@frihet/mcp-server 1.17.0 → 2.0.0

package/dist/claude-candidate-contract.d.ts

@@ -0,0 +1,482 @@
+declare function captureSurface(local: boolean, grouped: boolean): Promise<{
+    groups?: {} | undefined;
+    tools: {
+        inputSchema: {
+            [x: string]: unknown;
+            type: "object";
+            properties?: Record<string, object> | undefined;
+            required?: string[] | undefined;
+        };
+        name: string;
+        description?: string | undefined;
+        outputSchema?: {
+            [x: string]: unknown;
+            type: "object";
+            properties?: Record<string, object> | undefined;
+            required?: string[] | undefined;
+        } | undefined;
+        annotations?: {
+            title?: string | undefined;
+            readOnlyHint?: boolean | undefined;
+            destructiveHint?: boolean | undefined;
+            idempotentHint?: boolean | undefined;
+            openWorldHint?: boolean | undefined;
+        } | undefined;
+        execution?: {
+            taskSupport?: "optional" | "required" | "forbidden" | undefined;
+        } | undefined;
+        _meta?: Record<string, unknown> | undefined;
+        icons?: {
+            src: string;
+            mimeType?: string | undefined;
+            sizes?: string[] | undefined;
+            theme?: "light" | "dark" | undefined;
+        }[] | undefined;
+        title?: string | undefined;
+    }[];
+    resources: {
+        uri: string;
+        name: string;
+        description?: string | undefined;
+        mimeType?: string | undefined;
+        size?: number | undefined;
+        annotations?: {
+            audience?: ("user" | "assistant")[] | undefined;
+            priority?: number | undefined;
+            lastModified?: string | undefined;
+        } | undefined;
+        _meta?: {
+            [x: string]: unknown;
+        } | undefined;
+        icons?: {
+            src: string;
+            mimeType?: string | undefined;
+            sizes?: string[] | undefined;
+            theme?: "light" | "dark" | undefined;
+        }[] | undefined;
+        title?: string | undefined;
+    }[];
+    prompts: {
+        name: string;
+        description?: string | undefined;
+        arguments?: {
+            name: string;
+            description?: string | undefined;
+            required?: boolean | undefined;
+        }[] | undefined;
+        _meta?: {
+            [x: string]: unknown;
+        } | undefined;
+        icons?: {
+            src: string;
+            mimeType?: string | undefined;
+            sizes?: string[] | undefined;
+            theme?: "light" | "dark" | undefined;
+        }[] | undefined;
+        title?: string | undefined;
+    }[];
+    promptContent: {
+        name: string;
+        result: {
+            [x: string]: unknown;
+            messages: {
+                role: "user" | "assistant";
+                content: {
+                    type: "text";
+                    text: string;
+                    annotations?: {
+                        audience?: ("user" | "assistant")[] | undefined;
+                        priority?: number | undefined;
+                        lastModified?: string | undefined;
+                    } | undefined;
+                    _meta?: Record<string, unknown> | undefined;
+                } | {
+                    type: "image";
+                    data: string;
+                    mimeType: string;
+                    annotations?: {
+                        audience?: ("user" | "assistant")[] | undefined;
+                        priority?: number | undefined;
+                        lastModified?: string | undefined;
+                    } | undefined;
+                    _meta?: Record<string, unknown> | undefined;
+                } | {
+                    type: "audio";
+                    data: string;
+                    mimeType: string;
+                    annotations?: {
+                        audience?: ("user" | "assistant")[] | undefined;
+                        priority?: number | undefined;
+                        lastModified?: string | undefined;
+                    } | undefined;
+                    _meta?: Record<string, unknown> | undefined;
+                } | {
+                    type: "resource";
+                    resource: {
+                        uri: string;
+                        text: string;
+                        mimeType?: string | undefined;
+                        _meta?: Record<string, unknown> | undefined;
+                    } | {
+                        uri: string;
+                        blob: string;
+                        mimeType?: string | undefined;
+                        _meta?: Record<string, unknown> | undefined;
+                    };
+                    annotations?: {
+                        audience?: ("user" | "assistant")[] | undefined;
+                        priority?: number | undefined;
+                        lastModified?: string | undefined;
+                    } | undefined;
+                    _meta?: Record<string, unknown> | undefined;
+                } | {
+                    uri: string;
+                    name: string;
+                    type: "resource_link";
+                    description?: string | undefined;
+                    mimeType?: string | undefined;
+                    size?: number | undefined;
+                    annotations?: {
+                        audience?: ("user" | "assistant")[] | undefined;
+                        priority?: number | undefined;
+                        lastModified?: string | undefined;
+                    } | undefined;
+                    _meta?: {
+                        [x: string]: unknown;
+                    } | undefined;
+                    icons?: {
+                        src: string;
+                        mimeType?: string | undefined;
+                        sizes?: string[] | undefined;
+                        theme?: "light" | "dark" | undefined;
+                    }[] | undefined;
+                    title?: string | undefined;
+                };
+            }[];
+            _meta?: {
+                [x: string]: unknown;
+                progressToken?: string | number | undefined;
+                "io.modelcontextprotocol/related-task"?: {
+                    taskId: string;
+                } | undefined;
+            } | undefined;
+            description?: string | undefined;
+        };
+    }[];
+    currencies: {
+        [x: string]: unknown;
+        contents: ({
+            uri: string;
+            text: string;
+            mimeType?: string | undefined;
+            _meta?: Record<string, unknown> | undefined;
+        } | {
+            uri: string;
+            blob: string;
+            mimeType?: string | undefined;
+            _meta?: Record<string, unknown> | undefined;
+        })[];
+        _meta?: {
+            [x: string]: unknown;
+            progressToken?: string | number | undefined;
+            "io.modelcontextprotocol/related-task"?: {
+                taskId: string;
+            } | undefined;
+        } | undefined;
+    };
+}>;
+type CapturedSurface = Awaited<ReturnType<typeof captureSurface>>;
+export declare function assertClaudeCandidateCaptureParity({ localFull, localGrouped, remoteFull, remoteGrouped }: {
+    localFull: CapturedSurface;
+    localGrouped: CapturedSurface;
+    remoteFull: CapturedSurface;
+    remoteGrouped: CapturedSurface;
+}): void;
+export declare function captureClaudeCandidateContract(): Promise<{
+    contractVersion: number;
+    status: string;
+    inventorySource: string;
+    instructions: string;
+    catalogue: {
+        canonicalOperations: number;
+        aliases: {
+            [k: string]: string;
+        };
+        discoveryNames: string[];
+    };
+    exclusions: {
+        tools: Readonly<Record<string, string>>;
+        resources: Readonly<Record<string, string>>;
+        prompts: Readonly<Record<string, string>>;
+    };
+    tools: {
+        full: {
+            inputSchema: {
+                [x: string]: unknown;
+                type: "object";
+                properties?: Record<string, object> | undefined;
+                required?: string[] | undefined;
+            };
+            name: string;
+            description?: string | undefined;
+            outputSchema?: {
+                [x: string]: unknown;
+                type: "object";
+                properties?: Record<string, object> | undefined;
+                required?: string[] | undefined;
+            } | undefined;
+            annotations?: {
+                title?: string | undefined;
+                readOnlyHint?: boolean | undefined;
+                destructiveHint?: boolean | undefined;
+                idempotentHint?: boolean | undefined;
+                openWorldHint?: boolean | undefined;
+            } | undefined;
+            execution?: {
+                taskSupport?: "optional" | "required" | "forbidden" | undefined;
+            } | undefined;
+            _meta?: Record<string, unknown> | undefined;
+            icons?: {
+                src: string;
+                mimeType?: string | undefined;
+                sizes?: string[] | undefined;
+                theme?: "light" | "dark" | undefined;
+            }[] | undefined;
+            title?: string | undefined;
+        }[];
+        grouped: {
+            inputSchema: {
+                [x: string]: unknown;
+                type: "object";
+                properties?: Record<string, object> | undefined;
+                required?: string[] | undefined;
+            };
+            name: string;
+            description?: string | undefined;
+            outputSchema?: {
+                [x: string]: unknown;
+                type: "object";
+                properties?: Record<string, object> | undefined;
+                required?: string[] | undefined;
+            } | undefined;
+            annotations?: {
+                title?: string | undefined;
+                readOnlyHint?: boolean | undefined;
+                destructiveHint?: boolean | undefined;
+                idempotentHint?: boolean | undefined;
+                openWorldHint?: boolean | undefined;
+            } | undefined;
+            execution?: {
+                taskSupport?: "optional" | "required" | "forbidden" | undefined;
+            } | undefined;
+            _meta?: Record<string, unknown> | undefined;
+            icons?: {
+                src: string;
+                mimeType?: string | undefined;
+                sizes?: string[] | undefined;
+                theme?: "light" | "dark" | undefined;
+            }[] | undefined;
+            title?: string | undefined;
+        }[];
+    };
+    resources: {
+        local: {
+            uri: string;
+            name: string;
+            description?: string | undefined;
+            mimeType?: string | undefined;
+            size?: number | undefined;
+            annotations?: {
+                audience?: ("user" | "assistant")[] | undefined;
+                priority?: number | undefined;
+                lastModified?: string | undefined;
+            } | undefined;
+            _meta?: {
+                [x: string]: unknown;
+            } | undefined;
+            icons?: {
+                src: string;
+                mimeType?: string | undefined;
+                sizes?: string[] | undefined;
+                theme?: "light" | "dark" | undefined;
+            }[] | undefined;
+            title?: string | undefined;
+        }[];
+        remote: {
+            uri: string;
+            name: string;
+            description?: string | undefined;
+            mimeType?: string | undefined;
+            size?: number | undefined;
+            annotations?: {
+                audience?: ("user" | "assistant")[] | undefined;
+                priority?: number | undefined;
+                lastModified?: string | undefined;
+            } | undefined;
+            _meta?: {
+                [x: string]: unknown;
+            } | undefined;
+            icons?: {
+                src: string;
+                mimeType?: string | undefined;
+                sizes?: string[] | undefined;
+                theme?: "light" | "dark" | undefined;
+            }[] | undefined;
+            title?: string | undefined;
+        }[];
+    };
+    prompts: {
+        name: string;
+        description?: string | undefined;
+        arguments?: {
+            name: string;
+            description?: string | undefined;
+            required?: boolean | undefined;
+        }[] | undefined;
+        _meta?: {
+            [x: string]: unknown;
+        } | undefined;
+        icons?: {
+            src: string;
+            mimeType?: string | undefined;
+            sizes?: string[] | undefined;
+            theme?: "light" | "dark" | undefined;
+        }[] | undefined;
+        title?: string | undefined;
+    }[];
+    promptContent: {
+        name: string;
+        result: {
+            [x: string]: unknown;
+            messages: {
+                role: "user" | "assistant";
+                content: {
+                    type: "text";
+                    text: string;
+                    annotations?: {
+                        audience?: ("user" | "assistant")[] | undefined;
+                        priority?: number | undefined;
+                        lastModified?: string | undefined;
+                    } | undefined;
+                    _meta?: Record<string, unknown> | undefined;
+                } | {
+                    type: "image";
+                    data: string;
+                    mimeType: string;
+                    annotations?: {
+                        audience?: ("user" | "assistant")[] | undefined;
+                        priority?: number | undefined;
+                        lastModified?: string | undefined;
+                    } | undefined;
+                    _meta?: Record<string, unknown> | undefined;
+                } | {
+                    type: "audio";
+                    data: string;
+                    mimeType: string;
+                    annotations?: {
+                        audience?: ("user" | "assistant")[] | undefined;
+                        priority?: number | undefined;
+                        lastModified?: string | undefined;
+                    } | undefined;
+                    _meta?: Record<string, unknown> | undefined;
+                } | {
+                    type: "resource";
+                    resource: {
+                        uri: string;
+                        text: string;
+                        mimeType?: string | undefined;
+                        _meta?: Record<string, unknown> | undefined;
+                    } | {
+                        uri: string;
+                        blob: string;
+                        mimeType?: string | undefined;
+                        _meta?: Record<string, unknown> | undefined;
+                    };
+                    annotations?: {
+                        audience?: ("user" | "assistant")[] | undefined;
+                        priority?: number | undefined;
+                        lastModified?: string | undefined;
+                    } | undefined;
+                    _meta?: Record<string, unknown> | undefined;
+                } | {
+                    uri: string;
+                    name: string;
+                    type: "resource_link";
+                    description?: string | undefined;
+                    mimeType?: string | undefined;
+                    size?: number | undefined;
+                    annotations?: {
+                        audience?: ("user" | "assistant")[] | undefined;
+                        priority?: number | undefined;
+                        lastModified?: string | undefined;
+                    } | undefined;
+                    _meta?: {
+                        [x: string]: unknown;
+                    } | undefined;
+                    icons?: {
+                        src: string;
+                        mimeType?: string | undefined;
+                        sizes?: string[] | undefined;
+                        theme?: "light" | "dark" | undefined;
+                    }[] | undefined;
+                    title?: string | undefined;
+                };
+            }[];
+            _meta?: {
+                [x: string]: unknown;
+                progressToken?: string | number | undefined;
+                "io.modelcontextprotocol/related-task"?: {
+                    taskId: string;
+                } | undefined;
+            } | undefined;
+            description?: string | undefined;
+        };
+    }[];
+    currencies: {
+        [x: string]: unknown;
+        contents: ({
+            uri: string;
+            text: string;
+            mimeType?: string | undefined;
+            _meta?: Record<string, unknown> | undefined;
+        } | {
+            uri: string;
+            blob: string;
+            mimeType?: string | undefined;
+            _meta?: Record<string, unknown> | undefined;
+        })[];
+        _meta?: {
+            [x: string]: unknown;
+            progressToken?: string | number | undefined;
+            "io.modelcontextprotocol/related-task"?: {
+                taskId: string;
+            } | undefined;
+        } | undefined;
+    };
+    groups: {} | undefined;
+    surfaces: {
+        localFull: {
+            tools: string;
+            resources: string;
+            toolNames: number;
+        };
+        localGrouped: {
+            tools: string;
+            resources: string;
+            toolNames: number;
+        };
+        remoteFull: {
+            tools: string;
+            resources: string;
+            toolNames: number;
+        };
+        remoteGrouped: {
+            tools: string;
+            resources: string;
+            toolNames: number;
+        };
+    };
+}>;
+export declare function serializeClaudeCandidateContract(contract: Awaited<ReturnType<typeof captureClaudeCandidateContract>>): string;
+export {};
+//# sourceMappingURL=claude-candidate-contract.d.ts.map

package/dist/claude-candidate-contract.js

@@ -0,0 +1,87 @@
+/** Exact candidate descriptors from the real SDK; no hosted auth or API claims. */
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { InMemoryTransport } from "@modelcontextprotocol/sdk/inMemory.js";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { CLAUDE_CANDIDATE_INSTRUCTIONS, CLAUDE_EXCLUDED_TOOLS, CLAUDE_EXCLUDED_RESOURCES, CLAUDE_EXCLUDED_PROMPTS, } from "./claude-profile.js";
+import { FISCAL_MODELO_ALIASES } from "./fiscal-aliases.js";
+import { localMcpSurfaceComposition, remoteMcpSurfaceComposition, registerMcpSurface } from "./server-composition.js";
+async function captureSurface(local, grouped) {
+    const server = new McpServer({ name: "claude-candidate-capture", version: "1.0.0" }, {
+        instructions: CLAUDE_CANDIDATE_INSTRUCTIONS,
+    });
+    const api = new Proxy({}, { get: () => () => { throw new Error("Descriptor capture must not call the API"); } });
+    registerMcpSurface(server, api, (local ? localMcpSurfaceComposition : remoteMcpSurfaceComposition)(false, grouped, true));
+    const client = new Client({ name: "claude-candidate-capture-client", version: "1.0.0" });
+    const [clientTransport, serverTransport] = InMemoryTransport.createLinkedPair();
+    try {
+        await Promise.all([server.connect(serverTransport), client.connect(clientTransport)]);
+        const tools = (await client.listTools()).tools.sort((a, b) => a.name.localeCompare(b.name));
+        const resources = (await client.listResources()).resources.sort((a, b) => a.uri.localeCompare(b.uri));
+        const prompts = client.getServerCapabilities()?.prompts
+            ? (await client.listPrompts()).prompts.sort((a, b) => a.name.localeCompare(b.name))
+            : [];
+        const promptContent = await Promise.all(prompts.map(async ({ name }) => ({ name, result: await client.getPrompt({ name }) })));
+        const currencies = await client.readResource({ uri: "frihet://config/currencies" });
+        const groups = grouped ? (await client.callTool({ name: "list_tool_groups", arguments: {} })).structuredContent : undefined;
+        return { tools, resources, prompts, promptContent, currencies, ...(groups ? { groups } : {}) };
+    }
+    finally {
+        await Promise.allSettled([client.close(), server.close()]);
+    }
+}
+export function assertClaudeCandidateCaptureParity({ localFull, localGrouped, remoteFull, remoteGrouped }) {
+    const comparisons = [
+        ["full tools", localFull.tools, remoteFull.tools],
+        ["grouped tools", localGrouped.tools, remoteGrouped.tools],
+        ["local resources", localFull.resources, localGrouped.resources],
+        ["remote resources", remoteFull.resources, remoteGrouped.resources],
+        ["grouped discovery", remoteGrouped.groups, localGrouped.groups],
+    ];
+    for (const [name, surface] of Object.entries({ localGrouped, remoteFull, remoteGrouped })) {
+        for (const key of ["prompts", "promptContent", "currencies"]) {
+            comparisons.push([`${name} ${key}`, localFull[key], surface[key]]);
+        }
+    }
+    for (const [label, expected, actual] of comparisons) {
+        if (JSON.stringify(expected) !== JSON.stringify(actual)) {
+            throw new Error(`Claude candidate capture diverged: ${label}`);
+        }
+    }
+}
+export async function captureClaudeCandidateContract() {
+    const localFull = await captureSurface(true, false);
+    const localGrouped = await captureSurface(true, true);
+    const remoteFull = await captureSurface(false, false);
+    const remoteGrouped = await captureSurface(false, true);
+    assertClaudeCandidateCaptureParity({ localFull, localGrouped, remoteFull, remoteGrouped });
+    const aliases = Object.fromEntries(Object.entries(FISCAL_MODELO_ALIASES).filter(([alias]) => localFull.tools.some((tool) => tool.name === alias)));
+    return {
+        contractVersion: 1,
+        status: "local-candidate-only",
+        inventorySource: "176de12",
+        instructions: CLAUDE_CANDIDATE_INSTRUCTIONS,
+        catalogue: {
+            canonicalOperations: localFull.tools.length - Object.keys(aliases).length,
+            aliases,
+            discoveryNames: ["list_tool_groups", "search_tools", "describe_tool"],
+        },
+        exclusions: { tools: CLAUDE_EXCLUDED_TOOLS, resources: CLAUDE_EXCLUDED_RESOURCES, prompts: CLAUDE_EXCLUDED_PROMPTS },
+        // Capture all four compositions, store each identical descriptor only once.
+        tools: { full: localFull.tools, grouped: localGrouped.tools },
+        resources: { local: localFull.resources, remote: remoteFull.resources },
+        prompts: localFull.prompts,
+        promptContent: localFull.promptContent,
+        currencies: localFull.currencies,
+        groups: remoteGrouped.groups,
+        surfaces: {
+            localFull: { tools: "full", resources: "local", toolNames: localFull.tools.length },
+            localGrouped: { tools: "grouped", resources: "local", toolNames: localGrouped.tools.length },
+            remoteFull: { tools: "full", resources: "remote", toolNames: remoteFull.tools.length },
+            remoteGrouped: { tools: "grouped", resources: "remote", toolNames: remoteGrouped.tools.length },
+        },
+    };
+}
+export function serializeClaudeCandidateContract(contract) {
+    return `${JSON.stringify(contract, null, 2)}\n`;
+}
+//# sourceMappingURL=claude-candidate-contract.js.map

package/dist/claude-output-privacy.d.ts

@@ -0,0 +1,17 @@
+/** Output-only privacy boundary for Claude. No transport, input or retry policy. */
+import { z } from "zod/v4";
+export declare function sanitizeClaudeOutput(value: unknown, toolName?: string): unknown;
+/** Keep the existing output shape, including open summaries, but never require
+ * or advertise a field removed by the runtime boundary. Inputs are untouched.
+ * Open/dynamic values are still sanitized recursively by sanitizeClaudeOutput.
+ */
+export declare function claudeOutputSchema(schema: unknown): z.ZodType;
+/** Never forward opaque content blocks or arbitrary response metadata. */
+export declare function claudeToolResult(result: Record<string, unknown>, toolName?: string): Record<string, unknown>;
+/** Candidate resources are JSON. Refuse opaque or unexpected formats. */
+export declare function claudeResourceResult(result: {
+    contents?: unknown[];
+}, uri: string): {
+    contents: unknown[];
+};
+//# sourceMappingURL=claude-output-privacy.d.ts.map