senado-br-mcp 3.12.1 → 3.13.0

package/README.md

@@ -752,7 +752,7 @@ Reads a bundled snapshot of the Senate's organizational tree (crawled from the i
 
 ### Group U — Deep Research (2 tools)
 
-The [OpenAI Deep Research contract](#chatgpt-deep-research): the only two tools without the `senado_` prefix, because the names are fixed by the contract. Registered through the same shim as the others (read-only annotations, permissive `outputSchema`, per-tool telemetry) and served on `/mcp` only — the curated ChatGPT app profile does not include them. The index (senators in office + active committees, ~300 documents) is built on first use from the same two list endpoints the `senado_listar_*` tools read, and kept for 24 h.
+The [OpenAI Deep Research contract](#chatgpt-deep-research): the only two tools without the `senado_` prefix, because the names are fixed by the contract. Registered through the same shim as the others (read-only annotations, the shared output envelope — open data plus required `provenance` + `attribution` —, per-tool telemetry) and served on `/mcp` only — the curated ChatGPT app profile does not include them. The index (senators in office + active committees, ~300 documents) is built on first use from the same two list endpoints the `senado_listar_*` tools read, and kept for 24 h.
 
 | Tool | Description |
 |------|-------------|

package/dist/server.js

@@ -4,6 +4,7 @@
  */
 import { McpServer } from "@modelcontextprotocol/server";
 import { z } from "zod";
+import { ConciseBlockSchema } from "@sbissoli/mcp-provenance";
 import { registerReferenciaTools } from "./tools/referencia.js";
 import { registerSenadoresTools } from "./tools/senadores.js";
 import { registerMateriasTools } from "./tools/materias.js";
@@ -83,10 +84,23 @@ export function createServer(env, ctx, options = {}) {
     // reaches external systems (Senate APIs / e-Cidadania) whose data is an open, changing
     // set; and every tool returns a JSON object via toolResult(). Rather than repeat that
     // metadata at every call site, wrap the group modules' `server.tool(name, desc, shape, cb)`
-    // calls and route them through registerTool() with shared annotations and a permissive
-    // object outputSchema. toolResult() supplies the matching structuredContent. The callback
-    // is also wrapped with instrumentTool() so every invocation is counted per tool.
-    const outputSchema = z.object({}).passthrough();
+    // calls and route them through registerTool() with shared annotations and ONE shared
+    // outputSchema. The callback is also wrapped with instrumentTool() so every invocation
+    // is counted per tool.
+    //
+    // O schema de saída é o ENVELOPE COMUM (decisão do dono, 04/10/2026): aberto — a forma
+    // dos dados de cada tool segue sem contrato, como decidido em
+    // docs/_local/_checklist-melhorias-arquiteturais.pt-BR.md ("passthrough foi decisão
+    // deliberada") —, mas com o que TODA resposta de sucesso das 69 carrega obrigatório:
+    // `provenance` + `attribution`, que `resultWithProvenance`/`provenanceExtras` sempre
+    // montam. O bloco é o schema IMPORTADO do @sbissoli/mcp-provenance, nunca transcrito:
+    // a cópia à mão de um bloco selado derrubou quatro irmãos quando o contrato ganhou
+    // `retrieval`. `provenance` é objeto com uma fonte e LISTA quando a chamada passa
+    // várias (o índice do Deep Research), então os dois.
+    const outputSchema = z.looseObject({
+        provenance: z.union([ConciseBlockSchema, z.array(ConciseBlockSchema).min(1)]),
+        attribution: z.array(z.string()),
+    });
     const registerTool = server.registerTool.bind(server);
     const analytics = env.SENADO_ANALYTICS;
     // O shim é instalado sobre a instância e o resultado é NOMEADO: os módulos de

package/dist/version.js

@@ -1,3 +1,3 @@
 /** Single source of truth for the server version (kept in sync with package.json). */
-export const VERSION = "3.12.1";
+export const VERSION = "3.13.0";
 export const USER_AGENT = `senado-br-mcp/${VERSION} (+https://senado.sidneybissoli.com; sbissoli76@gmail.com)`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "senado-br-mcp",
-  "version": "3.12.1",
+  "version": "3.13.0",
   "description": "MCP server for Brazilian Senate open data — runs hosted on Cloudflare Workers or locally via npx (stdio)",
   "license": "MIT",
   "type": "module",
@@ -62,7 +62,7 @@
     "@modelcontextprotocol/client": "^2.0.0",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "@sbissoli/mcp-evals": "^0.1.0",
-    "@sbissoli/mcp-surface": "^0.1.1",
+    "@sbissoli/mcp-surface": "^0.2.0",
     "@types/node": "^26.5.1",
     "agents": "^0.24.0",
     "exceljs": "^4.4.0",