ofw-mcp 2.19.4 → 2.20.0

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "OurFamilyWizard tools for Claude Code",
-    "version": "2.19.4"
+    "version": "2.20.0"
   },
   "plugins": [
     {
@@ -14,7 +14,7 @@
       "displayName": "OurFamilyWizard",
       "source": "./",
       "description": "OurFamilyWizard co-parenting tools for Claude — messages, calendar, expenses, and journal via MCP",
-      "version": "2.19.4",
+      "version": "2.20.0",
       "author": {
         "name": "Chris Chall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ofw",
   "displayName": "OurFamilyWizard",
-  "version": "2.19.4",
+  "version": "2.20.0",
   "description": "OurFamilyWizard co-parenting tools for Claude — messages, calendar, expenses, and journal via MCP",
   "author": {
     "name": "Chris Chall"

package/README.md

@@ -97,7 +97,7 @@ Ask Claude: *"What does my OFW dashboard look like?"* — it should show your un
 `ofw-mcp` tries three auth paths in order; whichever succeeds first is used. Existing setups keep working unchanged.
 
 1. **Env-var credentials (legacy, recommended for Claude Desktop).** Set `OFW_USERNAME` + `OFW_PASSWORD` and the server logs in via OFW's form endpoint. This is the path shown in the Claude Desktop config above.
-2. **fetchproxy fallback (no env vars needed).** When the credentials are absent, the server reads `localStorage["auth"]` once at startup from your already-signed-in `ourfamilywizard.com` tab via the [fetchproxy](https://github.com/chrischall/fetchproxy) browser extension. After that one read, all OFW API calls go directly from Node — the extension is **not** in the request hot path. Install the fetchproxy extension (Chrome Web Store / Safari `.dmg`), sign into OurFamilyWizard once, and the MCP just works. If you have multiple OFW accounts and want them to use separate caches, set `OFW_CACHE_IDENTITY` to a label per profile.
+2. **fetchproxy fallback (no env vars needed).** When the credentials are absent, the server reads `localStorage["auth"]` once at startup from your already-signed-in `ourfamilywizard.com` tab via the **ContextMint Bridge** browser extension (built on [fetchproxy](https://github.com/chrischall/fetchproxy)). After that one read, all OFW API calls go directly from Node — the extension is **not** in the request hot path. Install ContextMint Bridge from its [releases page](https://github.com/nullnet-app/contextmint-bridge/releases) (Chrome: download the Chrome zip, unzip it, and load it unpacked at `chrome://extensions` with Developer mode on; Safari is not available yet — it will ship inside the ContextMint app, which has no public download — so use Chrome for now), sign into OurFamilyWizard once, and the MCP just works. ContextMint Bridge is the fetchproxy browser extension under its new name, from the same maintainer — fetchproxy's own README (https://github.com/chrischall/fetchproxy#extension) points to it. Its source is public at https://github.com/nullnet-app/contextmint-bridge: build it yourself, or check a release zip against the `.sha256` file published beside it (`shasum -a 256 -c contextmint-bridge-chrome-<version>.zip.sha256`). If you have multiple OFW accounts and want them to use separate caches, set `OFW_CACHE_IDENTITY` to a label per profile.
 3. **Error.** If neither path is available, the server tells you exactly which fix to apply. Set `OFW_DISABLE_FETCHPROXY=1` to skip the fetchproxy fallback entirely (turns missing credentials into a hard error — useful in headless CI).
 
 ### Credential options (env-var path)
@@ -151,7 +151,10 @@ Read-only tools run automatically. Writes that reach your co-parent or the court
 | `ofw_delete_event` | Delete a calendar event | Confirm (server) if shared | `all` (or `drafts` + `OFW_CALENDAR_WRITES`) |
 | `ofw_get_expense_totals` | Expense summary totals | Auto | any |
 | `ofw_list_expenses` | Expense history | Auto | any |
-| `ofw_create_expense` | Log a new expense | Confirm (server) | `all` |
+| `ofw_list_expense_categories` | Expense category ids and split metadata | Auto | any |
+| `ofw_upload_expense_pdf` | Upload a receipt PDF to My Files for an expense (SHARED — the co-parent sees it in My Files at once, even on a private expense) | Confirm (server) | `all` |
+| `ofw_create_expense` | Log a new expense; supports private entries and one receipt PDF | Confirm (server) | `all` |
+| `ofw_update_expense` | Change an expense, e.g. publish a private one. Pass only the fields to change; it reads the expense first so the rest are kept | Confirm (server) | `all` |
 | `ofw_list_journal_entries` | Journal entries | Auto | any |
 | `ofw_create_journal_entry` | Create a journal entry | Confirm | `all` |
 
@@ -250,6 +253,26 @@ The host's "Confirm" permission above is a *hint* to the MCP host — a host con
 
 Unrecognized values fail closed to `none`, with a warning on stderr — a typo never silently grants write access.
 
+#### Expense-only deployments
+
+For a dedicated reimbursement integration, you can also structurally remove unrelated OFW capabilities:
+
+| Setting | Registered surface |
+|---|---|
+| `OFW_EXPENSE_ONLY=true` | `ofw_healthcheck` plus the expense tools only. Profile/dashboard, messages, calendar, and journal tools do not exist. |
+| `OFW_EXPENSE_UPLOAD_ONLY=true` | Strictest mode: `ofw_healthcheck`, `ofw_upload_expense_pdf`, `ofw_create_expense`, and `ofw_update_expense` only. Expense totals/listing are removed too. This flag implies `OFW_EXPENSE_ONLY`. |
+
+These flags are registration-time restrictions, not prompt instructions. A host cannot call a tool that was never registered. Unrecognized non-empty flag values fail closed to the restricted state. `OFW_WRITE_MODE` still applies underneath; for the strict upload workflow set `OFW_WRITE_MODE=all` so expense creation is available.
+
+Recommended reimbursement-only deployment:
+
+```env
+OFW_EXPENSE_UPLOAD_ONLY=true
+OFW_WRITE_MODE=all
+OFW_ALLOW_MARK_READ=false
+```
+
+
 ### Reading is a write, too (`OFW_ALLOW_MARK_READ`)
 
 Fetching a message body for the first time marks it read on OurFamilyWizard and stamps a **"First Viewed" timestamp your co-parent can see**. That is part of the record and cannot be undone — and it happens as a side effect of an ordinary read, so `OFW_WRITE_MODE` does not govern it.
@@ -275,9 +298,9 @@ Every outbound request passes its constructed URL through a host check before `f
 
 **"0 messages"** — Claude may have read the notification counts rather than the actual messages. Ask explicitly: *"List the messages in my OFW inbox"* or *"Use ofw_list_message_folders then ofw_list_messages"*.
 
-**"OFW auth: set OFW_USERNAME + OFW_PASSWORD, or install the fetchproxy extension…"** — neither auth path is configured. Either fill in the `env` block in your Claude Desktop config, or install the [fetchproxy extension](https://github.com/chrischall/fetchproxy) and sign into `ourfamilywizard.com` in your browser.
+**"OFW auth: set OFW_USERNAME + OFW_PASSWORD, or install ContextMint Bridge…"** — neither auth path is configured. Either fill in the `env` block in your Claude Desktop config, or install [ContextMint Bridge](https://github.com/nullnet-app/contextmint-bridge/releases) and sign into `ourfamilywizard.com` in your browser.
 
-**"fetchproxy fallback failed"** — the env-var path wasn't configured and the extension couldn't be reached. Confirm the fetchproxy extension is installed, signed into OFW, and that it's running (open the extension popup). If you want to disable the fallback entirely, set `OFW_DISABLE_FETCHPROXY=1`.
+**"fetchproxy fallback failed"** / **"ContextMint Bridge is down"** — the env-var path wasn't configured and the extension couldn't be reached. Confirm ContextMint Bridge is installed, signed into OFW, and that it's running (open the extension popup). If you want to disable the fallback entirely, set `OFW_DISABLE_FETCHPROXY=1`.
 
 **"OFW login not attempted — this OurFamilyWizard email and password were already rejected"** — OFW refused these credentials earlier in this session. OFW counts failed sign-ins against the account, so the server does not re-send a rejected password on every call. Update `OFW_USERNAME` / `OFW_PASSWORD` to your current login (or restart the server) and try again.
 

package/dist/auth.js

@@ -25,7 +25,7 @@
 //
 //   2. fetchproxy fallback (new)
 //      When credentials are absent, we try to lift the user's session
-//      out of their signed-in browser tab via the fetchproxy extension.
+//      out of their signed-in browser tab via ContextMint Bridge (fetchproxy).
 //      The `@fetchproxy/bootstrap` helper spins up a one-shot WebSocket
 //      bridge, asks the extension for `localStorage["auth"]` and
 //      `localStorage["tokenExpiry"]` from any ourfamilywizard.com tab,
@@ -80,7 +80,7 @@ function fetchproxyDisabled() {
  * silently stopping matching the day this wording changed.
  */
 export const NO_AUTH_CONFIGURED = 'OFW auth: set OFW_USERNAME + OFW_PASSWORD, ' +
-    'or install the fetchproxy extension and sign into ourfamilywizard.com ' +
+    'or install ContextMint Bridge and sign into ourfamilywizard.com ' +
     '(unset OFW_DISABLE_FETCHPROXY if it is set).';
 /**
  * Prefix of the message raised when the fetchproxy bridge is unreachable.
@@ -92,7 +92,7 @@ export const NO_AUTH_CONFIGURED = 'OFW auth: set OFW_USERNAME + OFW_PASSWORD, '
  * day the wording changed, while silently misreporting a downed bridge as an
  * unconfigured server.
  */
-export const BRIDGE_DOWN_PREFIX = 'OFW auth: fetchproxy bridge is down';
+export const BRIDGE_DOWN_PREFIX = 'OFW auth: ContextMint Bridge is down';
 /** True for the {@link BRIDGE_DOWN_PREFIX} failure and nothing else. */
 export function isBridgeDown(e) {
     return e instanceof Error && e.message.startsWith(BRIDGE_DOWN_PREFIX);
@@ -145,7 +145,7 @@ export async function resolveAuth() {
                 const expiryRaw = session.localStorage['tokenExpiry'];
                 if (!token) {
                     throw new Error('localStorage["auth"] missing on ourfamilywizard.com. ' +
-                        'Sign into OFW in your browser (with the fetchproxy extension installed) and retry.');
+                        'Sign into OFW in your browser (with ContextMint Bridge installed) and retry.');
                 }
                 return {
                     credential: token,