@vulcan-energy/mcp-helper 0.1.2 → 0.1.3

package/LICENSE

@@ -0,0 +1,20 @@
+PROPRIETARY SOFTWARE LICENSE
+
+Copyright (c) 2025 Home Energy Foundry Limited
+
+This software and associated documentation files (the "Software") are the
+proprietary and confidential information of Home Energy Foundry Limited. The Software
+is licensed, not sold.
+
+All rights reserved. No part of this Software may be reproduced, distributed,
+or transmitted in any form or by any means, including photocopying, recording,
+or other electronic or mechanical methods, without the prior written permission
+of Home Energy Foundry Limited.
+
+This Software is provided "AS IS" without warranty of any kind, either express
+or implied, including but not limited to the implied warranties of
+merchantability and fitness for a particular purpose.
+
+For licensing inquiries, contact: info@usevulcan.app
+
+

package/README.md

@@ -1,154 +1,307 @@
-# Vulcan MCP Server
+# Vulcan MCP Helper
 
 A Model Context Protocol (MCP) server that exposes Vulcan's core functionality for integration with Cursor and other MCP clients.
 
-## Overview
-
-This MCP server provides access to Vulcan's parameter management, batch configuration, and simulation capabilities via stdio **or** Streamable HTTP (JSON-RPC over HTTP).
-
 ## Prerequisites
 
-- Node.js (v18 or later)
+- **Node.js v18 or later** (must be installed separately - not included)
 - A Vulcan workspace with FSA (File System Access) mode enabled
 - A valid `vulcan-mcp-config.json` file (generated from Vulcan → Integrations → MCP)
 
 ## Installation
 
-### Local Development
+Install globally using npm:
 
 ```bash
-cd vulcan-mcp-server
-npm install
+npm install -g @vulcan-energy/mcp-helper
 ```
 
-### Production Distribution
-
-The server will be distributed via Vulcan website (behind authentication) for end users.
-
 ## Configuration
 
-The server requires a config file at `{workspace}/vulcan-mcp-config.json`:
+### Step 1: Download Config File
+
+1. Open Vulcan web app
+2. Log in to your account
+3. Select a workspace in FSA (Folder) mode
+4. Go to **Integrations → MCP**
+5. Click **"Generate Config"**
 
+This creates `vulcan-mcp-config.json` in your workspace root with:
 ```json
 {
-  "workspace": "/absolute/path/to/workspace",
-  "user_id": "supabase-user-id"
+  "workspace": ".",
+  "license_token": "eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9..."
 }
 ```
 
-Generate this file from Vulcan → Integrations → MCP after:
-1. Logging into Vulcan
-2. Selecting a workspace in FSA (Folder) mode
+The `license_token` is valid for ~30 days. The helper verifies it locally on startup. If expired or invalid, you'll get an error message instructing you to refresh it in Vulcan.
 
-## Usage
+### Step 2: Start the Server
 
-### Command Line
-
-#### Stdio mode (original)
+From your workspace directory:
 
 ```bash
-node index.js --config /path/to/vulcan-mcp-config.json
+vulcan-mcp-helper
 ```
 
-#### HTTP mode (recommended for Cursor)
+Or specify config and port:
 
-**Using npm (easiest):**
 ```bash
-cd vulcan-mcp-server
-npm start
+vulcan-mcp-helper --config /path/to/vulcan-mcp-config.json --port 5000
 ```
 
-**Or manually:**
-```bash
-# default port 4000 (override with --http-port or MCP_HTTP_PORT)
-node index.js --http-port 4000 --config ../vulcan-mcp-config.json
+**CLI Options:**
+- `--config <path>` - Path to config file (default: `./vulcan-mcp-config.json`)
+- `--port <port>` - Port to listen on (default: `5000`, or `HELPER_PORT` env var)
+- `--help, -h` - Show help message
+
+**Expected Output:**
+```
+[MCP Helper] Config loaded from: /path/to/vulcan-mcp-config.json
+[MCP Helper] Workspace: /path/to/workspace
+[MCP Helper] WASM initialized
+[MCP Helper] Server running on http://127.0.0.1:5000
+[MCP Helper] MCP endpoint: http://127.0.0.1:5000/mcp
 ```
 
-### Cursor Configuration
+### Step 3: Configure Cursor
 
-#### HTTP transport (recommended)
+Add to your Cursor MCP configuration (`~/.cursor/mcp.json` or Cursor settings):
 
 ```json
 {
   "mcpServers": {
     "vulcan": {
-      "url": "http://127.0.0.1:4000/mcp"
+      "url": "http://127.0.0.1:5000/mcp"
     }
   }
 }
 ```
 
-#### Stdio transport (legacy)
+Restart Cursor to connect.
 
+## Available Tools
+
+The MCP helper provides 10 tools for managing parameters, batch configurations, and simulations. Tools are called via MCP protocol (automatically in Cursor) or via HTTP POST to `/mcp`.
+
+### 1. `vulcan_list_parameters`
+
+List available parameter categories and their parameter IDs.
+
+**Parameters:**
+- `category` (optional, string): Filter by category name (e.g., "base_json", "heat_source_wet", "controls")
+
+**Example:**
+```json
+{"category": "heat_source_wet"}
+```
+
+### 2. `vulcan_view_parameter`
+
+View a specific parameter JSON snippet and documentation.
+
+**Parameters:**
+- `category` (required, string): Parameter category (e.g., "heat_source_wet", "controls", "base_json")
+- `parameter_id` (required, string): Parameter ID (filename without .json extension)
+
+**Example:**
+```json
+{"category": "heat_source_wet", "parameter_id": "hp"}
+```
+
+### 3. `vulcan_save_parameter`
+
+Create or edit a parameter with validation.
+
+**Parameters:**
+- `category` (required, string): Parameter category
+- `parameter_id` (required, string): Parameter ID (filename without .json extension)
+- `content` (required, object): Parameter JSON content
+- `markdown_content` (optional, string): Optional markdown documentation
+
+**Example:**
 ```json
 {
-  "mcpServers": {
-    "vulcan": {
-      "command": "node",
-      "args": ["/absolute/path/to/vulcan-mcp-server/index.js", "--config", "/absolute/path/to/workspace/vulcan-mcp-config.json"]
-    }
+  "category": "heat_source_wet",
+  "parameter_id": "hp_custom",
+  "content": {"efficiency": 0.85, "type": "heat_pump"},
+  "markdown_content": "# Custom Heat Pump\n\nDescription..."
+}
+```
+
+### 4. `vulcan_create_batch_config`
+
+Create a batch simulation configuration.
+
+**Parameters:**
+- `config_name` (required, string): Configuration name (saved as {config_name}.json)
+- `base_model` (required, string): Base model filename (without .json extension)
+- `weather_file` (required, string): Weather file name (with or without .epw extension)
+- `wrapper` (optional, string): Model wrapper (e.g., "fhs_compliance", "passthrough")
+- `parameters` (required, object): Object mapping category to array of parameter IDs
+
+**Example:**
+```json
+{
+  "config_name": "hp_vs_boiler",
+  "base_model": "demo_hp_annual",
+  "weather_file": "London-Gatwick-TMY",
+  "wrapper": "passthrough",
+  "parameters": {
+    "heat_source_wet": ["hp", "gas_boiler"],
+    "controls": ["standard_schedule"]
   }
 }
 ```
 
-## Available Tools
+### 5. `vulcan_run_batch`
+
+Run a batch configuration asynchronously.
+
+**Parameters:**
+- `config_name` (required, string): Configuration name (with or without .json extension)
+- `job_id` (optional, string): Custom job ID (defaults to mcp_{uuid})
+
+**Example:**
+```json
+{"config_name": "hp_vs_boiler"}
+```
 
-### `vulcan_list_parameters`
+### 6. `vulcan_get_batch_status`
 
-List available parameter categories and their JSON snippets.
+Check status/progress of a batch run.
 
-**Arguments:**
-- `category` (optional): Filter by category name
+**Parameters:**
+- `job_id` (optional, string): Job ID returned from vulcan_run_batch
+- `config_name` (optional, string): Configuration name (alternative to job_id)
 
-**Returns:**
-- Catalog structure with categories and parameters
-- Total counts
+**Note:** Either `job_id` or `config_name` must be provided.
 
-### Metrics Tool Notes
+**Example:**
+```json
+{"config_name": "hp_vs_boiler"}
+```
 
-- `vulcan_calculate_metrics` supports comparator-based metrics (`sumIf`, `averageIf`, `countIf`) and compliance metrics (e.g., `dwelling_emission_rate|compliance`).
-- Cost metrics are temporarily blocked in MCP until tariff data plumbing lands—requests containing cost metrics will return an actionable error.
-- Results now include each metric’s `id`, `name`, `column`, and `function`, matching what you send from Cursor.
+### 7. `vulcan_list_batch_models`
 
-## Development
+List all model names from a completed batch.
 
-### Testing Locally
+**Parameters:**
+- `config_name` (required, string): Configuration name (with or without .json extension)
 
-1. Create a test config file:
+**Example:**
+```json
+{"config_name": "hp_vs_boiler"}
+```
+
+### 8. `vulcan_list_csv_columns`
+
+List available columns from a CSV result file.
+
+**Parameters:**
+- `config_name` (required, string): Configuration name (with or without .json extension)
+- `model_name` (required, string): Model name (e.g., "scenario_1_0")
+
+**Example:**
+```json
+{"config_name": "hp_vs_boiler", "model_name": "scenario_1_0"}
+```
+
+### 9. `vulcan_calculate_metrics`
+
+Calculate metrics (sum, average, peak, min, cost) from results.
+
+**Parameters:**
+- `config_name` (required, string): Configuration name (with or without .json extension)
+- `model_names` (required, array): Array of model names to calculate metrics for
+- `metric_definitions` (required, array): Array of metric definition objects:
+  - `id` (optional, string)
+  - `name` (optional, string)
+  - `column` (optional, string)
+  - `function` (optional, enum): "sum", "average", "peak", "min", "cost", "sumIf", "averageIf", "countIf"
+  - `comparator` (optional, string): For conditional metrics (">=", "<=", ">", "<", "=")
+  - `threshold` (optional, number): For conditional metrics
+- `time_range` (optional, object): Time range filter
+  - `start` (optional, number): Start timestep
+  - `end` (optional, number): End timestep
+- `tariff_file_path` (optional, string): Path to tariff CSV (required for cost metrics)
+- `tariff_column_index` (optional, number): Zero-based index of tariff column (required for cost metrics)
+
+**Example:**
 ```json
 {
-  "workspace": "/path/to/your/workspace",
-  "user_id": "test-user-id"
+  "config_name": "hp_vs_boiler",
+  "model_names": ["scenario_1_0", "scenario_1_1"],
+  "metric_definitions": [
+    {"name": "Total Electricity", "column": "Electricity", "function": "sum"},
+    {"name": "Peak Demand", "column": "Electricity", "function": "peak"}
+  ]
 }
 ```
 
-2. Test the server (stdio mode):
-```bash
-node index.js --config test-config.json
+**Example with cost metric:**
+```json
+{
+  "config_name": "hp_vs_boiler",
+  "model_names": ["scenario_1_0"],
+  "metric_definitions": [
+    {"name": "Energy Cost", "column": "Electricity", "function": "cost"}
+  ],
+  "tariff_file_path": "input/tariff_data_structured/Octopus.csv",
+  "tariff_column_index": 2
+}
 ```
 
-3. Send test requests via stdin (newline-delimited JSON-RPC):
+### 10. `vulcan_merge_csv_to_json`
+
+Convert geometry CSV files to JSON format.
+
+**Parameters:**
+- `csv_path` (required, string): Path to CSV file (relative to workspace or absolute)
+- `output_path` (optional, string): Output JSON path (defaults to input/batch_parameters/base_json/{csv_filename}.json)
+- `schema_path` (optional, string): Custom schema path (defaults to input_core_allowing_fhs.schema.json)
+- `defaults_path` (optional, string): Custom defaults path (defaults to utility/defaults_template.json)
+
+**Example:**
 ```json
-{"jsonrpc":"2.0","id":1,"method":"initialize","params":{}}
-{"jsonrpc":"2.0","id":2,"method":"tools/list","params":{}}
-{"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"vulcan_list_parameters","arguments":{}}}
+{"csv_path": "input/base_models/my_model.csv"}
 ```
 
-## Logging & Diagnostics
+## Error Messages
 
-- All WASM `console.log` output is redirected to **stderr** so MCP stdout carries only JSON-RPC. This prevents Cursor’s “model returned error” dialog that appears when stdout is polluted.
-- When debugging, tail stderr (or pipe it to a file) to see WASM initialization and metrics parsing logs.
+Common errors and what they mean:
 
-## Architecture
+- **`Config file not found: <path>`** - Config file missing. Generate it from Vulcan → Integrations → MCP
+- **`Invalid JSON in config file`** - Config file is malformed. Regenerate from Vulcan
+- **`Config file missing required field: workspace`** - Config file incomplete. Regenerate from Vulcan
+- **`Your Vulcan MCP token is missing`** - Token not in config. Generate config from Vulcan
+- **`Workspace directory not found: <path>`** - Workspace path in config is incorrect
+- **`Workspace missing required directory: input/batch_parameters`** - Not a valid Vulcan workspace or not in FSA mode
+- **`Your Vulcan MCP token has expired`** - Token expired (~30 days). Refresh in Vulcan → Integrations → MCP
+- **`Your Vulcan MCP token is invalid`** - Token signature invalid. Refresh in Vulcan
+- **`WASM initialization failed`** - WASM files missing or corrupted. Reinstall package
+- **`Port argument is missing`** - Invalid `--port` usage. Use `--port <number>`
+- **`Invalid port: <value>`** - Port must be 1-65535
+
+## Testing
+
+Test the server is running:
+
+```bash
+curl http://127.0.0.1:5000/health
+```
+
+Should return:
+```json
+{"status":"running","port":5000,"version":"0.1.3","name":"vulcan-mcp-helper"}
+```
 
-- **Node.js**: Single runtime, cross-platform
-- **WASM**: Uses existing WASM bundle from `web/pkg/` (for validation, batch execution, metrics)
-- **File Operations**: Node.js `fs` module for workspace file access
-- **Protocol**: MCP via stdio (newline-delimited JSON-RPC) or Streamable HTTP (`POST /mcp`)
+## Troubleshooting
 
-## Future Enhancements
+- **Server won't start**: Check Node.js version (`node --version` must be v18+)
+- **Config errors**: Ensure workspace is in FSA (Folder) mode, not OPFS
+- **Token expired**: Refresh token in Vulcan → Integrations → MCP
+- **Port in use**: Use `--port` to specify a different port
+- **WASM errors**: Reinstall package: `npm install -g @vulcan-energy/mcp-helper`
 
-- Additional tools: `vulcan_view_parameter`, `vulcan_save_parameter`, `vulcan_create_batch_config`, `vulcan_run_batch`, `vulcan_get_batch_status`, `vulcan_calculate_metrics`
-- WASM integration for validation and batch execution
-- Enhanced error handling and logging
 

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,158 @@
+# Third-Party Notices (Vulcan MCP Helper)
+
+This package (`@vulcan-energy/mcp-helper`) is **proprietary software** (see `LICENSE`).
+
+It also includes and/or depends on third-party software. This file is the starting point for tracking notices and license obligations.
+
+## How to keep this accurate (recommended)
+
+- Generate a full dependency license report at release time (CI or local) and update this file.
+- Suggested tooling:
+  - Node: `license-checker` (or equivalent) against the exact production dependency tree
+  - If the published tarball includes bundled assets under `wasm/`, ensure those are also covered by notices
+
+## Direct npm dependencies (from `package.json`)
+
+The following packages are declared as direct dependencies:
+
+- `@modelcontextprotocol/sdk`
+- `cors`
+- `express`
+- `jose`
+- `zod`
+
+> Note: This section does **not** yet enumerate transitive dependencies. Use a license-report tool to produce the authoritative list for each release.
+
+## Full production dependency license report
+
+The following table was generated locally via:
+
+- `cd vulcan-mcp-server`
+- `npm install`
+- `npx license-checker --production --json`
+
+This is intended to be a **complete** list of production dependencies (including transitives) for the published npm package.
+
+| Package | Version | License | Repository/Homepage |
+|---|---:|---|---|
+| @modelcontextprotocol/sdk | 1.22.0 | MIT | https://github.com/modelcontextprotocol/typescript-sdk |
+| accepts | 1.3.8 | MIT | https://github.com/jshttp/accepts |
+| accepts | 2.0.0 | MIT | https://github.com/jshttp/accepts |
+| ajv | 8.17.1 | MIT | https://github.com/ajv-validator/ajv |
+| ajv-formats | 3.0.1 | MIT | https://github.com/ajv-validator/ajv-formats |
+| array-flatten | 1.1.1 | MIT | https://github.com/blakeembrey/array-flatten |
+| body-parser | 1.20.3 | MIT | https://github.com/expressjs/body-parser |
+| body-parser | 2.2.0 | MIT | https://github.com/expressjs/body-parser |
+| bytes | 3.1.2 | MIT | https://github.com/visionmedia/bytes.js |
+| call-bind-apply-helpers | 1.0.2 | MIT | https://github.com/ljharb/call-bind-apply-helpers |
+| call-bound | 1.0.4 | MIT | https://github.com/ljharb/call-bound |
+| content-disposition | 0.5.4 | MIT | https://github.com/jshttp/content-disposition |
+| content-disposition | 1.0.1 | MIT | https://github.com/jshttp/content-disposition |
+| content-type | 1.0.5 | MIT | https://github.com/jshttp/content-type |
+| cookie | 0.7.1 | MIT | https://github.com/jshttp/cookie |
+| cookie-signature | 1.0.6 | MIT | https://github.com/visionmedia/node-cookie-signature |
+| cookie-signature | 1.2.2 | MIT | https://github.com/visionmedia/node-cookie-signature |
+| cors | 2.8.5 | MIT | https://github.com/expressjs/cors |
+| cross-spawn | 7.0.6 | MIT | https://github.com/moxystudio/node-cross-spawn |
+| debug | 2.6.9 | MIT | https://github.com/visionmedia/debug |
+| debug | 4.4.3 | MIT | https://github.com/debug-js/debug |
+| depd | 2.0.0 | MIT | https://github.com/dougwilson/nodejs-depd |
+| destroy | 1.2.0 | MIT | https://github.com/stream-utils/destroy |
+| dunder-proto | 1.0.1 | MIT | https://github.com/es-shims/dunder-proto |
+| ee-first | 1.1.1 | MIT | https://github.com/jonathanong/ee-first |
+| encodeurl | 1.0.2 | MIT | https://github.com/pillarjs/encodeurl |
+| encodeurl | 2.0.0 | MIT | https://github.com/pillarjs/encodeurl |
+| es-define-property | 1.0.1 | MIT | https://github.com/ljharb/es-define-property |
+| es-errors | 1.3.0 | MIT | https://github.com/ljharb/es-errors |
+| es-object-atoms | 1.1.1 | MIT | https://github.com/ljharb/es-object-atoms |
+| escape-html | 1.0.3 | MIT | https://github.com/component/escape-html |
+| etag | 1.8.1 | MIT | https://github.com/jshttp/etag |
+| eventsource | 3.0.7 | MIT | git://git@github.com/EventSource/eventsource |
+| eventsource-parser | 3.0.6 | MIT | https://github.com/rexxars/eventsource-parser |
+| express | 4.21.2 | MIT | https://github.com/expressjs/express |
+| express | 5.1.0 | MIT | https://github.com/expressjs/express |
+| express-rate-limit | 7.5.1 | MIT | https://github.com/express-rate-limit/express-rate-limit |
+| fast-deep-equal | 3.1.3 | MIT | https://github.com/epoberezkin/fast-deep-equal |
+| fast-uri | 3.1.0 | BSD-3-Clause | https://github.com/fastify/fast-uri |
+| finalhandler | 1.3.1 | MIT | https://github.com/pillarjs/finalhandler |
+| finalhandler | 2.1.0 | MIT | https://github.com/pillarjs/finalhandler |
+| forwarded | 0.2.0 | MIT | https://github.com/jshttp/forwarded |
+| fresh | 0.5.2 | MIT | https://github.com/jshttp/fresh |
+| fresh | 2.0.0 | MIT | https://github.com/jshttp/fresh |
+| function-bind | 1.1.2 | MIT | https://github.com/Raynos/function-bind |
+| get-intrinsic | 1.3.0 | MIT | https://github.com/ljharb/get-intrinsic |
+| get-proto | 1.0.1 | MIT | https://github.com/ljharb/get-proto |
+| gopd | 1.2.0 | MIT | https://github.com/ljharb/gopd |
+| has-symbols | 1.1.0 | MIT | https://github.com/inspect-js/has-symbols |
+| hasown | 2.0.2 | MIT | https://github.com/inspect-js/hasOwn |
+| http-errors | 2.0.0 | MIT | https://github.com/jshttp/http-errors |
+| http-errors | 2.0.1 | MIT | https://github.com/jshttp/http-errors |
+| iconv-lite | 0.4.24 | MIT | https://github.com/ashtuchkin/iconv-lite |
+| iconv-lite | 0.6.3 | MIT | https://github.com/ashtuchkin/iconv-lite |
+| iconv-lite | 0.7.0 | MIT | https://github.com/pillarjs/iconv-lite |
+| inherits | 2.0.4 | ISC | https://github.com/isaacs/inherits |
+| ipaddr.js | 1.9.1 | MIT | https://github.com/whitequark/ipaddr.js |
+| is-promise | 4.0.0 | MIT | https://github.com/then/is-promise |
+| isexe | 2.0.0 | ISC | https://github.com/isaacs/isexe |
+| jose | 6.1.2 | MIT | https://github.com/panva/jose |
+| json-schema-traverse | 1.0.0 | MIT | https://github.com/epoberezkin/json-schema-traverse |
+| math-intrinsics | 1.1.0 | MIT | https://github.com/es-shims/math-intrinsics |
+| media-typer | 0.3.0 | MIT | https://github.com/jshttp/media-typer |
+| media-typer | 1.1.0 | MIT | https://github.com/jshttp/media-typer |
+| merge-descriptors | 1.0.3 | MIT | https://github.com/sindresorhus/merge-descriptors |
+| merge-descriptors | 2.0.0 | MIT | https://github.com/sindresorhus/merge-descriptors |
+| methods | 1.1.2 | MIT | https://github.com/jshttp/methods |
+| mime | 1.6.0 | MIT | https://github.com/broofa/node-mime |
+| mime-db | 1.52.0 | MIT | https://github.com/jshttp/mime-db |
+| mime-db | 1.54.0 | MIT | https://github.com/jshttp/mime-db |
+| mime-types | 2.1.35 | MIT | https://github.com/jshttp/mime-types |
+| mime-types | 3.0.2 | MIT | https://github.com/jshttp/mime-types |
+| ms | 2.0.0 | MIT | https://github.com/zeit/ms |
+| ms | 2.1.3 | MIT | https://github.com/vercel/ms |
+| negotiator | 0.6.3 | MIT | https://github.com/jshttp/negotiator |
+| negotiator | 1.0.0 | MIT | https://github.com/jshttp/negotiator |
+| object-assign | 4.1.1 | MIT | https://github.com/sindresorhus/object-assign |
+| object-inspect | 1.13.4 | MIT | https://github.com/inspect-js/object-inspect |
+| on-finished | 2.4.1 | MIT | https://github.com/jshttp/on-finished |
+| once | 1.4.0 | ISC | https://github.com/isaacs/once |
+| parseurl | 1.3.3 | MIT | https://github.com/pillarjs/parseurl |
+| path-key | 3.1.1 | MIT | https://github.com/sindresorhus/path-key |
+| path-to-regexp | 0.1.12 | MIT | https://github.com/pillarjs/path-to-regexp |
+| path-to-regexp | 8.3.0 | MIT | https://github.com/pillarjs/path-to-regexp |
+| pkce-challenge | 5.0.1 | MIT | https://github.com/crouchcd/pkce-challenge |
+| proxy-addr | 2.0.7 | MIT | https://github.com/jshttp/proxy-addr |
+| qs | 6.13.0 | BSD-3-Clause | https://github.com/ljharb/qs |
+| qs | 6.14.0 | BSD-3-Clause | https://github.com/ljharb/qs |
+| range-parser | 1.2.1 | MIT | https://github.com/jshttp/range-parser |
+| raw-body | 2.5.2 | MIT | https://github.com/stream-utils/raw-body |
+| raw-body | 3.0.2 | MIT | https://github.com/stream-utils/raw-body |
+| require-from-string | 2.0.2 | MIT | https://github.com/floatdrop/require-from-string |
+| router | 2.2.0 | MIT | https://github.com/pillarjs/router |
+| safe-buffer | 5.2.1 | MIT | https://github.com/feross/safe-buffer |
+| safer-buffer | 2.1.2 | MIT | https://github.com/ChALkeR/safer-buffer |
+| send | 0.19.0 | MIT | https://github.com/pillarjs/send |
+| send | 1.2.0 | MIT | https://github.com/pillarjs/send |
+| serve-static | 1.16.2 | MIT | https://github.com/expressjs/serve-static |
+| serve-static | 2.2.0 | MIT | https://github.com/expressjs/serve-static |
+| setprototypeof | 1.2.0 | ISC | https://github.com/wesleytodd/setprototypeof |
+| shebang-command | 2.0.0 | MIT | https://github.com/kevva/shebang-command |
+| shebang-regex | 3.0.0 | MIT | https://github.com/sindresorhus/shebang-regex |
+| side-channel | 1.1.0 | MIT | https://github.com/ljharb/side-channel |
+| side-channel-list | 1.0.0 | MIT | https://github.com/ljharb/side-channel-list |
+| side-channel-map | 1.0.1 | MIT | https://github.com/ljharb/side-channel-map |
+| side-channel-weakmap | 1.0.2 | MIT | https://github.com/ljharb/side-channel-weakmap |
+| statuses | 2.0.1 | MIT | https://github.com/jshttp/statuses |
+| statuses | 2.0.2 | MIT | https://github.com/jshttp/statuses |
+| toidentifier | 1.0.1 | MIT | https://github.com/component/toidentifier |
+| type-is | 1.6.18 | MIT | https://github.com/jshttp/type-is |
+| type-is | 2.0.1 | MIT | https://github.com/jshttp/type-is |
+| unpipe | 1.0.0 | MIT | https://github.com/stream-utils/unpipe |
+| utils-merge | 1.0.1 | MIT | https://github.com/jaredhanson/utils-merge |
+| vary | 1.1.2 | MIT | https://github.com/jshttp/vary |
+| which | 2.0.2 | ISC | https://github.com/isaacs/node-which |
+| wrappy | 1.0.2 | ISC | https://github.com/npm/wrappy |
+| zod | 3.25.76 | MIT | https://github.com/colinhacks/zod |
+| zod | 4.1.12 | MIT | https://github.com/colinhacks/zod |
+| zod-to-json-schema | 3.25.0 | ISC | https://github.com/StefanTerdell/zod-to-json-schema |
+
+

package/dist/bin/vulcan-mcp-helper.js

@@ -15,9 +15,14 @@ function parseArgs() {
             i++; // Skip next arg
         }
         else if (args[i] === '--port' && i + 1 < args.length) {
-            const port = parseInt(args[i + 1], 10);
+            const portArg = args[i + 1];
+            if (!portArg) {
+                console.error('Port argument is missing');
+                process.exit(1);
+            }
+            const port = parseInt(portArg, 10);
             if (isNaN(port) || port < 1 || port > 65535) {
-                console.error(`Invalid port: ${args[i + 1]}`);
+                console.error(`Invalid port: ${portArg}`);
                 process.exit(1);
             }
             result.port = port;

package/dist/bin/vulcan-mcp-helper.js.map

@@ -1 +1 @@
-{"version":3,"file":"vulcan-mcp-helper.js","sourceRoot":"","sources":["../../bin/vulcan-mcp-helper.ts"],"names":[],"mappings":";AAEA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,SAAS,SAAS;IAChB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAA2C,EAAE,CAAC;IAE1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAClD,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChC,CAAC,EAAE,CAAC,CAAC,gBAAgB;QACvB,CAAC;aAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBAC5C,OAAO,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;YACnB,CAAC,EAAE,CAAC,CAAC,gBAAgB;QACvB,CAAC;aAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;CAajB,CAAC,CAAC;YACG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;QACzC,MAAM,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAAc,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC"}
+{"version":3,"file":"vulcan-mcp-helper.js","sourceRoot":"","sources":["../../bin/vulcan-mcp-helper.ts"],"names":[],"mappings":";AAEA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,SAAS,SAAS;IAChB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAA2C,EAAE,CAAC;IAE1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAClD,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChC,CAAC,EAAE,CAAC,CAAC,gBAAgB;QACvB,CAAC;aAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACnC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBAC5C,OAAO,CAAC,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;gBAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;YACnB,CAAC,EAAE,CAAC,CAAC,gBAAgB;QACvB,CAAC;aAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;CAajB,CAAC,CAAC;YACG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;QACzC,MAAM,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAAc,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/src/engine/licenseKeys.d.ts

@@ -0,0 +1,2 @@
+export declare const MCP_PUBLIC_KEYS: string[];
+//# sourceMappingURL=licenseKeys.d.ts.map

package/dist/src/engine/licenseKeys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"licenseKeys.d.ts","sourceRoot":"","sources":["../../../src/engine/licenseKeys.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,eAAe,EAAE,MAAM,EAInC,CAAC"}

package/dist/src/engine/licenseKeys.js

@@ -0,0 +1,9 @@
+// Public keys used by the MCP helper to verify license_token signatures.
+// These correspond to the private keys used by vulcan-website to issue MCP tokens.
+// v1: single Ed25519 key, but we support an array to allow future rotation.
+export const MCP_PUBLIC_KEYS = [
+    `-----BEGIN PUBLIC KEY-----
+MCowBQYDK2VwAyEAOmr0DweQnQ2L747vGML7l/ieYywCQzrnd39idAZ2YK4=
+-----END PUBLIC KEY-----`,
+];
+//# sourceMappingURL=licenseKeys.js.map

package/dist/src/engine/licenseKeys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"licenseKeys.js","sourceRoot":"","sources":["../../../src/engine/licenseKeys.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,mFAAmF;AACnF,4EAA4E;AAE5E,MAAM,CAAC,MAAM,eAAe,GAAa;IACvC;;yBAEuB;CACxB,CAAC"}

package/dist/src/engine/wasm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wasm.d.ts","sourceRoot":"","sources":["../../../src/engine/wasm.ts"],"names":[],"mappings":"AAQA;;;GAGG;AACH,UAAU,UAAU;IAClB,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAAA;KAAE,KAAK,IAAI,CAAC;IAC9D,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAC;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AA6KD,wBAAsB,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,CAqLpD;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,UAAU,CAK1C;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAEpD"}
+{"version":3,"file":"wasm.d.ts","sourceRoot":"","sources":["../../../src/engine/wasm.ts"],"names":[],"mappings":"AAQA;;;GAGG;AACH,UAAU,UAAU;IAClB,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAAA;KAAE,KAAK,IAAI,CAAC;IAC9D,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAC;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AA+KD,wBAAsB,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,CAqLpD;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,UAAU,CAK1C;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAEpD"}