@extrovert.dev/mcp 0.1.0-pre.3 → 0.1.0-pre.5

package/dist/http.js

@@ -1,124 +1,126 @@
 /**
- * Hosted HTTP transport — MCP Streamable HTTP over Express.
+ * Hosted MCP Streamable HTTP transport.
  *
- * Serves the same toolset as stdio at `POST /mcp` (plus `GET`/`DELETE /mcp` for
- * the SSE stream and session teardown). A scoped agent key may be supplied per
- * request via `Authorization: Bearer …` (or `x-extrovert-api-key`) so one hosted
- * deployment can serve many agents, each with their own scoped key — never an
- * org-wide key (spec §14). Falls back to the env key when no header is present.
- *
- * Sessions are tracked by the `mcp-session-id` header the SDK assigns on
- * initialize, so each agent gets an isolated server + client instance.
+ * MCP SDK v2 constructs a fresh server for every request. There is no in-memory
+ * session map, so any cluster node can serve any request and a rolling deploy
+ * cannot strand client sessions. Clerk remains the OAuth authorization server;
+ * this process is only a protected resource server.
  */
-import { randomUUID } from "node:crypto";
-import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
-import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
-import express from "express";
+import { createMcpHandler, } from "@modelcontextprotocol/server";
+import { createMcpExpressApp, getOAuthProtectedResourceMetadataUrl, mcpAuthMetadataRouter, requireBearerAuth, } from "@modelcontextprotocol/express";
+import { toNodeHandler } from "@modelcontextprotocol/node";
+import { createHostedTokenVerifier, discoverOAuthMetadata, loadHostedAuthConfig, } from "./auth.js";
 import { ExtrovertClient } from "./client.js";
 import { loadConfig, SERVER_NAME, SERVER_VERSION } from "./config.js";
 import { createExtrovertServer } from "./server.js";
-const SESSION_HEADER = "mcp-session-id";
-/** Read a per-request scoped key from standard headers, if present. */
-function keyFromRequest(req) {
-    const auth = req.header("authorization");
-    if (auth?.toLowerCase().startsWith("bearer "))
-        return auth.slice(7).trim();
-    const custom = req.header("x-extrovert-api-key");
-    if (custom)
-        return custom.trim();
-    return undefined;
-}
-/** Build a per-session config, layering an optional request key over env. */
-function configForRequest(base, req) {
-    const key = keyFromRequest(req);
-    if (key === undefined)
-        return base;
-    // A request key implies a live caller; honor it for this session.
-    return { ...base, apiKey: key, mock: base.mock && key === "" };
-}
-export async function runHttp(options = {}) {
-    const baseConfig = loadConfig();
-    const port = options.port ?? Number.parseInt(process.env.PORT ?? "8787", 10);
-    const host = options.host ?? process.env.HOST ?? "0.0.0.0";
-    const app = express();
-    app.use(express.json({ limit: "4mb" }));
-    const sessions = new Map();
+export async function createHttpApp(options = {}) {
+    const env = options.env ?? process.env;
+    const baseConfig = options.baseConfig ?? loadConfig(env);
+    const host = options.host ?? env.HOST ?? "0.0.0.0";
+    const productionAuth = parseBool(env.EXTROVERT_MCP_OAUTH_ENABLED);
+    const injectedAuth = options.verifier !== undefined || options.oauthMetadata !== undefined;
+    const authEnabled = productionAuth || injectedAuth;
+    let authConfig = options.authConfig;
+    let verifier = options.verifier;
+    let oauthMetadata = options.oauthMetadata;
+    if (authEnabled) {
+        authConfig ??= loadHostedAuthConfig(env);
+        verifier ??= createHostedTokenVerifier(authConfig, baseConfig.apiBaseUrl);
+        oauthMetadata ??= await discoverOAuthMetadata(authConfig.issuer);
+    }
+    else if (!baseConfig.mock && baseConfig.apiKey === "") {
+        throw new Error("HTTP transport requires EXTROVERT_MCP_OAUTH_ENABLED=1, EXTROVERT_API_KEY, or EXTROVERT_MOCK=1");
+    }
+    const allowedHosts = authConfig
+        ? uniqueStrings([
+            authConfig.resourceUrl.hostname,
+            "127.0.0.1",
+            "localhost",
+            "[::1]",
+            ...(env.EXTROVERT_MCP_ALLOWED_HOSTS ?? "").split(","),
+        ])
+        : undefined;
+    const app = createMcpExpressApp({ host, allowedHosts, jsonLimit: "4mb" });
+    const handler = createMcpHandler(({ authInfo }) => {
+        const config = configForRequest(baseConfig, authInfo?.token);
+        const client = new ExtrovertClient(config);
+        return createExtrovertServer({ config, client }).server;
+    }, {
+        legacy: "stateless",
+        onerror: (error) => process.stderr.write(`extrovert-mcp: protocol error: ${error.message}\n`),
+    });
+    const nodeHandler = toNodeHandler(handler, {
+        onerror: (error) => process.stderr.write(`extrovert-mcp: HTTP adapter error: ${error.message}\n`),
+    });
     app.get("/healthz", (_req, res) => {
         res.json({
             ok: true,
             server: SERVER_NAME,
             version: SERVER_VERSION,
-            mode: baseConfig.mock ? "mock" : "live",
-            sessions: sessions.size,
+            transport: "streamable-http-stateless",
+            auth: authEnabled
+                ? "oauth-or-agent-key"
+                : baseConfig.mock
+                    ? "offline-fixtures"
+                    : "environment-key",
         });
     });
-    // Primary MCP endpoint: client→server messages (incl. initialize).
-    app.post("/mcp", async (req, res) => {
-        const sessionId = req.header(SESSION_HEADER);
-        if (sessionId && sessions.has(sessionId)) {
-            await sessions.get(sessionId).transport.handleRequest(req, res, req.body);
-            return;
-        }
-        if (sessionId && !sessions.has(sessionId)) {
-            res.status(404).json(jsonRpcError(-32001, "Unknown or expired session"));
-            return;
-        }
-        if (!isInitializeRequest(req.body)) {
-            res
-                .status(400)
-                .json(jsonRpcError(-32000, "First request must be an MCP initialize call"));
-            return;
-        }
-        // New session: stand up a fresh server + client with the caller's key.
-        const config = configForRequest(baseConfig, req);
-        const client = new ExtrovertClient(config);
-        const { server } = createExtrovertServer({ config, client });
-        const transport = new StreamableHTTPServerTransport({
-            sessionIdGenerator: () => randomUUID(),
-            onsessioninitialized: (id) => {
-                sessions.set(id, {
-                    transport,
-                    close: async () => {
-                        await server.close().catch(() => { });
-                    },
-                });
-            },
+    if (authEnabled && authConfig && verifier && oauthMetadata) {
+        app.use(mcpAuthMetadataRouter({
+            oauthMetadata,
+            resourceServerUrl: authConfig.resourceUrl,
+            serviceDocumentationUrl: authConfig.serviceDocumentationUrl,
+            scopesSupported: authConfig.scopesSupported,
+            resourceName: "Extrovert MCP",
+        }));
+        app.all("/mcp", requireBearerAuth({
+            verifier,
+            resourceMetadataUrl: getOAuthProtectedResourceMetadataUrl(authConfig.resourceUrl),
+        }), (req, res) => {
+            void nodeHandler(req, res, req.body);
         });
-        transport.onclose = () => {
-            const id = transport.sessionId;
-            if (id)
-                sessions.delete(id);
-        };
-        await server.connect(transport);
-        await transport.handleRequest(req, res, req.body);
-    });
-    // Server→client SSE stream + session teardown.
-    const replay = async (req, res) => {
-        const sessionId = req.header(SESSION_HEADER);
-        if (!sessionId || !sessions.has(sessionId)) {
-            res.status(404).json(jsonRpcError(-32001, "Unknown or expired session"));
-            return;
-        }
-        await sessions.get(sessionId).transport.handleRequest(req, res);
-    };
-    app.get("/mcp", replay);
-    app.delete("/mcp", replay);
-    await new Promise((resolve) => {
-        const httpServer = app.listen(port, host, () => {
-            const mode = baseConfig.mock ? "offline fixtures" : `live API ${baseConfig.apiBaseUrl}`;
-            process.stderr.write(`extrovert-mcp: HTTP transport listening on http://${host}:${port}/mcp — ${mode}\n`);
+    }
+    else {
+        app.all("/mcp", (req, res) => {
+            void nodeHandler(req, res, req.body);
+        });
+    }
+    return { app, handler, authEnabled, close: () => handler.close() };
+}
+export async function runHttp(options = {}) {
+    const env = options.env ?? process.env;
+    const port = options.port ?? Number.parseInt(env.PORT ?? "8787", 10);
+    const host = options.host ?? env.HOST ?? "0.0.0.0";
+    const runtime = await createHttpApp({ ...options, host, env });
+    await new Promise((resolve, reject) => {
+        const httpServer = runtime.app.listen(port, host, () => {
+            process.stderr.write(`extrovert-mcp: stateless HTTP listening on http://${host}:${port}/mcp — ${runtime.authEnabled ? "OAuth + scoped agent keys" : "local mode"}\n`);
             resolve();
         });
-        const shutdown = () => {
-            for (const session of sessions.values())
-                void session.close();
-            httpServer.close(() => process.exit(0));
-        };
-        process.on("SIGINT", shutdown);
-        process.on("SIGTERM", shutdown);
+        httpServer.once("error", reject);
+        installShutdown(httpServer, runtime);
     });
 }
-function jsonRpcError(code, message) {
-    return { jsonrpc: "2.0", error: { code, message }, id: null };
+function configForRequest(base, requestToken) {
+    if (!requestToken)
+        return base;
+    return { ...base, apiKey: requestToken, mock: false };
+}
+function installShutdown(server, runtime) {
+    let closing = false;
+    const shutdown = () => {
+        if (closing)
+            return;
+        closing = true;
+        void runtime.close().finally(() => server.close(() => process.exit(0)));
+    };
+    process.on("SIGINT", shutdown);
+    process.on("SIGTERM", shutdown);
+}
+function parseBool(value) {
+    return ["1", "true", "yes", "on"].includes((value ?? "").trim().toLowerCase());
+}
+function uniqueStrings(values) {
+    return [...new Set(values.map((value) => value.trim()).filter(Boolean))];
 }
 //# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,OAAwC,MAAM,SAAS,CAAC;AAE/D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAwB,MAAM,aAAa,CAAC;AAC5F,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAYpD,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC,uEAAuE;AACvE,SAAS,cAAc,CAAC,GAAY;IAClC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACzC,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3E,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACjD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,6EAA6E;AAC7E,SAAS,gBAAgB,CAAC,IAAqB,EAAE,GAAY;IAC3D,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,kEAAkE;IAClE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,UAA6B,EAAE;IAC3D,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS,CAAC;IAE3D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAExC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE5C,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAChC,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,cAAc;YACvB,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACvC,QAAQ,EAAE,QAAQ,CAAC,IAAI;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,mEAAmE;IACnE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACrD,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAE7C,IAAI,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,MAAM,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,IAAI,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,GAAG;iBACA,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,8CAA8C,CAAC,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAED,uEAAuE;QACvE,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAE7D,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;YAClD,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;YACtC,oBAAoB,EAAE,CAAC,EAAE,EAAE,EAAE;gBAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE;oBACf,SAAS;oBACT,KAAK,EAAE,KAAK,IAAI,EAAE;wBAChB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBACvC,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;QAEH,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;YACvB,MAAM,EAAE,GAAG,SAAS,CAAC,SAAS,CAAC;YAC/B,IAAI,EAAE;gBAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9B,CAAC,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,+CAA+C;IAC/C,MAAM,MAAM,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;QAClE,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACnE,CAAC,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxB,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE3B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,UAAU,EAAE,CAAC;YACxF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qDAAqD,IAAI,IAAI,IAAI,UAAU,IAAI,IAAI,CACpF,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,GAAS,EAAE;YAC1B,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;gBAAE,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;YAC9D,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,OAAe;IACjD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AAChE,CAAC"}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EACL,gBAAgB,GAIjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,mBAAmB,EACnB,oCAAoC,EACpC,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAG3D,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,oBAAoB,GAErB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAwB,MAAM,aAAa,CAAC;AAC5F,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAsBpD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAgC,EAAE;IACpE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,SAAS,CAAC;IACnD,MAAM,cAAc,GAAG,SAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAClE,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC;IAC3F,MAAM,WAAW,GAAG,cAAc,IAAI,YAAY,CAAC;IAEnD,IAAI,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACpC,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAChC,IAAI,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC1C,IAAI,WAAW,EAAE,CAAC;QAChB,UAAU,KAAK,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACzC,QAAQ,KAAK,yBAAyB,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;QAC1E,aAAa,KAAK,MAAM,qBAAqB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACnE,CAAC;SAAM,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,UAAU;QAC7B,CAAC,CAAC,aAAa,CAAC;YACZ,UAAU,CAAC,WAAW,CAAC,QAAQ;YAC/B,WAAW;YACX,WAAW;YACX,OAAO;YACP,GAAG,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;SACtD,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,GAAG,GAAG,mBAAmB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAE1E,MAAM,OAAO,GAAG,gBAAgB,CAC9B,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;QACf,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,OAAO,qBAAqB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;IAC1D,CAAC,EACD;QACE,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,KAAK,CAAC,OAAO,IAAI,CAAC;KAC9F,CACF,CAAC;IACF,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,EAAE;QACzC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,KAAK,CAAC,OAAO,IAAI,CAAC;KAClG,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAChC,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,cAAc;YACvB,SAAS,EAAE,2BAA2B;YACtC,IAAI,EAAE,WAAW;gBACf,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,UAAU,CAAC,IAAI;oBACf,CAAC,CAAC,kBAAkB;oBACpB,CAAC,CAAC,iBAAiB;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,WAAW,IAAI,UAAU,IAAI,QAAQ,IAAI,aAAa,EAAE,CAAC;QAC3D,GAAG,CAAC,GAAG,CACL,qBAAqB,CAAC;YACpB,aAAa;YACb,iBAAiB,EAAE,UAAU,CAAC,WAAW;YACzC,uBAAuB,EAAE,UAAU,CAAC,uBAAuB;YAC3D,eAAe,EAAE,UAAU,CAAC,eAAe;YAC3C,YAAY,EAAE,eAAe;SAC9B,CAAC,CACH,CAAC;QACF,GAAG,CAAC,GAAG,CACL,MAAM,EACN,iBAAiB,CAAC;YAChB,QAAQ;YACR,mBAAmB,EAAE,oCAAoC,CAAC,UAAU,CAAC,WAAW,CAAC;SAClF,CAAC,EACF,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;YAC9B,KAAK,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC,CACF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;YAC9C,KAAK,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,UAA6B,EAAE;IAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,SAAS,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAE/D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qDAAqD,IAAI,IAAI,IAAI,UAC/D,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,YACtD,IAAI,CACL,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjC,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAqB,EAAE,YAAgC;IAC/E,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,OAAgB;IACvD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,aAAa,CAAC,MAAgB;IACrC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC"}

package/dist/index.d.ts

@@ -6,8 +6,10 @@
  */
 export { createExtrovertServer, type CreateExtrovertServerOptions } from "./server.js";
 export { runStdio } from "./stdio.js";
-export { runHttp, type HttpServerOptions } from "./http.js";
-export { ExtrovertClient, ExtrovertApiError, type CreateInboxInput, type UpdateInboxInput, type SendEmailInput, type ReplyEmailInput, type WaitForEmailInput, type RedeemEnrollmentInput, } from "./client.js";
+export { createHttpApp, runHttp, type CreateHttpAppOptions, type HttpApp, type HttpServerOptions, } from "./http.js";
+export { createHostedTokenVerifier, discoverOAuthMetadata, ExtrovertTokenVerifier, loadHostedAuthConfig, type ExtrovertTokenVerifierOptions, type HostedAuthConfig, } from "./auth.js";
+export { ExtrovertClient, ExtrovertApiError, type CreateInboxInput, type UpdateInboxInput, type SendEmailInput, type ReplyEmailInput, type WaitForEmailInput, type RedeemEnrollmentInput, type DurableCredentialPersistenceStatus, type ExtrovertClientOptions, } from "./client.js";
+export { createCredentialStore, credentialPaths, type CredentialPaths, type CredentialStore, type PendingSignup, type StoredCredential, } from "./credentials.js";
 export { loadConfig, SERVER_NAME, SERVER_VERSION, type ExtrovertConfig } from "./config.js";
 export { registerTools, TOOL_NAMES } from "./tools.js";
 export { extractOtpCode, extractVerificationLink, extractSignals } from "./extract.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,qBAAqB,EAAE,KAAK,4BAA4B,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE5D,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAKvF,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACpE,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE7F,YAAY,EACV,KAAK,EACL,UAAU,EACV,OAAO,EACP,MAAM,EACN,OAAO,EACP,gBAAgB,EAChB,kBAAkB,EAClB,IAAI,EACJ,cAAc,EACd,WAAW,EACX,gBAAgB,GACjB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,qBAAqB,EAAE,KAAK,4BAA4B,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EACL,aAAa,EACb,OAAO,EACP,KAAK,oBAAoB,EACzB,KAAK,OAAO,EACZ,KAAK,iBAAiB,GACvB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,6BAA6B,EAClC,KAAK,gBAAgB,GACtB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,kCAAkC,EACvC,KAAK,sBAAsB,GAC5B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAKvF,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACpE,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE7F,YAAY,EACV,KAAK,EACL,UAAU,EACV,OAAO,EACP,MAAM,EACN,OAAO,EACP,gBAAgB,EAChB,kBAAkB,EAClB,IAAI,EACJ,cAAc,EACd,WAAW,EACX,gBAAgB,GACjB,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -6,8 +6,10 @@
  */
 export { createExtrovertServer } from "./server.js";
 export { runStdio } from "./stdio.js";
-export { runHttp } from "./http.js";
+export { createHttpApp, runHttp, } from "./http.js";
+export { createHostedTokenVerifier, discoverOAuthMetadata, ExtrovertTokenVerifier, loadHostedAuthConfig, } from "./auth.js";
 export { ExtrovertClient, ExtrovertApiError, } from "./client.js";
+export { createCredentialStore, credentialPaths, } from "./credentials.js";
 export { loadConfig, SERVER_NAME, SERVER_VERSION } from "./config.js";
 export { registerTools, TOOL_NAMES } from "./tools.js";
 export { extractOtpCode, extractVerificationLink, extractSignals } from "./extract.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,qBAAqB,EAAqC,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,OAAO,EAA0B,MAAM,WAAW,CAAC;AAE5D,OAAO,EACL,eAAe,EACf,iBAAiB,GAOlB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAwB,MAAM,aAAa,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEvF,+EAA+E;AAC/E,kFAAkF;AAClF,qDAAqD;AACrD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,qBAAqB,EAAqC,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EACL,aAAa,EACb,OAAO,GAIR,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,GAGrB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,eAAe,EACf,iBAAiB,GASlB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,qBAAqB,EACrB,eAAe,GAKhB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAwB,MAAM,aAAa,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEvF,+EAA+E;AAC/E,kFAAkF;AAClF,qDAAqD;AACrD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC"}

package/dist/server.d.ts

@@ -4,7 +4,7 @@
  * Builds an `McpServer` with the Extrovert toolset registered. Transport-agnostic:
  * the same server is used over stdio (local hosts) and Streamable HTTP (hosted).
  */
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 import { ExtrovertClient } from "./client.js";
 import { type ExtrovertConfig } from "./config.js";
 export interface CreateExtrovertServerOptions {

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAA2C,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAkB5F,MAAM,WAAW,4BAA4B;IAC3C,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B;AAED,iEAAiE;AACjE,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,4BAAiC,GAAG;IACjF,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,eAAe,CAAC;IACxB,MAAM,EAAE,eAAe,CAAC;CACzB,CAeA"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAA2C,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAqB5F,MAAM,WAAW,4BAA4B;IAC3C,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B;AAED,iEAAiE;AACjE,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,4BAAiC,GAAG;IACjF,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,eAAe,CAAC;IACxB,MAAM,EAAE,eAAe,CAAC;CACzB,CAeA"}

package/dist/server.js

@@ -4,7 +4,7 @@
  * Builds an `McpServer` with the Extrovert toolset registered. Transport-agnostic:
  * the same server is used over stdio (local hosts) and Streamable HTTP (hosted).
  */
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 import { ExtrovertClient } from "./client.js";
 import { loadConfig, SERVER_NAME, SERVER_VERSION } from "./config.js";
 import { registerTools } from "./tools.js";
@@ -12,11 +12,14 @@ const INSTRUCTIONS = [
     "Extrovert gives an AI agent a real, persistent inbox in one call.",
     "",
     "Typical flow:",
-    "  1. redeem_enrollment — if started without a key, exchange an enrollment token (pk_enroll_…) for a scoped agent key.",
-    "  2. create_inbox — mint an inbox (omit username/domain for an instant shared-subdomain address).",
-    "  3. send_email / reply_email — send via the inbox's authenticated sender.",
+    "  1. sign_up then verify_signup when started with no key, or redeem_enrollment when given an enrollment token.",
+    "  2. create_inbox — mint another inbox (omit username/domain for an instant shared-subdomain address).",
+    "  3. send_email / reply_email — submit via the inbox's authenticated sender and its review policy.",
     "  4. wait_for_email — block for an incoming message and read the extracted OTP code / verification link.",
-    "  5. read_messages / list_threads / search — inspect the inbox.",
+    "  5. read_messages / get_message / list_threads / search — inspect the inbox directly; do not build raw HTTP or jq helpers.",
+    "",
+    "The packaged local stdio server stores full keys after verify_signup or redeem_enrollment and reloads them in future sessions.",
+    "The limited signup key is never promoted into that durable credential store.",
     "",
     "The agent key is bound to a FIXED org + project (call whoami to see them); there is no project selector. Addresses are",
     "real and live on domains Extrovert controls (smtp.extrovert.dev subdomains). Identifiers, addresses, and keys are stable",

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAwB,MAAM,aAAa,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,YAAY,GAAG;IACnB,mEAAmE;IACnE,EAAE;IACF,eAAe;IACf,uHAAuH;IACvH,mGAAmG;IACnG,4EAA4E;IAC5E,0GAA0G;IAC1G,iEAAiE;IACjE,EAAE;IACF,wHAAwH;IACxH,0HAA0H;IAC1H,oCAAoC;CACrC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAOb,iEAAiE;AACjE,MAAM,UAAU,qBAAqB,CAAC,UAAwC,EAAE;IAK9E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,EAC9C;QACE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC3B,YAAY,EAAE,YAAY;KAC3B,CACF,CAAC;IAEF,aAAa,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAE1C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAwB,MAAM,aAAa,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,YAAY,GAAG;IACnB,mEAAmE;IACnE,EAAE;IACF,eAAe;IACf,gHAAgH;IAChH,wGAAwG;IACxG,oGAAoG;IACpG,0GAA0G;IAC1G,6HAA6H;IAC7H,EAAE;IACF,gIAAgI;IAChI,8EAA8E;IAC9E,EAAE;IACF,wHAAwH;IACxH,0HAA0H;IAC1H,oCAAoC;CACrC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAOb,iEAAiE;AACjE,MAAM,UAAU,qBAAqB,CAAC,UAAwC,EAAE;IAK9E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,EAC9C;QACE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC3B,YAAY,EAAE,YAAY;KAC3B,CACF,CAAC;IAEF,aAAa,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAE1C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC"}

package/dist/stdio.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,wBAAsB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAe9C"}
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,wBAAsB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAmC9C"}

package/dist/stdio.js

@@ -4,13 +4,35 @@
  * The host spawns this process and speaks MCP over stdin/stdout. Diagnostics go
  * to stderr only; stdout is reserved for the JSON-RPC stream.
  */
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { StdioServerTransport } from "@modelcontextprotocol/server/stdio";
+import { ExtrovertClient } from "./client.js";
+import { loadConfig } from "./config.js";
+import { createCredentialStore } from "./credentials.js";
 import { createExtrovertServer } from "./server.js";
 export async function runStdio() {
-    const { server, config } = createExtrovertServer();
+    const credentialStore = createCredentialStore();
+    const stored = credentialStore.load();
+    const env = { ...process.env };
+    if (!(env.EXTROVERT_API_KEY ?? "").trim() && stored) {
+        env.EXTROVERT_API_KEY = stored.agent_key;
+        if (!(env.EXTROVERT_API_BASE_URL ?? "").trim()) {
+            env.EXTROVERT_API_BASE_URL = stored.api_base_url;
+        }
+    }
+    const config = loadConfig(env);
+    const client = new ExtrovertClient(config, {
+        onDurableAgentKey: config.mock
+            ? undefined
+            : (agentKey, apiBaseUrl) => {
+                credentialStore.save(agentKey, apiBaseUrl);
+                return { location: credentialStore.paths.credential };
+            },
+    });
+    const { server } = createExtrovertServer({ config, client });
     const transport = new StdioServerTransport();
     await server.connect(transport);
-    const mode = config.mock ? "offline fixtures" : `live API ${config.apiBaseUrl}`;
+    const auth = config.apiKey ? "authenticated" : "ready for sign_up";
+    const mode = config.mock ? "offline fixtures" : `live API ${config.apiBaseUrl} · ${auth}`;
     process.stderr.write(`extrovert-mcp: stdio transport ready — ${mode}\n`);
     const shutdown = async () => {
         await server.close().catch(() => { });

package/dist/stdio.js.map

@@ -1 +1 @@
-{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;IAEnD,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,UAAU,EAAE,CAAC;IAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,IAAI,IAAI,CAAC,CAAC;IAEzE,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,eAAe,GAAG,qBAAqB,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,IAAI,CAAC,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC;QACpD,GAAG,CAAC,iBAAiB,GAAG,MAAM,CAAC,SAAS,CAAC;QACzC,IAAI,CAAC,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/C,GAAG,CAAC,sBAAsB,GAAG,MAAM,CAAC,YAAY,CAAC;QACnD,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,EAAE;QACzC,iBAAiB,EAAE,MAAM,CAAC,IAAI;YAC5B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE;gBACvB,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAC3C,OAAO,EAAE,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YACxD,CAAC;KACN,CAAC,CAAC;IACH,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAE7D,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,UAAU,MAAM,IAAI,EAAE,CAAC;IAC1F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,IAAI,IAAI,CAAC,CAAC;IAEzE,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;AAC/C,CAAC"}

package/dist/tools.d.ts

@@ -12,7 +12,7 @@
  * an org-wide master key. `redeem_enrollment` lets an agent exchange a
  * single-use enrollment token for that scoped key at runtime.
  */
-import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { McpServer } from "@modelcontextprotocol/server";
 import { type ExtrovertClient } from "./client.js";
 import type { ExtrovertConfig } from "./config.js";
 interface ToolContext {

package/dist/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAgB,MAAM,yCAAyC,CAAC;AAIvF,OAAO,EAAqB,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AA0CnD,UAAU,WAAW;IACnB,MAAM,EAAE,eAAe,CAAC;IACxB,MAAM,EAAE,eAAe,CAAC;CACzB;AAg3FD,wEAAwE;AACxE,eAAO,MAAM,UAAU,EAAE,MAAM,EAAiC,CAAC;AAEjE,iEAAiE;AACjE,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAIvE"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAmB,MAAM,8BAA8B,CAAC;AAG/E,OAAO,EAAqB,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AA0CnD,UAAU,WAAW;IACnB,MAAM,EAAE,eAAe,CAAC;IACxB,MAAM,EAAE,eAAe,CAAC;CACzB;AAw4FD,wEAAwE;AACxE,eAAO,MAAM,UAAU,EAAE,MAAM,EAAiC,CAAC;AAEjE,iEAAiE;AACjE,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAIvE"}

package/dist/tools.js

@@ -12,7 +12,7 @@
  * an org-wide master key. `redeem_enrollment` lets an agent exchange a
  * single-use enrollment token for that scoped key at runtime.
  */
-import { z } from "zod";
+import { z } from "zod/v4";
 import { ExtrovertApiError } from "./client.js";
 import { isTerminalReviewEvent } from "./types.js";
 /**
@@ -24,23 +24,22 @@ function defineTool(spec) {
     return {
         name: spec.name,
         register(server, ctx) {
+            const inputSchema = z.object(spec.inputSchema);
             server.registerTool(spec.name, {
                 title: spec.title,
                 description: spec.description,
-                inputSchema: spec.inputSchema,
+                inputSchema,
                 annotations: spec.annotations,
             }, 
-            // The SDK validates `args` against `inputSchema` before invoking us, so
-            // `args` already has the handler's input shape. Typed as the SDK's own
-            // `ToolCallback<Shape>` so the registration overload resolves cleanly.
-            (async (args) => {
+            // The SDK validates `args` against `inputSchema` before invoking us.
+            async (args) => {
                 try {
                     return await spec.handler(args, ctx);
                 }
                 catch (err) {
                     return toErrorResult(err);
                 }
-            }));
+            });
         },
     };
 }
@@ -72,7 +71,7 @@ const metadataValue = z.union([z.string().max(256), z.number(), z.boolean()]);
  * CreateInboxInput docstring + the SDK InboxMetadataPatch create shape).
  */
 const createMetadata = z
-    .record(metadataValue.nullable())
+    .record(z.string(), metadataValue.nullable())
     .describe("Arbitrary key-value metadata to store on the inbox (string/number/boolean values; ≤256 keys, " +
     "≤256 chars per key/string value; nested objects/arrays rejected; a key with a null value is " +
     "dropped). Echoed back on the response and replayed on idempotent retries.");
@@ -81,7 +80,7 @@ const createMetadata = z
  * key, `null` DELETES that key, and a top-level `null` clears ALL metadata.
  */
 const updateMetadata = z
-    .record(metadataValue.nullable())
+    .record(z.string(), metadataValue.nullable())
     .nullable()
     .describe("Patch the inbox's metadata with a shallow merge: an object merges in (a key whose value is null " +
     "DELETES that key); a top-level null clears ALL metadata; omit the field to leave it unchanged. " +
@@ -437,6 +436,7 @@ const redeemEnrollment = defineTool({
             agent_handle: args.agent_handle,
             client_id: args.client_id,
         });
+        const persistence = client.credentialPersistenceStatus();
         const text = [
             `Enrollment redeemed. Agent ${result.agent_id} is ready.`,
             `agent_key (shown once): ${result.agent_key}`,
@@ -445,7 +445,7 @@ const redeemEnrollment = defineTool({
             // whoami call — consistent with whoami's text.
             `org: ${result.org_id || "(none)"} · project: ${result.project_id || "(none)"} (fixed — bound to this key)`,
             `scopes: ${result.scopes.join(", ") || "(none)"}`,
-            "This MCP session will use the returned key. Store the complete returned agent_key as EXTROVERT_API_KEY for future sessions; it is not retrievable again.",
+            credentialPersistenceMessage(persistence),
         ].join("\n");
         return ok(text, result);
     },
@@ -455,8 +455,8 @@ const signUp = defineTool({
     title: "Sign up for a free account",
     description: "Grab a free Extrovert account in one call (no enrollment token needed). Provisions a tenant and a first inbox, then " +
         "emails a one-time verification code to your human_email. Returns a LIMITED (read-only) agent key that this " +
-        "MCP session keeps for verify_signup; store it as EXTROVERT_API_KEY for future sessions. Re-calling with the same " +
-        "human_email rotates the key and resends the code.",
+        "MCP session keeps only through verify_signup; it expires with the code and is revoked after verification. " +
+        "Re-calling with the same human_email rotates the bootstrap key and resends the code.",
     inputSchema: {
         human_email: emailAddress.describe("Your email — receives the one-time verification code."),
         username: z
@@ -474,7 +474,9 @@ const signUp = defineTool({
             `inbox: ${res.address}`,
             `agent_key (limited, shown once): ${res.agent_key}`,
             `scopes: ${res.scopes.join(", ")}`,
-            `This MCP session will use the limited key. Call verify_signup with the code to unlock full scopes; store the key as EXTROVERT_API_KEY for future sessions if needed.`,
+            `expires: ${res.otp_expires_at}`,
+            `This MCP session will use the limited key until verify_signup atomically exchanges it for the durable key. Do not store this bootstrap key for long-term use.`,
+            `After verification, verify_signup repeats the inbox and returns exact read_messages / get_message / wait_for_email calls so mailbox use can continue without raw HTTP.`,
         ].join("\n");
         return ok(text, res);
     },
@@ -482,22 +484,41 @@ const signUp = defineTool({
 const verifySignup = defineTool({
     name: "verify_signup",
     title: "Verify signup code",
-    description: "Confirm the one-time code emailed by sign_up. On success you receive a NEW full-scope agent key (create/read/send) — " +
-        "this MCP session switches to it automatically. Store it as EXTROVERT_API_KEY for future sessions.",
+    description: "Confirm the one-time code emailed by sign_up. On success the bootstrap key is revoked and you receive a NEW " +
+        "full-scope agent key (create/read/send/webhooks). This MCP session switches to it automatically. The packaged " +
+        "local stdio server also stores it in its permission-restricted credential file for future sessions.",
     inputSchema: {
         otp: z.string().min(4).max(12).describe("The verification code from your signup email."),
     },
     annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
     handler: async (args, { client }) => {
         const res = await client.verify({ otp: args.otp });
+        const quick = res.mailbox_quickstart;
+        const persistence = client.credentialPersistenceStatus();
         const text = [
             `Verified. ${res.message}`,
             `agent_key (full, shown once): ${res.agent_key}`,
             `scopes: ${res.scopes.join(", ")}`,
+            credentialPersistenceMessage(persistence),
+            `mailbox ready: ${res.address}`,
+            `First call: ${quick.list_mail.tool} ${JSON.stringify(quick.list_mail.arguments)}`,
+            `Read one result: ${quick.read_message.tool} ${JSON.stringify(quick.read_message.arguments)}`,
+            `Wait for new mail: ${quick.wait_for_mail.tool} ${JSON.stringify(quick.wait_for_mail.arguments)}`,
+            `These tools return readable text plus structured message fields; do not download raw responses or invoke jq for ordinary mailbox work.`,
+            `For outbound mail, use send_email or reply_email through the review workflow; read get_inbox first to see the effective review policy.`,
         ].join("\n");
         return ok(text, res);
     },
 });
+function credentialPersistenceMessage(status) {
+    if (status.persisted) {
+        return `Credential saved for future local sessions${status.location ? ` at ${status.location}` : ""}.`;
+    }
+    if (status.attempted) {
+        return `Automatic credential storage failed${status.error ? `: ${status.error}` : ""}. Store the complete returned agent_key now; it is not retrievable again.`;
+    }
+    return "This host did not provide durable credential storage. Store the complete returned agent_key now; it is not retrievable again.";
+}
 const whoami = defineTool({
     name: "whoami",
     title: "Who am I",
@@ -1500,7 +1521,7 @@ const proposeGraduation = defineTool({
     inputSchema: {
         id: z.string().min(1).describe("Category id (cat_…)."),
         evidence: z
-            .record(z.unknown())
+            .record(z.string(), z.unknown())
             .optional()
             .describe("Optional structured evidence for the human (e.g. {approvals: 20, last_edits: 0})."),
     },