@reclaimprotocol/agent 0.1.34 → 0.1.36

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (49) hide show
  1. package/README.md +3 -3
  2. package/lib/mcp/api/operations.gen.js +340 -150
  3. package/lib/mcp/instructions.js +3 -3
  4. package/lib/mcp/start.js +8 -7
  5. package/lib/mcp/tools/agent/build.js +2 -0
  6. package/lib/mcp/tools/agent/check-attestor.d.ts +5 -0
  7. package/lib/mcp/tools/agent/check-attestor.js +37 -0
  8. package/lib/mcp/tools/agent/live-view.js +42 -18
  9. package/lib/mcp/tools/agent/proof.d.ts +12 -0
  10. package/lib/mcp/tools/agent/proof.js +32 -0
  11. package/lib/mcp/tools/agent/shared.d.ts +2 -1
  12. package/lib/mcp/tools/agent/shared.js +28 -24
  13. package/lib/mcp/tools/agent/start-integration.js +5 -4
  14. package/lib/mcp/tools/verification/build.d.ts +3 -1
  15. package/lib/mcp/tools/verification/build.js +10 -2
  16. package/lib/mcp/tools/verification/callback-listener.d.ts +51 -0
  17. package/lib/mcp/tools/verification/callback-listener.js +163 -0
  18. package/lib/mcp/tools/verification/index.d.ts +2 -0
  19. package/lib/mcp/tools/verification/index.js +2 -0
  20. package/lib/mcp/tools/verification/proxy-callback-events.d.ts +77 -0
  21. package/lib/mcp/tools/verification/proxy-callback-events.js +383 -0
  22. package/lib/mcp/tools/verification/read-callback-events.d.ts +3 -0
  23. package/lib/mcp/tools/verification/read-callback-events.js +135 -0
  24. package/lib/mcp/tools/verification/result.d.ts +6 -0
  25. package/lib/mcp/tools/verification/result.js +1 -1
  26. package/lib/proof/check-attestor.d.ts +67 -0
  27. package/lib/proof/check-attestor.js +156 -0
  28. package/package.json +2 -2
  29. package/skill/SKILL.builder.md +7 -1
  30. package/skill/SKILL.common.md +21 -9
  31. package/skill/builder-mode.md +25 -12
  32. package/skill/start-integration.md +37 -11
  33. package/skill/verification-client-integration.md +81 -18
  34. package/src/mcp/api/operations.gen.ts +344 -150
  35. package/src/mcp/instructions.ts +3 -3
  36. package/src/mcp/start.ts +9 -7
  37. package/src/mcp/tools/agent/build.ts +2 -0
  38. package/src/mcp/tools/agent/check-attestor.ts +49 -0
  39. package/src/mcp/tools/agent/live-view.ts +42 -18
  40. package/src/mcp/tools/agent/proof.ts +55 -0
  41. package/src/mcp/tools/agent/shared.ts +33 -23
  42. package/src/mcp/tools/agent/start-integration.ts +5 -4
  43. package/src/mcp/tools/verification/build.ts +10 -2
  44. package/src/mcp/tools/verification/callback-listener.ts +203 -0
  45. package/src/mcp/tools/verification/index.ts +2 -0
  46. package/src/mcp/tools/verification/proxy-callback-events.ts +484 -0
  47. package/src/mcp/tools/verification/read-callback-events.ts +160 -0
  48. package/src/mcp/tools/verification/result.ts +1 -1
  49. package/src/proof/check-attestor.ts +209 -0
package/README.md CHANGED
@@ -25,7 +25,7 @@ This package **is** the Reclaim MCP server (bin: `reclaim-mcp-server`). It depen
25
25
  - **Node 20 or later.** Any line works, including non-LTS ones such as 25, but a current LTS line (22 or 24) is recommended.
26
26
  - **A local Chrome, Chromium, or Edge**, used for capture and for the dashboard login.
27
27
  - **Docker** — only for `attach_browser`'s `container` mode, which runs the Reclaim browser runtime (the same image the hosted browser uses) and gives you a link you can send to whoever holds the account. It is the free way to get that link; the hosted remote browser is the other, and it is chargeable. Not needed if you are doing the work yourself. The image is amd64, so Apple Silicon runs it translated. OrbStack handles that itself; Docker Desktop needs Rosetta enabled. `RECLAIM_BROWSER_RUNTIME_IMAGE` overrides the pinned digest.
28
- - **`cloudflared`** — only to share a `container` browser with someone remote. The MCP server does not run or install it: `share_browser_view` returns the command, and the agent runs `cloudflared tunnel --url http://localhost:<port>` itself, so install it yourself first.
28
+ - **`cloudflared`** — only to share a `container` browser with someone remote. The MCP server does not run or install it: `share_browser_view` returns the command, and the developer chooses to run `cloudflared tunnel --url http://localhost:<port>` themselves (recommended) or approve the agent running it. Install it first.
29
29
 
30
30
  The first time you call `run_proof`, the agent downloads the ZK circuit files it needs (about 280 MB), so allow a moment for that first proof. The download is deferred to the first proof rather than run at install time, so the MCP server itself starts immediately.
31
31
 
@@ -120,7 +120,7 @@ These capture/synthesis/proof tools are backend-independent and registered in bo
120
120
  | `create_provider_version_from_capture` | Publish a draft as a new immutable semantic version (patch by default) |
121
121
  | `authenticate_builder` | In old-devtools mode only, sign in to Builder for remote-browser allocation |
122
122
  | `list_builder_organizations` | In old-devtools mode only, list organization ids for a quota-accounted Builder browser |
123
- | `share_browser_view` | Share the `container` browser's own live view with someone elsewhere. Returns the local viewer port and the `cloudflared tunnel` command for the agent to run; call it again with the printed `https://*.trycloudflare.com` URL as `publicUrl` to get the link to relay. Container mode only: a `builder` browser already returns a hosted `liveViewUrl`, and a plain local browser has no view to share |
123
+ | `share_browser_view` | Share the `container` browser's own live view with someone elsewhere. Returns the local viewer port and the `cloudflared tunnel` command; the developer runs it or approves the agent running it; call it again with the printed `https://*.trycloudflare.com` URL as `publicUrl` to get the link to relay. Container mode only: a `builder` browser already returns a hosted `liveViewUrl`, and a plain local browser has no view to share |
124
124
  | `dispose_browser` | Stop captures, disconnect CDP, and immediately release a Builder-hosted browser |
125
125
  | `get_session`, `reset_session` | Session state |
126
126
 
@@ -134,7 +134,7 @@ The MCP server targets one of two backends. An explicit `USE_OLD_DEVTOOLS` setti
134
134
  - `get_me_providers` — list the providers you own (the only provider-listing tool in this mode).
135
135
  - `session_analytics_logs` — the milestone events for a verification session, which show how far it got.
136
136
  - `session_logs` — the log entries the in-app SDK emitted during that session, each with its event type, log level, and logger name. Filter by event type, level, or substring, page with `limit` and `offset`, or set `saveTo` to write every matching entry to an NDJSON file. The backend searches only the last 3 days unless you pass `startTime` and `endTime`, and it deletes entries after 30 days.
137
- - **Builder (default).** Registers the auto-generated HTTP-API tools, including `create_org`, `issue_org_token`, and `create_org_callback_subscription`, plus authentication/credential tools and `get_verification_result`. `issue_credentials` creates a local proof-owner key; `issue_org_token` issues the organization's API secret.
137
+ - **Builder (default).** Registers the auto-generated HTTP-API tools, including `create_org`, `issue_org_token`, and `create_org_callback_subscription`, plus authentication/credential tools, `get_verification_result`, `read_callback_events` (read the org's pull-listener events), `proxy_callback_events` (forward them to a localhost callback route; the pull listener lives only while the MCP server runs), and `check_attestor`. `issue_credentials` creates a local proof-owner key; `issue_org_token` issues the organization's API secret.
138
138
 
139
139
  Relevant env vars: `RECLAIM_OLD_API_URL` (default `https://devapi.reclaimprotocol.org`), `RECLAIM_OLD_API_TOKEN` / `RECLAIM_OLD_ETH_UID` (headless identity), `RECLAIM_OLD_LOGIN_URL` (default `https://dev.reclaimprotocol.org`); builder mode uses `RECLAIM_API_URL` / `RECLAIM_API_TOKEN`.
140
140
 
package/lib/mcp/api/operations.gen.js CHANGED
@@ -1,5 +1,5 @@
1
1
  // AUTO-GENERATED by packages/app/scripts/mcp-tools-gen.ts
2
- // from packages/app/openapi.yaml (spec v0.1.0, source sha256:e2db795ab15c).
2
+ // from packages/app/openapi.yaml (spec v0.1.0, source sha256:96339e8dff91).
3
3
  // The hash catches drift the version misses (a spec can change without a
4
4
  // version bump) — do not remove it as "redundant" with the version.
5
5
  // Run `npm run openapi:gen --workspace=packages/app` to regenerate. Do not edit by hand.
@@ -482,7 +482,7 @@ export const MCP_TOOLS = {
482
482
  annotations: { "openWorldHint": false },
483
483
  },
484
484
  "CreateCallbackSubscription": {
485
- description: "Register a callback subscription\n\nRegisters a destination for verification results on the organization\nthe presented `OrgToken` resolves to. The body is just `callbackUrl`\nand `events`. At least one subscription must exist for the org before a\nverification session can be created. Delivery is scoped by org: terminal\nresults are ECIES-encrypted to the org's eth public key when its\n`canEncryptResult` is enabled (see `PUT /orgs/{orgId}/keypair`), else\ndelivered as plaintext.\n",
485
+ description: "Register a callback subscription\n\nRegisters a destination for verification results on the organization\nthe presented `OrgToken` resolves to. At least one subscription must\nexist for the org before you can create a verification session.\nDelivery is scoped by org: terminal results are ECIES-encrypted to the\norg's eth public key when its `canEncryptResult` is enabled (see\n`PUT /orgs/{orgId}/keypair`), else delivered as plaintext.\n\nTo receive results at a URL, send `callbackUrl` and `events`. Builder\nPOSTs each delivery to that URL.\n\nTo read results without a public URL during local development, send\n`deliveryMode: \"pull\"`. Builder keeps the deliveries and you read them\nwith `GET /verifications/callback-events`. A pull subscription is a\n90-second lease: it receives events and satisfies the session-creation\ncheck only while the lease is unexpired. Send the same request about\nevery 30 seconds to renew it, and call\n`POST /verifications/callback-listener/release` when you stop. Production\nneeds a webhook subscription. An org has at most one pull subscription.\nIf it already exists, Builder renews it and returns it with status 200.\nIf the body includes `events`, they replace the subscription's events;\nif it omits them, the existing events are kept.\n",
486
486
  inputSchema: toZod({
487
487
  "type": "object",
488
488
  "properties": {
@@ -495,83 +495,178 @@ export const MCP_TOOLS = {
495
495
  "properties": {}
496
496
  },
497
497
  "body": {
498
- "type": "object",
499
- "additionalProperties": false,
500
- "description": "Body for `POST /verifications/callback-subscriptions`. The owning organization is resolved from the presented `OrgToken`; delivery is scoped to that org and encrypted to its credential when set.",
501
- "required": [
502
- "callbackUrl",
503
- "events"
504
- ],
505
- "properties": {
506
- "callbackUrl": {
507
- "type": "string",
508
- "pattern": "^https?://",
509
- "description": "Callback URL or template. Supported placeholders are `{{sessionId}}` and top-level scalar context keys.",
510
- "maxLength": 2000
498
+ "description": "Body for `POST /verifications/callback-subscriptions`. The owning organization is resolved from the presented `OrgToken`; delivery is scoped to that org and encrypted to its credential when set. Send `callbackUrl` for a webhook, or `deliveryMode: \"pull\"` for a subscription you read.",
499
+ "oneOf": [
500
+ {
501
+ "type": "object",
502
+ "additionalProperties": false,
503
+ "description": "A subscription that Builder POSTs each delivery to.",
504
+ "required": [
505
+ "callbackUrl",
506
+ "events"
507
+ ],
508
+ "properties": {
509
+ "deliveryMode": {
510
+ "type": "string",
511
+ "description": "Omit it or send `webhook`.",
512
+ "enum": [
513
+ "webhook"
514
+ ]
515
+ },
516
+ "callbackUrl": {
517
+ "type": "string",
518
+ "pattern": "^https?://",
519
+ "description": "Callback URL or template. Supported placeholders are `{{sessionId}}` and top-level scalar context keys.",
520
+ "maxLength": 2000
521
+ },
522
+ "events": {
523
+ "type": "array",
524
+ "minItems": 1,
525
+ "maxItems": 51,
526
+ "items": {
527
+ "type": "string",
528
+ "description": "Canonical Builder lifecycle event. Names use lower snake case; metadata uses camel case. Provider events include providerId, resolvedVersion, and ordinal. Request events also include requestId. New values are additive, so clients must tolerate unknown response values. For field requirements and funnel semantics, see docs/verification-analytics-events.md.",
529
+ "enum": [
530
+ "billing_required",
531
+ "session_pending",
532
+ "verification_client_opened",
533
+ "verification_client_ready",
534
+ "verification_client_warning",
535
+ "verification_client_visibility_shown",
536
+ "verification_client_visibility_hidden",
537
+ "verification_diagnostics_mode_changed",
538
+ "verification_cancelled",
539
+ "consent_viewed",
540
+ "consent_scrolled",
541
+ "consent_agreed",
542
+ "verification_browser_started",
543
+ "verification_browser_ready",
544
+ "verification_browser_reconnect_started",
545
+ "verification_browser_reconnected",
546
+ "verification_browser_failed",
547
+ "verification_provider_started",
548
+ "provider_config",
549
+ "provider_script_log",
550
+ "network_request_observed",
551
+ "verification_page_ready",
552
+ "verification_request_interceptor_ready",
553
+ "verification_provider_completed",
554
+ "auth_required",
555
+ "auth_submitted",
556
+ "auth_challenge_remains",
557
+ "auth_rejected",
558
+ "auth_submission_failed",
559
+ "auth_challenge_completed",
560
+ "auth_gate_not_detected",
561
+ "authenticated",
562
+ "user_interaction_started",
563
+ "user_input_started",
564
+ "user_interaction_summary",
565
+ "verification_inactivity_detected",
566
+ "request_matched",
567
+ "request_match_failed",
568
+ "request_claim_parameters_captured",
569
+ "request_claim_created",
570
+ "request_claim_retrying",
571
+ "request_claim_completed",
572
+ "request_claim_rejected",
573
+ "request_claim_failed",
574
+ "verification_proofs_completed",
575
+ "verification_result_submitting",
576
+ "verification_result_submission_failed",
577
+ "verification_success",
578
+ "verification_rejected",
579
+ "verification_error",
580
+ "session_expired"
581
+ ]
582
+ }
583
+ }
584
+ }
511
585
  },
512
- "events": {
513
- "type": "array",
514
- "minItems": 1,
515
- "maxItems": 51,
516
- "items": {
517
- "type": "string",
518
- "description": "Canonical Builder lifecycle event. Names use lower snake case; metadata uses camel case. Provider events include providerId, resolvedVersion, and ordinal. Request events also include requestId. New values are additive, so clients must tolerate unknown response values. For field requirements and funnel semantics, see docs/verification-analytics-events.md.",
519
- "enum": [
520
- "billing_required",
521
- "session_pending",
522
- "verification_client_opened",
523
- "verification_client_ready",
524
- "verification_client_warning",
525
- "verification_client_visibility_shown",
526
- "verification_client_visibility_hidden",
527
- "verification_diagnostics_mode_changed",
528
- "verification_cancelled",
529
- "consent_viewed",
530
- "consent_scrolled",
531
- "consent_agreed",
532
- "verification_browser_started",
533
- "verification_browser_ready",
534
- "verification_browser_reconnect_started",
535
- "verification_browser_reconnected",
536
- "verification_browser_failed",
537
- "verification_provider_started",
538
- "provider_config",
539
- "provider_script_log",
540
- "network_request_observed",
541
- "verification_page_ready",
542
- "verification_request_interceptor_ready",
543
- "verification_provider_completed",
544
- "auth_required",
545
- "auth_submitted",
546
- "auth_challenge_remains",
547
- "auth_rejected",
548
- "auth_submission_failed",
549
- "auth_challenge_completed",
550
- "auth_gate_not_detected",
551
- "authenticated",
552
- "user_interaction_started",
553
- "user_input_started",
554
- "user_interaction_summary",
555
- "verification_inactivity_detected",
556
- "request_matched",
557
- "request_match_failed",
558
- "request_claim_parameters_captured",
559
- "request_claim_created",
560
- "request_claim_retrying",
561
- "request_claim_completed",
562
- "request_claim_rejected",
563
- "request_claim_failed",
564
- "verification_proofs_completed",
565
- "verification_result_submitting",
566
- "verification_result_submission_failed",
567
- "verification_success",
568
- "verification_rejected",
569
- "verification_error",
570
- "session_expired"
571
- ]
586
+ {
587
+ "type": "object",
588
+ "additionalProperties": false,
589
+ "description": "A subscription whose deliveries wait for you to read them. It has no URL. An org has at most one.",
590
+ "required": [
591
+ "deliveryMode"
592
+ ],
593
+ "properties": {
594
+ "deliveryMode": {
595
+ "type": "string",
596
+ "enum": [
597
+ "pull"
598
+ ]
599
+ },
600
+ "callbackUrl": {
601
+ "description": "Not allowed. A pull subscription has no URL.",
602
+ "not": {}
603
+ },
604
+ "events": {
605
+ "type": "array",
606
+ "description": "Events to keep. Defaults to every event.",
607
+ "minItems": 1,
608
+ "maxItems": 51,
609
+ "items": {
610
+ "type": "string",
611
+ "description": "Canonical Builder lifecycle event. Names use lower snake case; metadata uses camel case. Provider events include providerId, resolvedVersion, and ordinal. Request events also include requestId. New values are additive, so clients must tolerate unknown response values. For field requirements and funnel semantics, see docs/verification-analytics-events.md.",
612
+ "enum": [
613
+ "billing_required",
614
+ "session_pending",
615
+ "verification_client_opened",
616
+ "verification_client_ready",
617
+ "verification_client_warning",
618
+ "verification_client_visibility_shown",
619
+ "verification_client_visibility_hidden",
620
+ "verification_diagnostics_mode_changed",
621
+ "verification_cancelled",
622
+ "consent_viewed",
623
+ "consent_scrolled",
624
+ "consent_agreed",
625
+ "verification_browser_started",
626
+ "verification_browser_ready",
627
+ "verification_browser_reconnect_started",
628
+ "verification_browser_reconnected",
629
+ "verification_browser_failed",
630
+ "verification_provider_started",
631
+ "provider_config",
632
+ "provider_script_log",
633
+ "network_request_observed",
634
+ "verification_page_ready",
635
+ "verification_request_interceptor_ready",
636
+ "verification_provider_completed",
637
+ "auth_required",
638
+ "auth_submitted",
639
+ "auth_challenge_remains",
640
+ "auth_rejected",
641
+ "auth_submission_failed",
642
+ "auth_challenge_completed",
643
+ "auth_gate_not_detected",
644
+ "authenticated",
645
+ "user_interaction_started",
646
+ "user_input_started",
647
+ "user_interaction_summary",
648
+ "verification_inactivity_detected",
649
+ "request_matched",
650
+ "request_match_failed",
651
+ "request_claim_parameters_captured",
652
+ "request_claim_created",
653
+ "request_claim_retrying",
654
+ "request_claim_completed",
655
+ "request_claim_rejected",
656
+ "request_claim_failed",
657
+ "verification_proofs_completed",
658
+ "verification_result_submitting",
659
+ "verification_result_submission_failed",
660
+ "verification_success",
661
+ "verification_rejected",
662
+ "verification_error",
663
+ "session_expired"
664
+ ]
665
+ }
666
+ }
572
667
  }
573
668
  }
574
- }
669
+ ]
575
670
  },
576
671
  "orgToken": {
577
672
  "type": "string",
@@ -651,83 +746,178 @@ export const MCP_TOOLS = {
651
746
  "properties": {}
652
747
  },
653
748
  "body": {
654
- "type": "object",
655
- "additionalProperties": false,
656
- "description": "Body for `POST /orgs/{orgId}/callback-subscriptions`. The owning organization comes from the path; bearer-authenticated and gated on org membership. Delivery is scoped to the org and encrypted to its credential when set.",
657
- "required": [
658
- "callbackUrl",
659
- "events"
660
- ],
661
- "properties": {
662
- "callbackUrl": {
663
- "type": "string",
664
- "pattern": "^https?://",
665
- "description": "Callback URL or template. Supported placeholders are `{{sessionId}}` and top-level scalar context keys.",
666
- "maxLength": 2000
749
+ "description": "Body for `POST /orgs/{orgId}/callback-subscriptions`. The owning organization comes from the path; bearer-authenticated and gated on org membership. Delivery is scoped to the org and encrypted to its credential when set. Send `callbackUrl` for a webhook, or `deliveryMode: \"pull\"` for a subscription you read.",
750
+ "oneOf": [
751
+ {
752
+ "type": "object",
753
+ "additionalProperties": false,
754
+ "description": "A subscription that Builder POSTs each delivery to.",
755
+ "required": [
756
+ "callbackUrl",
757
+ "events"
758
+ ],
759
+ "properties": {
760
+ "deliveryMode": {
761
+ "type": "string",
762
+ "description": "Omit it or send `webhook`.",
763
+ "enum": [
764
+ "webhook"
765
+ ]
766
+ },
767
+ "callbackUrl": {
768
+ "type": "string",
769
+ "pattern": "^https?://",
770
+ "description": "Callback URL or template. Supported placeholders are `{{sessionId}}` and top-level scalar context keys.",
771
+ "maxLength": 2000
772
+ },
773
+ "events": {
774
+ "type": "array",
775
+ "minItems": 1,
776
+ "maxItems": 51,
777
+ "items": {
778
+ "type": "string",
779
+ "description": "Canonical Builder lifecycle event. Names use lower snake case; metadata uses camel case. Provider events include providerId, resolvedVersion, and ordinal. Request events also include requestId. New values are additive, so clients must tolerate unknown response values. For field requirements and funnel semantics, see docs/verification-analytics-events.md.",
780
+ "enum": [
781
+ "billing_required",
782
+ "session_pending",
783
+ "verification_client_opened",
784
+ "verification_client_ready",
785
+ "verification_client_warning",
786
+ "verification_client_visibility_shown",
787
+ "verification_client_visibility_hidden",
788
+ "verification_diagnostics_mode_changed",
789
+ "verification_cancelled",
790
+ "consent_viewed",
791
+ "consent_scrolled",
792
+ "consent_agreed",
793
+ "verification_browser_started",
794
+ "verification_browser_ready",
795
+ "verification_browser_reconnect_started",
796
+ "verification_browser_reconnected",
797
+ "verification_browser_failed",
798
+ "verification_provider_started",
799
+ "provider_config",
800
+ "provider_script_log",
801
+ "network_request_observed",
802
+ "verification_page_ready",
803
+ "verification_request_interceptor_ready",
804
+ "verification_provider_completed",
805
+ "auth_required",
806
+ "auth_submitted",
807
+ "auth_challenge_remains",
808
+ "auth_rejected",
809
+ "auth_submission_failed",
810
+ "auth_challenge_completed",
811
+ "auth_gate_not_detected",
812
+ "authenticated",
813
+ "user_interaction_started",
814
+ "user_input_started",
815
+ "user_interaction_summary",
816
+ "verification_inactivity_detected",
817
+ "request_matched",
818
+ "request_match_failed",
819
+ "request_claim_parameters_captured",
820
+ "request_claim_created",
821
+ "request_claim_retrying",
822
+ "request_claim_completed",
823
+ "request_claim_rejected",
824
+ "request_claim_failed",
825
+ "verification_proofs_completed",
826
+ "verification_result_submitting",
827
+ "verification_result_submission_failed",
828
+ "verification_success",
829
+ "verification_rejected",
830
+ "verification_error",
831
+ "session_expired"
832
+ ]
833
+ }
834
+ }
835
+ }
667
836
  },
668
- "events": {
669
- "type": "array",
670
- "minItems": 1,
671
- "maxItems": 51,
672
- "items": {
673
- "type": "string",
674
- "description": "Canonical Builder lifecycle event. Names use lower snake case; metadata uses camel case. Provider events include providerId, resolvedVersion, and ordinal. Request events also include requestId. New values are additive, so clients must tolerate unknown response values. For field requirements and funnel semantics, see docs/verification-analytics-events.md.",
675
- "enum": [
676
- "billing_required",
677
- "session_pending",
678
- "verification_client_opened",
679
- "verification_client_ready",
680
- "verification_client_warning",
681
- "verification_client_visibility_shown",
682
- "verification_client_visibility_hidden",
683
- "verification_diagnostics_mode_changed",
684
- "verification_cancelled",
685
- "consent_viewed",
686
- "consent_scrolled",
687
- "consent_agreed",
688
- "verification_browser_started",
689
- "verification_browser_ready",
690
- "verification_browser_reconnect_started",
691
- "verification_browser_reconnected",
692
- "verification_browser_failed",
693
- "verification_provider_started",
694
- "provider_config",
695
- "provider_script_log",
696
- "network_request_observed",
697
- "verification_page_ready",
698
- "verification_request_interceptor_ready",
699
- "verification_provider_completed",
700
- "auth_required",
701
- "auth_submitted",
702
- "auth_challenge_remains",
703
- "auth_rejected",
704
- "auth_submission_failed",
705
- "auth_challenge_completed",
706
- "auth_gate_not_detected",
707
- "authenticated",
708
- "user_interaction_started",
709
- "user_input_started",
710
- "user_interaction_summary",
711
- "verification_inactivity_detected",
712
- "request_matched",
713
- "request_match_failed",
714
- "request_claim_parameters_captured",
715
- "request_claim_created",
716
- "request_claim_retrying",
717
- "request_claim_completed",
718
- "request_claim_rejected",
719
- "request_claim_failed",
720
- "verification_proofs_completed",
721
- "verification_result_submitting",
722
- "verification_result_submission_failed",
723
- "verification_success",
724
- "verification_rejected",
725
- "verification_error",
726
- "session_expired"
727
- ]
837
+ {
838
+ "type": "object",
839
+ "additionalProperties": false,
840
+ "description": "A subscription whose deliveries wait for you to read them. It has no URL. An org has at most one.",
841
+ "required": [
842
+ "deliveryMode"
843
+ ],
844
+ "properties": {
845
+ "deliveryMode": {
846
+ "type": "string",
847
+ "enum": [
848
+ "pull"
849
+ ]
850
+ },
851
+ "callbackUrl": {
852
+ "description": "Not allowed. A pull subscription has no URL.",
853
+ "not": {}
854
+ },
855
+ "events": {
856
+ "type": "array",
857
+ "description": "Events to keep. Defaults to every event.",
858
+ "minItems": 1,
859
+ "maxItems": 51,
860
+ "items": {
861
+ "type": "string",
862
+ "description": "Canonical Builder lifecycle event. Names use lower snake case; metadata uses camel case. Provider events include providerId, resolvedVersion, and ordinal. Request events also include requestId. New values are additive, so clients must tolerate unknown response values. For field requirements and funnel semantics, see docs/verification-analytics-events.md.",
863
+ "enum": [
864
+ "billing_required",
865
+ "session_pending",
866
+ "verification_client_opened",
867
+ "verification_client_ready",
868
+ "verification_client_warning",
869
+ "verification_client_visibility_shown",
870
+ "verification_client_visibility_hidden",
871
+ "verification_diagnostics_mode_changed",
872
+ "verification_cancelled",
873
+ "consent_viewed",
874
+ "consent_scrolled",
875
+ "consent_agreed",
876
+ "verification_browser_started",
877
+ "verification_browser_ready",
878
+ "verification_browser_reconnect_started",
879
+ "verification_browser_reconnected",
880
+ "verification_browser_failed",
881
+ "verification_provider_started",
882
+ "provider_config",
883
+ "provider_script_log",
884
+ "network_request_observed",
885
+ "verification_page_ready",
886
+ "verification_request_interceptor_ready",
887
+ "verification_provider_completed",
888
+ "auth_required",
889
+ "auth_submitted",
890
+ "auth_challenge_remains",
891
+ "auth_rejected",
892
+ "auth_submission_failed",
893
+ "auth_challenge_completed",
894
+ "auth_gate_not_detected",
895
+ "authenticated",
896
+ "user_interaction_started",
897
+ "user_input_started",
898
+ "user_interaction_summary",
899
+ "verification_inactivity_detected",
900
+ "request_matched",
901
+ "request_match_failed",
902
+ "request_claim_parameters_captured",
903
+ "request_claim_created",
904
+ "request_claim_retrying",
905
+ "request_claim_completed",
906
+ "request_claim_rejected",
907
+ "request_claim_failed",
908
+ "verification_proofs_completed",
909
+ "verification_result_submitting",
910
+ "verification_result_submission_failed",
911
+ "verification_success",
912
+ "verification_rejected",
913
+ "verification_error",
914
+ "session_expired"
915
+ ]
916
+ }
917
+ }
728
918
  }
729
919
  }
730
- }
920
+ ]
731
921
  }
732
922
  },
733
923
  "required": [
package/lib/mcp/instructions.js CHANGED
@@ -66,9 +66,9 @@ const TOPIC_SUMMARIES = {
66
66
  + 'providers, and going live.',
67
67
  'discover': 'Reusing existing providers: finding, resolving, and '
68
68
  + 'creating a verification session.',
69
- 'integration': 'After start_integration: org key, callback, frontend and '
70
- + 'backend over the HTTP session API; `api=2` and result '
71
- + 'verification.',
69
+ 'integration': 'After start_integration: org key, callback (local '
70
+ + 'proxy_callback_events or deployed webhook), frontend and backend '
71
+ + 'over the HTTP session API; `api=2` and result verification.',
72
72
  'user-script': 'The navigation script (jsUserScripts): sign-in redirect, '
73
73
  + 'multi-page walk, test_user_script with keep.',
74
74
  'interception': 'injectionType / interceptorType, live interception, the '