ofw-mcp 2.19.5 → 2.20.0

package/dist/config.js

@@ -51,6 +51,43 @@ export function getUploadDir() {
         return override.trim();
     return getAttachmentsDir();
 }
+/**
+ * Structural surface restrictions for deployments dedicated to reimbursement
+ * automation.
+ *
+ * OFW_EXPENSE_ONLY=true removes every non-expense registrar except the
+ * healthcheck. Message, calendar, journal and profile/dashboard tools simply do
+ * not exist in the server's tools/list response.
+ *
+ * OFW_EXPENSE_UPLOAD_ONLY=true is stricter and implies OFW_EXPENSE_ONLY: only
+ * ofw_upload_expense_pdf + ofw_create_expense + ofw_update_expense (plus
+ * ofw_healthcheck) register.
+ * Expense reads such as totals/list are omitted as well.
+ *
+ * These are startup-time structural controls. They cannot be raised by a tool
+ * argument, prompt injection, or host permission setting.
+ *
+ * Unrecognized non-empty values fail CLOSED to true. A typo in a restriction
+ * flag must never silently widen the server surface.
+ */
+function restrictiveBoolEnv(name) {
+    const raw = process.env[name];
+    if (typeof raw !== 'string' || raw.trim().length === 0)
+        return false;
+    const value = raw.trim().toLowerCase();
+    if (['1', 'true', 'yes', 'on'].includes(value))
+        return true;
+    if (['0', 'false', 'no', 'off'].includes(value))
+        return false;
+    console.error(`[ofw-mcp] Unrecognized ${name} "${raw.trim()}" — failing closed to "true" (restriction enabled). Valid values: true, false.`);
+    return true;
+}
+export function getExpenseUploadOnly() {
+    return restrictiveBoolEnv('OFW_EXPENSE_UPLOAD_ONLY');
+}
+export function getExpenseOnly() {
+    return getExpenseUploadOnly() || restrictiveBoolEnv('OFW_EXPENSE_ONLY');
+}
 /**
  * Gate for write-tool registration, read at registration time (startup).
  *

package/dist/index.js

@@ -19,6 +19,7 @@ import { registerExpenseTools } from './tools/expenses.js';
 import { registerJournalTools } from './tools/journal.js';
 import { OFWCache } from './cache/node.js';
 import { getCacheDbPath } from './config.js';
+import { selectToolRegistrars } from './tool-surface.js';
 import { NodeAttachmentIO } from './tools/attachments.js';
 // The stdio server backs the message cache with a local `node:sqlite` file,
 // opened lazily on first use (so the server still boots and answers the host's
@@ -34,17 +35,20 @@ const nodeAttachmentIO = new NodeAttachmentIO();
 // is preserved: `client` is constructed at module load in ./client.js (auth is
 // resolved lazily on the first tool call), so the host's initial tools/list
 // always succeeds before any credential check runs.
+const expenseRegistrar = (server, deps) => registerExpenseTools(server, deps, nodeAttachmentIO);
+const messageRegistrar = (server, deps) => registerMessageTools(server, deps, nodeCacheProvider, nodeAttachmentIO);
+const tools = selectToolRegistrars({
+    healthcheck: registerHealthcheckTools,
+    user: registerUserTools,
+    messages: messageRegistrar,
+    calendar: registerCalendarTools,
+    expenses: expenseRegistrar,
+    journal: registerJournalTools,
+});
 await runMcp({
     name: 'ofw',
-    version: '2.19.5', // x-release-please-version
+    version: '2.20.0', // x-release-please-version
     deps: client,
-    tools: [
-        registerHealthcheckTools,
-        registerUserTools,
-        (server, deps) => registerMessageTools(server, deps, nodeCacheProvider, nodeAttachmentIO),
-        registerCalendarTools,
-        registerExpenseTools,
-        registerJournalTools,
-    ],
+    tools,
     banner: '[ofw-mcp] This project was developed and is maintained by AI (Claude Sonnet 4.6). Use at your own discretion.',
 });

package/dist/tool-surface.js

@@ -0,0 +1,14 @@
+import { getExpenseOnly } from './config.js';
+/**
+ * Select the registrars exposed by this deployment.
+ *
+ * Expense-only mode is structural: omitted registrars are never handed to
+ * runMcp, so their tools cannot appear in tools/list or be invoked by name.
+ * OFW_EXPENSE_UPLOAD_ONLY implies this same registrar restriction and the
+ * expense registrar itself removes its read tools.
+ */
+export function selectToolRegistrars(r) {
+    if (getExpenseOnly())
+        return [r.healthcheck, r.expenses];
+    return [r.healthcheck, r.user, r.messages, r.calendar, r.expenses, r.journal];
+}

package/dist/tools/_shared.js

@@ -292,11 +292,15 @@ export async function requestWrite(client, method, path, body) {
  * may have landed and names how to check before any retry.
  */
 export function unconfirmedWriteResponse(e, opts) {
+    // The web app is the fallback for a checkWith that names a tool. A checkWith
+    // that already sends the caller to the web app (a deployment where the list
+    // tool is not registered) needs no second mention of it.
+    const fallback = /ourfamilywizard\.com/i.test(opts.checkWith) ? '' : ' (or on ourfamilywizard.com)';
     return jsonErrorResponse({
         result: opts.result,
         mayHaveLanded: true,
         reason: `The request to ${opts.what} failed without a definitive answer from OFW: ${e.message}. It MAY HAVE BEEN APPLIED on OurFamilyWizard.`,
-        remedy: `Do NOT retry blindly — a second attempt can put a duplicate on the co-parent-visible record. First check with ${opts.checkWith} (or on ourfamilywizard.com), and retry only once you have confirmed it did not land.`,
+        remedy: `Do NOT retry blindly — a second attempt can put a duplicate on the co-parent-visible record. First check with ${opts.checkWith}${fallback}, and retry only once you have confirmed it did not land.`,
     });
 }
 export async function postMessageAndRefetch(client, payload, detailSchema, ctx) {