vantage-peers-mcp 2.17.0 → 2.18.0

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## [2.18.0] — 2026-08-11
+
+### Changed
+- **Expose only the CORE tool surface (mission `vp-mcp-alias-cleanup-v1`, S8).** A data-driven allowlist (`mcp-server/tool-exposure.json`, `{"core":[...]}`) masks every tool whose `T2_verdict` is not `CORE` in `analysis/vantagepeers/vp-restructuring/vp-by-tool-day158.csv`. Masking ≠ deletion: non-CORE tools stay registered + handler-wired and are `disable()`d so `tools/list` does not advertise them; reverting = removing a line from the data file. Exposed = CORE ∩ registered = **66** tools; masked = **43** (registered 109). The exposure list is derived from the CSV, never typed; a name in the file matching no registered tool makes the server refuse to start, naming it. Applied at the single shared `registerTools` surface, so both stdio and HTTP transports (online clients) inherit the reduced surface. 5 CORE names from the day158 CSV are #1169-removed aliases whose CORE survivors stay exposed (zero capability lost). Tests: `test/tool-exposure.test.ts` 2/2, full suite 1071 passed / 0 failed, tsc 0.
+
 ## [2.17.0] — 2026-08-11
 
 ### Removed

package/README.md

@@ -6,7 +6,7 @@
 [![MCP tools: 109+](https://img.shields.io/badge/MCP_tools-109+-green)]()
 
 > **Package:** `vantage-peers-mcp` (plain — NOT `@vantageos/vantage-peers-mcp`)
-> **Current version:** `2.17.0` (alias-cleanup release — 14 duplicate alias tools removed, fleet-used survivor of each pair kept)
+> **Current version:** `2.18.0` (S8 CORE tool-exposure filter release — server now advertises only 66 CORE tools of 109 registered; masking is data-driven (`tool-exposure.json`) and reversible, non-CORE tools stay registered/handler-wired but are not listed)
 > **License:** FSL-1.1-Apache-2.0
 > **Repo:** https://github.com/vantageos-agency/vantage-peers (full monorepo README at `/README.md`)
 > **Docs:** https://vantagepeers.com/docs

package/dist/server.js

@@ -57,7 +57,7 @@ const convexUrl = loadConvexUrl();
 const convex = new ConvexHttpClient(convexUrl);
 const server = new McpServer({
     name: "vantage-peers",
-    version: "2.17.0",
+    version: "2.18.0",
 });
 // stdio transport has no OAuth identity → pass oauthCtx=undefined to opt into
 // the legacy bearer / system-scope code path inside registerTools (same path

package/dist/src/tools.js

@@ -9,6 +9,9 @@
  */
 import { ErrorCode, McpError } from "@modelcontextprotocol/sdk/types.js";
 import { LEGACY_WILDCARD_CTX, scopeFilterGet, scopeFilterList, } from "@vantageos/cloud-identity";
+import { readFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
 import { z } from "zod";
 import { checkFromAllowed, checkNamespaceRead, checkNamespaceWrite, isMasterScope, } from "./auth.js";
 import { FreshStateGuardError, guardFreshState } from "./fresh-state-guard.js";
@@ -1232,7 +1235,88 @@ export const validateTaskPayloadOutputSchema = z.object({
 // ─────────────────────────────────────────────────────────────────────────────
 // Main export: register all tools against a server + convex client pair
 // ─────────────────────────────────────────────────────────────────────────────
+// ─────────────────────────────────────────────────────────────────────────────
+// Tool exposure filter — DATA-DRIVEN CORE allowlist (S8, mission
+// vp-mcp-alias-cleanup-v1). Only tool names listed in `core` inside
+// tool-exposure.json are registered/advertised to clients; every other tool
+// stays fully present in the code + DB, just not exposed. The list lives as
+// DATA, never a code constant — reverting = editing tool-exposure.json.
+// VP_TOOL_EXPOSURE_PATH overrides the path for tests only.
+//
+// Derived from analysis/vantagepeers/vp-restructuring/vp-by-tool-day158.csv
+// (outil column where T2_verdict == "CORE"), intersected with the
+// actually-registered tool-name set — see tool-exposure.json's own header.
+// ─────────────────────────────────────────────────────────────────────────────
+function resolveToolExposurePath() {
+    if (process.env.VP_TOOL_EXPOSURE_PATH) {
+        return resolve(process.env.VP_TOOL_EXPOSURE_PATH);
+    }
+    // This module resolves at "<mcp-server>/src/tools.ts" when run from source
+    // (bun run server.ts) and at "<mcp-server>/dist/src/tools.js" when run from
+    // the tsc build (dist/server.js) — tool-exposure.json always lives at the
+    // mcp-server package root, one directory further up in the built case.
+    const here = dirname(fileURLToPath(import.meta.url));
+    const fromSource = resolve(here, "../tool-exposure.json");
+    const fromDist = resolve(here, "../../tool-exposure.json");
+    try {
+        readFileSync(fromSource, "utf-8");
+        return fromSource;
+    }
+    catch {
+        return fromDist;
+    }
+}
+function loadCoreToolNames() {
+    const path = resolveToolExposurePath();
+    let raw;
+    try {
+        raw = readFileSync(path, "utf-8");
+    }
+    catch (err) {
+        throw new Error(`tool-exposure: failed to read ${path}: ${err.message}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        throw new Error(`tool-exposure: invalid JSON in ${path}: ${err.message}`);
+    }
+    const core = parsed?.core;
+    if (!Array.isArray(core) || !core.every((n) => typeof n === "string")) {
+        throw new Error(`tool-exposure: "core" must be an array of strings in ${path}`);
+    }
+    return core;
+}
 export function registerTools(server, convex, oauthCtx) {
+    // Intercept EVERY server.tool(...) call made below (directly or through
+    // defineTool()/registerExportOkfBundle()/registerImportOkfBundle()/
+    // registerKbIngestTools()/registerValidateOkfBundle() — they all receive
+    // this same `server` instance) so only CORE names are actually advertised.
+    //
+    // The registration itself always goes through — the tool stays fully
+    // present in the code + handler wiring (masking ≠ deletion; a non-CORE
+    // tool's handler is still reachable in-process, e.g. by existing unit
+    // tests that capture registrations against a stub McpServer). What is
+    // masked is client-facing ADVERTISEMENT: a non-CORE tool is immediately
+    // `.disable()`d on its returned RegisteredTool, which is the MCP SDK's own
+    // mechanism for keeping a tool out of `tools/list` (server/mcp.js filters
+    // `tool.enabled` when building that list) while refusing `tools/call` on
+    // it with an explicit "Tool <name> disabled" error — never a silent
+    // unregistration.
+    const coreToolNames = new Set(loadCoreToolNames());
+    const allRegisteredNames = new Set();
+    const realTool = server.tool.bind(server);
+    // biome-ignore lint/suspicious/noExplicitAny: narrowing the overloaded McpServer#tool signature for interception.
+    server.tool = (name, ...rest) => {
+        allRegisteredNames.add(name);
+        // @ts-expect-error — forwarding to the real overloaded signature.
+        const registered = realTool(name, ...rest);
+        if (!coreToolNames.has(name) && registered && typeof registered.disable === "function") {
+            registered.disable();
+        }
+        return registered;
+    };
     // ── scope guards (no-op when oauthCtx is undefined — legacy bearer path) ────
     const guardFrom = (from) => {
         const err = checkFromAllowed(oauthCtx, from);
@@ -7216,4 +7300,8 @@ export function registerTools(server, convex, oauthCtx) {
             return mcpConvexError(error);
         }
     });
+    const missingCoreNames = [...coreToolNames].filter((name) => !allRegisteredNames.has(name));
+    if (missingCoreNames.length > 0) {
+        throw new Error(`tool-exposure: core name(s) not found among registered tools: ${missingCoreNames.join(", ")}`);
+    }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "vantage-peers-mcp",
-	"version": "2.17.0",
+	"version": "2.18.0",
 	"description": "MCP server for VantagePeers — shared memory, messaging, and task coordination for AI agent teams",
 	"type": "module",
 	"main": "./dist/server.js",
@@ -16,6 +16,7 @@
 	},
 	"files": [
 		"dist/",
+		"tool-exposure.json",
 		"README.md",
 		"CHANGELOG.md"
 	],

package/tool-exposure.json

@@ -0,0 +1,70 @@
+{
+	"core": [
+		"add_task_dependency",
+		"billing_summary_by_project",
+		"block_task",
+		"bulk_complete_tasks",
+		"check_messages",
+		"checkout_task",
+		"complete_task",
+		"create_briefing_note",
+		"create_mission",
+		"create_recurring_task",
+		"create_task",
+		"delete_message",
+		"delete_recurring_task",
+		"delete_task",
+		"export_okf_bundle",
+		"get_briefing_note",
+		"get_diary",
+		"get_episode",
+		"get_memory",
+		"get_message",
+		"get_mission",
+		"get_mission_template",
+		"get_profile",
+		"get_recurring_task",
+		"get_task",
+		"hybrid_search",
+		"import_okf_bundle",
+		"improvisation_digest",
+		"instantiate_template_into_mission",
+		"list_briefing_notes",
+		"list_broadcast_status",
+		"list_diaries",
+		"list_episodes",
+		"list_memories",
+		"list_messages",
+		"list_missions",
+		"list_peers",
+		"list_recurring_tasks",
+		"list_tasks",
+		"list_tasks_by_mission",
+		"mark_as_read",
+		"pause_recurring_task",
+		"recall",
+		"resume_recurring_task",
+		"search_briefing_notes_by_keyword",
+		"search_episodes_by_keyword",
+		"search_episodes_by_semantic",
+		"search_messages_by_keyword",
+		"search_tasks_by_keyword",
+		"send_message",
+		"set_summary",
+		"soft_delete_document",
+		"soft_delete_memory",
+		"start_task",
+		"store_document_chunked",
+		"store_episode",
+		"store_memory",
+		"text_search",
+		"update_briefing_note",
+		"update_mission",
+		"update_mission_status",
+		"update_mission_template",
+		"update_profile",
+		"update_recurring_task",
+		"update_task",
+		"write_diary"
+	]
+}