@everfur/cli 0.8.0 → 0.9.1

package/dist/{chunk-4Q2SPVPA.js → chunk-FWEDPKKK.js}

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
-import { hostnameOf, listen, close, writeJson, serveStatelessMcp } from './chunk-AEY522A6.js';
-import { createHostedTokenVerifier, tokenBucketOf, isAccessTokenShaped, buildServer, MCP_SCOPE, tenantContextOf, sendTestUserRef, hostedVerifyUserRef, REVOKED_AUTHORIZATION_REMEDY, SYNTHETIC_USER_REF_PREFIX } from './chunk-EDURPYNG.js';
-import { BASE_URL_ENV_VAR, resolveEndpoint, fetchTransport, systemClock, createApiClient, withPrefix, ephemeralCredential, validateContractText, isJsonObject, describeFailure } from './chunk-WPEB2AVZ.js';
+/*! @everfur/cli. Copyright (c) 2026 Strand Health Inc. dba Everfur. All rights reserved. Use is subject to the Everfur SDK License: https://docs.everfur.com/license */
+import { hostnameOf, listen, close, writeJson, serveStatelessMcp } from './chunk-JURZYOMH.js';
+import { createHostedTokenVerifier, tokenBucketOf, isAccessTokenShaped, buildServer, MCP_SCOPE, tenantContextOf, sendTestUserRef, hostedVerifyUserRef, REVOKED_AUTHORIZATION_REMEDY, SYNTHETIC_USER_REF_PREFIX } from './chunk-FLW4ZANY.js';
+import { BASE_URL_ENV_VAR, resolveEndpoint, fetchTransport, systemClock, createApiClient, withPrefix, ephemeralCredential, validateContractText, isJsonObject, describeFailure } from './chunk-VUXILRME.js';
 import { createServer } from 'http';
 import { InvalidTokenError, TooManyRequestsError, TemporarilyUnavailableError } from '@modelcontextprotocol/sdk/server/auth/errors.js';
 import { isIP } from 'net';
@@ -316,6 +317,25 @@ The tenant tools read the connected tenant's own state and change nothing:
 None of them returns a signing secret, a key value, or a member's conversation, message or record content.
 everfur_search_docs searches the contract's error registry, capability packs and integration guide.
 
+The claims tools are for an insurer connecting its own claims system to Everfur, and none of them reads a claim,
+evidence, an eligibility answer or a decision. A claims integration starts from everfur_plan_claims_integration, and
+everfur_plan_integration plans the SDK surfaces only:
+- everfur_plan_claims_integration returns the inbound-first claims plan with no project: every change on the
+  insurer's side in order (the security rules, the sandbox endpoint, the claims system's outbound webhook settings with
+  the signing headers, answers and retries, the field mapping, documents and their limits, profile events, signed
+  samples, secret rotation with no downtime, go-live with Everfur, and the adjusters' review in the claims portal), each
+  step naming the tool that does it or the exact setting, with a checklist that defines done. With project_details it
+  adds the OPTIONAL server code for an insurer that also files through the Claims API or receives Everfur's outbound
+  webhooks. It is paged like everfur_plan_integration and needs no key or secret.
+- everfur_propose_claims_mapping proposes the inbound mapping from sample native events passed in samples, offline:
+  each field's source path, transforms and why, the gaps per kind, and the personal data paths to scrub. It never maps
+  an owner name, contact, address or payment field.
+- everfur_explain_claims_error explains an inbound webhook code, a Claims API error code, a document_rejected reason,
+  a webhook delivery state or a profile import code, offline.
+Saving and activating the mapping, the signing setup, sample events, the sandbox event log, the sandbox test events
+and the receiver checks run only on a server the developer runs, which holds the sandbox key and the secrets; the plan
+names each of those steps as local only.
+
 Every tool returns structured content. A failed call carries error.code, error.retryable and error.next_action, which
 are stable, while the message is prose that may change. TENANT_SURFACE_NOT_ENABLED means that surface is not switched
 on for the connected tenant, a setting Everfur holds rather than a fault in the call. CONTRACT_UNAVAILABLE means the Everfur API did not serve the contract, and error.retryable says

package/dist/{chunk-AEY522A6.js → chunk-JURZYOMH.js}

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
-import { buildServer } from './chunk-EDURPYNG.js';
+/*! @everfur/cli. Copyright (c) 2026 Strand Health Inc. dba Everfur. All rights reserved. Use is subject to the Everfur SDK License: https://docs.everfur.com/license */
+import { buildServer } from './chunk-FLW4ZANY.js';
 import { createServer } from 'http';
 import { timingSafeEqual } from 'crypto';
 import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
@@ -126,7 +127,7 @@ function createRemoteMcpRequestListener(config) {
       writeJson(res, allowed.status, { error: allowed.message }, allowed.headers ?? {});
       return;
     }
-    await serveStatelessMcp(req, res, buildServer({ env: config.env }));
+    await serveStatelessMcp(req, res, buildServer({ env: config.env }, {}, { localSecretTools: false }));
   };
 }
 function listen(server, port, host) {

package/dist/{chunk-U4Q4OAVK.js → chunk-LALDS2WR.js}

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
-import { VERIFY_IDENTITY_MODES, SURFACES, ENVIRONMENTS, BASE_URL_ENV_VAR, MIN_TIMEOUT_MS, MAX_TIMEOUT_MS, DEFAULT_TIMEOUT_MS, ALL_CAPABILITIES, expandCapabilities, errorOutcome, describeFailure, failureDetails, countsAsNotOn, diagnoseVerdict, isJsonObject, succeed, CAPABILITY_QUESTION, CAPABILITIES_TREE, WEB_EMBEDDING_QUESTION, PLATFORM_TREE, loadDecisionSpace, fetchContract, contractUnavailableOutcome, loadDecisionSpaceFromContract, parseEnvironment, checkTenantMode, detectProject, planIntegration, fail, ExitCode, DOCS_KEY, resolveContractPath, validateContractFile, buildSupportBundle, renderSupportBundle, chooseWidgetAuth, DIAGNOSTICS_PATH, diagnoseFailure, parseDiagnostics, buildDiagnosisDocument, PARTNER_KEY, SESSION_TOKEN, resolveCredential, ADMIN_TOKEN, withPrefix, parseOrigin, parseLoaderUrl, parseSurfaces, parseIdentityMode, runVerification, PARTNER_SECRET_KEY, resolveOffline, resolveWithoutRegistry, knownCodes, loadErrorRegistryFromContract, loadErrorRegistry, resolveAfterRegistryMiss, registryAlsoIn, buildExplanationDocument, renderExplanation, alsoInLines, resolveEndpoint, isCorrelatableRequestId, EMPTY_REGISTRY, createApiClient, offlineDocument, renderOffline, IDENTITY_QUESTION, IDENTITY_TREE, BACKEND_LANGUAGE_QUESTION, SESSION_MINT_TREE, CREDENTIAL_SPECS } from './chunk-WPEB2AVZ.js';
+/*! @everfur/cli. Copyright (c) 2026 Strand Health Inc. dba Everfur. All rights reserved. Use is subject to the Everfur SDK License: https://docs.everfur.com/license */
+import { VERIFY_IDENTITY_MODES, SURFACES, ENVIRONMENTS, BASE_URL_ENV_VAR, MIN_TIMEOUT_MS, MAX_TIMEOUT_MS, DEFAULT_TIMEOUT_MS, ALL_CAPABILITIES, expandCapabilities, errorOutcome, describeFailure, failureDetails, countsAsNotOn, diagnoseVerdict, isJsonObject, succeed, CAPABILITY_QUESTION, CAPABILITIES_TREE, WEB_EMBEDDING_QUESTION, PLATFORM_TREE, loadDecisionSpace, fetchContract, contractUnavailableOutcome, loadDecisionSpaceFromContract, parseEnvironment, checkTenantMode, detectProject, planIntegration, fail, ExitCode, DOCS_KEY, resolveContractPath, validateContractFile, buildSupportBundle, renderSupportBundle, chooseWidgetAuth, DIAGNOSTICS_PATH, diagnoseFailure, parseDiagnostics, buildDiagnosisDocument, PARTNER_KEY, SESSION_TOKEN, resolveCredential, ADMIN_TOKEN, withPrefix, parseOrigin, parseLoaderUrl, parseSurfaces, parseIdentityMode, runVerification, PARTNER_SECRET_KEY, resolveOffline, resolveWithoutRegistry, knownCodes, loadErrorRegistryFromContract, loadErrorRegistry, resolveAfterRegistryMiss, registryAlsoIn, buildExplanationDocument, renderExplanation, alsoInLines, resolveEndpoint, isCorrelatableRequestId, EMPTY_REGISTRY, createApiClient, offlineDocument, renderOffline, IDENTITY_QUESTION, IDENTITY_TREE, BACKEND_LANGUAGE_QUESTION, SESSION_MINT_TREE, CREDENTIAL_SPECS } from './chunk-VUXILRME.js';
 import { isAbsolute, resolve } from 'path';
 
 // src/cli/format.ts