@vibeprospecting/vpai 0.1.9 → 0.1.10

package/README.md

@@ -42,14 +42,14 @@ npm run build
 
 Produces:
 
-- `dist/vpai.js` – Node-compatible bundle (runs with Node.js)
+- `dist/vpai.cjs` – Node-compatible bundle (runs with Node.js)
 
 ### Run without installing
 
 ```bash
 npm run call -- <command> [options]
 # or
-node dist/vpai.js <command> [options]
+node dist/vpai.cjs <command> [options]
 ```
 
 ---
@@ -122,16 +122,28 @@ Install via npm for production use. Node.js is required on the target system.
 
 ```bash
 npm install -g @vibeprospecting/vpai
-# or copy dist/vpai.js and add to PATH (Node.js required)
+# or copy dist/vpai.cjs and add to PATH (Node.js required)
 ```
 
 ### Auth
 
-OAuth runs automatically on first use (browser opens). Tokens are cached by mcporter. For CI or headless use, pre-authenticate with `npx mcporter auth vpai`.
+**MCP auth flow (recommended for agents/plugins):** Same pattern as [vibeprospecting-plugin](https://github.com/explorium-ai/vibeprospecting-plugin). The agent calls `get-auth-token` on the Explorium MCP server, extracts `api_key`, and exports it before running vpai:
+
+```bash
+# 1. Agent calls get-auth-token (no args)
+# 2. Agent extracts api_key from response
+# 3. Agent exports for CLI session
+export VP_API_KEY="<api_key from get-auth-token>"
+vpai match-business --args '{"businesses_to_match":[{"name":"Google"}]}'
+```
+
+**Auth precedence when MCP is unavailable:** `VP_API_KEY` environment variable.
+
+**OAuth (interactive):** When `VP_API_KEY` is not set, OAuth runs automatically on first use (browser opens). Tokens are cached by mcporter. For CI or headless use, pre-authenticate with `npx mcporter auth vpai`.
 
 ### Config
 
-MCP server URL, OAuth settings, and timeout are embedded in the build (`src/embedded-config.ts`). No external config files.
+MCP server URL, OAuth settings, and timeout are embedded in the build (`src/embedded-config.ts`). API key via `VP_API_KEY` env (see Auth above).
 
 ### Error handling
 
@@ -156,9 +168,10 @@ Errors are logged as JSON to stderr. No unhandled promise rejections or silent f
 vpai-cli/
 ├── src/
 │   ├── cli.ts             # Entry point
+│   ├── api-key.ts         # API key resolution (VP_API_KEY env)
 │   ├── proxy.ts           # Tool registration
 │   ├── config.ts          # Config loader
-│   ├── embedded-config.ts # MCP URL, OAuth, timeout
+│   ├── embedded-config.ts # MCP URL, OAuth, API key headers
 │   ├── runtime.ts         # mcporter runtime
 │   ├── executors/         # Tool execution
 │   ├── output/            # Result and schema printing

package/dist/vpai.cjs

@@ -44262,23 +44262,42 @@ var CLI_DESCRIPTION = "Find company & contact data. Build lead lists, research p
 var DEFAULT_SERVER_NAME = "vpai";
 
 // src/embedded-config.ts
-var EMBEDDED_SERVER = {
-  name: DEFAULT_SERVER_NAME,
-  description: "Explorium research MCP (production)",
-  command: {
-    kind: "http",
-    url: new URL("https://mcp.explorium.ai/mcp")
-  },
-  auth: "oauth"
-};
+var MCP_URL = new URL("https://mcp.explorium.ai/mcp");
+function buildServerDefinition(apiKey) {
+  if (apiKey) {
+    return {
+      name: DEFAULT_SERVER_NAME,
+      description: "Explorium research MCP (production)",
+      command: {
+        kind: "http",
+        url: MCP_URL,
+        headers: { api_key: apiKey }
+      }
+    };
+  }
+  return {
+    name: DEFAULT_SERVER_NAME,
+    description: "Explorium research MCP (production)",
+    command: { kind: "http", url: MCP_URL },
+    auth: "oauth"
+  };
+}
 var EMBEDDED_CLI_CONFIG = {
   timeout: 12e4
 };
 
+// src/api-key.ts
+var VP_API_KEY_ENV = "VP_API_KEY";
+function resolveApiKey() {
+  const key = process.env[VP_API_KEY_ENV]?.trim();
+  return key || null;
+}
+
 // src/runtime.ts
 async function ensureRuntime() {
+  const server = buildServerDefinition(resolveApiKey());
   return createRuntime({
-    servers: [EMBEDDED_SERVER]
+    servers: [server]
   });
 }
 
@@ -44417,7 +44436,7 @@ function loadConfig() {
 // package.json
 var package_default = {
   name: "@vibeprospecting/vpai",
-  version: "0.1.9",
+  version: "0.1.10",
   description: "Power your chat with B2B data to create lead lists, research companies, personalize your outreach, and more. Search any company or professional to access emails, phone numbers, roles, growth signals, tech stack details, business events, website changes, and more.",
   type: "module",
   license: "MIT",
@@ -44437,6 +44456,7 @@ var package_default = {
   scripts: {
     bump: "node scripts/bump.cjs",
     build: "rm -rf dist && mkdir -p dist && node esbuild.config.cjs && chmod +x dist/vpai.cjs",
+    "type-check": "tsc --noEmit",
     prepublishOnly: "npm run build",
     call: "node dist/vpai.cjs",
     test: "jest --config jest.config.cjs",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibeprospecting/vpai",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "description": "Power your chat with B2B data to create lead lists, research companies, personalize your outreach, and more. Search any company or professional to access emails, phone numbers, roles, growth signals, tech stack details, business events, website changes, and more.",
   "type": "module",
   "license": "MIT",
@@ -20,6 +20,7 @@
   "scripts": {
     "bump": "node scripts/bump.cjs",
     "build": "rm -rf dist && mkdir -p dist && node esbuild.config.cjs && chmod +x dist/vpai.cjs",
+    "type-check": "tsc --noEmit",
     "prepublishOnly": "npm run build",
     "call": "node dist/vpai.cjs",
     "test": "jest --config jest.config.cjs",