@extrovert.dev/mcp 0.1.0-pre.4 → 0.1.0-pre.5

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAwB,MAAM,aAAa,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,YAAY,GAAG;IACnB,mEAAmE;IACnE,EAAE;IACF,eAAe;IACf,uHAAuH;IACvH,mGAAmG;IACnG,4EAA4E;IAC5E,0GAA0G;IAC1G,iEAAiE;IACjE,EAAE;IACF,wHAAwH;IACxH,0HAA0H;IAC1H,oCAAoC;CACrC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAOb,iEAAiE;AACjE,MAAM,UAAU,qBAAqB,CAAC,UAAwC,EAAE;IAK9E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,EAC9C;QACE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC3B,YAAY,EAAE,YAAY;KAC3B,CACF,CAAC;IAEF,aAAa,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAE1C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAwB,MAAM,aAAa,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,YAAY,GAAG;IACnB,mEAAmE;IACnE,EAAE;IACF,eAAe;IACf,gHAAgH;IAChH,wGAAwG;IACxG,oGAAoG;IACpG,0GAA0G;IAC1G,6HAA6H;IAC7H,EAAE;IACF,gIAAgI;IAChI,8EAA8E;IAC9E,EAAE;IACF,wHAAwH;IACxH,0HAA0H;IAC1H,oCAAoC;CACrC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAOb,iEAAiE;AACjE,MAAM,UAAU,qBAAqB,CAAC,UAAwC,EAAE;IAK9E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,EAC9C;QACE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC3B,YAAY,EAAE,YAAY;KAC3B,CACF,CAAC;IAEF,aAAa,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAE1C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC"}

package/dist/stdio.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,wBAAsB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAe9C"}
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,wBAAsB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAmC9C"}

package/dist/stdio.js

@@ -5,12 +5,34 @@
  * to stderr only; stdout is reserved for the JSON-RPC stream.
  */
 import { StdioServerTransport } from "@modelcontextprotocol/server/stdio";
+import { ExtrovertClient } from "./client.js";
+import { loadConfig } from "./config.js";
+import { createCredentialStore } from "./credentials.js";
 import { createExtrovertServer } from "./server.js";
 export async function runStdio() {
-    const { server, config } = createExtrovertServer();
+    const credentialStore = createCredentialStore();
+    const stored = credentialStore.load();
+    const env = { ...process.env };
+    if (!(env.EXTROVERT_API_KEY ?? "").trim() && stored) {
+        env.EXTROVERT_API_KEY = stored.agent_key;
+        if (!(env.EXTROVERT_API_BASE_URL ?? "").trim()) {
+            env.EXTROVERT_API_BASE_URL = stored.api_base_url;
+        }
+    }
+    const config = loadConfig(env);
+    const client = new ExtrovertClient(config, {
+        onDurableAgentKey: config.mock
+            ? undefined
+            : (agentKey, apiBaseUrl) => {
+                credentialStore.save(agentKey, apiBaseUrl);
+                return { location: credentialStore.paths.credential };
+            },
+    });
+    const { server } = createExtrovertServer({ config, client });
     const transport = new StdioServerTransport();
     await server.connect(transport);
-    const mode = config.mock ? "offline fixtures" : `live API ${config.apiBaseUrl}`;
+    const auth = config.apiKey ? "authenticated" : "ready for sign_up";
+    const mode = config.mock ? "offline fixtures" : `live API ${config.apiBaseUrl} · ${auth}`;
     process.stderr.write(`extrovert-mcp: stdio transport ready — ${mode}\n`);
     const shutdown = async () => {
         await server.close().catch(() => { });

package/dist/stdio.js.map

@@ -1 +1 @@
-{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;IAEnD,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,UAAU,EAAE,CAAC;IAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,IAAI,IAAI,CAAC,CAAC;IAEzE,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,eAAe,GAAG,qBAAqB,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,IAAI,CAAC,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC;QACpD,GAAG,CAAC,iBAAiB,GAAG,MAAM,CAAC,SAAS,CAAC;QACzC,IAAI,CAAC,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/C,GAAG,CAAC,sBAAsB,GAAG,MAAM,CAAC,YAAY,CAAC;QACnD,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,EAAE;QACzC,iBAAiB,EAAE,MAAM,CAAC,IAAI;YAC5B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE;gBACvB,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAC3C,OAAO,EAAE,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YACxD,CAAC;KACN,CAAC,CAAC;IACH,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAE7D,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,UAAU,MAAM,IAAI,EAAE,CAAC;IAC1F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,IAAI,IAAI,CAAC,CAAC;IAEzE,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;AAC/C,CAAC"}

package/dist/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAmB,MAAM,8BAA8B,CAAC;AAG/E,OAAO,EAAqB,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AA0CnD,UAAU,WAAW;IACnB,MAAM,EAAE,eAAe,CAAC;IACxB,MAAM,EAAE,eAAe,CAAC;CACzB;AAi3FD,wEAAwE;AACxE,eAAO,MAAM,UAAU,EAAE,MAAM,EAAiC,CAAC;AAEjE,iEAAiE;AACjE,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAIvE"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAmB,MAAM,8BAA8B,CAAC;AAG/E,OAAO,EAAqB,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AA0CnD,UAAU,WAAW;IACnB,MAAM,EAAE,eAAe,CAAC;IACxB,MAAM,EAAE,eAAe,CAAC;CACzB;AAw4FD,wEAAwE;AACxE,eAAO,MAAM,UAAU,EAAE,MAAM,EAAiC,CAAC;AAEjE,iEAAiE;AACjE,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAIvE"}

package/dist/tools.js

@@ -436,6 +436,7 @@ const redeemEnrollment = defineTool({
             agent_handle: args.agent_handle,
             client_id: args.client_id,
         });
+        const persistence = client.credentialPersistenceStatus();
         const text = [
             `Enrollment redeemed. Agent ${result.agent_id} is ready.`,
             `agent_key (shown once): ${result.agent_key}`,
@@ -444,7 +445,7 @@ const redeemEnrollment = defineTool({
             // whoami call — consistent with whoami's text.
             `org: ${result.org_id || "(none)"} · project: ${result.project_id || "(none)"} (fixed — bound to this key)`,
             `scopes: ${result.scopes.join(", ") || "(none)"}`,
-            "This MCP session will use the returned key. Store the complete returned agent_key as EXTROVERT_API_KEY for future sessions; it is not retrievable again.",
+            credentialPersistenceMessage(persistence),
         ].join("\n");
         return ok(text, result);
     },
@@ -454,8 +455,8 @@ const signUp = defineTool({
     title: "Sign up for a free account",
     description: "Grab a free Extrovert account in one call (no enrollment token needed). Provisions a tenant and a first inbox, then " +
         "emails a one-time verification code to your human_email. Returns a LIMITED (read-only) agent key that this " +
-        "MCP session keeps for verify_signup; store it as EXTROVERT_API_KEY for future sessions. Re-calling with the same " +
-        "human_email rotates the key and resends the code.",
+        "MCP session keeps only through verify_signup; it expires with the code and is revoked after verification. " +
+        "Re-calling with the same human_email rotates the bootstrap key and resends the code.",
     inputSchema: {
         human_email: emailAddress.describe("Your email — receives the one-time verification code."),
         username: z
@@ -473,7 +474,9 @@ const signUp = defineTool({
             `inbox: ${res.address}`,
             `agent_key (limited, shown once): ${res.agent_key}`,
             `scopes: ${res.scopes.join(", ")}`,
-            `This MCP session will use the limited key. Call verify_signup with the code to unlock full scopes; store the key as EXTROVERT_API_KEY for future sessions if needed.`,
+            `expires: ${res.otp_expires_at}`,
+            `This MCP session will use the limited key until verify_signup atomically exchanges it for the durable key. Do not store this bootstrap key for long-term use.`,
+            `After verification, verify_signup repeats the inbox and returns exact read_messages / get_message / wait_for_email calls so mailbox use can continue without raw HTTP.`,
         ].join("\n");
         return ok(text, res);
     },
@@ -481,22 +484,41 @@ const signUp = defineTool({
 const verifySignup = defineTool({
     name: "verify_signup",
     title: "Verify signup code",
-    description: "Confirm the one-time code emailed by sign_up. On success you receive a NEW full-scope agent key (create/read/send) — " +
-        "this MCP session switches to it automatically. Store it as EXTROVERT_API_KEY for future sessions.",
+    description: "Confirm the one-time code emailed by sign_up. On success the bootstrap key is revoked and you receive a NEW " +
+        "full-scope agent key (create/read/send/webhooks). This MCP session switches to it automatically. The packaged " +
+        "local stdio server also stores it in its permission-restricted credential file for future sessions.",
     inputSchema: {
         otp: z.string().min(4).max(12).describe("The verification code from your signup email."),
     },
     annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
     handler: async (args, { client }) => {
         const res = await client.verify({ otp: args.otp });
+        const quick = res.mailbox_quickstart;
+        const persistence = client.credentialPersistenceStatus();
         const text = [
             `Verified. ${res.message}`,
             `agent_key (full, shown once): ${res.agent_key}`,
             `scopes: ${res.scopes.join(", ")}`,
+            credentialPersistenceMessage(persistence),
+            `mailbox ready: ${res.address}`,
+            `First call: ${quick.list_mail.tool} ${JSON.stringify(quick.list_mail.arguments)}`,
+            `Read one result: ${quick.read_message.tool} ${JSON.stringify(quick.read_message.arguments)}`,
+            `Wait for new mail: ${quick.wait_for_mail.tool} ${JSON.stringify(quick.wait_for_mail.arguments)}`,
+            `These tools return readable text plus structured message fields; do not download raw responses or invoke jq for ordinary mailbox work.`,
+            `For outbound mail, use send_email or reply_email through the review workflow; read get_inbox first to see the effective review policy.`,
         ].join("\n");
         return ok(text, res);
     },
 });
+function credentialPersistenceMessage(status) {
+    if (status.persisted) {
+        return `Credential saved for future local sessions${status.location ? ` at ${status.location}` : ""}.`;
+    }
+    if (status.attempted) {
+        return `Automatic credential storage failed${status.error ? `: ${status.error}` : ""}. Store the complete returned agent_key now; it is not retrievable again.`;
+    }
+    return "This host did not provide durable credential storage. Store the complete returned agent_key now; it is not retrievable again.";
+}
 const whoami = defineTool({
     name: "whoami",
     title: "Who am I",