@selfhost.dev/mcp-server 0.1.0

package/README.md

@@ -0,0 +1,382 @@
+# SelfHost MCP Server
+
+A full-featured [Model Context Protocol](https://modelcontextprotocol.io/) server that brings [SelfHost's](https://selfhost.dev) database management capabilities directly into AI coding assistants. Provision, monitor, scale, and manage production database infrastructure — all through natural language, without leaving your editor.
+
+Works with **Claude Code**, **Cursor**, **Windsurf**, **Cline**, and any MCP-compatible client.
+
+> **JIRA Epic:** [SELFHOST-110](https://selfhost.atlassian.net/browse/SELFHOST-110)
+
+---
+
+## Quick Start
+
+### Prerequisites
+
+- A [SelfHost.dev](https://selfhost.dev) account (invite-only — ask an existing user or join the waitlist)
+- **Node.js 18+** or **Bun**
+
+### Install
+
+**Claude Code:**
+
+```bash
+# Using npm (Node.js)
+claude mcp add selfhost -- npx @selfhost.dev/mcp-server
+
+# Using Bun
+claude mcp add selfhost -- bunx @selfhost.dev/mcp-server
+```
+
+**Cursor / Windsurf / Other MCP clients:**
+
+Add to your MCP configuration file:
+
+```json
+{
+  "mcpServers": {
+    "selfhost": {
+      "command": "npx",
+      "args": ["@selfhost.dev/mcp-server"]
+    }
+  }
+}
+```
+
+Or with Bun:
+
+```json
+{
+  "mcpServers": {
+    "selfhost": {
+      "command": "bunx",
+      "args": ["@selfhost.dev/mcp-server"]
+    }
+  }
+}
+```
+
+That's it. The server handles authentication, token refresh, and everything else automatically.
+
+### First Run
+
+On first use, the MCP server opens your browser to sign in via SelfHost's console. After you authorize, credentials are saved locally (`~/.selfhost/credentials.json`) and auto-refreshed — you won't need to sign in again.
+
+```
+You: "Show me my databases"
+
+Claude: Authenticates → fetches your orgs → selects org → lists instances
+        → Shows you a summary of all your running databases
+```
+
+---
+
+## What Can You Do?
+
+### Talk to your infrastructure in plain English
+
+| You say | What happens |
+|---------|-------------|
+| *"Spin up a Postgres 18 instance in us-east-1"* | Walks you through config, shows cost estimate, provisions it |
+| *"Stop my staging database"* | Finds the instance, confirms with you, stops it |
+| *"Set up a CPU alert at 80% on my prod DB"* | Creates an alert rule with email notification |
+| *"Show me the backups for my main instance"* | Lists all backups with sizes and timestamps |
+| *"Fork my production database for testing"* | Creates an independent clone with a new password |
+| *"What's my estimated monthly cost for an r6i.xlarge with 500GB gp3?"* | Calculates itemized cost breakdown |
+| *"Tune shared_buffers on my instance"* | Previews defaults, applies the override, syncs to replicas |
+
+### Safety Built In
+
+Destructive operations (delete, stop, reboot) require explicit confirmation. The server will always ask before proceeding — you'll never accidentally delete a production database.
+
+---
+
+## Features
+
+### 76 tools across 8 modules
+
+Every tool maps to a real API endpoint. No mock data, no shortcuts.
+
+#### Authentication & Users
+Automatic browser-based sign-in with Firebase. Tokens refresh transparently.
+
+| Tool | Description |
+|------|-------------|
+| `create_or_login_user` | Create account or sign in |
+| `get_current_user` | Your profile, admin status, org membership |
+| `get_my_memberships` | List your orgs and pending invitations |
+| `select_organization` | Switch org context (sets rate limits based on billing plan) |
+| `get_invite_credits` | Check remaining platform invite credits |
+| `send_platform_invite` | Invite someone to join SelfHost |
+| `list_my_platform_invites` | See invitations you've sent |
+| `reauthenticate` | Sign out and sign in again (switch accounts) |
+
+#### Organizations & Team Management
+Multi-tenant — everything is scoped to your org.
+
+| Tool | Description |
+|------|-------------|
+| `list_organizations` | All orgs you belong to |
+| `create_organization` | Create a new org (you become owner, get 5 invite credits) |
+| `get_organization` | Org details and billing plan |
+| `update_organization` | Change name, description, or IAM role |
+| `delete_organization` | Soft-delete org and all related resources |
+| `list_members` | See team members and their roles |
+| `remove_member` | Remove a member (owner/admin only) |
+| `invite_to_org` | Send org invitation with role assignment |
+| `list_org_invitations` | Pending invitations |
+| `cancel_invitation` | Revoke a pending invitation |
+| `get_my_invitations` | Invitations sent to you |
+| `list_activity_logs` | Audit trail of all actions in the org |
+
+#### Cloud Credentials
+Bring your own AWS account (BYOC) or use SelfHost's managed infrastructure.
+
+| Tool | Description |
+|------|-------------|
+| `list_credentials` | List cloud credentials (secrets never exposed) |
+| `add_credential` | Add AWS access keys or IAM role |
+| `update_credential` | Rotate keys or update metadata |
+| `delete_credential` | Remove a credential (with confirmation) |
+| `set_default_credential` | Set as default for the org |
+| `get_aws_account_info` | AWS account ID and free tier status |
+
+#### Networking
+VPCs, subnets, and security groups. Optional — auto-created during provisioning if not specified.
+
+| Tool | Description |
+|------|-------------|
+| `list_vpcs` | List VPCs in a region (grouped by public/private) |
+| `create_vpc` | Create VPC with internet gateway and subnets |
+| `delete_vpc` | Remove VPC and associated resources (with confirmation) |
+| `list_subnets` | List subnets in a region |
+| `create_subnet` | Create subnet in a VPC |
+| `list_security_groups` | List security groups |
+| `create_security_group` | Create SG with inbound rules |
+| `update_security_group` | Replace inbound rules on a security group |
+
+#### Database Instances
+The core feature. Full lifecycle management for PostgreSQL, MySQL, and MongoDB.
+
+| Tool | Description |
+|------|-------------|
+| `list_regions` | Available AWS regions |
+| `get_instance_types_for_region` | EC2 types with specs and hourly pricing |
+| `list_storage_types` | EBS volume types with pricing |
+| `estimate_instance_cost` | Itemized monthly cost breakdown before provisioning |
+| `create_instance` | Provision a new database (guided flow with cost confirmation) |
+| `list_instances` | All instances grouped by master + replicas |
+| `get_instance` | Detailed instance info with latest metrics |
+| `update_instance` | Change config, resize, toggle multi-AZ, update CIDR ranges |
+| `stop_instance` | Stop instances (with confirmation) |
+| `start_instance` | Start stopped instances |
+| `reboot_instance` | Reboot instances (with confirmation) |
+| `delete_instance` | Delete instances with optional final snapshot (with confirmation) |
+| `fork_instance` | Clone a database into a new independent instance |
+| `refresh_instance_group` | Refresh cached state for a master + replica group |
+
+#### PostgreSQL Configuration
+Tune database parameters with calculated defaults per instance type.
+
+| Tool | Description |
+|------|-------------|
+| `preview_pg_config` | See calculated defaults for an instance type (before creating) |
+| `get_pg_config` | Current config with defaults, overrides, and effective values |
+| `update_pg_config` | Apply overrides (auto-syncs to replicas, set null to revert) |
+
+#### Backups & Snapshots
+Automated backups with DLM policies and manual EBS snapshots.
+
+| Tool | Description |
+|------|-------------|
+| `list_backups` | List all backups (syncs with AWS) |
+| `create_backup` | Create S3 file backup or AWS backup job |
+| `delete_backup` | Delete backup and AWS snapshot (with confirmation) |
+| `list_backup_policies` | List DLM lifecycle policies |
+| `create_backup_policy` | Create automated backup schedule |
+| `update_backup_policy` | Enable/disable or modify schedule |
+| `delete_backup_policy` | Remove policy (with confirmation) |
+| `list_snapshots` | List EBS snapshots in a region |
+| `get_snapshot` | Snapshot details |
+| `delete_snapshot` | Delete EBS snapshot (with confirmation) |
+| `create_snapshot` | Create EBS snapshot from instance volume |
+
+#### Alerts & Notifications
+Monitor your databases and get notified when things go wrong.
+
+| Tool | Description |
+|------|-------------|
+| `list_alert_rules` | Active alert rules |
+| `create_alert_rule` | Create rule (CPU, memory, disk, replication lag, etc.) |
+| `get_alert_rule` | Rule details |
+| `update_alert_rule` | Modify thresholds or notification channels |
+| `delete_alert_rule` | Delete rule and all instances (with confirmation) |
+| `list_alert_instances` | Fired/pending/resolved alerts (paginated) |
+| `get_alert_instance` | Alert instance details |
+| `acknowledge_alert` | Acknowledge a firing alert |
+| `resolve_alert` | Manually resolve an alert |
+| `list_notification_channels` | Email notification endpoints |
+| `create_notification_channel` | Add email channel |
+| `update_notification_channel` | Modify channel config |
+| `delete_notification_channel` | Remove channel (with confirmation) |
+| `test_notification_channel` | Send test notification |
+
+---
+
+## Common Workflows
+
+### Switch AWS Account (BYOC vs Platform-Managed)
+
+```
+You: "I want to use my own AWS account"
+
+Claude: Lists your credentials → you pick one (or add new keys)
+        → fetches VPCs in your chosen region → you pick a VPC
+        → proceeds with instance creation using your account
+```
+
+### Switch Organization
+
+If you belong to multiple orgs:
+
+```
+You: "Switch to my other org"
+
+Claude: Calls get_my_memberships → shows your orgs
+        → you pick one → calls select_organization
+        → rate limits and context update to the new org
+```
+
+### Re-authenticate (Switch Accounts)
+
+If you need to sign in as a different user:
+
+```
+You: "Sign in with a different account"
+
+Claude: Calls reauthenticate → clears stored credentials
+        → opens browser for new login → saves new tokens
+        → you're now signed in as the other user
+```
+
+### Restore from Backup
+
+```
+You: "Restore my prod database from yesterday's snapshot"
+
+Claude: Lists snapshots → you pick one
+        → creates a new instance with snapshot_id
+        → shows you the new password (save it!)
+```
+
+---
+
+## Rate Limiting
+
+Rate limits are based on your org's billing plan and enforced per-user:
+
+| Plan | Reads/min | Writes/min | Concurrent |
+|------|-----------|------------|------------|
+| Free | ~60 | ~20 | 3 |
+| Starter | ~150 | ~50 | 5 |
+| Pro | ~300 | ~120 | 10 |
+| Enterprise | ~600 | ~300 | Unlimited |
+
+Reference data lookups (regions, instance types, storage types) are unlimited.
+
+---
+
+## Configuration
+
+### Environment Variables
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `API_URL` | `https://api.selfhost.dev` | SelfHost API endpoint |
+| `CONSOLE_URL` | `https://console.selfhost.dev` | SelfHost Console URL (for browser auth) |
+| `TIER` | Auto-detected | Override rate limit tier (`FREE`, `STARTER`, `PRO`, `ENTERPRISE`, `ADMIN`) |
+| `FIREBASE_API_KEY` | — | Skip browser auth (CI/headless) |
+| `FIREBASE_REFRESH_TOKEN` | — | Skip browser auth (CI/headless) |
+
+### Local Development
+
+Both `API_URL` and `CONSOLE_URL` are optional overrides — they default to the production endpoints when not set.
+
+**1. Local Rails API + Local Console**
+
+Using npx:
+```json
+{
+  "mcpServers": {
+    "selfhost": {
+      "command": "npx",
+      "args": ["tsx", "/path/to/selfhost-mcp/src/index.ts"],
+      "env": {
+        "API_URL": "http://localhost:3000",
+        "CONSOLE_URL": "http://localhost:54588"
+      }
+    }
+  }
+}
+```
+
+Using bun:
+```json
+{
+  "mcpServers": {
+    "selfhost": {
+      "command": "bun",
+      "args": ["run", "/path/to/selfhost-mcp/src/index.ts"],
+      "env": {
+        "API_URL": "http://localhost:3000",
+        "CONSOLE_URL": "http://localhost:54588"
+      }
+    }
+  }
+}
+```
+
+**2. Local Rails API + Production Console**
+
+```json
+{
+  "mcpServers": {
+    "selfhost": {
+      "command": "npx",
+      "args": ["tsx", "/path/to/selfhost-mcp/src/index.ts"],
+      "env": {
+        "API_URL": "http://localhost:3000"
+      }
+    }
+  }
+}
+```
+
+**3. Production Rails API + Local Console**
+
+```json
+{
+  "mcpServers": {
+    "selfhost": {
+      "command": "npx",
+      "args": ["tsx", "/path/to/selfhost-mcp/src/index.ts"],
+      "env": {
+        "CONSOLE_URL": "http://localhost:54588"
+      }
+    }
+  }
+}
+```
+
+### Headless / CI Mode
+
+Set `FIREBASE_API_KEY` and `FIREBASE_REFRESH_TOKEN` environment variables to skip the browser login flow. You can find these values in `~/.selfhost/credentials.json` after your first browser login.
+
+---
+
+## Security
+
+- **Credentials stored locally** at `~/.selfhost/credentials.json` with `chmod 0600` (owner-only read/write)
+- **JWT auto-refresh** — tokens refresh 5 minutes before expiry, refresh tokens are rotated
+- **Sensitive fields stripped** — passwords, AWS keys, tokens, and secrets are redacted from API responses
+- **Destructive operations gated** — delete, stop, and reboot require explicit `confirm: true`
+- **No console.log** — all logging goes to stderr to avoid corrupting the MCP JSON-RPC stream on stdout

package/dist/auth.d.ts

@@ -0,0 +1,18 @@
+export declare function wasAuthPrompted(): Promise<boolean>;
+export declare function markAuthPrompted(): Promise<void>;
+/**
+ * Returns true if credentials are available (env vars or stored file).
+ * No network calls — just a fast file existence check.
+ */
+export declare function hasCredentials(): Promise<boolean>;
+/**
+ * Returns a valid Firebase JWT, auto-refreshing if needed.
+ * Triggers browser login on first call if no credentials exist.
+ * Concurrent callers share the same in-flight auth promise.
+ */
+export declare function getValidToken(): Promise<string>;
+/**
+ * Deletes stored credentials file, clears cache, then performs fresh browser login.
+ * Used by the `reauthenticate` tool to switch accounts or fix bad state.
+ */
+export declare function forceReauth(): Promise<void>;

package/dist/auth.js

@@ -0,0 +1,204 @@
+import { createServer } from "node:http";
+import { access, readFile, writeFile, mkdir, unlink } from "node:fs/promises";
+import { dirname } from "node:path";
+import { config } from "./config.js";
+const authPromptedPath = `${dirname(config.credentialsPath)}/.auth-prompted`;
+export async function wasAuthPrompted() {
+    try {
+        await access(authPromptedPath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function markAuthPrompted() {
+    const dir = dirname(config.credentialsPath);
+    await mkdir(dir, { recursive: true });
+    await writeFile(authPromptedPath, new Date().toISOString(), { mode: 0o600 });
+}
+let cachedJwt = null;
+let jwtExpiresAt = 0;
+async function loadStoredCredentials() {
+    try {
+        const raw = await readFile(config.credentialsPath, "utf-8");
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+async function saveCredentials(apiKey, refreshToken) {
+    const dir = dirname(config.credentialsPath);
+    await mkdir(dir, { recursive: true });
+    const data = {
+        firebaseApiKey: apiKey,
+        firebaseRefreshToken: refreshToken,
+        savedAt: new Date().toISOString(),
+    };
+    await writeFile(config.credentialsPath, JSON.stringify(data, null, 2), { mode: 0o600 });
+    // Clear auth-prompted marker since we now have valid credentials
+    try {
+        await unlink(authPromptedPath);
+    }
+    catch { /* ok */ }
+}
+async function refreshJwt(apiKey, refreshToken) {
+    const url = `https://securetoken.googleapis.com/v1/token?key=${apiKey}`;
+    const res = await fetch(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body: `grant_type=refresh_token&refresh_token=${encodeURIComponent(refreshToken)}`,
+    });
+    if (!res.ok) {
+        const body = await res.text();
+        throw new Error(`Firebase token refresh failed (${res.status}): ${body}`);
+    }
+    const data = (await res.json());
+    return {
+        jwt: data.id_token,
+        newRefreshToken: data.refresh_token,
+    };
+}
+async function browserLogin() {
+    const open = (await import("open")).default;
+    return new Promise((resolve, reject) => {
+        const server = createServer((req, res) => {
+            const url = new URL(req.url, `http://localhost`);
+            if (url.pathname === "/callback") {
+                const refreshToken = url.searchParams.get("refresh_token");
+                const apiKey = url.searchParams.get("api_key");
+                if (!refreshToken || !apiKey) {
+                    res.writeHead(400, { "Content-Type": "text/html" });
+                    res.end("<h1>Missing parameters</h1><p>refresh_token and api_key are required.</p>");
+                    return;
+                }
+                res.writeHead(200, { "Content-Type": "text/html" });
+                res.end("<h1>Authorization complete!</h1><p>You can close this tab and return to Claude Code.</p>");
+                server.close();
+                clearTimeout(timeout);
+                resolve({ apiKey, refreshToken });
+            }
+        });
+        // Find available port
+        server.listen(0, "127.0.0.1", () => {
+            const addr = server.address();
+            if (!addr || typeof addr === "string") {
+                reject(new Error("Failed to get server address"));
+                return;
+            }
+            const port = addr.port;
+            const authUrl = `${config.consoleUrl}/mcp-auth?port=${port}`;
+            config.log(`Opening browser for authentication: ${authUrl}`);
+            open(authUrl);
+        });
+        // 2 minute timeout
+        const timeout = setTimeout(() => {
+            server.close();
+            reject(new Error("Browser login timed out after 2 minutes. Please try again."));
+        }, 120_000);
+        server.on("error", (err) => {
+            clearTimeout(timeout);
+            reject(err);
+        });
+    });
+}
+/**
+ * Ensures credentials exist (from .env, stored file, or browser login).
+ * Returns { apiKey, refreshToken }.
+ */
+async function resolveCredentials() {
+    // Priority 1: .env vars (headless/CI)
+    if (config.firebaseApiKey && config.firebaseRefreshToken) {
+        return {
+            apiKey: config.firebaseApiKey,
+            refreshToken: config.firebaseRefreshToken,
+        };
+    }
+    // Priority 2: Stored credentials file
+    const stored = await loadStoredCredentials();
+    if (stored) {
+        return {
+            apiKey: stored.firebaseApiKey,
+            refreshToken: stored.firebaseRefreshToken,
+        };
+    }
+    // Priority 3: Browser login
+    const creds = await browserLogin();
+    await saveCredentials(creds.apiKey, creds.refreshToken);
+    return creds;
+}
+/**
+ * Returns true if credentials are available (env vars or stored file).
+ * No network calls — just a fast file existence check.
+ */
+export async function hasCredentials() {
+    if (config.firebaseApiKey && config.firebaseRefreshToken)
+        return true;
+    return (await loadStoredCredentials()) !== null;
+}
+let authInProgress = null;
+/**
+ * Returns a valid Firebase JWT, auto-refreshing if needed.
+ * Triggers browser login on first call if no credentials exist.
+ * Concurrent callers share the same in-flight auth promise.
+ */
+export async function getValidToken() {
+    if (authInProgress)
+        return authInProgress;
+    authInProgress = _getValidTokenImpl();
+    try {
+        return await authInProgress;
+    }
+    finally {
+        authInProgress = null;
+    }
+}
+async function _getValidTokenImpl() {
+    // Return cached JWT if still valid (5 min buffer)
+    const now = Date.now();
+    if (cachedJwt && jwtExpiresAt - now > 5 * 60 * 1000) {
+        return cachedJwt;
+    }
+    const creds = await resolveCredentials();
+    try {
+        const { jwt, newRefreshToken } = await refreshJwt(creds.apiKey, creds.refreshToken);
+        cachedJwt = jwt;
+        jwtExpiresAt = now + 3600 * 1000;
+        await saveCredentials(creds.apiKey, newRefreshToken);
+        return jwt;
+    }
+    catch {
+        // Refresh token expired — re-authenticate via browser
+        cachedJwt = null;
+        jwtExpiresAt = 0;
+        const newCreds = await browserLogin();
+        await saveCredentials(newCreds.apiKey, newCreds.refreshToken);
+        const { jwt, newRefreshToken } = await refreshJwt(newCreds.apiKey, newCreds.refreshToken);
+        cachedJwt = jwt;
+        jwtExpiresAt = Date.now() + 3600 * 1000;
+        await saveCredentials(newCreds.apiKey, newRefreshToken);
+        return jwt;
+    }
+}
+/**
+ * Deletes stored credentials file, clears cache, then performs fresh browser login.
+ * Used by the `reauthenticate` tool to switch accounts or fix bad state.
+ */
+export async function forceReauth() {
+    cachedJwt = null;
+    jwtExpiresAt = 0;
+    try {
+        await unlink(config.credentialsPath);
+    }
+    catch {
+        // File may not exist — that's fine
+    }
+    const creds = await browserLogin();
+    await saveCredentials(creds.apiKey, creds.refreshToken);
+    const { jwt, newRefreshToken } = await refreshJwt(creds.apiKey, creds.refreshToken);
+    cachedJwt = jwt;
+    jwtExpiresAt = Date.now() + 3600 * 1000;
+    await saveCredentials(creds.apiKey, newRefreshToken);
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAcrC,MAAM,gBAAgB,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,iBAAiB,CAAC;AAE7E,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC5C,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,SAAS,CAAC,gBAAgB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,IAAI,SAAS,GAAkB,IAAI,CAAC;AACpC,IAAI,YAAY,GAAG,CAAC,CAAC;AAErB,KAAK,UAAU,qBAAqB;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,YAAoB;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC5C,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEtC,MAAM,IAAI,GAAsB;QAC9B,cAAc,EAAE,MAAM;QACtB,oBAAoB,EAAE,YAAY;QAClC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAClC,CAAC;IAEF,MAAM,SAAS,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAExF,iEAAiE;IACjE,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,YAAoB;IAC5D,MAAM,GAAG,GAAG,mDAAmD,MAAM,EAAE,CAAC;IACxE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,0CAA0C,kBAAkB,CAAC,YAAY,CAAC,EAAE;KACnF,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0B,CAAC;IACzD,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,QAAQ;QAClB,eAAe,EAAE,IAAI,CAAC,aAAa;KACpC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAE5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;YACxE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAI,EAAE,kBAAkB,CAAC,CAAC;YAElD,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;gBAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAE/C,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC;oBAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;oBACrF,OAAO;gBACT,CAAC;gBAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,0FAA0F,CAAC,CAAC;gBAEpG,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,sBAAsB;QACtB,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,UAAU,kBAAkB,IAAI,EAAE,CAAC;YAC7D,MAAM,CAAC,GAAG,CAAC,uCAAuC,OAAO,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,OAAO,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,mBAAmB;QACnB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC,CAAC;QAClF,CAAC,EAAE,OAAO,CAAC,CAAC;QAEZ,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAChC,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,kBAAkB;IAC/B,sCAAsC;IACtC,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;QACzD,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,cAAc;YAC7B,YAAY,EAAE,MAAM,CAAC,oBAAoB;SAC1C,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,MAAM,MAAM,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAC7C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,cAAc;YAC7B,YAAY,EAAE,MAAM,CAAC,oBAAoB;SAC1C,CAAC;IACJ,CAAC;IAED,4BAA4B;IAC5B,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;IACnC,MAAM,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,oBAAoB;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,CAAC,MAAM,qBAAqB,EAAE,CAAC,KAAK,IAAI,CAAC;AAClD,CAAC;AAED,IAAI,cAAc,GAA2B,IAAI,CAAC;AAElD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAC1C,cAAc,GAAG,kBAAkB,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,cAAc,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB;IAC/B,kDAAkD;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,SAAS,IAAI,YAAY,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QACpD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAEzC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACpF,SAAS,GAAG,GAAG,CAAC;QAChB,YAAY,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;QACjC,MAAM,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QACrD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,sDAAsD;QACtD,SAAS,GAAG,IAAI,CAAC;QACjB,YAAY,GAAG,CAAC,CAAC;QACjB,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;QACtC,MAAM,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;QAE9D,MAAM,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC1F,SAAS,GAAG,GAAG,CAAC;QAChB,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;QACxC,MAAM,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QACxD,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,SAAS,GAAG,IAAI,CAAC;IACjB,YAAY,GAAG,CAAC,CAAC;IAEjB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;IACnC,MAAM,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAExD,MAAM,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACpF,SAAS,GAAG,GAAG,CAAC;IAChB,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IACxC,MAAM,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AACvD,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,10 @@
+import type { ClientResult, HttpMethod } from "./types/api.js";
+interface RequestOptions {
+    method?: HttpMethod;
+    body?: Record<string, unknown>;
+    query?: Record<string, string | undefined>;
+    toolName?: string;
+    skipOrgInjection?: boolean;
+}
+export declare function apiRequest<T>(path: string, options?: RequestOptions): Promise<ClientResult<T>>;
+export {};