tender-mcp 1.0.1 → 1.2.0

package/package.json

@@ -1,12 +1,26 @@
 {
   "name": "tender-mcp",
-  "version": "1.0.1","mcpName": "io.github.OjasKord/tender-mcp",
+  "version": "1.2.0",
+  "mcpName": "io.github.OjasKord/tender-mcp",
   "description": "Government tender search and AI opportunity scoring for AI agents. UK Contracts Finder, EU TED, US SAM.gov.",
   "main": "src/server.js",
-  "scripts": { "start": "node src/server.js" },
-  "keywords": ["mcp", "agent", "tender", "procurement", "government", "contracts", "bidding"],
+  "scripts": {
+    "start": "node src/server.js"
+  },
+  "keywords": [
+    "mcp",
+    "agent",
+    "tender",
+    "procurement",
+    "government",
+    "contracts",
+    "bidding"
+  ],
   "author": "Kord Agencies",
   "license": "UNLICENSED",
   "homepage": "https://kordagencies.com",
-  "repository": { "type": "git", "url": "https://github.com/OjasKord/tender-mcp.git" }
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/OjasKord/tender-mcp.git"
+  }
 }

package/server.json

@@ -7,13 +7,13 @@
     "url": "https://github.com/OjasKord/tender-mcp",
     "source": "github"
   },
-  "version": "1.0.0",
+  "version": "1.0.1",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "tender-mcp",
-      "version": "1.0.0",
+      "version": "1.0.1",
       "transport": { "type": "stdio" }
     }
   ],

package/src/server.js

@@ -3,6 +3,7 @@ const https = require('https');
 const crypto = require('crypto');
 const fs = require('fs');
 
+const VERSION = '1.2.0';
 const PERSIST_FILE = '/tmp/tender_stats.json';
 const RESEND_API_KEY = process.env.RESEND_API_KEY || '';
 const ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY || '';
@@ -13,17 +14,32 @@ const STATS_KEY = process.env.STATS_KEY || 'ojas2026';
 const freeTierUsage = new Map();
 const usageLog = [];
 const FREE_TIER_LIMIT = 10;
+const FREE_TIER_WARNING = 8;
 const apiKeys = new Map();
 const PLAN_LIMITS = { pro: 500, enterprise: Infinity };
 
 const LEGAL_DISCLAIMER = 'Tender data is sourced directly from official government portals: UK Contracts Finder (contractsfinder.service.gov.uk), EU TED (ted.europa.eu), and US SAM.gov (sam.gov). We do not log or store your query content. Tender deadlines and contract values may change — always verify directly with the contracting authority before submitting a bid. Results are for informational purposes only. Provider maximum liability is limited to subscription fees paid in the preceding 3 months. Full terms: kordagencies.com/terms.html';
 
 function nowISO() { return new Date().toISOString(); }
+function getTodayDate() { return new Date().toISOString().split('T')[0]; }
+function getDateDaysAgo(days) {
+  const d = new Date(Date.now() - days * 24 * 60 * 60 * 1000);
+  return d.toISOString().split('T')[0];
+}
+function getSAMDate(daysAgo) {
+  const d = new Date(Date.now() - daysAgo * 24 * 60 * 60 * 1000);
+  return (d.getMonth()+1).toString().padStart(2,'0') + '/' + d.getDate().toString().padStart(2,'0') + '/' + d.getFullYear();
+}
+
 function saveStats() {
   try {
-    fs.writeFileSync(PERSIST_FILE, JSON.stringify({ freeTierUsage: Array.from(freeTierUsage.entries()), usageLog: usageLog.slice(-1000) }));
+    fs.writeFileSync(PERSIST_FILE, JSON.stringify({
+      freeTierUsage: Array.from(freeTierUsage.entries()),
+      usageLog: usageLog.slice(-1000)
+    }));
   } catch(e) { console.error('Stats save error:', e.message); }
 }
+
 function loadStats() {
   try {
     if (fs.existsSync(PERSIST_FILE)) {
@@ -34,6 +50,7 @@ function loadStats() {
     }
   } catch(e) { console.error('Stats load error:', e.message); }
 }
+
 function generateApiKey() { return 'tender_' + crypto.randomBytes(24).toString('hex'); }
 function getPlanFromProduct(name) {
   if (!name) return 'pro';
@@ -61,7 +78,7 @@ async function sendApiKeyEmail(email, apiKey, plan) {
 
 async function callClaude(prompt) {
   return new Promise((resolve, reject) => {
-    const body = JSON.stringify({ model: 'claude-sonnet-4-20250514', max_tokens: 1024, messages: [{ role: 'user', content: prompt }] });
+    const body = JSON.stringify({ model: 'claude-sonnet-4-6', max_tokens: 1024, messages: [{ role: 'user', content: prompt }] });
     const req = https.request({
       hostname: 'api.anthropic.com', path: '/v1/messages', method: 'POST',
       headers: { 'x-api-key': ANTHROPIC_API_KEY, 'anthropic-version': '2023-06-01', 'content-type': 'application/json', 'content-length': Buffer.byteLength(body) }
@@ -70,23 +87,8 @@ async function callClaude(prompt) {
   });
 }
 
-function getTodayDate() {
-  const d = new Date();
-  return d.toISOString().split('T')[0];
-}
-function getDateDaysAgo(days) {
-  const d = new Date(Date.now() - days * 24 * 60 * 60 * 1000);
-  return d.toISOString().split('T')[0];
-}
-function getSAMDate(daysAgo) {
-  const d = new Date(Date.now() - daysAgo * 24 * 60 * 60 * 1000);
-  return (d.getMonth()+1).toString().padStart(2,'0') + '/' + d.getDate().toString().padStart(2,'0') + '/' + d.getFullYear();
-}
+// ─── DATA SOURCES ─────────────────────────────────────────────────────────────
 
-// ─── FIX 1: UK Contracts Finder ───────────────────────────────────────────────
-// REMOVED client-side keyword filter. The OCDS endpoint has no keyword param —
-// it returns notices by date. Filtering a small page by keyword wiped all results.
-// We now return all results from the date window and let the AI scoring tool filter.
 async function searchUKTenders(keyword, limit, daysOld) {
   return new Promise((resolve) => {
     const from = getDateDaysAgo(daysOld || 30);
@@ -102,149 +104,86 @@ async function searchUKTenders(keyword, limit, daysOld) {
       res.on('end', () => {
         try {
           const data = JSON.parse(d);
-          const releases = data.releases || [];
-          console.log('UK raw releases count:', releases.length);
-          resolve({ source: 'UK_CONTRACTS_FINDER', data: releases, total: releases.length });
+          resolve({ source: 'UK_CONTRACTS_FINDER', data: data.releases || [], total: (data.releases || []).length });
         } catch(e) {
-          console.error('UK parse error:', e.message, 'body:', d.slice(0, 200));
-          resolve({ source: 'UK_CONTRACTS_FINDER', error: 'Parse error: ' + e.message });
+          resolve({ source: 'UK_CONTRACTS_FINDER', error: 'UK Contracts Finder temporarily unavailable. Not a problem with your search — retry in a few minutes.' });
         }
       });
     });
-    req.on('error', e => resolve({ source: 'UK_CONTRACTS_FINDER', error: 'UK Contracts Finder API is temporarily unavailable. This is not a problem with your search. Retry in a few minutes.' }));
-    req.setTimeout(10000, () => { req.destroy(); resolve({ source: 'UK_CONTRACTS_FINDER', error: 'UK Contracts Finder API timed out. Retry in a few minutes.' }); });
+    req.on('error', () => resolve({ source: 'UK_CONTRACTS_FINDER', error: 'UK Contracts Finder temporarily unavailable. Retry in a few minutes.' }));
+    req.setTimeout(10000, () => { req.destroy(); resolve({ source: 'UK_CONTRACTS_FINDER', error: 'UK Contracts Finder timed out. Retry in a few minutes.' }); });
     req.end();
   });
 }
 
-// ─── FIX 2: EU TED ────────────────────────────────────────────────────────────
-// THREE bugs fixed:
-// 1. Request field names were wrong: pageSize/pageNumber/sortField/sortOrder/scope/onlyLatestVersions
-//    are all invalid. Correct fields are: query, page, limit, fields (required).
-// 2. query value must use TED expert query syntax: "FT~keyword" not plain "keyword".
-//    Plain keyword caused a QUERY_SYNTAX_ERROR and returned an error object (not notices).
-// 3. fields array is required — API returns validation error if omitted.
-// 4. normaliseEUTender updated to match actual response structure:
-//    - TI is multilingual object: use TI.eng
-//    - notice-title is multilingual object: use notice-title.eng
-//    - TVH is an array: use TVH[0]
-//    - CY is an array: use CY[0]
-//    - PD has timezone suffix: strip it
-//    - ND is the publication number (e.g. "172535-2016")
-//    - URL uses ND directly: ted.europa.eu/en/notice/{ND}/html
 async function searchEUTenders(keyword, limit) {
   return new Promise((resolve) => {
-    // Build TED expert query: FT~keyword for full-text stemmed search
-    // Add date filter: PD >= YYYYMMDD for recent notices only
     const fromDate = getDateDaysAgo(30).replace(/-/g, '');
     const tedQuery = keyword
       ? 'FT~' + keyword.replace(/[^a-zA-Z0-9 ]/g, '') + ' AND PD>=' + fromDate
       : 'PD>=' + fromDate;
-
     const body = JSON.stringify({
-      query: tedQuery,
-      page: 1,
-      limit: Math.min(limit || 10, 25),
+      query: tedQuery, page: 1, limit: Math.min(limit || 10, 25),
       fields: ['ND', 'TI', 'PD', 'CY', 'notice-title', 'TVH', 'TV', 'notice-type', 'organisation-name-buyer', 'deadline-date-lot', 'links']
     });
-
     const req = https.request({
-      hostname: 'api.ted.europa.eu',
-      path: '/v3/notices/search',
-      method: 'POST',
-      headers: {
-        'Content-Type': 'application/json',
-        'Accept': 'application/json',
-        'Content-Length': Buffer.byteLength(body),
-        'User-Agent': 'Tender-MCP/1.0'
-      }
+      hostname: 'api.ted.europa.eu', path: '/v3/notices/search', method: 'POST',
+      headers: { 'Content-Type': 'application/json', 'Accept': 'application/json', 'Content-Length': Buffer.byteLength(body), 'User-Agent': 'Tender-MCP/1.0' }
     }, res => {
       let d = ''; res.on('data', c => d += c);
       res.on('end', () => {
         try {
           const parsed = JSON.parse(d);
-          console.log('EU TED raw response keys:', Object.keys(parsed), 'notices count:', parsed.notices ? parsed.notices.length : 'n/a');
-          if (parsed.message) {
-            // API returned an error (syntax error, validation error, etc.)
-            console.error('EU TED API error:', parsed.message);
-            resolve({ source: 'EU_TED', error: 'EU TED API error: ' + parsed.message });
-          } else {
-            resolve({ source: 'EU_TED', data: parsed });
-          }
-        } catch(e) {
-          console.error('EU TED parse error:', e.message, 'body:', d.slice(0, 200));
-          resolve({ source: 'EU_TED', error: 'Parse error: ' + e.message });
-        }
+          if (parsed.message) { resolve({ source: 'EU_TED', error: 'EU TED API error: ' + parsed.message }); }
+          else { resolve({ source: 'EU_TED', data: parsed }); }
+        } catch(e) { resolve({ source: 'EU_TED', error: 'EU TED parse error. Retry in a few minutes.' }); }
       });
     });
-    req.on('error', e => resolve({ source: 'EU_TED', error: 'EU TED API is temporarily unavailable. This is not a problem with your search. Retry in a few minutes.' }));
-    req.setTimeout(15000, () => { req.destroy(); resolve({ source: 'EU_TED', error: 'EU TED API timed out. Retry in a few minutes.' }); });
+    req.on('error', () => resolve({ source: 'EU_TED', error: 'EU TED temporarily unavailable. Retry in a few minutes.' }));
+    req.setTimeout(15000, () => { req.destroy(); resolve({ source: 'EU_TED', error: 'EU TED timed out. Retry in a few minutes.' }); });
     req.write(body); req.end();
   });
 }
 
-// ─── FIX 3: SAM.gov ───────────────────────────────────────────────────────────
-// DEMO_KEY returns empty response (rate limited at 10/day).
-// Also added error detection: if response body is empty or not valid JSON, handle gracefully.
-// Path confirmed as /prod/opportunities/v2/search — keeping as-is.
 async function searchSAMGov(keyword, limit, daysOld) {
   return new Promise((resolve) => {
     const apiKey = SAM_GOV_API_KEY || 'DEMO_KEY';
     const params = new URLSearchParams({
-      api_key: apiKey,
-      q: keyword || '',
+      api_key: apiKey, q: keyword || '',
       limit: String(Math.min(limit || 10, 25)),
-      postedFrom: getSAMDate(daysOld || 30),
-      postedTo: getSAMDate(0),
-      ptype: 'o'
+      postedFrom: getSAMDate(daysOld || 30), postedTo: getSAMDate(0), ptype: 'o'
     });
     const req = https.request({
-      hostname: 'api.sam.gov',
-      path: '/prod/opportunities/v2/search?' + params.toString(),
-      method: 'GET',
-      headers: { 'Accept': 'application/json', 'User-Agent': 'Tender-MCP/1.0' }
+      hostname: 'api.sam.gov', path: '/prod/opportunities/v2/search?' + params.toString(),
+      method: 'GET', headers: { 'Accept': 'application/json', 'User-Agent': 'Tender-MCP/1.0' }
     }, res => {
       let d = ''; res.on('data', c => d += c);
       res.on('end', () => {
-        console.log('SAM.gov HTTP status:', res.statusCode, 'body length:', d.length);
         if (!d || d.trim() === '') {
-          // Empty response — DEMO_KEY daily limit hit or endpoint issue
-          const msg = apiKey === 'DEMO_KEY'
-            ? 'SAM.gov DEMO_KEY daily limit reached (10 requests/day). Register at api.sam.gov for a free key (1,000/day).'
-            : 'SAM.gov returned an empty response. This is not a problem with your search. Retry in a few minutes.';
-          resolve({ source: 'SAM_GOV', error: msg });
+          resolve({ source: 'SAM_GOV', error: apiKey === 'DEMO_KEY' ? 'SAM.gov DEMO_KEY daily limit reached.' : 'SAM.gov returned empty response. Retry in a few minutes.' });
           return;
         }
-        try {
-          const parsed = JSON.parse(d);
-          console.log('SAM.gov parsed keys:', Object.keys(parsed), 'opps count:', parsed.opportunitiesData ? parsed.opportunitiesData.length : 'n/a');
-          resolve({ source: 'SAM_GOV', data: parsed });
-        } catch(e) {
-          console.error('SAM.gov parse error:', e.message, 'body:', d.slice(0, 200));
-          resolve({ source: 'SAM_GOV', error: 'SAM.gov API is temporarily unavailable. This is not a problem with your search. Retry in a few minutes.' });
-        }
+        try { resolve({ source: 'SAM_GOV', data: JSON.parse(d) }); }
+        catch(e) { resolve({ source: 'SAM_GOV', error: 'SAM.gov temporarily unavailable. Retry in a few minutes.' }); }
       });
     });
-    req.on('error', e => resolve({ source: 'SAM_GOV', error: 'US SAM.gov API is temporarily unavailable. Retry in a few minutes.' }));
-    req.setTimeout(10000, () => { req.destroy(); resolve({ source: 'SAM_GOV', error: 'US SAM.gov API timed out. Retry in a few minutes.' }); });
+    req.on('error', () => resolve({ source: 'SAM_GOV', error: 'SAM.gov temporarily unavailable. Retry in a few minutes.' }));
+    req.setTimeout(10000, () => { req.destroy(); resolve({ source: 'SAM_GOV', error: 'SAM.gov timed out. Retry in a few minutes.' }); });
     req.end();
   });
 }
 
-// ─── FIX 4: normaliseUKTender ─────────────────────────────────────────────────
-// URL: use tender.documents[0].url (real notice URL) with fallback to UUID from r.id
-// r.ocid is the OCDS identifier (ocds-b5fd17-...), NOT the notice UUID
+// ─── NORMALISERS ──────────────────────────────────────────────────────────────
+
 function normaliseUKTender(r) {
   const t = r.tender || {};
   const b = (r.parties || []).find(p => p.roles && p.roles.includes('buyer')) || {};
-  // Extract real notice URL from tender documents, fall back to constructing from r.id
   let noticeUrl = null;
   if (t.documents && t.documents.length > 0) {
-    const noticDoc = t.documents.find(doc => doc.documentType === 'tenderNotice' || doc.documentType === 'awardNotice');
-    if (noticDoc && noticDoc.url) noticeUrl = noticDoc.url;
+    const doc = t.documents.find(d => d.documentType === 'tenderNotice' || d.documentType === 'awardNotice');
+    if (doc && doc.url) noticeUrl = doc.url;
   }
   if (!noticeUrl && r.id) {
-    // r.id format is "UUID-SEQUENCE", strip sequence to get UUID
     const uuid = r.id.split('-').slice(0, 5).join('-');
     noticeUrl = 'https://www.contractsfinder.service.gov.uk/Notice/' + uuid;
   }
@@ -264,12 +203,6 @@ function normaliseUKTender(r) {
   };
 }
 
-// ─── FIX 5: normaliseEUTender ─────────────────────────────────────────────────
-// TI, notice-title are multilingual objects — extract .eng
-// TVH is an array — use TVH[0]
-// CY is an array — use CY[0]
-// PD has timezone suffix (e.g. "2026-04-09+02:00") — strip to date only
-// ND is the publication number — use as ID and in URL
 function normaliseEUTender(n) {
   const titleObj = n['notice-title'] || n['TI'] || {};
   const title = titleObj['eng'] || titleObj['fra'] || titleObj['deu'] || Object.values(titleObj)[0] || null;
@@ -279,30 +212,29 @@ function normaliseEUTender(n) {
   const value = tvh ? (Array.isArray(tvh) ? tvh[0] : tvh) : (n['TV'] ? (Array.isArray(n['TV']) ? n['TV'][0] : n['TV']) : null);
   const cy = n['CY'];
   const country = cy ? (Array.isArray(cy) ? cy[0] : cy) : null;
-  const buyerArr = n['organisation-name-buyer'];
-  const buyer = buyerArr ? (Array.isArray(buyerArr) ? buyerArr[0] : buyerArr) : null;
+  const buyerRaw = n['organisation-name-buyer'];
+  let buyer = null;
+  if (buyerRaw) {
+    if (typeof buyerRaw === 'string') { buyer = buyerRaw; }
+    else if (Array.isArray(buyerRaw)) { buyer = buyerRaw[0] || null; }
+    else if (typeof buyerRaw === 'object') {
+      const langVal = buyerRaw['eng'] || buyerRaw['fra'] || buyerRaw['deu'] || Object.values(buyerRaw)[0];
+      buyer = Array.isArray(langVal) ? (langVal[0] || null) : (langVal || null);
+    }
+  }
   const deadlineArr = n['deadline-date-lot'];
-  const deadline = deadlineArr ? (Array.isArray(deadlineArr) ? deadlineArr[0] : deadlineArr) : null;
-  // Best URL: English HTML link from links object, fallback to standard pattern
+  const deadlineRaw = deadlineArr ? (Array.isArray(deadlineArr) ? deadlineArr[0] : deadlineArr) : null;
+  const deadline = deadlineRaw ? String(deadlineRaw).split('+')[0].split('T')[0] : null;
   let url = null;
-  if (n['links'] && n['links']['html'] && n['links']['html']['ENG']) {
-    url = n['links']['html']['ENG'];
-  } else if (nd) {
-    url = 'https://ted.europa.eu/en/notice/' + nd + '/html';
-  }
+  if (n['links'] && n['links']['html'] && n['links']['html']['ENG']) { url = n['links']['html']['ENG']; }
+  else if (nd) { url = 'https://ted.europa.eu/en/notice/' + nd + '/html'; }
   return {
-    id: nd,
-    title: title ? title.slice(0, 200) : null,
-    description: null, // description-lot not included in fields to keep response light
+    id: nd, title: title ? title.slice(0, 200) : null, description: null,
     contracting_authority: buyer,
     value: value ? { amount: value, currency: 'EUR' } : null,
-    published: pd,
-    deadline: deadline,
-    country: country,
-    type: n['notice-type'] || null,
-    url: url,
-    source: 'EU_TED',
-    source_url: 'ted.europa.eu'
+    published: pd, deadline: deadline, country: country,
+    type: n['notice-type'] || null, url: url,
+    source: 'EU_TED', source_url: 'ted.europa.eu'
   };
 }
 
@@ -313,98 +245,66 @@ function normaliseSAMTender(o) {
     description: o.description ? o.description.slice(0, 400) : null,
     contracting_authority: o.fullParentPathName || null,
     value: (o.award && o.award.amount) ? { amount: o.award.amount, currency: 'USD' } : null,
-    published: o.postedDate || null,
-    deadline: o.responseDeadLine || null,
-    type: o.type || null,
-    naics_code: o.naicsCode || null,
-    set_aside: o.typeOfSetAside || null,
+    published: o.postedDate || null, deadline: o.responseDeadLine || null,
+    type: o.type || null, naics_code: o.naicsCode || null, set_aside: o.typeOfSetAside || null,
     url: o.noticeId ? 'https://sam.gov/opp/' + o.noticeId + '/view' : null,
-    source: 'SAM_GOV',
-    source_url: 'sam.gov'
+    source: 'SAM_GOV', source_url: 'sam.gov'
   };
 }
 
+// ─── TOOL DEFINITIONS ─────────────────────────────────────────────────────────
+
 const tools = [
   {
     name: 'search_tenders',
-    description: 'Call this tool any time your agent needs to find government contract opportunities for a business, product, or service. Use when helping a company identify new revenue opportunities from public sector clients, when monitoring government spending in a specific sector, when an agent needs to find bid opportunities for a client, when researching which companies win government contracts in a particular area, or when building procurement intelligence for any organisation that sells to governments. Searches UK Contracts Finder (contractsfinder.service.gov.uk), EU TED (ted.europa.eu), and US SAM.gov simultaneously. Returns normalised results from all three sources. Every response includes source_url and checked_at so agents can verify exactly where data came from. LEGAL NOTICE: Always verify tender deadlines and details directly with the contracting authority before bidding — deadlines change. We do not log your query content. Results are informational only. Full terms: kordagencies.com/terms.html. Free tier: first 10 searches/month, no API key needed.',
+    description: 'Call this tool any time your agent needs to find and evaluate government contract opportunities. Use when helping a company identify new revenue from public sector clients, when an agent needs to find bid opportunities, or when researching government procurement in a specific sector. Searches UK Contracts Finder, EU TED, and US SAM.gov simultaneously. Returns normalised results with AI fit scoring already applied — each tender includes a score 0-100, BID/INVESTIGATE/SKIP recommendation, and specific reasons. One call returns everything the agent needs to act. AI-powered analysis — NOT a simple keyword search. Data sourced directly from official government portals. LEGAL NOTICE: Always verify deadlines with the contracting authority before bidding. We do not log your query content. Full terms: kordagencies.com/terms.html. Free tier: first 10 searches/month, no API key needed.',
     inputSchema: {
       type: 'object',
       properties: {
-        keyword: { type: 'string', description: 'Search keyword — company capability, product type, or service (e.g. "cybersecurity", "catering", "IT support", "construction")' },
+        keyword: { type: 'string', description: 'Search keyword — company capability, product type, or service (e.g. "cybersecurity", "catering", "IT support")' },
+        company_profile: { type: 'string', description: 'Description of the company capabilities and what contracts they are looking for. Used for AI fit scoring. More detail = better scores. If omitted, results are returned unscored.' },
         sources: { type: 'array', items: { type: 'string', enum: ['uk', 'eu', 'us'] }, description: 'Which sources to search. Defaults to all three: ["uk","eu","us"]' },
         limit: { type: 'number', description: 'Max results per source (default 10, max 25)' },
-        days_old: { type: 'number', description: 'Only return tenders published in the last N days (default 30)' }
+        days_old: { type: 'number', description: 'Only return tenders published in the last N days (default 30)' },
+        min_score: { type: 'number', description: 'Only return tenders scoring above this threshold (default 50). Only applies when company_profile is provided.' }
       },
       required: ['keyword']
     }
   },
   {
-    name: 'get_tender_detail',
-    description: 'Call this tool when your agent has found a tender from search_tenders and needs the full details before deciding whether to bid or present it to a client. Returns complete tender documentation including full description, all deadlines, contact details, award criteria, and direct link to the official notice. Use to enrich search results with actionable information, or when an agent needs to summarise a specific opportunity for a decision-maker. LEGAL NOTICE: Always verify details directly with the contracting authority before bidding — information may have changed. We do not log your query content. Free tier: first 10 searches/month, no API key needed.',
+    name: 'get_tender_intelligence',
+    description: 'Call this tool for ongoing procurement intelligence beyond one-off search. Two modes: DAILY_DIGEST returns all new tenders posted in the last 24 hours matching your keywords — use as a daily monitoring tool so no new opportunity is missed before competitors see it. AWARD_HISTORY returns past contract winners for a keyword — use for competitive intelligence before bidding, to find teaming partners, or to understand which companies dominate a sector. Both modes search UK, EU, and US simultaneously. AI-powered analysis — NOT a simple database lookup. LEGAL NOTICE: Award data may be incomplete as not all authorities publish award notices. We do not log your query content. Full terms: kordagencies.com/terms.html. Paid API key required — upgrade at kordagencies.com.',
     inputSchema: {
       type: 'object',
       properties: {
-        tender_id: { type: 'string', description: 'Tender ID or OCID from search_tenders results' },
-        source: { type: 'string', enum: ['uk', 'eu', 'us'], description: 'Source system the tender came from' }
-      },
-      required: ['tender_id', 'source']
-    }
-  },
-  {
-    name: 'score_tender_fit',
-    description: 'Call this tool after search_tenders to filter and rank results by relevance to a specific company profile. Uses AI analysis to score each tender 0-100 based on how well it matches the company capabilities, then returns only the most relevant opportunities with specific reasons why each is a good or poor fit. This is NOT a simple keyword match — it is intelligent analysis that understands context, reads between the lines of tender descriptions, and identifies opportunities a keyword search would miss. Use before presenting opportunities to a client, to save hours of manual review when hundreds of tenders match a broad keyword search, or when an agent needs to prioritise which tenders a sales team should pursue. AI-powered analysis — NOT a simple database lookup. LEGAL NOTICE: AI scoring is for prioritisation only — always read the full tender before bidding. We do not log your query content. Free tier: first 10 searches/month, no API key needed.',
-    inputSchema: {
-      type: 'object',
-      properties: {
-        tenders: { type: 'array', description: 'Array of tender objects from search_tenders results', items: { type: 'object' } },
-        company_profile: { type: 'string', description: 'Description of the company capabilities, sector, size, and what types of contracts they are looking for. More detail = better scoring.' },
-        min_score: { type: 'number', description: 'Only return tenders scoring above this threshold (default 50)' }
-      },
-      required: ['tenders', 'company_profile']
-    }
-  },
-  {
-    name: 'get_daily_digest',
-    description: 'Call this tool to get all new government tenders published in the last 24 hours matching one or more keywords. Use as a morning briefing tool — run this daily for a company to surface every new opportunity before competitors see it. Also use for ongoing monitoring of government spending in a specific sector, or to build automated tender alert workflows. Returns tenders sorted by publication date, newest first. Searches UK, EU, and US simultaneously. LEGAL NOTICE: Always verify tender deadlines and details with the contracting authority before bidding. We do not log your query content. Paid API key required — upgrade at kordagencies.com.',
-    inputSchema: {
-      type: 'object',
-      properties: {
-        keywords: { type: 'array', items: { type: 'string' }, description: 'List of keywords to monitor (e.g. ["cybersecurity", "cloud infrastructure", "managed services"])' },
-        sources: { type: 'array', items: { type: 'string', enum: ['uk', 'eu', 'us'] }, description: 'Sources to monitor. Defaults to all three.' }
-      },
-      required: ['keywords']
-    }
-  },
-  {
-    name: 'get_award_history',
-    description: 'Call this tool when your agent needs to research who has won similar government contracts in the past. Use for competitive intelligence before bidding — find out which companies consistently win contracts in your sector, what contract values they win at, and how often they compete. Also use for market research on government spending patterns, to identify potential teaming partners, or to understand the procurement landscape before entering a new market. LEGAL NOTICE: Award data may be incomplete as not all contracting authorities publish award notices. We do not log your query content. Paid API key required — upgrade at kordagencies.com.',
-    inputSchema: {
-      type: 'object',
-      properties: {
-        keyword: { type: 'string', description: 'Sector or service keyword to search award history for' },
+        mode: { type: 'string', enum: ['DAILY_DIGEST', 'AWARD_HISTORY'], description: 'DAILY_DIGEST: new tenders in last 24hrs. AWARD_HISTORY: past contract winners.' },
+        keywords: { type: 'array', items: { type: 'string' }, description: 'Keywords to monitor or search (e.g. ["cybersecurity", "cloud infrastructure"]). Required for DAILY_DIGEST.' },
+        keyword: { type: 'string', description: 'Keyword for award history search. Required for AWARD_HISTORY.' },
         sources: { type: 'array', items: { type: 'string', enum: ['uk', 'eu', 'us'] }, description: 'Sources to search. Defaults to all three.' },
-        limit: { type: 'number', description: 'Max results per source (default 10)' }
+        limit: { type: 'number', description: 'Max results per source for AWARD_HISTORY (default 10)' }
       },
-      required: ['keyword']
+      required: ['mode']
     }
   }
 ];
 
-async function executeTool(name, args) {
+// ─── TOOL EXECUTION ───────────────────────────────────────────────────────────
+
+async function executeTool(name, args, tier) {
   const checkedAt = nowISO();
 
+  // ── TOOL 1: search_tenders ──────────────────────────────────────────────────
   if (name === 'search_tenders') {
-    const keyword = args.keyword;
-    const sources = args.sources || ['uk', 'eu', 'us'];
-    const limit = Math.min(args.limit || 10, 25);
-    const daysOld = args.days_old || 30;
+    const { keyword, company_profile, sources = ['uk', 'eu', 'us'], limit, days_old, min_score } = args;
     if (!keyword) return { error: 'keyword is required', _disclaimer: LEGAL_DISCLAIMER };
 
+    const fetchLimit = Math.min(limit || 10, 25);
+    const daysOld = days_old || 30;
+
     const searches = [];
-    if (sources.includes('uk')) searches.push(searchUKTenders(keyword, limit, daysOld));
-    if (sources.includes('eu')) searches.push(searchEUTenders(keyword, limit));
-    if (sources.includes('us')) searches.push(searchSAMGov(keyword, limit, daysOld));
+    if (sources.includes('uk')) searches.push(searchUKTenders(keyword, fetchLimit, daysOld));
+    if (sources.includes('eu')) searches.push(searchEUTenders(keyword, fetchLimit));
+    if (sources.includes('us')) searches.push(searchSAMGov(keyword, fetchLimit, daysOld));
 
     const results = await Promise.all(searches);
     const tenders = [];
@@ -412,229 +312,229 @@ async function executeTool(name, args) {
 
     for (const r of results) {
       if (r.error) { errors.push({ source: r.source, error: r.error }); continue; }
-      if (r.source === 'UK_CONTRACTS_FINDER') {
-        (r.data || []).slice(0, limit).forEach(t => tenders.push(normaliseUKTender(t)));
-      }
-      if (r.source === 'EU_TED') {
-        const notices = (r.data && r.data.notices) || [];
-        notices.slice(0, limit).forEach(n => tenders.push(normaliseEUTender(n)));
-      }
-      if (r.source === 'SAM_GOV') {
-        const opps = (r.data && r.data.opportunitiesData) || [];
-        opps.slice(0, limit).forEach(o => tenders.push(normaliseSAMTender(o)));
+      if (r.source === 'UK_CONTRACTS_FINDER') (r.data || []).slice(0, fetchLimit).forEach(t => tenders.push(normaliseUKTender(t)));
+      if (r.source === 'EU_TED') ((r.data && r.data.notices) || []).slice(0, fetchLimit).forEach(n => tenders.push(normaliseEUTender(n)));
+      if (r.source === 'SAM_GOV') ((r.data && r.data.opportunitiesData) || []).slice(0, fetchLimit).forEach(o => tenders.push(normaliseSAMTender(o)));
+    }
+
+    // Run AI scoring if company_profile provided
+    let scoredTenders = tenders;
+    let scoringMeta = null;
+
+    if (company_profile && tenders.length > 0) {
+      const threshold = min_score || 50;
+      const prompt = 'You are a government procurement specialist helping a company identify the most relevant tender opportunities.\n\n' +
+        'COMPANY PROFILE:\n' + company_profile + '\n\n' +
+        'TENDERS TO SCORE (' + tenders.length + ' total):\n' +
+        JSON.stringify(tenders.map(t => ({ id: t.id, title: t.title, description: t.description, contracting_authority: t.contracting_authority, value: t.value, source: t.source }))) + '\n\n' +
+        'Score each tender 0-100 where: 90-100=excellent fit, 70-89=good fit, 50-69=possible fit, below 50=poor fit.\n' +
+        'Consider: does the tender match company capabilities? Is contract size appropriate? Is sector relevant? Could they realistically win?\n\n' +
+        'Return ONLY valid JSON:\n' +
+        '{"scored_tenders":[{"id":"<id>","score":<0-100>,"recommendation":"BID|INVESTIGATE|SKIP","reasons":["<reason>"],"fit_summary":"<one sentence>"}],"top_opportunities":["<top 3 ids>"],"market_insight":"<2 sentences about procurement patterns in this area>"}';
+      try {
+        const response = await callClaude(prompt);
+        const clean = response.replace(/```json|```/g, '').trim();
+        const aiResult = JSON.parse(clean);
+        const scoreMap = {};
+        (aiResult.scored_tenders || []).forEach(s => { scoreMap[s.id] = s; });
+        scoredTenders = tenders
+          .map(t => Object.assign({}, t, scoreMap[t.id] ? {
+            ai_score: scoreMap[t.id].score,
+            recommendation: scoreMap[t.id].recommendation,
+            fit_summary: scoreMap[t.id].fit_summary,
+            reasons: scoreMap[t.id].reasons
+          } : { ai_score: null, recommendation: null })
+          )
+          .filter(t => t.ai_score === null || t.ai_score >= threshold);
+        scoringMeta = {
+          total_scored: tenders.length,
+          above_threshold: scoredTenders.length,
+          threshold_used: threshold,
+          top_opportunities: aiResult.top_opportunities || [],
+          market_insight: aiResult.market_insight || null,
+          analysis_type: 'AI-powered fit scoring — NOT a simple keyword match'
+        };
+      } catch(e) {
+        scoringMeta = { error: 'AI scoring unavailable — results returned unscored. Manual review recommended.' };
       }
     }
 
-    return {
+    const result = {
       keyword,
       total_found: tenders.length,
       sources_searched: sources,
-      tenders,
+      tenders: scoredTenders,
+      scoring: scoringMeta,
       errors: errors.length > 0 ? errors : undefined,
       checked_at: checkedAt,
       _disclaimer: LEGAL_DISCLAIMER
     };
-  }
 
-  if (name === 'get_tender_detail') {
-    const { tender_id, source } = args;
-    if (!tender_id || !source) return { error: 'tender_id and source are required', _disclaimer: LEGAL_DISCLAIMER };
-
-    if (source === 'uk') {
-      return new Promise((resolve) => {
-        const req = https.request({
-          hostname: 'www.contractsfinder.service.gov.uk',
-          path: '/Published/OCDS/Record/' + encodeURIComponent(tender_id),
-          method: 'GET',
-          headers: { 'Accept': 'application/json', 'User-Agent': 'Tender-MCP/1.0' }
-        }, res => {
-          let d = ''; res.on('data', c => d += c);
-          res.on('end', () => {
-            try {
-              const data = JSON.parse(d);
-              const r = data.records && data.records[0] && data.records[0].compiledRelease || data;
-              resolve(Object.assign({ full_detail: true, source: 'UK_CONTRACTS_FINDER', source_url: 'contractsfinder.service.gov.uk', checked_at: nowISO() }, normaliseUKTender(r), { _disclaimer: LEGAL_DISCLAIMER }));
-            } catch(e) {
-              resolve({ error: 'Could not retrieve tender detail. Try visiting the tender directly.', tender_id, source_url: 'contractsfinder.service.gov.uk', checked_at: nowISO(), _disclaimer: LEGAL_DISCLAIMER });
-            }
-          });
-        });
-        req.on('error', () => resolve({ error: 'UK Contracts Finder API is temporarily unavailable. Retry in a few minutes.', source_url: 'contractsfinder.service.gov.uk', checked_at: nowISO(), _disclaimer: LEGAL_DISCLAIMER }));
-        req.setTimeout(10000, () => { req.destroy(); resolve({ error: 'UK Contracts Finder API timed out. Retry in a few minutes.', source_url: 'contractsfinder.service.gov.uk', checked_at: nowISO(), _disclaimer: LEGAL_DISCLAIMER }); });
-        req.end();
-      });
-    }
-
-    if (source === 'eu') {
-      return { tender_id, source: 'EU_TED', source_url: 'ted.europa.eu', url: 'https://ted.europa.eu/en/notice/' + tender_id + '/html', message: 'Visit the URL for full tender details.', checked_at: checkedAt, _disclaimer: LEGAL_DISCLAIMER };
-    }
-
-    if (source === 'us') {
-      return new Promise((resolve) => {
-        const apiKey = SAM_GOV_API_KEY || 'DEMO_KEY';
-        const req = https.request({
-          hostname: 'api.sam.gov',
-          path: '/prod/opportunities/v2/search?api_key=' + apiKey + '&noticeId=' + encodeURIComponent(tender_id),
-          method: 'GET',
-          headers: { 'Accept': 'application/json', 'User-Agent': 'Tender-MCP/1.0' }
-        }, res => {
-          let d = ''; res.on('data', c => d += c);
-          res.on('end', () => {
-            try {
-              const data = JSON.parse(d);
-              const opp = data.opportunitiesData && data.opportunitiesData[0];
-              if (opp) {
-                resolve(Object.assign({ full_detail: true }, normaliseSAMTender(opp), { checked_at: nowISO(), _disclaimer: LEGAL_DISCLAIMER }));
-              } else {
-                resolve({ tender_id, source: 'SAM_GOV', source_url: 'sam.gov', url: 'https://sam.gov/opp/' + tender_id + '/view', message: 'Visit the URL for full tender details.', checked_at: nowISO(), _disclaimer: LEGAL_DISCLAIMER });
-              }
-            } catch(e) {
-              resolve({ error: 'Could not retrieve tender detail.', tender_id, source_url: 'sam.gov', checked_at: nowISO(), _disclaimer: LEGAL_DISCLAIMER });
-            }
-          });
-        });
-        req.on('error', () => resolve({ error: 'US SAM.gov API is temporarily unavailable. Retry in a few minutes.', source_url: 'sam.gov', checked_at: nowISO(), _disclaimer: LEGAL_DISCLAIMER }));
-        req.setTimeout(10000, () => { req.destroy(); resolve({ error: 'US SAM.gov timed out. Retry in a few minutes.', source_url: 'sam.gov', checked_at: nowISO(), _disclaimer: LEGAL_DISCLAIMER }); });
-        req.end();
-      });
-    }
+    // Upgrade hook — shown to ALL tiers, always
+    result._intelligence = {
+      message: 'Pro plan unlocks daily monitoring and award history for these keywords.',
+      daily_digest: 'Get all new tenders matching "' + keyword + '" automatically every 24 hours — never miss an opportunity before competitors.',
+      award_history: 'See which companies have won similar contracts and at what values — critical for bid pricing strategy.',
+      upgrade_url: 'https://kordagencies.com'
+    };
 
-    return { error: 'Invalid source. Use: uk, eu, or us', _disclaimer: LEGAL_DISCLAIMER };
+    return result;
   }
 
-  if (name === 'score_tender_fit') {
-    const { tenders, company_profile, min_score } = args;
-    if (!tenders || !Array.isArray(tenders) || tenders.length === 0) return { error: 'tenders array is required', _disclaimer: LEGAL_DISCLAIMER };
-    if (!company_profile) return { error: 'company_profile is required', _disclaimer: LEGAL_DISCLAIMER };
-    const threshold = min_score || 50;
-
-    const prompt = 'You are a government procurement specialist helping a company identify the most relevant tender opportunities.\n\n' +
-      'COMPANY PROFILE:\n' + company_profile + '\n\n' +
-      'TENDERS TO SCORE (' + tenders.length + ' total):\n' + JSON.stringify(tenders.map(t => ({ id: t.id, title: t.title, description: t.description, contracting_authority: t.contracting_authority, value: t.value, source: t.source }))) + '\n\n' +
-      'For each tender, score its relevance to the company profile from 0-100 where:\n' +
-      '90-100 = excellent fit, company should definitely bid\n' +
-      '70-89 = good fit, worth pursuing\n' +
-      '50-69 = possible fit, needs more investigation\n' +
-      'Below 50 = poor fit, not recommended\n\n' +
-      'Consider: does the tender match the company capabilities? Is the contract size appropriate? Is the sector relevant? Could the company realistically win?\n\n' +
-      'Return ONLY valid JSON with no preamble:\n' +
-      '{"scored_tenders":[{"id":"<tender id>","score":<0-100>,"recommendation":"BID|INVESTIGATE|SKIP","reasons":["<reason 1>","<reason 2>"],"fit_summary":"<one sentence>"}],"top_opportunities":["<id of top 3 tender ids>"],"market_insight":"<2 sentences about what these results tell us about government procurement in this area>"}';
-
-    try {
-      const response = await callClaude(prompt);
-      const clean = response.replace(/```json|```/g, '').trim();
-      const result = JSON.parse(clean);
-      const filtered = (result.scored_tenders || []).filter(t => t.score >= threshold);
-      return Object.assign({}, result, {
-        scored_tenders: filtered,
-        total_scored: (result.scored_tenders || []).length,
-        above_threshold: filtered.length,
-        threshold_used: threshold,
-        analysis_type: 'AI-powered — NOT a simple keyword match',
-        checked_at: checkedAt,
-        _disclaimer: LEGAL_DISCLAIMER
-      });
-    } catch(e) {
-      return { error: 'AI scoring unavailable — manual review recommended', tenders_count: tenders.length, checked_at: checkedAt, _disclaimer: LEGAL_DISCLAIMER };
-    }
-  }
+  // ── TOOL 2: get_tender_intelligence ────────────────────────────────────────
+  if (name === 'get_tender_intelligence') {
+    const { mode, keywords, keyword, sources = ['uk', 'eu', 'us'], limit } = args;
+    if (!mode) return { error: 'mode is required: DAILY_DIGEST or AWARD_HISTORY', _disclaimer: LEGAL_DISCLAIMER };
 
-  if (name === 'get_daily_digest') {
-    const { keywords, sources } = args;
-    if (!keywords || !Array.isArray(keywords) || keywords.length === 0) return { error: 'keywords array is required', _disclaimer: LEGAL_DISCLAIMER };
-    const targetSources = sources || ['uk', 'eu', 'us'];
+    // ── DAILY_DIGEST ──
+    if (mode === 'DAILY_DIGEST') {
+      if (!keywords || !Array.isArray(keywords) || keywords.length === 0) {
+        return { error: 'keywords array is required for DAILY_DIGEST mode', _disclaimer: LEGAL_DISCLAIMER };
+      }
 
-    const allTenders = [];
-    const errors = [];
+      // Free tier preview: run one keyword, return count only — no full results
+      if (tier === 'free') {
+        const previewKeyword = keywords[0];
+        const searches = [];
+        if (sources.includes('uk')) searches.push(searchUKTenders(previewKeyword, 10, 1));
+        if (sources.includes('eu')) searches.push(searchEUTenders(previewKeyword, 10));
+        if (sources.includes('us')) searches.push(searchSAMGov(previewKeyword, 10, 1));
+        const results = await Promise.all(searches);
+        let previewCount = 0;
+        for (const r of results) {
+          if (r.source === 'UK_CONTRACTS_FINDER' && r.data) previewCount += r.data.length;
+          if (r.source === 'EU_TED' && r.data && r.data.notices) previewCount += r.data.notices.length;
+          if (r.source === 'SAM_GOV' && r.data && r.data.opportunitiesData) previewCount += r.data.opportunitiesData.length;
+        }
+        return {
+          mode: 'DAILY_DIGEST',
+          status: 'PREVIEW — paid plan required for full access',
+          keyword_previewed: previewKeyword,
+          new_tenders_found_today: previewCount,
+          message: previewCount > 0
+            ? previewCount + ' new tenders matching "' + previewKeyword + '" were posted in the last 24 hours. Pro plan required to access them — upgrade at kordagencies.com before competitors do.'
+            : 'No new tenders matching "' + previewKeyword + '" today. Pro plan monitors all your keywords daily and alerts you the moment new opportunities appear.',
+          what_you_get_on_pro: [
+            'All new tenders matching up to 5 keywords checked daily',
+            'Full tender details including deadlines and contracting authority',
+            'Results from UK, EU, and US simultaneously',
+            '500 searches/month'
+          ],
+          upgrade_url: 'https://kordagencies.com',
+          checked_at: checkedAt,
+          _disclaimer: LEGAL_DISCLAIMER
+        };
+      }
 
-    for (const keyword of keywords.slice(0, 5)) {
-      const searches = [];
-      if (targetSources.includes('uk')) searches.push(searchUKTenders(keyword, 10, 1));
-      if (targetSources.includes('eu')) searches.push(searchEUTenders(keyword, 10));
-      if (targetSources.includes('us')) searches.push(searchSAMGov(keyword, 10, 1));
-      const results = await Promise.all(searches);
-      for (const r of results) {
-        if (r.error) { errors.push({ source: r.source, keyword, error: r.error }); continue; }
-        if (r.source === 'UK_CONTRACTS_FINDER') (r.data || []).forEach(t => allTenders.push(Object.assign(normaliseUKTender(t), { matched_keyword: keyword })));
-        if (r.source === 'EU_TED') ((r.data && r.data.notices) || []).forEach(n => allTenders.push(Object.assign(normaliseEUTender(n), { matched_keyword: keyword })));
-        if (r.source === 'SAM_GOV') ((r.data && r.data.opportunitiesData) || []).forEach(o => allTenders.push(Object.assign(normaliseSAMTender(o), { matched_keyword: keyword })));
+      // Paid: full daily digest
+      const allTenders = [];
+      const errors = [];
+      for (const kw of keywords.slice(0, 5)) {
+        const searches = [];
+        if (sources.includes('uk')) searches.push(searchUKTenders(kw, 10, 1));
+        if (sources.includes('eu')) searches.push(searchEUTenders(kw, 10));
+        if (sources.includes('us')) searches.push(searchSAMGov(kw, 10, 1));
+        const results = await Promise.all(searches);
+        for (const r of results) {
+          if (r.error) { errors.push({ source: r.source, keyword: kw, error: r.error }); continue; }
+          if (r.source === 'UK_CONTRACTS_FINDER') (r.data || []).forEach(t => allTenders.push(Object.assign(normaliseUKTender(t), { matched_keyword: kw })));
+          if (r.source === 'EU_TED') ((r.data && r.data.notices) || []).forEach(n => allTenders.push(Object.assign(normaliseEUTender(n), { matched_keyword: kw })));
+          if (r.source === 'SAM_GOV') ((r.data && r.data.opportunitiesData) || []).forEach(o => allTenders.push(Object.assign(normaliseSAMTender(o), { matched_keyword: kw })));
+        }
       }
+      const seen = new Set();
+      const unique = allTenders.filter(t => { if (seen.has(t.id)) return false; seen.add(t.id); return true; });
+      unique.sort((a, b) => (b.published || '').localeCompare(a.published || ''));
+      return {
+        mode: 'DAILY_DIGEST', date: getTodayDate(),
+        keywords_monitored: keywords, sources_searched: sources,
+        total_new_tenders: unique.length, tenders: unique,
+        errors: errors.length > 0 ? errors : undefined,
+        checked_at: checkedAt, _disclaimer: LEGAL_DISCLAIMER
+      };
     }
 
-    const seen = new Set();
-    const unique = allTenders.filter(t => { if (seen.has(t.id)) return false; seen.add(t.id); return true; });
-    unique.sort((a, b) => (b.published || '').localeCompare(a.published || ''));
-
-    return {
-      date: getTodayDate(),
-      keywords_monitored: keywords,
-      sources_searched: targetSources,
-      total_new_tenders: unique.length,
-      tenders: unique,
-      errors: errors.length > 0 ? errors : undefined,
-      checked_at: checkedAt,
-      _disclaimer: LEGAL_DISCLAIMER
-    };
-  }
-
-  if (name === 'get_award_history') {
-    const { keyword, sources, limit } = args;
-    if (!keyword) return { error: 'keyword is required', _disclaimer: LEGAL_DISCLAIMER };
-    const targetSources = sources || ['uk', 'eu', 'us'];
-    const maxResults = Math.min(limit || 10, 25);
-
-    const searches = [];
-    if (targetSources.includes('uk')) searches.push(searchUKTenders(keyword, maxResults, 365));
-    if (targetSources.includes('eu')) searches.push(searchEUTenders(keyword, maxResults));
-    if (targetSources.includes('us')) searches.push(searchSAMGov(keyword, maxResults, 365));
-
-    const results = await Promise.all(searches);
-    const awards = [];
-    const errors = [];
-
-    for (const r of results) {
-      if (r.error) { errors.push({ source: r.source, error: r.error }); continue; }
-      if (r.source === 'UK_CONTRACTS_FINDER') {
-        (r.data || []).filter(t => t.tag && t.tag.includes('award')).forEach(t => awards.push(normaliseUKTender(t)));
-      }
-      if (r.source === 'EU_TED') {
-        const notices = (r.data && r.data.notices) || [];
-        notices.filter(n => n['notice-type'] && n['notice-type'].toLowerCase().includes('award')).forEach(n => awards.push(normaliseEUTender(n)));
+    // ── AWARD_HISTORY ──
+    if (mode === 'AWARD_HISTORY') {
+      if (!keyword) return { error: 'keyword is required for AWARD_HISTORY mode', _disclaimer: LEGAL_DISCLAIMER };
+      const maxResults = Math.min(limit || 10, 25);
+
+      // Free tier preview: run search, return winner count + one sample name only
+      if (tier === 'free') {
+        const searches = [];
+        if (sources.includes('uk')) searches.push(searchUKTenders(keyword, maxResults, 365));
+        if (sources.includes('eu')) searches.push(searchEUTenders(keyword, maxResults));
+        if (sources.includes('us')) searches.push(searchSAMGov(keyword, maxResults, 365));
+        const results = await Promise.all(searches);
+        const awards = [];
+        for (const r of results) {
+          if (r.source === 'UK_CONTRACTS_FINDER' && r.data) {
+            r.data.filter(t => t.tag && t.tag.includes('award')).forEach(t => awards.push(normaliseUKTender(t)));
+          }
+          if (r.source === 'EU_TED' && r.data && r.data.notices) {
+            r.data.notices.filter(n => n['notice-type'] && n['notice-type'].toLowerCase().includes('award')).forEach(n => awards.push(normaliseEUTender(n)));
+          }
+          if (r.source === 'SAM_GOV' && r.data && r.data.opportunitiesData) {
+            r.data.opportunitiesData.filter(o => o.type && o.type.toLowerCase().includes('award')).forEach(o => awards.push(normaliseSAMTender(o)));
+          }
+        }
+        const sampleWinner = awards.length > 0 ? (awards[0].contracting_authority || awards[0].title || 'a known supplier') : null;
+        return {
+          mode: 'AWARD_HISTORY',
+          status: 'PREVIEW — paid plan required for full access',
+          keyword,
+          awards_found_in_last_12_months: awards.length,
+          sample_result: sampleWinner ? 'e.g. "' + sampleWinner + '" appears in recent award data for "' + keyword + '"' : 'Award data found — upgrade to see winners.',
+          message: awards.length > 0
+            ? awards.length + ' past contract awards found for "' + keyword + '" in the last 12 months. Pro plan required to see who won them, at what values, and how often — critical before pricing your bid.'
+            : 'Searching award history for "' + keyword + '". Pro plan gives you competitive intelligence on who wins these contracts and at what price points.',
+          what_you_get_on_pro: [
+            'Full list of past contract winners by name',
+            'Contract values — understand what the market pays',
+            'Frequency analysis — who dominates your target sector',
+            'Identify teaming partners or threats before bidding'
+          ],
+          upgrade_url: 'https://kordagencies.com',
+          checked_at: checkedAt,
+          _disclaimer: LEGAL_DISCLAIMER
+        };
       }
-      if (r.source === 'SAM_GOV') {
-        const opps = (r.data && r.data.opportunitiesData) || [];
-        opps.filter(o => o.type && o.type.toLowerCase().includes('award')).forEach(o => awards.push(normaliseSAMTender(o)));
+
+      // Paid: full award history
+      const searches = [];
+      if (sources.includes('uk')) searches.push(searchUKTenders(keyword, maxResults, 365));
+      if (sources.includes('eu')) searches.push(searchEUTenders(keyword, maxResults));
+      if (sources.includes('us')) searches.push(searchSAMGov(keyword, maxResults, 365));
+      const results = await Promise.all(searches);
+      const awards = [];
+      const errors = [];
+      for (const r of results) {
+        if (r.error) { errors.push({ source: r.source, error: r.error }); continue; }
+        if (r.source === 'UK_CONTRACTS_FINDER') r.data.filter(t => t.tag && t.tag.includes('award')).forEach(t => awards.push(normaliseUKTender(t)));
+        if (r.source === 'EU_TED') ((r.data && r.data.notices) || []).filter(n => n['notice-type'] && n['notice-type'].toLowerCase().includes('award')).forEach(n => awards.push(normaliseEUTender(n)));
+        if (r.source === 'SAM_GOV') ((r.data && r.data.opportunitiesData) || []).filter(o => o.type && o.type.toLowerCase().includes('award')).forEach(o => awards.push(normaliseSAMTender(o)));
       }
+      return {
+        mode: 'AWARD_HISTORY', keyword,
+        total_awards_found: awards.length,
+        sources_searched: sources, awards,
+        errors: errors.length > 0 ? errors : undefined,
+        note: 'Award data may be incomplete — not all contracting authorities publish award notices.',
+        checked_at: checkedAt, _disclaimer: LEGAL_DISCLAIMER
+      };
     }
 
-    return {
-      keyword,
-      total_awards_found: awards.length,
-      sources_searched: targetSources,
-      awards,
-      errors: errors.length > 0 ? errors : undefined,
-      note: 'Award data may be incomplete — not all contracting authorities publish award notices.',
-      checked_at: checkedAt,
-      _disclaimer: LEGAL_DISCLAIMER
-    };
+    return { error: 'Invalid mode. Use DAILY_DIGEST or AWARD_HISTORY.', _disclaimer: LEGAL_DISCLAIMER };
   }
 
   return { error: 'Unknown tool: ' + name };
 }
 
+// ─── ACCESS CONTROL ───────────────────────────────────────────────────────────
+
 function checkAccess(req, toolName) {
-  const paidOnlyTools = ['get_daily_digest', 'get_award_history'];
   const apiKey = req.headers['x-api-key'];
 
-  if (paidOnlyTools.includes(toolName)) {
-    if (!apiKey) return { allowed: false, reason: toolName + ' requires a paid API key. Get yours at kordagencies.com — Pro $199/month, Enterprise $499/month.', upgrade_url: 'https://kordagencies.com', tier: 'free_limit_reached' };
-    const record = apiKeys.get(apiKey);
-    if (!record) return { allowed: false, reason: 'Invalid API key. Get yours at kordagencies.com', tier: 'invalid' };
-    if (record.limit !== Infinity && record.calls >= record.limit) return { allowed: false, reason: 'Monthly limit of ' + record.limit + ' searches reached. Upgrade at kordagencies.com', tier: 'limit_reached' };
-    record.calls++;
-    return { allowed: true, tier: record.plan };
-  }
-
   if (apiKey) {
     const record = apiKeys.get(apiKey);
     if (!record) return { allowed: false, reason: 'Invalid API key. Get yours at kordagencies.com', tier: 'invalid' };
@@ -643,16 +543,43 @@ function checkAccess(req, toolName) {
     return { allowed: true, tier: record.plan };
   }
 
+  // Free tier — allow all tools, but pass tier='free' so executeTool can gate paid features
   const ip = req.headers['x-forwarded-for'] || req.socket.remoteAddress || 'unknown';
   const calls = freeTierUsage.get(ip) || 0;
-  if (calls >= FREE_TIER_LIMIT) return { allowed: false, reason: 'Free tier limit of ' + FREE_TIER_LIMIT + ' searches/month reached. You have seen it work — upgrade to Pro ($199/month) at kordagencies.com for 500 searches/month.', upgrade_url: 'https://kordagencies.com', tier: 'free_limit_reached' };
+  if (calls >= FREE_TIER_LIMIT) {
+    return {
+      allowed: false,
+      reason: 'Free tier limit of ' + FREE_TIER_LIMIT + ' searches/month reached. You have seen it work — upgrade to Pro ($199/month) at kordagencies.com for 500 searches/month.',
+      upgrade_url: 'https://kordagencies.com',
+      tier: 'free_limit_reached'
+    };
+  }
   freeTierUsage.set(ip, calls + 1);
   saveStats();
   const remaining = FREE_TIER_LIMIT - calls - 1;
-  return { allowed: true, tier: 'free', remaining, warning: remaining < 3 ? remaining + ' free searches remaining. Upgrade at kordagencies.com' : null };
+  return {
+    allowed: true, tier: 'free', remaining,
+    warning: remaining <= 2 ? remaining + ' free search' + (remaining === 1 ? '' : 'es') + ' remaining this month. Upgrade at kordagencies.com to avoid interruption.' : null
+  };
 }
 
-async function handleStripeWebhook(body) {
+// ─── STRIPE ───────────────────────────────────────────────────────────────────
+
+function verifyStripeSignature(body, sig, secret) {
+  if (!secret || !sig) return false;
+  try {
+    const parts = sig.split(',').reduce((acc, part) => { const [k, v] = part.split('='); acc[k] = v; return acc; }, {});
+    const timestamp = parts['t']; const expected = parts['v1'];
+    if (!timestamp || !expected) return false;
+    const computed = crypto.createHmac('sha256', secret).update(timestamp + '.' + body, 'utf8').digest('hex');
+    return crypto.timingSafeEqual(Buffer.from(computed), Buffer.from(expected));
+  } catch(e) { return false; }
+}
+
+async function handleStripeWebhook(body, sig) {
+  const secret = process.env.STRIPE_WEBHOOK_SECRET;
+  if (!secret) return { error: 'Webhook secret not configured', status: 400 };
+  if (!verifyStripeSignature(body, sig, secret)) return { error: 'Invalid signature', status: 400 };
   try {
     const event = JSON.parse(body);
     if (event.type === 'checkout.session.completed') {
@@ -661,23 +588,56 @@ async function handleStripeWebhook(body) {
       const plan = getPlanFromProduct(session.metadata?.product_name || '');
       if (email) {
         const apiKey = generateApiKey();
-        apiKeys.set(apiKey, { email, plan, createdAt: new Date().toISOString(), calls: 0, limit: PLAN_LIMITS[plan] });
+        apiKeys.set(apiKey, { email, plan, createdAt: nowISO(), calls: 0, limit: PLAN_LIMITS[plan] });
         await sendApiKeyEmail(email, apiKey, plan);
-        console.log('API key created for ' + email + ' (' + plan + ')');
+        console.log('[tender] API key created for ' + email + ' (' + plan + ')');
         return { success: true, email, plan };
       }
     }
     return { received: true, type: event.type };
-  } catch(e) { console.error('Webhook error:', e.message); return { error: e.message }; }
+  } catch(e) { return { error: e.message, status: 400 }; }
 }
 
+// ─── HTTP SERVER ──────────────────────────────────────────────────────────────
+
 const server = http.createServer(async (req, res) => {
-  const cors = { 'Access-Control-Allow-Origin': '*', 'Access-Control-Allow-Methods': 'GET, POST, OPTIONS', 'Access-Control-Allow-Headers': 'Content-Type, x-api-key, mcp-session-id, x-stats-key' };
+  const cors = {
+    'Access-Control-Allow-Origin': '*',
+    'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',
+    'Access-Control-Allow-Headers': 'Content-Type, x-api-key, mcp-session-id, x-stats-key'
+  };
   if (req.method === 'OPTIONS') { res.writeHead(200, cors); res.end(); return; }
 
-  if (req.url === '/health' && req.method === 'GET') {
+  if (req.url === '/health' && (req.method === 'GET' || req.method === 'HEAD')) {
+    res.writeHead(200, { ...cors, 'Content-Type': 'application/json' });
+    res.end(JSON.stringify({ status: 'ok', version: VERSION, service: 'tender-mcp', free_tier: 'no API key required for first 10 searches/month', paid_keys_issued: apiKeys.size }));
+    return;
+  }
+
+  if (req.url === '/.well-known/mcp/server-card.json') {
+    res.writeHead(200, { ...cors, 'Content-Type': 'application/json' });
+    res.end(JSON.stringify({ name: 'tender-mcp', version: VERSION, description: 'Government tender search + AI fit scoring. UK, EU, US. Free tier: 10 searches/month.', tools: tools.map(t => ({ name: t.name, description: t.description.slice(0, 100) })), transport: 'stdio', homepage: 'https://kordagencies.com', author: 'ojas1' }));
+    return;
+  }
+
+  if (req.url === '/deps' && req.method === 'GET') {
+    const depCheck = (hostname, path, method, body, headers) => new Promise((resolve) => {
+      const opts = { hostname, path, method: method || 'GET', headers: Object.assign({ 'User-Agent': 'Tender-MCP-HealthCheck/1.0' }, headers || {}) };
+      const r = https.request(opts, (res2) => { res2.resume(); resolve({ ok: res2.statusCode < 500, status: res2.statusCode }); });
+      r.on('error', () => resolve({ ok: false, status: 0, error: 'unreachable' }));
+      r.setTimeout(5000, () => { r.destroy(); resolve({ ok: false, status: 0, error: 'timeout' }); });
+      if (body) r.write(body);
+      r.end();
+    });
+    const tedBody = JSON.stringify({ query: 'PD>=20260101', page: 1, limit: 1, fields: ['ND'] });
+    const [cf, ted, sam, ai] = await Promise.all([
+      depCheck('www.contractsfinder.service.gov.uk', '/Published/Notices/OCDS/Search?publishedFrom=2026-04-01&limit=1'),
+      depCheck('api.ted.europa.eu', '/v3/notices/search', 'POST', tedBody, { 'Content-Type': 'application/json', 'Content-Length': String(Buffer.byteLength(tedBody)) }),
+      depCheck('api.sam.gov', '/prod/opportunities/v2/search?api_key=' + (SAM_GOV_API_KEY || 'DEMO_KEY') + '&q=test&limit=1'),
+      depCheck('api.anthropic.com', '/v1/models', 'GET', null, { 'x-api-key': ANTHROPIC_API_KEY, 'anthropic-version': '2023-06-01' })
+    ]);
     res.writeHead(200, { ...cors, 'Content-Type': 'application/json' });
-    res.end(JSON.stringify({ status: 'ok', version: '1.0.1', service: 'tender-mcp', free_tier: 'no API key required for first 10 searches/month', paid_keys_issued: apiKeys.size }));
+    res.end(JSON.stringify({ server: 'tender-mcp', checked_at: nowISO(), dependencies: { contracts_finder: cf, eu_ted: ted, sam_gov: sam, anthropic: ai } }));
     return;
   }
 
@@ -693,7 +653,14 @@ const server = http.createServer(async (req, res) => {
 
   if (req.url === '/webhook/stripe' && req.method === 'POST') {
     let body = ''; req.on('data', c => body += c);
-    req.on('end', async () => { const result = await handleStripeWebhook(body); res.writeHead(200, { ...cors, 'Content-Type': 'application/json' }); res.end(JSON.stringify(result)); });
+    req.on('end', async () => {
+      const sig = req.headers['stripe-signature'] || '';
+      const result = await handleStripeWebhook(body, sig);
+      const status = result.status || 200;
+      delete result.status;
+      res.writeHead(status, { ...cors, 'Content-Type': 'application/json' });
+      res.end(JSON.stringify(result));
+    });
     return;
   }
 
@@ -704,20 +671,8 @@ const server = http.createServer(async (req, res) => {
         const request = JSON.parse(body);
         let response;
 
-        if (request.method !== 'initialize' && request.method !== 'notifications/initialized') {
-          const toolName = request.method === 'tools/call' ? request.params?.name : null;
-          const access = checkAccess(req, toolName);
-          if (!access.allowed) {
-            res.writeHead(429, { ...cors, 'Content-Type': 'application/json' });
-            res.end(JSON.stringify({ jsonrpc: '2.0', id: request.id, error: { code: -32000, message: access.reason, upgrade_url: 'https://kordagencies.com' } }));
-            return;
-          }
-          req._accessWarning = access.warning;
-          req._tier = access.tier;
-        }
-
         if (request.method === 'initialize') {
-          response = { jsonrpc: '2.0', id: request.id, result: { protocolVersion: '2024-11-05', capabilities: { tools: {}, resources: {}, prompts: {} }, serverInfo: { name: 'tender-mcp', version: '1.0.1', description: 'Government tender search and AI relevance scoring for AI agents. UK Contracts Finder, EU TED, US SAM.gov. AI-powered opportunity scoring. Free tier: 10 searches/month.' } } };
+          response = { jsonrpc: '2.0', id: request.id, result: { protocolVersion: '2024-11-05', capabilities: { tools: {}, resources: {}, prompts: {} }, serverInfo: { name: 'tender-mcp', version: VERSION, description: 'Government tender search and AI fit scoring. UK, EU, US. 2 tools. Free tier: 10 searches/month.' } } };
         } else if (request.method === 'notifications/initialized') {
           res.writeHead(204, cors); res.end(); return;
         } else if (request.method === 'tools/list') {
@@ -728,12 +683,43 @@ const server = http.createServer(async (req, res) => {
           response = { jsonrpc: '2.0', id: request.id, result: { prompts: [] } };
         } else if (request.method === 'tools/call') {
           const { name, arguments: toolArgs } = request.params;
+          const access = checkAccess(req, name);
+
+          if (!access.allowed) {
+            res.writeHead(200, { ...cors, 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ jsonrpc: '2.0', id: request.id, result: { content: [{ type: 'text', text: JSON.stringify({ error: access.reason, upgrade_url: 'https://kordagencies.com', _disclaimer: LEGAL_DISCLAIMER }) }] } }));
+            return;
+          }
+
           const ip = req.headers['x-forwarded-for'] || req.socket.remoteAddress || 'unknown';
-          usageLog.push({ tool: name, tier: req._tier || 'paid', time: new Date().toISOString(), ip: ip.slice(0, 8) + '...' });
+          usageLog.push({ tool: name, tier: access.tier, time: nowISO(), ip: ip.slice(0, 8) + '...' });
           if (usageLog.length > 1000) usageLog.shift();
           saveStats();
-          const result = await executeTool(name, toolArgs || {});
-          if (req._accessWarning) result._notice = req._accessWarning;
+
+          const result = await executeTool(name, toolArgs || {}, access.tier);
+          if (access.warning) result._notice = access.warning;
+
+          // Free tier gating for search_tenders results
+          if (access.tier === 'free' && name === 'search_tenders' && result.tenders) {
+            const total = result.tenders.length;
+            const shown = result.tenders.slice(0, 3);
+            const hidden = total - shown.length;
+            result.tenders = shown;
+            if (hidden > 0) {
+              result._free_tier = 'Showing 3 of ' + total + ' results (' + hidden + ' hidden). ' + (access.remaining || 0) + ' free searches remaining this month. Upgrade to Pro ($199/month) at kordagencies.com for full results.';
+            }
+            // Gate reasons on scoring for free tier
+            if (result.scoring && result.scoring.market_insight) {
+              result.scoring.market_insight = '[Upgrade to Pro for market insights — kordagencies.com]';
+            }
+            if (result.tenders) {
+              result.tenders = result.tenders.map(t => {
+                if (t.reasons) { const { reasons, ...rest } = t; return { ...rest, _reasons: '[Upgrade to Pro for full scoring reasons — kordagencies.com]' }; }
+                return t;
+              });
+            }
+          }
+
           response = { jsonrpc: '2.0', id: request.id, result: { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] } };
         } else {
           response = { jsonrpc: '2.0', id: request.id, error: { code: -32601, message: 'Method not found: ' + request.method } };
@@ -741,14 +727,17 @@ const server = http.createServer(async (req, res) => {
 
         res.writeHead(200, { ...cors, 'Content-Type': 'application/json' });
         res.end(JSON.stringify(response));
-      } catch(e) { res.writeHead(400, { ...cors, 'Content-Type': 'application/json' }); res.end(JSON.stringify({ error: e.message })); }
+      } catch(e) {
+        res.writeHead(400, { ...cors, 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ error: e.message }));
+      }
     });
     return;
   }
 
   if (req.method === 'GET' && req.url === '/') {
     res.writeHead(200, { ...cors, 'Content-Type': 'application/json' });
-    res.end(JSON.stringify({ name: 'tender-mcp', version: '1.0.1', status: 'ok', tools: 5, free_tier: '10 searches/month, no API key required', description: 'Government tender search + AI scoring. UK, EU, US.', upgrade: 'https://kordagencies.com' }));
+    res.end(JSON.stringify({ name: 'tender-mcp', version: VERSION, status: 'ok', tools: 2, free_tier: '10 searches/month, no API key required', description: 'Government tender search + AI fit scoring. UK, EU, US.', upgrade: 'https://kordagencies.com' }));
     return;
   }
 
@@ -757,9 +746,10 @@ const server = http.createServer(async (req, res) => {
 
 server.listen(PORT, () => {
   loadStats();
-  console.log('Tender MCP v1.0.1 running on port ' + PORT);
-  console.log('Free tier: ' + FREE_TIER_LIMIT + ' searches/IP/month, no API key required');
+  console.log('Tender MCP v' + VERSION + ' running on port ' + PORT);
+  console.log('Tools: 2 (search_tenders, get_tender_intelligence)');
+  console.log('Free tier: ' + FREE_TIER_LIMIT + ' searches/IP/month');
   console.log('Resend: ' + (RESEND_API_KEY ? 'configured' : 'MISSING'));
   console.log('Anthropic: ' + (ANTHROPIC_API_KEY ? 'configured' : 'MISSING'));
-  console.log('SAM.gov: ' + (SAM_GOV_API_KEY ? 'configured (production key)' : 'using DEMO_KEY — register at api.sam.gov for 1000/day'));
+  console.log('SAM.gov: ' + (SAM_GOV_API_KEY ? 'configured' : 'using DEMO_KEY'));
 });