@bluenotelogic/mcp 0.2.2

package/README.md

@@ -0,0 +1,85 @@
+# @bluenotelogic/mcp
+
+MCP server for CaveauAI — inject corpus content into Claude Code, Claude Desktop, Cursor, Continue, or any other MCP host at runtime, scoped to your retrieval profiles. Published under Blue Note Logic's npm scope; serves the CaveauAI product.
+
+## Install
+
+```bash
+npx @bluenotelogic/mcp@latest --stdio
+```
+
+## Configure
+
+Set two environment variables:
+
+| Variable | Required | Default | Notes |
+|----------|----------|---------|-------|
+| `CAVEAU_API_TOKEN` | yes (stdio) | — | Mint one in the portal at `caveauai.bluenotelogic.com/app/mcp`. Shown once. |
+| `CAVEAU_BASE_URL`  | no | `https://ai.bluenotelogic.com` | Set this if you self-host or talk to staging. |
+
+## Claude Desktop
+
+Add to `claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "caveau": {
+      "command": "npx",
+      "args": ["-y", "@bluenotelogic/mcp", "--stdio"],
+      "env": {
+        "CAVEAU_API_TOKEN": "mcp_…"
+      }
+    }
+  }
+}
+```
+
+## Claude Code
+
+```bash
+claude mcp add caveau -- npx -y @bluenotelogic/mcp --stdio
+# Then set CAVEAU_API_TOKEN in your shell or via `claude mcp env`
+```
+
+## Hosted Streamable HTTP
+
+For hosts that support remote MCP (Claude Desktop, Cursor with the latest connectors), use the hosted URL instead of npx:
+
+```
+https://mcp.caveauai.bluenotelogic.com/mcp
+Authorization: Bearer mcp_…
+```
+
+## Tools
+
+| Tool | Purpose |
+|------|---------|
+| `caveau.search` | RAG search; returns ranked chunks with source metadata. Optional `profile`, `top_k`, `category`. |
+| `caveau.list_profiles` | List your saved retrieval profiles (named criteria sets). |
+| `caveau.list_corpora` | List corpora you can query — your private ones plus shared subscriptions. |
+| `caveau.get_document` | Fetch a single document and its chunks by id. |
+| `caveau.corpus_stats` | Per-corpus document/chunk counts plus your plan caps. |
+| `caveau.ingest_text` | Add text to one of your private corpora (plan-gated). |
+
+## Retrieval profiles
+
+A profile is a saved bundle of *what to retrieve*: which corpora, which search method (vector/keyword/hybrid), top_k, recency cutoff, category and tag whitelists, embedding-model override. Build them in the portal at `caveauai.bluenotelogic.com/app/mcp` and reference them by slug from `caveau.search`.
+
+## Local development
+
+```bash
+npm install
+npm run build
+CAVEAU_API_TOKEN=… node dist/index.js --stdio
+```
+
+Test the server end-to-end with the official inspector:
+
+```bash
+npx @modelcontextprotocol/inspector node dist/index.js --stdio
+```
+
+## License
+
+UNLICENSED — © Blue Note Logic.

package/dist/api.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Thin HTTP client for the CaveauAI MCP runtime API at /api/mcp/*.
+ * All calls forward the client's MCP token via the X-MCP-Token header.
+ * The server enforces tenant isolation and quota; this client just bubbles
+ * up the JSON body and HTTP status.
+ */
+export interface ApiConfig {
+    baseUrl: string;
+    token: string;
+    timeoutMs?: number;
+}
+export declare class ApiError extends Error {
+    readonly status: number;
+    readonly body: unknown;
+    constructor(status: number, body: unknown, message: string);
+}
+export declare class CaveauApi {
+    private readonly base;
+    private readonly token;
+    private readonly timeoutMs;
+    constructor(cfg: ApiConfig);
+    get<T>(path: string): Promise<T>;
+    post<T>(path: string, body: unknown): Promise<T>;
+    private request;
+}

package/dist/api.js

@@ -0,0 +1,74 @@
+/**
+ * Thin HTTP client for the CaveauAI MCP runtime API at /api/mcp/*.
+ * All calls forward the client's MCP token via the X-MCP-Token header.
+ * The server enforces tenant isolation and quota; this client just bubbles
+ * up the JSON body and HTTP status.
+ */
+export class ApiError extends Error {
+    status;
+    body;
+    constructor(status, body, message) {
+        super(message);
+        this.status = status;
+        this.body = body;
+        this.name = "ApiError";
+    }
+}
+export class CaveauApi {
+    base;
+    token;
+    timeoutMs;
+    constructor(cfg) {
+        this.base = cfg.baseUrl.replace(/\/+$/, "");
+        this.token = cfg.token;
+        this.timeoutMs = cfg.timeoutMs ?? 30_000;
+        if (!this.token)
+            throw new Error("CAVEAU_API_TOKEN is required");
+        if (!this.base)
+            throw new Error("CAVEAU_BASE_URL is required");
+    }
+    async get(path) {
+        return this.request("GET", path);
+    }
+    async post(path, body) {
+        return this.request("POST", path, body);
+    }
+    async request(method, path, body) {
+        const url = `${this.base}/api/mcp${path.startsWith("/") ? path : `/${path}`}`;
+        const ctrl = new AbortController();
+        const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);
+        try {
+            const res = await fetch(url, {
+                method,
+                headers: {
+                    "X-MCP-Token": this.token,
+                    "Content-Type": "application/json",
+                    Accept: "application/json",
+                },
+                body: body !== undefined ? JSON.stringify(body) : undefined,
+                signal: ctrl.signal,
+            });
+            const text = await res.text();
+            let parsed = null;
+            if (text.length > 0) {
+                try {
+                    parsed = JSON.parse(text);
+                }
+                catch {
+                    parsed = text;
+                }
+            }
+            if (!res.ok) {
+                const detail = parsed && typeof parsed === "object" && "error" in parsed
+                    ? String(parsed.error)
+                    : `HTTP ${res.status}`;
+                throw new ApiError(res.status, parsed, detail);
+            }
+            return parsed;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+}
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEf;IACA;IAFlB,YACkB,MAAc,EACd,IAAa,EAC7B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAS;QAI7B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,MAAM,OAAO,SAAS;IACH,IAAI,CAAS;IACb,KAAK,CAAS;IACd,SAAS,CAAS;IAEnC,YAAY,GAAc;QACxB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,IAAY;QACvB,OAAO,IAAI,CAAC,OAAO,CAAI,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAa;QACvC,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAsB,EACtB,IAAY,EACZ,IAAc;QAEd,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QAC9E,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM;gBACN,OAAO,EAAE;oBACP,aAAa,EAAE,IAAI,CAAC,KAAK;oBACzB,cAAc,EAAE,kBAAkB;oBAClC,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC3D,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,MAAM,GAAY,IAAI,CAAC;YAC3B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,GAAG,IAAI,CAAC;gBAChB,CAAC;YACH,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,MAAM,GACV,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,MAAM;oBACvD,CAAC,CAAC,MAAM,CAAE,MAA6B,CAAC,KAAK,CAAC;oBAC9C,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;gBAC3B,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACjD,CAAC;YACD,OAAO,MAAW,CAAC;QACrB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF"}

package/dist/http.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Streamable HTTP transport for caveau-mcp.
+ *
+ * Multi-tenant: each MCP session is tied to a per-client token presented as
+ * `Authorization: Bearer <token>` on the initialize request. The token is
+ * validated upfront by hitting /api/mcp/profiles (cheap, tenant-scoped). All
+ * subsequent tool calls in the session reuse that token.
+ *
+ * Three routes per the MCP spec:
+ *   POST   /mcp     JSON-RPC requests (initialize + subsequent calls)
+ *   GET    /mcp     SSE stream from server to client
+ *   DELETE /mcp     Tear down a session
+ *
+ * Plus an unauthenticated /healthz for Caddy + Uptime Kuma.
+ */
+export interface HttpServerOptions {
+    port: number;
+    apiBaseUrl: string;
+    /**
+     * If true, allow requests without a Bearer token (token is then taken from
+     * CAVEAU_API_TOKEN env). Useful for single-tenant test deployments. Default false.
+     */
+    allowEnvFallback?: boolean;
+}
+export declare function startHttpServer(opts: HttpServerOptions): Promise<void>;

package/dist/http.js

@@ -0,0 +1,158 @@
+/**
+ * Streamable HTTP transport for caveau-mcp.
+ *
+ * Multi-tenant: each MCP session is tied to a per-client token presented as
+ * `Authorization: Bearer <token>` on the initialize request. The token is
+ * validated upfront by hitting /api/mcp/profiles (cheap, tenant-scoped). All
+ * subsequent tool calls in the session reuse that token.
+ *
+ * Three routes per the MCP spec:
+ *   POST   /mcp     JSON-RPC requests (initialize + subsequent calls)
+ *   GET    /mcp     SSE stream from server to client
+ *   DELETE /mcp     Tear down a session
+ *
+ * Plus an unauthenticated /healthz for Caddy + Uptime Kuma.
+ */
+import express from "express";
+import { randomUUID } from "node:crypto";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
+import { buildServer } from "./server.js";
+export async function startHttpServer(opts) {
+    const sessions = new Map();
+    const app = express();
+    // Health route (no auth, no body parsing) — wired before json middleware so it never blocks
+    app.get("/healthz", (_req, res) => {
+        res.status(200).json({
+            status: "ok",
+            service: "caveau-mcp",
+            sessions: sessions.size,
+            time: new Date().toISOString(),
+        });
+    });
+    app.use(express.json({ limit: "1mb" }));
+    app.post("/mcp", async (req, res) => {
+        try {
+            const sessionId = headerString(req, "mcp-session-id");
+            let entry = sessionId ? sessions.get(sessionId) : undefined;
+            if (!entry && sessionId) {
+                // Session id supplied but unknown — likely stale
+                respondError(res, -32000, "Unknown or expired session", 404);
+                return;
+            }
+            if (!entry) {
+                // Brand-new session — must be an initialize request
+                if (!isInitializeRequest(req.body)) {
+                    respondError(res, -32000, "First request must be initialize", 400);
+                    return;
+                }
+                const token = extractBearer(req) ?? (opts.allowEnvFallback ? (process.env.CAVEAU_API_TOKEN ?? "") : "");
+                if (!token) {
+                    respondError(res, -32001, "Authorization: Bearer <mcp-token> required", 401);
+                    return;
+                }
+                const ok = await validateToken(opts.apiBaseUrl, token);
+                if (!ok) {
+                    respondError(res, -32001, "Invalid or revoked MCP token", 401);
+                    return;
+                }
+                const transport = new StreamableHTTPServerTransport({
+                    sessionIdGenerator: () => randomUUID(),
+                    onsessioninitialized: (id) => {
+                        sessions.set(id, { transport, token, createdAt: Date.now() });
+                        console.log(`[caveau-mcp] session ${id} opened (${sessions.size} active)`);
+                    },
+                });
+                transport.onclose = () => {
+                    if (transport.sessionId) {
+                        sessions.delete(transport.sessionId);
+                        console.log(`[caveau-mcp] session ${transport.sessionId} closed (${sessions.size} active)`);
+                    }
+                };
+                const server = buildServer({
+                    apiBaseUrl: opts.apiBaseUrl,
+                    apiToken: token,
+                });
+                await server.connect(transport);
+                await transport.handleRequest(req, res, req.body);
+                return;
+            }
+            await entry.transport.handleRequest(req, res, req.body);
+        }
+        catch (err) {
+            console.error("[caveau-mcp] POST /mcp error:", err);
+            if (!res.headersSent) {
+                respondError(res, -32603, "Internal error", 500);
+            }
+        }
+    });
+    app.get("/mcp", async (req, res) => {
+        const sessionId = headerString(req, "mcp-session-id");
+        const entry = sessionId ? sessions.get(sessionId) : undefined;
+        if (!entry) {
+            res.status(404).json({ error: "Unknown or expired session" });
+            return;
+        }
+        await entry.transport.handleRequest(req, res);
+    });
+    app.delete("/mcp", async (req, res) => {
+        const sessionId = headerString(req, "mcp-session-id");
+        const entry = sessionId ? sessions.get(sessionId) : undefined;
+        if (!entry) {
+            res.status(404).json({ error: "Unknown or expired session" });
+            return;
+        }
+        await entry.transport.handleRequest(req, res);
+    });
+    await new Promise((resolve) => {
+        app.listen(opts.port, () => {
+            console.log(`[caveau-mcp] Streamable HTTP listening on :${opts.port}`);
+            resolve();
+        });
+    });
+}
+function headerString(req, name) {
+    const v = req.headers[name];
+    if (typeof v === "string")
+        return v;
+    if (Array.isArray(v))
+        return v[0];
+    return undefined;
+}
+function extractBearer(req) {
+    const auth = headerString(req, "authorization");
+    if (!auth)
+        return undefined;
+    const m = /^Bearer\s+(.+)$/i.exec(auth);
+    return m?.[1]?.trim();
+}
+async function validateToken(apiBaseUrl, token) {
+    try {
+        const url = `${apiBaseUrl.replace(/\/+$/, "")}/api/mcp/profiles`;
+        const ctrl = new AbortController();
+        const timer = setTimeout(() => ctrl.abort(), 8_000);
+        try {
+            const res = await fetch(url, {
+                method: "GET",
+                headers: { "X-MCP-Token": token, Accept: "application/json" },
+                signal: ctrl.signal,
+            });
+            return res.ok;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    catch (err) {
+        console.error("[caveau-mcp] token validation failed:", err);
+        return false;
+    }
+}
+function respondError(res, code, message, http) {
+    res.status(http).json({
+        jsonrpc: "2.0",
+        error: { code, message },
+        id: null,
+    });
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAkB1C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAuB;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,4FAA4F;IAC5F,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAChC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,YAAY;YACrB,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC/B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAExC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;YACtD,IAAI,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAE5D,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC;gBACxB,iDAAiD;gBACjD,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,4BAA4B,EAAE,GAAG,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YAED,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,oDAAoD;gBACpD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnC,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,kCAAkC,EAAE,GAAG,CAAC,CAAC;oBACnE,OAAO;gBACT,CAAC;gBACD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACxG,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,4CAA4C,EAAE,GAAG,CAAC,CAAC;oBAC7E,OAAO;gBACT,CAAC;gBAED,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBACvD,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,8BAA8B,EAAE,GAAG,CAAC,CAAC;oBAC/D,OAAO;gBACT,CAAC;gBAED,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;oBAClD,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;oBACtC,oBAAoB,EAAE,CAAC,EAAE,EAAE,EAAE;wBAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;wBAC9D,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,YAAY,QAAQ,CAAC,IAAI,UAAU,CAAC,CAAC;oBAC7E,CAAC;iBACF,CAAC,CAAC;gBAEH,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;oBACvB,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;wBACxB,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;wBACrC,OAAO,CAAC,GAAG,CAAC,wBAAwB,SAAS,CAAC,SAAS,YAAY,QAAQ,CAAC,IAAI,UAAU,CAAC,CAAC;oBAC9F,CAAC;gBACH,CAAC,CAAC;gBAEF,MAAM,MAAM,GAAG,WAAW,CAAC;oBACzB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,QAAQ,EAAE,KAAK;iBAChB,CAAC,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAEhC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YAED,MAAM,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAC;YACpD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;YACzB,OAAO,CAAC,GAAG,CAAC,8CAA8C,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACvE,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,GAAY,EAAE,IAAY;IAC9C,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,UAAkB,EAAE,KAAa;IAC5D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBAC7D,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAa,EAAE,IAAY,EAAE,OAAe,EAAE,IAAY;IAC9E,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QACpB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACxB,EAAE,EAAE,IAAI;KACT,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+/**
+ * caveau-mcp — CaveauAI's MCP server.
+ *
+ * Two transports from a single binary:
+ *   --stdio   Pipe Claude Code/Desktop stdio to the CaveauAI runtime API.
+ *             This is what `npx @caveauai/mcp --stdio` runs.
+ *   --http    Streamable HTTP transport on PORT (default 3000). This is the
+ *             hosted-mode binary that runs in Docker on Colin behind Caddy at
+ *             mcp.caveauai.bluenotelogic.com.
+ *
+ * Required env:
+ *   CAVEAU_API_TOKEN   the per-client MCP token minted in the portal
+ *   CAVEAU_BASE_URL    base URL for ai-portal (default https://ai.bluenotelogic.com)
+ *
+ * In --http mode, CAVEAU_API_TOKEN is unused at startup; each request supplies
+ * its own token via the standard MCP Authorization header (forwarded as
+ * X-MCP-Token).
+ */
+export {};

package/dist/index.js

@@ -0,0 +1,59 @@
+#!/usr/bin/env node
+/**
+ * caveau-mcp — CaveauAI's MCP server.
+ *
+ * Two transports from a single binary:
+ *   --stdio   Pipe Claude Code/Desktop stdio to the CaveauAI runtime API.
+ *             This is what `npx @caveauai/mcp --stdio` runs.
+ *   --http    Streamable HTTP transport on PORT (default 3000). This is the
+ *             hosted-mode binary that runs in Docker on Colin behind Caddy at
+ *             mcp.caveauai.bluenotelogic.com.
+ *
+ * Required env:
+ *   CAVEAU_API_TOKEN   the per-client MCP token minted in the portal
+ *   CAVEAU_BASE_URL    base URL for ai-portal (default https://ai.bluenotelogic.com)
+ *
+ * In --http mode, CAVEAU_API_TOKEN is unused at startup; each request supplies
+ * its own token via the standard MCP Authorization header (forwarded as
+ * X-MCP-Token).
+ */
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { buildServer } from "./server.js";
+import { startHttpServer } from "./http.js";
+const args = new Set(process.argv.slice(2));
+const useStdio = args.has("--stdio");
+const useHttp = args.has("--http");
+if (useStdio === useHttp) {
+    // Default to stdio when neither is given (the npx case).
+    if (!useStdio && !useHttp) {
+        args.add("--stdio");
+    }
+    else {
+        fail("Pass exactly one of --stdio or --http");
+    }
+}
+const baseUrl = (process.env.CAVEAU_BASE_URL ?? "https://ai.bluenotelogic.com").replace(/\/+$/, "");
+if (args.has("--stdio")) {
+    const token = process.env.CAVEAU_API_TOKEN ?? "";
+    if (!token)
+        fail("CAVEAU_API_TOKEN env var is required for --stdio mode");
+    const server = buildServer({ apiBaseUrl: baseUrl, apiToken: token });
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    // Block; transport stays open until the host closes stdin.
+}
+else {
+    const port = parseInt(process.env.PORT ?? "3000", 10);
+    if (!Number.isFinite(port) || port < 1 || port > 65535)
+        fail(`Bad PORT: ${process.env.PORT}`);
+    await startHttpServer({
+        port,
+        apiBaseUrl: baseUrl,
+        allowEnvFallback: process.env.CAVEAU_ALLOW_ENV_FALLBACK === "1",
+    });
+}
+function fail(msg) {
+    process.stderr.write(`caveau-mcp: ${msg}\n`);
+    process.exit(2);
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACrC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAEnC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;IACzB,yDAAyD;IACzD,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,8BAA8B,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEpG,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;IACxB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;IACjD,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,uDAAuD,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,2DAA2D;AAC7D,CAAC;KAAM,CAAC;IACN,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK;QAAE,IAAI,CAAC,aAAa,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9F,MAAM,eAAe,CAAC;QACpB,IAAI;QACJ,UAAU,EAAE,OAAO;QACnB,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG;KAChE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/prompts/draft_with_refs.d.ts

@@ -0,0 +1,6 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+/**
+ * "Draft <doc> citing my corpus" — primes the model to write a longer artefact
+ * (memo, brief, email) grounded in CaveauAI corpus chunks with footnotes.
+ */
+export declare function registerDraftWithRefsPrompt(server: McpServer): void;

package/dist/prompts/draft_with_refs.js

@@ -0,0 +1,42 @@
+import { z } from "zod";
+/**
+ * "Draft <doc> citing my corpus" — primes the model to write a longer artefact
+ * (memo, brief, email) grounded in CaveauAI corpus chunks with footnotes.
+ */
+export function registerDraftWithRefsPrompt(server) {
+    server.registerPrompt("caveau.draft_with_refs", {
+        title: "Draft a document citing my corpus",
+        description: "Draft a longer artefact (memo, briefing, email) backed by retrieved chunks from the client's CaveauAI corpus, with footnote citations.",
+        argsSchema: {
+            artefact: z
+                .string()
+                .describe("What to draft (e.g. 'a one-page board memo on the new merger filing rules')."),
+            audience: z
+                .string()
+                .optional()
+                .describe("Who it's for (e.g. 'CEO', 'external counsel'). Shapes tone and depth."),
+            profile: z.string().optional().describe("Optional retrieval profile slug."),
+        },
+    }, ({ artefact, audience, profile }) => {
+        const profileLine = profile ? ` (profile \`${profile}\`)` : "";
+        const audienceLine = audience ? ` Audience: ${audience}.` : "";
+        return {
+            messages: [
+                {
+                    role: "user",
+                    content: {
+                        type: "text",
+                        text: `Draft ${artefact}.${audienceLine}\n\n` +
+                            `Process:\n` +
+                            `1. Use \`caveau.list_corpora\` to confirm what's available if you're unsure.\n` +
+                            `2. Run \`caveau.search\`${profileLine} — at least once, ideally twice with different angles.\n` +
+                            `3. Write the artefact in the appropriate format. Every load-bearing factual claim needs a numbered footnote.\n` +
+                            `4. After the artefact, list the footnotes — each with the source title and source_url.\n` +
+                            `5. If a claim isn't supported by retrieved chunks, either remove it or flag it as "[unsourced]".`,
+                    },
+                },
+            ],
+        };
+    });
+}
+//# sourceMappingURL=draft_with_refs.js.map

package/dist/prompts/draft_with_refs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"draft_with_refs.js","sourceRoot":"","sources":["../../src/prompts/draft_with_refs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAiB;IAC3D,MAAM,CAAC,cAAc,CACnB,wBAAwB,EACxB;QACE,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EACT,wIAAwI;QAC1I,UAAU,EAAE;YACV,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,CAAC,8EAA8E,CAAC;YAC3F,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,uEAAuE,CAAC;YACpF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;SAC5E;KACF,EACD,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE;QAClC,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,eAAe,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,cAAc,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE;wBACP,IAAI,EAAE,MAAM;wBACZ,IAAI,EACF,SAAS,QAAQ,IAAI,YAAY,MAAM;4BACvC,YAAY;4BACZ,gFAAgF;4BAChF,2BAA2B,WAAW,0DAA0D;4BAChG,gHAAgH;4BAChH,0FAA0F;4BAC1F,kGAAkG;qBACrG;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/prompts/summarize.d.ts

@@ -0,0 +1,6 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+/**
+ * "Summarize <topic> using my CaveauAI corpus" — primes the host model to use
+ * caveau.search before answering.
+ */
+export declare function registerSummarizePrompt(server: McpServer): void;

package/dist/prompts/summarize.js

@@ -0,0 +1,36 @@
+import { z } from "zod";
+/**
+ * "Summarize <topic> using my CaveauAI corpus" — primes the host model to use
+ * caveau.search before answering.
+ */
+export function registerSummarizePrompt(server) {
+    server.registerPrompt("caveau.summarize_with_corpus", {
+        title: "Summarise from my corpus",
+        description: "Ask the model to summarise a topic by first searching the client's CaveauAI corpus and citing the chunks it used.",
+        argsSchema: {
+            topic: z.string().describe("What to summarise (e.g. 'EU AI Act enforcement timeline')."),
+            profile: z.string().optional().describe("Optional retrieval profile slug to bias the search."),
+            max_words: z.string().optional().describe("Optional length cap as a number (e.g. '300')."),
+        },
+    }, ({ topic, profile, max_words }) => {
+        const profileLine = profile ? ` (use profile \`${profile}\`)` : "";
+        const lengthLine = max_words ? ` Keep it under ${max_words} words.` : "";
+        return {
+            messages: [
+                {
+                    role: "user",
+                    content: {
+                        type: "text",
+                        text: `Summarise the following from my CaveauAI corpus: ${topic}.\n\n` +
+                            `1. First call \`caveau.search\` with a query that captures the topic${profileLine}.\n` +
+                            `2. Read the returned chunks. If they're sparse, run a second search with a refined query.\n` +
+                            `3. Write a tight summary using ONLY the retrieved chunks as evidence.\n` +
+                            `4. End with a "Sources" section listing each chunk you actually used (title + source_url).\n` +
+                            `${lengthLine}`,
+                    },
+                },
+            ],
+        };
+    });
+}
+//# sourceMappingURL=summarize.js.map

package/dist/prompts/summarize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"summarize.js","sourceRoot":"","sources":["../../src/prompts/summarize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAiB;IACvD,MAAM,CAAC,cAAc,CACnB,8BAA8B,EAC9B;QACE,KAAK,EAAE,0BAA0B;QACjC,WAAW,EACT,mHAAmH;QACrH,UAAU,EAAE;YACV,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;YACxF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;YAC9F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;SAC3F;KACF,EACD,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE;QAChC,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,mBAAmB,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,kBAAkB,SAAS,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE;wBACP,IAAI,EAAE,MAAM;wBACZ,IAAI,EACF,oDAAoD,KAAK,OAAO;4BAChE,uEAAuE,WAAW,KAAK;4BACvF,6FAA6F;4BAC7F,yEAAyE;4BACzE,8FAA8F;4BAC9F,GAAG,UAAU,EAAE;qBAClB;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/resources/corpora.d.ts

@@ -0,0 +1,8 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { CaveauApi } from "../api.js";
+/**
+ * Exposes the client's accessible corpora as a single MCP resource. Hosts that
+ * support resource browsing (Claude Desktop "Attach context") can pull the
+ * full list and let the user pick from it before posing a question.
+ */
+export declare function registerCorporaResource(server: McpServer, api: CaveauApi): void;

package/dist/resources/corpora.js

@@ -0,0 +1,24 @@
+/**
+ * Exposes the client's accessible corpora as a single MCP resource. Hosts that
+ * support resource browsing (Claude Desktop "Attach context") can pull the
+ * full list and let the user pick from it before posing a question.
+ */
+export function registerCorporaResource(server, api) {
+    server.registerResource("caveau-corpora", "caveau://corpora", {
+        title: "Corpora",
+        description: "All corpora this CaveauAI client can query.",
+        mimeType: "application/json",
+    }, async (uri) => {
+        const res = await api.get("/corpora");
+        return {
+            contents: [
+                {
+                    uri: uri.href,
+                    mimeType: "application/json",
+                    text: JSON.stringify(res, null, 2),
+                },
+            ],
+        };
+    });
+}
+//# sourceMappingURL=corpora.js.map

package/dist/resources/corpora.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"corpora.js","sourceRoot":"","sources":["../../src/resources/corpora.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAiB,EAAE,GAAc;IACvE,MAAM,CAAC,gBAAgB,CACrB,gBAAgB,EAChB,kBAAkB,EAClB;QACE,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,6CAA6C;QAC1D,QAAQ,EAAE,kBAAkB;KAC7B,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAkB,UAAU,CAAC,CAAC;QACvD,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,GAAG,EAAE,GAAG,CAAC,IAAI;oBACb,QAAQ,EAAE,kBAAkB;oBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;iBACnC;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/resources/documents.d.ts

@@ -0,0 +1,8 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { CaveauApi } from "../api.js";
+/**
+ * URI-template resource: caveau://documents/{id} resolves to the full text +
+ * chunk metadata of one of the client's documents. Useful when search returns
+ * a chunk and the host wants to pull the full document into context.
+ */
+export declare function registerDocumentsResource(server: McpServer, api: CaveauApi): void;

package/dist/resources/documents.js

@@ -0,0 +1,29 @@
+import { ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
+/**
+ * URI-template resource: caveau://documents/{id} resolves to the full text +
+ * chunk metadata of one of the client's documents. Useful when search returns
+ * a chunk and the host wants to pull the full document into context.
+ */
+export function registerDocumentsResource(server, api) {
+    server.registerResource("caveau-document", new ResourceTemplate("caveau://documents/{id}", { list: undefined }), {
+        title: "Document",
+        description: "Fetch a single CaveauAI document by id (with all chunks).",
+        mimeType: "application/json",
+    }, async (uri, vars) => {
+        const id = String(vars.id ?? "");
+        if (!/^\d+$/.test(id)) {
+            throw new Error(`document id must be numeric, got "${id}"`);
+        }
+        const res = await api.get(`/documents/${id}`);
+        return {
+            contents: [
+                {
+                    uri: uri.href,
+                    mimeType: "application/json",
+                    text: JSON.stringify(res, null, 2),
+                },
+            ],
+        };
+    });
+}
+//# sourceMappingURL=documents.js.map

package/dist/resources/documents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documents.js","sourceRoot":"","sources":["../../src/resources/documents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAK3E;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAiB,EAAE,GAAc;IACzE,MAAM,CAAC,gBAAgB,CACrB,iBAAiB,EACjB,IAAI,gBAAgB,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EACpE;QACE,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,2DAA2D;QACxE,QAAQ,EAAE,kBAAkB;KAC7B,EACD,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAmB,cAAc,EAAE,EAAE,CAAC,CAAC;QAChE,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,GAAG,EAAE,GAAG,CAAC,IAAI;oBACb,QAAQ,EAAE,kBAAkB;oBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;iBACnC;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,8 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export interface BuildOptions {
+    apiBaseUrl: string;
+    apiToken: string;
+    name?: string;
+    version?: string;
+}
+export declare function buildServer(opts: BuildOptions): McpServer;

package/dist/server.js

@@ -0,0 +1,48 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { CaveauApi } from "./api.js";
+import { registerSearch } from "./tools/search.js";
+import { registerListProfiles } from "./tools/list_profiles.js";
+import { registerListCorpora } from "./tools/list_corpora.js";
+import { registerGetDocument } from "./tools/get_document.js";
+import { registerCorpusStats } from "./tools/corpus_stats.js";
+import { registerIngestText } from "./tools/ingest_text.js";
+import { registerCorporaResource } from "./resources/corpora.js";
+import { registerDocumentsResource } from "./resources/documents.js";
+import { registerSummarizePrompt } from "./prompts/summarize.js";
+import { registerDraftWithRefsPrompt } from "./prompts/draft_with_refs.js";
+export function buildServer(opts) {
+    const server = new McpServer({
+        name: opts.name ?? "caveau-mcp",
+        version: opts.version ?? "0.2.2",
+    }, {
+        capabilities: {
+            tools: {},
+            resources: {},
+            prompts: {},
+        },
+        instructions: "CaveauAI MCP server. Tools: caveau.list_corpora (see queryable corpora), " +
+            "caveau.list_profiles (saved retrieval criteria), caveau.search (RAG search " +
+            "returning ranked chunks with source citations), caveau.get_document (full " +
+            "document by id), caveau.corpus_stats (counts + plan caps), caveau.ingest_text " +
+            "(add text to a private corpus, plan-gated). Resources: caveau://corpora, " +
+            "caveau://documents/{id}. Prompts: caveau.summarize_with_corpus, " +
+            "caveau.draft_with_refs. The active client and tenant scope are determined by " +
+            "the MCP token configured at startup.",
+    });
+    const api = new CaveauApi({
+        baseUrl: opts.apiBaseUrl,
+        token: opts.apiToken,
+    });
+    registerSearch(server, api);
+    registerListProfiles(server, api);
+    registerListCorpora(server, api);
+    registerGetDocument(server, api);
+    registerCorpusStats(server, api);
+    registerIngestText(server, api);
+    registerCorporaResource(server, api);
+    registerDocumentsResource(server, api);
+    registerSummarizePrompt(server);
+    registerDraftWithRefsPrompt(server);
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAS3E,MAAM,UAAU,WAAW,CAAC,IAAkB;IAC5C,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B;QACE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,YAAY;QAC/B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO;KACjC,EACD;QACE,YAAY,EAAE;YACZ,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,EAAE;SACZ;QACD,YAAY,EACV,2EAA2E;YAC3E,6EAA6E;YAC7E,4EAA4E;YAC5E,gFAAgF;YAChF,2EAA2E;YAC3E,kEAAkE;YAClE,+EAA+E;YAC/E,sCAAsC;KACzC,CACF,CAAC;IAEF,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC;QACxB,OAAO,EAAE,IAAI,CAAC,UAAU;QACxB,KAAK,EAAE,IAAI,CAAC,QAAQ;KACrB,CAAC,CAAC;IAEH,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5B,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEhC,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,yBAAyB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEvC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAChC,2BAA2B,CAAC,MAAM,CAAC,CAAC;IAEpC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/tools/corpus_stats.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { CaveauApi } from "../api.js";
+export declare function registerCorpusStats(server: McpServer, api: CaveauApi): void;

package/dist/tools/corpus_stats.js

@@ -0,0 +1,21 @@
+export function registerCorpusStats(server, api) {
+    server.registerTool("caveau.corpus_stats", {
+        title: "Corpus stats",
+        description: "Show document and chunk counts for each of this client's private corpora, plus their plan caps. Useful for sanity-checking before a large query session.",
+        inputSchema: {},
+    }, async () => {
+        const res = await api.get("/corpus_stats");
+        const lines = [
+            `Total: ${res.totals.documents} documents, ${res.totals.chunks} chunks`,
+            `Plan: ${res.plan.mcp_calls_per_month.toLocaleString()} MCP calls/month, max ${res.plan.max_mcp_tools} tools`,
+            "",
+            "Per corpus:",
+            ...res.corpora.map((c) => `  ${c.slug.padEnd(28)}  ${String(c.documents).padStart(5)} docs / ${String(c.chunks).padStart(6)} chunks  (${c.name})`),
+        ];
+        return {
+            content: [{ type: "text", text: lines.join("\n") }],
+            structuredContent: res,
+        };
+    });
+}
+//# sourceMappingURL=corpus_stats.js.map

package/dist/tools/corpus_stats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"corpus_stats.js","sourceRoot":"","sources":["../../src/tools/corpus_stats.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,mBAAmB,CAAC,MAAiB,EAAE,GAAc;IACnE,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;QACE,KAAK,EAAE,cAAc;QACrB,WAAW,EACT,0JAA0J;QAC5J,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAc,eAAe,CAAC,CAAC;QACxD,MAAM,KAAK,GAAa;YACtB,UAAU,GAAG,CAAC,MAAM,CAAC,SAAS,eAAe,GAAG,CAAC,MAAM,CAAC,MAAM,SAAS;YACvE,SAAS,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,cAAc,EAAE,yBAAyB,GAAG,CAAC,IAAI,CAAC,aAAa,QAAQ;YAC7G,EAAE;YACF,aAAa;YACb,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAChB,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,GAAG,CAC/H;SACF,CAAC;QACF,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,iBAAiB,EAAE,GAAyC;SAC7D,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/get_document.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { CaveauApi } from "../api.js";
+export declare function registerGetDocument(server: McpServer, api: CaveauApi): void;

package/dist/tools/get_document.js

@@ -0,0 +1,35 @@
+import { z } from "zod";
+export function registerGetDocument(server, api) {
+    server.registerTool("caveau.get_document", {
+        title: "Get document",
+        description: "Fetch a single document by id along with its chunked content. Use this when caveau.search returns a chunk and you need surrounding context or the full source text.",
+        inputSchema: {
+            document_id: z
+                .number()
+                .int()
+                .positive()
+                .describe("The document_id field returned by caveau.search."),
+        },
+    }, async (args) => {
+        const res = await api.get(`/documents/${args.document_id}`);
+        const d = res.document;
+        const head = [
+            `# ${d.title ?? "(untitled)"}`,
+            d.author ? `Author: ${d.author}` : null,
+            d.published_at ? `Published: ${d.published_at}` : null,
+            d.category ? `Category: ${d.category}` : null,
+            d.source_url ? `Source: ${d.source_url}` : null,
+            `Chunks: ${res.chunks.length}`,
+        ]
+            .filter(Boolean)
+            .join("\n");
+        const body = res.chunks
+            .map((c) => `--- chunk ${c.chunk_index}${c.section_title ? ` (${c.section_title})` : ""} ---\n${c.content}`)
+            .join("\n\n");
+        return {
+            content: [{ type: "text", text: `${head}\n\n${body}` }],
+            structuredContent: res,
+        };
+    });
+}
+//# sourceMappingURL=get_document.js.map

package/dist/tools/get_document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get_document.js","sourceRoot":"","sources":["../../src/tools/get_document.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,MAAM,UAAU,mBAAmB,CAAC,MAAiB,EAAE,GAAc;IACnE,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;QACE,KAAK,EAAE,cAAc;QACrB,WAAW,EACT,qKAAqK;QACvK,WAAW,EAAE;YACX,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,EAAE;iBACV,QAAQ,CAAC,kDAAkD,CAAC;SAChE;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAmB,cAAc,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;QACvB,MAAM,IAAI,GAAG;YACX,KAAK,CAAC,CAAC,KAAK,IAAI,YAAY,EAAE;YAC9B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;YACvC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI;YACtD,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI;YAC7C,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI;YAC/C,WAAW,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE;SAC/B;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM;aACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;aAC3G,IAAI,CAAC,MAAM,CAAC,CAAC;QAChB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;YACvD,iBAAiB,EAAE,GAAyC;SAC7D,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/ingest_text.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { CaveauApi } from "../api.js";
+export declare function registerIngestText(server: McpServer, api: CaveauApi): void;

package/dist/tools/ingest_text.js

@@ -0,0 +1,43 @@
+import { z } from "zod";
+export function registerIngestText(server, api) {
+    server.registerTool("caveau.ingest_text", {
+        title: "Ingest text",
+        description: "Add a piece of text to one of this client's private corpora. Chunks, embeds, and stores in Qdrant. Plan-gated server-side; returns the resulting document id and chunk count.",
+        inputSchema: {
+            title: z.string().min(1).max(500).describe("Document title."),
+            content: z
+                .string()
+                .min(30)
+                .max(2_000_000)
+                .describe("Document body. 30 chars min, 2 MB max."),
+            corpus: z
+                .string()
+                .max(100)
+                .optional()
+                .describe("Corpus slug. Omit to use the client's default corpus."),
+            category: z.string().max(120).optional(),
+            tags: z.array(z.string()).optional(),
+            source_url: z.string().url().optional(),
+        },
+    }, async (args) => {
+        const res = await api.post("/ingest", {
+            title: args.title,
+            content: args.content,
+            corpus: args.corpus,
+            category: args.category,
+            tags: args.tags,
+            source_url: args.source_url,
+        });
+        const d = res.document;
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Ingested "${d.title}" (id ${d.id}) into corpus "${d.corpus_slug ?? "default"}" — ${d.chunks} chunks indexed.`,
+                },
+            ],
+            structuredContent: res,
+        };
+    });
+}
+//# sourceMappingURL=ingest_text.js.map

package/dist/tools/ingest_text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest_text.js","sourceRoot":"","sources":["../../src/tools/ingest_text.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAcxB,MAAM,UAAU,kBAAkB,CAAC,MAAiB,EAAE,GAAc;IAClE,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,KAAK,EAAE,aAAa;QACpB,WAAW,EACT,+KAA+K;QACjL,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAC7D,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,GAAG,CAAC,EAAE,CAAC;iBACP,GAAG,CAAC,SAAS,CAAC;iBACd,QAAQ,CAAC,wCAAwC,CAAC;YACrD,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,uDAAuD,CAAC;YACpE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;YACxC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;SACxC;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAiB,SAAS,EAAE;YACpD,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;QACvB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,aAAa,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,WAAW,IAAI,SAAS,OAAO,CAAC,CAAC,MAAM,kBAAkB;iBACrH;aACF;YACD,iBAAiB,EAAE,GAAyC;SAC7D,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/list_corpora.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { CaveauApi } from "../api.js";
+export declare function registerListCorpora(server: McpServer, api: CaveauApi): void;

package/dist/tools/list_corpora.js

@@ -0,0 +1,28 @@
+export function registerListCorpora(server, api) {
+    server.registerTool("caveau.list_corpora", {
+        title: "List corpora",
+        description: "List all corpora this client can search: their private corpora and any shared/subscribed packages. Use the slugs in corpus_slugs[] when configuring a retrieval profile.",
+        inputSchema: {},
+    }, async () => {
+        const res = await api.get("/corpora");
+        const lines = [];
+        lines.push(`Private (${res.private.length}):`);
+        for (const c of res.private) {
+            lines.push(`  • ${c.slug} — ${c.name}` +
+                (c.is_default ? " [default]" : "") +
+                ` — ${c.doc_count} docs` +
+                (c.description ? `\n      ${c.description}` : ""));
+        }
+        lines.push("");
+        lines.push(`Subscribed shared packages (${res.subscribed.length}):`);
+        for (const c of res.subscribed) {
+            lines.push(`  • ${c.slug} — ${c.name} — ${c.doc_count} docs / ${c.chunk_count ?? 0} chunks` +
+                (c.description ? `\n      ${c.description}` : ""));
+        }
+        return {
+            content: [{ type: "text", text: lines.join("\n") }],
+            structuredContent: res,
+        };
+    });
+}
+//# sourceMappingURL=list_corpora.js.map

package/dist/tools/list_corpora.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list_corpora.js","sourceRoot":"","sources":["../../src/tools/list_corpora.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,mBAAmB,CAAC,MAAiB,EAAE,GAAc;IACnE,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;QACE,KAAK,EAAE,cAAc;QACrB,WAAW,EACT,0KAA0K;QAC5K,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAkB,UAAU,CAAC,CAAC;QACvD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CACR,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE;gBACzB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClC,MAAM,CAAC,CAAC,SAAS,OAAO;gBACxB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACpD,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,+BAA+B,GAAG,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC;QACrE,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CACR,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,SAAS,WAAW,CAAC,CAAC,WAAW,IAAI,CAAC,SAAS;gBAC9E,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACpD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,iBAAiB,EAAE,GAAyC;SAC7D,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/list_profiles.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { CaveauApi } from "../api.js";
+export declare function registerListProfiles(server: McpServer, api: CaveauApi): void;

package/dist/tools/list_profiles.js

@@ -0,0 +1,30 @@
+export function registerListProfiles(server, api) {
+    server.registerTool("caveau.list_profiles", {
+        title: "List retrieval profiles",
+        description: "List the named retrieval profiles configured for this client. Each profile is a saved bundle of corpora, search method, top_k, and filters. Pass a profile slug to caveau.search to use it.",
+        inputSchema: {},
+    }, async () => {
+        const res = await api.get("/profiles");
+        const lines = [`${res.count} profile${res.count === 1 ? "" : "s"}`];
+        for (const p of res.profiles) {
+            const tags = [];
+            tags.push(p.search_method);
+            tags.push(`top_k=${p.top_k}`);
+            if (p.recency_days !== null)
+                tags.push(`recency=${p.recency_days}d`);
+            if (p.corpus_slugs && p.corpus_slugs.length > 0)
+                tags.push(`corpora=${p.corpus_slugs.join(",")}`);
+            if (p.categories && p.categories.length > 0)
+                tags.push(`categories=${p.categories.join(",")}`);
+            if (p.is_default)
+                tags.push("DEFAULT");
+            lines.push(`• ${p.slug} (${p.name}) — ${tags.join(" / ")}` +
+                (p.description ? `\n    ${p.description}` : ""));
+        }
+        return {
+            content: [{ type: "text", text: lines.join("\n") }],
+            structuredContent: res,
+        };
+    });
+}
+//# sourceMappingURL=list_profiles.js.map

package/dist/tools/list_profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list_profiles.js","sourceRoot":"","sources":["../../src/tools/list_profiles.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,oBAAoB,CAAC,MAAiB,EAAE,GAAc;IACpE,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,KAAK,EAAE,yBAAyB;QAChC,WAAW,EACT,6LAA6L;QAC/L,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAmB,WAAW,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK,WAAW,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACpE,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9B,IAAI,CAAC,CAAC,YAAY,KAAK,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC;YACrE,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;gBAC7C,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnD,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBACzC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,CAAC,UAAU;gBAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvC,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;gBAC7C,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAClD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,iBAAiB,EAAE,GAAyC;SAC7D,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/search.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { CaveauApi } from "../api.js";
+export declare function registerSearch(server: McpServer, api: CaveauApi): void;

package/dist/tools/search.js

@@ -0,0 +1,70 @@
+import { z } from "zod";
+const Input = {
+    query: z.string().min(1).max(4000).describe("The user's question or search phrase."),
+    profile: z
+        .string()
+        .max(64)
+        .optional()
+        .describe("Slug of a saved retrieval profile (corpora, top_k, filters). Omit to use the client's default profile."),
+    top_k: z
+        .number()
+        .int()
+        .min(1)
+        .max(50)
+        .optional()
+        .describe("Override the profile's top_k. Bounded 1-50."),
+    category: z
+        .string()
+        .max(120)
+        .optional()
+        .describe("One-shot category filter applied on top of any profile filters."),
+};
+export function registerSearch(server, api) {
+    server.registerTool("caveau.search", {
+        title: "Search corpus",
+        description: "Run a RAG search across the client's accessible corpora and return ranked chunks with source metadata. Use the result chunks as context for your reply; cite source_url and title.",
+        inputSchema: Input,
+    }, async (args) => {
+        const res = await api.post("/search", {
+            query: args.query,
+            profile: args.profile,
+            top_k: args.top_k,
+            category: args.category,
+        });
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: res.results.length === 0
+                        ? `No matches for "${args.query}" under profile "${res.profile}".`
+                        : formatHits(res),
+                },
+            ],
+            structuredContent: res,
+        };
+    });
+}
+function formatHits(res) {
+    const lines = [
+        `Profile: ${res.profile} — ${res.count} result${res.count === 1 ? "" : "s"}`,
+        "",
+    ];
+    for (const [i, h] of res.results.entries()) {
+        const head = `[${i + 1}] ${h.title ?? "(untitled)"}` +
+            (h.section_title ? ` — ${h.section_title}` : "") +
+            (h.score !== null ? ` (score ${h.score.toFixed(3)})` : "");
+        lines.push(head);
+        if (h.source_url)
+            lines.push(`    ${h.source_url}`);
+        lines.push(indent(h.content.trim()));
+        lines.push("");
+    }
+    return lines.join("\n").trimEnd();
+}
+function indent(s) {
+    return s
+        .split("\n")
+        .map((l) => `    ${l}`)
+        .join("\n");
+}
+//# sourceMappingURL=search.js.map

package/dist/tools/search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../../src/tools/search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,MAAM,KAAK,GAAG;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACpF,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,EAAE;SACV,QAAQ,CACP,wGAAwG,CACzG;IACH,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,EAAE;SACV,QAAQ,CAAC,6CAA6C,CAAC;IAC1D,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,iEAAiE,CAAC;CAC/E,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,MAAiB,EAAE,GAAc;IAC9D,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,oLAAoL;QACtL,WAAW,EAAE,KAAK;KACnB,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAiB,SAAS,EAAE;YACpD,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EACF,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;wBACtB,CAAC,CAAC,mBAAmB,IAAI,CAAC,KAAK,oBAAoB,GAAG,CAAC,OAAO,IAAI;wBAClE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;iBACtB;aACF;YACD,iBAAiB,EAAE,GAAyC;SAC7D,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAmB;IACrC,MAAM,KAAK,GAAa;QACtB,YAAY,GAAG,CAAC,OAAO,MAAM,GAAG,CAAC,KAAK,UAAU,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;QAC5E,EAAE;KACH,CAAC;IACF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GACR,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,YAAY,EAAE;YACvC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC,CAAC,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,CAAC;SACL,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;SACtB,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Wire types for /api/mcp/* responses. These mirror what the PHP runtime
+ * controller returns (see ai-portal/api/mcp/index.php).
+ */
+export interface SearchHit {
+    chunk_id: string | number | null;
+    document_id: string | number | null;
+    title: string | null;
+    content: string;
+    section_title: string | null;
+    category: string | null;
+    tags: string[] | null;
+    source_url: string | null;
+    score: number | null;
+    corpus_slug: string | null;
+    published_at: string | null;
+}
+export interface SearchResponse {
+    profile: string;
+    count: number;
+    results: SearchHit[];
+}
+export interface Corpus {
+    kind: "private" | "shared";
+    slug: string;
+    name: string;
+    description: string | null;
+    doc_count: number;
+    chunk_count?: number;
+    is_default?: boolean;
+}
+export interface CorporaResponse {
+    private: Corpus[];
+    subscribed: Corpus[];
+}
+export interface Profile {
+    slug: string;
+    name: string;
+    description: string | null;
+    search_method: "vector" | "keyword" | "hybrid";
+    corpus_slugs: string[] | null;
+    top_k: number;
+    recency_days: number | null;
+    categories: string[] | null;
+    tags: string[] | null;
+    embed_model: string | null;
+    is_default: boolean;
+}
+export interface ProfilesResponse {
+    profiles: Profile[];
+    count: number;
+}
+export interface DocumentChunk {
+    id: number;
+    chunk_index: number;
+    section_title: string | null;
+    content: string;
+}
+export interface DocumentResponse {
+    document: {
+        id: number;
+        title: string | null;
+        category: string | null;
+        tags: string[] | null;
+        author: string | null;
+        source_url: string | null;
+        published_at: string | null;
+        status: string;
+        corpus_id: number | null;
+        chunk_count: number;
+        content: string | null;
+        created_at: string;
+        updated_at: string;
+    };
+    chunks: DocumentChunk[];
+}

package/dist/types.js

@@ -0,0 +1,6 @@
+/**
+ * Wire types for /api/mcp/* responses. These mirror what the PHP runtime
+ * controller returns (see ai-portal/api/mcp/index.php).
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@bluenotelogic/mcp",
+  "version": "0.2.2",
+  "description": "CaveauAI MCP server — RAG context injection for Claude Code/Desktop and other MCP hosts. Each client uses their own token + retrieval profiles.",
+  "type": "module",
+  "bin": {
+    "caveau-mcp": "dist/index.js"
+  },
+  "main": "./dist/index.js",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx watch src/index.ts --stdio",
+    "start": "node dist/index.js --stdio",
+    "start:http": "node dist/index.js --http",
+    "lint": "tsc --noEmit",
+    "prepublishOnly": "npm run build"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "express": "^5.2.1",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/express": "^5.0.6",
+    "@types/node": "^22.0.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.6.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://git.bluenotelogic.com/daveadmin/caveau-mcp"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "rag",
+    "caveauai",
+    "claude"
+  ],
+  "license": "UNLICENSED",
+  "author": "Blue Note Logic"
+}