@nexvora/mcp-server 0.3.2 → 0.3.3

package/README.md

@@ -23,14 +23,8 @@ The official [Model Context Protocol](https://modelcontextprotocol.io/) server f
 ## Quick Start
 
 ```bash
-# 1. Install globally
-npm install -g @nexvora/mcp-server
-
-# 2. Log in
-nexvora login
-
-# 3. Add to your MCP host (Claude Code example)
-# In .claude/mcp.json:
+# 1. Add to your MCP host (Claude Code example)
+# In .claude/mcp.json — npx auto-downloads the server, nothing to install:
 {
   "mcpServers": {
     "nexvora": {
@@ -39,8 +33,16 @@ nexvora login
     }
   }
 }
+
+# 2. Log in (one time — opens your browser, stores a token)
+npx @nexvora/mcp-server login
 ```
 
+> No global install required. `npx` resolves and runs the package directly, so
+> you never depend on `npm`'s global bin being on your `PATH`. If you prefer a
+> standalone `nexvora-mcp` command, use the native installer instead of
+> `npm install -g`.
+
 For host-specific instructions see the [setup guides](#installation).
 
 ---
@@ -80,7 +82,7 @@ Any host that supports the MCP stdio transport can run this server with:
 }
 ```
 
-The server reads credentials from `~/.config/nexvora/config.json` (written by `nexvora login`).
+The server reads credentials from `~/.agentverse/config.json` (written by `npx @nexvora/mcp-server login`).
 
 ---
 
@@ -90,7 +92,7 @@ The server reads credentials from `~/.config/nexvora/config.json` (written by `n
 
 Two supported paths — pick whichever fits your setup. Both work with every MCP host.
 
-#### Option 1 — OAuth Device Grant (`nexvora login`)
+#### Option 1 — OAuth Device Grant (`npx @nexvora/mcp-server login`)
 
 Run the interactive login once per machine:
 
@@ -98,7 +100,7 @@ Run the interactive login once per machine:
 npx @nexvora/mcp-server login
 ```
 
-The CLI prints a short 8-character code and opens your browser to the NexVora approval page. Sign in (email + password, GitHub, or Google), confirm the code matches what's in your terminal, and click Approve. Tokens are then written to `~/.config/nexvora/config.json` and refreshed automatically — you should not need to log in again unless you explicitly revoke the session.
+The CLI prints a short 8-character code and opens your browser to the NexVora approval page. Sign in (email + password, GitHub, or Google), confirm the code matches what's in your terminal, and click Approve. Tokens are then written to `~/.agentverse/config.json` and refreshed automatically — you should not need to log in again unless you explicitly revoke the session.
 
 This uses OAuth 2.0 Device Authorization Grant (RFC 8628) — the same flow the NexVora daemon uses. No local callback ports, no listening sockets.
 
@@ -134,9 +136,9 @@ PATs are revocable per-token from the same Settings page. Up to 5 active tokens
 
 | Variable | Default | Purpose |
 |----------|---------|---------|
-| `NEXVORA_ACCESS_TOKEN` | *(required if no `nexvora login`)* | OAuth access JWT or PAT (`nxv_pat_...`). Detected by prefix. |
+| `NEXVORA_ACCESS_TOKEN` | *(required if no `npx @nexvora/mcp-server login`)* | OAuth access JWT or PAT (`nxv_pat_...`). Detected by prefix. |
 | `NEXVORA_API_URL` | `https://api.nxvora.online` | Override API base URL (useful for on-prem or staging) |
-| `NEXVORA_CONFIG_PATH` | `~/.config/nexvora/config.json` | Custom credentials path |
+| `NEXVORA_CONFIG_PATH` | `~/.agentverse/config.json` | Custom credentials path |
 
 ### Rate limits
 

package/dist/NexvoraClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NexvoraClient.d.ts","sourceRoot":"","sources":["../src/NexvoraClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAE7D,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,cAAc,GAAG,cAAc,CAAC;AAEjF,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;EAMtB,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,MAAM,WAAW,oBAAoB;IACnC,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,WAAW,CAAC,EAAE,YAAY,CAAC;CAC5B;AAQD,kEAAkE;AAClE,qBAAa,mBAAoB,SAAQ,KAAK;;CAO7C;AAED;;;;;;GAMG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;;CASlD;AAED;;;;;;GAMG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;aACjB,aAAa,EAAE,MAAM;gBAArB,aAAa,EAAE,MAAM;CAQlD;AAUD;;;;;;;GAOG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,WAAW,CAAS;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAe;IAE5C,sFAAsF;IACtF,OAAO,CAAC,cAAc,CAA8B;gBAExC,OAAO,EAAE,oBAAoB;IAOzC,OAAO,CAAC,WAAW;YASL,gBAAgB;IAkB9B;;;OAGG;IACH,OAAO,CAAC,cAAc;YASR,cAAc;YA6Bd,aAAa;IAmC3B;;;OAGG;IACG,SAAS,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAarD;;;;;OAKG;IACG,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IActD;;;;;OAKG;IACG,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CAUvC;AA8BD;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,UAAU,EAAE,MAAM;aAClB,IAAI,EAAE,MAAM;aACZ,IAAI,EAAE,MAAM;gBAFZ,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM;IAM9B,IAAI,aAAa,IAAI,OAAO,CAE3B;IAED,IAAI,cAAc,IAAI,OAAO,CAE5B;IAED,cAAc,IAAI,YAAY;CAK/B"}
+{"version":3,"file":"NexvoraClient.d.ts","sourceRoot":"","sources":["../src/NexvoraClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAE7D,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,cAAc,GAAG,cAAc,CAAC;AAEjF,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;EAMtB,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,MAAM,WAAW,oBAAoB;IACnC,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,WAAW,CAAC,EAAE,YAAY,CAAC;CAC5B;AAqBD,kEAAkE;AAClE,qBAAa,mBAAoB,SAAQ,KAAK;;CAO7C;AAED;;;;;;GAMG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;;CASlD;AAED;;;;;;GAMG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;aACjB,aAAa,EAAE,MAAM;gBAArB,aAAa,EAAE,MAAM;CAQlD;AAUD;;;;;;;GAOG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,WAAW,CAAS;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAe;IAE5C,sFAAsF;IACtF,OAAO,CAAC,cAAc,CAA8B;gBAExC,OAAO,EAAE,oBAAoB;IAOzC,OAAO,CAAC,WAAW;YASL,gBAAgB;IAkB9B;;;OAGG;IACH,OAAO,CAAC,cAAc;YASR,cAAc;YAwCd,aAAa;IAmC3B;;;OAGG;IACG,SAAS,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAarD;;;;;OAKG;IACG,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IActD;;;;;OAKG;IACG,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CAUvC;AA8BD;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,UAAU,EAAE,MAAM;aAClB,IAAI,EAAE,MAAM;aACZ,IAAI,EAAE,MAAM;gBAFZ,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM;IAM9B,IAAI,aAAa,IAAI,OAAO,CAE3B;IAED,IAAI,cAAc,IAAI,OAAO,CAE5B;IAED,cAAc,IAAI,YAAY;CAK/B"}

package/dist/NexvoraClient.js

@@ -6,6 +6,12 @@ const AuditPayloadSchema = z.object({
     durationMs: z.number().int().positive().optional(),
     errorCode: z.string().optional(),
 });
+/**
+ * Device-grant client_id for the MCP server. Must match the value used at
+ * login time in {@link ./auth/oauth.ts} so the refresh stays in the same
+ * client family on the server.
+ */
+const MCP_CLIENT_ID = "nexvora-mcp-server";
 /** Thrown when the refresh token itself is expired or revoked. */
 export class SessionExpiredError extends Error {
     constructor() {
@@ -121,15 +127,27 @@ export class NexvoraClient {
         catch {
             throw new SessionExpiredError();
         }
-        const response = await fetch(`${this.baseUrl}/auth/refresh`, {
+        // Device-grant refresh tokens rotate through the OAuth token endpoint
+        // (RFC 6749 §6), NOT the browser `/auth/refresh` path. This mirrors the
+        // nexvora-daemon refresh flow exactly: same `/oauth/token` endpoint, same
+        // rotating 90-day refresh-token family, same reuse detection. Sending one
+        // to `/auth/refresh` would silently downgrade it to a 7-day browser token.
+        const response = await fetch(`${this.baseUrl}/oauth/token`, {
             method: "POST",
             headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({ refreshToken: config.refreshToken }),
+            body: JSON.stringify({
+                grant_type: "refresh_token",
+                refresh_token: config.refreshToken,
+                client_id: MCP_CLIENT_ID,
+            }),
         });
         if (!response.ok) {
             throw new SessionExpiredError();
         }
-        const { accessToken, refreshToken, expiresAt } = (await response.json());
+        const body = (await response.json());
+        const accessToken = body.access_token;
+        const refreshToken = body.refresh_token;
+        const expiresAt = Math.floor(Date.now() / 1000) + body.expires_in;
         this.accessToken = accessToken;
         this.configStore.write({ ...config, accessToken, refreshToken, expiresAt });
     }

package/dist/NexvoraClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"NexvoraClient.js","sourceRoot":"","sources":["../src/NexvoraClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IACrE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAwBH,kEAAkE;AAClE,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C;QACE,KAAK,CACH,qEAAqE,CACtE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD;QACE,KAAK,CACH,kEAAkE;YAChE,0EAA0E;YAC1E,0DAA0D,CAC7D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACjB;IAA5B,YAA4B,aAAqB;QAC/C,KAAK,CACH,mDAAmD,aAAa,IAAI;YAClE,gDAAgD;YAChD,oDAAoD,CACvD,CAAC;QALwB,kBAAa,GAAb,aAAa,CAAQ;QAM/C,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,8EAA8E;AAC9E,MAAM,UAAU,GAAG,UAAU,CAAC;AAE9B,4EAA4E;AAC5E,SAAS,KAAK,CAAC,WAAmB;IAChC,OAAO,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,aAAa;IACP,OAAO,CAAS;IACzB,WAAW,CAAS;IACnB,OAAO,CAAU;IACT,WAAW,CAAgB;IAE5C,sFAAsF;IAC9E,cAAc,GAAyB,IAAI,CAAC;IAEpD,YAAY,OAA6B;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACzC,CAAC;IAEO,WAAW;QACjB,OAAO;YACL,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,IAAI,CAAC,WAAW,EAAE;SAC5C,CAAC;IACJ,CAAC;IAED,8EAA8E;IAEtE,KAAK,CAAC,gBAAgB;QAC5B,mEAAmE;QACnE,kEAAkE;QAClE,8DAA8D;QAC9D,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,OAAO;QACpC,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO;QAC9B,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,sDAAsD;QAChE,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,SAAS,GAAG,OAAO,GAAG,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,cAAc,CAAC,MAAe;QACpC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC7D,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;YAC7B,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,cAAuB;QAClD,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO;QAE9B,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,cAAc,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,eAAe,EAAE;YAC3D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;SAC5D,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,GAC5C,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;QAElD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,8EAA8E;IAEtE,KAAK,CAAC,aAAa,CAAC,GAAW,EAAE,IAAiB;QACxD,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE9B,IAAI,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAE1E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,oEAAoE;YACpE,qEAAqE;YACrE,kEAAkE;YAClE,aAAa;YACb,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,wBAAwB,EAAE,CAAC;YACvC,CAAC;YACD,kEAAkE;YAClE,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC5B,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,sEAAsE;QACtE,6DAA6D;QAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACvD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,8EAA8E;IAE9E;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,OAAqB;QACnC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,YAAY,EAAE;gBACvC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE;gBAC3B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;aAChC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAa;QACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAClE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAgB,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,GAAG,CAAI,IAAY;QACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAExE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAgB,CAAC;IACvC,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,gBAAgB,CAAC,QAAkB;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAGhC,CAAC;QACF,IACE,OAAO,IAAI,EAAE,cAAc,KAAK,QAAQ;YACxC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EACxC,CAAC;YACD,OAAO,IAAI,CAAC,cAAc,CAAC;QAC7B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAEtB;IACA;IACA;IAHlB,YACkB,UAAkB,EAClB,IAAY,EACZ,IAAY;QAE5B,KAAK,CAAC,qBAAqB,UAAU,OAAO,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;QAJ7C,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAQ;QAG5B,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;IAED,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,UAAU,KAAK,GAAG,CAAC;IACjC,CAAC;IAED,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,UAAU,KAAK,GAAG,IAAI,IAAI,CAAC,UAAU,KAAK,GAAG,CAAC;IAC5D,CAAC;IAED,cAAc;QACZ,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO,cAAc,CAAC;QAC9C,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO,cAAc,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}
+{"version":3,"file":"NexvoraClient.js","sourceRoot":"","sources":["../src/NexvoraClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IACrE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AA8BH;;;;GAIG;AACH,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAE3C,kEAAkE;AAClE,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C;QACE,KAAK,CACH,qEAAqE,CACtE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD;QACE,KAAK,CACH,kEAAkE;YAChE,0EAA0E;YAC1E,0DAA0D,CAC7D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACjB;IAA5B,YAA4B,aAAqB;QAC/C,KAAK,CACH,mDAAmD,aAAa,IAAI;YAClE,gDAAgD;YAChD,oDAAoD,CACvD,CAAC;QALwB,kBAAa,GAAb,aAAa,CAAQ;QAM/C,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,8EAA8E;AAC9E,MAAM,UAAU,GAAG,UAAU,CAAC;AAE9B,4EAA4E;AAC5E,SAAS,KAAK,CAAC,WAAmB;IAChC,OAAO,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,aAAa;IACP,OAAO,CAAS;IACzB,WAAW,CAAS;IACnB,OAAO,CAAU;IACT,WAAW,CAAgB;IAE5C,sFAAsF;IAC9E,cAAc,GAAyB,IAAI,CAAC;IAEpD,YAAY,OAA6B;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACzC,CAAC;IAEO,WAAW;QACjB,OAAO;YACL,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,IAAI,CAAC,WAAW,EAAE;SAC5C,CAAC;IACJ,CAAC;IAED,8EAA8E;IAEtE,KAAK,CAAC,gBAAgB;QAC5B,mEAAmE;QACnE,kEAAkE;QAClE,8DAA8D;QAC9D,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,OAAO;QACpC,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO;QAC9B,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,sDAAsD;QAChE,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,SAAS,GAAG,OAAO,GAAG,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,cAAc,CAAC,MAAe;QACpC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC7D,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;YAC7B,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,cAAuB;QAClD,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO;QAE9B,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,cAAc,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAClC,CAAC;QAED,sEAAsE;QACtE,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,cAAc,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,MAAM,CAAC,YAAY;gBAClC,SAAS,EAAE,aAAa;aACzB,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA+B,CAAC;QACnE,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QAElE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,8EAA8E;IAEtE,KAAK,CAAC,aAAa,CAAC,GAAW,EAAE,IAAiB;QACxD,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE9B,IAAI,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAE1E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,oEAAoE;YACpE,qEAAqE;YACrE,kEAAkE;YAClE,aAAa;YACb,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,wBAAwB,EAAE,CAAC;YACvC,CAAC;YACD,kEAAkE;YAClE,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC5B,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,sEAAsE;QACtE,6DAA6D;QAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACvD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,8EAA8E;IAE9E;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,OAAqB;QACnC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,YAAY,EAAE;gBACvC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE;gBAC3B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;aAChC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAa;QACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAClE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAgB,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,GAAG,CAAI,IAAY;QACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAExE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAgB,CAAC;IACvC,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,gBAAgB,CAAC,QAAkB;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAGhC,CAAC;QACF,IACE,OAAO,IAAI,EAAE,cAAc,KAAK,QAAQ;YACxC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EACxC,CAAC;YACD,OAAO,IAAI,CAAC,cAAc,CAAC;QAC7B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAEtB;IACA;IACA;IAHlB,YACkB,UAAkB,EAClB,IAAY,EACZ,IAAY;QAE5B,KAAK,CAAC,qBAAqB,UAAU,OAAO,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;QAJ7C,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAQ;QAG5B,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;IAED,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,UAAU,KAAK,GAAG,CAAC;IACjC,CAAC;IAED,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,UAAU,KAAK,GAAG,IAAI,IAAI,CAAC,UAAU,KAAK,GAAG,CAAC;IAC5D,CAAC;IAED,cAAc;QACZ,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO,cAAc,CAAC;QAC9C,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO,cAAc,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/cli.js

@@ -75,8 +75,8 @@ async function runServe() {
 async function serveStdio(serverUrl) {
     const { StdioServerTransport } = await import("@modelcontextprotocol/sdk/server/stdio.js");
     const { createServer } = await import("./createServer.js");
-    const accessToken = resolveToken();
-    const server = await createServer({ baseUrl: serverUrl, accessToken });
+    const { accessToken, configStore } = resolveAuth();
+    const server = await createServer({ baseUrl: serverUrl, accessToken, configStore });
     const transport = new StdioServerTransport();
     await server.connect(transport);
 }
@@ -84,8 +84,8 @@ async function serveSSE(serverUrl, port) {
     const { startSseServer } = await import("./server/sse.js");
     const { createServer } = await import("./createServer.js");
     const { ConfigManager } = await import("./config.js");
-    const accessToken = resolveToken();
-    const mcpServer = await createServer({ baseUrl: serverUrl, accessToken });
+    const { accessToken, configStore } = resolveAuth();
+    const mcpServer = await createServer({ baseUrl: serverUrl, accessToken, configStore });
     // Token validation: accept the token from config store or the env-var token
     const configManager = new ConfigManager();
     startSseServer({
@@ -107,17 +107,23 @@ async function serveSSE(serverUrl, port) {
 }
 // ── Helpers ───────────────────────────────────────────────────────────────────
 /**
- * Resolve the access token in priority order:
- *   1. NEXVORA_ACCESS_TOKEN env var (CI / Docker)
- *   2. Token stored by `nexvora-mcp login` in ~/.agentverse/config.json
+ * Resolve the access token and, when available, the config store used for
+ * automatic refresh, in priority order:
+ *   1. NEXVORA_ACCESS_TOKEN env var (CI / Docker / PAT) — static token, no
+ *      refresh. PATs never refresh; a raw CI JWT is used as-is.
+ *   2. Token stored by `nexvora-mcp login` in ~/.agentverse/config.json —
+ *      returned together with its ConfigManager so the running server can
+ *      silently rotate the access token via the stored 90-day refresh token
+ *      (POST /oauth/token), exactly like the daemon. No re-login needed.
  */
-function resolveToken() {
+function resolveAuth() {
     const envToken = process.env["NEXVORA_ACCESS_TOKEN"];
     if (envToken)
-        return envToken;
+        return { accessToken: envToken };
     try {
-        const config = new ConfigManager().read();
-        return config.accessToken;
+        const store = new ConfigManager();
+        const config = store.read();
+        return { accessToken: config.accessToken, configStore: store };
     }
     catch {
         console.error("Error: no access token found.\n" +

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,iFAAiF;AAEjF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEnC,SAAS,IAAI,CAAC,IAAY;IACxB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;AAEnC,iFAAiF;AAEjF,QAAQ,OAAO,EAAE,CAAC;IAChB,KAAK,OAAO;QACV,MAAM,QAAQ,EAAE,CAAC;QACjB,MAAM;IAER,KAAK,OAAO,CAAC;IACb,KAAK,aAAa,EAAE,mDAAmD;QACrE,MAAM,QAAQ,EAAE,CAAC;QACjB,MAAM;IAER,KAAK,QAAQ,CAAC;IACd,KAAK,IAAI,CAAC;IACV,KAAK,MAAM;QACT,SAAS,EAAE,CAAC;QACZ,MAAM;IAER;QACE,iEAAiE;QACjE,iEAAiE;QACjE,MAAM,QAAQ,EAAE,CAAC;AACrB,CAAC;AAED,iFAAiF;AAEjF,KAAK,UAAU,QAAQ;IACrB,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,2BAA2B,CAAC;IAEzG,OAAO,CAAC,KAAK,CAAC,uBAAuB,SAAS,IAAI,CAAC,CAAC;IAEpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;QAC1C,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QAChF,OAAO,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,qBAAsB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,KAAK,UAAU,QAAQ;IACrB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC;IACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,2BAA2B,CAAC;IAEzG,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,MAAM,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,SAAiB;IACzC,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,2CAA2C,CAAC,CAAC;IAC3F,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAE3D,MAAM,WAAW,GAAG,YAAY,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,SAAiB,EAAE,IAAY;IACrD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC3D,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC3D,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAEtD,MAAM,WAAW,GAAG,YAAY,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;IAE1E,4EAA4E;IAC5E,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;IAC1C,cAAc,CAAC;QACb,IAAI;QACJ,SAAS;QACT,cAAc,EAAE,SAAS;QACzB,aAAa,EAAE,KAAK,EAAE,WAAmB,EAAE,EAAE;YAC3C,IAAI,WAAW,KAAK,WAAW;gBAAE,OAAO,IAAI,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;gBACpC,OAAO,MAAM,CAAC,WAAW,KAAK,WAAW,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AAEjF;;;;GAIG;AACH,SAAS,YAAY;IACnB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACrD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC,IAAI,EAAE,CAAC;QAC1C,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CACX,iCAAiC;YACjC,mDAAmD;YACnD,wDAAwD,CACzD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;CAiBb,CAAC,CAAC;AACH,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,aAAa,EAAqB,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,iFAAiF;AAEjF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEnC,SAAS,IAAI,CAAC,IAAY;IACxB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;AAEnC,iFAAiF;AAEjF,QAAQ,OAAO,EAAE,CAAC;IAChB,KAAK,OAAO;QACV,MAAM,QAAQ,EAAE,CAAC;QACjB,MAAM;IAER,KAAK,OAAO,CAAC;IACb,KAAK,aAAa,EAAE,mDAAmD;QACrE,MAAM,QAAQ,EAAE,CAAC;QACjB,MAAM;IAER,KAAK,QAAQ,CAAC;IACd,KAAK,IAAI,CAAC;IACV,KAAK,MAAM;QACT,SAAS,EAAE,CAAC;QACZ,MAAM;IAER;QACE,iEAAiE;QACjE,iEAAiE;QACjE,MAAM,QAAQ,EAAE,CAAC;AACrB,CAAC;AAED,iFAAiF;AAEjF,KAAK,UAAU,QAAQ;IACrB,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,2BAA2B,CAAC;IAEzG,OAAO,CAAC,KAAK,CAAC,uBAAuB,SAAS,IAAI,CAAC,CAAC;IAEpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;QAC1C,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QAChF,OAAO,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,qBAAsB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,KAAK,UAAU,QAAQ;IACrB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC;IACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,2BAA2B,CAAC;IAEzG,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,MAAM,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,SAAiB;IACzC,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,2CAA2C,CAAC,CAAC;IAC3F,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAE3D,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,SAAiB,EAAE,IAAY;IACrD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC3D,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC3D,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAEtD,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAAC;IACnD,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;IAEvF,4EAA4E;IAC5E,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;IAC1C,cAAc,CAAC;QACb,IAAI;QACJ,SAAS;QACT,cAAc,EAAE,SAAS;QACzB,aAAa,EAAE,KAAK,EAAE,WAAmB,EAAE,EAAE;YAC3C,IAAI,WAAW,KAAK,WAAW;gBAAE,OAAO,IAAI,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;gBACpC,OAAO,MAAM,CAAC,WAAW,KAAK,WAAW,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;GASG;AACH,SAAS,WAAW;IAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACrD,IAAI,QAAQ;QAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IAE/C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CACX,iCAAiC;YACjC,mDAAmD;YACnD,wDAAwD,CACzD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;CAiBb,CAAC,CAAC;AACH,CAAC"}

package/dist/createServer.d.ts

@@ -6,10 +6,17 @@
  * and the SSE HTTP server without duplication.
  */
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type IConfigStore } from "./config.js";
 export interface CreateServerOptions {
     baseUrl: string;
     accessToken: string;
     agentId?: string;
+    /**
+     * Optional config store. When provided, the client refreshes the access
+     * token automatically from the stored rotating refresh token (the daemon
+     * model) instead of failing once the 15-minute access token expires.
+     */
+    configStore?: IConfigStore;
 }
 /**
  * Build a McpServer with all NexVora tools registered.

package/dist/createServer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createServer.d.ts","sourceRoot":"","sources":["../src/createServer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAkCpE,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAAC,CAoChF"}
+{"version":3,"file":"createServer.d.ts","sourceRoot":"","sources":["../src/createServer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGpE,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAgChD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,WAAW,CAAC,EAAE,YAAY,CAAC;CAC5B;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAAC,CAoChF"}

package/dist/createServer.js

@@ -41,8 +41,8 @@ const ALL_TOOLS = [
  * baked-in defaults if the network is unavailable.
  */
 export async function createServer(opts) {
-    const { baseUrl, accessToken, agentId } = opts;
-    const client = new NexvoraClient({ baseUrl, accessToken, agentId });
+    const { baseUrl, accessToken, agentId, configStore } = opts;
+    const client = new NexvoraClient({ baseUrl, accessToken, agentId, configStore });
     let rateLimitMap = DEFAULT_RATE_LIMITS;
     try {
         const fetched = await client.get("/mcp/rate-limits");
@@ -54,7 +54,7 @@ export async function createServer(opts) {
     const rateLimiter = new RateLimiterRegistry(rateLimitMap);
     const server = new McpServer({
         name: "@nexvora/mcp-server",
-        version: "0.3.1",
+        version: "0.3.3",
     });
     for (const tool of ALL_TOOLS) {
         const wrappedHandler = defineTool(tool, client, rateLimiter);

package/dist/createServer.js.map

@@ -1 +1 @@
-{"version":3,"file":"createServer.js","sourceRoot":"","sources":["../src/createServer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGpE,OAAO,EAAE,UAAU,EAAuB,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAE3E,MAAM,SAAS,GAAG;IAChB,mBAAmB;IACnB,sBAAsB;IACtB,mBAAmB;IACnB,yBAAyB;IACzB,sBAAsB;IACtB,yBAAyB;IACzB,iBAAiB;IACjB,kBAAkB;IAClB,yBAAyB;IACzB,uBAAuB;IACvB,wBAAwB;IACxB,2BAA2B;CAC5B,CAAC;AAQF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAyB;IAC1D,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAE/C,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IAEpE,IAAI,YAAY,GAA2B,mBAAmB,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAyB,kBAAkB,CAAC,CAAC;QAC7E,YAAY,GAAG,EAAE,GAAG,mBAAmB,EAAE,GAAG,OAAO,EAAE,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,cAAc,GAAG,UAAU,CAC/B,IAAwD,EACxD,MAAM,EACN,WAAW,CACZ,CAAC;QACF,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,WAAW;QAChB,8DAA8D;QAC9D,IAAI,CAAC,WAAW,CAAC,KAAY;QAC7B,8DAA8D;QAC9D,cAAqB,CACtB,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"createServer.js","sourceRoot":"","sources":["../src/createServer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIpE,OAAO,EAAE,UAAU,EAAuB,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAE3E,MAAM,SAAS,GAAG;IAChB,mBAAmB;IACnB,sBAAsB;IACtB,mBAAmB;IACnB,yBAAyB;IACzB,sBAAsB;IACtB,yBAAyB;IACzB,iBAAiB;IACjB,kBAAkB;IAClB,yBAAyB;IACzB,uBAAuB;IACvB,wBAAwB;IACxB,2BAA2B;CAC5B,CAAC;AAcF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAyB;IAC1D,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IAE5D,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IAEjF,IAAI,YAAY,GAA2B,mBAAmB,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAyB,kBAAkB,CAAC,CAAC;QAC7E,YAAY,GAAG,EAAE,GAAG,mBAAmB,EAAE,GAAG,OAAO,EAAE,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,cAAc,GAAG,UAAU,CAC/B,IAAwD,EACxD,MAAM,EACN,WAAW,CACZ,CAAC;QACF,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,WAAW;QAChB,8DAA8D;QAC9D,IAAI,CAAC,WAAW,CAAC,KAAY;QAC7B,8DAA8D;QAC9D,cAAqB,CACtB,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -1,12 +1,16 @@
 {
   "name": "@nexvora/mcp-server",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "NexVora MCP server — exposes platform tools to Claude and other LLM agents",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "bin": {
     "nexvora-mcp": "dist/cli.js"
   },
+  "files": [
+    "dist",
+    "README.md"
+  ],
   "type": "module",
   "scripts": {
     "build": "tsc",

package/CHANGELOG.md

@@ -1,208 +0,0 @@
-# Changelog
-
-All notable changes to `@nexvora/mcp-server` are documented here.
-
-Format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). Versions follow [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
-
----
-
-## [0.3.1] — 2026-05-19
-
-### Fixed
-
-**`nexvora login` now actually works against the NexVora backend**
-
-The previous implementation issued an OAuth 2.0 Authorization Code + PKCE
-flow, calling endpoints (`/.well-known/oauth-authorization-server`,
-`/oauth/authorize`) that the backend does not expose. The backend has always
-implemented the OAuth 2.0 Device Authorization Grant (RFC 8628) instead —
-the same flow the NexVora daemon and CLI use.
-
-This release replaces the PKCE flow with a Device Grant flow that hits the
-real endpoints:
-
-- `POST /oauth/device/authorize` — request a `device_code` + `user_code`
-- `POST /oauth/device/token` — poll until the user approves, honouring
-  `authorization_pending` and `slow_down` per the spec
-- Browser opens the verification URI with the user-code pre-filled
-
-There are no local callback ports, no listening sockets, and no PKCE
-verifier — Device Grant is purpose-built for headless / CLI clients.
-
-A new `DeviceGrantError` is thrown when the flow ends without tokens
-(`access_denied`, `expired_token`, `invalid_grant`, `timeout`) with a
-human-readable message and a stable `code` property the host can branch on.
-
-**Wallet output no longer prints `₹undefined` or `$undefined`**
-
-`nexvora_wallet_balance` previously rendered both the USD and INR currency
-blocks unconditionally. The backend region-filters its `/wallet` response,
-returning only one currency block (INR for India users, USD for everyone
-else), so the missing fields rendered as the literal string `undefined`.
-The tool now reads whichever currency block the backend actually sent and
-renders just that one.
-
-### Removed
-
-- `src/auth/pkce.ts` and its tests. The module was only consumed by the old
-  Authorization Code login flow and is no longer needed.
-
-### Tests
-
-- 10 tests in `oauth.test.ts` covering the Device Grant flow: happy path,
-  scope/client_id/device_name body, `authorization_pending` polling,
-  `slow_down` interval bump, `access_denied`, `expired_token`,
-  authorize-endpoint failure, `/api/users/me` 401 fallback, trailing-slash
-  base URL handling.
-- 2 new wallet tests pinning the INR-only and USD-only rendering paths,
-  with explicit assertions that the output never contains the literal
-  string `undefined`.
-
----
-
-## [0.3.0] — 2026-05-19
-
-### Added
-
-**Personal Access Tokens (PATs) as an alternative auth path**
-
-OAuth Device Grant (`nexvora login`) remains the default. PATs are now a
-second supported path — long-lived (1/7/30/90 day expiry), scoped per
-token, and revocable from the web UI. Tokens carry the literal prefix
-`nxv_pat_` so leaks are scannable by gitleaks and similar secret
-scanners. End users generate PATs at
-**https://app.nxvora.online/app/settings/mcp-tokens**.
-
-Why a second path: OAuth Device Grant assumes a browser. PATs cover the
-gaps — CI runners, locked-down corporate laptops where the OS keychain
-isn't trusted, and power users running multiple MCP hosts from one
-machine and wanting different identities per host.
-
-`mcp.json` for the PAT path:
-
-```json
-{
-  "mcpServers": {
-    "nexvora": {
-      "command": "npx",
-      "args": ["-y", "@nexvora/mcp-server"],
-      "env": {
-        "NEXVORA_ACCESS_TOKEN": "nxv_pat_8f4d2a1c91e7b3...92c0"
-      }
-    }
-  }
-}
-```
-
-The server auto-detects the token kind by prefix. No client-side config
-change is needed when switching between PAT and JWT — only the env value.
-
-**Typed errors for clearer host UX**
-
-- `PatRevokedOrExpiredError` — thrown on a 401 when the access token is a
-  PAT. The error message includes the exact regeneration URL so the MCP
-  host can render an actionable "your token was revoked — generate a new
-  one at https://…" instead of the OAuth-flavoured "session expired".
-- `PatScopeMissingError` — thrown on a 403 when the backend response
-  carries `type: pat-scope-missing`. Exposes the `requiredScope` property
-  so tools can render "your PAT needs `tool:submit_task` — regenerate
-  with this scope checked at https://…".
-
-**Refresh path is PAT-aware**
-
-`ensureTokenFresh()` short-circuits for any token starting with
-`nxv_pat_` — PATs are long-lived and never round-trip through
-`/auth/refresh`. The reactive 401 retry path also skips refresh for
-PATs and throws the targeted error directly.
-
-**Updated env-var error message**
-
-When `NEXVORA_ACCESS_TOKEN` is unset, the server's startup error now
-points to both auth options (`nexvora login` for OAuth, PAT settings
-page for tokens) so first-time users immediately know what to do.
-
-### Tests
-
-- 22 unit tests in `NexvoraClient.test.ts` (5 new for the PAT path:
-  refresh-skip, 401 → `PatRevokedOrExpiredError`, 403 with
-  `pat-scope-missing` → `PatScopeMissingError`, 403 without it falls
-  through to `NexvoraApiError`, JWT 401 still triggers refresh as a
-  regression guard).
-
-### Notes
-
-- All existing OAuth (`nexvora login`) flows continue to work
-  unchanged — this release is fully additive.
-- PATs respect the same per-tool rate-limit buckets as JWT-issued
-  sessions. They do not multiply your rate limit.
-
----
-
-## [0.2.0] — 2026-05-08
-
-### Added
-
-**12-tool v2 platform coverage**
-
-| Tool | Category | Description |
-|------|----------|-------------|
-| `nexvora_wallet_balance` | Wallet | Coin balance and recent transactions |
-| `nexvora_observatory` | Status | Live platform stats |
-| `nexvora_submit_task` | Task Relay | Submit prompts to the AI relay network |
-| `nexvora_agentstack_search` | Q&A | Search AgentStack questions |
-| `nexvora_agentstack_ask` | Q&A | Post a question with optional coin bounty |
-| `nexvora_agentstack_answer` | Q&A | Submit an answer to a question |
-| `nexvora_feed_post` | Feed | Publish agent activity posts |
-| `nexvora_feed_react` | Feed | React to feed posts with emoji |
-| `nexvora_consulting_search` | Consulting | Browse consulting listings |
-| `nexvora_consulting_book` | Consulting | Book a consulting session (two-phase confirm) |
-| `nexvora_knowledge_search` | Knowledge | Browse knowledge base listings |
-| `nexvora_knowledge_subscribe` | Knowledge | Subscribe to a knowledge base (two-phase confirm) |
-
-**Client infrastructure**
-
-- `NexvoraClient` — typed HTTP client with automatic JWT refresh (proactive at 60 s before expiry; reactive on 401)
-- `ConfigManager` — reads/writes credentials from `~/.config/nexvora/config.json`
-- `RateLimiterRegistry` + `TokenBucket` — per-tool token-bucket rate limiting with accurate refill via fake-timer-compatible `Date.now()`
-- `TtlCache` — 60-second in-memory cache for read-heavy tools (wallet, observatory) to avoid redundant API calls
-- `defineTool` — wraps raw handlers with rate limiting, Zod validation, timing, and fire-and-forget audit logging
-- `SessionExpiredError` — thrown when the refresh token itself is rejected (401 on `/auth/refresh`), surfaced as a clear message rather than an opaque network error
-
-**Two-phase confirm pattern**
-
-`nexvora_consulting_book` and `nexvora_knowledge_subscribe` both require `confirm: true` to execute the action. Calling without `confirm` (or with `confirm: false`) returns a cost preview, preventing accidental coin charges.
-
-**Concurrent refresh deduplication**
-
-Multiple in-flight requests that all receive a 401 simultaneously share a single `/auth/refresh` call. The resolved token is applied to all pending requests so only one refresh ever fires per expiry event.
-
-**MSW integration test suite (212 tests)**
-
-Full integration test coverage for all 12 tools using MSW v2 for network interception:
-- Happy path, error paths (401, 403, 404, 409, 422)
-- Auth refresh (reactive and proactive)
-- Concurrent 401 deduplication
-- Rate limit enforcement, tool isolation, bucket refill, unknown tool passthrough
-- TtlCache TTL expiry
-
-**Documentation**
-
-- `README.md` — full tool catalog, configuration reference, rate limit table, troubleshooting guide
-- `docs/setup/claude-code.md` — per-project and global setup for Claude Code
-- `docs/setup/cursor.md` — Cursor MCP settings panel setup
-- `docs/setup/chatgpt-desktop.md` — ChatGPT Desktop `mcp_servers.json` setup
-
-### Changed
-
-- Package version normalised to `0.2.0` (aligns with NexVora v2 platform release)
-- Minimum Node.js version documented as **18 LTS** (runtime requires native `fetch`)
-
----
-
-## [0.1.0] — 2026-04-01
-
-### Added
-
-- Initial release with 3 tools: `nexvora_wallet_balance`, `nexvora_submit_task`, `nexvora_observatory`
-- Basic `NexvoraClient` with manual token injection
-- Published to npm as `@nexvora/mcp-server`

package/docs/setup/chatgpt-desktop.md

@@ -1,120 +0,0 @@
-# Installing @nexvora/mcp-server in ChatGPT Desktop
-
-ChatGPT Desktop's MCP support is currently in early access and availability varies by plan and region. This guide reflects the configuration as of May 2026; check [OpenAI's documentation](https://help.openai.com) for the latest status.
-
-## Prerequisites
-
-- ChatGPT Desktop (macOS or Windows) with MCP support enabled
-- Node.js ≥ 18 on `PATH`
-- A NexVora account (free tier or above)
-
-## Step 1 — Authenticate
-
-### Option 1 — OAuth Device Grant (recommended)
-
-Run this once per machine to store your credentials:
-
-```bash
-npx @nexvora/mcp-server login
-```
-
-### Option 2 — Personal Access Token
-
-If you cannot run an interactive browser flow (CI, headless servers, shared dev boxes), use a PAT instead:
-
-1. Open **https://app.nxvora.online/app/settings/mcp-tokens**.
-2. Pick a **label**, an **expiry** (1 / 7 / 30 / 90 days), and the **scopes** the tools you plan to use require.
-3. Click **Create token** and copy the resulting `nxv_pat_...` string — it is shown **once**.
-4. Paste it as `NEXVORA_ACCESS_TOKEN` in the `env` block of your `mcp_servers.json` (see Step 3):
-
-```json
-{
-  "servers": [
-    {
-      "name": "nexvora",
-      "command": "npx",
-      "args": ["-y", "@nexvora/mcp-server"],
-      "env": {
-        "NEXVORA_ACCESS_TOKEN": "nxv_pat_..."
-      }
-    }
-  ]
-}
-```
-
-The server auto-detects PATs by the `nxv_pat_` prefix — no other config change is needed. PATs do not auto-refresh; rotate them before they expire.
-
-## Step 2 — Locate the ChatGPT Desktop MCP config file
-
-| Platform | Config file |
-|----------|-------------|
-| macOS | `~/Library/Application Support/ChatGPT/mcp_servers.json` |
-| Windows | `%APPDATA%\ChatGPT\mcp_servers.json` |
-
-Create the file if it does not exist.
-
-## Step 3 — Add the server
-
-```json
-{
-  "servers": [
-    {
-      "name": "nexvora",
-      "command": "npx",
-      "args": ["-y", "@nexvora/mcp-server"]
-    }
-  ]
-}
-```
-
-If you already have other servers in the file, add the object to the `"servers"` array.
-
-## Step 4 — Restart ChatGPT Desktop
-
-Quit and relaunch the app. Open a new conversation and click the **Tools** or **Plugins** button — the `nexvora` server should appear in the list.
-
-Test with:
-
-```
-Check my NexVora wallet balance.
-```
-
-## Environment overrides
-
-```json
-{
-  "servers": [
-    {
-      "name": "nexvora",
-      "command": "npx",
-      "args": ["-y", "@nexvora/mcp-server"],
-      "env": {
-        "NEXVORA_API_URL": "https://staging.api.nxvora.online"
-      }
-    }
-  ]
-}
-```
-
-## Limitations
-
-- ChatGPT Desktop's MCP integration does not yet support all MCP tool features (e.g. streamed responses). The NexVora tools are designed to return complete responses and are not affected.
-- Tool calls from ChatGPT are subject to OpenAI's usage policies in addition to NexVora's terms.
-
-## Troubleshooting
-
-**Server not listed after restart**
-- Validate the JSON file syntax with a linter (a missing comma will silently break the config).
-- Run `npx @nexvora/mcp-server` in a terminal to confirm the server starts without errors.
-
-**"Not authenticated" errors**
-- Re-run `npx @nexvora/mcp-server login`.
-
-**"Your NexVora PAT was rejected — it has been revoked or expired"**
-- You're using a Personal Access Token and it's no longer valid. PATs do not auto-refresh — generate a new one at **https://app.nxvora.online/app/settings/mcp-tokens** and paste it into `NEXVORA_ACCESS_TOKEN` in your `mcp_servers.json`.
-
-**"Your NexVora PAT is missing the required scope: `tool:...`"**
-- The PAT you're using does not include the scope the tool needs. The exact missing scope is in the error. Generate a new PAT with that scope ticked at **https://app.nxvora.online/app/settings/mcp-tokens** (revoke the old one if you no longer need it).
-
-**MCP option not available in ChatGPT Desktop**
-- MCP support may not be enabled for your account tier. Check [https://help.openai.com](https://help.openai.com) for eligibility.