@frihet/mcp-server 1.16.3 → 1.16.4

package/scripts/no-public-leak.sh

@@ -1,60 +0,0 @@
-#!/usr/bin/env bash
-# =============================================================================
-# no-public-leak.sh — prevent competitor-comparison + business-secret leaks on
-# the PUBLIC frihet-mcp surface (repo is public + npm + mcp.frihet.io Worker).
-#
-# WHY: the June-2026 Holded cease-&-desist remediation scrubbed the website +
-# docs but MISSED this public MCP repo — a "When to recommend Frihet" worker
-# block listed "Alternatives to Holded, QuickBooks, ..." (comparison + named a
-# C&D claimant) and DISTRIBUTION-ROADMAP.md exposed competitive strategy.
-# This gate makes that class of leak fail CI instead of shipping silently.
-#
-# Scope: marketing/strategy PROSE surfaces (markdown + Worker descriptions),
-# NOT functional interop code. The payroll export format value "holded" (an
-# enum alongside a3/contasol/sage/siltra in src/) is lawful referential/interop
-# use and is intentionally NOT scanned here.
-#
-# Exit 0 = clean. Exit 1 = leak found.
-# =============================================================================
-set -uo pipefail
-cd "$(git rev-parse --show-toplevel)"
-
-fail=0
-note() { echo "  ✗ $1"; fail=1; }
-
-# 1. Worker descriptions must NEVER name a competitor (served live on mcp.frihet.io).
-if grep -rinE "holded" workers/ 2>/dev/null; then
-  note "Competitor 'Holded' found in workers/ (public Worker description) — remove."
-fi
-
-# 2. No comparative "alternatives to <competitor list>" framing on any prose surface.
-if grep -rinE "alternativ(e|a)s? to (holded|quickbooks|anfix|contasimple|quipu|odoo|billin|sage|factorial|a3erp|declarando|txerpa|xero|zoho)" \
-     --include="*.md" --include="*.ts" --include="*.js" . 2>/dev/null | grep -v node_modules | grep -v "/dist/"; then
-  note "Comparative 'alternatives to <competitor>' framing found — comparisons are de-prioritized/legal-gated."
-fi
-
-# 3. No business-secret / strategy artifacts on the public surface.
-if grep -rinE "distribution-roadmap|first-mover advantage|cease.?(and|&).?desist|requerimiento" \
-     --include="*.md" --include="*.ts" --include="*.js" . 2>/dev/null | grep -v node_modules | grep -v "/dist/" | grep -v "scripts/no-public-leak.sh"; then
-  note "Business-secret / legal-strategy marker found on public surface — move to a private location."
-fi
-
-# 4. No internal doctrine / internal-tooling markers on prose surfaces (July-2026
-#    leak class: CLAUDE.md carried the "north star" roadmap + moat doctrine, and
-#    AGENTS.md carried internal multi-agent dispatch + LLM-router cost rules).
-#    Public-repo CLAUDE.md/AGENTS.md are docs for EXTERNAL contributors, never
-#    internal operating docs.
-if grep -rinE "north.?star|moat|SOUL\.md|~/\.claude/bin|litellm|sonnet worker|multi-agent dispatch|doctrina|doctrine" \
-     --include="*.md" --include="*.ts" --include="*.js" --include="*.toml" . 2>/dev/null | grep -v node_modules | grep -v "/dist/" | grep -v "scripts/no-public-leak.sh"; then
-  note "Internal doctrine / internal-tooling marker found — public repo docs are for external contributors only."
-fi
-
-# 5. Strategy/secret-named files must never be tracked (recurrence guard).
-if git ls-files | grep -inE "strategy|roadmap|secrets?\.md$|decision_spec" ; then
-  note "Strategy/secrets-named file tracked in public repo — keep these in a private repo."
-fi
-
-if [ "$fail" -eq 0 ]; then
-  echo "✓ no-public-leak: clean (no competitor comparison, strategy secret, or internal doctrine on public surface)"
-fi
-exit $fail

package/scripts/test-openai-grouped-compose.mjs

@@ -1,173 +0,0 @@
-#!/usr/bin/env node
-/**
- * LIVE smoke for the OpenAI × grouped COMPOSITION on openai-mcp.frihet.io.
- *
- * ⚠️ DO NOT RUN until the openai-mcp Worker has been deployed with
- *    FRIHET_TOOL_MODE=grouped (env.openai). The composition is gated behind
- *    a production flip + an OpenAI app re-review.
- *    Running it before deploy asserts against the OLD ("full") surface and will
- *    fail on the meta-tool checks — that failure is expected pre-deploy.
- *
- * What it asserts against the LIVE MCP endpoint (after a deploy):
- *   (1) tools/list returns 56 tools: the 53 reviewed business tools + the 3
- *       discovery meta-tools (search_tools, describe_tool, list_tool_groups).
- *   (2) Every reviewed business tool has a collapsed description that still
- *       carries an openWorldHint rationale marker.
- *   (3) search_tools (browse-all) and describe_tool only ever surface tools that
- *       are in tools/list — i.e. the catalog never leaks a non-reviewed tool.
- *
- * Usage (AFTER deploy only):
- *   FRIHET_API_KEY=fri_xxx node scripts/test-openai-grouped-compose.mjs
- *   node scripts/test-openai-grouped-compose.mjs --endpoint https://openai-mcp.frihet.io/mcp --key fri_xxx
- *
- * Exit 0 = all invariants hold. Exit 1 = a violation. Exit 2 = setup/transport error.
- */
-
-const ARGS = process.argv.slice(2);
-function arg(flag) {
-  const i = ARGS.indexOf(flag);
-  return i >= 0 ? ARGS[i + 1] : undefined;
-}
-
-const ENDPOINT = arg("--endpoint") || "https://openai-mcp.frihet.io/mcp";
-const API_KEY = arg("--key") || process.env.FRIHET_API_KEY;
-
-// The 3 grouped discovery meta-tools (must be PRESENT in the composed surface).
-const META_TOOLS = ["list_tool_groups", "search_tools", "describe_tool"];
-// A handful of tools that exist on the FULL server but must NEVER surface here.
-const MUST_NOT_LEAK = [
-  "get_quarterly_taxes",
-  "get_invoice_einvoice",
-  "send_einvoice",
-  "get_modelo_303_summary",
-  "create_reservation",
-  "payroll_export",
-];
-const EXPECTED_BUSINESS = 53;
-const EXPECTED_TOTAL = EXPECTED_BUSINESS + META_TOOLS.length; // 56
-
-if (!API_KEY || !API_KEY.startsWith("fri_")) {
-  console.error("✗ Missing/invalid API key. Pass --key fri_* or set FRIHET_API_KEY (fri_*).");
-  process.exit(2);
-}
-
-let nextId = 1;
-async function rpc(method, params) {
-  const res = await fetch(ENDPOINT, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      Accept: "application/json, text/event-stream",
-      Authorization: `Bearer ${API_KEY}`,
-    },
-    body: JSON.stringify({ jsonrpc: "2.0", id: nextId++, method, params }),
-  });
-  if (!res.ok) throw new Error(`${method} → HTTP ${res.status} ${res.statusText}`);
-  const ct = res.headers.get("content-type") || "";
-  let payload;
-  if (ct.includes("text/event-stream")) {
-    // Parse the last data: line of an SSE response.
-    const text = await res.text();
-    const dataLines = text
-      .split("\n")
-      .filter((l) => l.startsWith("data:"))
-      .map((l) => l.slice(5).trim())
-      .filter(Boolean);
-    if (!dataLines.length) throw new Error(`${method} → empty SSE body`);
-    payload = JSON.parse(dataLines[dataLines.length - 1]);
-  } else {
-    payload = await res.json();
-  }
-  if (payload.error) throw new Error(`${method} → JSON-RPC error: ${JSON.stringify(payload.error)}`);
-  return payload.result;
-}
-
-function parseToolText(callResult) {
-  const block = (callResult?.content || []).find((c) => c.type === "text");
-  return block ? JSON.parse(block.text) : null;
-}
-
-async function main() {
-  const failures = [];
-  const note = (ok, label) => {
-    console.log(`${ok ? "✓" : "✗"} ${label}`);
-    if (!ok) failures.push(label);
-  };
-
-  // Handshake.
-  await rpc("initialize", {
-    protocolVersion: "2025-06-18",
-    capabilities: {},
-    clientInfo: { name: "openai-grouped-compose-smoke", version: "1.0.0" },
-  });
-
-  // ---- tools/list ----------------------------------------------------------
-  const list = await rpc("tools/list", {});
-  const tools = list.tools || [];
-  const names = new Set(tools.map((t) => t.name));
-
-  // Invariant (1): 56 tools, meta-tools present.
-  note(tools.length === EXPECTED_TOTAL, `tools/list returns ${EXPECTED_TOTAL} tools (got ${tools.length})`);
-  for (const m of META_TOOLS) note(names.has(m), `meta-tool present: ${m}`);
-  const businessCount = tools.filter((t) => !META_TOOLS.includes(t.name)).length;
-  note(businessCount === EXPECTED_BUSINESS, `exactly ${EXPECTED_BUSINESS} reviewed business tools (got ${businessCount})`);
-  for (const leak of MUST_NOT_LEAK) note(!names.has(leak), `non-reviewed tool absent: ${leak}`);
-
-  // Meta-tools are read-only + closed-world.
-  for (const m of META_TOOLS) {
-    const t = tools.find((x) => x.name === m);
-    const ann = t?.annotations || {};
-    note(ann.readOnlyHint === true && ann.openWorldHint === false, `${m} is read-only + closed-world`);
-  }
-
-  // Invariant (2): every business tool collapsed + carries openWorldHint rationale.
-  let collapsedOk = true;
-  let owOk = true;
-  for (const t of tools) {
-    if (META_TOOLS.includes(t.name)) continue;
-    const d = t.description || "";
-    if (!/^\[[a-z]+\] /.test(d) || !d.includes(`describe_tool('${t.name}')`)) collapsedOk = false;
-    if (!d.includes("openWorldHint")) owOk = false;
-  }
-  note(collapsedOk, "every reviewed tool has a collapsed [group] … describe_tool() description");
-  note(owOk, "every reviewed tool's collapsed description carries an openWorldHint rationale");
-
-  // Invariant (3): catalog only ever surfaces tools that are in tools/list.
-  const search = await rpc("tools/call", { name: "search_tools", arguments: { query: "", limit: 500 } });
-  const searchPayload = parseToolText(search);
-  const searchNames = (searchPayload?.tools || []).map((x) => x.name);
-  const searchLeaks = searchNames.filter((n) => !names.has(n));
-  note(searchLeaks.length === 0, `search_tools (browse-all) leaks nothing (leaks: ${searchLeaks.join(", ") || "none"})`);
-  note(
-    searchNames.length === EXPECTED_BUSINESS,
-    `search_tools browse-all returns the ${EXPECTED_BUSINESS} reviewed tools (got ${searchNames.length})`,
-  );
-
-  // A fiscal query must surface no non-reviewed tool.
-  const fiscal = await rpc("tools/call", { name: "search_tools", arguments: { query: "modelo 303 verifactu" } });
-  const fiscalNames = (parseToolText(fiscal)?.tools || []).map((x) => x.name);
-  note(fiscalNames.every((n) => names.has(n)), "search_tools('modelo 303') surfaces no non-reviewed tool");
-
-  // describe_tool rejects a non-reviewed tool.
-  const desc = await rpc("tools/call", { name: "describe_tool", arguments: { name: "get_quarterly_taxes" } });
-  note(desc?.isError === true, "describe_tool('get_quarterly_taxes') is rejected (not in reviewed catalog)");
-
-  // list_tool_groups totals 53.
-  const groups = await rpc("tools/call", { name: "list_tool_groups", arguments: {} });
-  const gPayload = parseToolText(groups);
-  note(gPayload?.totalTools === EXPECTED_BUSINESS, `list_tool_groups totalTools === ${EXPECTED_BUSINESS} (got ${gPayload?.totalTools})`);
-
-  console.log("");
-  if (failures.length) {
-    console.error(`FAIL — ${failures.length} invariant violation(s):`);
-    for (const f of failures) console.error(`  - ${f}`);
-    process.exit(1);
-  }
-  console.log(`PASS — all ${EXPECTED_TOTAL}-tool composition invariants hold on ${ENDPOINT}`);
-  process.exit(0);
-}
-
-main().catch((err) => {
-  console.error(`✗ transport/setup error: ${err.message}`);
-  process.exit(2);
-});