@spekoai/mcp-calls 0.2.0 → 0.3.0

package/README.md

@@ -2,8 +2,8 @@
 
 **Place real, _disclosed_ phone calls to businesses — straight from your coding agent.**
 
-> _"call Sakura Sushi and ask if they have a table for 4 at 8pm — my name is Amirlan"_
-> → the agent dials, opens with _"Hi, this is an AI assistant calling on behalf of Amirlan…"_,
+> _"call Sakura Sushi and ask if they have a table for 4 at 8pm — my name is John"_
+> → the agent dials, opens with _"Hi, this is an AI assistant calling on behalf of John…"_,
 > and the `OUTCOME:` (booked / not available) lands back in your terminal.
 
 A [Model Context Protocol](https://modelcontextprotocol.io) server for Claude Code, Claude
@@ -15,9 +15,12 @@ Desktop, and any MCP client. Powered by [Speko](https://speko.ai).
 npx @spekoai/mcp-calls@latest init
 ```
 
-The wizard opens the Speko dashboard for an API key, verifies it, writes the MCP into your
-client config (Claude Code or Claude Desktop), and installs a companion skill. Then just ask
-your agent to call a business.
+The wizard signs you in **with your browser** (OAuth — no key to copy or paste), fetches your
+key automatically, writes the MCP into your client config (Claude Code or Claude Desktop), and
+installs a companion skill. Then just ask your agent to call a business.
+
+Already have a key, or on a headless box? `--token sk_...` or `--paste` skips the browser.
+Re-authenticate anytime with `npx @spekoai/mcp-calls login`.
 
 It runs **single-process**: give it your `SPEKO_API_KEY` and it calls `api.speko.dev`
 directly — no separate server to run.
@@ -44,6 +47,8 @@ backing server instead of running in-process, set `SPEKO_MCP_SERVER_URL`.
 | --- | --- |
 | `lookup_business(name, location?)` | Resolve a business → dialable candidates + a signed `dial_token` per callable one. The only path that can authorize a call. |
 | `make_call(dial_token, objective, caller_name, context?)` | Place the disclosed, objective-scoped call; wait for it to finish; return the `OUTCOME` + transcript. Honest `connected`/`answered`/`not_connected`. |
+| `call_number(phone_number, objective, caller_name)` | Disclosed PERSONAL call to a specific number (e.g. a friend) — mobiles allowed. Opt-in via `SPEKO_ALLOW_DIRECT_DIAL=1`. |
+| `get_call(call_id)` | Read-only: re-check a call's status, `OUTCOME`, and transcript. Never dials. |
 | `check_call_readiness()` | Read-only preflight: auth, credit balance, outbound caller-ID. Never dials. |
 
 ## Safety

package/dist/index.js

@@ -10,7 +10,7 @@ var __export = (target, all) => {
 };
 
 // ../server/dist/config.js
-import { createHash } from "crypto";
+import { createHash as createHash2 } from "crypto";
 import { existsSync as existsSync3 } from "fs";
 import { dirname as dirname3, resolve as resolve3 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
@@ -70,9 +70,9 @@ function loadConfig() {
       const n = Number(process.env.SPEKO_DEMO_TTS_SPEED);
       return Number.isFinite(n) && n > 0 ? n : void 0;
     })(),
-    ttsPin: (process.env.SPEKO_TTS_PIN ?? "").trim() || "elevenlabs:eleven_turbo_v2_5",
-    sttPin: (process.env.SPEKO_STT_PIN ?? "").trim() || "deepgram",
-    llmPin: (process.env.SPEKO_LLM_PIN ?? "").trim() || "groq:llama-3.3-70b-versatile",
+    ttsPin: (process.env.SPEKO_TTS_PIN ?? "").trim() || "elevenlabs:eleven_flash_v2_5",
+    sttPin: (process.env.SPEKO_STT_PIN ?? "").trim() || "deepgram:nova-3",
+    llmPin: (process.env.SPEKO_LLM_PIN ?? "").trim() || "groq:llama-3.3-70b-versatile,openai:gpt-4.1-mini",
     optimizeFor: (() => {
       const v = (process.env.SPEKO_OPTIMIZE_FOR ?? "").trim();
       return ["balanced", "accuracy", "latency", "cost"].includes(v) ? v : "latency";
@@ -93,7 +93,7 @@ function loadConfig() {
   return cached;
 }
 function serverBearerHash(cfg) {
-  return createHash("sha256").update(cfg.speko.apiKey, "utf-8").digest("hex").slice(0, 16);
+  return createHash2("sha256").update(cfg.speko.apiKey, "utf-8").digest("hex").slice(0, 16);
 }
 var ConfigError, cached;
 var init_config = __esm({
@@ -842,9 +842,9 @@ var init_objective = __esm({
 });
 
 // ../server/dist/safety/prompt.js
-import { randomBytes } from "crypto";
+import { randomBytes as randomBytes2 } from "crypto";
 function delimitedBlock(label, content) {
-  const nonce = randomBytes(8).toString("hex");
+  const nonce = randomBytes2(8).toString("hex");
   return `${BLOCK_RULE} ${label} ${nonce} ${BLOCK_RULE}
 ${content}
 ${BLOCK_RULE} END ${label} ${nonce} ${BLOCK_RULE}`;
@@ -1017,7 +1017,7 @@ async function makeCall(input, deps) {
       allowedProviders: {
         tts: [deps.cfg.ttsPin],
         stt: [deps.cfg.sttPin],
-        ...deps.cfg.llmPin ? { llm: [deps.cfg.llmPin] } : {}
+        ...deps.cfg.llmPin ? { llm: deps.cfg.llmPin.split(",").map((m) => m.trim()).filter(Boolean) } : {}
       }
     },
     sttOptions: { keywords: [caller, businessName, ...DIAL_STT_KEYWORDS] },
@@ -1374,13 +1374,191 @@ var init_core = __esm({
 import { MCPServer } from "mcp-framework";
 
 // src/cli/init.ts
-import { spawn, spawnSync } from "child_process";
+import { spawn as spawn2, spawnSync } from "child_process";
 import { createInterface } from "readline";
 import { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
-import { homedir, platform } from "os";
+import { homedir, platform as platform2 } from "os";
 import { dirname, join, resolve } from "path";
 import { fileURLToPath } from "url";
+
+// src/cli/login.ts
+import { createServer } from "http";
+import { randomBytes, createHash } from "crypto";
+import { spawn } from "child_process";
+import { platform } from "os";
 var API_BASE = (process.env.SPEKOAI_API_URL || "https://api.speko.dev").replace(/\/+$/, "");
+var AUTH_DISCOVERY = process.env.SPEKO_OAUTH_DISCOVERY || "https://platform.speko.dev/.well-known/oauth-authorization-server/api/auth";
+var LOGIN_TIMEOUT_MS = 5 * 6e4;
+function b64url(buf) {
+  return buf.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function escapeHtml(s) {
+  return s.replace(/[&<>"']/g, (ch) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[ch]);
+}
+function resultPage(title, body) {
+  return `<!doctype html><meta charset="utf-8"><title>${escapeHtml(title)}</title>
+<body style="font-family:system-ui,-apple-system,sans-serif;max-width:30rem;margin:18vh auto;text-align:center;color:#111">
+<div style="font-size:2.5rem">\u{1F4DE}</div>
+<h1 style="font-size:1.35rem;margin:.5rem 0">${escapeHtml(title)}</h1>
+<p style="color:#555;line-height:1.5">${escapeHtml(body)}</p></body>`;
+}
+function openBrowser(url) {
+  if (["1", "true", "yes"].includes((process.env.SPEKO_NO_BROWSER ?? "").toLowerCase())) return;
+  try {
+    const p = platform();
+    const cmd2 = p === "darwin" ? "open" : p === "win32" ? "cmd" : "xdg-open";
+    const args = p === "win32" ? ["/c", "start", "", url] : [url];
+    const child = spawn(cmd2, args, { stdio: "ignore", detached: true });
+    child.on("error", () => {
+    });
+    child.unref();
+  } catch {
+  }
+}
+async function discover() {
+  const r = await fetch(AUTH_DISCOVERY, { signal: AbortSignal.timeout(15e3) });
+  if (!r.ok) throw new Error(`OAuth discovery failed (HTTP ${r.status}) at ${AUTH_DISCOVERY}`);
+  const d = await r.json();
+  if (!d.authorization_endpoint || !d.token_endpoint || !d.registration_endpoint || !d.issuer) {
+    throw new Error("OAuth discovery doc is missing required endpoints");
+  }
+  return d;
+}
+async function registerClient(registrationEndpoint, redirectUri) {
+  const r = await fetch(registrationEndpoint, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({
+      client_name: "Speko Calls CLI",
+      redirect_uris: [redirectUri],
+      grant_types: ["authorization_code"],
+      response_types: ["code"],
+      token_endpoint_auth_method: "none",
+      type: "native",
+      scope: "openid profile email"
+    }),
+    signal: AbortSignal.timeout(15e3)
+  });
+  if (!r.ok) throw new Error(`client registration failed (HTTP ${r.status})`);
+  const j = await r.json();
+  if (!j.client_id) throw new Error("client registration returned no client_id");
+  return j.client_id;
+}
+async function fetchOrgKey(bearer2) {
+  const r = await fetch(`${API_BASE}/v1/api-keys/organization-credentials`, {
+    headers: { authorization: `Bearer ${bearer2}` },
+    signal: AbortSignal.timeout(15e3)
+  });
+  if (r.status === 403) {
+    throw new Error("your account has no organization yet \u2014 finish signup at platform.speko.dev, then retry");
+  }
+  if (!r.ok) {
+    const body = await r.text().catch(() => "");
+    throw new Error(`couldn't fetch your API key (HTTP ${r.status})${body ? `: ${body.slice(0, 160)}` : ""}`);
+  }
+  const j = await r.json();
+  const key = j.mcpApiKey?.key;
+  if (!key) throw new Error("API-key response was missing mcpApiKey.key");
+  return key;
+}
+function startLoopback(expectedState) {
+  return new Promise((resolve4, reject) => {
+    let resolveCode;
+    let rejectCode;
+    const waitForCode = new Promise((res, rej) => {
+      resolveCode = res;
+      rejectCode = rej;
+    });
+    const timeout = setTimeout(
+      () => rejectCode(new Error("login timed out (5 min) \u2014 no redirect received")),
+      LOGIN_TIMEOUT_MS
+    );
+    if (typeof timeout.unref === "function") timeout.unref();
+    const server2 = createServer((req, res) => {
+      const u = new URL(req.url ?? "/", "http://127.0.0.1");
+      if (u.pathname !== "/callback") {
+        res.writeHead(404);
+        res.end();
+        return;
+      }
+      const send = (status, title, body) => {
+        res.writeHead(status, { "content-type": "text/html; charset=utf-8" });
+        res.end(resultPage(title, body));
+      };
+      const err = u.searchParams.get("error");
+      const code = u.searchParams.get("code");
+      const state = u.searchParams.get("state");
+      clearTimeout(timeout);
+      if (err) {
+        send(400, "Sign-in failed", `Authorization was denied (${err}). You can close this tab and try again.`);
+        rejectCode(new Error(`authorization denied: ${err}`));
+        return;
+      }
+      if (!code || state !== expectedState) {
+        send(400, "Sign-in failed", "The response was invalid or didn't match. Close this tab and re-run the login.");
+        rejectCode(new Error("state mismatch or missing authorization code"));
+        return;
+      }
+      send(200, "You're connected \u2713", "Speko Calls is signed in. You can close this tab and return to your terminal.");
+      resolveCode(code);
+    });
+    server2.on("error", reject);
+    server2.listen(0, "127.0.0.1", () => {
+      const port = server2.address().port;
+      resolve4({ server: server2, redirectUri: `http://127.0.0.1:${port}/callback`, waitForCode });
+    });
+  });
+}
+async function browserLogin(log = () => {
+}) {
+  const disc = await discover();
+  const verifier = b64url(randomBytes(32));
+  const challenge = b64url(createHash("sha256").update(verifier).digest());
+  const state = b64url(randomBytes(16));
+  const { server: server2, redirectUri, waitForCode } = await startLoopback(state);
+  try {
+    const clientId = await registerClient(disc.registration_endpoint, redirectUri);
+    const authUrl = new URL(disc.authorization_endpoint);
+    authUrl.searchParams.set("response_type", "code");
+    authUrl.searchParams.set("client_id", clientId);
+    authUrl.searchParams.set("redirect_uri", redirectUri);
+    authUrl.searchParams.set("scope", "openid profile email");
+    authUrl.searchParams.set("state", state);
+    authUrl.searchParams.set("code_challenge", challenge);
+    authUrl.searchParams.set("code_challenge_method", "S256");
+    log("Opening your browser to sign in to Speko\u2026");
+    log(`If it doesn't open, paste this URL into your browser:
+    ${authUrl.toString()}`);
+    openBrowser(authUrl.toString());
+    log("Waiting for you to finish signing in\u2026");
+    const code = await waitForCode;
+    const tok = await fetch(disc.token_endpoint, {
+      method: "POST",
+      headers: { "content-type": "application/x-www-form-urlencoded" },
+      body: new URLSearchParams({
+        grant_type: "authorization_code",
+        code,
+        redirect_uri: redirectUri,
+        client_id: clientId,
+        code_verifier: verifier
+      }),
+      signal: AbortSignal.timeout(2e4)
+    });
+    if (!tok.ok) {
+      const body = await tok.text().catch(() => "");
+      throw new Error(`token exchange failed (HTTP ${tok.status})${body ? `: ${body.slice(0, 200)}` : ""}`);
+    }
+    const tj = await tok.json();
+    const bearer2 = tj.id_token ?? tj.access_token;
+    if (!bearer2) throw new Error("token endpoint returned neither an id_token nor an access_token");
+    return await fetchOrgKey(bearer2);
+  } finally {
+    server2.close();
+  }
+}
+
+// src/cli/init.ts
+var API_BASE2 = (process.env.SPEKOAI_API_URL || "https://api.speko.dev").replace(/\/+$/, "");
 var DASHBOARD = "https://platform.speko.dev";
 var PKG = "@spekoai/mcp-calls";
 var SERVER_NAME = "speko-calls";
@@ -1393,7 +1571,7 @@ var c = {
   cyan: (s) => `\x1B[36m${s}\x1B[0m`
 };
 function parseFlags(argv) {
-  const f = { scope: "user", yes: false, printConfig: false };
+  const f = { scope: "user", yes: false, printConfig: false, paste: false };
   for (let i = 0; i < argv.length; i++) {
     const a = argv[i];
     if (a === "--token") f.token = argv[++i];
@@ -1401,6 +1579,7 @@ function parseFlags(argv) {
     else if (a === "--scope") f.scope = argv[++i] ?? "user";
     else if (a === "--yes" || a === "-y") f.yes = true;
     else if (a === "--print-config") f.printConfig = true;
+    else if (a === "--paste" || a === "--manual") f.paste = true;
   }
   return f;
 }
@@ -1451,12 +1630,12 @@ function askSecret(query) {
     stdin.on("data", onData);
   });
 }
-function openBrowser(url) {
+function openBrowser2(url) {
   try {
-    const p = platform();
+    const p = platform2();
     const cmd2 = p === "darwin" ? "open" : p === "win32" ? "cmd" : "xdg-open";
     const args = p === "win32" ? ["/c", "start", "", url] : [url];
-    const child = spawn(cmd2, args, { stdio: "ignore", detached: true });
+    const child = spawn2(cmd2, args, { stdio: "ignore", detached: true });
     child.on("error", () => {
     });
     child.unref();
@@ -1465,7 +1644,7 @@ function openBrowser(url) {
 }
 async function verifyKey(key) {
   try {
-    const r = await fetch(`${API_BASE}/v1/organization`, {
+    const r = await fetch(`${API_BASE2}/v1/organization`, {
       headers: { authorization: `Bearer ${key}` },
       signal: AbortSignal.timeout(15e3)
     });
@@ -1485,11 +1664,13 @@ function claudeCliPresent() {
 }
 function desktopConfigPath() {
   const home = homedir();
-  if (platform() === "darwin") return join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json");
-  if (platform() === "win32") return join(process.env.APPDATA ?? join(home, "AppData", "Roaming"), "Claude", "claude_desktop_config.json");
+  if (platform2() === "darwin") return join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json");
+  if (platform2() === "win32") return join(process.env.APPDATA ?? join(home, "AppData", "Roaming"), "Claude", "claude_desktop_config.json");
   return join(home, ".config", "Claude", "claude_desktop_config.json");
 }
-function configureClaudeCode(key, scope) {
+function configureClaudeCode(key, scope, extraEnv = {}) {
+  const envArgs = ["--env", `SPEKO_API_KEY=${key}`];
+  for (const [k, v] of Object.entries(extraEnv)) envArgs.push("--env", `${k}=${v}`);
   const manual = `claude mcp add ${SERVER_NAME} --scope ${scope} --env SPEKO_API_KEY=<your-key> -- npx -y ${PKG}`;
   if (!claudeCliPresent()) {
     console.log(c.yellow("  \u2022 Claude Code CLI not found on PATH. Run this yourself once installed:"));
@@ -1499,7 +1680,7 @@ function configureClaudeCode(key, scope) {
   spawnSync("claude", ["mcp", "remove", SERVER_NAME, "--scope", scope], { stdio: "ignore" });
   const r = spawnSync(
     "claude",
-    ["mcp", "add", SERVER_NAME, "--scope", scope, "--env", `SPEKO_API_KEY=${key}`, "--", "npx", "-y", PKG],
+    ["mcp", "add", SERVER_NAME, "--scope", scope, ...envArgs, "--", "npx", "-y", PKG],
     { stdio: "inherit" }
   );
   if (r.status === 0) {
@@ -1510,7 +1691,7 @@ function configureClaudeCode(key, scope) {
   console.log("    " + c.cyan(manual));
   return false;
 }
-function configureClaudeDesktop(key) {
+function configureClaudeDesktop(key, extraEnv = {}) {
   const path = desktopConfigPath();
   try {
     let cfg = {};
@@ -1527,7 +1708,7 @@ function configureClaudeDesktop(key) {
       mkdirSync(dirname(path), { recursive: true });
     }
     const servers = cfg.mcpServers && typeof cfg.mcpServers === "object" ? cfg.mcpServers : {};
-    servers[SERVER_NAME] = { command: "npx", args: ["-y", PKG], env: { SPEKO_API_KEY: key } };
+    servers[SERVER_NAME] = { command: "npx", args: ["-y", PKG], env: { SPEKO_API_KEY: key, ...extraEnv } };
     cfg.mcpServers = servers;
     writeFileSync(path, `${JSON.stringify(cfg, null, 2)}
 `);
@@ -1542,8 +1723,11 @@ function configureClaudeDesktop(key) {
 function installSkill() {
   try {
     const here = dirname(fileURLToPath(import.meta.url));
-    const src = resolve(here, "..", "..", "skills", SERVER_NAME, "SKILL.md");
-    if (!existsSync(src)) {
+    const src = [
+      resolve(here, "..", "skills", SERVER_NAME, "SKILL.md"),
+      resolve(here, "..", "..", "skills", SERVER_NAME, "SKILL.md")
+    ].find((p) => existsSync(p));
+    if (!src) {
       console.log(c.yellow("  \u2022 Bundled skill not found in package; skipping skill install."));
       return false;
     }
@@ -1561,27 +1745,33 @@ function installSkill() {
     return false;
   }
 }
-async function runInit(argv) {
+async function runInit(argv, mode = "init") {
   const f = parseFlags(argv);
-  console.log(c.bold("\n  Speko Calls \u2014 setup\n"));
-  console.log("  This MCP places " + c.bold("real, disclosed") + " outbound phone calls to " + c.bold("businesses") + ",");
-  console.log("  straight from your coding agent. Every call opens with an AI disclosure;");
-  console.log("  business lines only; quiet hours 08:00\u201321:00 in the destination's local time.\n");
-  if (!f.yes) {
-    const ok = (await ask("  Continue? [Y/n] ")).toLowerCase();
-    if (ok === "n" || ok === "no") {
-      console.log("  Aborted.");
-      return;
-    }
+  const quick = mode === "login";
+  console.log(c.bold(quick ? "\n  Speko Calls \u2014 sign in\n" : "\n  Speko Calls \u2014 setup\n"));
+  if (!quick) {
+    console.log("  This MCP places " + c.bold("real, disclosed") + " outbound phone calls to " + c.bold("businesses") + ",");
+    console.log("  straight from your coding agent. Every call opens with an AI disclosure;");
+    console.log("  business lines only; quiet hours 08:00\u201321:00 in the destination's local time.\n");
   }
   let key = (f.token ?? process.env.SPEKO_API_KEY ?? "").trim();
+  if (!key && !f.paste) {
+    console.log("\n  Sign in to connect \u2014 this opens your browser. " + c.dim("No key to copy or paste."));
+    try {
+      key = await browserLogin((m) => console.log(c.dim("  " + m)));
+      console.log(c.green("  \u2713 Signed in \u2014 fetched your API key automatically."));
+    } catch (e) {
+      console.log(c.yellow(`  \u2022 Browser sign-in didn't complete (${e.message}).`));
+      console.log("  Falling back to manual key entry. " + c.dim("(Use --paste to skip the browser next time.)"));
+    }
+  }
   if (!key) {
     console.log(`
   Opening ${c.cyan(DASHBOARD)} \u2014 sign in and create an API key (starts with "sk_").`);
     console.log(c.dim(`  (If it doesn't open: visit ${DASHBOARD} and copy your key.)
 `));
     if (!f.yes) await ask("  Press Enter to open your browser\u2026 ");
-    openBrowser(DASHBOARD);
+    openBrowser2(DASHBOARD);
     key = await askSecret("  Paste your Speko API key: ");
   }
   if (!key) {
@@ -1607,17 +1797,26 @@ async function runInit(argv) {
     console.log("    " + c.cyan(JSON.stringify({ [SERVER_NAME]: { command: "npx", args: ["-y", PKG], env: { SPEKO_API_KEY: key } } })));
     return;
   }
-  let target = (f.client ?? "").toLowerCase();
-  if (!target) {
-    const hasCode = claudeCliPresent();
-    const def = hasCode ? "code" : "desktop";
-    const ans = (await ask(`
-  Configure which client? [code/desktop/both] (${def}) `)).toLowerCase();
-    target = ans || def;
+  const target = (f.client || "both").toLowerCase();
+  const extraEnv = {};
+  if (!quick && !f.yes) {
+    const demo = (await ask('\n  Set up a quick DEMO so "call <a business>" works right away \u2014 rings a number you control? [y/N] ')).toLowerCase();
+    if (demo === "y" || demo === "yes") {
+      const num = (await ask("  Number to ring, E.164 (e.g. +15551234567): ")).replace(/\s/g, "");
+      if (/^\+?[1-9]\d{6,14}$/.test(num)) {
+        const biz = (await ask("  Business name to say on the call (default: Sakura Sushi): ")).trim() || "Sakura Sushi";
+        extraEnv.SPEKO_DEMO = "1";
+        extraEnv.SPEKO_DEMO_E164 = num.startsWith("+") ? num : `+${num}`;
+        extraEnv.SPEKO_DEMO_BUSINESS = biz;
+        console.log(c.dim(`    Demo on: "call ${biz}" will ring ${extraEnv.SPEKO_DEMO_E164}.`));
+      } else {
+        console.log(c.yellow("  \u2022 Skipping demo \u2014 that didn't look like an E.164 number."));
+      }
+    }
   }
   console.log("");
-  if (target === "code" || target === "both") configureClaudeCode(key, f.scope);
-  if (target === "desktop" || target === "both") configureClaudeDesktop(key);
+  if (target === "code" || target === "both") configureClaudeCode(key, f.scope, extraEnv);
+  if (target === "desktop" || target === "both") configureClaudeDesktop(key, extraEnv);
   installSkill();
   console.log(c.bold("\n  \u2705 Done.\n"));
   console.log("  Try it: open your agent and say");
@@ -1687,7 +1886,7 @@ import { MCPTool as MCPTool2 } from "mcp-framework";
 import { z as z2 } from "zod";
 
 // src/http/serverClient.ts
-import { randomBytes as randomBytes2 } from "crypto";
+import { randomBytes as randomBytes3 } from "crypto";
 var DemoServerError = class extends Error {
   name = "DemoServerError";
 };
@@ -1710,7 +1909,7 @@ var InProcessBackend = class {
     if (!this.ready) {
       this.ready = (async () => {
         if (!(process.env.SPEKO_DIAL_TOKEN_SECRET ?? "").trim()) {
-          process.env.SPEKO_DIAL_TOKEN_SECRET = randomBytes2(32).toString("hex");
+          process.env.SPEKO_DIAL_TOKEN_SECRET = randomBytes3(32).toString("hex");
         }
         const core = await Promise.resolve().then(() => (init_core(), core_exports));
         const cfg = core.loadConfig();
@@ -1847,9 +2046,9 @@ function getServerClient() {
 // src/tools/CallNumberTool.ts
 var schema2 = z2.object({
   phone_number: z2.string().describe("Number to call, E.164 (e.g. +77011234567). A real number the user has consent to call."),
-  objective: z2.string().describe("What to say / accomplish, e.g. 'Tell Karim that Amirlan says happy birthday and misses him.'"),
+  objective: z2.string().describe("What to say / accomplish, e.g. 'Tell Sam that John says happy birthday and misses him.'"),
   caller_name: z2.string().describe("Name of the human the call is on behalf of (1-80 chars); spoken in the AI-disclosure opening."),
-  recipient_name: z2.string().optional().describe("Who you're calling, used in the greeting (e.g. 'Karim')."),
+  recipient_name: z2.string().optional().describe("Who you're calling, used in the greeting (e.g. 'Sam')."),
   context: z2.string().optional().describe("Optional extra context for the message."),
   utc_offset_minutes: z2.number().int().optional().describe("Callee UTC offset in minutes for quiet hours (e.g. 300 = UTC+5). Auto-derived from the number; pass it only if a call is blocked for unknown timezone."),
   max_duration_seconds: z2.number().int().optional().describe("Max seconds to wait for the call to finish; clamped 30-300.")
@@ -1944,17 +2143,40 @@ var CheckCallReadinessTool = class extends MCPTool3 {
   }
 };
 
-// src/tools/LookupBusinessTool.ts
+// src/tools/GetCallTool.ts
 import { MCPTool as MCPTool4 } from "mcp-framework";
 import { z as z4 } from "zod";
 var schema4 = z4.object({
-  name: z4.string().min(1).describe(`Business name, e.g. "Joe's Pizza".`),
-  location: z4.string().optional().describe("Optional city or area to disambiguate, e.g. 'New York'.")
+  call_id: z4.string().describe("The call_id returned by make_call or call_number \u2014 to re-check a call's status, outcome, and transcript.")
 });
-var LookupBusinessTool = class extends MCPTool4 {
+var GetCallTool = class extends MCPTool4 {
+  name = "get_call";
+  description = "Read-only: re-check an existing call by its call_id \u2014 status, connected/answered, the OUTCOME line, and the transcript. Never dials. Use it after make_call or call_number reports a timeout, or to inspect a finished call.";
+  schema = schema4;
+  annotations = {
+    title: "Get Call",
+    readOnlyHint: true,
+    destructiveHint: false,
+    idempotentHint: true,
+    openWorldHint: true
+  };
+  async execute(input) {
+    const id = encodeURIComponent(String(input.call_id ?? "").trim());
+    return await getServerClient().get(`/call/${id}`);
+  }
+};
+
+// src/tools/LookupBusinessTool.ts
+import { MCPTool as MCPTool5 } from "mcp-framework";
+import { z as z5 } from "zod";
+var schema5 = z5.object({
+  name: z5.string().min(1).describe(`Business name, e.g. "Joe's Pizza".`),
+  location: z5.string().optional().describe("Optional city or area to disambiguate, e.g. 'New York'.")
+});
+var LookupBusinessTool = class extends MCPTool5 {
   name = "lookup_business";
   description = "Resolve a business name (plus optional location) to dialable candidates and mint a signed dial_token for each callable one. This is the only path that can authorize make_call \u2014 raw phone numbers are rejected.";
-  schema = schema4;
+  schema = schema5;
   annotations = {
     title: "Lookup Business",
     readOnlyHint: true,
@@ -1977,14 +2199,14 @@ var LookupBusinessTool = class extends MCPTool4 {
 };
 
 // src/tools/MakeCallTool.ts
-import { MCPTool as MCPTool5 } from "mcp-framework";
-import { z as z5 } from "zod";
-var schema5 = z5.object({
-  dial_token: z5.string().describe("Signed dial token minted by lookup_business. Raw phone numbers are rejected."),
-  objective: z5.string().describe("Single transactional question, e.g. 'Do you have a table for 4 at 8pm tonight?'."),
-  caller_name: z5.string().describe("Name of the human the call is on behalf of (1-80 chars); spoken in the AI-disclosure opening line."),
-  context: z5.string().optional().describe("Optional extra task context (party size, dates, order numbers)."),
-  max_duration_seconds: z5.number().int().optional().describe("Max seconds to wait for the call to finish; clamped to 30-300.")
+import { MCPTool as MCPTool6 } from "mcp-framework";
+import { z as z6 } from "zod";
+var schema6 = z6.object({
+  dial_token: z6.string().describe("Signed dial token minted by lookup_business. Raw phone numbers are rejected."),
+  objective: z6.string().describe("Single transactional question, e.g. 'Do you have a table for 4 at 8pm tonight?'."),
+  caller_name: z6.string().describe("Name of the human the call is on behalf of (1-80 chars); spoken in the AI-disclosure opening line."),
+  context: z6.string().optional().describe("Optional extra task context (party size, dates, order numbers)."),
+  max_duration_seconds: z6.number().int().optional().describe("Max seconds to wait for the call to finish; clamped to 30-300.")
 });
 var MIN_WAIT2 = 30;
 var MAX_WAIT2 = 300;
@@ -2012,10 +2234,10 @@ function summarize2(s) {
   if (outcome) return outcome;
   return `Call ${callId ?? ""} finished with status '${status}' and no OUTCOME line.`.trim();
 }
-var MakeCallTool = class extends MCPTool5 {
+var MakeCallTool = class extends MCPTool6 {
   name = "make_call";
   description = "Place a disclosed, objective-scoped phone call authorized by a dial_token from lookup_business. Stays open until the call finishes and returns the OUTCOME line plus the transcript. Every call opens with a non-removable AI disclosure; selling, promotion, surveys, fundraising, and campaigning are blocked. All safety rails are enforced server-side.";
-  schema = schema5;
+  schema = schema6;
   annotations = {
     title: "Make Call",
     readOnlyHint: false,
@@ -2054,19 +2276,20 @@ var MakeCallTool = class extends MCPTool5 {
 // src/index.ts
 var cmd = process.argv[2];
 if (cmd === "init" || cmd === "setup" || cmd === "login") {
-  await runInit(process.argv.slice(3));
+  await runInit(process.argv.slice(3), cmd);
   process.exit(0);
 }
 loadEnv();
 var server = new MCPServer({
   name: "speko-calls",
-  version: "0.2.0",
+  version: "0.3.0",
   transport: { type: "stdio" }
 });
 server.addTool(LookupBusinessTool);
 server.addTool(MakeCallTool);
 server.addTool(CallNumberTool);
 server.addTool(CheckCallReadinessTool);
+server.addTool(GetCallTool);
 server.addTool(CallMeTool);
 await server.start();
 //# sourceMappingURL=index.js.map