@boomstream/mcp 0.1.1 → 0.2.1

package/CHANGELOG.md

@@ -0,0 +1,141 @@
+# Changelog
+
+All notable changes to `@boomstream/mcp` are documented here.
+
+The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.2.1] - 2026-06-01
+
+### Fixed
+
+- **CI: npm-publish auth token** now written via `NPM_CONFIG_USERCONFIG=$(mktemp)` instead of
+  `export "npm_config_//.../:_authToken=..."` which failed in alpine `sh` (invalid variable
+  name chars `/` and `:`). v0.2.0 was tagged in git but never published to npm due to this
+  bug; v0.2.1 is the first published 0.2.x release.
+
+## [0.2.0] - 2026-06-01
+
+### Added
+
+- **CHANGELOG.md** added to the repository, documenting versions 0.1.0–0.1.2
+  with full entries. CI tarball now includes CHANGELOG. ([BOO-64])
+
+### Changed
+
+- **api-client: switched to POST + `Content-Type: application/json` for all
+  tools.** Previously the api-client used GET with query-string parameters for
+  most methods and POST for a small subset. The Boomstream API supports
+  `POST + JSON body` universally («Режим 2»). All tools now use POST; the GET
+  branch and `URLSearchParams` are removed entirely. Closes root cause of
+  [BOO-52] / [BOO-56] (the `RequestURI` redaction is retained as
+  defence-in-depth). ([BOO-67])
+- **apikey removed from URL.** `apikey` is now sent in the JSON request body
+  rather than the URL query string, eliminating it from proxy access-logs,
+  browser history, and server `RequestURI` echo fields.
+- **Array parameters now sent as real JSON arrays.** Previously serialised as
+  repeated query-string keys (`code[0]=A&code[1]=B`); now sent as
+  `{"code":["A","B"]}` in the JSON body.
+- **`format=json` body param removed.** Not needed when the request carries
+  `Content-Type: application/json`; the Boomstream API infers the response
+  format from the `Content-Type` header.
+- **`httpMethod` removed from `schemas/boomstream.json`.** The field was used
+  only by the GET/POST dispatch logic, which no longer exists.
+- **README: `BOOMSTREAM_TEST_API_KEY` wording clarified** and `hwdmedia.documents`
+  database reference removed from docs. ([BOO-50])
+
+## [0.1.2] - 2026-05-31
+
+### Security
+
+- **apikey leak via `RequestURI` scrubbed.** The Boomstream API echoes the full
+  query string (including `apikey=…`) back inside `RequestURI` on error
+  responses. The MCP client previously surfaced this field verbatim in tool
+  results. The api-client now drops `RequestURI` from parsed responses and
+  redacts `apikey`/`token`/`signature` from any error message before it reaches
+  the model. ([BOO-52], [BOO-56])
+- **Tool-result content redaction.** A defence-in-depth pass also scrubs
+  `apikey`, `token`, and `signature` query parameters from any string the
+  server returns to the client — even if the upstream API surfaces them in a
+  new field. Covered by `tests/apikey-leak.test.ts`.
+
+### Fixed
+
+- Error paths in `api-client.ts` no longer pass the raw `err` object to `pino`
+  alongside an apikey-containing URL — the error is reshaped into sanitized
+  scalars and the URL is filtered through the redactor before logging.
+
+## [0.1.1] - 2026-05-30
+
+### Added
+
+- **CI auto-publish on `v*` tags.** Pushing a tag matching `v\d+.\d+.\d+(-…)?`
+  to `boomstream-ai/boomstream-mcp` now triggers the `npm-publish` GitLab CI
+  job, which builds and runs `pnpm publish --access public` against the npm
+  registry using a protected, masked `NPM_TOKEN`. Tag-pattern `v*` is a
+  protected tag (Maintainer+ push only). ([BOO-23])
+- **Self-hosted GitLab runner** registered for `boomstream-ai/boomstream-mcp`
+  so the publish job can reach the npm registry. ([BOO-41])
+- README expanded with Available-tools table generator (`pnpm
+  build-readme-tools`), `claude_desktop_config.json` example, and end-to-end
+  smoke cycle for `media → ppv` flows. ([BOO-18])
+
+### Changed
+
+- **pnpm pinned to 10.34.1** via `packageManager` in `package.json` to match
+  the Node 20 runtime used in CI and Docker. ([BOO-48])
+- `.gitignore` now excludes `.npmrc` everywhere in the worktree to prevent
+  accidental token commits during local dev. ([BOO-22])
+- Polished `transports/stdio.ts` help text, CI rules guard against fork
+  pipelines, and added `CODEOWNERS` for security-sensitive files. ([BOO-17])
+
+## [0.1.0] - 2026-05-29
+
+### Added
+
+- **Initial stdio release.** Manual `npm publish @boomstream/mcp@0.1.0`
+  performed by the Release Engineer following the CSO publish recipe
+  (env-file-floor `.npmrc` via `NPM_CONFIG_USERCONFIG=$(mktemp)`,
+  `--access public`). ([BOO-16])
+- **101 tools auto-generated** from the Boomstream API documentation corpus
+  (`hwdmedia.documents`, RU `language_id=1`) covering 17 sections: media,
+  live, ppv, conference, folder, playlist, stats, chat, screenshot,
+  subtitles, timecodes, webhooks, project, record-live, live-ipcamera,
+  player-api, general. Tool naming follows
+  `boomstream_<section>_<method>` snake_case convention. ([BOO-9])
+- **MCP core (Slice 3).** `src/core/server.ts` implements `tools/list` and
+  `tools/call` handlers, `src/core/schema.ts` loads
+  `schemas/boomstream.json` once at boot, `src/core/api-client.ts` is the
+  fetch wrapper (`format=json`, `ver=1.2` default, exponential-backoff retry
+  on 5xx, 30 s timeout), `src/core/auth.ts` reads
+  `BOOMSTREAM_API_KEY` from env (Phase A). `src/tools/registry.ts` is the
+  single generic handler that dispatches every tool through one
+  zod-validated path. ([BOO-11])
+- **stdio transport (Slice 4).** `src/transports/stdio.ts` is the
+  `boomstream-mcp` bin entry point, wired through
+  `StdioServerTransport`. The package ships as a public scoped npm package
+  with `bin: "dist/transports/stdio.js"`, a post-build shebang/chmod step,
+  and a CLI surface (`--help`, `--version`, `stdio` subcommand). ([BOO-12])
+
+[Unreleased]: https://gitlab.boomstream.com/boomstream-ai/boomstream-mcp/-/compare/v0.2.1...HEAD
+[0.2.1]: https://gitlab.boomstream.com/boomstream-ai/boomstream-mcp/-/compare/v0.2.0...v0.2.1
+[0.2.0]: https://gitlab.boomstream.com/boomstream-ai/boomstream-mcp/-/compare/v0.1.2...v0.2.0
+[0.1.2]: https://gitlab.boomstream.com/boomstream-ai/boomstream-mcp/-/compare/v0.1.1...v0.1.2
+[0.1.1]: https://gitlab.boomstream.com/boomstream-ai/boomstream-mcp/-/compare/v0.1.0...v0.1.1
+[0.1.0]: https://gitlab.boomstream.com/boomstream-ai/boomstream-mcp/-/tags/v0.1.0
+[BOO-9]: https://gitlab.boomstream.com/boomstream-ai/boomstream-paperclip/-/issues
+[BOO-11]: https://gitlab.boomstream.com/boomstream-ai/boomstream-paperclip/-/issues
+[BOO-12]: https://gitlab.boomstream.com/boomstream-ai/boomstream-paperclip/-/issues
+[BOO-16]: https://gitlab.boomstream.com/boomstream-ai/boomstream-paperclip/-/issues
+[BOO-17]: https://gitlab.boomstream.com/boomstream-ai/boomstream-paperclip/-/issues
+[BOO-18]: https://gitlab.boomstream.com/boomstream-ai/boomstream-paperclip/-/issues
+[BOO-22]: https://gitlab.boomstream.com/boomstream-ai/boomstream-paperclip/-/issues
+[BOO-23]: https://gitlab.boomstream.com/boomstream-ai/boomstream-paperclip/-/issues
+[BOO-41]: https://gitlab.boomstream.com/boomstream-ai/boomstream-paperclip/-/issues
+[BOO-48]: https://gitlab.boomstream.com/boomstream-ai/boomstream-paperclip/-/issues
+[BOO-50]: https://gitlab.boomstream.com/boomstream-ai/boomstream-paperclip/-/issues
+[BOO-52]: https://gitlab.boomstream.com/boomstream-ai/boomstream-paperclip/-/issues
+[BOO-56]: https://gitlab.boomstream.com/boomstream-ai/boomstream-paperclip/-/issues
+[BOO-64]: https://gitlab.boomstream.com/boomstream-ai/boomstream-paperclip/-/issues
+[BOO-67]: https://gitlab.boomstream.com/boomstream-ai/boomstream-paperclip/-/issues

package/README.md

@@ -2,29 +2,31 @@
 
 MCP server (Model Context Protocol) providing **Boomstream API as tools** for LLM agents: Claude Desktop, claude.ai, VS Code MCP extension, and any compatible client.
 
-> **v0.1.0** — stdio transport is live. SSE (remote hosting) coming in Phase B; OAuth in Phase C.
+> **Status:** stdio transport is live on npm (`@boomstream/mcp@latest`, currently `0.1.3`). SSE transport (remote hosting at `mcp.boomstream.com`) is the next stage; per-user OAuth comes after that. Release history → [CHANGELOG.md](CHANGELOG.md).
 
 ## What it does
 
 LLM agents call tools like `boomstream_media_info`, `boomstream_ppv_list_buyers`, `boomstream_live_create` — the server translates them to HTTP calls against `https://boomstream.com/api/`, parses the responses, and returns structured JSON. ~100 tools across 17 API sections: media, live, ppv, conference, folder, playlist, stats, chat, screenshot, subtitles, timecodes, webhooks, project, record-live, live-ipcamera, player-api, general.
 
 Transports:
-- **stdio** — for Claude Desktop (local child process). ✅ Available in v0.1.0.
-- **SSE** — for claude.ai web and remote clients (hosted at `mcp.boomstream.com`). Planned for Phase B.
+- **stdio** — for Claude Desktop (local child process). Shipped.
+- **SSE** — for claude.ai web and remote clients (hosted at `mcp.boomstream.com`). Planned.
 
 ## Quick start
 
 ```bash
-BOOMSTREAM_API_KEY=your-key npx -y @boomstream/mcp stdio
+BOOMSTREAM_API_KEY=your-key npx -y @boomstream/mcp@latest stdio
 ```
 
 Or install globally:
 
 ```bash
-npm install -g @boomstream/mcp
+npm install -g @boomstream/mcp@latest
 BOOMSTREAM_API_KEY=your-key boomstream-mcp
 ```
 
+`@latest` always resolves to the newest published version. Pin a specific version (e.g. `@boomstream/mcp@0.1.3`) if you need reproducible installs.
+
 ## Available tools
 
 <!-- TOOLS:BEGIN -->
@@ -91,7 +93,7 @@ boomstream-mcp --help, -h      Show help
 
 ## How tool schemas are generated
 
-JSONSchema for each tool is **not hand-written**. The source of truth is the Boomstream API documentation database (`hwdmedia.documents`). The script `scripts/build-schema.mjs` parses the markdown and produces `schemas/boomstream.json` covering all ~100 methods in a single run. The generated file is committed to the repository and shipped in the npm package.
+JSONSchema for each tool is **not hand-written**. The source of truth is the Boomstream API documentation database. The script `scripts/build-schema.mjs` parses the markdown and produces `schemas/boomstream.json` covering all ~100 methods in a single run. The generated file is committed to the repository and shipped in the npm package.
 
 ## Development
 
@@ -108,7 +110,7 @@ pnpm test:smoke          # end-to-end smoke cycle (requires BOOMSTREAM_TEST_API_
 Offline test runs use fixtures in `tests/fixtures/`. To pull a fresh schema from the database, run `pnpm build-schema:db` (requires the `mariadb-mcp` MCP server).
 
 To run the smoke cycle you need:
-- `BOOMSTREAM_TEST_API_KEY` — a sandbox project API key. Ask the project owner for a sandbox key, or check the team-shared key in the secrets store. *(Exact source pending security review.)*
+- `BOOMSTREAM_TEST_API_KEY` — an API key from a sandbox Boomstream project (create one at https://boomstream.com/ and copy the key from project settings → API). Use a **dedicated sandbox project**, not your production project — the smoke cycle creates and deletes test media. Never paste a real production key into your shell history or CI logs.
 - `BOOMSTREAM_TEST_MEDIA_CODE` — a known media code in that sandbox project.
 
 ## Troubleshooting
@@ -145,11 +147,31 @@ Verify your key in Boomstream project settings → API. Keys are project-scoped;
    BOOMSTREAM_API_KEY=your-key npx -y @boomstream/mcp stdio
    ```
 
+## Releases
+
+Full release notes are in [CHANGELOG.md](CHANGELOG.md). Latest highlights:
+
+- **0.1.3** — api-client switched to `POST + Content-Type: application/json`
+  for all tools; `apikey` now sent in the JSON body (never in the URL).
+  Array params sent as real JSON arrays. Closes BOO-52/56 root cause.
+- **0.1.2** — security fix: `apikey` is no longer echoed back through
+  `RequestURI` on error responses; tool-result content is additionally
+  scrubbed of `apikey`/`token`/`signature` query parameters.
+- **0.1.1** — CI auto-publish on `v*` tags, pnpm pinned to 10.34.1.
+- **0.1.0** — initial stdio release, 101 tools auto-generated from the
+  Boomstream API docs corpus.
+
+GitLab CI publishes to npm automatically when a maintainer pushes a tag of
+the form `v\d+.\d+.\d+(-…)?` (protected tag, Maintainer+ only). The job
+checks that `package.json` version matches the tag, runs `pnpm build` +
+`pnpm test`, and then `pnpm publish --access public` using a protected
+`NPM_TOKEN`. See `.gitlab-ci.yml`.
+
 ## Roadmap
 
-**Phase B — SSE transport** (`mcp.boomstream.com`): hosted remote server compatible with claude.ai and other SSE-capable MCP clients. No local install required; connect by URL. Coming soon.
+**Stage 2 — SSE transport** (`mcp.boomstream.com`): hosted remote server compatible with claude.ai and other SSE-capable MCP clients. No local install required; connect by URL.
 
-**Phase C — OAuth**: per-user authentication so each Boomstream account holder can connect with their own credentials instead of a shared environment API key. Coming soon.
+**Stage 3 — OAuth**: per-user authentication so each Boomstream account holder can connect with their own credentials instead of a shared environment API key. Depends on Stage 2.
 
 ## License
 

package/dist/core/api-client.d.ts

@@ -2,4 +2,5 @@ import type { ToolSchema } from './schema.js';
 export declare class ApiError extends Error {
     constructor(message: string);
 }
+export declare function redactSecrets(value: unknown): unknown;
 export declare function execute(schema: ToolSchema, args: Record<string, unknown>, apikey: string): Promise<unknown>;

package/dist/core/api-client.js

@@ -10,6 +10,29 @@ const BACKOFF_MS = [100, 400, 1600];
 const MAX_ATTEMPTS = 3;
 const TIMEOUT_MS = 30_000;
 const xmlParser = new XMLParser({ ignoreAttributes: false });
+// Patterns covering the query-param secrets the upstream API echoes back in RequestURI.
+const SECRET_PARAMS_RE = /\b(apikey|token|signature)=([^&\s"'<>]+)/gi;
+const AUTH_BEARER_RE = /\bAuthorization:\s*Bearer\s+\S+/gi;
+export function redactSecrets(value) {
+    if (typeof value === 'string') {
+        return value
+            .replace(SECRET_PARAMS_RE, (_, param) => `${param}=REDACTED`)
+            .replace(AUTH_BEARER_RE, 'Authorization: Bearer REDACTED');
+    }
+    if (Array.isArray(value)) {
+        return value.map(redactSecrets);
+    }
+    if (value !== null && typeof value === 'object') {
+        const out = {};
+        for (const [k, v] of Object.entries(value)) {
+            if (k === 'RequestURI')
+                continue; // upstream debug echo — useless to LLM, drop outright
+            out[k] = redactSecrets(v);
+        }
+        return out;
+    }
+    return value;
+}
 async function parseResponse(response) {
     const contentType = response.headers.get('content-type') ?? '';
     const text = await response.text();
@@ -29,10 +52,10 @@ async function parseResponse(response) {
         typeof parsed === 'object' &&
         'Status' in parsed &&
         parsed.Status === 'Failed') {
-        const message = String(parsed.Message ?? 'API request failed');
-        throw new ApiError(message);
+        const rawMessage = String(parsed.Message ?? 'API request failed');
+        throw new ApiError(redactSecrets(rawMessage));
     }
-    return parsed;
+    return redactSecrets(parsed);
 }
 function sleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
@@ -40,7 +63,7 @@ function sleep(ms) {
 export async function execute(schema, args, apikey) {
     const { _ver, ...restArgs } = args;
     const ver = typeof _ver === 'string' ? _ver : '1.2';
-    const baseUrl = `https://boomstream.com${schema.endpoint}`;
+    const url = `https://boomstream.com${schema.endpoint}`;
     let lastError;
     for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt++) {
         if (attempt > 0) {
@@ -48,34 +71,12 @@ export async function execute(schema, args, apikey) {
         }
         try {
             const signal = AbortSignal.timeout(TIMEOUT_MS);
-            let response;
-            if (schema.httpMethod === 'GET') {
-                const params = new URLSearchParams();
-                params.set('format', 'json');
-                params.set('ver', ver);
-                params.set('apikey', apikey);
-                for (const [key, value] of Object.entries(restArgs)) {
-                    if (value === undefined || value === null)
-                        continue;
-                    if (Array.isArray(value)) {
-                        for (const item of value)
-                            params.append(key, String(item));
-                    }
-                    else {
-                        params.set(key, String(value));
-                    }
-                }
-                response = await fetch(`${baseUrl}?${params.toString()}`, { signal });
-            }
-            else {
-                const body = { ...restArgs, format: 'json', ver, apikey };
-                response = await fetch(baseUrl, {
-                    method: 'POST',
-                    headers: { 'Content-Type': 'application/json' },
-                    body: JSON.stringify(body),
-                    signal,
-                });
-            }
+            const response = await fetch(url, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ apikey, ver, ...restArgs }),
+                signal,
+            });
             if (response.status >= 500) {
                 logger.warn({ status: response.status, attempt, tool: schema.name }, 'server error, will retry');
                 lastError = new ApiError(`Server error: HTTP ${response.status}`);

package/dist/core/api-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../../src/core/api-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACpC,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;AAE7D,KAAK,UAAU,aAAa,CAAC,QAAkB;IAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAEnC,IAAI,MAAe,CAAC;IACpB,IAAI,WAAW,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAChF,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,IACE,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QAC1B,QAAQ,IAAK,MAAiB;QAC7B,MAAkC,CAAC,MAAM,KAAK,QAAQ,EACvD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAE,MAAkC,CAAC,OAAO,IAAI,oBAAoB,CAAC,CAAC;QAC5F,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAkB,EAClB,IAA6B,EAC7B,MAAc;IAEd,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IACpD,MAAM,OAAO,GAAG,yBAAyB,MAAM,CAAC,QAAQ,EAAE,CAAC;IAE3D,IAAI,SAAkB,CAAC;IAEvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC/C,IAAI,QAAkB,CAAC;YAEvB,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;gBACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC7B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACvB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACpD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;wBAAE,SAAS;oBACpD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;wBACzB,KAAK,MAAM,IAAI,IAAI,KAAK;4BAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC7D,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBACjC,CAAC;gBACH,CAAC;gBACD,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACxE,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;gBAC1D,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE;oBAC9B,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAC1B,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,0BAA0B,CAAC,CAAC;gBACjG,SAAS,GAAG,IAAI,QAAQ,CAAC,sBAAsB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBAClE,SAAS;YACX,CAAC;YAED,OAAO,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ;gBAAE,MAAM,GAAG,CAAC;YACvC,MAAM,YAAY,GAChB,GAAG,YAAY,YAAY,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;YAC5F,IAAI,YAAY;gBAAE,MAAM,GAAG,CAAC;YAC5B,SAAS,GAAG,GAAG,CAAC;YAChB,MAAM,CAAC,IAAI,CACT;gBACE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;gBACpD,OAAO,EAAG,GAA4C,EAAE,KAAK,EAAE,IAAI;gBACnE,OAAO;gBACP,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,EACD,2BAA2B,CAC5B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,SAAS,CAAC;AAClB,CAAC"}
+{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../../src/core/api-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACpC,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;AAE7D,wFAAwF;AACxF,MAAM,gBAAgB,GAAG,4CAA4C,CAAC;AACtE,MAAM,cAAc,GAAG,mCAAmC,CAAC;AAE3D,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK;aACT,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,KAAa,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,CAAC;aACpE,OAAO,CAAC,cAAc,EAAE,gCAAgC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,KAAK,YAAY;gBAAE,SAAS,CAAC,sDAAsD;YACxF,GAAG,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,QAAkB;IAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAEnC,IAAI,MAAe,CAAC;IACpB,IAAI,WAAW,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAChF,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,IACE,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QAC1B,QAAQ,IAAK,MAAiB;QAC7B,MAAkC,CAAC,MAAM,KAAK,QAAQ,EACvD,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAE,MAAkC,CAAC,OAAO,IAAI,oBAAoB,CAAC,CAAC;QAC/F,MAAM,IAAI,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAW,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAkB,EAClB,IAA6B,EAC7B,MAAc;IAEd,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IACpD,MAAM,GAAG,GAAG,yBAAyB,MAAM,CAAC,QAAQ,EAAE,CAAC;IAEvD,IAAI,SAAkB,CAAC;IAEvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;gBAClD,MAAM;aACP,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,0BAA0B,CAAC,CAAC;gBACjG,SAAS,GAAG,IAAI,QAAQ,CAAC,sBAAsB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBAClE,SAAS;YACX,CAAC;YAED,OAAO,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ;gBAAE,MAAM,GAAG,CAAC;YACvC,MAAM,YAAY,GAChB,GAAG,YAAY,YAAY,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;YAC5F,IAAI,YAAY;gBAAE,MAAM,GAAG,CAAC;YAC5B,SAAS,GAAG,GAAG,CAAC;YAChB,MAAM,CAAC,IAAI,CACT;gBACE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;gBACpD,OAAO,EAAG,GAA4C,EAAE,KAAK,EAAE,IAAI;gBACnE,OAAO;gBACP,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,EACD,2BAA2B,CAC5B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,SAAS,CAAC;AAClB,CAAC"}

package/dist/core/schema.d.ts

@@ -7,7 +7,8 @@ export interface ToolSchema {
         required?: string[];
     };
     endpoint: string;
-    httpMethod: 'GET' | 'POST';
+    /** @deprecated api-client always uses POST+JSON; field retained for schema compat */
+    httpMethod?: 'GET' | 'POST';
     versions: string[];
 }
 export interface JsonSchemaProperty {

package/dist/core/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/core/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAyBpC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;AAErE,IAAI,MAAM,GAAwB,IAAI,CAAC;AAEvC,MAAM,UAAU,WAAW;IACzB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;IACzC,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/core/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AA0BpC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;AAErE,IAAI,MAAM,GAAwB,IAAI,CAAC;AAEvC,MAAM,UAAU,WAAW;IACzB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;IACzC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/transports/stdio.js

@@ -10,7 +10,8 @@ function getVersion() {
         const pkg = JSON.parse(readFileSync(resolve(__dirname, '../../package.json'), 'utf8'));
         return pkg.version;
     }
-    catch {
+    catch (err) {
+        process.stderr.write(`warn: could not read package.json version: ${String(err)}\n`);
         return 'unknown';
     }
 }
@@ -38,15 +39,22 @@ Claude Desktop config:
 
 Environment:
   BOOMSTREAM_API_KEY   Your Boomstream API key (required)`.trim();
-const [cmd] = process.argv.slice(2);
-if (cmd === '--version' || cmd === '-v') {
-    process.stdout.write(getVersion() + '\n');
+const argv = process.argv.slice(2);
+// Scan all args so flags work regardless of position (e.g. `stdio --help`)
+if (argv.includes('--help') || argv.includes('-h')) {
+    process.stdout.write(HELP + '\n');
     process.exit(0);
 }
-if (cmd === '--help' || cmd === '-h') {
-    process.stdout.write(HELP + '\n');
+if (argv.includes('--version') || argv.includes('-v')) {
+    process.stdout.write(getVersion() + '\n');
     process.exit(0);
 }
+const [cmd, ...rest] = argv;
+if (rest.length > 0) {
+    process.stderr.write(`Unknown arguments: ${rest.join(' ')}\n`);
+    process.stderr.write('Run with --help for usage.\n');
+    process.exit(1);
+}
 if (cmd !== undefined && cmd !== 'stdio') {
     process.stderr.write(`Unknown command: ${cmd}\n`);
     process.stderr.write('Run with --help for usage.\n');
@@ -55,10 +63,16 @@ if (cmd !== undefined && cmd !== 'stdio') {
 if (!process.env.BOOMSTREAM_API_KEY) {
     process.stderr.write('Error: BOOMSTREAM_API_KEY environment variable is not set.\n' +
         'Set it to your Boomstream API key and retry.\n' +
-        'Example: BOOMSTREAM_API_KEY=your-key npx @boomstream/mcp stdio\n');
+        'Example: BOOMSTREAM_API_KEY=your-key npx -y @boomstream/mcp stdio\n');
     process.exit(1);
 }
 const server = createServer();
 const transport = new StdioServerTransport();
-await server.connect(transport);
+try {
+    await server.connect(transport);
+}
+catch (err) {
+    process.stderr.write(`Error: failed to start MCP server: ${String(err)}\n`);
+    process.exit(1);
+}
 //# sourceMappingURL=stdio.js.map

package/dist/transports/stdio.js.map

@@ -1 +1 @@
-{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../src/transports/stdio.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CACxC,CAAC;QACzB,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;0DAuB6C,CAAC,IAAI,EAAE,CAAC;AAElE,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEpC,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;IACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;IACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAClC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;IACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;IACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8DAA8D;QAC5D,gDAAgD;QAChD,kEAAkE,CACrE,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;AAC9B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../src/transports/stdio.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CACxC,CAAC;QACzB,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;0DAuB6C,CAAC,IAAI,EAAE,CAAC;AAElE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEnC,2EAA2E;AAC3E,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAClC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;AAE5B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;IACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;IACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8DAA8D;QAC5D,gDAAgD;QAChD,qEAAqE,CACxE,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;AAC9B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,IAAI,CAAC;IACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boomstream/mcp",
-  "version": "0.1.1",
+  "version": "0.2.1",
   "description": "MCP server providing Boomstream API as tools for LLM agents",
   "type": "module",
   "license": "MIT",
@@ -19,6 +19,7 @@
     "dist",
     "schemas",
     "README.md",
+    "CHANGELOG.md",
     "LICENSE"
   ],
   "bin": {
@@ -48,7 +49,6 @@
     "build-schema:db": "node scripts/build-schema.mjs --from-db",
     "build-readme-tools": "node scripts/build-readme-tools.mjs",
     "dev:stdio": "tsx src/transports/stdio.ts",
-    "dev:sse": "tsx src/transports/sse.ts",
     "test": "vitest run",
     "test:watch": "vitest",
     "test:smoke": "vitest run --dir tests/smoke",

package/schemas/boomstream.json

@@ -40,7 +40,6 @@
       ]
     },
     "endpoint": "/api/chat/init",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -86,7 +85,6 @@
       ]
     },
     "endpoint": "/api/chat/info",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -124,7 +122,6 @@
       ]
     },
     "endpoint": "/api/chat/createMessage",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -162,7 +159,6 @@
       ]
     },
     "endpoint": "/api/chat/updateMessage",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -195,7 +191,6 @@
       ]
     },
     "endpoint": "/api/chat/deleteMessage",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -223,7 +218,6 @@
       ]
     },
     "endpoint": "/api/conference/info",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -244,7 +238,6 @@
       }
     },
     "endpoint": "/api/conference/list",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -284,7 +277,6 @@
       ]
     },
     "endpoint": "/api/conference/update",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -337,7 +329,6 @@
       ]
     },
     "endpoint": "/api/conference/invite",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -365,7 +356,6 @@
       ]
     },
     "endpoint": "/api/conference/client/list",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -393,7 +383,6 @@
       ]
     },
     "endpoint": "/api/conference/client/info",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -433,7 +422,6 @@
       ]
     },
     "endpoint": "/api/conference/client/update",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -461,7 +449,6 @@
       ]
     },
     "endpoint": "/api/conference/client/delete",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -489,7 +476,6 @@
       ]
     },
     "endpoint": "/api/conference/delete",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -533,7 +519,6 @@
       ]
     },
     "endpoint": "/api/media/folder",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -565,7 +550,6 @@
       ]
     },
     "endpoint": "/api/media/folder/create",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -598,7 +582,6 @@
       ]
     },
     "endpoint": "/api/media/folder/update",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -626,7 +609,6 @@
       ]
     },
     "endpoint": "/api/media/folder/delete",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -670,7 +652,6 @@
       ]
     },
     "endpoint": "/api/live/folder",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -702,7 +683,6 @@
       ]
     },
     "endpoint": "/api/live/folder/create",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -735,7 +715,6 @@
       ]
     },
     "endpoint": "/api/live/folder/update",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -763,7 +742,6 @@
       ]
     },
     "endpoint": "/api/live/folder/delete",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -807,7 +785,6 @@
       ]
     },
     "endpoint": "/api/materials/folder",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -839,7 +816,6 @@
       ]
     },
     "endpoint": "/api/materials/folder/create",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -872,7 +848,6 @@
       ]
     },
     "endpoint": "/api/materials/folder/update",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -900,7 +875,6 @@
       ]
     },
     "endpoint": "/api/materials/folder/delete",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -921,7 +895,6 @@
       }
     },
     "endpoint": "/api/info",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -949,7 +922,6 @@
       ]
     },
     "endpoint": "/api/live/info",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -970,7 +942,6 @@
       }
     },
     "endpoint": "/api/live/list",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1047,7 +1018,6 @@
       ]
     },
     "endpoint": "/api/live/camera_create",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1115,7 +1085,6 @@
       ]
     },
     "endpoint": "/api/live/camera_update",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1148,7 +1117,6 @@
       ]
     },
     "endpoint": "/api/live/record",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1181,7 +1149,6 @@
       ]
     },
     "endpoint": "/api/live/camera_toggle",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1209,7 +1176,6 @@
       ]
     },
     "endpoint": "/api/live/delete",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1237,7 +1203,6 @@
       ]
     },
     "endpoint": "/api/live/info",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1258,7 +1223,6 @@
       }
     },
     "endpoint": "/api/live/list",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1327,7 +1291,6 @@
       ]
     },
     "endpoint": "/api/live/create",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1391,7 +1354,6 @@
       ]
     },
     "endpoint": "/api/live/update",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1424,7 +1386,6 @@
       ]
     },
     "endpoint": "/api/live/record",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1452,7 +1413,6 @@
       ]
     },
     "endpoint": "/api/live/delete",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1507,7 +1467,6 @@
       ]
     },
     "endpoint": "/api/live/restreaming",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1538,7 +1497,6 @@
       ]
     },
     "endpoint": "/api/media/bulkinfo",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1566,7 +1524,6 @@
       ]
     },
     "endpoint": "/api/media/info",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1603,7 +1560,6 @@
       ]
     },
     "endpoint": "/api/media/create",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1639,7 +1595,6 @@
       ]
     },
     "endpoint": "/api/media/update",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1667,7 +1622,6 @@
       ]
     },
     "endpoint": "/api/media/delete",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1699,7 +1653,6 @@
       ]
     },
     "endpoint": "/api/playlist/create",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1735,7 +1688,6 @@
       ]
     },
     "endpoint": "/api/playlist/update",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1763,7 +1715,6 @@
       ]
     },
     "endpoint": "/api/playlist/delete",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1784,7 +1735,6 @@
       }
     },
     "endpoint": "/api/playlist/list",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1817,7 +1767,6 @@
       ]
     },
     "endpoint": "/api/playlist/addmedia",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1850,7 +1799,6 @@
       ]
     },
     "endpoint": "/api/playlist/deletemedia",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -1878,7 +1826,6 @@
       ]
     },
     "endpoint": "/api/playlist/listmedia",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2015,7 +1962,6 @@
       ]
     },
     "endpoint": "/api/ppv/create",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2137,7 +2083,6 @@
       ]
     },
     "endpoint": "/api/ppv/update",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2165,7 +2110,6 @@
       ]
     },
     "endpoint": "/api/ppv/delete",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2186,7 +2130,6 @@
       }
     },
     "endpoint": "/api/ppv/list",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2219,7 +2162,6 @@
       ]
     },
     "endpoint": "/api/ppv/addmedia",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2252,7 +2194,6 @@
       ]
     },
     "endpoint": "/api/ppv/deletemedia",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2288,7 +2229,6 @@
       ]
     },
     "endpoint": "/api/ppv/listmedia",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2360,7 +2300,6 @@
       ]
     },
     "endpoint": "/api/ppv/addbuyer",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2411,7 +2350,6 @@
       ]
     },
     "endpoint": "/api/ppv/updatebuyer",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2444,7 +2382,6 @@
       ]
     },
     "endpoint": "/api/ppv/deletebuyer",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2481,7 +2418,6 @@
       ]
     },
     "endpoint": "/api/ppv/listbuyers",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2502,7 +2438,6 @@
       }
     },
     "endpoint": "/api/ppv/contacts",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2548,7 +2483,6 @@
       ]
     },
     "endpoint": "/api/ppv/updatecontacts",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2581,7 +2515,6 @@
       ]
     },
     "endpoint": "/api/app/create",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2609,7 +2542,6 @@
       ]
     },
     "endpoint": "/api/app/info",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2637,7 +2569,6 @@
       ]
     },
     "endpoint": "/api/app/list",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2670,7 +2601,6 @@
       ]
     },
     "endpoint": "/api/app/update",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2703,7 +2633,6 @@
       ]
     },
     "endpoint": "/api/app/delete",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2731,7 +2660,6 @@
       ]
     },
     "endpoint": "/api/live/info",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2752,7 +2680,6 @@
       }
     },
     "endpoint": "/api/live/list",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2800,7 +2727,6 @@
       ]
     },
     "endpoint": "/api/live/createRecordLive",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2852,7 +2778,6 @@
       ]
     },
     "endpoint": "/api/live/update",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2897,7 +2822,6 @@
       ]
     },
     "endpoint": "/api/live/upcomingLive",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2930,7 +2854,6 @@
       ]
     },
     "endpoint": "/api/live/startUpcomingLive",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2958,7 +2881,6 @@
       ]
     },
     "endpoint": "/api/live/stopUpcomingLive",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -2991,7 +2913,6 @@
       ]
     },
     "endpoint": "/api/live/removeUpcomingLive",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3019,7 +2940,6 @@
       ]
     },
     "endpoint": "/api/live/delete",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3047,7 +2967,6 @@
       ]
     },
     "endpoint": "/api/screenshot/info",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3088,7 +3007,6 @@
       ]
     },
     "endpoint": "/api/screenshot/create",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3133,7 +3051,6 @@
       ]
     },
     "endpoint": "/api/screenshot/update",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3166,7 +3083,6 @@
       ]
     },
     "endpoint": "/api/screenshot/delete",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3225,7 +3141,6 @@
       }
     },
     "endpoint": "/api/stats",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3283,7 +3198,6 @@
       ]
     },
     "endpoint": "/api/stats",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3338,7 +3252,6 @@
       ]
     },
     "endpoint": "/api/ppv/sessions",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3371,7 +3284,6 @@
       ]
     },
     "endpoint": "/api/subtitles/enable",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3399,7 +3311,6 @@
       ]
     },
     "endpoint": "/api/subtitles/info",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3437,7 +3348,6 @@
       ]
     },
     "endpoint": "/api/subtitles/enabledefault",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3475,7 +3385,6 @@
       ]
     },
     "endpoint": "/api/subtitles/enableautoplay",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3508,7 +3417,6 @@
       ]
     },
     "endpoint": "/api/subtitles/download",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3536,7 +3444,6 @@
       ]
     },
     "endpoint": "/api/timecodes/info",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3569,7 +3476,6 @@
       ]
     },
     "endpoint": "/api/timecodes/enable",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3597,7 +3503,6 @@
       ]
     },
     "endpoint": "/api/timecodes/download",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3618,7 +3523,6 @@
       }
     },
     "endpoint": "/api/webhook/list",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3646,7 +3550,6 @@
       ]
     },
     "endpoint": "/api/webhook/info",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3682,7 +3585,6 @@
       ]
     },
     "endpoint": "/api/webhook/update",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3715,7 +3617,6 @@
       ]
     },
     "endpoint": "/api/webhook/create",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3743,7 +3644,6 @@
       ]
     },
     "endpoint": "/api/webhook/delete",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",
@@ -3764,7 +3664,6 @@
       }
     },
     "endpoint": "/api/webhook/events",
-    "httpMethod": "GET",
     "versions": [
       "1.0",
       "1.1",