@elliotding/ai-agent-mcp 0.1.2 → 0.1.4

package/dist/types/tools.d.ts

@@ -22,6 +22,12 @@ export interface SyncResourcesParams {
     mode?: 'check' | 'incremental' | 'full';
     scope?: 'global' | 'workspace' | 'all';
     types?: string[];
+    /**
+     * CSP API token from the user's mcp.json env configuration.
+     * Overrides the server-level fallback token so that each user
+     * makes API calls with their own identity.
+     */
+    user_token?: string;
 }
 export interface McpSetupItem {
     /** MCP server name as it appears in mcp.json */
@@ -66,6 +72,8 @@ export interface ManageSubscriptionParams {
     auto_sync?: boolean;
     scope?: 'global' | 'workspace';
     notify?: boolean;
+    /** CSP API token from the user's mcp.json env configuration. */
+    user_token?: string;
 }
 export interface ManageSubscriptionResult {
     action: string;
@@ -90,6 +98,8 @@ export interface SearchResourcesParams {
     team?: string;
     type?: string;
     keyword: string;
+    /** CSP API token from the user's mcp.json env configuration. */
+    user_token?: string;
 }
 export interface SearchResourcesResult {
     total: number;
@@ -111,9 +121,10 @@ export interface FileEntry {
 }
 export interface UploadResourceParams {
     resource_id: string;
-    type: 'command' | 'skill' | 'rule' | 'mcp';
+    /** Resource category. Optional — auto-detected from file structure when omitted. */
+    type?: 'command' | 'skill' | 'rule' | 'mcp';
     message: string;
-    /** Human-readable resource name sent to the CSP API. Defaults to resource_id. */
+    /** Human-readable resource name sent to the CSP API. Defaults to the primary file name (without extension). */
     name?: string;
     /** Target source repo from ai-resources-config.json (e.g. "csp", "client-sdk-ai-hub"). Defaults to default_source. */
     target_source?: string;
@@ -122,6 +133,8 @@ export interface UploadResourceParams {
     files: FileEntry[];
     title?: string;
     metadata?: Record<string, unknown>;
+    /** CSP API token from the user's mcp.json env configuration. */
+    user_token?: string;
 }
 export interface UploadResourceResult {
     resource_id: string;
@@ -133,6 +146,8 @@ export interface UploadResourceResult {
 export interface UninstallResourceParams {
     resource_id_or_name: string;
     remove_from_account?: boolean;
+    /** CSP API token from the user's mcp.json env configuration. */
+    user_token?: string;
 }
 export interface UninstallResourceResult {
     success: boolean;

package/dist/types/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/types/tools.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAG3C,MAAM,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAGnE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,aAAa,CAAC;IAC3B,OAAO,EAAE,WAAW,CAAC;CACtB;AAGD,MAAM,WAAW,UAAU,CAAC,CAAC,GAAG,OAAO;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;CACH;AAOD,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,OAAO,GAAG,aAAa,GAAG,MAAM,CAAC;IACxC,KAAK,CAAC,EAAE,QAAQ,GAAG,WAAW,GAAG,KAAK,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,aAAa,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,6EAA6E;IAC7E,0BAA0B,EAAE,OAAO,CAAC;IACpC,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,OAAO,EAAE,KAAK,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH;;;OAGG;IACH,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC;CAChC;AAGD,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,WAAW,GAAG,aAAa,GAAG,MAAM,GAAG,iBAAiB,GAAG,mBAAmB,CAAC;IACvF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,KAAK,CAAC;QACpB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,YAAY,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnE,iEAAiE;IACjE,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC;CAC3B;AAGD,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,KAAK,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,OAAO,CAAC;QACvB,YAAY,EAAE,OAAO,CAAC;KACvB,CAAC,CAAC;CACJ;AAGD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sHAAsH;IACtH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IAId,mHAAmH;IACnH,KAAK,EAAE,SAAS,EAAE,CAAC;IAGnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAGD,MAAM,WAAW,uBAAuB;IACtC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,EAAE,KAAK,CAAC;QACvB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;IACH,oBAAoB,EAAE,OAAO,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/types/tools.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAG3C,MAAM,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAGnE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,aAAa,CAAC;IAC3B,OAAO,EAAE,WAAW,CAAC;CACtB;AAGD,MAAM,WAAW,UAAU,CAAC,CAAC,GAAG,OAAO;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;CACH;AAOD,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,OAAO,GAAG,aAAa,GAAG,MAAM,CAAC;IACxC,KAAK,CAAC,EAAE,QAAQ,GAAG,WAAW,GAAG,KAAK,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,aAAa,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,6EAA6E;IAC7E,0BAA0B,EAAE,OAAO,CAAC;IACpC,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,OAAO,EAAE,KAAK,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH;;;OAGG;IACH,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC;CAChC;AAGD,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,WAAW,GAAG,aAAa,GAAG,MAAM,GAAG,iBAAiB,GAAG,mBAAmB,CAAC;IACvF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,KAAK,CAAC;QACpB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,YAAY,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnE,iEAAiE;IACjE,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC;CAC3B;AAGD,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,KAAK,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,OAAO,CAAC;QACvB,YAAY,EAAE,OAAO,CAAC;KACvB,CAAC,CAAC;CACJ;AAGD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,oFAAoF;IACpF,IAAI,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,+GAA+G;IAC/G,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sHAAsH;IACtH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IAId,mHAAmH;IACnH,KAAK,EAAE,SAAS,EAAE,CAAC;IAGnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAGD,MAAM,WAAW,uBAAuB;IACtC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,EAAE,KAAK,CAAC;QACvB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;IACH,oBAAoB,EAAE,OAAO,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/utils/cursor-paths.d.ts

@@ -46,4 +46,14 @@ export declare function getCursorTypeDir(resourceType: string): string;
  * @param resourceName  - Resource name (with or without extension)
  */
 export declare function getCursorResourcePath(resourceType: string, resourceName: string): string;
+/**
+ * Returns the path to the local AI resource telemetry file.
+ *
+ * Stored at the Cursor root level (not inside a resource-type subdirectory)
+ * so it persists independently of individual resource installs/uninstalls.
+ *
+ * macOS / Linux : ~/.cursor/ai-resource-telemetry.json
+ * Windows       : %APPDATA%\Cursor\User\ai-resource-telemetry.json
+ */
+export declare function getTelemetryFilePath(): string;
 //# sourceMappingURL=cursor-paths.d.ts.map

package/dist/utils/cursor-paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cursor-paths.d.ts","sourceRoot":"","sources":["../../src/utils/cursor-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,iEAAiE;AACjE,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CASnD,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAQzC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAS7D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAExF"}
+{"version":3,"file":"cursor-paths.d.ts","sourceRoot":"","sources":["../../src/utils/cursor-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,iEAAiE;AACjE,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CASnD,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAQzC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAS7D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAExF;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C"}

package/dist/utils/cursor-paths.js

@@ -47,6 +47,7 @@ exports.CURSOR_TYPE_DIRS = void 0;
 exports.getCursorRootDir = getCursorRootDir;
 exports.getCursorTypeDir = getCursorTypeDir;
 exports.getCursorResourcePath = getCursorResourcePath;
+exports.getTelemetryFilePath = getTelemetryFilePath;
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 /** Supported Cursor resource types and their directory names. */
@@ -113,4 +114,16 @@ function getCursorTypeDir(resourceType) {
 function getCursorResourcePath(resourceType, resourceName) {
     return path.join(getCursorTypeDir(resourceType), resourceName);
 }
+/**
+ * Returns the path to the local AI resource telemetry file.
+ *
+ * Stored at the Cursor root level (not inside a resource-type subdirectory)
+ * so it persists independently of individual resource installs/uninstalls.
+ *
+ * macOS / Linux : ~/.cursor/ai-resource-telemetry.json
+ * Windows       : %APPDATA%\Cursor\User\ai-resource-telemetry.json
+ */
+function getTelemetryFilePath() {
+    return path.join(getCursorRootDir(), 'ai-resource-telemetry.json');
+}
 //# sourceMappingURL=cursor-paths.js.map

package/dist/utils/cursor-paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"cursor-paths.js","sourceRoot":"","sources":["../../src/utils/cursor-paths.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBH,4CAQC;AAeD,4CASC;AAgBD,sDAEC;AAvED,uCAAyB;AACzB,2CAA6B;AAE7B,iEAAiE;AACpD,QAAA,gBAAgB,GAA2B;IACtD,KAAK,EAAI,QAAQ;IACjB,MAAM,EAAG,QAAQ;IACjB,OAAO,EAAE,UAAU;IACnB,QAAQ,EAAC,UAAU;IACnB,IAAI,EAAK,OAAO;IAChB,KAAK,EAAI,OAAO;IAChB,GAAG,EAAM,aAAa;IACtB,aAAa,EAAE,aAAa;CAC7B,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,gBAAgB;IAC9B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,6EAA6E;QAC7E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,qCAAqC;IACrC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,gBAAgB,CAAC,YAAoB;IACnD,MAAM,MAAM,GAAG,wBAAgB,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,0BAA0B,YAAY,KAAK;YAC3C,oBAAoB,MAAM,CAAC,IAAI,CAAC,wBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,qBAAqB,CAAC,YAAoB,EAAE,YAAoB;IAC9E,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;AACjE,CAAC"}
+{"version":3,"file":"cursor-paths.js","sourceRoot":"","sources":["../../src/utils/cursor-paths.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBH,4CAQC;AAeD,4CASC;AAgBD,sDAEC;AAWD,oDAEC;AApFD,uCAAyB;AACzB,2CAA6B;AAE7B,iEAAiE;AACpD,QAAA,gBAAgB,GAA2B;IACtD,KAAK,EAAI,QAAQ;IACjB,MAAM,EAAG,QAAQ;IACjB,OAAO,EAAE,UAAU;IACnB,QAAQ,EAAC,UAAU;IACnB,IAAI,EAAK,OAAO;IAChB,KAAK,EAAI,OAAO;IAChB,GAAG,EAAM,aAAa;IACtB,aAAa,EAAE,aAAa;CAC7B,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,gBAAgB;IAC9B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,6EAA6E;QAC7E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,qCAAqC;IACrC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,gBAAgB,CAAC,YAAoB;IACnD,MAAM,MAAM,GAAG,wBAAgB,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,0BAA0B,YAAY,KAAK;YAC3C,oBAAoB,MAAM,CAAC,IAAI,CAAC,wBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,qBAAqB,CAAC,YAAoB,EAAE,YAAoB;IAC9E,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,oBAAoB;IAClC,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,4BAA4B,CAAC,CAAC;AACrE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elliotding/ai-agent-mcp",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "CSP AI Agent MCP Server - Centralized AI tools distribution and management",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/api/client.ts

@@ -23,11 +23,21 @@ class APIClient {
       },
     });
 
-    // Request interceptor for authentication and logging
+    // Request interceptor for authentication and logging.
+    // Every request MUST carry a per-request Authorization header supplied by
+    // the caller via authConfig(userToken). If none is present the request is
+    // rejected immediately with a clear error so the caller knows they must
+    // configure their token in mcp.json under env.CSP_API_TOKEN.
     this.client.interceptors.request.use(
       (requestConfig) => {
-        if (config.csp.apiToken) {
-          requestConfig.headers.Authorization = `Bearer ${config.csp.apiToken}`;
+        if (!requestConfig.headers.Authorization) {
+          return Promise.reject(
+            new Error(
+              'Authorization token is missing. ' +
+              'Ensure the MCP server is connected via SSE with a valid Bearer token in the Authorization header. ' +
+              'Check that your mcp.json has the correct "headers": {"Authorization": "Bearer <token>"} configured.'
+            )
+          );
         }
         
         // Enhanced request logging
@@ -115,6 +125,27 @@ class APIClient {
     );
   }
 
+  /**
+   * Build an AxiosRequestConfig that carries a per-request user token.
+   * Pass the result as the `config` argument to get/post/put/delete or merge it
+   * into any existing request config so that the caller's token overrides the
+   * server-level fallback set in the interceptor.
+   *
+   * Usage:
+   *   await apiClient.get('/some/path', apiClient.authConfig(userToken));
+   *   await apiClient.post('/some/path', body, apiClient.authConfig(userToken));
+   */
+  authConfig(token: string | undefined, extra?: AxiosRequestConfig): AxiosRequestConfig {
+    if (!token) return extra ?? {};
+    return {
+      ...extra,
+      headers: {
+        ...(extra?.headers ?? {}),
+        Authorization: `Bearer ${token}`,
+      },
+    };
+  }
+
   /**
    * Sanitize headers to hide sensitive information
    */
@@ -241,12 +272,19 @@ class APIClient {
 
   /**
    * Get subscription list
+   *
+   * @param params   Query parameters for filtering subscriptions.
+   * @param userToken Per-request token from the caller's mcp.json configuration.
+   *                  When provided it overrides the server-level fallback token.
    */
-  async getSubscriptions(params?: {
-    scope?: 'general' | 'team' | 'user' | 'all';
-    types?: string[];
-    detail?: boolean;  // Added: include detailed metadata
-  }): Promise<{
+  async getSubscriptions(
+    params?: {
+      scope?: 'general' | 'team' | 'user' | 'all';
+      types?: string[];
+      detail?: boolean;
+    },
+    userToken?: string
+  ): Promise<{
     total: number;
     subscriptions: Array<{
       id: string;
@@ -281,27 +319,29 @@ class APIClient {
           };
         }>;
       };
-    }>('/csp/api/resources/subscriptions', { params });
-    
-    // Extract data from CSP API response format
+    }>('/csp/api/resources/subscriptions', this.authConfig(userToken, { params }));
+
     if (!response.data) {
       throw new Error('Invalid API response: missing data field');
     }
-    
+
     return response.data;
   }
 
   /**
    * Subscribe to resource
+   *
+   * @param userToken Per-request token from the caller's mcp.json configuration.
    */
   async subscribe(
-    resourceIds: string[], 
+    resourceIds: string[],
     autoSync = true,
-    scope?: 'general' | 'team' | 'user'  // Added: subscription scope
+    scope?: 'general' | 'team' | 'user',
+    userToken?: string
   ): Promise<{
     success: boolean;
-    subscriptions: Array<{ 
-      id: string; 
+    subscriptions: Array<{
+      id: string;
       name: string;
       type: string;
       subscribed_at: string;
@@ -312,44 +352,39 @@ class APIClient {
       result: string;
       data: {
         success?: boolean;
-        subscriptions: Array<{ 
-          id: string; 
+        subscriptions: Array<{
+          id: string;
           name: string;
           type: string;
           subscribed_at: string;
         }>;
       };
-    }>('/csp/api/resources/subscriptions/add', {
-      resource_ids: resourceIds,
-      auto_sync: autoSync,
-      scope,
-    });
-    
+    }>(
+      '/csp/api/resources/subscriptions/add',
+      { resource_ids: resourceIds, auto_sync: autoSync, scope },
+      this.authConfig(userToken)
+    );
+
     if (!response.data) {
       throw new Error('Invalid API response: missing data field');
     }
-    
-    return {
-      success: true,
-      subscriptions: response.data.subscriptions
-    };
+
+    return { success: true, subscriptions: response.data.subscriptions };
   }
 
   /**
    * Unsubscribe from resource
+   *
+   * @param userToken Per-request token from the caller's mcp.json configuration.
    */
-  async unsubscribe(resourceIds: string | string[]): Promise<void> {
-    // Support batch unsubscribe
+  async unsubscribe(resourceIds: string | string[], userToken?: string): Promise<void> {
     const ids = Array.isArray(resourceIds) ? resourceIds : [resourceIds];
     const response = await this.delete<{
       code: number;
       result: string;
       data: { removed_count: number };
-    }>('/csp/api/resources/subscriptions/remove', {
-      data: { resource_ids: ids }
-    });
-    
-    // Just validate response, no need to return anything
+    }>('/csp/api/resources/subscriptions/remove', this.authConfig(userToken, { data: { resource_ids: ids } }));
+
     if (!response.data) {
       throw new Error('Invalid API response: missing data field');
     }
@@ -357,15 +392,20 @@ class APIClient {
 
   /**
    * Search resources
+   *
+   * @param userToken Per-request token from the caller's mcp.json configuration.
    */
-  async searchResources(params: {
-    keyword: string;
-    team?: string;
-    type?: string;
-    detail?: boolean;      // Added: include detailed metadata
-    page?: number;         // Added: pagination
-    page_size?: number;    // Added: page size
-  }): Promise<{
+  async searchResources(
+    params: {
+      keyword: string;
+      team?: string;
+      type?: string;
+      detail?: boolean;
+      page?: number;
+      page_size?: number;
+    },
+    userToken?: string
+  ): Promise<{
     total: number;
     page?: number;
     page_size?: number;
@@ -415,22 +455,21 @@ class APIClient {
           };
         }>;
       };
-    }>('/csp/api/resources/search', { params });
-    
-    // Extract data from CSP API response format
+    }>('/csp/api/resources/search', this.authConfig(userToken, { params }));
+
     if (!response.data) {
       throw new Error('Invalid API response: missing data field');
     }
-    
+
     return {
       total: response.data.total,
       page: response.data.page,
       page_size: response.data.page_size,
-      results: response.data.results.map(r => ({
+      results: response.data.results.map((r) => ({
         ...r,
         score: r.score || 0,
-        is_subscribed: r.is_subscribed || false
-      }))
+        is_subscribed: r.is_subscribed || false,
+      })),
     };
   }
 
@@ -443,8 +482,13 @@ class APIClient {
    * files[].path is the relative path within the resource directory.
    * Single-file resources (command, rule) have exactly one element.
    * Multi-file resources (skill, mcp) have all their files included.
+   *
+   * @param userToken Per-request token from the caller's mcp.json configuration.
    */
-  async downloadResource(resourceId: string): Promise<{
+  async downloadResource(
+    resourceId: string,
+    userToken?: string
+  ): Promise<{
     resource_id: string;
     name: string;
     type: string;
@@ -463,14 +507,19 @@ class APIClient {
         hash: string;
         files: Array<{ path: string; content: string }>;
       };
-    }>(`/csp/api/resources/download/${resourceId}`);
+    }>(`/csp/api/resources/download/${resourceId}`, this.authConfig(userToken));
     return response.data;
   }
 
   /**
    * Get resource detail
+   *
+   * @param userToken Per-request token from the caller's mcp.json configuration.
    */
-  async getResourceDetail(resourceId: string): Promise<{
+  async getResourceDetail(
+    resourceId: string,
+    userToken?: string
+  ): Promise<{
     id: string;
     name: string;
     type: string;
@@ -489,7 +538,7 @@ class APIClient {
     };
     download_url: string;
   }> {
-    return this.get(`/csp/api/resources/${resourceId}`);
+    return this.get(`/csp/api/resources/${resourceId}`, this.authConfig(userToken));
   }
 
   /**
@@ -501,22 +550,29 @@ class APIClient {
    *
    * The server validates path traversal, total size (< 10 MB), and name conflicts.
    * All file types are supported — mcp packages may include .py, .js, package.json, etc.
+   *
+   * @param userToken Per-request token from the caller's mcp.json configuration.
    */
-  async uploadResourceFiles(params: {
-    type: string;
-    name: string;
-    files: Array<{ path: string; content: string }>;
-    target_source?: string;
-    force?: boolean;
-  }): Promise<{
+  async uploadResourceFiles(
+    params: {
+      type: string;
+      name: string;
+      files: Array<{ path: string; content: string }>;
+      target_source?: string;
+      force?: boolean;
+    },
+    userToken?: string
+  ): Promise<{
     upload_id: string;
     status: string;
     expires_at: string;
     preview_url?: string;
   }> {
-    const resp = await this.post<{ code: number; result: string; data: { upload_id: string; status: string; expires_at: string; preview_url?: string } }>(
-      '/csp/api/resources/upload', params
-    );
+    const resp = await this.post<{
+      code: number;
+      result: string;
+      data: { upload_id: string; status: string; expires_at: string; preview_url?: string };
+    }>('/csp/api/resources/upload', params, this.authConfig(userToken));
     return resp.data;
   }
 
@@ -526,23 +582,87 @@ class APIClient {
    * POST /csp/api/resources/finalize
    * Body: { upload_id, commit_message }
    * Response: { resource_id, version, url, commit_hash, download_url }
+   *
+   * @param userToken Per-request token from the caller's mcp.json configuration.
    */
-  async finalizeResourceUpload(uploadId: string, commitMessage: string): Promise<{
+  async finalizeResourceUpload(
+    uploadId: string,
+    commitMessage: string,
+    userToken?: string
+  ): Promise<{
     resource_id: string;
     version?: string;
     url?: string;
     commit_hash?: string;
     download_url?: string;
   }> {
-    const resp = await this.post<{ code: number; result: string; data: { resource_id: string; version?: string; url?: string; commit_hash?: string; download_url?: string } }>(
-      '/csp/api/resources/finalize', {
-        upload_id: uploadId,
-        commit_message: commitMessage,
-      }
+    const resp = await this.post<{
+      code: number;
+      result: string;
+      data: {
+        resource_id: string;
+        version?: string;
+        url?: string;
+        commit_hash?: string;
+        download_url?: string;
+      };
+    }>(
+      '/csp/api/resources/finalize',
+      { upload_id: uploadId, commit_message: commitMessage },
+      this.authConfig(userToken)
     );
     return resp.data;
   }
 
+  /**
+   * Report AI resource usage telemetry to the server.
+   *
+   * POST /csp/api/resources/telemetry
+   * Body: { client_version, reported_at, events[], subscribed_rules[], configured_mcps[] }
+   *
+   * Called by TelemetryManager.flush() every ~10 seconds and on reconnect.
+   * Throws on non-2xx so the caller can apply retry logic.
+   *
+   * jira_id in each event entry is optional — it is only present when the user
+   * explicitly passed a Jira ID during the Prompt invocation.
+   *
+   * @param payload   Telemetry report payload built by TelemetryManager
+   * @param userToken Per-request Bearer token from the caller's mcp.json configuration
+   */
+  async reportTelemetry(
+    payload: {
+      client_version: string;
+      reported_at: string;
+      events: Array<{
+        resource_id: string;
+        resource_type: string;
+        resource_name: string;
+        invocation_count: number;
+        first_invoked_at: string;
+        last_invoked_at: string;
+        /** Optional Jira Issue ID (e.g. "PROJ-12345"). Absent when not provided. */
+        jira_id?: string;
+      }>;
+      subscribed_rules: Array<{
+        resource_id: string;
+        resource_name: string;
+        subscribed_at: string;
+      }>;
+      configured_mcps: Array<{
+        resource_id: string;
+        resource_name: string;
+        configured_at: string;
+      }>;
+    },
+    userToken: string
+  ): Promise<void> {
+    await this.post<{ code: number; result: string; data: unknown }>(
+      '/csp/api/resources/telemetry',
+      payload,
+      this.authConfig(userToken)
+    );
+  }
+
   /**
    * @deprecated Use uploadResourceFiles() + finalizeResourceUpload() instead.
    */

package/src/auth/permissions.ts

@@ -69,6 +69,12 @@ const defaultPermissions: ToolPermission[] = [
     allowedGroups: ['*'],
     requiredPermission: PermissionLevel.WRITE,
   },
+  // track_usage - internal telemetry tool, always allowed for all authenticated users
+  {
+    tool: 'track_usage',
+    allowedGroups: ['*'],
+    requiredPermission: PermissionLevel.WRITE,
+  },
 ];
 
 /**

package/src/config/index.ts

@@ -46,6 +46,12 @@ export interface Config {
   http?: {
     host: string;
     port: number;
+    /** URL path prefix when the server runs behind a reverse proxy sub-path.
+     *  e.g.  HTTP_BASE_PATH=/csp-agent  → SSE at /csp-agent/sse
+     *                                    → messages POST to /csp-agent/message
+     *  Leave empty (default) for direct / root-path deployments.
+     */
+    basePath: string;
   };
 
   // Session (for SSE transport)
@@ -56,7 +62,10 @@ export interface Config {
   // CSP API
   csp: {
     apiBaseUrl: string;
-    apiToken: string;
+    // NOTE: No apiToken here. The user token comes from mcp.json env.CSP_API_TOKEN,
+    // which Cursor injects into the process environment at startup. Each tool call
+    // receives it via the user_token argument; telemetry reads process.env.CSP_API_TOKEN
+    // directly. Storing it in config would encourage incorrect singleton-token patterns.
     timeout: number;
   };
 
@@ -140,9 +149,6 @@ export function loadConfig(): Config {
   const logLevel = (process.env.LOG_LEVEL || 'info') as Config['logLevel'];
   const transportMode = (process.env.TRANSPORT_MODE || 'stdio') as 'stdio' | 'sse';
 
-  // Debug: Log CSP_API_TOKEN to verify it was loaded
-  console.log(`🔑 CSP_API_TOKEN from env: ${process.env.CSP_API_TOKEN ? process.env.CSP_API_TOKEN.substring(0, 20) + '...' : 'NOT SET'}`);
-
   return {
     nodeEnv,
     port: getEnvNumber('PORT', 5090),
@@ -155,6 +161,7 @@ export function loadConfig(): Config {
     http: transportMode === 'sse' ? {
       host: getEnv('HTTP_HOST', '0.0.0.0'),
       port: getEnvNumber('HTTP_PORT', 3000),
+      basePath: getEnv('HTTP_BASE_PATH', ''),
     } : undefined,
 
     session: transportMode === 'sse' ? {
@@ -163,7 +170,6 @@ export function loadConfig(): Config {
 
     csp: {
       apiBaseUrl: getEnv('CSP_API_BASE_URL', 'https://csp.example.com'),
-      apiToken: getEnv('CSP_API_TOKEN', 'test-token-12345'),
       timeout: getEnvNumber('CSP_API_TIMEOUT', 30000),
     },
 

package/src/index.ts

@@ -10,6 +10,8 @@ import { startLogCleanupSchedule, stopLogCleanupSchedule } from './utils/log-cle
 import { startServer, stopServer } from './server';
 import { stopCacheCleanup } from './auth/token-validator';
 import { sessionManager } from './session/manager';
+import { telemetry } from './telemetry/index.js';
+import { apiClient } from './api/client.js';
 
 // Global error handlers
 process.on('uncaughtException', (error: Error) => {
@@ -52,11 +54,21 @@ async function main() {
   // Start log cleanup scheduler
   const cleanupTimer = startLogCleanupSchedule();
 
+  // Wire up telemetry reporting (inject API client to avoid circular import)
+  telemetry.configure(
+    (payload, token) => apiClient.reportTelemetry(payload, token),
+    () => process.env.CSP_API_TOKEN
+  );
+
   try {
     // Start MCP Server
     await startServer();
 
     logger.info({ port: config.port }, `✅ CSP AI Agent MCP Server started successfully`);
+
+    // Start periodic telemetry flush (every 10 seconds)
+    telemetry.startPeriodicFlush(10_000);
+    logger.info('Telemetry flush scheduler started (interval: 10s)');
   } catch (error) {
     logger.error({ error }, 'Failed to start server');
     stopLogCleanupSchedule(cleanupTimer);
@@ -110,6 +122,12 @@ async function main() {
       stopCacheCleanup();
       logger.info('Token cache cleanup stopped');
 
+      // Stop telemetry scheduler and perform final flush
+      telemetry.stopPeriodicFlush();
+      logger.info('Telemetry scheduler stopped, performing final flush...');
+      await telemetry.flush();
+      logger.info('Final telemetry flush completed');
+
       // Phase 4: Flush logs
       logger.info('Phase 4: Flushing logs...');