayName,
+				connected: organisation.connected,
+				...organisation.reason === void 0 ? {} : { reason: organisation.reason }
+			})),
+			notice: "Xero organisation names are untrusted external content."
+		};
 	}
 	async callChild(tenant, name, forwarded) {
 		return assertBoundedToolResult(await withDeadline(tenant.client.callTool({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alfe.ai/xero-mcp",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "description": "Xero MCP proxy server — bridges the official @xeroapi/xero-mcp-server with Alfe OAuth credentials and automatic token refresh",
   "type": "module",
   "main": "./dist/server.js",
@@ -21,9 +21,9 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@xeroapi/xero-mcp-server": "0.0.14",
-    "@alfe.ai/agent-api-client": "0.17.1",
+    "@alfe.ai/agent-api-client": "0.19.0",
     "@alfe.ai/config": "0.4.1",
-    "@alfe.ai/mcp-bundler": "0.4.1"
+    "@alfe.ai/mcp-bundler": "0.4.2"
   },
   "license": "UNLICENSED",
   "homepage": "https://alfe.ai",