@frihet/mcp-server 2.0.1 → 2.0.2

package/dist/openai-profile.d.ts

@@ -26,6 +26,10 @@ export declare const OPENAI_OAUTH_SECURITY_SCHEMES: readonly [{
     readonly type: "oauth2";
     readonly scopes: readonly string[];
 }];
+export declare const OPENAI_103_READ_ONLY_CANDIDATE_TOOLS: ReadonlySet<string>;
+export interface ApplyOpenAIProfileOptions {
+    candidateVersion?: "1.0.2" | "1.0.3";
+}
 export declare const OPENAI_WORKSPACE_WEBHOOK_EVENT_TOOLS: ReadonlySet<string>;
 export declare const OPENAI_REVIEW_CONFIRM_REQUIRED_TOOLS: ReadonlySet<string>;
 /** Strictly necessary row fields for reviewed collection/search responses. */
@@ -62,7 +66,7 @@ export declare const OPENAI_CSP: string;
  * registerAllResources(server, client);
  * ```
  */
-export declare function applyOpenAIProfile(server: any): void;
+export declare function applyOpenAIProfile(server: any, options?: ApplyOpenAIProfileOptions): void;
 /** Number of tools excluded in OpenAI mode (for logging). */
 export declare const OPENAI_EXCLUDED_COUNT: number;
 /** Number of tools explicitly allowed in OpenAI mode. */

package/dist/openai-profile.js

@@ -429,6 +429,12 @@ function installOpenAIToolsListSecurityProjection(server) {
         });
     };
 }
+export const OPENAI_103_READ_ONLY_CANDIDATE_TOOLS = new Set([
+    "get_daily_operational_brief",
+    "get_business_period_summary",
+    "search_clients",
+    "search_vendors",
+]);
 export const OPENAI_WORKSPACE_WEBHOOK_EVENT_TOOLS = new Set([
     "create_invoice",
     "create_expense",
@@ -1167,15 +1173,21 @@ export const OPENAI_CSP = "default-src 'self'; " +
  * ```
  */
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
-export function applyOpenAIProfile(server) {
+export function applyOpenAIProfile(server, options) {
     installOpenAIToolsListSecurityProjection(server);
     const fieldsToRedact = PROFILE.redactOutputFields;
+    const activeIncludeTools = new Set(PROFILE.includeTools);
+    if (options?.candidateVersion === "1.0.3") {
+        for (const tool of OPENAI_103_READ_ONLY_CANDIDATE_TOOLS) {
+            activeIncludeTools.add(tool);
+        }
+    }
     /* ── Intercept registerTool ─────────────────────────────────────── */
     const originalRegisterTool = server.registerTool.bind(server);
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
     server.registerTool = (name, config, handler) => {
         // 0. Keep the public ChatGPT app to the reviewed core tool surface
-        if (!PROFILE.includeTools.has(name))
+        if (!activeIncludeTools.has(name))
             return;
         // 1. Skip excluded tools entirely
         if (PROFILE.excludeTools.has(name))

package/dist/openai-review-contract.js

@@ -657,7 +657,7 @@ export function assertOpenAIReviewContract(actual, expected) {
         const outputRequired = outputSchema?.required;
         const success = jsonObject(outputProperties?.success);
         const result = jsonObject(outputProperties?.result);
-        const branches = result?.anyOf;
+        const branches = result?.oneOf;
         const branchObjects = Array.isArray(branches)
             ? branches.map((branch) => jsonObject(branch))
             : [];
@@ -687,6 +687,7 @@ export function assertOpenAIReviewContract(actual, expected) {
             outputRequired.length !== 3 ||
             success?.const !== true ||
             !result ||
+            Object.keys(result).length !== 1 ||
             branchObjects.length !== 2 ||
             branchObjects.some((branch) => !branch) ||
             branchByOutcome.size !== 2 ||

package/dist/server-composition.js

@@ -3,6 +3,8 @@
  * generated public-surface contract. Transport/auth setup stays with each host;
  * the exposed MCP operations/resources/prompts are composed here exactly once.
  */
+import { z } from "zod/v4";
+import { READ_STAMP } from "./demo-fixtures.js";
 import { applyPublicCapabilityTruth, buildLocalDiscoveryCapability, CAPABILITY_META_KEY, } from "./capability-truth.js";
 import { applyFiscalAliases } from "./fiscal-aliases.js";
 import { applyClaudeCandidateProfile, CLAUDE_CANDIDATE_TOOLS, CLAUDE_GROUP_METADATA } from "./claude-profile.js";
@@ -43,6 +45,38 @@ export function registerMcpSurface(server, client, options) {
         clientIsDemo = false;
     }
     const isDemoMode = options.demoMode === true || clientIsDemo;
+    if (isDemoMode) {
+        // Install closest to the SDK so profile projection/redaction runs first.
+        // Only trusted server/client configuration enables this boundary; neither
+        // input arguments nor response metadata can switch a live server to demo.
+        const registerTool = server.registerTool.bind(server);
+        server.registerTool = (name, config, handler) => {
+            const schema = config.outputSchema;
+            if (!(schema instanceof z.ZodObject)
+                || !["data", "total", "limit", "offset"].every((key) => key in schema.shape)) {
+                return registerTool(name, config, handler);
+            }
+            return registerTool(name, {
+                ...config,
+                outputSchema: schema.extend({
+                    _demo: z.literal(true),
+                    _demoNotice: z.literal(READ_STAMP._demoNotice),
+                }),
+            }, (async (args, extra) => {
+                const result = await handler(args, extra);
+                if (result.isError || !result.structuredContent)
+                    return result;
+                const structuredContent = { ...result.structuredContent, ...READ_STAMP };
+                return {
+                    ...result,
+                    structuredContent,
+                    // JSON mirrors structuredContent for hosts that only read text.
+                    // Keep existing summaries/hints too; no warning is silently dropped.
+                    content: [{ type: "text", text: JSON.stringify(structuredContent, null, 2) }, ...result.content],
+                };
+            }));
+        };
+    }
     if (options.groupedMode) {
         if (options.openaiMode) {
             applyOpenAIReviewProfiles(server);

package/dist/tool-exposure.js

@@ -113,6 +113,7 @@ export const FILE_TO_GROUP = {
     deposits: "invoicing",
     expenses: "expenses",
     vendors: "expenses",
+    purchaseOrders: "expenses",
     fiscal: "fiscal",
     igic: "fiscal",
     impuesto_sociedades: "fiscal",
@@ -177,7 +178,7 @@ export function groupForTool(name) {
         return "fiscal";
     if (/(invoice|quote|credit_note|late_fee|recurring|deposit)/.test(n))
         return "invoicing";
-    if (/(expense|vendor)/.test(n))
+    if (/(expense|vendor|purchase_order)/.test(n))
         return "expenses";
     if (/(bank|transaction)/.test(n))
         return "banking";

package/dist/tools/purchaseOrders.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Purchase-order read tools for the Frihet MCP server.
+ *
+ * READ-ONLY surface for the /v1/purchase-orders family (ADR 0027 S2, server
+ * authority shipped in Frihet-ERP #2359). The single-object read returns the
+ * stored document as it lives in the workspace; list returns the same shape
+ * paged by status and vendorId, ordered by createdAt desc.
+ *
+ * Scope semantics: list_purchase_orders and get_purchase_order both classify
+ * as `read` under the family router (functions/src/publicApi/apiKeyScopes.ts
+ * → requiredPurchaseOrderApiAccess), so a restricted API key needs at least
+ * one of `*`, `read`, `purchase-orders:*` or `purchase-orders:read`.
+ *
+ * WRITE tools (create draft, send, confirm, cancel, receive, reverse-receipt,
+ * bill) are deliberately NOT exposed here: they move money or stock and need
+ * human-authority semantics (draft → show → confirm) that this surface does not
+ * define. No write route is called from this file or from the client methods.
+ *
+ * NOT IN SCOPE for this surface (correction to a prior brief):
+ *   - Physical count truth (#2355): no callable, no API route. Not designed.
+ *   - Inventory balances (/v1/inventory/balances): ADR 0027 S4, not landed.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { IFrihetClient } from "../client-interface.js";
+/**
+ * Read tools for purchase orders. Tool names follow the canonical
+ * snake_case convention used across the catalog.
+ */
+export declare function registerPurchaseOrderTools(server: McpServer, client: IFrihetClient): void;
+//# sourceMappingURL=purchaseOrders.d.ts.map

package/dist/tools/purchaseOrders.js

@@ -0,0 +1,102 @@
+/**
+ * Purchase-order read tools for the Frihet MCP server.
+ *
+ * READ-ONLY surface for the /v1/purchase-orders family (ADR 0027 S2, server
+ * authority shipped in Frihet-ERP #2359). The single-object read returns the
+ * stored document as it lives in the workspace; list returns the same shape
+ * paged by status and vendorId, ordered by createdAt desc.
+ *
+ * Scope semantics: list_purchase_orders and get_purchase_order both classify
+ * as `read` under the family router (functions/src/publicApi/apiKeyScopes.ts
+ * → requiredPurchaseOrderApiAccess), so a restricted API key needs at least
+ * one of `*`, `read`, `purchase-orders:*` or `purchase-orders:read`.
+ *
+ * WRITE tools (create draft, send, confirm, cancel, receive, reverse-receipt,
+ * bill) are deliberately NOT exposed here: they move money or stock and need
+ * human-authority semantics (draft → show → confirm) that this surface does not
+ * define. No write route is called from this file or from the client methods.
+ *
+ * NOT IN SCOPE for this surface (correction to a prior brief):
+ *   - Physical count truth (#2355): no callable, no API route. Not designed.
+ *   - Inventory balances (/v1/inventory/balances): ADR 0027 S4, not landed.
+ */
+import { z } from "zod/v4";
+import { withToolLogging, formatPaginatedResponse, formatRecord, listContent, getContent, READ_ONLY_ANNOTATIONS, paginatedOutput, purchaseOrderItemOutput, } from "./shared.js";
+/**
+ * Read tools for purchase orders. Tool names follow the canonical
+ * snake_case convention used across the catalog.
+ */
+export function registerPurchaseOrderTools(server, client) {
+    // -- list_purchase_orders --
+    server.registerTool("list_purchase_orders", {
+        title: "List Purchase Orders",
+        description: "List purchase orders in the workspace with optional filters. " +
+            "Returns one entry per PO with vendor, status, line items and totals. " +
+            "Statuses reflect the server-owned lifecycle (ADR 0027 S2): " +
+            "draft → sent → confirmed → received → billed, with cancel as a terminal branch. " +
+            "/ Lista pedidos de compra del workspace con filtros opcionales. " +
+            "Devuelve un registro por pedido con proveedor, estado, lineas y totales. " +
+            "Los estados reflejan el ciclo de vida del servidor (ADR 0027 S2): " +
+            "borrador → enviado → confirmado → recibido → facturado, con cancelado como rama terminal.",
+        annotations: READ_ONLY_ANNOTATIONS,
+        inputSchema: {
+            status: z
+                .string()
+                .optional()
+                .describe("Filter by PO status (draft, sent, confirmed, received, billed, cancelled) / " +
+                "Filtro por estado del pedido"),
+            vendorId: z
+                .string()
+                .trim()
+                .min(1)
+                .max(128)
+                .optional()
+                .describe("Filter by vendor ID / Filtro por ID de proveedor"),
+            limit: z
+                .number()
+                .int()
+                .min(1)
+                .max(100)
+                .optional()
+                .describe("Max results (1-100) / Resultados maximos"),
+            offset: z
+                .number()
+                .int()
+                .min(0)
+                .optional()
+                .describe("Offset / Desplazamiento"),
+        },
+        outputSchema: paginatedOutput(purchaseOrderItemOutput),
+    }, async ({ status, vendorId, limit, offset }) => withToolLogging("list_purchase_orders", async () => {
+        const result = await client.listPurchaseOrders({ status, vendorId, limit, offset });
+        return {
+            content: [listContent(formatPaginatedResponse("purchase_orders", result))],
+            structuredContent: result,
+        };
+    }));
+    // -- get_purchase_order --
+    server.registerTool("get_purchase_order", {
+        title: "Get Purchase Order",
+        description: "Get a single purchase order by its ID. Returns the full document: " +
+            "vendor, line items, totals, status, issue/expected dates and currency. " +
+            "/ Obtiene un pedido de compra por su ID. Devuelve el documento completo: " +
+            "proveedor, lineas, totales, estado, fechas de emision y esperada y moneda.",
+        annotations: READ_ONLY_ANNOTATIONS,
+        inputSchema: {
+            id: z
+                .string()
+                .trim()
+                .min(1)
+                .max(128)
+                .describe("Purchase-order ID / ID del pedido de compra"),
+        },
+        outputSchema: purchaseOrderItemOutput,
+    }, async ({ id }) => withToolLogging("get_purchase_order", async () => {
+        const result = await client.getPurchaseOrder(id);
+        return {
+            content: [getContent(formatRecord("PurchaseOrder", result))],
+            structuredContent: result,
+        };
+    }));
+}
+//# sourceMappingURL=purchaseOrders.js.map

package/dist/tools/register-all.js

@@ -15,6 +15,7 @@ import { registerClientTools } from "./clients.js";
 import { registerProductTools } from "./products.js";
 import { registerQuoteTools } from "./quotes.js";
 import { registerVendorTools } from "./vendors.js";
+import { registerPurchaseOrderTools } from "./purchaseOrders.js";
 import { registerWebhookTools } from "./webhooks.js";
 import { registerIntelligenceTools } from "./intelligence.js";
 import { registerCrmTools } from "./crm.js";
@@ -89,6 +90,7 @@ export function registerAllTools(server, client) {
     registerProductTools(server, client);
     registerQuoteTools(server, client);
     registerVendorTools(server, client);
+    registerPurchaseOrderTools(server, client);
     registerWebhookTools(server, client);
     registerDepositTools(server, client);
     registerEInvoiceTools(server, client);

package/dist/tools/shared.d.ts

@@ -247,6 +247,48 @@ export declare const vendorItemOutput: z.ZodObject<{
     createdAt: z.ZodOptional<z.ZodString>;
     updatedAt: z.ZodOptional<z.ZodString>;
 }, z.core.$loose>;
+/**
+ * Purchase-order output (ADR 0027 S2, server-owned lifecycle).
+ *
+ * Fields mirror the live API shape returned by /v1/purchase-orders GETs:
+ *   - `status` ∈ {draft, sent, confirmed, received, billed, cancelled}
+ *   - `items[].taxRate` is optional because per-line tax rates may override
+ *     the document tax rate; the family router accepts it as a string-coerced
+ *     number in the request, so the response can carry it.
+ *   - `currency` is an ISO 4217 code (e.g. "EUR"). It is the same code the
+ *     server stamps on the stored doc.
+ *   - `createdAt`/`updatedAt` are ISO 8601; `issueDate`/`expectedDate` are
+ *     YYYY-MM-DD.
+ *
+ * `.passthrough()` preserves receipts (`receipts[]`) and the linked expense
+ * id (`billedExpenseId`) once the order moves past `billed`, plus any
+ * additional fields the server adds in later S-stages without breaking
+ * downstream consumers.
+ */
+export declare const purchaseOrderItemOutput: z.ZodObject<{
+    id: z.ZodString;
+    poNumber: z.ZodOptional<z.ZodString>;
+    vendorId: z.ZodOptional<z.ZodString>;
+    vendorName: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodString>;
+    items: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        description: z.ZodString;
+        quantity: z.ZodNumber;
+        unitPrice: z.ZodNumber;
+        productId: z.ZodOptional<z.ZodString>;
+        taxRate: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$loose>>>;
+    issueDate: z.ZodOptional<z.ZodString>;
+    expectedDate: z.ZodOptional<z.ZodString>;
+    taxRate: z.ZodOptional<z.ZodNumber>;
+    subtotal: z.ZodOptional<z.ZodNumber>;
+    tax: z.ZodOptional<z.ZodNumber>;
+    total: z.ZodOptional<z.ZodNumber>;
+    currency: z.ZodOptional<z.ZodString>;
+    notes: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodOptional<z.ZodString>;
+    updatedAt: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
 export declare const webhookItemOutput: z.ZodObject<{
     id: z.ZodString;
     userId: z.ZodOptional<z.ZodString>;

package/dist/tools/shared.js

@@ -555,6 +555,52 @@ export const vendorItemOutput = z.object({
     createdAt: z.string().optional(),
     updatedAt: z.string().optional(),
 }).passthrough();
+/**
+ * Purchase-order output (ADR 0027 S2, server-owned lifecycle).
+ *
+ * Fields mirror the live API shape returned by /v1/purchase-orders GETs:
+ *   - `status` ∈ {draft, sent, confirmed, received, billed, cancelled}
+ *   - `items[].taxRate` is optional because per-line tax rates may override
+ *     the document tax rate; the family router accepts it as a string-coerced
+ *     number in the request, so the response can carry it.
+ *   - `currency` is an ISO 4217 code (e.g. "EUR"). It is the same code the
+ *     server stamps on the stored doc.
+ *   - `createdAt`/`updatedAt` are ISO 8601; `issueDate`/`expectedDate` are
+ *     YYYY-MM-DD.
+ *
+ * `.passthrough()` preserves receipts (`receipts[]`) and the linked expense
+ * id (`billedExpenseId`) once the order moves past `billed`, plus any
+ * additional fields the server adds in later S-stages without breaking
+ * downstream consumers.
+ */
+export const purchaseOrderItemOutput = z.object({
+    id: z.string(),
+    poNumber: z.string().optional(),
+    vendorId: z.string().optional(),
+    vendorName: z.string().optional(),
+    status: z.string().optional(),
+    items: z
+        .array(z
+        .object({
+        description: z.string(),
+        quantity: z.number(),
+        unitPrice: z.number(),
+        productId: z.string().optional(),
+        taxRate: z.number().optional(),
+    })
+        .passthrough())
+        .optional(),
+    issueDate: z.string().optional(),
+    expectedDate: z.string().optional(),
+    taxRate: z.number().optional(),
+    subtotal: z.number().optional(),
+    tax: z.number().optional(),
+    total: z.number().optional(),
+    currency: z.string().optional(),
+    notes: z.string().optional(),
+    createdAt: z.string().optional(),
+    updatedAt: z.string().optional(),
+}).passthrough();
 export const webhookItemOutput = z.object({
     id: z.string(),
     userId: z.string().optional(),

package/docs/agent-onboarding.json

@@ -68,8 +68,8 @@
       "FRIHET_TOOL_MODE": "grouped"
     },
     "counts": {
-      "toolNames": 161,
-      "readOnly": 81,
+      "toolNames": 163,
+      "readOnly": 83,
       "writesFrihet": 80,
       "externalInteraction": 37,
       "destructive": 60,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@frihet/mcp-server",
-  "version": "2.0.1",
-  "description": "AI-native MCP server for Frihet ERP — 156 canonical operations for invoicing, expenses, CRM, banking, POS and ES/EU fiscal workflows, with conservative capability and side-effect metadata.",
+  "version": "2.0.2",
+  "description": "AI-native MCP server for Frihet ERP — 158 canonical operations for invoicing, expenses, CRM, banking, POS and ES/EU fiscal workflows, with conservative capability and side-effect metadata.",
   "type": "module",
   "main": "./dist/index.js",
   "bin": {
@@ -9,7 +9,7 @@
   },
   "scripts": {
     "build": "tsc",
-    "test": "npm run build && node --test dist/__tests__/resources-eu-catalog.test.js && node --test dist/__tests__/resources-p1-contract.test.js dist/__tests__/openai-profile.test.js dist/__tests__/openai-client-tax-id-contract.test.js dist/__tests__/tool-exposure.test.js dist/__tests__/fiscal-aliases.test.js dist/__tests__/einvoice-tools.test.js dist/__tests__/einvoice-day4-tools.test.js dist/__tests__/expenses-tools.test.js dist/__tests__/stay-tools.test.js dist/__tests__/pos-tools.test.js dist/__tests__/kitchen-tools.test.js dist/__tests__/banking-tools.test.js dist/__tests__/banking-client-contract.test.js dist/__tests__/pagination-cursor-param.test.js dist/__tests__/fiscal-tools.test.js dist/__tests__/fiscal-period-contract.test.js dist/__tests__/time-tools.test.js dist/__tests__/deposits-tools.test.js dist/__tests__/recurring-tools.test.js dist/__tests__/team-tools.test.js dist/__tests__/team-tools-real-sdk.test.js dist/__tests__/d4b-hr-payroll-onboarding-tools.test.js dist/__tests__/hr-payroll-period-contract.test.js dist/__tests__/webhook-crm-reviewed-contract.test.js dist/__tests__/audit-server-version.test.js dist/__tests__/search-tools.test.js dist/__tests__/openai-full-compose.test.js dist/__tests__/openai-review-descriptor.test.js dist/__tests__/directory-profile-policy.test.js dist/__tests__/claude-profile.test.js dist/__tests__/claude-output-privacy.test.js dist/__tests__/claude-write-route-contract.test.js dist/__tests__/contract.test.js dist/__tests__/observability-redaction.test.js dist/__tests__/security-containment-gate0.test.js dist/__tests__/intelligence-duplicate-invoice.test.js dist/__tests__/get-envelope-unwrap-regression.test.js dist/__tests__/binary-content-types.test.js dist/__tests__/api-error-remediation.test.js dist/__tests__/mutation-unwrap-and-schema-regression.test.js dist/__tests__/schema-envelope-guard.test.js dist/__tests__/paginated-strict-output.test.js dist/__tests__/paginated-metadata-contract.test.js dist/__tests__/demo-mode.test.js dist/__tests__/idempotency-key-contract.test.js dist/__tests__/retry-after-contract.test.js dist/__tests__/source-header-contract.test.js dist/__tests__/no-provisioning-credential-to-public-api.test.js dist/__tests__/truth-in-descriptions.test.js dist/__tests__/mcp-baseline-mutation.test.js dist/__tests__/forms-elicitation.test.js dist/__tests__/agent-onboarding.test.js scripts/__tests__/openai-worker-review-wire.test.mjs scripts/__tests__/sync-openapi-retry.test.mjs scripts/__tests__/conformance-provenance.test.mjs scripts/__tests__/conformance-phase0.test.mjs scripts/__tests__/published-artifact-drift.test.mjs scripts/__tests__/cross-surface-authority.test.mjs scripts/__tests__/release-workflow-contract.test.mjs scripts/__tests__/openai-wrangler-resolution.test.mjs scripts/__tests__/audit-mcp-refs-detector.test.mjs scripts/__tests__/openai-public-surface.test.mjs scripts/__tests__/claude-plugin-package.test.mjs scripts/__tests__/claude-hosted-release.test.mjs scripts/__tests__/claude-hosted-acceptance.test.mjs scripts/__tests__/claude-oauth-provider.test.mjs scripts/__tests__/audit-mcp-refs-published-sot.test.mjs scripts/__tests__/claude-bootstrap-secrets.test.mjs scripts/__tests__/no-public-leak.test.mjs",
+    "test": "npm run build && node --test dist/__tests__/resources-eu-catalog.test.js && node --test dist/__tests__/resources-p1-contract.test.js dist/__tests__/openai-profile.test.js dist/__tests__/openai-client-tax-id-contract.test.js dist/__tests__/tool-exposure.test.js dist/__tests__/fiscal-aliases.test.js dist/__tests__/einvoice-tools.test.js dist/__tests__/einvoice-day4-tools.test.js dist/__tests__/expenses-tools.test.js dist/__tests__/stay-tools.test.js dist/__tests__/pos-tools.test.js dist/__tests__/kitchen-tools.test.js dist/__tests__/banking-tools.test.js dist/__tests__/banking-client-contract.test.js dist/__tests__/pagination-cursor-param.test.js dist/__tests__/fiscal-tools.test.js dist/__tests__/fiscal-period-contract.test.js dist/__tests__/time-tools.test.js dist/__tests__/deposits-tools.test.js dist/__tests__/recurring-tools.test.js dist/__tests__/team-tools.test.js dist/__tests__/team-tools-real-sdk.test.js dist/__tests__/d4b-hr-payroll-onboarding-tools.test.js dist/__tests__/hr-payroll-period-contract.test.js dist/__tests__/webhook-crm-reviewed-contract.test.js dist/__tests__/audit-server-version.test.js dist/__tests__/search-tools.test.js dist/__tests__/openai-full-compose.test.js dist/__tests__/openai-review-descriptor.test.js dist/__tests__/directory-profile-policy.test.js dist/__tests__/claude-profile.test.js dist/__tests__/claude-output-privacy.test.js dist/__tests__/claude-write-route-contract.test.js dist/__tests__/contract.test.js dist/__tests__/observability-redaction.test.js dist/__tests__/security-containment-gate0.test.js dist/__tests__/intelligence-duplicate-invoice.test.js dist/__tests__/get-envelope-unwrap-regression.test.js dist/__tests__/binary-content-types.test.js dist/__tests__/api-error-remediation.test.js dist/__tests__/mutation-unwrap-and-schema-regression.test.js dist/__tests__/schema-envelope-guard.test.js dist/__tests__/paginated-strict-output.test.js dist/__tests__/paginated-metadata-contract.test.js dist/__tests__/purchase-orders-tools.test.js dist/__tests__/purchase-orders-client-contract.test.js dist/__tests__/demo-mode.test.js dist/__tests__/idempotency-key-contract.test.js dist/__tests__/retry-after-contract.test.js dist/__tests__/source-header-contract.test.js dist/__tests__/no-provisioning-credential-to-public-api.test.js dist/__tests__/truth-in-descriptions.test.js dist/__tests__/mcp-baseline-mutation.test.js dist/__tests__/forms-elicitation.test.js dist/__tests__/agent-onboarding.test.js scripts/__tests__/openai-worker-review-wire.test.mjs scripts/__tests__/sync-openapi-retry.test.mjs scripts/__tests__/conformance-provenance.test.mjs scripts/__tests__/conformance-phase0.test.mjs scripts/__tests__/published-artifact-drift.test.mjs scripts/__tests__/cross-surface-authority.test.mjs scripts/__tests__/release-workflow-contract.test.mjs scripts/__tests__/openai-wrangler-resolution.test.mjs scripts/__tests__/audit-mcp-refs-detector.test.mjs scripts/__tests__/openai-public-surface.test.mjs scripts/__tests__/claude-plugin-package.test.mjs scripts/__tests__/claude-hosted-release.test.mjs scripts/__tests__/claude-hosted-acceptance.test.mjs scripts/__tests__/claude-oauth-provider.test.mjs scripts/__tests__/audit-mcp-refs-published-sot.test.mjs scripts/__tests__/claude-bootstrap-secrets.test.mjs scripts/__tests__/no-public-leak.test.mjs",
     "canary:mcp": "npm run build && node scripts/canary-mcp.mjs",
     "canary:mcp:check": "npm run build && node scripts/canary-mcp.mjs --check",
     "canary:mcp:snapshot": "npm run build && node scripts/canary-mcp.mjs --snapshot",
@@ -121,17 +121,17 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@modelcontextprotocol/sdk": "1.31.0"
+    "@modelcontextprotocol/sdk": "1.32.2"
   },
   "overrides": {
-    "hono": ">=4.13.13",
-    "ip-address": ">=10.7.3",
+    "hono": ">=4.13.16 <5",
+    "ip-address": ">=10.7.6 <11",
     "proxy-addr": ">=2.0.8",
-    "qs": ">=6.15.4",
+    "qs": ">=6.17.1 <7",
     "@ai-sdk/provider-utils": ">=4.0.33 <5"
   },
   "peerDependencies": {
-    "zod": ">=3.25.1"
+    "zod": "^4.6.6"
   },
   "peerDependenciesMeta": {
     "zod": {
@@ -142,6 +142,6 @@
     "@types/node": "^22.0.0",
     "typescript": "^5.7.0",
     "ajv": "8.18.0",
-    "zod": "^3.25.1"
+    "zod": "^4.6.7"
   }
 }