@vitalsend/mcp 0.1.0 → 0.2.0

package/README.md

@@ -67,11 +67,13 @@ Ask your agent: "Send `.env` to kalle@example.com with VitalSend."
 The first time, your browser opens on vitalsend.eu: sign in (or create an account) and allow the
 connection. After that:
 
-1. You confirm each send: file, recipient and cost.
-2. A page on your computer shows the password. Send it to the recipient another way than the link,
-   by text message for example.
-3. VitalSend emails the link to the recipient. Without a recipient, the link appears on the same
-   page for you to share.
+1. Your app asks you to confirm each send: file, recipient, cost and the password. Copy the
+   password and send it to the recipient yourself, by text message for example, not by email.
+2. VitalSend emails the link to the recipient. Without a recipient, your app shows you the link to
+   share.
+
+These dialogs go to you, not to the model. An app that cannot show them opens a page on your
+computer for the same steps.
 
 The agent is told who it went to and when it expires. Nothing else.
 
@@ -90,7 +92,9 @@ the folder it was started in, unless that is your home folder or `/`, where it r
 - When VitalSend emails the link, its server handles the link key for that delivery. With a
   password, that key alone does not open the file. To keep VitalSend out entirely, leave out the
   recipient and share the link yourself.
-- The page that shows the password lives on `127.0.0.1` at a random address, answers only the
+- The dialogs that show the password and the link are your app's own; their text and your answer go
+  between the app and this tool, never into the conversation the model reads.
+- The page that shows the password, for apps without such dialogs, lives on `127.0.0.1` at a random address, answers only the
   browser tab that loaded it, and closes afterwards. A program running as you that loads it first
   stops the send. Beyond that, anything running as you can read what you can read.
 - Your login is a send-only grant: it can send files and spend credits, nothing else. Revoke it

package/dist/vitalsend-mcp.js

@@ -1039,11 +1039,19 @@ const base = location.pathname;
 const $ = (id) => document.getElementById(id);
 const post = (action) => fetch(base + '/action', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ action }) });
 const labels = { sms: 'SMS', whatsapp: 'WhatsApp', telegram: 'Telegram', email: 'Email' };
+// Rebuilt only when what it shows changes: a button replaced by the next poll
+// loses a click that is under way.
 function shares(el, item, s) {
+  const key = JSON.stringify([s[item], s.dimmed[item]]);
+  if (el.dataset.key === key) return;
+  el.dataset.key = key;
   el.textContent = '';
   const copy = document.createElement('button');
   copy.textContent = 'Copy';
-  copy.onclick = () => navigator.clipboard?.writeText(item === 'password' ? s.password.value : s.link.value);
+  copy.onclick = () => navigator.clipboard?.writeText(item === 'password' ? s.password.value : s.link.value).then(() => {
+    copy.textContent = '\u2713 Done';
+    setTimeout(() => { copy.textContent = 'Copy'; }, 2000);
+  }, () => {});
   el.append(copy);
   if (navigator.share) {
     const b = document.createElement('button');
@@ -1071,8 +1079,8 @@ async function tick() {
     $('c-credits').textContent = String(s.confirm.credits);
   }
   // A secret is only in the page while its view is on screen.
-  if (s.view !== 'password') $('p-value').textContent = '';
-  if (s.view !== 'link') $('l-value').textContent = '';
+  if (s.view !== 'password') { $('p-value').textContent = ''; $('p-share').textContent = ''; delete $('p-share').dataset.key; }
+  if (s.view !== 'link') { $('l-value').textContent = ''; $('l-share').textContent = ''; delete $('l-share').dataset.key; }
   if (s.view === 'password') { $('p-value').textContent = s.password.value; shares($('p-share'), 'password', s); }
   if (s.view === 'link') {
     $('l-value').textContent = s.link.value;
@@ -1285,23 +1293,26 @@ async function sendFile(input, deps) {
     } catch (err) {
       if (!(err instanceof LoginRequired)) throw err;
       const login2 = await startLogin2({ connectionName: clientName });
-      await io.openLogin(login2.url);
+      await io.openLogin(login2.url, login2);
       accessToken = await credentials2.adopt(await login2.done);
     }
     const session = newSession(accessToken);
     await session.init();
     const { creditsNeeded } = await session.quote({ sizeBytes, password: withPassword, recipient });
+    const password = withPassword ? generatePassword() : null;
+    const inDialogs = mode !== "api_key" && !!io.canShowSecrets;
     if (mode !== "api_key") {
-      const details = { recipient, name, sizeBytes, credits: creditsNeeded };
+      const details = { recipient, name, sizeBytes, size: formatSize2(sizeBytes), credits: creditsNeeded, password: inDialogs ? password : null };
       let decision = await io.confirm(details);
       if (decision === "unavailable") decision = await (await getPage()).confirm(details);
       if (decision !== "send") return fail("The send was cancelled.");
     }
-    if (mode !== "api_key") await (await getPage()).open();
-    const password = withPassword ? generatePassword() : null;
-    if (password) {
-      const shown = await (await getPage()).showPassword(password);
-      if (shown !== "saved") return fail("The password was not confirmed in the browser, so nothing was sent and no credits were used.");
+    if (mode !== "api_key" && !inDialogs) {
+      await (await getPage()).open();
+      if (password) {
+        const shown = await (await getPage()).showPassword(password);
+        if (shown !== "saved") return fail("The password was not confirmed in the browser, so nothing was sent and no credits were used.");
+      }
     }
     const linkKey = new Uint8Array(randomBytes4(32));
     const reserved = await session.reserve({
@@ -1324,7 +1335,9 @@ async function sendFile(input, deps) {
         }
       }
     }
-    if (mode !== "api_key") {
+    let linkShown = emailed || mode === "api_key";
+    if (!linkShown && inDialogs) linkShown = await io.showLink(link, { password: !!password }).catch(() => "cancel") === "accept";
+    if (mode !== "api_key" && (!inDialogs || !linkShown)) {
       const p = await getPage();
       pageHandedOff = true;
       p.showLink({ link, emailedTo: emailed ? recipient : "" }).catch(() => {
@@ -1335,11 +1348,11 @@ async function sendFile(input, deps) {
       lines.push(`VitalSend emailed the download link to ${recipient}.`);
     } else {
       if (recipient) lines.push(`VitalSend could not email the link to ${recipient}.`);
-      lines.push("The download link is waiting in the user's browser to be shared; it was not given to you.");
+      lines.push(linkShown ? "The download link was shown to the user to share; it was not given to you." : "The download link is waiting in the user's browser to be shared; it was not given to you.");
     }
     const expiry = formatExpiry(reserved.expiresAt);
     if (expiry) lines.push(`It can be downloaded once, until ${expiry}.`);
-    if (password) lines.push("A password was set and shown to the user in the browser. The recipient needs it; the user should send it another way than the link.");
+    if (password) lines.push("A password was set and shown to the user" + (inDialogs ? "" : " in the browser") + ". The recipient needs it; the user should send it another way than the link.");
     lines.push(`Cost: ${creditsNeeded} credit${creditsNeeded === 1 ? "" : "s"}.`);
     return { isError: false, text: lines.join(" ") };
   } catch (err) {
@@ -1367,6 +1380,7 @@ function createIo({ server: server2, ctx, openBrowser: openBrowser2 }) {
   const elicitation = caps.elicitation;
   const canForm = !!elicitation && (Object.keys(elicitation).length === 0 || !!elicitation.form);
   const canUrl = !!elicitation?.url;
+  const canShowSecrets = canForm && !era2026;
   const ask = (key, request) => {
     throw new NeedInput(inputRequired({ inputRequests: { [key]: request } }));
   };
@@ -1377,18 +1391,38 @@ function createIo({ server: server2, ctx, openBrowser: openBrowser2 }) {
       if (answers.roots?.roots) return answers.roots.roots.map((r) => r.uri);
       return ask("roots", inputRequired.listRoots());
     },
-    async openLogin(url) {
+    // login: { done, cancel } from startLogin. On 2025-era connections the
+    // client may hold its dialog open until told the login is complete, so the
+    // dialog is not awaited: completing the login closes it, declining it
+    // cancels the login.
+    async openLogin(url, login2) {
       if (!canUrl) return openBrowser2(url);
       if (!era2026) {
-        await ctx.mcpReq.elicitInput({ mode: "url", url, message: LOGIN_MESSAGE, elicitationId: `login-${Date.now()}` });
+        const elicitationId = `login-${Date.now()}`;
+        ctx.mcpReq.elicitInput({ mode: "url", url, message: LOGIN_MESSAGE, elicitationId }).then((res) => {
+          if (res?.action !== "accept") login2?.cancel();
+        }, () => login2?.cancel());
+        login2?.done.then(() => server2.server.createElicitationCompletionNotifier(elicitationId)(), () => {
+        }).catch(() => {
+        });
         return void 0;
       }
       if (answers.login) return void 0;
       return ask("login", inputRequired.elicitUrl({ url, message: LOGIN_MESSAGE }));
     },
-    async confirm({ recipient, name, sizeBytes, credits }) {
+    canShowSecrets,
+    async confirm({ recipient, name, sizeBytes, size, credits, password }) {
       if (!canForm) return "unavailable";
-      const message = `Send ${name} (${sizeBytes} bytes) ${recipient ? `to ${recipient}` : "and share the link yourself"}? It costs ${credits} credit${credits === 1 ? "" : "s"}.`;
+      const cost = `${credits} credit${credits === 1 ? "" : "s"}`;
+      let message = `Send ${name} (${size || `${sizeBytes} bytes`}) ${recipient ? `to ${recipient}` : "and share the link yourself"} for ${cost}?`;
+      if (password && canShowSecrets) {
+        const to = recipient || "the recipient";
+        message += `
+
+    Password:   ${password}
+
+Copy the password now and send it to ${to} yourself, by text message for example. ` + (recipient ? "Not by email: the link arrives by email, and the two must travel separately." : "Not together with the link.") + " The password is shown only here.";
+      }
       const request = { mode: "form", message, requestedSchema: { type: "object", properties: {} } };
       if (!era2026) {
         const res = await ctx.mcpReq.elicitInput(request);
@@ -1396,13 +1430,24 @@ function createIo({ server: server2, ctx, openBrowser: openBrowser2 }) {
       }
       if (answers.confirm) return answers.confirm.action === "accept" ? "send" : "cancel";
       return ask("confirm", inputRequired.elicit({ message, requestedSchema: request.requestedSchema }));
+    },
+    async showLink(link, { password = false } = {}) {
+      if (!canShowSecrets) return "unavailable";
+      const res = await ctx.mcpReq.elicitInput({
+        mode: "form",
+        requestedSchema: { type: "object", properties: {} },
+        message: `Uploaded. Copy the link and send it to the recipient; it can be downloaded once:
+
+    ${link}` + (password ? "\n\nSend the password another way than the link." : "")
+      });
+      return res?.action || "cancel";
     }
   };
 }
 
 // src/server.js
-var VERSION = "0.1.0";
-var DESCRIPTION = `Send a file end-to-end encrypted through VitalSend. The file is encrypted on this computer; the recipient can download it once. With recipient_email, VitalSend emails the download link; without it, the link appears in the user's browser for the user to share. You never see the link, its key or the password. By default a password is set and shown to the user in the browser. Each send is confirmed by the user first.`;
+var VERSION = "0.2.0";
+var DESCRIPTION = `Send a file end-to-end encrypted through VitalSend. The file is encrypted on this computer; the recipient can download it once. With recipient_email, VitalSend emails the download link; without it, the link is shown to the user to share. You never see the link, its key or the password. By default a password is set and shown to the user, who sends it to the recipient another way. Each send is confirmed by the user first.`;
 function buildServer({ sendFileDeps, openBrowser: openBrowser2 }) {
   const server2 = new McpServer({ name: "vitalsend", version: VERSION });
   server2.registerTool("send_file", {

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@vitalsend/mcp",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@vitalsend/mcp",
-      "version": "0.1.0",
+      "version": "0.2.0",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "@modelcontextprotocol/server": "2.4.0",
@@ -18,12 +18,142 @@
       },
       "devDependencies": {
         "esbuild": "^0.28.0",
+        "jsdom": "26.1.0",
         "vitest": "^4.1.8"
       },
       "engines": {
         "node": ">=20"
       }
     },
+    "node_modules/@asamuzakjp/css-color": {
+      "version": "3.2.0",
+      "resolved": "https://registry.npmjs.org/@asamuzakjp/css-color/-/css-color-3.2.0.tgz",
+      "integrity": "sha512-K1A6z8tS3XsmCMM86xoWdn7Fkdn9m6RSVtocUrJYIwZnFVkng/PvkEoWtOWmP+Scc6saYWHWZYbndEEXxl24jw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@csstools/css-calc": "^2.1.3",
+        "@csstools/css-color-parser": "^3.0.9",
+        "@csstools/css-parser-algorithms": "^3.0.4",
+        "@csstools/css-tokenizer": "^3.0.3",
+        "lru-cache": "^10.4.3"
+      }
+    },
+    "node_modules/@csstools/color-helpers": {
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/@csstools/color-helpers/-/color-helpers-5.1.0.tgz",
+      "integrity": "sha512-S11EXWJyy0Mz5SYvRmY8nJYTFFd1LCNV+7cXyAgQtOOuzb4EsgfqDufL+9esx72/eLhsRdGZwaldu/h+E4t4BA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT-0",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@csstools/css-calc": {
+      "version": "2.1.4",
+      "resolved": "https://registry.npmjs.org/@csstools/css-calc/-/css-calc-2.1.4.tgz",
+      "integrity": "sha512-3N8oaj+0juUw/1H3YwmDDJXCgTB1gKU6Hc/bB502u9zR0q2vd786XJH9QfrKIEgFlZmhZiq6epXl4rHqhzsIgQ==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "peerDependencies": {
+        "@csstools/css-parser-algorithms": "^3.0.5",
+        "@csstools/css-tokenizer": "^3.0.4"
+      }
+    },
+    "node_modules/@csstools/css-color-parser": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/@csstools/css-color-parser/-/css-color-parser-3.1.0.tgz",
+      "integrity": "sha512-nbtKwh3a6xNVIp/VRuXV64yTKnb1IjTAEEh3irzS+HkKjAOYLTGNb9pmVNntZ8iVBHcWDA2Dof0QtPgFI1BaTA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "@csstools/color-helpers": "^5.1.0",
+        "@csstools/css-calc": "^2.1.4"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "peerDependencies": {
+        "@csstools/css-parser-algorithms": "^3.0.5",
+        "@csstools/css-tokenizer": "^3.0.4"
+      }
+    },
+    "node_modules/@csstools/css-parser-algorithms": {
+      "version": "3.0.5",
+      "resolved": "https://registry.npmjs.org/@csstools/css-parser-algorithms/-/css-parser-algorithms-3.0.5.tgz",
+      "integrity": "sha512-DaDeUkXZKjdGhgYaHNJTV9pV7Y9B3b644jCLs9Upc3VeNGg6LWARAT6O+Q+/COo+2gg/bM5rhpMAtf70WqfBdQ==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "peerDependencies": {
+        "@csstools/css-tokenizer": "^3.0.4"
+      }
+    },
+    "node_modules/@csstools/css-tokenizer": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/@csstools/css-tokenizer/-/css-tokenizer-3.0.4.tgz",
+      "integrity": "sha512-Vd/9EVDiu6PPJt9yAh6roZP6El1xHrdvIVGjyBsHR0RYwNHgL7FJPyIIW4fANJNG6FtyZfvlRPpFI4ZM/lubvw==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/@esbuild/aix-ppc64": {
       "version": "0.28.2",
       "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.28.2.tgz",
@@ -933,6 +1063,16 @@
         "url": "https://opencollective.com/vitest"
       }
     },
+    "node_modules/agent-base": {
+      "version": "7.1.4",
+      "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz",
+      "integrity": "sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 14"
+      }
+    },
     "node_modules/assertion-error": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/assertion-error/-/assertion-error-2.0.1.tgz",
@@ -960,6 +1100,59 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/cssstyle": {
+      "version": "4.6.0",
+      "resolved": "https://registry.npmjs.org/cssstyle/-/cssstyle-4.6.0.tgz",
+      "integrity": "sha512-2z+rWdzbbSZv6/rhtvzvqeZQHrBaqgogqt85sqFNbabZOuFbCVFb8kPeEtZjiKkbrm395irpNKiYeFeLiQnFPg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@asamuzakjp/css-color": "^3.2.0",
+        "rrweb-cssom": "^0.8.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/data-urls": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/data-urls/-/data-urls-5.0.0.tgz",
+      "integrity": "sha512-ZYP5VBHshaDAiVZxjbRVcFJpc+4xGgT0bK3vzy1HLN8jTO975HEbuYzZJcHoQEY5K1a0z8YayJkyVETa08eNTg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "whatwg-mimetype": "^4.0.0",
+        "whatwg-url": "^14.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/decimal.js": {
+      "version": "10.6.0",
+      "resolved": "https://registry.npmjs.org/decimal.js/-/decimal.js-10.6.0.tgz",
+      "integrity": "sha512-YpgQiITW3JXGntzdUmyUR1V812Hn8T1YVXhCu+wO3OpS4eU9l4YdD3qjyiKdV6mvV29zapkMeD390UVEf2lkUg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/detect-libc": {
       "version": "2.1.2",
       "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz",
@@ -970,6 +1163,19 @@
         "node": ">=8"
       }
     },
+    "node_modules/entities": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/entities/-/entities-6.0.1.tgz",
+      "integrity": "sha512-aN97NXWF6AWBTahfVOIrB/NShkzi5H7F9r1s9mD3cDj4Ko5f2qhhVoYMibXF7GlLveb/D2ioWay8lxI97Ven3g==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=0.12"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/entities?sponsor=1"
+      }
+    },
     "node_modules/es-module-lexer": {
       "version": "2.3.2",
       "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.3.2.tgz",
@@ -1072,6 +1278,107 @@
         "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
       }
     },
+    "node_modules/html-encoding-sniffer": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/html-encoding-sniffer/-/html-encoding-sniffer-4.0.0.tgz",
+      "integrity": "sha512-Y22oTqIU4uuPgEemfz7NDJz6OeKf12Lsu+QC+s3BVpda64lTiMYCyGwg5ki4vFxkMwQdeZDl2adZoqUgdFuTgQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "whatwg-encoding": "^3.1.1"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/http-proxy-agent": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-7.0.2.tgz",
+      "integrity": "sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "agent-base": "^7.1.0",
+        "debug": "^4.3.4"
+      },
+      "engines": {
+        "node": ">= 14"
+      }
+    },
+    "node_modules/https-proxy-agent": {
+      "version": "7.0.6",
+      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-7.0.6.tgz",
+      "integrity": "sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "agent-base": "^7.1.2",
+        "debug": "4"
+      },
+      "engines": {
+        "node": ">= 14"
+      }
+    },
+    "node_modules/iconv-lite": {
+      "version": "0.6.3",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz",
+      "integrity": "sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "safer-buffer": ">= 2.1.2 < 3.0.0"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/is-potential-custom-element-name": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/is-potential-custom-element-name/-/is-potential-custom-element-name-1.0.1.tgz",
+      "integrity": "sha512-bCYeRA2rVibKZd+s2625gGnGF/t7DSqDs4dP7CrLA1m7jKWz6pps0LpYLJN8Q64HtmPKJ1hrN3nzPNKFEKOUiQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/jsdom": {
+      "version": "26.1.0",
+      "resolved": "https://registry.npmjs.org/jsdom/-/jsdom-26.1.0.tgz",
+      "integrity": "sha512-Cvc9WUhxSMEo4McES3P7oK3QaXldCfNWp7pl2NNeiIFlCoLr3kfq9kb1fxftiwk1FLV7CvpvDfonxtzUDeSOPg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "cssstyle": "^4.2.1",
+        "data-urls": "^5.0.0",
+        "decimal.js": "^10.5.0",
+        "html-encoding-sniffer": "^4.0.0",
+        "http-proxy-agent": "^7.0.2",
+        "https-proxy-agent": "^7.0.6",
+        "is-potential-custom-element-name": "^1.0.1",
+        "nwsapi": "^2.2.16",
+        "parse5": "^7.2.1",
+        "rrweb-cssom": "^0.8.0",
+        "saxes": "^6.0.0",
+        "symbol-tree": "^3.2.4",
+        "tough-cookie": "^5.1.1",
+        "w3c-xmlserializer": "^5.0.0",
+        "webidl-conversions": "^7.0.0",
+        "whatwg-encoding": "^3.1.1",
+        "whatwg-mimetype": "^4.0.0",
+        "whatwg-url": "^14.1.1",
+        "ws": "^8.18.0",
+        "xml-name-validator": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "peerDependencies": {
+        "canvas": "^3.0.0"
+      },
+      "peerDependenciesMeta": {
+        "canvas": {
+          "optional": true
+        }
+      }
+    },
     "node_modules/libsodium-sumo": {
       "version": "0.7.16",
       "resolved": "https://registry.npmjs.org/libsodium-sumo/-/libsodium-sumo-0.7.16.tgz",
@@ -1360,6 +1667,13 @@
         "url": "https://opencollective.com/parcel"
       }
     },
+    "node_modules/lru-cache": {
+      "version": "10.4.3",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz",
+      "integrity": "sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==",
+      "dev": true,
+      "license": "ISC"
+    },
     "node_modules/magic-string": {
       "version": "0.30.21",
       "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz",
@@ -1370,6 +1684,13 @@
         "@jridgewell/sourcemap-codec": "^1.5.5"
       }
     },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/nanoid": {
       "version": "3.3.20",
       "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.20.tgz",
@@ -1389,6 +1710,13 @@
         "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
       }
     },
+    "node_modules/nwsapi": {
+      "version": "2.2.28",
+      "resolved": "https://registry.npmjs.org/nwsapi/-/nwsapi-2.2.28.tgz",
+      "integrity": "sha512-IlVB7OS7qrOsVYlpnFIkETjMwT9jwvmocJmmM+GZU/PAB3uGi9Ezd7vcWhWBUnSc0ya4ppmQITOyP1ez9gg8cg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/obug": {
       "version": "2.2.1",
       "resolved": "https://registry.npmjs.org/obug/-/obug-2.2.1.tgz",
@@ -1403,6 +1731,19 @@
         "node": ">=12.20.0"
       }
     },
+    "node_modules/parse5": {
+      "version": "7.3.0",
+      "resolved": "https://registry.npmjs.org/parse5/-/parse5-7.3.0.tgz",
+      "integrity": "sha512-IInvU7fabl34qmi9gY8XOVxhYyMyuH2xUNpb2q8/Y+7552KlejkRvqvD19nMoUW/uQGGbqNpA6Tufu5FL5BZgw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "entities": "^6.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/inikulin/parse5?sponsor=1"
+      }
+    },
     "node_modules/pathe": {
       "version": "2.0.3",
       "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz",
@@ -1459,6 +1800,16 @@
         "node": "^10 || ^12 || >=14"
       }
     },
+    "node_modules/punycode": {
+      "version": "2.3.1",
+      "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
+      "integrity": "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
     "node_modules/rolldown": {
       "version": "1.2.16",
       "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.2.16.tgz",
@@ -1493,6 +1844,33 @@
         "@rolldown/binding-win32-x64-msvc": "1.2.16"
       }
     },
+    "node_modules/rrweb-cssom": {
+      "version": "0.8.0",
+      "resolved": "https://registry.npmjs.org/rrweb-cssom/-/rrweb-cssom-0.8.0.tgz",
+      "integrity": "sha512-guoltQEx+9aMf2gDZ0s62EcV8lsXR+0w8915TC3ITdn2YueuNjdAYh/levpU9nFaoChh9RUS5ZdQMrKfVEN9tw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/safer-buffer": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
+      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/saxes": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/saxes/-/saxes-6.0.0.tgz",
+      "integrity": "sha512-xAg7SOnEhrm5zI3puOOKyy1OMcMlIJZYNJY7xLBwSze0UjhPLnWfj2GF2EpT0jmzaJKIWKHLsaSSajf35bcYnA==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "xmlchars": "^2.2.0"
+      },
+      "engines": {
+        "node": ">=v12.22.7"
+      }
+    },
     "node_modules/siginfo": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/siginfo/-/siginfo-2.0.0.tgz",
@@ -1524,6 +1902,13 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/symbol-tree": {
+      "version": "3.2.4",
+      "resolved": "https://registry.npmjs.org/symbol-tree/-/symbol-tree-3.2.4.tgz",
+      "integrity": "sha512-9QNk5KwDF+Bvz+PyObkmSYjI5ksVUYtjW7AU22r2NKcfLJcXp96hkDWU3+XndOsUb+AQ9QhfzfCT2O+CNWT5Tw==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/tinybench": {
       "version": "2.9.0",
       "resolved": "https://registry.npmjs.org/tinybench/-/tinybench-2.9.0.tgz",
@@ -1568,6 +1953,52 @@
         "node": ">=14.0.0"
       }
     },
+    "node_modules/tldts": {
+      "version": "6.1.86",
+      "resolved": "https://registry.npmjs.org/tldts/-/tldts-6.1.86.tgz",
+      "integrity": "sha512-WMi/OQ2axVTf/ykqCQgXiIct+mSQDFdH2fkwhPwgEwvJ1kSzZRiinb0zF2Xb8u4+OqPChmyI6MEu4EezNJz+FQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "tldts-core": "^6.1.86"
+      },
+      "bin": {
+        "tldts": "bin/cli.js"
+      }
+    },
+    "node_modules/tldts-core": {
+      "version": "6.1.86",
+      "resolved": "https://registry.npmjs.org/tldts-core/-/tldts-core-6.1.86.tgz",
+      "integrity": "sha512-Je6p7pkk+KMzMv2XXKmAE3McmolOQFdxkKw0R8EYNr7sELW46JqnNeTX8ybPiQgvg1ymCoF8LXs5fzFaZvJPTA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/tough-cookie": {
+      "version": "5.1.2",
+      "resolved": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-5.1.2.tgz",
+      "integrity": "sha512-FVDYdxtnj0G6Qm/DhNPSb8Ju59ULcup3tuJxkFb5K8Bv2pUXILbf0xZWU8PX8Ov19OXljbUyveOFwRMwkXzO+A==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "tldts": "^6.1.32"
+      },
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/tr46": {
+      "version": "5.1.1",
+      "resolved": "https://registry.npmjs.org/tr46/-/tr46-5.1.1.tgz",
+      "integrity": "sha512-hdF5ZgjTqgAntKkklYw0R03MG2x/bSzTtkxmIRw/sTNV8YXsCJ1tfLAX23lhxhHJlEf3CRCOCGGWw3vI3GaSPw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "punycode": "^2.3.1"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/vite": {
       "version": "8.3.5",
       "resolved": "https://registry.npmjs.org/vite/-/vite-8.3.5.tgz",
@@ -1736,6 +2167,67 @@
         }
       }
     },
+    "node_modules/w3c-xmlserializer": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/w3c-xmlserializer/-/w3c-xmlserializer-5.0.0.tgz",
+      "integrity": "sha512-o8qghlI8NZHU1lLPrpi2+Uq7abh4GGPpYANlalzWxyWteJOCsr/P+oPBA49TOLu5FTZO4d3F9MnWJfiMo4BkmA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "xml-name-validator": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/webidl-conversions": {
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-7.0.0.tgz",
+      "integrity": "sha512-VwddBukDzu71offAQR975unBIGqfKZpM+8ZX6ySk8nYhVoo5CYaZyzt3YBvYtRtO+aoGlqxPg/B87NGVZ/fu6g==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/whatwg-encoding": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/whatwg-encoding/-/whatwg-encoding-3.1.1.tgz",
+      "integrity": "sha512-6qN4hJdMwfYBtE3YBTTHhoeuUrDBPZmbQaxWAqSALV/MeEnR5z1xd8UKud2RAkFoPkmB+hli1TZSnyi84xz1vQ==",
+      "deprecated": "Use @exodus/bytes instead for a more spec-conformant and faster implementation",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "iconv-lite": "0.6.3"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/whatwg-mimetype": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/whatwg-mimetype/-/whatwg-mimetype-4.0.0.tgz",
+      "integrity": "sha512-QaKxh0eNIi2mE9p2vEdzfagOKHCcj1pJ56EEHGQOVxp8r9/iszLUUV7v89x9O1p/T+NlTM5W7jW6+cz4Fq1YVg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/whatwg-url": {
+      "version": "14.2.0",
+      "resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-14.2.0.tgz",
+      "integrity": "sha512-De72GdQZzNTUBBChsXueQUnPKDkg/5A5zp7pFDuQAj5UFoENpiACU0wlCvzpAGnTkj++ihpKwKyYewn/XNUbKw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "tr46": "^5.1.0",
+        "webidl-conversions": "^7.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/why-is-node-running": {
       "version": "2.3.0",
       "resolved": "https://registry.npmjs.org/why-is-node-running/-/why-is-node-running-2.3.0.tgz",
@@ -1753,6 +2245,45 @@
         "node": ">=8"
       }
     },
+    "node_modules/ws": {
+      "version": "8.22.1",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-8.22.1.tgz",
+      "integrity": "sha512-oyL6OPYme/CmiFvNuGzeoxCJ4nOrZE2O1FwM9MWM1AsGri6nLXB2pg+lNA8aLeXMSav0J6eIVS1j6vUPzUtK9g==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.0.0"
+      },
+      "peerDependencies": {
+        "bufferutil": "^4.0.1",
+        "utf-8-validate": ">=5.0.2"
+      },
+      "peerDependenciesMeta": {
+        "bufferutil": {
+          "optional": true
+        },
+        "utf-8-validate": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/xml-name-validator": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/xml-name-validator/-/xml-name-validator-5.0.0.tgz",
+      "integrity": "sha512-EvGK8EJ3DhaHfbRlETOWAS5pO9MZITeauHKJyb8wyajUfQUenkIg2MvLDTZ4T/TgIcm3HU0TFBgWWboAZ30UHg==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/xmlchars": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/xmlchars/-/xmlchars-2.2.0.tgz",
+      "integrity": "sha512-JZnDKK8B0RCDw84FNdDAIpZK+JuJw+s7Lz8nksI7SIuU3UXJJslUthsi+uWBUYOwPFwW7W7PRLRfUKpxjtjFCw==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/zod": {
       "version": "4.6.7",
       "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.7.tgz",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vitalsend/mcp",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Send files end-to-end encrypted through VitalSend from an AI agent. The link key, the password and your login never reach the model.",
   "mcpName": "io.github.vitalsend/mcp",
   "homepage": "https://vitalsend.eu/mcp/",
@@ -47,6 +47,7 @@
   },
   "devDependencies": {
     "esbuild": "^0.28.0",
+    "jsdom": "26.1.0",
     "vitest": "^4.1.8"
   }
 }

package/server.json

@@ -8,12 +8,12 @@
     "id": "1441821471"
   },
   "websiteUrl": "https://vitalsend.eu/mcp/",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@vitalsend/mcp",
-      "version": "0.1.0",
+      "version": "0.2.0",
       "transport": {
         "type": "stdio"
       },