@frihet/mcp-server 1.16.6 → 2.0.0

package/dist/fetch-no-redirect.js

@@ -0,0 +1,16 @@
+const REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308]);
+/** Validate a manual-mode fetch response without owning any network authority. */
+export async function rejectRedirectResponse(response) {
+    if (REDIRECT_STATUSES.has(response.status)) {
+        try {
+            await response.body?.cancel();
+        }
+        catch {
+            /* Best effort; still reject. */
+        }
+        // Never include Location, URL, headers or body in the error.
+        throw new TypeError("Redirect responses are not allowed");
+    }
+    return response;
+}
+//# sourceMappingURL=fetch-no-redirect.js.map

package/dist/fiscal-aliases.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Fiscal `modelo` tool naming aliases — prefix-drift fix (issue #50).
+ *
+ * ── Problem ──────────────────────────────────────────────────────────────
+ * The `modelo` fiscal tools split 5/5 on naming prefix: the mainland AEAT
+ * models (`fiscal.ts`) use `get_modelo_*`, while the Canary IGIC + Impuesto
+ * Sociedades models (`igic.ts`, `impuesto_sociedades.ts`) use the house
+ * `frihet_*` convention. An agent that learns the `frihet_modelo_NNN_summary`
+ * pattern from IGIC/IS will guess `frihet_modelo_303_summary` for VAT and get
+ * tool-not-found — 303/130/347 are the most-used models.
+ *
+ * ── Fix ──────────────────────────────────────────────────────────────────
+ * Register thin NAME ALIASES that resolve to the exact same registered tool
+ * (same handler, same schema, same annotations — zero semantic divergence),
+ * WITHOUT calling `registerTool()` a second time. The MCP SDK's `McpServer`
+ * resolves `tools/call` by looking up `this._registeredTools[name]`
+ * (mcp.js: `setToolRequestHandlers` -> `CallToolRequestSchema` handler), so
+ * pointing an alias key at the SAME registered-tool object makes it callable
+ * with zero duplication and zero drift risk.
+ *
+ * This intentionally does NOT touch `src/tools/*.ts` (where the 158-tool
+ * audit / pin tests count literal `registerTool(` call sites) and is applied
+ * to the REAL `McpServer` instance only, AFTER `registerAllTools()` — the
+ * `tool-exposure.test.ts` / `openai-*.test.ts` suites exercise
+ * `registerAllTools()` against a bare `StubMcpServer` and never call
+ * `applyFiscalAliases`, so the 158-tool pins are untouched by design.
+ *
+ * KNOWN LIMITATION: this relies on the SDK's internal (unprefixed-by-type,
+ * but underscore-private) `_registeredTools` field. It is FAIL-OPEN — if a
+ * future SDK release renames/removes that field, `applyFiscalAliases` is a
+ * silent no-op (the canonical `get_modelo_*` names keep working; only the
+ * alias convenience is lost). Pinned by `fiscal-aliases.test.ts`.
+ */
+/** alias name -> canonical registered tool name. */
+export declare const FISCAL_MODELO_ALIASES: Readonly<Record<string, string>>;
+/**
+ * Apply the fiscal `modelo` aliases to a live `McpServer` instance. Call this
+ * AFTER `registerAllTools()` so every canonical tool already exists.
+ *
+ * Fail-open: if the SDK's internal registry is missing or reshaped, this is a
+ * silent no-op — it never throws, and never blocks server startup.
+ */
+export declare function applyFiscalAliases(server: unknown): void;
+//# sourceMappingURL=fiscal-aliases.d.ts.map

package/dist/fiscal-aliases.js

@@ -0,0 +1,62 @@
+/**
+ * Fiscal `modelo` tool naming aliases — prefix-drift fix (issue #50).
+ *
+ * ── Problem ──────────────────────────────────────────────────────────────
+ * The `modelo` fiscal tools split 5/5 on naming prefix: the mainland AEAT
+ * models (`fiscal.ts`) use `get_modelo_*`, while the Canary IGIC + Impuesto
+ * Sociedades models (`igic.ts`, `impuesto_sociedades.ts`) use the house
+ * `frihet_*` convention. An agent that learns the `frihet_modelo_NNN_summary`
+ * pattern from IGIC/IS will guess `frihet_modelo_303_summary` for VAT and get
+ * tool-not-found — 303/130/347 are the most-used models.
+ *
+ * ── Fix ──────────────────────────────────────────────────────────────────
+ * Register thin NAME ALIASES that resolve to the exact same registered tool
+ * (same handler, same schema, same annotations — zero semantic divergence),
+ * WITHOUT calling `registerTool()` a second time. The MCP SDK's `McpServer`
+ * resolves `tools/call` by looking up `this._registeredTools[name]`
+ * (mcp.js: `setToolRequestHandlers` -> `CallToolRequestSchema` handler), so
+ * pointing an alias key at the SAME registered-tool object makes it callable
+ * with zero duplication and zero drift risk.
+ *
+ * This intentionally does NOT touch `src/tools/*.ts` (where the 158-tool
+ * audit / pin tests count literal `registerTool(` call sites) and is applied
+ * to the REAL `McpServer` instance only, AFTER `registerAllTools()` — the
+ * `tool-exposure.test.ts` / `openai-*.test.ts` suites exercise
+ * `registerAllTools()` against a bare `StubMcpServer` and never call
+ * `applyFiscalAliases`, so the 158-tool pins are untouched by design.
+ *
+ * KNOWN LIMITATION: this relies on the SDK's internal (unprefixed-by-type,
+ * but underscore-private) `_registeredTools` field. It is FAIL-OPEN — if a
+ * future SDK release renames/removes that field, `applyFiscalAliases` is a
+ * silent no-op (the canonical `get_modelo_*` names keep working; only the
+ * alias convenience is lost). Pinned by `fiscal-aliases.test.ts`.
+ */
+/** alias name -> canonical registered tool name. */
+export const FISCAL_MODELO_ALIASES = {
+    frihet_modelo_303_summary: "get_modelo_303_summary",
+    frihet_modelo_130_summary: "get_modelo_130_summary",
+    frihet_modelo_390_summary: "get_modelo_390_summary",
+    frihet_modelo_180_summary: "get_modelo_180_summary",
+    frihet_modelo_347_summary: "get_modelo_347_summary",
+};
+/**
+ * Apply the fiscal `modelo` aliases to a live `McpServer` instance. Call this
+ * AFTER `registerAllTools()` so every canonical tool already exists.
+ *
+ * Fail-open: if the SDK's internal registry is missing or reshaped, this is a
+ * silent no-op — it never throws, and never blocks server startup.
+ */
+export function applyFiscalAliases(server) {
+    const registry = server._registeredTools;
+    if (!registry || typeof registry !== "object")
+        return;
+    for (const [alias, canonical] of Object.entries(FISCAL_MODELO_ALIASES)) {
+        const target = registry[canonical];
+        if (!target)
+            continue; // Canonical tool not registered in this profile (e.g. an allow-listed mode) — skip, no divergence.
+        if (registry[alias])
+            continue; // Never overwrite an existing registration.
+        registry[alias] = target; // Same object reference as the canonical tool — zero semantic divergence.
+    }
+}
+//# sourceMappingURL=fiscal-aliases.js.map

package/dist/fiscal-period.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Period contract for the READ-ONLY fiscal modelo summaries.
+ *
+ * Single source for BOTH the client (which query param to send) and the tools
+ * (what to validate before calling, what to compare after). Mirrors the
+ * deployed Frihet-ERP backend (functions/src/publicApi.ts):
+ *   - 303/130 read `?quarter=YYYY-Q[1-4]`, default current quarter
+ *   - 390     reads `?year=YYYY`, default current year
+ *   - 347     reads `?year=YYYY`, default current year
+ * Every other modelo code has no backend route (404 "Unknown fiscal model").
+ * The backend silently answers the CURRENT period for any param it does not
+ * read, so the param name here is load-bearing.
+ */
+export interface FiscalPeriodRule {
+    /** Query param the backend reads. */
+    param: "quarter" | "year";
+    pattern: RegExp;
+    format: string;
+}
+export declare const FISCAL_PERIOD_RULES: Readonly<Record<string, FiscalPeriodRule>>;
+/**
+ * Query object for GET /fiscal/modelo/{code}. Throws for a modelo code without
+ * a backend rule so no caller can fall back to an ignored `?period=` param.
+ */
+export declare function fiscalModeloQuery(modeloCode: string, period?: string): Record<string, string | undefined>;
+//# sourceMappingURL=fiscal-period.d.ts.map

package/dist/fiscal-period.js

@@ -0,0 +1,31 @@
+/**
+ * Period contract for the READ-ONLY fiscal modelo summaries.
+ *
+ * Single source for BOTH the client (which query param to send) and the tools
+ * (what to validate before calling, what to compare after). Mirrors the
+ * deployed Frihet-ERP backend (functions/src/publicApi.ts):
+ *   - 303/130 read `?quarter=YYYY-Q[1-4]`, default current quarter
+ *   - 390     reads `?year=YYYY`, default current year
+ *   - 347     reads `?year=YYYY`, default current year
+ * Every other modelo code has no backend route (404 "Unknown fiscal model").
+ * The backend silently answers the CURRENT period for any param it does not
+ * read, so the param name here is load-bearing.
+ */
+export const FISCAL_PERIOD_RULES = {
+    "303": { param: "quarter", pattern: /^\d{4}-Q[1-4]$/, format: "YYYY-Q1..YYYY-Q4" },
+    "130": { param: "quarter", pattern: /^\d{4}-Q[1-4]$/, format: "YYYY-Q1..YYYY-Q4" },
+    "390": { param: "year", pattern: /^\d{4}$/, format: "YYYY" },
+    "347": { param: "year", pattern: /^\d{4}$/, format: "YYYY" },
+};
+/**
+ * Query object for GET /fiscal/modelo/{code}. Throws for a modelo code without
+ * a backend rule so no caller can fall back to an ignored `?period=` param.
+ */
+export function fiscalModeloQuery(modeloCode, period) {
+    const rule = FISCAL_PERIOD_RULES[modeloCode];
+    if (!rule) {
+        throw new Error(`No deployed fiscal summary backend for Modelo ${modeloCode}`);
+    }
+    return { [rule.param]: period };
+}
+//# sourceMappingURL=fiscal-period.js.map

package/dist/google-profile.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Google Connected Apps Profile for the Frihet MCP Server.
+ *
+ * Implements the curated 18-tool financial management surface submitted
+ * for the Google Connected Apps Platform Developer Preview (Gemini app & Google Search).
+ *
+ * Requirements:
+ * - Curated catalogue: 18 high-value small business & freelancer tools.
+ * - Human-in-the-loop: Invoices and financial documents are created strictly in draft status.
+ * - Zero unconfirmed destructive actions (no direct AEAT / VeriFactu fiscal submissions).
+ * - Standard output redaction for sensitive fields.
+ */
+export declare const GOOGLE_CANDIDATE_TOOLS: ReadonlySet<string>;
+export declare const GOOGLE_CANDIDATE_TOOL_COUNT: number;
+export declare const GOOGLE_INSTRUCTIONS = "Frihet ERP \u2014 natural-language business and financial management for Google Connected Apps (Gemini & Search).\nUse get_business_context for complete company health and plan limits.\nQuery and review invoices, expenses, quotes, clients, and products with pagination.\nAll created invoices are drafts. Confirm parameters with the user before creating records.";
+export declare function googleToolResult(result: unknown): unknown;
+export declare const GOOGLE_FORCED_INPUT_VALUES: Readonly<Record<string, Readonly<Record<string, unknown>>>>;
+export declare function applyGoogleProfile(server: any): void;
+//# sourceMappingURL=google-profile.d.ts.map

package/dist/google-profile.js

@@ -0,0 +1,122 @@
+/**
+ * Google Connected Apps Profile for the Frihet MCP Server.
+ *
+ * Implements the curated 18-tool financial management surface submitted
+ * for the Google Connected Apps Platform Developer Preview (Gemini app & Google Search).
+ *
+ * Requirements:
+ * - Curated catalogue: 18 high-value small business & freelancer tools.
+ * - Human-in-the-loop: Invoices and financial documents are created strictly in draft status.
+ * - Zero unconfirmed destructive actions (no direct AEAT / VeriFactu fiscal submissions).
+ * - Standard output redaction for sensitive fields.
+ */
+import { deepRedact, redactText } from "./redaction.js";
+export const GOOGLE_CANDIDATE_TOOLS = new Set([
+    "get_business_context",
+    "get_monthly_summary",
+    "get_quarterly_taxes",
+    "list_invoices",
+    "get_invoice",
+    "search_invoices",
+    "list_expenses",
+    "get_expense",
+    "create_expense",
+    "list_clients",
+    "get_client",
+    "create_client",
+    "list_products",
+    "get_product",
+    "list_quotes",
+    "get_quote",
+    "create_quote",
+    "create_invoice",
+]);
+export const GOOGLE_CANDIDATE_TOOL_COUNT = GOOGLE_CANDIDATE_TOOLS.size; // 18
+export const GOOGLE_INSTRUCTIONS = `Frihet ERP — natural-language business and financial management for Google Connected Apps (Gemini & Search).
+Use get_business_context for complete company health and plan limits.
+Query and review invoices, expenses, quotes, clients, and products with pagination.
+All created invoices are drafts. Confirm parameters with the user before creating records.`;
+export function googleToolResult(result) {
+    if (result === null || typeof result !== "object")
+        return result;
+    const res = result;
+    // Deep-redact structured output if present (in-place deletion of sensitive fields)
+    if (res.structuredContent && typeof res.structuredContent === "object") {
+        deepRedact(res.structuredContent);
+    }
+    // Redact text content items
+    if (Array.isArray(res.content)) {
+        res.content = res.content.map((item) => {
+            if (item && typeof item === "object" && "text" in item && typeof item.text === "string") {
+                return {
+                    ...item,
+                    text: redactText(item.text),
+                };
+            }
+            return item;
+        });
+    }
+    return res;
+}
+export const GOOGLE_FORCED_INPUT_VALUES = {
+    create_invoice: { status: "draft" },
+    create_quote: { status: "draft" },
+};
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+export function applyGoogleProfile(server) {
+    const registerTool = server.registerTool.bind(server);
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    server.registerTool = (name, config, handler) => {
+        if (!GOOGLE_CANDIDATE_TOOLS.has(name))
+            return undefined;
+        let description = config.description ?? "";
+        let inputSchema = config.inputSchema;
+        if (name === "create_invoice") {
+            description = `${description} [Google Connected Apps: Generates an invoice strictly in 'draft' status for human review. No irreversible fiscal submission occurs.]`;
+            if (inputSchema && typeof inputSchema === "object" && "status" in inputSchema) {
+                const { status: _omittedStatus, ...rest } = inputSchema;
+                inputSchema = rest;
+            }
+        }
+        else if (name === "create_quote") {
+            description = `${description} [Google Connected Apps: Generates a quote strictly in 'draft' status for human review.]`;
+            if (inputSchema && typeof inputSchema === "object" && "status" in inputSchema) {
+                const { status: _omittedStatus, ...rest } = inputSchema;
+                inputSchema = rest;
+            }
+        }
+        return registerTool(name, {
+            ...config,
+            description,
+            inputSchema,
+            annotations: {
+                ...config.annotations,
+                ...(config.annotations?.readOnlyHint !== true ? { destructiveHint: true } : {}),
+            },
+        }, 
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        async (...args) => {
+            try {
+                let input = args[0];
+                if (input && typeof input === "object") {
+                    const forced = GOOGLE_FORCED_INPUT_VALUES[name];
+                    if (forced) {
+                        input = { ...input, ...forced };
+                    }
+                }
+                const res = await handler(input, ...args.slice(1));
+                return googleToolResult(res);
+            }
+            catch {
+                return googleToolResult({
+                    isError: true,
+                    _meta: { "io.frihet/operationOutcomeUnknown": true },
+                });
+            }
+        });
+    };
+    // Google Connected Apps profile intentionally registers 0 raw prompts or dynamic resources
+    server.registerResource = () => undefined;
+    server.registerPrompt = () => undefined;
+}
+//# sourceMappingURL=google-profile.js.map

package/dist/index.js

@@ -15,6 +15,7 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { FrihetClient } from "./client.js";
 import { DemoFrihetClient } from "./demo-client.js";
+import { normalizePublicApiBaseUrl } from "./api-origin.js";
 // Single source of truth for the server version: package.json (read at runtime
 // from dist/../package.json). Hardcoding it here caused repeated version drift
 // (server.json/index.ts/console out of sync → audit:mcp-refs gate failure).
@@ -28,15 +29,26 @@ const PKG_VERSION = (() => {
         return "0.0.0";
     }
 })();
-import { registerAllTools } from "./tools/register-all.js";
-import { registerAllResources } from "./resources/register-all.js";
-import { registerAllPrompts } from "./prompts/register-all.js";
-import { applyOpenAIProfile, OPENAI_ALLOWED_TOOL_COUNT, OPENAI_EXCLUDED_COUNT, OPENAI_EXCLUDED_RESOURCE_COUNT, OPENAI_REVIEWED_TOOL_ALLOWLIST } from "./openai-profile.js";
-import { resolveToolMode, applyToolExposureProfile, GROUPED_META_TOOL_COUNT } from "./tool-exposure.js";
+import { OPENAI_ALLOWED_TOOL_COUNT, OPENAI_EXCLUDED_COUNT, OPENAI_EXCLUDED_RESOURCE_COUNT } from "./openai-profile.js";
+import { CLAUDE_CANDIDATE_INSTRUCTIONS, CLAUDE_CANDIDATE_TOOLS } from "./claude-profile.js";
+import { GOOGLE_INSTRUCTIONS, GOOGLE_CANDIDATE_TOOL_COUNT } from "./google-profile.js";
+import { MUSE_INSTRUCTIONS, MUSE_CANDIDATE_TOOL_COUNT } from "./muse-profile.js";
+import { resolveToolMode, GROUPED_META_TOOL_COUNT } from "./tool-exposure.js";
+import { localMcpSurfaceComposition, registerMcpSurface, } from "./server-composition.js";
+import { AGENT_SERVER_INSTRUCTIONS, API_KEY_LOCATION, } from "./agent-onboarding.js";
 import { log } from "./logger.js";
 import { registerShutdownHook } from "./metrics.js";
 import { setTraceContext } from "./observability.js";
 function main() {
+    const openaiMode = process.env.FRIHET_OPENAI_MODE === "true";
+    const claudeMode = process.env.FRIHET_CLAUDE_MODE === "true";
+    const googleMode = process.env.FRIHET_GOOGLE_MODE === "true";
+    const museMode = process.env.FRIHET_MUSE_MODE === "true";
+    const activeModes = [openaiMode, claudeMode, googleMode, museMode].filter(Boolean).length;
+    if (activeModes > 1) {
+        console.error("Error: FRIHET_OPENAI_MODE, FRIHET_CLAUDE_MODE, FRIHET_GOOGLE_MODE, and FRIHET_MUSE_MODE are mutually exclusive");
+        process.exit(1);
+    }
     const apiKey = process.env.FRIHET_API_KEY;
     // Demo mode: FRIHET_DEMO=1|true serves fixture-backed example data with NO
     // network calls and NO API key required. It's an explicit opt-in, so it wins
@@ -44,33 +56,40 @@ function main() {
     const demoFlag = process.env.FRIHET_DEMO;
     const demoMode = demoFlag === "1" || demoFlag === "true";
     if (!demoMode && !apiKey) {
+        // Human-readable first, then one machine-readable line. An agent that only
+        // gets prose here has to guess; the JSON line gives it a code to branch on
+        // and the two recoveries that actually exist. /settings/api is the real,
+        // routable screen — there is no "Developers" section in the app.
         console.error("Error: FRIHET_API_KEY environment variable is required.\n\n" +
             "Get your API key:\n" +
             "  1. Create a free account at https://app.frihet.io\n" +
-            "  2. Go to Settings > Developers > API Keys\n" +
-            "  3. Create a key and add it to your MCP configuration\n\n" +
+            "  2. Open https://app.frihet.io/settings/api\n" +
+            "  3. Create a key (it starts with fri_) and add it to your MCP configuration\n\n" +
             "Or try it instantly with no key: set FRIHET_DEMO=1 for example data.\n\n" +
             "Documentation: https://docs.frihet.io/desarrolladores/mcp-server\n");
+        console.error(JSON.stringify({
+            error: {
+                code: "FRIHET_API_KEY_MISSING",
+                message: "FRIHET_API_KEY environment variable is required",
+                obtainAt: API_KEY_LOCATION,
+                recovery: [
+                    { action: "set_env", env: { FRIHET_API_KEY: "fri_<key>" } },
+                    { action: "run_without_credentials", env: { FRIHET_DEMO: "1" } },
+                ],
+                docs: "https://docs.frihet.io/desarrolladores/mcp-server",
+            },
+        }));
         process.exit(1);
     }
-    const baseUrl = process.env.FRIHET_API_URL;
-    if (!demoMode && baseUrl !== undefined) {
-        let parsed;
+    const baseUrlRaw = process.env.FRIHET_API_URL;
+    let baseUrl;
+    if (!demoMode && baseUrlRaw !== undefined) {
         try {
-            parsed = new URL(baseUrl);
-        }
-        catch {
-            console.error(`Error: FRIHET_API_URL is not a valid URL: "${baseUrl}"\n` +
-                "It must be a valid https:// URL with a frihet.io hostname.\n");
-            process.exit(1);
-        }
-        if (parsed.protocol !== "https:") {
-            console.error(`Error: FRIHET_API_URL must use https:// (got "${parsed.protocol}").\n`);
-            process.exit(1);
+            baseUrl = normalizePublicApiBaseUrl(baseUrlRaw);
         }
-        if (!parsed.hostname.endsWith("frihet.io")) {
-            console.error(`Error: FRIHET_API_URL hostname must be under frihet.io (got "${parsed.hostname}").\n` +
-                "This prevents redirection to untrusted servers.\n");
+        catch (error) {
+            console.error(`Error: ${error instanceof Error ? error.message : "FRIHET_API_URL is invalid"}.\n` +
+                "It must be a canonical https:// URL with a trusted frihet.io hostname.\n");
             process.exit(1);
         }
     }
@@ -80,69 +99,59 @@ function main() {
     if (demoMode) {
         console.error("[frihet-mcp] DEMO MODE — serving example fixtures, no real data, nothing persisted");
     }
-    // Set trace context for Langfuse (reads LANGFUSE_* from process.env automatically).
-    // clientName can be overridden via FRIHET_CLIENT_NAME env var by the MCP host.
+    // Set the fixed protocol fact for Langfuse (reads LANGFUSE_* from process.env automatically).
+    // Client identity is deliberately omitted from telemetry.
     setTraceContext({
         mcpVersion: "mcp/1.0",
-        clientName: process.env.FRIHET_CLIENT_NAME,
     });
     const server = new McpServer({
         name: "frihet-erp",
         version: PKG_VERSION,
-        description: "AI-native MCP server for Frihet ERP — invoices, expenses, clients, products, quotes, webhooks, and deposits. " +
-            "Provides 157 tools (including business context, monthly summaries, quarterly taxes, invoice duplication, CRM subcollections, and deposit management), " +
-            "11 resources (7 static + 4 live), and 10 workflow prompts for business management " +
-            "with full Spanish tax compliance (IVA, IGIC, IPSI).",
+        description: claudeMode
+            ? `Local Claude candidate for Frihet: ${CLAUDE_CANDIDATE_TOOLS.size} canonical operations with reviewed fiscal aliases, 1 currencies resource and 2 receivables prompts. Optional grouped discovery adds 3 names. API-dependent operations require live workspace verification; this is not a published Directory connector.`
+            : googleMode
+                ? `Frihet ERP profile for Google Connected Apps (Gemini & Search): ${GOOGLE_CANDIDATE_TOOL_COUNT} canonical operations with draft-only human-in-the-loop protection.`
+                : museMode
+                    ? `Frihet ERP connector for Meta Muse: ${MUSE_CANDIDATE_TOOL_COUNT} canonical operations with draft-only human-in-the-loop protection.`
+                    :
+                        "AI-native MCP server for Frihet ERP — invoices, expenses, clients, products, quotes, webhooks, and deposits. " +
+                            "Provides a catalogue of 158 canonical operations; fiscal aliases and optional grouped discovery names are reported separately. " +
+                            "The local package serves 11 resources (7 static + 4 API-backed) and 10 workflow prompts " +
+                            "with full Spanish tax compliance (IVA, IGIC, IPSI).",
+    }, {
+        // Delivered by `initialize` to every MCP client, which hands it to the model
+        // before the first tool call. This is the only onboarding channel that costs
+        // the operator zero configuration. Source: src/agent-onboarding.ts.
+        instructions: claudeMode
+            ? CLAUDE_CANDIDATE_INSTRUCTIONS
+            : googleMode
+                ? GOOGLE_INSTRUCTIONS
+                : museMode
+                    ? MUSE_INSTRUCTIONS
+                    : AGENT_SERVER_INSTRUCTIONS,
     });
-    const openaiMode = process.env.FRIHET_OPENAI_MODE === "true";
     const toolMode = resolveToolMode();
-    // PROFILE COMPOSITION ORDER (both interceptors wrap registerTool):
-    //   1. applyToolExposureProfile FIRST (innermost) — so the 3 discovery
-    //      meta-tools register against the REAL server.registerTool and bypass the
-    //      OpenAI allow-list gate. In allow-list mode it catalogs ONLY the reviewed
-    //      tools, keeping the progressive-disclosure surface == the reviewed 53.
-    //   2. applyOpenAIProfile SECOND (outermost) — a business-tool registration is
-    //      first gated/redacted/annotated/openWorldHint-justified by OpenAI, THEN
-    //      collapsed by the grouped interceptor, so the terse collapsed line is the
-    //      final description and OpenAI's handler redaction survives.
-    // Order only matters when BOTH are active (openai-mcp grouped); openai-only and
-    // grouped-only are unaffected by the swap.
-    // Apply grouped tool-exposure profile if enabled (progressive disclosure).
-    // FRIHET_TOOL_MODE=grouped collapses the full tool descriptions into terse
-    // one-liners + adds list_tool_groups / search_tools / describe_tool meta-tools,
-    // so agents load depth on demand instead of a flat 157-tool wall of context.
-    // Default (unset / "full") is byte-identical to current behavior. When OpenAI
-    // mode is also on, pass the reviewed allow-list so the catalog/meta-tools are
-    // pinned to exactly the 53 reviewed tools.
     if (toolMode === "grouped") {
-        applyToolExposureProfile(server, openaiMode ? { allowlist: OPENAI_REVIEWED_TOOL_ALLOWLIST } : undefined);
         log({
             level: "info",
             message: `Grouped tool-exposure active — tools collapsed to terse summaries, ${GROUPED_META_TOOL_COUNT} discovery meta-tools added (list_tool_groups, search_tools, describe_tool); full depth served on demand`,
             operation: "startup",
         });
     }
-    // Apply OpenAI-safe profile if enabled (strips sensitive fields, fixes annotations)
     if (openaiMode) {
-        applyOpenAIProfile(server);
         log({
             level: "info",
             message: `OpenAI safety profile active — ${OPENAI_ALLOWED_TOOL_COUNT} tools allowed, prompts hidden, ${OPENAI_EXCLUDED_COUNT} defense-in-depth exclusions, ${OPENAI_EXCLUDED_RESOURCE_COUNT} resources excluded, gov IDs + credentials redacted`,
             operation: "startup",
         });
     }
-    // Register tools (62 full / 60 in OpenAI mode)
-    registerAllTools(server, client);
-    // Register 11 resources (7 static + 4 dynamic via API)
-    registerAllResources(server, client);
-    // Register 10 workflow prompts
-    registerAllPrompts(server);
+    registerMcpSurface(server, client, localMcpSurfaceComposition(openaiMode, toolMode === "grouped", claudeMode, googleMode, museMode));
     // Register shutdown hook to log final metrics summary
     registerShutdownHook();
     // Connect via stdio transport
     const transport = new StdioServerTransport();
     server.connect(transport).then(() => {
-        console.error(`[frihet-mcp] v${PKG_VERSION} | 157 tools | https://github.com/Frihet-io/frihet-mcp`);
+        console.error(`[frihet-mcp] v${PKG_VERSION} | capability truth enabled | https://github.com/Frihet-io/frihet-mcp`);
         log({
             level: "info",
             message: "Frihet MCP server running on stdio",

package/dist/logger.d.ts

@@ -37,10 +37,10 @@ export declare function logToolCall(tool: string, startTime: number, success: bo
 /**
  * Log an outbound API call with timing.
  */
-export declare function logApiCall(method: string, path: string, statusCode: number, durationMs: number): void;
+export declare function logApiCall(method: string, _path: string, statusCode: number, durationMs: number): void;
 /**
  * Log a rate-limit retry.
  */
-export declare function logRetry(method: string, path: string, retryCount: number, delayMs: number): void;
+export declare function logRetry(method: string, _path: string, retryCount: number, delayMs: number, delaySource?: "retry_after" | "backoff"): void;
 export {};
 //# sourceMappingURL=logger.d.ts.map