@rifts_to/mcp 0.1.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 RIFTS TO, LLC
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/NOTICE

@@ -0,0 +1,8 @@
+rifts.to MCP server
+Copyright 2026 RIFTS TO, LLC
+
+This product includes software developed by RIFTS TO, LLC
+(https://rifts.to).
+
+This product is licensed under the Apache License, Version 2.0.
+See the LICENSE file for the full license text.

package/README.md

@@ -0,0 +1,124 @@
+# rifts.to MCP server
+
+[![CI](https://github.com/riftsto/mcp/actions/workflows/ci.yml/badge.svg)](https://github.com/riftsto/mcp/actions/workflows/ci.yml)
+[![License](https://img.shields.io/badge/license-Apache--2.0-blue.svg)](./LICENSE)
+
+An MCP server for [rifts.to](https://rifts.to), a live audience survey tool. It lets an AI client create a survey, list the surveys on your account, read back the results, and close a survey when you're done collecting responses.
+
+Point a poll at your audience by asking your AI client to do it, and check the answers the same way, without leaving the chat.
+
+```bash
+claude mcp add --transport http rifts https://mcp.rifts.to/mcp
+```
+
+That is the hosted server, and it signs you in through the browser. [Running your
+own copy](#run-it-yourself) is supported too.
+
+## Tools
+
+- **`create_survey`**: creates a survey from a title and a list of questions and returns its public link and admin link. Optionally accepts a custom slug.
+- **`list_surveys`**: lists the surveys on your account, with title, status, and response count. Admin links are included only if you ask for them, so a routine listing doesn't hand a model a pile of credentials it didn't need.
+- **`get_survey_results`**: returns a survey's questions and every response.
+- **`close_survey`**: stops a survey from accepting new responses. Reopening, retitling, and editing questions stay in the rifts.to admin dashboard, not here.
+
+## Hosted, with sign-in
+
+rifts.to runs this server at `https://mcp.rifts.to/mcp`. Add it as a remote MCP
+server and your client walks an OAuth flow: it registers itself, sends you to
+rifts.to to approve, and stores the token it gets back. Nothing to paste, and
+you can revoke it later under "Connected applications" on `/account`.
+
+In Claude Desktop, add it as a custom connector with that same URL.
+
+Running it yourself, with a token you paste in, is the rest of this document.
+
+## Run it yourself
+
+Not on npm yet, so clone this repository and build:
+
+```bash
+git clone https://github.com/riftsto/mcp.git rifts-mcp
+cd rifts-mcp
+npm install
+npm run build
+node dist/stdio.js
+```
+
+When `@rifts_to/mcp` is published, `npx @rifts_to/mcp` will replace all of that,
+and every `node /path/to/...` below becomes `npx -y @rifts_to/mcp`.
+
+Releases are published from CI with [npm provenance](https://docs.npmjs.com/generating-provenance-statements),
+so each version on npm carries a signed attestation linking it to the commit
+and workflow run that built it. Cutting a GitHub release triggers the publish;
+the tag has to match the version in `package.json` or the run fails.
+
+The server reads its configuration from two environment variables:
+
+- `RIFTS_TOKEN` (required): your personal access token.
+- `RIFTS_API_URL` (optional): defaults to `https://rifts.to`. Set this only if you're pointing the server at a different rifts.to deployment.
+
+### Claude Desktop
+
+Add this to your `claude_desktop_config.json`, using the absolute path to your
+build:
+
+```json
+{
+  "mcpServers": {
+    "rifts": {
+      "command": "node",
+      "args": ["/path/to/rifts-mcp/dist/stdio.js"],
+      "env": {
+        "RIFTS_TOKEN": "your-token-here"
+      }
+    }
+  }
+}
+```
+
+### Claude Code
+
+```bash
+claude mcp add rifts -e RIFTS_TOKEN=your-token-here -- node /path/to/rifts-mcp/dist/stdio.js
+```
+
+Add `-s user` to make it available in every project instead of just the
+current one.
+
+## Getting a token
+
+1. Sign in at [rifts.to](https://rifts.to).
+2. Go to `/account`.
+3. Create a token under "API tokens."
+
+Token creation requires an active subscription. The token is shown once, at creation time, so save it somewhere before you close the dialog. If you lose it, create a new one.
+
+## Self-hosting
+
+This server is stateless and holds no credentials of its own. Every request carries your `RIFTS_TOKEN` and goes straight to the rifts.to API; the server doesn't store it, cache it, or log it anywhere. Running your own copy, on your own machine or your own infrastructure, is a supported way to use it, and it still needs a token from a real rifts.to account with an active subscription. There's no separate self-hosting tier or discount; the token is what's paid for, not the server.
+
+## Development
+
+```bash
+npm install
+npm test          # vitest, drives the server over an in-memory transport
+npm run typecheck
+npm run build
+```
+
+The tests connect a real MCP client to the server and call the tools against a
+stub API, so a schema that rejects a valid question, or a result the SDK
+refuses to serialize, fails in CI rather than in someone's chat window.
+
+`src/server.ts` builds the server and is transport-free. `src/stdio.ts` and
+`src/worker.ts` are the two entry points, and neither contains tool logic, so
+the hosted and self-hosted paths cannot drift on what the tools do.
+
+## Security
+
+Token handling, what this server can reach, and how to report a vulnerability:
+[SECURITY.md](./SECURITY.md).
+
+## License
+
+Apache-2.0. See [LICENSE](./LICENSE).

package/dist/client.d.ts

@@ -0,0 +1,129 @@
+/**
+ * Typed client for rifts.to's public API (`/api/v1`).
+ *
+ * Plain `fetch`, no generated SDK and no retry layer. Two reasons: the same
+ * module has to run unchanged under Node (the stdio entry point) and under
+ * Cloudflare Workers (the hosted HTTP server), which rules out anything
+ * Node-specific; and a retry would be wrong on this surface anyway — three of
+ * the four calls are writes or rate-limited reads, and silently re-sending a
+ * `create_survey` that actually succeeded would leave a duplicate survey and
+ * hand the model the wrong link.
+ *
+ * This module reads no environment and holds no default token: the caller
+ * supplies both, so nothing here can pick up a credential by accident.
+ */
+/** Public rifts.to. Overridable so a self-hoster can point at their own deploy. */
+export declare const DEFAULT_BASE_URL = "https://rifts.to";
+export interface MultipleChoiceQuestionInput {
+    type: "multiple_choice";
+    text: string;
+    options: string[];
+}
+export interface FreeTextQuestionInput {
+    type: "free_text";
+    text: string;
+}
+export interface RatingQuestionInput {
+    type: "rating";
+    text: string;
+    /** Always 1–10 — see the note on RATING_SCALE in tools.ts. */
+    scale: {
+        min: number;
+        max: number;
+    };
+}
+/** A question as sent to the API. No `index`: the server reindexes on write. */
+export type QuestionInput = MultipleChoiceQuestionInput | FreeTextQuestionInput | RatingQuestionInput;
+/** A question as returned by the API, carrying the position answers are keyed by. */
+export type Question = QuestionInput & {
+    index: number;
+};
+export interface SurveySummary {
+    id: string;
+    title: string;
+    status: "open" | "closed";
+    created_at: string;
+    response_count: number;
+    url: string;
+    /** Present only when the listing was asked for with `include_admin`. */
+    admin_token?: string;
+    admin_url?: string;
+}
+export interface CreatedSurvey {
+    id: string;
+    title: string;
+    url: string;
+    admin_token: string;
+    admin_url: string;
+    created_at: string;
+}
+export interface SurveyResponseRow {
+    id: string;
+    submitted_at: string;
+    /**
+     * Keyed by question index, as a string because that is what JSON does to a
+     * numeric key. The API deliberately carries no respondent identifier here and
+     * this client must not invent one.
+     */
+    answers: Record<string, string | number | string[]>;
+}
+export interface SurveyResults {
+    id: string;
+    title: string;
+    /**
+     * Three values here, two on SurveySummary, and that is the API's shape rather
+     * than a mistake in this file: the results route reports getEffectiveStatus,
+     * which folds `expires_at` in, while the listing reports the stored column.
+     * A survey past its expiry therefore lists as "open" and reads as "expired".
+     */
+    status: "open" | "closed" | "expired";
+    created_at: string;
+    expires_at: string | null;
+    url: string;
+    questions: Question[];
+    response_count: number;
+    responses: SurveyResponseRow[];
+}
+export interface CloseResult {
+    id: string;
+    status: "closed";
+}
+export interface CreateSurveyInput {
+    title: string;
+    questions: QuestionInput[];
+    /** Custom slug, e.g. `standup-mood`. Subscriber-only, and may already be taken. */
+    slug?: string;
+}
+export interface ListSurveysOptions {
+    includeAdmin?: boolean;
+    includeClosed?: boolean;
+}
+/**
+ * A non-2xx from the API, already turned into something a person reading a
+ * chat transcript can act on. `status` and `code` are kept alongside the
+ * message so a caller can branch without parsing English.
+ */
+export declare class RiftsApiError extends Error {
+    readonly status: number;
+    readonly code: string | undefined;
+    constructor(message: string, status: number, code?: string);
+}
+export interface RiftsClientOptions {
+    /** Origin only, e.g. `https://rifts.to`. Paths are appended by this client. */
+    baseUrl?: string;
+    token: string;
+    /** Injectable for tests; defaults to the global `fetch` (Node 20+, Workers). */
+    fetchImpl?: typeof fetch;
+}
+export declare class RiftsClient {
+    private readonly baseUrl;
+    private readonly token;
+    private readonly fetchImpl;
+    constructor(options: RiftsClientOptions);
+    listSurveys(options?: ListSurveysOptions): Promise<SurveySummary[]>;
+    createSurvey(input: CreateSurveyInput): Promise<CreatedSurvey>;
+    getSurveyResults(id: string): Promise<SurveyResults>;
+    closeSurvey(id: string): Promise<CloseResult>;
+    private request;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,mFAAmF;AACnF,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,QAAQ,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACrC;AAED,gFAAgF;AAChF,MAAM,MAAM,aAAa,GACrB,2BAA2B,GAC3B,qBAAqB,GACrB,mBAAmB,CAAC;AAExB,qFAAqF;AACrF,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,iBAAiB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,QAAQ,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,mFAAmF;IACnF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;GAIG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;gBAEtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAM3D;AAED,MAAM,WAAW,kBAAkB;IACjC,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAE7B,OAAO,EAAE,kBAAkB;IASjC,WAAW,CAAC,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAevE,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC;IAI9D,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAIpD,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;YAMrC,OAAO;CA0CtB"}

package/dist/client.js

@@ -0,0 +1,161 @@
+/**
+ * Typed client for rifts.to's public API (`/api/v1`).
+ *
+ * Plain `fetch`, no generated SDK and no retry layer. Two reasons: the same
+ * module has to run unchanged under Node (the stdio entry point) and under
+ * Cloudflare Workers (the hosted HTTP server), which rules out anything
+ * Node-specific; and a retry would be wrong on this surface anyway — three of
+ * the four calls are writes or rate-limited reads, and silently re-sending a
+ * `create_survey` that actually succeeded would leave a duplicate survey and
+ * hand the model the wrong link.
+ *
+ * This module reads no environment and holds no default token: the caller
+ * supplies both, so nothing here can pick up a credential by accident.
+ */
+/** Public rifts.to. Overridable so a self-hoster can point at their own deploy. */
+export const DEFAULT_BASE_URL = "https://rifts.to";
+/**
+ * A non-2xx from the API, already turned into something a person reading a
+ * chat transcript can act on. `status` and `code` are kept alongside the
+ * message so a caller can branch without parsing English.
+ */
+export class RiftsApiError extends Error {
+    status;
+    code;
+    constructor(message, status, code) {
+        super(message);
+        this.name = "RiftsApiError";
+        this.status = status;
+        this.code = code;
+    }
+}
+export class RiftsClient {
+    baseUrl;
+    token;
+    fetchImpl;
+    constructor(options) {
+        // Trailing slashes are the classic way a config value produces `//api/v1`,
+        // which Cloudflare answers with a redirect the fetch then follows without
+        // the Authorization header.
+        this.baseUrl = (options.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
+        this.token = options.token;
+        this.fetchImpl = options.fetchImpl ?? globalThis.fetch;
+    }
+    async listSurveys(options = {}) {
+        const params = new URLSearchParams();
+        // Both are sent only when they differ from the API's own default, so a
+        // change of default on the server side is not silently pinned here.
+        if (options.includeAdmin)
+            params.set("include_admin", "1");
+        if (options.includeClosed === false)
+            params.set("include_closed", "0");
+        const query = params.size > 0 ? `?${params.toString()}` : "";
+        const body = await this.request("GET", `/api/v1/surveys${query}`);
+        return body.surveys;
+    }
+    async createSurvey(input) {
+        return this.request("POST", "/api/v1/surveys", input);
+    }
+    async getSurveyResults(id) {
+        return this.request("GET", `/api/v1/surveys/${encodeURIComponent(id)}`);
+    }
+    async closeSurvey(id) {
+        return this.request("PATCH", `/api/v1/surveys/${encodeURIComponent(id)}`, {
+            status: "closed",
+        });
+    }
+    async request(method, path, body) {
+        const url = `${this.baseUrl}${path}`;
+        const headers = {
+            // OAuth 2.1 and the MCP spec both forbid a token in a URI, and the API
+            // reads the header only. Never move this to a query parameter.
+            Authorization: `Bearer ${this.token}`,
+            Accept: "application/json",
+        };
+        if (body !== undefined)
+            headers["Content-Type"] = "application/json";
+        let response;
+        try {
+            response = await this.fetchImpl(url, {
+                method,
+                headers,
+                ...(body !== undefined ? { body: JSON.stringify(body) } : {}),
+            });
+        }
+        catch (cause) {
+            // A bare `TypeError: fetch failed` in a chat window is unactionable. The
+            // base URL is the thing a self-hoster typically got wrong, so name it.
+            throw new Error(`could not reach the rifts.to API at ${this.baseUrl}: ${errorMessage(cause)}`, { cause });
+        }
+        if (!response.ok)
+            throw await toApiError(response);
+        // 204 has no body; nothing on /api/v1 returns one today, but a client that
+        // assumes otherwise fails with a JSON parse error rather than a clear one.
+        if (response.status === 204)
+            return undefined;
+        try {
+            return (await response.json());
+        }
+        catch (cause) {
+            throw new Error(`the rifts.to API returned a ${response.status} that was not JSON`, { cause });
+        }
+    }
+}
+/**
+ * Turns a non-2xx into a message that says what to do about it. The four
+ * statuses below are the ones `guardApiV1` and the route handlers produce
+ * deliberately; everything else falls through to the generic branch carrying
+ * the status and whatever the body's `error` field said.
+ */
+async function toApiError(response) {
+    const { error, code } = await readErrorBody(response);
+    switch (response.status) {
+        case 401:
+            return new RiftsApiError("rifts.to rejected the token (401). Check RIFTS_TOKEN: it may be mistyped, revoked, or from a different rifts.to deployment.", 401, code);
+        case 403:
+            // Every paid route on rifts.to answers with this exact code, and
+            // entitlement is re-checked on every request — so this is as likely to
+            // mean "the subscription lapsed today" as "there never was one".
+            if (code === "entitlement_required") {
+                return new RiftsApiError("an active rifts.to subscription is required to use the API (403). Check the subscription at https://rifts.to/en/account/billing.", 403, code);
+            }
+            return new RiftsApiError(`rifts.to refused the request (403)${suffix(error)}`, 403, code);
+        case 404:
+            // The API answers 404 for a survey that belongs to someone else as well
+            // as one that does not exist, on purpose, so this message must not claim
+            // to know which it was.
+            return new RiftsApiError("no such survey (or not yours) (404)", 404, code);
+        case 429: {
+            const retryAfter = response.headers.get("Retry-After");
+            const wait = retryAfter ? ` Retry after ${retryAfter}s.` : "";
+            return new RiftsApiError(`rate limited by rifts.to (429).${wait}`, 429, code);
+        }
+        default:
+            return new RiftsApiError(`rifts.to API error (${response.status})${suffix(error)}`, response.status, code);
+    }
+}
+async function readErrorBody(response) {
+    // A gateway or the edge can answer with HTML, so parsing must never be what
+    // turns a 502 into an unrelated crash.
+    try {
+        const text = await response.text();
+        if (!text)
+            return {};
+        const parsed = JSON.parse(text);
+        if (typeof parsed !== "object" || parsed === null)
+            return {};
+        const { error, code } = parsed;
+        return {
+            ...(typeof error === "string" ? { error } : {}),
+            ...(typeof code === "string" ? { code } : {}),
+        };
+    }
+    catch {
+        return {};
+    }
+}
+const suffix = (error) => (error ? `: ${error}` : "");
+function errorMessage(value) {
+    return value instanceof Error ? value.message : String(value);
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAgGnD;;;;GAIG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,MAAM,CAAS;IACf,IAAI,CAAqB;IAElC,YAAY,OAAe,EAAE,MAAc,EAAE,IAAa;QACxD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAUD,MAAM,OAAO,WAAW;IACL,OAAO,CAAS;IAChB,KAAK,CAAS;IACd,SAAS,CAAe;IAEzC,YAAY,OAA2B;QACrC,2EAA2E;QAC3E,0EAA0E;QAC1E,4BAA4B;QAC5B,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,UAA8B,EAAE;QAChD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,uEAAuE;QACvE,oEAAoE;QACpE,IAAI,OAAO,CAAC,YAAY;YAAE,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QAC3D,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QAEvE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B,KAAK,EACL,kBAAkB,KAAK,EAAE,CAC1B,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAwB;QACzC,OAAO,IAAI,CAAC,OAAO,CAAgB,MAAM,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,EAAU;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAgB,KAAK,EAAE,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAU;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAc,OAAO,EAAE,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE;YACrF,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QACnE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QAErC,MAAM,OAAO,GAA2B;YACtC,uEAAuE;YACvE,+DAA+D;YAC/D,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;YACrC,MAAM,EAAE,kBAAkB;SAC3B,CAAC;QACF,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAErE,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;gBACnC,MAAM;gBACN,OAAO;gBACP,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yEAAyE;YACzE,uEAAuE;YACvE,MAAM,IAAI,KAAK,CACb,uCAAuC,IAAI,CAAC,OAAO,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,EAC7E,EAAE,KAAK,EAAE,CACV,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;QAEnD,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAEnD,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,+BAA+B,QAAQ,CAAC,MAAM,oBAAoB,EAClE,EAAE,KAAK,EAAE,CACV,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED;;;;;GAKG;AACH,KAAK,UAAU,UAAU,CAAC,QAAkB;IAC1C,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAEtD,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxB,KAAK,GAAG;YACN,OAAO,IAAI,aAAa,CACtB,6HAA6H,EAC7H,GAAG,EACH,IAAI,CACL,CAAC;QAEJ,KAAK,GAAG;YACN,iEAAiE;YACjE,uEAAuE;YACvE,iEAAiE;YACjE,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBACpC,OAAO,IAAI,aAAa,CACtB,kIAAkI,EAClI,GAAG,EACH,IAAI,CACL,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,aAAa,CAAC,qCAAqC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAE5F,KAAK,GAAG;YACN,wEAAwE;YACxE,yEAAyE;YACzE,wBAAwB;YACxB,OAAO,IAAI,aAAa,CAAC,qCAAqC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAE7E,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,gBAAgB,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,OAAO,IAAI,aAAa,CAAC,kCAAkC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAChF,CAAC;QAED;YACE,OAAO,IAAI,aAAa,CACtB,uBAAuB,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,EACzD,QAAQ,CAAC,MAAM,EACf,IAAI,CACL,CAAC;IACN,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,QAAkB;IAElB,4EAA4E;IAC5E,uCAAuC;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QACrB,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC7D,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAA6C,CAAC;QACtE,OAAO;YACL,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAE/D,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Builds the MCP server. Transport-free on purpose: `stdio.ts` connects a
+ * stdio transport to it, and the hosted deployment will connect an HTTP one to
+ * the same object, so neither entry point can drift on which tools exist or
+ * how they behave.
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { RiftsClient } from "./client.js";
+/**
+ * The protocol identifier, not the brand. Clients namespace tool names with it
+ * (`mcp__rifts__create_survey`), so it stays a bare slug: a dot in here would
+ * ride along into every tool name. `title` below is where "rifts.to" belongs.
+ */
+export declare const SERVER_NAME = "rifts";
+/** Kept in step with package.json by hand; nothing imports JSON at runtime. */
+export declare const SERVER_VERSION = "0.1.0";
+export declare function createServer(client: RiftsClient): McpServer;
+export { RiftsClient, RiftsApiError, DEFAULT_BASE_URL } from "./client.js";
+export type { CreateSurveyInput, CreatedSurvey, Question, QuestionInput, RiftsClientOptions, SurveyResults, SurveySummary, } from "./client.js";
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/C;;;;GAIG;AACH,eAAO,MAAM,WAAW,UAAU,CAAC;AAEnC,+EAA+E;AAC/E,eAAO,MAAM,cAAc,UAAU,CAAC;AAEtC,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CAkB3D;AAED,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC3E,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,QAAQ,EACR,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,aAAa,GACd,MAAM,aAAa,CAAC"}