@otwa/mcp-server 0.1.0

package/dist/index.js

@@ -0,0 +1,73 @@
+#!/usr/bin/env node
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
+const server_1 = require("./server");
+const env_1 = require("./util/env");
+const version_1 = require("./util/version");
+async function main() {
+    // Surface CLI version/help without trying to read the API key — useful for
+    // doctor-style checks before the customer has set OTWA_API_KEY.
+    const argv = process.argv.slice(2);
+    if (argv.includes('--version') || argv.includes('-v')) {
+        const pkg = (0, version_1.packageInfo)();
+        process.stdout.write(`${pkg.name} ${pkg.version}\n`);
+        return;
+    }
+    if (argv.includes('--help') || argv.includes('-h')) {
+        printHelp();
+        return;
+    }
+    let env;
+    try {
+        env = (0, env_1.readEnv)();
+    }
+    catch (err) {
+        // Write to stderr so it shows up in MCP-client logs; exit non-zero so
+        // the client surfaces it as an install error.
+        const msg = err instanceof Error ? err.message : String(err);
+        process.stderr.write(`[otwa-mcp] ${msg}\n`);
+        process.exit(1);
+    }
+    const server = (0, server_1.createServer)(env);
+    const transport = new stdio_js_1.StdioServerTransport();
+    await server.connect(transport);
+    // Graceful shutdown so the LLM client doesn't see a hang on Ctrl-C / SIGTERM.
+    const shutdown = async (signal) => {
+        try {
+            await server.close();
+        }
+        catch {
+            // best-effort
+        }
+        process.stderr.write(`[otwa-mcp] shutdown on ${signal}\n`);
+        process.exit(0);
+    };
+    process.on('SIGINT', () => void shutdown('SIGINT'));
+    process.on('SIGTERM', () => void shutdown('SIGTERM'));
+}
+function printHelp() {
+    const pkg = (0, version_1.packageInfo)();
+    process.stdout.write(`${pkg.name} ${pkg.version}\n` +
+        '\n' +
+        'Official Model Context Protocol server for otwa.cloud.\n' +
+        '\n' +
+        'Usage:\n' +
+        '  otwa-mcp            Start the stdio MCP server (the normal case — spawned\n' +
+        '                      by Claude Code, Cursor, Windsurf, Zed, etc.)\n' +
+        '  otwa-mcp --version  Print version and exit\n' +
+        '  otwa-mcp --help     Show this help\n' +
+        '\n' +
+        'Environment:\n' +
+        '  OTWA_API_KEY        Required. Generate at https://otwa.cloud/dashboard/settings/api-keys\n' +
+        '  OTWA_API_BASE       Optional. Default https://api.otwa.cloud\n' +
+        '  OTWA_TELEMETRY      Optional. Set to 1 to send anonymous usage pings.\n' +
+        '\n' +
+        'Docs: https://otwa.cloud/docs/mcp\n');
+}
+main().catch((err) => {
+    const msg = err instanceof Error ? err.stack || err.message : String(err);
+    process.stderr.write(`[otwa-mcp] fatal: ${msg}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AACA,wEAAiF;AACjF,qCAAwC;AACxC,oCAAqC;AACrC,4CAA6C;AAE7C,KAAK,UAAU,IAAI;IACjB,2EAA2E;IAC3E,gEAAgE;IAChE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,IAAA,qBAAW,GAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,SAAS,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,aAAO,GAAE,CAAC;IAClB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,sEAAsE;QACtE,8CAA8C;QAC9C,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,GAAG,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,+BAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;QACvD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,MAAM,IAAI,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,GAAG,GAAG,IAAA,qBAAW,GAAE,CAAC;IAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,IAAI;QAC5B,IAAI;QACJ,0DAA0D;QAC1D,IAAI;QACJ,UAAU;QACV,+EAA+E;QAC/E,sEAAsE;QACtE,gDAAgD;QAChD,wCAAwC;QACxC,IAAI;QACJ,gBAAgB;QAChB,8FAA8F;QAC9F,kEAAkE;QAClE,2EAA2E;QAC3E,IAAI;QACJ,qCAAqC,CACxC,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/server.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createServer = createServer;
+const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
+const http_1 = require("./client/http");
+const _register_1 = require("./tools/_register");
+const version_1 = require("./util/version");
+function createServer(env) {
+    const pkg = (0, version_1.packageInfo)();
+    const server = new mcp_js_1.McpServer({
+        name: pkg.name,
+        version: pkg.version,
+    });
+    const client = new http_1.OtwaClient({
+        apiKey: env.apiKey,
+        apiBase: env.apiBase,
+    });
+    (0, _register_1.registerAllTools)(server, client);
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";;AAMA,oCAcC;AApBD,oEAAoE;AACpE,wCAA2C;AAC3C,iDAAqD;AACrD,4CAA6C;AAG7C,SAAgB,YAAY,CAAC,GAAY;IACvC,MAAM,GAAG,GAAG,IAAA,qBAAW,GAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC;QAC3B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,iBAAU,CAAC;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC,CAAC;IAEH,IAAA,4BAAgB,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/tools/_helpers.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.jsonResult = jsonResult;
+exports.textResult = textResult;
+exports.safeHandler = safeHandler;
+const errors_1 = require("../client/errors");
+/** Format a JSON value as a single text-block tool result. The LLM gets clean
+ *  pretty-printed JSON it can reason about and quote back to the user. */
+function jsonResult(value) {
+    return {
+        content: [
+            {
+                type: 'text',
+                text: JSON.stringify(value, null, 2),
+            },
+        ],
+    };
+}
+/** Format a plain prose response (no JSON). Used for narrative tools like
+ *  SSO link issuance where dumping JSON would just confuse the model. */
+function textResult(text) {
+    return { content: [{ type: 'text', text }] };
+}
+/** Wrap a tool handler so any throw becomes a structured error result instead
+ *  of crashing the transport. MCP clients display these to the user and let
+ *  the model see the error message and recover. */
+function safeHandler(fn) {
+    return async (args) => {
+        try {
+            return await fn(args);
+        }
+        catch (err) {
+            const message = err instanceof errors_1.OtwaApiError
+                ? err.message
+                : err instanceof Error
+                    ? err.message
+                    : String(err);
+            return {
+                isError: true,
+                content: [{ type: 'text', text: message }],
+            };
+        }
+    };
+}
+//# sourceMappingURL=_helpers.js.map

package/dist/tools/_helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_helpers.js","sourceRoot":"","sources":["../../src/tools/_helpers.ts"],"names":[],"mappings":";;AAKA,gCASC;AAID,gCAEC;AAKD,kCAmBC;AA3CD,6CAAgD;AAEhD;0EAC0E;AAC1E,SAAgB,UAAU,CAAC,KAAc;IACvC,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;aACrC;SACF;KACF,CAAC;AACJ,CAAC;AAED;yEACyE;AACzE,SAAgB,UAAU,CAAC,IAAY;IACrC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED;;mDAEmD;AACnD,SAAgB,WAAW,CACzB,EAA4C;IAE5C,OAAO,KAAK,EAAE,IAAW,EAAE,EAAE;QAC3B,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GACX,GAAG,YAAY,qBAAY;gBACzB,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,GAAG,YAAY,KAAK;oBACpB,CAAC,CAAC,GAAG,CAAC,OAAO;oBACb,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;aAC3C,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/_register.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAllTools = registerAllTools;
+const account_1 = require("./account");
+const billing_1 = require("./billing");
+const catalog_1 = require("./catalog");
+const networking_1 = require("./networking");
+const servers_1 = require("./servers");
+const webhooks_1 = require("./webhooks");
+function registerAllTools(server, client) {
+    (0, account_1.registerAccountTools)(server, client);
+    (0, catalog_1.registerCatalogTools)(server, client);
+    (0, servers_1.registerServerTools)(server, client);
+    (0, networking_1.registerNetworkingTools)(server, client);
+    (0, billing_1.registerBillingTools)(server, client);
+    (0, webhooks_1.registerWebhookTools)(server, client);
+}
+//# sourceMappingURL=_register.js.map

package/dist/tools/_register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_register.js","sourceRoot":"","sources":["../../src/tools/_register.ts"],"names":[],"mappings":";;AASA,4CAOC;AAdD,uCAAiD;AACjD,uCAAiD;AACjD,uCAAiD;AACjD,6CAAuD;AACvD,uCAAgD;AAChD,yCAAkD;AAElD,SAAgB,gBAAgB,CAAC,MAAiB,EAAE,MAAkB;IACpE,IAAA,8BAAoB,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,IAAA,8BAAoB,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,IAAA,6BAAmB,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,IAAA,oCAAuB,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,IAAA,8BAAoB,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,IAAA,+BAAoB,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC"}

package/dist/tools/account.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAccountTools = registerAccountTools;
+const _helpers_1 = require("./_helpers");
+function registerAccountTools(server, client) {
+    server.registerTool('otwa_account', {
+        title: 'Get otwa.cloud account info',
+        description: 'Returns the authenticated user account: id, email, name, balance, tier, signup date. ' +
+            'Call this first to confirm which account the current API key belongs to before any other operation.',
+        inputSchema: {},
+    }, (0, _helpers_1.safeHandler)(async () => {
+        const account = await client.request('/v1/account');
+        return (0, _helpers_1.jsonResult)(account);
+    }));
+}
+//# sourceMappingURL=account.js.map

package/dist/tools/account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.js","sourceRoot":"","sources":["../../src/tools/account.ts"],"names":[],"mappings":";;AAKA,oDAeC;AAjBD,yCAAqD;AAErD,SAAgB,oBAAoB,CAAC,MAAiB,EAAE,MAAkB;IACxE,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,6BAA6B;QACpC,WAAW,EACT,uFAAuF;YACvF,qGAAqG;QACvG,WAAW,EAAE,EAAE;KAChB,EACD,IAAA,sBAAW,EAAC,KAAK,IAAI,EAAE;QACrB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAkB,aAAa,CAAC,CAAC;QACrE,OAAO,IAAA,qBAAU,EAAC,OAAO,CAAC,CAAC;IAC7B,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/tools/billing.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerBillingTools = registerBillingTools;
+const zod_1 = require("zod");
+const _helpers_1 = require("./_helpers");
+function registerBillingTools(server, client) {
+    server.registerTool('otwa_list_invoices', {
+        title: 'List billing invoices',
+        description: 'Returns paged invoice history (most recent first). Each entry has id, invoiceNumber, total, ' +
+            'status (paid/open/void), and creation date. Use otwa_get_invoice for line-item detail.',
+        inputSchema: {
+            page: zod_1.z.number().int().min(1).optional().describe('Page number, default 1.'),
+            limit: zod_1.z.number().int().min(1).max(100).optional().describe('Page size, default 20, max 100.'),
+        },
+    }, (0, _helpers_1.safeHandler)(async ({ page, limit }) => {
+        const res = await client.request('/v1/billing/invoices', {
+            query: { page, limit },
+        });
+        return (0, _helpers_1.jsonResult)(res);
+    }));
+    server.registerTool('otwa_get_invoice', {
+        title: 'Get one invoice in detail',
+        description: 'Returns the full invoice including line items, taxes, and payment status.',
+        inputSchema: {
+            id: zod_1.z.string().describe('Invoice UUID. Source: otwa_list_invoices.'),
+        },
+    }, (0, _helpers_1.safeHandler)(async ({ id }) => {
+        const res = await client.request(`/v1/billing/invoices/${encodeURIComponent(id)}`);
+        return (0, _helpers_1.jsonResult)(res);
+    }));
+    server.registerTool('otwa_list_transactions', {
+        title: 'List billing transactions (top-ups, charges, refunds)',
+        description: 'Returns paged transaction history. Distinct from invoices — invoices are the document, ' +
+            'transactions are the money movements (Stripe charges, crypto deposits, balance adjustments).',
+        inputSchema: {
+            page: zod_1.z.number().int().min(1).optional().describe('Page number, default 1.'),
+            limit: zod_1.z.number().int().min(1).max(100).optional().describe('Page size, default 20, max 100.'),
+        },
+    }, (0, _helpers_1.safeHandler)(async ({ page, limit }) => {
+        const res = await client.request('/v1/billing/transactions', { query: { page, limit } });
+        return (0, _helpers_1.jsonResult)(res);
+    }));
+    server.registerTool('otwa_get_wallet_balance', {
+        title: 'Get crypto wallet balances + deposit addresses',
+        description: 'Returns the on-chain wallets the account holds, with chain, address, and balance. The address ' +
+            'can be shared with the user to top up. Read-only — does not create new addresses.',
+        inputSchema: {},
+    }, (0, _helpers_1.safeHandler)(async () => {
+        const res = await client.request('/v1/wallet');
+        return (0, _helpers_1.jsonResult)(res);
+    }));
+}
+//# sourceMappingURL=billing.js.map

package/dist/tools/billing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.js","sourceRoot":"","sources":["../../src/tools/billing.ts"],"names":[],"mappings":";;AAMA,oDAoEC;AAzED,6BAAwB;AAGxB,yCAAqD;AAErD,SAAgB,oBAAoB,CAAC,MAAiB,EAAE,MAAkB;IACxE,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EACT,8FAA8F;YAC9F,wFAAwF;QAC1F,WAAW,EAAE;YACX,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;YAC5E,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;SAC/F;KACF,EACD,IAAA,sBAAW,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACpC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAmB,sBAAsB,EAAE;YACzE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACvB,CAAC,CAAC;QACH,OAAO,IAAA,qBAAU,EAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,2EAA2E;QACxF,WAAW,EAAE;YACX,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;SACrE;KACF,EACD,IAAA,sBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QAC3B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAiB,wBAAwB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACnG,OAAO,IAAA,qBAAU,EAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;QACE,KAAK,EAAE,uDAAuD;QAC9D,WAAW,EACT,yFAAyF;YACzF,8FAA8F;QAChG,WAAW,EAAE;YACX,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;YAC5E,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;SAC/F;KACF,EACD,IAAA,sBAAW,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACpC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACzF,OAAO,IAAA,qBAAU,EAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,yBAAyB,EACzB;QACE,KAAK,EAAE,gDAAgD;QACvD,WAAW,EACT,gGAAgG;YAChG,mFAAmF;QACrF,WAAW,EAAE,EAAE;KAChB,EACD,IAAA,sBAAW,EAAC,KAAK,IAAI,EAAE;QACrB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAmB,YAAY,CAAC,CAAC;QACjE,OAAO,IAAA,qBAAU,EAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/tools/catalog.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerCatalogTools = registerCatalogTools;
+const _helpers_1 = require("./_helpers");
+function registerCatalogTools(server, client) {
+    server.registerTool('otwa_list_products', {
+        title: 'List server products (plans / sizes)',
+        description: 'Returns every server plan available to the current account, including CPU, RAM, disk, bandwidth, ' +
+            'monthly price, and the productId UUID required to call otwa_create_server. Resellers see wholesale prices.',
+        inputSchema: {},
+    }, (0, _helpers_1.safeHandler)(async () => {
+        const products = await client.request('/v1/products');
+        return (0, _helpers_1.jsonResult)(products);
+    }));
+    server.registerTool('otwa_list_regions', {
+        title: 'List available regions',
+        description: 'Returns the list of regions where new servers can be deployed. Use the `slug` value as the ' +
+            '`region` argument to otwa_create_server. Most accounts can omit region — the platform picks one ' +
+            "based on product availability — but specifying a region pins the deploy location.",
+        inputSchema: {},
+    }, (0, _helpers_1.safeHandler)(async () => {
+        const regions = await client.request('/v1/regions');
+        return (0, _helpers_1.jsonResult)(regions);
+    }));
+    server.registerTool('otwa_list_os_templates', {
+        title: 'List operating-system templates',
+        description: 'Returns the catalogue of OS images available for new servers and reinstalls. Each entry has ' +
+            '`id` (use as `osTemplate`), `family` (use as `os` — Ubuntu, Debian, Rocky, etc.) and `label`. ' +
+            'Always call this before otwa_create_server so you pick a real template id, never a guessed string.',
+        inputSchema: {},
+    }, (0, _helpers_1.safeHandler)(async () => {
+        const templates = await client.request('/v1/os-templates');
+        return (0, _helpers_1.jsonResult)(templates);
+    }));
+}
+//# sourceMappingURL=catalog.js.map

package/dist/tools/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/tools/catalog.ts"],"names":[],"mappings":";;AAKA,oDA+CC;AAjDD,yCAAqD;AAErD,SAAgB,oBAAoB,CAAC,MAAiB,EAAE,MAAkB;IACxE,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EACT,mGAAmG;YACnG,4GAA4G;QAC9G,WAAW,EAAE,EAAE;KAChB,EACD,IAAA,sBAAW,EAAC,KAAK,IAAI,EAAE;QACrB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAoB,cAAc,CAAC,CAAC;QACzE,OAAO,IAAA,qBAAU,EAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,6FAA6F;YAC7F,kGAAkG;YAClG,mFAAmF;QACrF,WAAW,EAAE,EAAE;KAChB,EACD,IAAA,sBAAW,EAAC,KAAK,IAAI,EAAE;QACrB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAmB,aAAa,CAAC,CAAC;QACtE,OAAO,IAAA,qBAAU,EAAC,OAAO,CAAC,CAAC;IAC7B,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;QACE,KAAK,EAAE,iCAAiC;QACxC,WAAW,EACT,8FAA8F;YAC9F,gGAAgG;YAChG,oGAAoG;QACtG,WAAW,EAAE,EAAE;KAChB,EACD,IAAA,sBAAW,EAAC,KAAK,IAAI,EAAE;QACrB,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CAAuB,kBAAkB,CAAC,CAAC;QACjF,OAAO,IAAA,qBAAU,EAAC,SAAS,CAAC,CAAC;IAC/B,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/tools/networking.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerNetworkingTools = registerNetworkingTools;
+const zod_1 = require("zod");
+const _helpers_1 = require("./_helpers");
+const HOSTNAME_REGEX = /^[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?(\.[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?)*$/;
+function registerNetworkingTools(server, client) {
+    server.registerTool('otwa_list_server_ips', {
+        title: 'List all IPs assigned to a server',
+        description: 'Returns every IP attached to a server (primary + additional), with gateway, netmask, CIDR, ' +
+            'and current PTR (reverse DNS).',
+        inputSchema: {
+            id: zod_1.z.string().describe('Server UUID.'),
+        },
+    }, (0, _helpers_1.safeHandler)(async ({ id }) => {
+        const ips = await client.request(`/v1/servers/${encodeURIComponent(id)}/ips`);
+        return (0, _helpers_1.jsonResult)(ips);
+    }));
+    server.registerTool('otwa_set_ptr', {
+        title: 'Set the PTR record (reverse DNS) for a server IP',
+        description: 'Sets the reverse DNS hostname for an IP attached to a server. Changes propagate to PowerDNS ' +
+            'within seconds. Useful for mail servers and anything that needs forward-confirmed reverse DNS.',
+        inputSchema: {
+            id: zod_1.z.string().describe('Server UUID.'),
+            ip: zod_1.z.string().describe('IPv4 address. Must already be attached to this server.'),
+            hostname: zod_1.z
+                .string()
+                .max(253)
+                .regex(HOSTNAME_REGEX, 'Hostname must be a valid FQDN (letters/digits/hyphens/dots).')
+                .describe('FQDN to publish — e.g. "mail.example.com". Should resolve forward to the same IP.'),
+        },
+    }, (0, _helpers_1.safeHandler)(async ({ id, ip, hostname }) => {
+        const res = await client.request(`/v1/servers/${encodeURIComponent(id)}/ips/${encodeURIComponent(ip)}/ptr`, { method: 'PUT', body: { hostname } });
+        return (0, _helpers_1.jsonResult)(res);
+    }));
+    server.registerTool('otwa_delete_ptr', {
+        title: 'Remove the PTR record for a server IP',
+        description: 'Removes the reverse DNS hostname for an IP, returning it to the otwa.cloud default.',
+        inputSchema: {
+            id: zod_1.z.string().describe('Server UUID.'),
+            ip: zod_1.z.string().describe('IPv4 address.'),
+        },
+    }, (0, _helpers_1.safeHandler)(async ({ id, ip }) => {
+        const res = await client.request(`/v1/servers/${encodeURIComponent(id)}/ips/${encodeURIComponent(ip)}/ptr`, { method: 'DELETE' });
+        return (0, _helpers_1.jsonResult)(res);
+    }));
+}
+//# sourceMappingURL=networking.js.map

package/dist/tools/networking.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"networking.js","sourceRoot":"","sources":["../../src/tools/networking.ts"],"names":[],"mappings":";;AAOA,0DA8DC;AApED,6BAAwB;AAExB,yCAAqD;AAErD,MAAM,cAAc,GAAG,qFAAqF,CAAC;AAE7G,SAAgB,uBAAuB,CAAC,MAAiB,EAAE,MAAkB;IAC3E,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EACT,6FAA6F;YAC7F,gCAAgC;QAClC,WAAW,EAAE;YACX,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;SACxC;KACF,EACD,IAAA,sBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QAC3B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,eAAe,kBAAkB,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAC9E,OAAO,IAAA,qBAAU,EAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,kDAAkD;QACzD,WAAW,EACT,8FAA8F;YAC9F,gGAAgG;QAClG,WAAW,EAAE;YACX,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;YACvC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;YACjF,QAAQ,EAAE,OAAC;iBACR,MAAM,EAAE;iBACR,GAAG,CAAC,GAAG,CAAC;iBACR,KAAK,CAAC,cAAc,EAAE,8DAA8D,CAAC;iBACrF,QAAQ,CAAC,mFAAmF,CAAC;SACjG;KACF,EACD,IAAA,sBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QACzC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAC9B,eAAe,kBAAkB,CAAC,EAAE,CAAC,QAAQ,kBAAkB,CAAC,EAAE,CAAC,MAAM,EACzE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,CACtC,CAAC;QACF,OAAO,IAAA,qBAAU,EAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,uCAAuC;QAC9C,WAAW,EAAE,qFAAqF;QAClG,WAAW,EAAE;YACX,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;YACvC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;SACzC;KACF,EACD,IAAA,sBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QAC/B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAC9B,eAAe,kBAAkB,CAAC,EAAE,CAAC,QAAQ,kBAAkB,CAAC,EAAE,CAAC,MAAM,EACzE,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;QACF,OAAO,IAAA,qBAAU,EAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/tools/servers.js

@@ -0,0 +1,246 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerServerTools = registerServerTools;
+const zod_1 = require("zod");
+const errors_1 = require("../client/errors");
+const confirm_1 = require("../guards/confirm");
+const _helpers_1 = require("./_helpers");
+const HOSTNAME_REGEX = /^[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?$/;
+const LABEL_REGEX = /^[a-zA-Z0-9][a-zA-Z0-9 _-]*$/;
+function registerServerTools(server, client) {
+    // ── Reads ───────────────────────────────────────────────────────────────
+    server.registerTool('otwa_list_servers', {
+        title: 'List all servers on this account',
+        description: 'Returns every server the account owns, with id, label, status, region, primary IP, and any ' +
+            'additional IPs. Use the `id` field as input to per-server tools.',
+        inputSchema: {},
+    }, (0, _helpers_1.safeHandler)(async () => {
+        const servers = await client.request('/v1/servers');
+        return (0, _helpers_1.jsonResult)(servers);
+    }));
+    server.registerTool('otwa_get_server', {
+        title: 'Get a server by id',
+        description: 'Returns full detail for a server: status, specs (vCPU/RAM/disk/bandwidth), region, OS, primary ' +
+            'IP, gateway, and any additional IPs. Always call this before any destructive operation so the ' +
+            'user can confirm against the current label.',
+        inputSchema: {
+            id: zod_1.z.string().describe('Server UUID. Retrieve via otwa_list_servers.'),
+        },
+    }, (0, _helpers_1.safeHandler)(async ({ id }) => {
+        const server = await client.request(`/v1/servers/${encodeURIComponent(id)}`);
+        return (0, _helpers_1.jsonResult)(server);
+    }));
+    server.registerTool('otwa_get_server_credentials', {
+        title: 'Get current root credentials for a server',
+        description: 'Returns the SSH username, root password, IP and port for a server. SENSITIVE — never paste the ' +
+            'password into a chat transcript; instead summarise that credentials are available and offer to ' +
+            'open the dashboard via otwa_get_dashboard_sso.',
+        inputSchema: {
+            id: zod_1.z.string().describe('Server UUID.'),
+        },
+    }, (0, _helpers_1.safeHandler)(async ({ id }) => {
+        const creds = await client.request(`/v1/servers/${encodeURIComponent(id)}/credentials`);
+        return (0, _helpers_1.jsonResult)(creds);
+    }));
+    server.registerTool('otwa_get_server_stats', {
+        title: 'Get live VM stats for a server',
+        description: 'Returns the latest CPU / RAM / disk / network metrics for a server. Numbers come from vSphere ' +
+            'and are seconds-fresh.',
+        inputSchema: {
+            id: zod_1.z.string().describe('Server UUID.'),
+        },
+    }, (0, _helpers_1.safeHandler)(async ({ id }) => {
+        const stats = await client.request(`/v1/servers/${encodeURIComponent(id)}/stats`);
+        return (0, _helpers_1.jsonResult)(stats);
+    }));
+    // ── Create ──────────────────────────────────────────────────────────────
+    server.registerTool('otwa_create_server', {
+        title: 'Provision a new server',
+        description: 'Creates and provisions a new server on otwa.cloud. The customer is billed immediately for the ' +
+            'first month — quote the monthly price from otwa_list_products and get explicit confirmation ' +
+            'before calling. Always call otwa_list_products + otwa_list_os_templates first so productId, ' +
+            '`os` and `osTemplate` come from the real catalogue, never guessed.',
+        inputSchema: {
+            productId: zod_1.z
+                .string()
+                .uuid()
+                .describe('Product UUID. Required. Source: otwa_list_products → field `id`.'),
+            os: zod_1.z
+                .string()
+                .min(1)
+                .max(64)
+                .describe('OS family slug — e.g. "ubuntu", "debian", "rocky". Source: otwa_list_os_templates → `family`.'),
+            osTemplate: zod_1.z
+                .string()
+                .min(1)
+                .max(128)
+                .describe('Specific OS template id — e.g. "ubuntu-22.04-x64". Source: otwa_list_os_templates → `id`.'),
+            region: zod_1.z
+                .string()
+                .max(64)
+                .optional()
+                .describe('Optional region slug. Source: otwa_list_regions → `slug`. Omit to let the platform pick.'),
+            label: zod_1.z
+                .string()
+                .min(1)
+                .max(64)
+                .regex(LABEL_REGEX, 'Label must start with alphanumeric and contain only letters/numbers/spaces/-/_')
+                .optional()
+                .describe('Human-readable label shown in the dashboard, e.g. "prod-api-01".'),
+            hostname: zod_1.z
+                .string()
+                .min(1)
+                .max(63)
+                .regex(HOSTNAME_REGEX, 'Hostname must be DNS-compatible (alphanumeric and hyphens, no leading/trailing hyphen).')
+                .optional()
+                .describe('Optional DNS-compatible hostname (≤63 chars, no underscores). Defaults to a generated value.'),
+            addons: zod_1.z
+                .array(zod_1.z.string())
+                .optional()
+                .describe('Optional list of addon ids — e.g. extra IPs, backups. Look these up via otwa_list_addons-equivalent later.'),
+        },
+    }, (0, _helpers_1.safeHandler)(async (args) => {
+        const created = await client.request('/v1/servers', {
+            method: 'POST',
+            body: args,
+            idempotent: true,
+            timeoutMs: 90_000,
+        });
+        return (0, _helpers_1.jsonResult)(created);
+    }));
+    // ── Updates ─────────────────────────────────────────────────────────────
+    server.registerTool('otwa_rename_server', {
+        title: 'Rename a server',
+        description: 'Changes the human-readable label of a server. Cosmetic — does not affect hostname or DNS.',
+        inputSchema: {
+            id: zod_1.z.string().describe('Server UUID.'),
+            label: zod_1.z
+                .string()
+                .min(1)
+                .max(64)
+                .regex(LABEL_REGEX, 'Label must start with alphanumeric and contain only letters/numbers/spaces/-/_'),
+        },
+    }, (0, _helpers_1.safeHandler)(async ({ id, label }) => {
+        const res = await client.request(`/v1/servers/${encodeURIComponent(id)}/label`, {
+            method: 'PATCH',
+            body: { label },
+        });
+        return (0, _helpers_1.jsonResult)(res);
+    }));
+    server.registerTool('otwa_power_server', {
+        title: 'Power on / off / reboot a server',
+        description: 'Changes the power state of a server. `start` is safe; `stop` is a hard power-off (no clean ' +
+            "shutdown — the guest OS isn't signalled, the VM is killed); `reboot` is a hard reset. " +
+            'For `stop` and `reboot`, confirm with the user first because in-flight writes can be lost.',
+        inputSchema: {
+            id: zod_1.z.string().describe('Server UUID.'),
+            action: zod_1.z
+                .enum(['start', 'stop', 'reboot'])
+                .describe('Power action: start | stop | reboot.'),
+            confirm: zod_1.z
+                .boolean()
+                .optional()
+                .describe('Required `true` for stop/reboot. Confirms the user has been warned about possible data loss.'),
+        },
+    }, (0, _helpers_1.safeHandler)(async ({ id, action, confirm }) => {
+        if ((action === 'stop' || action === 'reboot') && confirm !== true) {
+            throw new errors_1.OtwaApiError(`The "${action}" action is a hard ${action === 'stop' ? 'power-off' : 'reset'} and may lose in-flight writes. ` +
+                'Re-call this tool with `confirm: true` once the user has explicitly approved it.', 400, 'confirmation_required');
+        }
+        const res = await client.request(`/v1/servers/${encodeURIComponent(id)}/power/${encodeURIComponent(action)}`, { method: 'POST' });
+        return (0, _helpers_1.jsonResult)(res);
+    }));
+    server.registerTool('otwa_reset_server_password', {
+        title: 'Reset a server root password',
+        description: 'Generates a new root password and pushes it into the VM via vSphere guest ops. The new password ' +
+            'is returned in the response — SENSITIVE, summarise rather than echoing into the chat. ' +
+            'Existing SSH sessions are not killed, but anyone using the old password is locked out.',
+        inputSchema: {
+            id: zod_1.z.string().describe('Server UUID.'),
+            ...confirm_1.mediumConfirm,
+        },
+    }, (0, _helpers_1.safeHandler)(async ({ id }) => {
+        const res = await client.request(`/v1/servers/${encodeURIComponent(id)}/password-reset`, {
+            method: 'POST',
+            timeoutMs: 60_000,
+        });
+        return (0, _helpers_1.jsonResult)(res);
+    }));
+    // ── Destructive ─────────────────────────────────────────────────────────
+    server.registerTool('otwa_reinstall_server', {
+        title: 'Reinstall a server with a new OS',
+        description: 'Wipes the disk and rebuilds the server from a different OS template. PRESERVES id, label, ' +
+            'region, IP and addons; DESTROYS everything on disk. Costs nothing. Requires the API key to ' +
+            'carry the `servers:destroy` scope.\n\n' +
+            'SAFETY: Before calling, (1) call otwa_get_server and show the user the current label and IP, ' +
+            '(2) explicitly tell them the disk will be wiped, (3) wait for confirmation in chat.',
+        inputSchema: {
+            id: zod_1.z.string().describe('Server UUID.'),
+            os: zod_1.z.string().min(1).describe('Target OS family slug from otwa_list_os_templates.'),
+            osTemplate: zod_1.z.string().min(1).describe('Target OS template id from otwa_list_os_templates.'),
+            ...confirm_1.destructiveConfirm,
+        },
+    }, (0, _helpers_1.safeHandler)(async ({ id, os, osTemplate }) => {
+        const res = await client.request(`/v1/servers/${encodeURIComponent(id)}/reinstall`, {
+            method: 'POST',
+            body: { os, osTemplate },
+            idempotent: true,
+            timeoutMs: 90_000,
+        });
+        return (0, _helpers_1.jsonResult)(res);
+    }));
+    server.registerTool('otwa_destroy_server', {
+        title: 'Permanently destroy a server',
+        description: 'Terminates a server permanently. Disk is wiped, IPs are released, billing stops. CANNOT BE ' +
+            'UNDONE. Requires the API key to carry the `servers:destroy` scope.\n\n' +
+            'SAFETY: Before calling, (1) call otwa_get_server and show the user the current label, IP and ' +
+            'specs, (2) wait for explicit confirmation in chat, (3) pass `expectedLabel` matching the ' +
+            'current label as a typo-guard. If labels differ, the call will be rejected.',
+        inputSchema: {
+            id: zod_1.z.string().describe('Server UUID.'),
+            expectedLabel: zod_1.z
+                .string()
+                .describe("The server's CURRENT label (from otwa_get_server). The call fails if this does not match — " +
+                'a typo-guard against destroying the wrong server.'),
+            ...confirm_1.destructiveConfirm,
+        },
+    }, (0, _helpers_1.safeHandler)(async ({ id, expectedLabel }) => {
+        const current = await client.request(`/v1/servers/${encodeURIComponent(id)}`);
+        const actualLabel = current.label || '';
+        if (actualLabel.trim() !== expectedLabel.trim()) {
+            throw new errors_1.OtwaApiError(`Refusing to destroy server ${id}: expectedLabel "${expectedLabel}" does not match the ` +
+                `current label "${actualLabel}". Re-fetch via otwa_get_server, confirm with the user, ` +
+                'and call again with the correct expectedLabel.', 400, 'label_mismatch');
+        }
+        const res = await client.request(`/v1/servers/${encodeURIComponent(id)}`, {
+            method: 'DELETE',
+        });
+        return (0, _helpers_1.jsonResult)(res);
+    }));
+    // ── SSO (handoff to dashboard) ──────────────────────────────────────────
+    server.registerTool('otwa_get_dashboard_sso', {
+        title: 'Issue a 5-minute SSO link into the otwa.cloud dashboard',
+        description: 'Returns a short-lived URL that signs the user into the otwa.cloud dashboard, optionally to a ' +
+            "specific path. Use this to hand off to the web UI for anything the MCP doesn't expose — noVNC " +
+            'console, billing top-up, advanced settings.',
+        inputSchema: {
+            id: zod_1.z
+                .string()
+                .optional()
+                .describe('Optional server UUID. If provided, lands on /dashboard/servers/<id>.'),
+            next: zod_1.z
+                .string()
+                .optional()
+                .describe('Optional dashboard path to land on, e.g. "/dashboard/billing". Must start with "/".'),
+        },
+    }, (0, _helpers_1.safeHandler)(async ({ id, next }) => {
+        const path = id ? `/v1/servers/${encodeURIComponent(id)}/sso` : '/v1/sso';
+        const res = await client.request(path, {
+            method: 'POST',
+            body: next ? { next } : {},
+        });
+        return (0, _helpers_1.textResult)(`Dashboard SSO link (valid ${res.expiresIn} seconds): ${res.url}\n\n` +
+            'Share this URL with the user; it auto-logs them in. Do not store or reuse it — it expires.');
+    }));
+}
+//# sourceMappingURL=servers.js.map

package/dist/tools/servers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"servers.js","sourceRoot":"","sources":["../../src/tools/servers.ts"],"names":[],"mappings":";;AAgBA,kDA4TC;AA3UD,6BAAwB;AAExB,6CAAgD;AAOhD,+CAAsE;AACtE,yCAAiE;AAEjE,MAAM,cAAc,GAAG,0CAA0C,CAAC;AAClE,MAAM,WAAW,GAAG,8BAA8B,CAAC;AAEnD,SAAgB,mBAAmB,CAAC,MAAiB,EAAE,MAAkB;IACvE,2EAA2E;IAC3E,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,kCAAkC;QACzC,WAAW,EACT,6FAA6F;YAC7F,kEAAkE;QACpE,WAAW,EAAE,EAAE;KAChB,EACD,IAAA,sBAAW,EAAC,KAAK,IAAI,EAAE;QACrB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAkB,aAAa,CAAC,CAAC;QACrE,OAAO,IAAA,qBAAU,EAAC,OAAO,CAAC,CAAC;IAC7B,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EACT,iGAAiG;YACjG,gGAAgG;YAChG,6CAA6C;QAC/C,WAAW,EAAE;YACX,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;SACxE;KACF,EACD,IAAA,sBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAe,eAAe,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3F,OAAO,IAAA,qBAAU,EAAC,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,6BAA6B,EAC7B;QACE,KAAK,EAAE,2CAA2C;QAClD,WAAW,EACT,iGAAiG;YACjG,iGAAiG;YACjG,gDAAgD;QAClD,WAAW,EAAE;YACX,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;SACxC;KACF,EACD,IAAA,sBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAChC,eAAe,kBAAkB,CAAC,EAAE,CAAC,cAAc,CACpD,CAAC;QACF,OAAO,IAAA,qBAAU,EAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;QACE,KAAK,EAAE,gCAAgC;QACvC,WAAW,EACT,gGAAgG;YAChG,wBAAwB;QAC1B,WAAW,EAAE;YACX,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;SACxC;KACF,EACD,IAAA,sBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,eAAe,kBAAkB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QAClF,OAAO,IAAA,qBAAU,EAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CACH,CAAC;IAEF,2EAA2E;IAC3E,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,gGAAgG;YAChG,8FAA8F;YAC9F,8FAA8F;YAC9F,oEAAoE;QACtE,WAAW,EAAE;YACX,SAAS,EAAE,OAAC;iBACT,MAAM,EAAE;iBACR,IAAI,EAAE;iBACN,QAAQ,CAAC,kEAAkE,CAAC;YAC/E,EAAE,EAAE,OAAC;iBACF,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,EAAE,CAAC;iBACP,QAAQ,CAAC,+FAA+F,CAAC;YAC5G,UAAU,EAAE,OAAC;iBACV,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,CAAC,2FAA2F,CAAC;YACxG,MAAM,EAAE,OAAC;iBACN,MAAM,EAAE;iBACR,GAAG,CAAC,EAAE,CAAC;iBACP,QAAQ,EAAE;iBACV,QAAQ,CAAC,0FAA0F,CAAC;YACvG,KAAK,EAAE,OAAC;iBACL,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,EAAE,CAAC;iBACP,KAAK,CAAC,WAAW,EAAE,gFAAgF,CAAC;iBACpG,QAAQ,EAAE;iBACV,QAAQ,CAAC,kEAAkE,CAAC;YAC/E,QAAQ,EAAE,OAAC;iBACR,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,EAAE,CAAC;iBACP,KAAK,CAAC,cAAc,EAAE,yFAAyF,CAAC;iBAChH,QAAQ,EAAE;iBACV,QAAQ,CAAC,8FAA8F,CAAC;YAC3G,MAAM,EAAE,OAAC;iBACN,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;iBACjB,QAAQ,EAAE;iBACV,QAAQ,CAAC,4GAA4G,CAAC;SAC1H;KACF,EACD,IAAA,sBAAW,EAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI;YACV,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC;QACH,OAAO,IAAA,qBAAU,EAAC,OAAO,CAAC,CAAC;IAC7B,CAAC,CAAC,CACH,CAAC;IAEF,2EAA2E;IAC3E,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,2FAA2F;QACxG,WAAW,EAAE;YACX,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;YACvC,KAAK,EAAE,OAAC;iBACL,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,EAAE,CAAC;iBACP,KAAK,CAAC,WAAW,EAAE,gFAAgF,CAAC;SACxG;KACF,EACD,IAAA,sBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAClC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,eAAe,kBAAkB,CAAC,EAAE,CAAC,QAAQ,EAAE;YAC9E,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,EAAE,KAAK,EAAE;SAChB,CAAC,CAAC;QACH,OAAO,IAAA,qBAAU,EAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,kCAAkC;QACzC,WAAW,EACT,6FAA6F;YAC7F,wFAAwF;YACxF,4FAA4F;QAC9F,WAAW,EAAE;YACX,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;YACvC,MAAM,EAAE,OAAC;iBACN,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;iBACjC,QAAQ,CAAC,sCAAsC,CAAC;YACnD,OAAO,EAAE,OAAC;iBACP,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,8FAA8F,CAAC;SAC5G;KACF,EACD,IAAA,sBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;QAC5C,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACnE,MAAM,IAAI,qBAAY,CACpB,QAAQ,MAAM,sBAAsB,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,kCAAkC;gBAC7G,kFAAkF,EACpF,GAAG,EACH,uBAAuB,CACxB,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAC9B,eAAe,kBAAkB,CAAC,EAAE,CAAC,UAAU,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAC3E,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAC;QACF,OAAO,IAAA,qBAAU,EAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,4BAA4B,EAC5B;QACE,KAAK,EAAE,8BAA8B;QACrC,WAAW,EACT,kGAAkG;YAClG,wFAAwF;YACxF,wFAAwF;QAC1F,WAAW,EAAE;YACX,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;YACvC,GAAG,uBAAa;SACjB;KACF,EACD,IAAA,sBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QAC3B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,eAAe,kBAAkB,CAAC,EAAE,CAAC,iBAAiB,EAAE;YACvF,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC;QACH,OAAO,IAAA,qBAAU,EAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CACH,CAAC;IAEF,2EAA2E;IAC3E,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;QACE,KAAK,EAAE,kCAAkC;QACzC,WAAW,EACT,4FAA4F;YAC5F,6FAA6F;YAC7F,wCAAwC;YACxC,+FAA+F;YAC/F,qFAAqF;QACvF,WAAW,EAAE;YACX,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;YACvC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC;YACpF,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC;YAC5F,GAAG,4BAAkB;SACtB;KACF,EACD,IAAA,sBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;QAC3C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,eAAe,kBAAkB,CAAC,EAAE,CAAC,YAAY,EAAE;YAClF,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;YACxB,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC;QACH,OAAO,IAAA,qBAAU,EAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;QACE,KAAK,EAAE,8BAA8B;QACrC,WAAW,EACT,6FAA6F;YAC7F,wEAAwE;YACxE,+FAA+F;YAC/F,2FAA2F;YAC3F,6EAA6E;QAC/E,WAAW,EAAE;YACX,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;YACvC,aAAa,EAAE,OAAC;iBACb,MAAM,EAAE;iBACR,QAAQ,CACP,6FAA6F;gBAC3F,mDAAmD,CACtD;YACH,GAAG,4BAAkB;SACtB;KACF,EACD,IAAA,sBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAe,eAAe,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5F,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,qBAAY,CACpB,8BAA8B,EAAE,oBAAoB,aAAa,uBAAuB;gBACtF,kBAAkB,WAAW,0DAA0D;gBACvF,gDAAgD,EAClD,GAAG,EACH,gBAAgB,CACjB,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,eAAe,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE;YACxE,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,OAAO,IAAA,qBAAU,EAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CACH,CAAC;IAEF,2EAA2E;IAC3E,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;QACE,KAAK,EAAE,yDAAyD;QAChE,WAAW,EACT,+FAA+F;YAC/F,gGAAgG;YAChG,6CAA6C;QAC/C,WAAW,EAAE;YACX,EAAE,EAAE,OAAC;iBACF,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,sEAAsE,CAAC;YACnF,IAAI,EAAE,OAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,qFAAqF,CAAC;SACnG;KACF,EACD,IAAA,sBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,eAAe,kBAAkB,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAc,IAAI,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;SAC3B,CAAC,CAAC;QACH,OAAO,IAAA,qBAAU,EACf,6BAA6B,GAAG,CAAC,SAAS,cAAc,GAAG,CAAC,GAAG,MAAM;YACnE,4FAA4F,CAC/F,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}