@loxtep/customer-mcp-server 1.0.0

package/README.md

@@ -0,0 +1,155 @@
+# Loxtep Customer MCP Server
+
+Proxy MCP server for Loxtep customers: log in via the Loxtep app UI, then run
+tools in Cursor, Claude Desktop, or any MCP-compatible client with your saved
+tokens.
+
+## Prerequisites
+
+- **Role:** Your account must have `owner`, `admin`, or `developer` role. The
+  `ai:mcp_tools` permission is only granted to those roles. If you get 403
+  errors, contact your organization owner.
+- Node.js 18+.
+
+## Quickstart
+
+### 1. Login (one-time setup)
+
+Save your authentication tokens by opening the browser-based login flow:
+
+```bash
+npx @loxtep/customer-mcp-server login
+```
+
+This opens your browser to the Loxtep app. Sign in (with MFA if enabled), then
+tokens are saved to `~/.loxtep/customer-mcp.json` with restricted permissions.
+
+### 2. Choose your MCP client and add the server config
+
+Jump to [MCP Setup](#mcp-setup) below for your client (Cursor, Claude, or
+other).
+
+---
+
+## MCP Setup
+
+After running `npx @loxtep/customer-mcp-server login` once, choose your client:
+
+### Cursor
+
+Add to **Cursor Settings → MCP** (or `~/.cursor/mcp.json` or Cursor settings
+UI):
+
+```json
+{
+  "mcpServers": {
+    "loxtep": {
+      "command": "npx",
+      "args": ["@loxtep/customer-mcp-server"]
+    }
+  }
+}
+```
+
+Then restart Cursor. The Loxtep tools appear in the MCP palette.
+
+### Claude Desktop
+
+Edit your Claude config file (`~/.claude/mcp.json` on macOS/Linux;
+`%APPDATA%\.claude\mcp.json` on Windows):
+
+```json
+{
+  "mcpServers": {
+    "loxtep": {
+      "command": "npx",
+      "args": ["@loxtep/customer-mcp-server"]
+    }
+  }
+}
+```
+
+Restart Claude Desktop. The Loxtep tools appear in the MCP list.
+
+### Other Stdio Clients
+
+For any MCP-compatible client that uses stdio:
+
+```bash
+# Option 1: npx (recommended)
+npx @loxtep/customer-mcp-server
+
+# Option 2: global install, then run
+npm install -g @loxtep/customer-mcp-server
+loxtep-mcp-server
+
+# Option 3: local package with pnpm
+pnpm exec loxtep-mcp server
+```
+
+All three commands start the stdio MCP server. Use the one that fits your setup.
+
+---
+
+## Environment Variables (Optional)
+
+- `LOXTEP_API_BASE_URL` – API endpoint (default: `https://api.loxtep.io`)
+- `LOXTEP_TOKEN_FILE` – Custom path to token file (default:
+  `~/.loxtep/customer-mcp.json`)
+- `LOXTEP_APP_URL` – App base URL for login (default:
+  `https://devapp.loxtep.io`)
+- `LOXTEP_AUTH_TOKEN` – Direct access token (no refresh; only if refresh token
+  unavailable)
+- `MCP_DEBUG` – Set to `1` for verbose logging on stderr
+
+---
+
+## Security
+
+- **Only log in via official channels** – Use
+  `npx @loxtep/customer-mcp-server login` or `loxtep-mcp login` from the
+  official `@loxtep/customer-mcp-server` package.
+- **Token file permissions** – Stored at `~/.loxtep/customer-mcp.json` with mode
+  0600 (Unix) or best-effort (Windows). Do not share or commit to version
+  control.
+- **Login port** – Uses fixed port **38473** on `127.0.0.1`. If in use, login
+  fails with clear message.
+
+---
+
+## Token Expiration & Refresh
+
+Session cookies in the Loxtep app expire every 1 hour. If you logged in more
+than an hour ago, the MCP auth page will redirect you to log in again. Simply
+run:
+
+```bash
+npx @loxtep/customer-mcp-server login
+```
+
+---
+
+## Build (Development)
+
+```bash
+pnpm install
+pnpm run build
+```
+
+---
+
+## Debug & Troubleshooting
+
+Enable debug logging:
+
+```bash
+MCP_DEBUG=1 npx @loxtep/customer-mcp-server
+```
+
+Check that:
+
+1. You've run `npx @loxtep/customer-mcp-server login` at least once.
+2. Your role has `ai:mcp_tools` permission (contact org owner if not).
+3. Your token file exists at `~/.loxtep/customer-mcp.json`.
+4. The client MCP config points to `npx @loxtep/customer-mcp-server` or an
+   equivalent command.

package/dist/auth.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Token loading, refresh, and file I/O for customer MCP.
+ * - Load from LOXTEP_AUTH_TOKEN (access only) or ~/.loxtep/customer-mcp.json
+ * - Decode JWT exp for expires_at
+ * - On refresh: MUST save new tokens (backend rotates refresh token)
+ */
+export interface TokenFile {
+    access_token: string;
+    refresh_token: string;
+    expires_at?: string;
+    api_base_url: string;
+}
+export interface AuthTokens {
+    access_token: string;
+    refresh_token?: string;
+    expires_at?: string;
+    api_base_url: string;
+}
+/**
+ * Decode JWT exp claim (seconds since epoch) and return ISO8601 string.
+ * Returns undefined if decode fails (caller can rely on 401-based refresh).
+ */
+export declare function getExpiresAtFromJwt(accessToken: string): string | undefined;
+/**
+ * Load tokens: env LOXTEP_AUTH_TOKEN (access only), or token file.
+ * api_base_url from env LOXTEP_API_BASE_URL (required when using file).
+ */
+export declare function loadTokens(): AuthTokens | null;
+/**
+ * Check if access token is expired (with 60s buffer).
+ */
+export declare function isAccessExpired(tokens: AuthTokens): boolean;
+/**
+ * Call POST {apiBaseUrl}/app/auth/refresh with refresh_token.
+ * Returns new tokens; caller MUST save them (backend revokes old refresh token).
+ */
+export declare function refreshAccess(apiBaseUrl: string, refreshToken: string): Promise<RefreshResponse>;
+export interface RefreshResponse {
+    access_token: string;
+    refresh_token: string;
+    expires_at: string;
+}
+/**
+ * Write token file with mode 0600 (best-effort on Windows).
+ * Creates ~/.loxtep if needed.
+ */
+export declare function writeTokenFile(tokens: TokenFile): void;
+export declare function getTokenFilePath(): string;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH,MAAM,WAAW,SAAS;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAU3E;AAED;;;GAGG;AACH,wBAAgB,UAAU,IAAI,UAAU,GAAG,IAAI,CA0B9C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAI3D;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,eAAe,CAAC,CA0B1B;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAYtD;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC"}

package/dist/auth.js

@@ -0,0 +1,113 @@
+/**
+ * Token loading, refresh, and file I/O for customer MCP.
+ * - Load from LOXTEP_AUTH_TOKEN (access only) or ~/.loxtep/customer-mcp.json
+ * - Decode JWT exp for expires_at
+ * - On refresh: MUST save new tokens (backend rotates refresh token)
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import * as jwt from 'jsonwebtoken';
+const DEFAULT_TOKEN_FILE = process.env.LOXTEP_TOKEN_FILE ||
+    path.join(process.env.HOME || process.env.USERPROFILE || '', '.loxtep', 'customer-mcp.json');
+/**
+ * Decode JWT exp claim (seconds since epoch) and return ISO8601 string.
+ * Returns undefined if decode fails (caller can rely on 401-based refresh).
+ */
+export function getExpiresAtFromJwt(accessToken) {
+    try {
+        const decoded = jwt.decode(accessToken);
+        if (decoded?.exp) {
+            return new Date(decoded.exp * 1000).toISOString();
+        }
+    }
+    catch {
+        // ignore
+    }
+    return undefined;
+}
+/**
+ * Load tokens: env LOXTEP_AUTH_TOKEN (access only), or token file.
+ * api_base_url from env LOXTEP_API_BASE_URL (required when using file).
+ */
+export function loadTokens() {
+    const apiBaseUrl = process.env.LOXTEP_API_BASE_URL;
+    const envToken = process.env.LOXTEP_AUTH_TOKEN;
+    if (envToken && apiBaseUrl) {
+        return {
+            access_token: envToken,
+            api_base_url: apiBaseUrl,
+            expires_at: getExpiresAtFromJwt(envToken),
+        };
+    }
+    const tokenPath = DEFAULT_TOKEN_FILE;
+    try {
+        const raw = fs.readFileSync(tokenPath, 'utf-8');
+        const data = JSON.parse(raw);
+        if (!data.access_token || !data.api_base_url)
+            return null;
+        return {
+            access_token: data.access_token,
+            refresh_token: data.refresh_token,
+            expires_at: data.expires_at ?? getExpiresAtFromJwt(data.access_token),
+            api_base_url: data.api_base_url,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Check if access token is expired (with 60s buffer).
+ */
+export function isAccessExpired(tokens) {
+    if (!tokens.expires_at)
+        return false;
+    const exp = new Date(tokens.expires_at).getTime();
+    return Date.now() >= exp - 60_000;
+}
+/**
+ * Call POST {apiBaseUrl}/app/auth/refresh with refresh_token.
+ * Returns new tokens; caller MUST save them (backend revokes old refresh token).
+ */
+export async function refreshAccess(apiBaseUrl, refreshToken) {
+    const url = `${apiBaseUrl.replace(/\/$/, '')}/app/auth/refresh`;
+    const res = await fetch(url, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ refresh_token: refreshToken }),
+    });
+    const data = (await res.json());
+    if (!res.ok || !data.success) {
+        throw new Error(data.error || `Refresh failed: ${res.status}`);
+    }
+    const access = data.access_token;
+    return {
+        access_token: access,
+        refresh_token: data.refresh_token,
+        expires_at: data.expires_at ??
+            getExpiresAtFromJwt(access) ??
+            new Date(Date.now() + 3600_000).toISOString(),
+    };
+}
+/**
+ * Write token file with mode 0600 (best-effort on Windows).
+ * Creates ~/.loxtep if needed.
+ */
+export function writeTokenFile(tokens) {
+    const tokenPath = DEFAULT_TOKEN_FILE;
+    const dir = path.dirname(tokenPath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    fs.writeFileSync(tokenPath, JSON.stringify(tokens, null, 2), { mode: 0o600 });
+    try {
+        fs.chmodSync(tokenPath, 0o600);
+    }
+    catch {
+        // Best-effort on Windows (NTFS doesn't use Unix permissions)
+    }
+}
+export function getTokenFilePath() {
+    return DEFAULT_TOKEN_FILE;
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AAEpC,MAAM,kBAAkB,GACtB,OAAO,CAAC,GAAG,CAAC,iBAAiB;IAC7B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;AAgB/F;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAA4B,CAAC;QACnE,IAAI,OAAO,EAAE,GAAG,EAAE,CAAC;YACjB,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAE/C,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;QAC3B,OAAO;YACL,YAAY,EAAE,QAAQ;YACtB,YAAY,EAAE,UAAU;YACxB,UAAU,EAAE,mBAAmB,CAAC,QAAQ,CAAC;SAC1C,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,kBAAkB,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAC1D,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC;YACrE,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAAkB;IAChD,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;IAClD,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,GAAG,MAAM,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAkB,EAClB,YAAoB;IAEpB,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC;IAChE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;KACtD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAM7B,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,mBAAmB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAa,CAAC;IAClC,OAAO;QACL,YAAY,EAAE,MAAM;QACpB,aAAa,EAAE,IAAI,CAAC,aAAc;QAClC,UAAU,EACR,IAAI,CAAC,UAAU;YACf,mBAAmB,CAAC,MAAM,CAAC;YAC3B,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE;KAChD,CAAC;AACJ,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAiB;IAC9C,MAAM,SAAS,GAAG,kBAAkB,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,kBAAkB,CAAC;AAC5B,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export declare function runLogin(): Promise<void>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAsDA,wBAAsB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAgF9C"}

package/dist/cli.js

@@ -0,0 +1,167 @@
+#!/usr/bin/env node
+import { createServer } from 'http';
+import { parse as parseUrl } from 'url';
+import open from 'open';
+import { getExpiresAtFromJwt, writeTokenFile, getTokenFilePath } from './auth.js';
+import { spawn } from 'child_process';
+import { fileURLToPath } from 'url';
+import { dirname, join } from 'path';
+const PORT = 38473;
+const HOST = '127.0.0.1';
+const APP_BASE_URL = process.env.LOXTEP_APP_URL || 'https://devapp.loxtep.io';
+const API_BASE_URL = process.env.LOXTEP_API_BASE_URL || 'https://api.loxtep.io';
+function getCallbackPage() {
+    return `<!DOCTYPE html>
+<html>
+<head><title>Loxtep MCP Login</title></head>
+<body>
+  <p id="msg">Connecting...</p>
+  <script>
+    (function() {
+      var hash = window.location.hash.slice(1);
+      if (!hash) {
+        document.getElementById('msg').textContent = 'No tokens in URL. Close this window and run: loxtep-mcp login';
+        return;
+      }
+      var params = new URLSearchParams(hash);
+      var access_token = params.get('access_token');
+      var refresh_token = params.get('refresh_token');
+      if (!access_token || !refresh_token) {
+        document.getElementById('msg').textContent = 'Missing access_token or refresh_token. Close and run: loxtep-mcp login';
+        return;
+      }
+      fetch('/receive', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ access_token: access_token, refresh_token: refresh_token })
+      }).then(function(r) {
+        if (r.ok) return r.text();
+        throw new Error(r.status + ' ' + r.statusText);
+      }).then(function(text) {
+        document.getElementById('msg').textContent = text || 'Login successful. You can close this window.';
+      }).catch(function(e) {
+        document.getElementById('msg').textContent = 'Error: ' + e.message + '. You can close this window and try again (loxtep-mcp login).';
+      });
+    })();
+  </script>
+</body>
+</html>`;
+}
+export async function runLogin() {
+    return new Promise((resolve, reject) => {
+        const server = createServer((req, res) => {
+            const url = parseUrl(req.url || '/', true);
+            const pathname = url.pathname || '/';
+            if (req.method === 'GET' && pathname === '/callback') {
+                res.writeHead(200, { 'Content-Type': 'text/html' });
+                res.end(getCallbackPage());
+                return;
+            }
+            if (req.method === 'POST' && pathname === '/receive') {
+                let body = '';
+                req.on('data', chunk => (body += chunk));
+                req.on('end', () => {
+                    try {
+                        const data = JSON.parse(body);
+                        const access_token = data.access_token;
+                        const refresh_token = data.refresh_token;
+                        if (!access_token || !refresh_token) {
+                            res.writeHead(400, { 'Content-Type': 'text/plain' });
+                            res.end('Missing access_token or refresh_token');
+                            return;
+                        }
+                        const expires_at = getExpiresAtFromJwt(access_token);
+                        writeTokenFile({
+                            access_token,
+                            refresh_token,
+                            expires_at,
+                            api_base_url: API_BASE_URL,
+                        });
+                        res.writeHead(200, { 'Content-Type': 'text/plain' });
+                        res.end('Login successful. You can close this window.');
+                        done();
+                    }
+                    catch (e) {
+                        res.writeHead(400, { 'Content-Type': 'text/plain' });
+                        res.end('Invalid JSON body');
+                    }
+                });
+                return;
+            }
+            res.writeHead(404);
+            res.end('Not found');
+        });
+        let settled = false;
+        function done() {
+            if (settled)
+                return;
+            settled = true;
+            setTimeout(() => {
+                server.close(() => resolve());
+            }, 500);
+        }
+        server.listen(PORT, HOST, () => {
+            const authUrl = `${APP_BASE_URL}/auth/mcp?port=${PORT}`;
+            open(authUrl).catch(err => {
+                console.error('Could not open browser:', err);
+                console.log('Open this URL in your browser:', authUrl);
+            });
+            console.log('Login server listening on http://127.0.0.1:' + PORT);
+            console.log('Tokens will be saved to:', getTokenFilePath());
+        });
+        server.on('error', (err) => {
+            if (err.code === 'EADDRINUSE') {
+                console.error('Port 38473 is already in use. Free the port or close the other process, then run `loxtep-mcp login` again.');
+            }
+            else {
+                console.error('Server error:', err);
+            }
+            if (!settled) {
+                settled = true;
+                reject(err);
+            }
+        });
+    });
+}
+// CLI entry when run as `node cli.js [command]`
+const sub = process.argv[2];
+function startServer() {
+    // Run the stdio server (index.js) directly
+    const filename = fileURLToPath(import.meta.url);
+    const dirname_val = dirname(filename);
+    const indexPath = join(dirname_val, 'index.js');
+    // Spawn the index.js process and inherit stdio for proper MCP communication
+    const child = spawn('node', [indexPath], {
+        stdio: 'inherit',
+        env: process.env,
+    });
+    child.on('exit', code => {
+        process.exit(code ?? 1);
+    });
+}
+if (sub === 'login') {
+    runLogin()
+        .then(() => {
+        console.log('Done.');
+        process.exit(0);
+    })
+        .catch(err => {
+        console.error(err);
+        process.exit(1);
+    });
+}
+else if (sub === 'server' || sub === '--stdio') {
+    startServer();
+}
+else if (!sub) {
+    // Default: start the stdio server when run without arguments
+    startServer();
+}
+else {
+    console.log('Usage:');
+    console.log('  loxtep-mcp login                  Opens browser for authentication');
+    console.log('  loxtep-mcp server                 Start the MCP stdio server');
+    console.log('  loxtep-mcp --stdio                Start the MCP stdio server (alias)');
+    process.exit(1);
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,YAAY,EAAmC,MAAM,MAAM,CAAC;AACrE,OAAO,EAAE,KAAK,IAAI,QAAQ,EAAE,MAAM,KAAK,CAAC;AACxC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAErC,MAAM,IAAI,GAAG,KAAK,CAAC;AACnB,MAAM,IAAI,GAAG,WAAW,CAAC;AAEzB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,0BAA0B,CAAC;AAC9E,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,uBAAuB,CAAC;AAEhF,SAAS,eAAe;IACtB,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAkCD,CAAC;AACT,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;YACxE,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC;YAErC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACrD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACrD,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC;gBACzC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsD,CAAC;wBACnF,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;wBACvC,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;wBACzC,IAAI,CAAC,YAAY,IAAI,CAAC,aAAa,EAAE,CAAC;4BACpC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;4BACrD,GAAG,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;4BACjD,OAAO;wBACT,CAAC;wBACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;wBACrD,cAAc,CAAC;4BACb,YAAY;4BACZ,aAAa;4BACb,UAAU;4BACV,YAAY,EAAE,YAAY;yBAC3B,CAAC,CAAC;wBACH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;wBACrD,GAAG,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;wBACxD,IAAI,EAAE,CAAC;oBACT,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;wBACrD,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;oBAC/B,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,SAAS,IAAI;YACX,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,UAAU,CAAC,GAAG,EAAE;gBACd,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAChC,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QAED,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7B,MAAM,OAAO,GAAG,GAAG,YAAY,kBAAkB,IAAI,EAAE,CAAC;YACxD,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;gBACxB,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,OAAO,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,6CAA6C,GAAG,IAAI,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAChD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC9B,OAAO,CAAC,KAAK,CACX,4GAA4G,CAC7G,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YACtC,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gDAAgD;AAChD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAE5B,SAAS,WAAW;IAClB,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAEhD,4EAA4E;IAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE;QACvC,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;QACtB,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;IACpB,QAAQ,EAAE;SACP,IAAI,CAAC,GAAG,EAAE;QACT,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;SACD,KAAK,CAAC,GAAG,CAAC,EAAE;QACX,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACP,CAAC;KAAM,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;IACjD,WAAW,EAAE,CAAC;AAChB,CAAC;KAAM,IAAI,CAAC,GAAG,EAAE,CAAC;IAChB,6DAA6D;IAC7D,WAAW,EAAE,CAAC;AAChB,CAAC;KAAM,CAAC;IACN,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;IACtF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,123 @@
+#!/usr/bin/env node
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { CallToolRequestSchema, ListToolsRequestSchema, InitializeRequestSchema, PingRequestSchema, ListResourcesRequestSchema, ReadResourceRequestSchema, ListPromptsRequestSchema, GetPromptRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
+import { getTools } from './tools.js';
+import { loadTokens, isAccessExpired, refreshAccess, writeTokenFile, } from './auth.js';
+const DEBUG = process.env.MCP_DEBUG === '1' || process.env.MCP_DEBUG === 'true';
+function log(msg, data) {
+    if (DEBUG) {
+        console.error(`[customer-mcp] ${msg}`, data !== undefined ? JSON.stringify(data) : '');
+    }
+}
+// Resolve current access token (refresh if needed) and return tokens for this request.
+async function ensureValidTokens() {
+    let tokens = loadTokens();
+    if (!tokens) {
+        throw new Error('No tokens. Run `loxtep-mcp login` or set LOXTEP_AUTH_TOKEN and LOXTEP_API_BASE_URL.');
+    }
+    if (!tokens.api_base_url) {
+        throw new Error('LOXTEP_API_BASE_URL is required.');
+    }
+    if (isAccessExpired(tokens) && tokens.refresh_token) {
+        const refreshed = await refreshAccess(tokens.api_base_url, tokens.refresh_token);
+        const newFile = {
+            access_token: refreshed.access_token,
+            refresh_token: refreshed.refresh_token,
+            expires_at: refreshed.expires_at,
+            api_base_url: tokens.api_base_url,
+        };
+        writeTokenFile(newFile);
+        tokens = {
+            access_token: refreshed.access_token,
+            refresh_token: refreshed.refresh_token,
+            expires_at: refreshed.expires_at,
+            api_base_url: tokens.api_base_url,
+        };
+        log('Refreshed and saved tokens');
+    }
+    return tokens;
+}
+async function callToolApi(apiBaseUrl, accessToken, name, args) {
+    const url = `${apiBaseUrl.replace(/\/$/, '')}/ai/mcp/tools/call`;
+    const res = await fetch(url, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${accessToken}`,
+        },
+        body: JSON.stringify({ name, arguments: args ?? {} }),
+    });
+    if (res.status === 401) {
+        throw new Error('Unauthorized (token expired or invalid). Run `loxtep-mcp login` again.');
+    }
+    if (res.status === 403) {
+        throw new Error('Forbidden: your role does not have ai:mcp_tools permission. Contact your org owner.');
+    }
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`Tool call failed: ${res.status} ${text}`);
+    }
+    const data = (await res.json());
+    if (!data.success || !data.data?.content) {
+        throw new Error('Invalid tool response');
+    }
+    const content = data.data.content.map(c => ({
+        type: 'text',
+        text: c.text,
+    }));
+    return { content };
+}
+const server = new Server({
+    name: 'loxtep-customer-mcp',
+    version: '1.0.0',
+}, {
+    capabilities: {
+        tools: {},
+        resources: {},
+        prompts: {},
+    },
+});
+const toolList = getTools().map(t => ({
+    name: t.name,
+    description: t.description,
+    inputSchema: t.inputSchema,
+}));
+server.setRequestHandler(InitializeRequestSchema, async () => {
+    log('Initialize');
+    return {
+        protocolVersion: '2024-11-05',
+        capabilities: { tools: {}, resources: {}, prompts: {} },
+        serverInfo: { name: 'loxtep-customer-mcp', version: '1.0.0' },
+    };
+});
+server.setRequestHandler(ListToolsRequestSchema, async () => {
+    log('ListTools');
+    return { tools: toolList };
+});
+server.setRequestHandler(CallToolRequestSchema, async (req) => {
+    const { name, arguments: args } = req.params;
+    log('CallTool', { name });
+    const tokens = await ensureValidTokens();
+    const result = await callToolApi(tokens.api_base_url, tokens.access_token, name, args ?? {});
+    return result;
+});
+server.setRequestHandler(PingRequestSchema, async () => ({}));
+server.setRequestHandler(ListResourcesRequestSchema, async () => ({ resources: [] }));
+server.setRequestHandler(ReadResourceRequestSchema, async () => {
+    throw new Error('No resources available');
+});
+server.setRequestHandler(ListPromptsRequestSchema, async () => ({ prompts: [] }));
+server.setRequestHandler(GetPromptRequestSchema, async () => {
+    throw new Error('No prompts available');
+});
+async function main() {
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    process.stdin.resume();
+}
+main().catch(err => {
+    console.error('Customer MCP server failed:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EACzB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EACL,UAAU,EACV,eAAe,EACf,aAAa,EACb,cAAc,GAGf,MAAM,WAAW,CAAC;AAEnB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,MAAM,CAAC;AAEhF,SAAS,GAAG,CAAC,GAAW,EAAE,IAAc;IACtC,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,kBAAkB,GAAG,EAAE,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,KAAK,UAAU,iBAAiB;IAC9B,IAAI,MAAM,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACjF,MAAM,OAAO,GAAc;YACzB,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;QACF,cAAc,CAAC,OAAO,CAAC,CAAC;QACxB,MAAM,GAAG;YACP,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;QACF,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,UAAkB,EAClB,WAAmB,EACnB,IAAY,EACZ,IAA6B;IAE7B,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;KACtD,CAAC,CAAC;IAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAG7B,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,OAAO,GAA2C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClF,IAAI,EAAE,MAAe;QACrB,IAAI,EAAE,CAAC,CAAC,IAAI;KACb,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;IACE,IAAI,EAAE,qBAAqB;IAC3B,OAAO,EAAE,OAAO;CACjB,EACD;IACE,YAAY,EAAE;QACZ,KAAK,EAAE,EAAE;QACT,SAAS,EAAE,EAAE;QACb,OAAO,EAAE,EAAE;KACZ;CACF,CACF,CAAC;AAEF,MAAM,QAAQ,GAAW,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,IAAI;IACZ,WAAW,EAAE,CAAC,CAAC,WAAW;IAC1B,WAAW,EAAE,CAAC,CAAC,WAAkC;CAClD,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,iBAAiB,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;IAC3D,GAAG,CAAC,YAAY,CAAC,CAAC;IAClB,OAAO;QACL,eAAe,EAAE,YAAY;QAC7B,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QACvD,UAAU,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,OAAO,EAAE;KAC9D,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;IAC1D,GAAG,CAAC,WAAW,CAAC,CAAC;IACjB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;IAC1D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC7C,GAAG,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,YAAY,EACnB,IAAI,EACH,IAAgC,IAAI,EAAE,CACxC,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9D,MAAM,CAAC,iBAAiB,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AACtF,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;IAC7D,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AACH,MAAM,CAAC,iBAAiB,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAClF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;IAC1D,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;AACzB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;IACjB,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;IAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/tools.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Static list of customer workspace tools aligned with platform-backend/ai/lib/tools/tool-definitions.ts.
+ * Maintenance note: when adding tools there, add an entry here (name + description).
+ * inputSchema is generic (object) since the backend validates arguments.
+ */
+export interface McpTool {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: 'object';
+        properties?: Record<string, unknown>;
+        required?: string[];
+    };
+}
+export declare function getTools(): McpTool[];
+export declare function getToolNames(): string[];
+//# sourceMappingURL=tools.d.ts.map

package/dist/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CAC5F;AAwWD,wBAAgB,QAAQ,IAAI,OAAO,EAAE,CAEpC;AAED,wBAAgB,YAAY,IAAI,MAAM,EAAE,CAEvC"}

package/dist/tools.js

@@ -0,0 +1,359 @@
+/**
+ * Static list of customer workspace tools aligned with platform-backend/ai/lib/tools/tool-definitions.ts.
+ * Maintenance note: when adding tools there, add an entry here (name + description).
+ * inputSchema is generic (object) since the backend validates arguments.
+ */
+const TOOLS = [
+    {
+        name: 'create_data_product',
+        description: 'Create a new data product',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'update_data_product',
+        description: 'Update an existing data product',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'delete_data_product',
+        description: 'Delete a data product',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'list_data_products',
+        description: 'List all data products in the project',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'get_data_product',
+        description: 'Get details of a specific data product',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'create_pipeline',
+        description: 'Create a new pipeline',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'update_pipeline',
+        description: 'Update an existing pipeline',
+        inputSchema: { type: 'object' },
+    },
+    { name: 'delete_pipeline', description: 'Delete a pipeline', inputSchema: { type: 'object' } },
+    {
+        name: 'list_pipelines',
+        description: 'List all pipelines in the project',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'get_pipeline',
+        description: 'Get details of a specific pipeline',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'get_pipeline_graph',
+        description: 'Get the pipeline graph (nodes, edges, deployment) for a flow',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'patch_pipeline_graph',
+        description: 'Apply graph patch operations (add_node, update_node, remove_node, connect_nodes, disconnect_nodes, update_pipeline). Supports dry_run.',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'create_transformation',
+        description: 'Create a new transformation step in a pipeline',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'create_validation',
+        description: 'Create a new validation step in a pipeline',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'create_connection',
+        description: 'Create a new connection',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'update_connection',
+        description: 'Update an existing connection',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'delete_connection',
+        description: 'Delete a connection',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'list_connections',
+        description: 'List all connections in the project',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'get_connection',
+        description: 'Get details of a specific connection',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'test_connection',
+        description: 'Test a connection configuration (non-destructive)',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'create_schema',
+        description: 'Create a new schema definition',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'update_schema',
+        description: 'Update an existing schema',
+        inputSchema: { type: 'object' },
+    },
+    { name: 'delete_schema', description: 'Delete a schema', inputSchema: { type: 'object' } },
+    {
+        name: 'get_schema',
+        description: 'Get details of a specific schema',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'list_schema_versions',
+        description: 'List schema versions',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'tag_pii_fields',
+        description: 'Tag PII fields in a schema',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'create_quality_rule',
+        description: 'Create a new quality rule',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'update_quality_rule',
+        description: 'Update an existing quality rule',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'delete_quality_rule',
+        description: 'Delete a quality rule',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'list_quality_rules',
+        description: 'List quality rules',
+        inputSchema: { type: 'object' },
+    },
+    { name: 'get_quality_rule', description: 'Get a quality rule', inputSchema: { type: 'object' } },
+    {
+        name: 'test_quality_rule',
+        description: 'Test a quality rule against sample data (non-destructive)',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'search_catalog',
+        description: 'Search the data catalog. Use include_evidence and include_lineage for richer results. Results are access-filtered when user context is present.',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'get_evidence',
+        description: 'Get quality and freshness evidence for data products by ID',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'get_lineage_impact',
+        description: 'Get downstream impact (lineage) for a data product by ID',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'get_governance_flags',
+        description: 'Get governance metadata (classification, pii_fields) for a data product by ID',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'run_discovery',
+        description: 'One-shot discovery: guidance and available discovery tool names',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'get_catalog_entry',
+        description: 'Get a catalog entry by ID',
+        inputSchema: { type: 'object' },
+    },
+    { name: 'list_domains', description: 'List available domains', inputSchema: { type: 'object' } },
+    { name: 'list_tags', description: 'List available tags', inputSchema: { type: 'object' } },
+    {
+        name: 'execute_query',
+        description: 'Execute an analytics query',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'list_tables',
+        description: 'List available tables for querying',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'get_table_schema',
+        description: 'Get schema for a specific table',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'get_query_results',
+        description: 'Get results for a previously executed query',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'list_versions',
+        description: 'List project version snapshots',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'create_snapshot',
+        description: 'Create a project version snapshot',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'restore_version',
+        description: 'Restore project state to a prior snapshot',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'compare_versions',
+        description: 'Compare two project versions (or version vs current)',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'reindex_workspace',
+        description: 'Trigger a full workspace reindex for the project',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'get_queue_info',
+        description: 'Get queue/stream metadata for a data asset or by queue name',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'replay_events',
+        description: 'Replay events from a data asset (time-travel)',
+        inputSchema: { type: 'object' },
+    },
+    // Procedures (process graph)
+    {
+        name: 'list_procedures',
+        description: 'List procedures for an organization (process graph). Pass organization_id. Returns procedure_id, entity_type, properties, created_at.',
+        inputSchema: {
+            type: 'object',
+            properties: { organization_id: { type: 'string', description: 'Organization UUID' } },
+        },
+    },
+    {
+        name: 'get_procedure_workflow',
+        description: 'Get procedure detail with steps and agents (workflow). Pass procedure_id. organization_id optional (from context).',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                procedure_id: { type: 'string' },
+                organization_id: { type: 'string' },
+            },
+            required: ['procedure_id'],
+        },
+    },
+    {
+        name: 'create_procedure',
+        description: 'Create a procedure (name, description, optional steps with order, name, system). Pass organization_id and body.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                organization_id: { type: 'string' },
+                name: { type: 'string' },
+                description: { type: 'string' },
+                steps: { type: 'array', items: { type: 'object' } },
+            },
+            required: ['organization_id', 'name'],
+        },
+    },
+    {
+        name: 'update_procedure',
+        description: 'Update a procedure (name and/or description). Pass procedure_id and body.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                procedure_id: { type: 'string' },
+                organization_id: { type: 'string' },
+                name: { type: 'string' },
+                description: { type: 'string' },
+            },
+            required: ['procedure_id'],
+        },
+    },
+    {
+        name: 'delete_procedure',
+        description: 'Delete a procedure and its steps. Pass procedure_id. Requires approval.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                procedure_id: { type: 'string' },
+                organization_id: { type: 'string' },
+            },
+            required: ['procedure_id'],
+        },
+    },
+    // Projects (org-scoped; pipelines API)
+    {
+        name: 'list_projects',
+        description: 'List projects in the organization. Optional: status (active, inactive, archived), search, page, page_size. Returns items and pagination.',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'get_project',
+        description: 'Get a single project by project_id.',
+        inputSchema: {
+            type: 'object',
+            properties: { project_id: { type: 'string' } },
+            required: ['project_id'],
+        },
+    },
+    {
+        name: 'create_project',
+        description: 'Create a project. Pass name (required). Optional: description, status, metadata, template_slug, domain_id, github_* fields.',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'update_project',
+        description: 'Update a project. Pass project_id and any of: name, description, status, metadata, configuration, repository_*, github_*, customer_role_arn.',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'delete_project',
+        description: 'Delete a project by project_id. Requires approval.',
+        inputSchema: {
+            type: 'object',
+            properties: { project_id: { type: 'string' } },
+            required: ['project_id'],
+        },
+    },
+    {
+        name: 'list_blueprints',
+        description: 'List blueprints (templates). Optional: category (e.g. pipelines, connectors, projects), search, page, page_size.',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'get_blueprint',
+        description: 'Get a single blueprint (template) by template_id for exploration.',
+        inputSchema: { type: 'object' },
+    },
+    {
+        name: 'apply_blueprint',
+        description: 'Apply a pipeline/connector/transform/data_product/domain/validation/export blueprint into a project. For project blueprints use create_project with template_slug. Params: project_id, blueprint_type, blueprint_slug; optional: preview, placeholder_overrides.',
+        inputSchema: { type: 'object' },
+    },
+];
+export function getTools() {
+    return TOOLS;
+}
+export function getToolNames() {
+    return TOOLS.map(t => t.name);
+}
+//# sourceMappingURL=tools.js.map

package/dist/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH,MAAM,KAAK,GAAc;IACvB;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,2BAA2B;QACxC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,iCAAiC;QAC9C,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,uBAAuB;QACpC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,uCAAuC;QACpD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,wCAAwC;QACrD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,uBAAuB;QACpC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,6BAA6B;QAC1C,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,mBAAmB,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;IAC9F;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,mCAAmC;QAChD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,oCAAoC;QACjD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,8DAA8D;QAC3E,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EACT,wIAAwI;QAC1I,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,gDAAgD;QAC7D,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,4CAA4C;QACzD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,yBAAyB;QACtC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,+BAA+B;QAC5C,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,qBAAqB;QAClC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,qCAAqC;QAClD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,sCAAsC;QACnD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,mDAAmD;QAChE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,gCAAgC;QAC7C,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,2BAA2B;QACxC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,iBAAiB,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;IAC1F;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,kCAAkC;QAC/C,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,sBAAsB;QACnC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,4BAA4B;QACzC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,2BAA2B;QACxC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,iCAAiC;QAC9C,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,uBAAuB;QACpC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,oBAAoB;QACjC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,oBAAoB,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;IAChG;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,2DAA2D;QACxE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,iJAAiJ;QACnJ,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,4DAA4D;QACzE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,0DAA0D;QACvE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,+EAA+E;QAC5F,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,iEAAiE;QAC9E,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,2BAA2B;QACxC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,wBAAwB,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;IAChG,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,qBAAqB,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;IAC1F;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,4BAA4B;QACzC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,oCAAoC;QACjD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,iCAAiC;QAC9C,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,6CAA6C;QAC1D,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,gCAAgC;QAC7C,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,mCAAmC;QAChD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,2CAA2C;QACxD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,sDAAsD;QACnE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,kDAAkD;QAC/D,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,6DAA6D;QAC1E,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,+CAA+C;QAC5D,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD,6BAA6B;IAC7B;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,uIAAuI;QACzI,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE,EAAE;SACtF;KACF;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,oHAAoH;QACtH,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAChC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACpC;YACD,QAAQ,EAAE,CAAC,cAAc,CAAC;SAC3B;KACF;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EACT,iHAAiH;QACnH,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACnC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;aACpD;YACD,QAAQ,EAAE,CAAC,iBAAiB,EAAE,MAAM,CAAC;SACtC;KACF;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,2EAA2E;QACxF,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAChC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACnC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAChC;YACD,QAAQ,EAAE,CAAC,cAAc,CAAC;SAC3B;KACF;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,yEAAyE;QACtF,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAChC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACpC;YACD,QAAQ,EAAE,CAAC,cAAc,CAAC;SAC3B;KACF;IACD,uCAAuC;IACvC;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,0IAA0I;QAC5I,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,qCAAqC;QAClD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YAC9C,QAAQ,EAAE,CAAC,YAAY,CAAC;SACzB;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,6HAA6H;QAC/H,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,8IAA8I;QAChJ,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,oDAAoD;QACjE,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YAC9C,QAAQ,EAAE,CAAC,YAAY,CAAC;SACzB;KACF;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,kHAAkH;QACpH,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,mEAAmE;QAChF,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,kQAAkQ;QACpQ,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;CACF,CAAC;AAEF,MAAM,UAAU,QAAQ;IACtB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC"}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@loxtep/customer-mcp-server",
+  "version": "1.0.0",
+  "description": "Customer MCP proxy: login via app UI, stdio server that forwards tool calls to Loxtep API",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "loxtep-mcp": "dist/cli.js",
+    "loxtep-mcp-server": "dist/index.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "login": "node dist/cli.js login",
+    "prepare": "pnpm run build"
+  },
+  "keywords": [
+    "mcp",
+    "loxtep",
+    "customer"
+  ],
+  "author": "Loxtep Team",
+  "license": "MIT",
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.15.1",
+    "express": "^4.21.0",
+    "jsonwebtoken": "^9.0.2",
+    "open": "^10.0.0"
+  },
+  "devDependencies": {
+    "@types/express": "^4.17.21",
+    "@types/jsonwebtoken": "^9.0.7",
+    "@types/node": "^22.10.2",
+    "typescript": "^5.9.2"
+  },
+  "files": [
+    "dist/**/*",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}