npm - @sapiom/mcp - Versions diffs - 0.2.0 - Mend

@sapiom/mcp 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (26) hide show

package/LICENSE +21 -0
package/dist/auth.d.ts +8 -0
package/dist/auth.d.ts.map +1 -0
package/dist/auth.js +138 -0
package/dist/auth.js.map +1 -0
package/dist/credentials.d.ts +36 -0
package/dist/credentials.d.ts.map +1 -0
package/dist/credentials.js +97 -0
package/dist/credentials.js.map +1 -0
package/dist/index.d.ts +3 -0
package/dist/index.d.ts.map +1 -0
package/dist/index.js +31 -0
package/dist/index.js.map +1 -0
package/dist/tools/authenticate.d.ts +4 -0
package/dist/tools/authenticate.d.ts.map +1 -0
package/dist/tools/authenticate.js +50 -0
package/dist/tools/authenticate.js.map +1 -0
package/dist/tools/status.d.ts +4 -0
package/dist/tools/status.d.ts.map +1 -0
package/dist/tools/status.js +36 -0
package/dist/tools/status.js.map +1 -0
package/dist/tools/verify.d.ts +4 -0
package/dist/tools/verify.d.ts.map +1 -0
package/dist/tools/verify.js +153 -0
package/dist/tools/verify.js.map +1 -0
package/package.json +66 -0

package/LICENSE ADDED Viewed

@@ -0,0 +1,21 @@
+MIT License
+Copyright (c) 2024 Sapiom
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/auth.d.ts ADDED Viewed

@@ -0,0 +1,8 @@
+export interface AuthResult {
+    apiKey: string;
+    tenantId: string;
+    organizationName: string;
+    apiKeyId: string;
+}
+export declare function performBrowserAuth(appURL: string, apiURL: string): Promise<AuthResult>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAiBD,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC,CAgHrB"}

package/dist/auth.js ADDED Viewed

@@ -0,0 +1,138 @@
+import * as http from "node:http";
+import * as crypto from "node:crypto";
+import { execSync } from "node:child_process";
+import { URL, URLSearchParams } from "node:url";
+function openBrowser(url) {
+    const platform = process.platform;
+    try {
+        if (platform === "darwin") {
+            execSync(`open "${url}"`);
+        }
+        else if (platform === "win32") {
+            execSync(`start "" "${url}"`);
+        }
+        else {
+            execSync(`xdg-open "${url}"`);
+        }
+    }
+    catch {
+        // Browser open failed — user will see the URL in the output
+    }
+}
+export async function performBrowserAuth(appURL, apiURL) {
+    const state = crypto.randomBytes(32).toString("hex");
+    return new Promise((resolve, reject) => {
+        const server = http.createServer();
+        let settled = false;
+        const timeout = setTimeout(() => {
+            if (!settled) {
+                settled = true;
+                server.close();
+                reject(new Error(`Authentication timed out after 5 minutes. Open this URL manually to try again:\n${browserURL}`));
+            }
+        }, 5 * 60 * 1000);
+        // Placeholder — set after we know the port
+        let browserURL = "";
+        server.on("request", async (req, res) => {
+            if (settled)
+                return;
+            const reqURL = new URL(req.url ?? "/", `http://localhost`);
+            if (reqURL.pathname !== "/callback") {
+                res.writeHead(404, { "Content-Type": "text/plain" });
+                res.end("Not found");
+                return;
+            }
+            const code = reqURL.searchParams.get("code");
+            const returnedState = reqURL.searchParams.get("state");
+            // Serve the "you can close this tab" page immediately
+            res.writeHead(200, { "Content-Type": "text/html" });
+            res.end(`<!DOCTYPE html>
+<html>
+<head><title>Sapiom CLI Auth</title></head>
+<body style="font-family: system-ui, sans-serif; display: flex; justify-content: center; align-items: center; height: 100vh; margin: 0;">
+  <div style="text-align: center;">
+    <h1>Authentication complete</h1>
+    <p>You can close this tab and return to your terminal.</p>
+  </div>
+</body>
+</html>`);
+            if (!returnedState || returnedState !== state) {
+                settled = true;
+                clearTimeout(timeout);
+                server.close();
+                reject(new Error("State mismatch — possible CSRF attack. Please try again."));
+                return;
+            }
+            if (!code) {
+                settled = true;
+                clearTimeout(timeout);
+                server.close();
+                reject(new Error("No authorization code received from the browser."));
+                return;
+            }
+            // Exchange the code for an API key
+            try {
+                const address = server.address();
+                const redirectUri = `http://localhost:${address.port}/callback`;
+                const result = await exchangeCodeForApiKey(apiURL, code, redirectUri);
+                settled = true;
+                clearTimeout(timeout);
+                server.close();
+                resolve(result);
+            }
+            catch (err) {
+                settled = true;
+                clearTimeout(timeout);
+                server.close();
+                reject(err);
+            }
+        });
+        // Listen on random port
+        server.listen(0, "127.0.0.1", () => {
+            const address = server.address();
+            const port = address.port;
+            const redirectUri = `http://localhost:${port}/callback`;
+            const params = new URLSearchParams({
+                redirect_uri: redirectUri,
+                state,
+            });
+            browserURL = `${appURL}/auth/cli?${params.toString()}`;
+            console.error(`Opening browser for authentication...`);
+            console.error(`If the browser doesn't open, visit: ${browserURL}`);
+            openBrowser(browserURL);
+        });
+        server.on("error", (err) => {
+            if (!settled) {
+                settled = true;
+                clearTimeout(timeout);
+                reject(new Error(`Failed to start local server: ${err.message}`));
+            }
+        });
+    });
+}
+async function exchangeCodeForApiKey(apiURL, code, redirectUri) {
+    const response = await fetch(`${apiURL}/v1/auth/cli/token`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ code, redirectUri }),
+    });
+    if (!response.ok) {
+        let message = `Token exchange failed (${response.status})`;
+        try {
+            const body = (await response.json());
+            if (body.message) {
+                message = `Token exchange failed: ${body.message}`;
+            }
+        }
+        catch {
+            // Ignore JSON parse errors
+        }
+        throw new Error(message);
+    }
+    const data = (await response.json());
+    if (!data.apiKey || !data.tenantId) {
+        throw new Error("Invalid response from token exchange endpoint");
+    }
+    return data;
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAShD,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;QAC5B,CAAC;aAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,QAAQ,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,MAAc;IAEd,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAErD,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,OAAO,GAAG,UAAU,CACxB,GAAG,EAAE;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CACJ,IAAI,KAAK,CACP,mFAAmF,UAAU,EAAE,CAChG,CACF,CAAC;YACJ,CAAC;QACH,CAAC,EACD,CAAC,GAAG,EAAE,GAAG,IAAI,CACd,CAAC;QAEF,2CAA2C;QAC3C,IAAI,UAAU,GAAG,EAAE,CAAC;QAEpB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACtC,IAAI,OAAO;gBAAE,OAAO;YAEpB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAE3D,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACpC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;gBACrD,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAEvD,sDAAsD;YACtD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;YACpD,GAAG,CAAC,GAAG,CAAC;;;;;;;;;QASN,CAAC,CAAC;YAEJ,IAAI,CAAC,aAAa,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;gBAC9C,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CACJ,IAAI,KAAK,CAAC,0DAA0D,CAAC,CACtE,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC,CAAC;gBACtE,OAAO;YACT,CAAC;YAED,mCAAmC;YACnC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAsB,CAAC;gBACrD,MAAM,WAAW,GAAG,oBAAoB,OAAO,CAAC,IAAI,WAAW,CAAC;gBAChE,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;gBACtE,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,wBAAwB;QACxB,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAsB,CAAC;YACrD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAC1B,MAAM,WAAW,GAAG,oBAAoB,IAAI,WAAW,CAAC;YACxD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;gBACjC,YAAY,EAAE,WAAW;gBACzB,KAAK;aACN,CAAC,CAAC;YACH,UAAU,GAAG,GAAG,MAAM,aAAa,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;YAEvD,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACvD,OAAO,CAAC,KAAK,CAAC,uCAAuC,UAAU,EAAE,CAAC,CAAC;YAEnE,WAAW,CAAC,UAAU,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACpE,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,MAAc,EACd,IAAY,EACZ,WAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,oBAAoB,EAAE;QAC1D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;KAC5C,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,OAAO,GAAG,0BAA0B,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;YAC7D,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO,GAAG,0BAA0B,IAAI,CAAC,OAAO,EAAE,CAAC;YACrD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAe,CAAC;IAEnD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/credentials.d.ts ADDED Viewed

@@ -0,0 +1,36 @@
+export interface CredentialEntry {
+    apiKey: string;
+    tenantId: string;
+    organizationName: string;
+    apiKeyId: string;
+}
+export interface EnvironmentConfig {
+    appURL: string;
+    apiURL: string;
+    services?: Record<string, string>;
+    credentials?: CredentialEntry;
+}
+export interface CredentialsFile {
+    currentEnvironment: string;
+    environments: Record<string, EnvironmentConfig>;
+}
+export interface ResolvedEnvironment {
+    name: string;
+    appURL: string;
+    apiURL: string;
+    services: Record<string, string>;
+    credentials: CredentialEntry | null;
+}
+/**
+ * Resolve the active environment configuration.
+ *
+ * Priority: SAPIOM_ENVIRONMENT env var > file's currentEnvironment > "production"
+ *
+ * If the file doesn't exist and environment is "production", returns hardcoded defaults.
+ * If the file doesn't exist and environment is custom, throws (file must define custom envs).
+ */
+export declare function resolveEnvironment(envOverride?: string): Promise<ResolvedEnvironment>;
+export declare function readCredentials(envName: string): Promise<CredentialEntry | null>;
+export declare function writeCredentials(envName: string, appURL: string, apiURL: string, entry: CredentialEntry): Promise<void>;
+export declare function clearCredentials(envName: string): Promise<void>;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/credentials.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,WAAW,CAAC,EAAE,eAAe,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,WAAW,EAAE,eAAe,GAAG,IAAI,CAAC;CACrC;AAuBD;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,mBAAmB,CAAC,CA+C9B;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAGjC;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,IAAI,CAAC,CAef;AAED,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOrE"}

package/dist/credentials.js ADDED Viewed

@@ -0,0 +1,97 @@
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import * as os from "node:os";
+const DEFAULT_APP_URL = "https://app.sapiom.ai";
+const DEFAULT_API_URL = "https://api.sapiom.ai";
+const DEFAULT_ENVIRONMENT = "production";
+function getCredentialsPath() {
+    return path.join(os.homedir(), ".sapiom", "credentials.json");
+}
+async function readCredentialsFile() {
+    try {
+        const content = await fs.readFile(getCredentialsPath(), "utf-8");
+        return JSON.parse(content);
+    }
+    catch {
+        return null;
+    }
+}
+async function writeCredentialsFile(file) {
+    const filePath = getCredentialsPath();
+    await fs.mkdir(path.dirname(filePath), { recursive: true, mode: 0o700 });
+    await fs.writeFile(filePath, JSON.stringify(file, null, 2) + "\n", {
+        mode: 0o600,
+    });
+}
+/**
+ * Resolve the active environment configuration.
+ *
+ * Priority: SAPIOM_ENVIRONMENT env var > file's currentEnvironment > "production"
+ *
+ * If the file doesn't exist and environment is "production", returns hardcoded defaults.
+ * If the file doesn't exist and environment is custom, throws (file must define custom envs).
+ */
+export async function resolveEnvironment(envOverride) {
+    const file = await readCredentialsFile();
+    const name = envOverride ?? file?.currentEnvironment ?? DEFAULT_ENVIRONMENT;
+    // Look up in file
+    const envConfig = file?.environments[name];
+    if (envConfig) {
+        return {
+            name,
+            appURL: envConfig.appURL,
+            apiURL: envConfig.apiURL,
+            services: envConfig.services ?? {},
+            credentials: envConfig.credentials ?? null,
+        };
+    }
+    // Environment not in file — use production defaults or error
+    if (name === DEFAULT_ENVIRONMENT) {
+        return {
+            name,
+            appURL: DEFAULT_APP_URL,
+            apiURL: DEFAULT_API_URL,
+            services: {},
+            credentials: null,
+        };
+    }
+    throw new Error(`Unknown environment "${name}". Define it in ~/.sapiom/credentials.json:\n` +
+        JSON.stringify({
+            currentEnvironment: name,
+            environments: {
+                [name]: {
+                    appURL: "http://localhost:2999",
+                    apiURL: "http://localhost:3000",
+                    services: {
+                        prelude: "http://localhost:3002",
+                    },
+                },
+            },
+        }, null, 2));
+}
+export async function readCredentials(envName) {
+    const file = await readCredentialsFile();
+    return file?.environments[envName]?.credentials ?? null;
+}
+export async function writeCredentials(envName, appURL, apiURL, entry) {
+    const existing = (await readCredentialsFile()) ?? {
+        currentEnvironment: envName,
+        environments: {},
+    };
+    existing.currentEnvironment = envName;
+    existing.environments[envName] = {
+        ...existing.environments[envName],
+        appURL,
+        apiURL,
+        credentials: entry,
+    };
+    await writeCredentialsFile(existing);
+}
+export async function clearCredentials(envName) {
+    const existing = await readCredentialsFile();
+    if (!existing?.environments[envName]?.credentials)
+        return;
+    delete existing.environments[envName].credentials;
+    await writeCredentialsFile(existing);
+}
+//# sourceMappingURL=credentials.js.map

package/dist/credentials.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"credentials.js","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAChD,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAChD,MAAM,mBAAmB,GAAG,YAAY,CAAC;AA6BzC,SAAS,kBAAkB;IACzB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,OAAO,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,IAAqB;IACvD,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QACjE,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,mBAAmB,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,WAAW,IAAI,IAAI,EAAE,kBAAkB,IAAI,mBAAmB,CAAC;IAE5E,kBAAkB;IAClB,MAAM,SAAS,GAAG,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;IAE3C,IAAI,SAAS,EAAE,CAAC;QACd,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,EAAE;YAClC,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,IAAI;SAC3C,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,eAAe;YACvB,MAAM,EAAE,eAAe;YACvB,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE,IAAI;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,+CAA+C;QACzE,IAAI,CAAC,SAAS,CACZ;YACE,kBAAkB,EAAE,IAAI;YACxB,YAAY,EAAE;gBACZ,CAAC,IAAI,CAAC,EAAE;oBACN,MAAM,EAAE,uBAAuB;oBAC/B,MAAM,EAAE,uBAAuB;oBAC/B,QAAQ,EAAE;wBACR,OAAO,EAAE,uBAAuB;qBACjC;iBACF;aACF;SACF,EACD,IAAI,EACJ,CAAC,CACF,CACJ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe;IAEf,MAAM,IAAI,GAAG,MAAM,mBAAmB,EAAE,CAAC;IACzC,OAAO,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,WAAW,IAAI,IAAI,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,MAAc,EACd,MAAc,EACd,KAAsB;IAEtB,MAAM,QAAQ,GAAG,CAAC,MAAM,mBAAmB,EAAE,CAAC,IAAI;QAChD,kBAAkB,EAAE,OAAO;QAC3B,YAAY,EAAE,EAAE;KACjB,CAAC;IAEF,QAAQ,CAAC,kBAAkB,GAAG,OAAO,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG;QAC/B,GAAG,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC;QACjC,MAAM;QACN,MAAM;QACN,WAAW,EAAE,KAAK;KACnB,CAAC;IAEF,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAe;IACpD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAC7C,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,WAAW;QAAE,OAAO;IAE1D,OAAO,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC;IAElD,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC"}

package/dist/index.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js ADDED Viewed

@@ -0,0 +1,31 @@
+#!/usr/bin/env node
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { resolveEnvironment } from "./credentials.js";
+import { register as registerAuthenticate } from "./tools/authenticate.js";
+import { register as registerStatus } from "./tools/status.js";
+import { register as registerVerify } from "./tools/verify.js";
+async function main() {
+    // Resolve environment: SAPIOM_ENVIRONMENT env var > file > "production"
+    const env = await resolveEnvironment(process.env.SAPIOM_ENVIRONMENT);
+    if (env.name !== "production") {
+        console.error(`\u26a0 Using environment "${env.name}": app=${env.appURL} api=${env.apiURL}`);
+    }
+    const server = new McpServer({
+        name: "sapiom",
+        version: "0.1.0",
+    });
+    // Register all tools
+    registerAuthenticate(server, env);
+    registerStatus(server, env);
+    registerVerify(server, env);
+    // Connect via stdio transport
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    console.error("Sapiom MCP server running on stdio");
+}
+main().catch((err) => {
+    console.error("Fatal error:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,QAAQ,IAAI,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAE/D,KAAK,UAAU,IAAI;IACjB,wEAAwE;IACxE,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAErE,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CACX,6BAA6B,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,CAC9E,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,qBAAqB;IACrB,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5B,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE5B,8BAA8B;IAC9B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;AACtD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/tools/authenticate.d.ts ADDED Viewed

@@ -0,0 +1,4 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type ResolvedEnvironment } from "../credentials.js";
+export declare function register(server: McpServer, env: ResolvedEnvironment): void;
+//# sourceMappingURL=authenticate.d.ts.map

package/dist/tools/authenticate.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"authenticate.d.ts","sourceRoot":"","sources":["../../src/tools/authenticate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,mBAAmB,CAAC;AAG3B,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,mBAAmB,GAAG,IAAI,CAsD1E"}

package/dist/tools/authenticate.js ADDED Viewed

@@ -0,0 +1,50 @@
+import { readCredentials, writeCredentials, } from "../credentials.js";
+import { performBrowserAuth } from "../auth.js";
+export function register(server, env) {
+    server.tool("sapiom_authenticate", "Authenticate with Sapiom by opening a browser login flow. Run this when other Sapiom tools report that authentication is required.", {}, async () => {
+        // Check if already authenticated
+        const existing = await readCredentials(env.name);
+        if (existing) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Already authenticated as ${existing.organizationName} (tenant: ${existing.tenantId}). To re-authenticate, use sapiom_logout first.`,
+                    },
+                ],
+            };
+        }
+        try {
+            const result = await performBrowserAuth(env.appURL, env.apiURL);
+            await writeCredentials(env.name, env.appURL, env.apiURL, {
+                apiKey: result.apiKey,
+                tenantId: result.tenantId,
+                organizationName: result.organizationName,
+                apiKeyId: result.apiKeyId,
+            });
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Successfully authenticated as ${result.organizationName}. Sapiom tools are now ready to use.`,
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error
+                ? err.message
+                : "Unknown error during authentication";
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Authentication failed: ${message}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    });
+}
+//# sourceMappingURL=authenticate.js.map

package/dist/tools/authenticate.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"authenticate.js","sourceRoot":"","sources":["../../src/tools/authenticate.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,gBAAgB,GAEjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,UAAU,QAAQ,CAAC,MAAiB,EAAE,GAAwB;IAClE,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,oIAAoI,EACpI,EAAE,EACF,KAAK,IAAI,EAAE;QACT,iCAAiC;QACjC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,4BAA4B,QAAQ,CAAC,gBAAgB,aAAa,QAAQ,CAAC,QAAQ,iDAAiD;qBAC3I;iBACF;aACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YAEhE,MAAM,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;gBACvD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,iCAAiC,MAAM,CAAC,gBAAgB,sCAAsC;qBACrG;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK;gBAClB,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,qCAAqC,CAAC;YAC5C,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,0BAA0B,OAAO,EAAE;qBAC1C;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/status.d.ts ADDED Viewed

@@ -0,0 +1,4 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type ResolvedEnvironment } from "../credentials.js";
+export declare function register(server: McpServer, env: ResolvedEnvironment): void;
+//# sourceMappingURL=status.d.ts.map

package/dist/tools/status.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/tools/status.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,mBAAmB,CAAC;AAE3B,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,mBAAmB,GAAG,IAAI,CA+C1E"}

package/dist/tools/status.js ADDED Viewed

@@ -0,0 +1,36 @@
+import { readCredentials, clearCredentials, } from "../credentials.js";
+export function register(server, env) {
+    server.tool("sapiom_status", "Check Sapiom authentication status. Returns whether you're authenticated and which organization.", {}, async () => {
+        const creds = await readCredentials(env.name);
+        if (creds) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Authenticated as ${creds.organizationName} (tenant: ${creds.tenantId})`,
+                    },
+                ],
+            };
+        }
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: "Not authenticated. Use the sapiom_authenticate tool to log in.",
+                },
+            ],
+        };
+    });
+    server.tool("sapiom_logout", "Log out of Sapiom by removing cached credentials for the current environment.", {}, async () => {
+        await clearCredentials(env.name);
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: "Logged out successfully. Cached credentials have been removed.",
+                },
+            ],
+        };
+    });
+}
+//# sourceMappingURL=status.js.map

package/dist/tools/status.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/tools/status.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,gBAAgB,GAEjB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,UAAU,QAAQ,CAAC,MAAiB,EAAE,GAAwB;IAClE,MAAM,CAAC,IAAI,CACT,eAAe,EACf,kGAAkG,EAClG,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE9C,IAAI,KAAK,EAAE,CAAC;YACV,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,oBAAoB,KAAK,CAAC,gBAAgB,aAAa,KAAK,CAAC,QAAQ,GAAG;qBAC/E;iBACF;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,gEAAgE;iBACvE;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,eAAe,EACf,+EAA+E,EAC/E,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEjC,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,gEAAgE;iBACvE;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/verify.d.ts ADDED Viewed

@@ -0,0 +1,4 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type ResolvedEnvironment } from "../credentials.js";
+export declare function register(server: McpServer, env: ResolvedEnvironment): void;
+//# sourceMappingURL=verify.d.ts.map

package/dist/tools/verify.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/tools/verify.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAmB,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAkB9E,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,mBAAmB,GAAG,IAAI,CA8K1E"}

package/dist/tools/verify.js ADDED Viewed

@@ -0,0 +1,153 @@
+import { z } from "zod";
+import { createFetch } from "@sapiom/fetch";
+import { readCredentials } from "../credentials.js";
+const DEFAULT_PRELUDE_URL = "https://prelude.services.sapiom.ai";
+async function getAuthenticatedFetch(env) {
+    const creds = await readCredentials(env.name);
+    if (!creds)
+        return null;
+    return createFetch({
+        apiKey: creds.apiKey,
+        baseURL: env.apiURL,
+        agentName: "sapiom-mcp",
+        integration: { name: "@sapiom/mcp", version: "0.1.0" },
+    });
+}
+export function register(server, env) {
+    const preludeURL = env.services.prelude ?? DEFAULT_PRELUDE_URL;
+    server.tool("sapiom_verify_send", "Send a verification code to a phone number via SMS. Returns a verification ID that you'll need to check the code later. Phone number must be in E.164 format (e.g. +15551234567).", {
+        phoneNumber: z
+            .string()
+            .regex(/^\+[1-9]\d{1,14}$/, "Phone number must be in E.164 format (e.g. +15551234567)")
+            .describe("Phone number in E.164 format with country code (e.g. +15551234567)"),
+    }, async ({ phoneNumber }) => {
+        const sfetch = await getAuthenticatedFetch(env);
+        if (!sfetch) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: "Not authenticated. Use the sapiom_authenticate tool first.",
+                    },
+                ],
+                isError: true,
+            };
+        }
+        try {
+            const response = await sfetch(`${preludeURL}/verifications`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({
+                    target: {
+                        type: "phone_number",
+                        value: phoneNumber,
+                    },
+                }),
+            });
+            if (!response.ok) {
+                const body = (await response.json().catch(() => ({})));
+                const message = body.message ??
+                    `Failed to send verification code (${response.status})`;
+                return {
+                    content: [{ type: "text", text: message }],
+                    isError: true,
+                };
+            }
+            const data = (await response.json());
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Verification code sent to ${phoneNumber}. Verification ID: ${data.id}\n\nAsk the user for the 6-digit code they received, then use sapiom_verify_check to verify it.`,
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Unknown error";
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Failed to send verification code: ${message}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    });
+    server.tool("sapiom_verify_check", "Check a verification code that was sent via sapiom_verify_send. Returns whether the code is correct.", {
+        verificationId: z
+            .string()
+            .describe("The verification ID returned by sapiom_verify_send"),
+        code: z
+            .string()
+            .regex(/^\d{6}$/, "Code must be exactly 6 digits")
+            .describe("The 6-digit verification code the user received"),
+    }, async ({ verificationId, code }) => {
+        const sfetch = await getAuthenticatedFetch(env);
+        if (!sfetch) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: "Not authenticated. Use the sapiom_authenticate tool first.",
+                    },
+                ],
+                isError: true,
+            };
+        }
+        try {
+            const response = await sfetch(`${preludeURL}/verifications/check`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({
+                    verificationRequestId: verificationId,
+                    code,
+                }),
+            });
+            if (!response.ok) {
+                const body = (await response.json().catch(() => ({})));
+                const message = body.message ??
+                    `Verification check failed (${response.status})`;
+                return {
+                    content: [{ type: "text", text: message }],
+                    isError: true,
+                };
+            }
+            const data = (await response.json());
+            if (data.status === "success") {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: "Verification successful! The code is correct.",
+                        },
+                    ],
+                };
+            }
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Verification ${data.status}. The code may be incorrect or expired.`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Unknown error";
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Verification check failed: ${message}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    });
+}
+//# sourceMappingURL=verify.js.map

package/dist/tools/verify.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/tools/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAAE,eAAe,EAA4B,MAAM,mBAAmB,CAAC;AAE9E,MAAM,mBAAmB,GAAG,oCAAoC,CAAC;AAEjE,KAAK,UAAU,qBAAqB,CAClC,GAAwB;IAExB,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,OAAO,WAAW,CAAC;QACjB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,GAAG,CAAC,MAAM;QACnB,SAAS,EAAE,YAAY;QACvB,WAAW,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE;KACvD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAiB,EAAE,GAAwB;IAClE,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,mBAAmB,CAAC;IAE/D,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,mLAAmL,EACnL;QACE,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,KAAK,CACJ,mBAAmB,EACnB,0DAA0D,CAC3D;aACA,QAAQ,CACP,oEAAoE,CACrE;KACJ,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QACxB,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,4DAA4D;qBACnE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,UAAU,gBAAgB,EAAE;gBAC3D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,MAAM,EAAE;wBACN,IAAI,EAAE,cAAc;wBACpB,KAAK,EAAE,WAAW;qBACnB;iBACF,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAGpD,CAAC;gBACF,MAAM,OAAO,GACV,IAAI,CAAC,OAAkB;oBACxB,qCAAqC,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAC1D,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;oBACnD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,6BAA6B,WAAW,sBAAsB,IAAI,CAAC,EAAE,iGAAiG;qBAC7K;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACrE,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,qCAAqC,OAAO,EAAE;qBACrD;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,sGAAsG,EACtG;QACE,cAAc,EAAE,CAAC;aACd,MAAM,EAAE;aACR,QAAQ,CAAC,oDAAoD,CAAC;QACjE,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,KAAK,CAAC,SAAS,EAAE,+BAA+B,CAAC;aACjD,QAAQ,CAAC,iDAAiD,CAAC;KAC/D,EACD,KAAK,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,4DAA4D;qBACnE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,UAAU,sBAAsB,EAAE;gBACjE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,qBAAqB,EAAE,cAAc;oBACrC,IAAI;iBACL,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAGpD,CAAC;gBACF,MAAM,OAAO,GACV,IAAI,CAAC,OAAkB;oBACxB,8BAA8B,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACnD,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;oBACnD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAC;YAEF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,+CAA+C;yBACtD;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,gBAAgB,IAAI,CAAC,MAAM,yCAAyC;qBAC3E;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACrE,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,8BAA8B,OAAO,EAAE;qBAC9C;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/package.json ADDED Viewed

@@ -0,0 +1,66 @@
+{
+  "name": "@sapiom/mcp",
+  "version": "0.2.0",
+  "description": "Sapiom MCP server for Claude Code — browser-based authentication and API tools",
+  "mcpName": "io.github.sapiom/mcp",
+  "keywords": [
+    "sapiom",
+    "mcp",
+    "claude",
+    "authentication",
+    "api-keys"
+  ],
+  "homepage": "https://github.com/sapiom/sapiom-js/tree/main/packages/mcp#readme",
+  "bugs": {
+    "url": "https://github.com/sapiom/sapiom-js/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/sapiom/sapiom-js.git",
+    "directory": "packages/mcp"
+  },
+  "license": "MIT",
+  "author": "Sapiom",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "sapiom-mcp": "./dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.26.0",
+    "zod": "^3.25.0",
+    "@sapiom/core": "0.3.0",
+    "@sapiom/fetch": "0.3.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.11.30",
+    "@typescript-eslint/eslint-plugin": "^7.3.1",
+    "@typescript-eslint/parser": "^7.3.1",
+    "eslint": "^8.57.0",
+    "prettier": "^3.2.5",
+    "typescript": "^5.4.2",
+    "vitest": "^3.0.0"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc --project tsconfig.build.json",
+    "clean": "rm -rf dist *.tsbuildinfo",
+    "dev": "tsc --watch",
+    "start": "node dist/index.js",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint src --ext .ts",
+    "format": "prettier --write \"src/**/*.ts\""
+  }
+}