@warmio/mcp 8.0.0 → 9.1.0

package/README.md

@@ -14,7 +14,7 @@ are stored separately and are never shared between modes.
 
 ## Requirements
 
-- Warm Pro
+- Any paid Warm plan (Plus or Pro)
 - A context key or an automation key from [Settings -> API Keys](https://warm.io/settings)
 - Node.js 18+
 
@@ -272,7 +272,20 @@ Latest response:
   "since": "2026-06-26",
   "window_days": 10,
   "count": 1,
-  "items": []
+  "items": [
+    {
+      "id": "txn_1",
+      "account_id": "acct_1",
+      "date": "2026-07-05",
+      "amount": 42.18,
+      "merchant": "Whole Foods",
+      "name": "WHOLE FOODS",
+      "category": "FOOD_AND_DRINK",
+      "subcategory": "FOOD_AND_DRINK_GROCERIES",
+      "pending": false,
+      "currency": "USD"
+    }
+  ]
 }
 ```
 
@@ -293,14 +306,6 @@ Returns:
 }
 ```
 
-## v7 Breaking Changes
-
-v7 is a clean pre-launch cutover with no backwards compatibility or alias window.
-
-- API keys are audience-bound: context keys cannot invoke actions and automation keys cannot run context mode.
-- `X-API-Key` is removed. Use `Authorization: Bearer`.
-- Automation is a separate opt-in MCP server mode, not extra tools on the context server.
-
 ## Security
 
 - Context mode is read-only and uses a context-only key.

package/dist/config-paths.d.ts

@@ -1,4 +1,4 @@
-export type WarmApiAudience = 'automation' | 'context';
+import { type PrivateMcpMode } from '@warmio/contracts/mcp';
 export declare function getWarmConfigDir(): string;
-export declare function getWarmApiKeyPath(audience?: WarmApiAudience): string;
+export declare function getWarmApiKeyPath(audience?: PrivateMcpMode): string;
 export declare function readConfigFile(configPath: string): string | null;

package/dist/config-paths.js

@@ -1,6 +1,7 @@
 import * as fs from 'node:fs';
 import * as os from 'node:os';
 import * as path from 'node:path';
+import { WARM_MCP_CREDENTIALS } from '@warmio/contracts/mcp';
 export function getWarmConfigDir() {
     if (process.env.WARM_CONFIG_DIR?.trim()) {
         return process.env.WARM_CONFIG_DIR.trim();
@@ -17,12 +18,12 @@ export function getWarmConfigDir() {
     return path.join(os.homedir(), '.config', 'warm');
 }
 export function getWarmApiKeyPath(audience = 'context') {
-    const envKey = audience === 'automation' ? 'WARM_AUTOMATION_API_KEY_FILE' : 'WARM_CONTEXT_API_KEY_FILE';
-    const configuredPath = process.env[envKey]?.trim();
+    const credential = WARM_MCP_CREDENTIALS[audience];
+    const configuredPath = process.env[credential.apiKeyFileEnv]?.trim();
     if (configuredPath) {
         return configuredPath;
     }
-    return path.join(getWarmConfigDir(), `${audience}_api_key`);
+    return path.join(getWarmConfigDir(), credential.defaultFileName);
 }
 export function readConfigFile(configPath) {
     try {

package/dist/install.d.ts

@@ -1,7 +1,7 @@
-import { type WarmApiAudience } from './config-paths.js';
+import { type PrivateMcpMode } from '@warmio/contracts/mcp';
 export interface InstallOptions {
     force?: boolean;
-    mode?: WarmApiAudience;
+    mode?: PrivateMcpMode;
     validateApiKey?: boolean;
 }
 export declare function install(options?: InstallOptions): Promise<void>;

package/dist/install.js

@@ -2,56 +2,54 @@ import { createInterface } from 'readline';
 import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'fs';
 import { dirname, join, resolve } from 'path';
 import { homedir, platform } from 'os';
+import { WARM_MCP_CLIENTS, WARM_MCP_CREDENTIALS, WARM_MCP_PROJECT_CONFIGS, WARM_MCP_SERVER_CONFIGS, } from '@warmio/contracts/mcp';
 import { verifyWarmApiKey, WarmApiError } from './server.js';
 import { getWarmApiKeyPath, readConfigFile } from './config-paths.js';
-import { WARM_MCP_CLIENTS, WARM_MCP_PACKAGE_SPEC, WARM_MCP_PROJECT_CONFIGS, } from './manifest.js';
 const HOME = homedir();
 const CWD = process.cwd();
 function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
-function getClaudeDesktopPath() {
-    if (platform() === 'win32') {
-        return join(process.env.APPDATA || join(HOME, 'AppData', 'Roaming'), 'Claude', 'claude_desktop_config.json');
-    }
-    if (platform() === 'darwin') {
-        return join(HOME, 'Library', 'Application Support', 'Claude', 'claude_desktop_config.json');
-    }
-    return join(HOME, '.config', 'claude', 'claude_desktop_config.json');
+function resolveClientConfigPath(configPath) {
+    const root = configPath.root === 'appData' ? process.env.APPDATA || join(HOME, 'AppData', 'Roaming') : HOME;
+    return join(root, ...configPath.segments);
 }
 function getClientConfigPath(clientId) {
-    switch (clientId) {
-        case 'claude-code':
-            return join(HOME, '.claude.json');
-        case 'claude-desktop':
-            return getClaudeDesktopPath();
-        case 'cursor':
-            return join(HOME, '.cursor', 'mcp.json');
-        case 'windsurf':
-            return join(HOME, '.codeium', 'windsurf', 'mcp_config.json');
-        case 'opencode':
-            return join(HOME, '.config', 'opencode', 'opencode.json');
-        case 'codex-cli':
-            return join(HOME, '.codex', 'config.toml');
-        case 'antigravity':
-            return join(HOME, '.gemini', 'antigravity', 'mcp_config.json');
-        case 'gemini-cli':
-            return join(HOME, '.gemini', 'settings.json');
-    }
+    const client = WARM_MCP_CLIENTS.find((candidate) => candidate.id === clientId);
+    if (!client) {
+        throw new Error(`Unsupported MCP client: ${clientId}`);
+    }
+    const currentPlatform = platform();
+    const configPath = currentPlatform === 'darwin'
+        ? client.configPaths.darwin
+        : currentPlatform === 'win32'
+            ? client.configPaths.win32
+            : client.configPaths.linux;
+    return resolveClientConfigPath(configPath);
 }
 const GLOBAL_CLIENTS = WARM_MCP_CLIENTS.map((client) => ({
-    ...client,
+    name: client.name,
+    format: client.format,
     configPath: getClientConfigPath(client.id),
-    alwaysInclude: client.id === 'claude-code',
+    alwaysInclude: 'alwaysInclude' in client && client.alwaysInclude,
 }));
 function getServerName(mode) {
-    return mode === 'automation' ? 'warm-automation' : 'warm';
+    return WARM_MCP_SERVER_CONFIGS[mode].serverName;
+}
+function getCredential(mode) {
+    return WARM_MCP_CREDENTIALS[mode];
+}
+function getOppositeCredential(mode) {
+    return WARM_MCP_CREDENTIALS[mode === 'automation' ? 'context' : 'automation'];
 }
 function getMcpConfig(mode) {
-    const args = ['-y', WARM_MCP_PACKAGE_SPEC, 'mcp', '--mode', mode];
+    const serverConfig = WARM_MCP_SERVER_CONFIGS[mode];
     return platform() === 'win32'
-        ? { command: 'cmd', args: ['/c', 'npx', ...args] }
-        : { command: 'npx', args };
+        ? { command: 'cmd', args: ['/c', serverConfig.command, ...serverConfig.args] }
+        : { command: serverConfig.command, args: [...serverConfig.args] };
+}
+function formatTomlStringArray(values) {
+    return `[${values.map((value) => JSON.stringify(value)).join(', ')}]`;
 }
 function detectProjectClients() {
     const found = [];
@@ -94,18 +92,21 @@ function isSupportedWarmInvocation(command, args, mode) {
 }
 function getJsonEnvStatus(server, mode) {
     const env = isRecord(server?.env) ? server.env : undefined;
-    const apiKeyName = mode === 'automation' ? 'WARM_AUTOMATION_API_KEY' : 'WARM_CONTEXT_API_KEY';
-    const apiKeyFileName = `${apiKeyName}_FILE`;
-    const oppositeApiKeyName = mode === 'automation' ? 'WARM_CONTEXT_API_KEY' : 'WARM_AUTOMATION_API_KEY';
-    const inlineApiKey = typeof env?.[apiKeyName] === 'string' && env[apiKeyName].trim()
-        ? env[apiKeyName].trim()
-        : null;
+    const credential = getCredential(mode);
+    const oppositeCredential = getOppositeCredential(mode);
+    const apiKeyName = credential.apiKeyEnv;
+    const apiKeyFileName = credential.apiKeyFileEnv;
+    const inlineApiKey = typeof env?.[apiKeyName] === 'string' && env[apiKeyName].trim() ? env[apiKeyName].trim() : null;
     return {
         apiKeyFileOverride: typeof env?.[apiKeyFileName] === 'string' && env[apiKeyFileName].trim().length > 0
             ? env[apiKeyFileName].trim()
             : null,
-        hasIrrelevantCredential: ['WARM_API_KEY', 'WARM_API_KEY_FILE', oppositeApiKeyName, `${oppositeApiKeyName}_FILE`]
-            .some((name) => typeof env?.[name] === 'string' && env[name].trim().length > 0),
+        hasIrrelevantCredential: [
+            'WARM_API_KEY',
+            'WARM_API_KEY_FILE',
+            oppositeCredential.apiKeyEnv,
+            oppositeCredential.apiKeyFileEnv,
+        ].some((name) => typeof env?.[name] === 'string' && env[name].trim().length > 0),
         inlineApiKey,
     };
 }
@@ -193,19 +194,23 @@ function getTomlEnvStatus(content, mode) {
             inlineApiKey: null,
         };
     }
-    const envLines = envBlock.split(/\r?\n/).slice(1).filter((line) => line.trim().length > 0);
-    const apiKeyName = mode === 'automation' ? 'WARM_AUTOMATION_API_KEY' : 'WARM_CONTEXT_API_KEY';
-    const oppositeApiKeyName = mode === 'automation' ? 'WARM_CONTEXT_API_KEY' : 'WARM_AUTOMATION_API_KEY';
+    const envLines = envBlock
+        .split(/\r?\n/)
+        .slice(1)
+        .filter((line) => line.trim().length > 0);
+    const credential = getCredential(mode);
+    const oppositeCredential = getOppositeCredential(mode);
+    const apiKeyName = credential.apiKeyEnv;
     const inlineApiKey = getTomlStringValue(envBlock, apiKeyName)?.trim() || null;
-    const apiKeyFile = getTomlStringValue(envBlock, `${apiKeyName}_FILE`);
+    const apiKeyFile = getTomlStringValue(envBlock, credential.apiKeyFileEnv);
     return {
         apiKeyFileOverride: typeof apiKeyFile === 'string' && apiKeyFile.trim() ? apiKeyFile.trim() : null,
         envLines,
         hasIrrelevantCredential: [
             'WARM_API_KEY',
             'WARM_API_KEY_FILE',
-            oppositeApiKeyName,
-            `${oppositeApiKeyName}_FILE`,
+            oppositeCredential.apiKeyEnv,
+            oppositeCredential.apiKeyFileEnv,
         ].some((name) => Boolean(getTomlStringValue(envBlock, name)?.trim())),
         inlineApiKey,
     };
@@ -265,14 +270,15 @@ function configureJson(client, mode, preserveSelectedKeyFile) {
     const preserveProjectCommand = client.isProjectLevel &&
         !!existingCommand &&
         isSupportedWarmInvocation(existingCommand, existingArgs, mode);
-    const selectedKeyFile = mode === 'automation' ? 'WARM_AUTOMATION_API_KEY_FILE' : 'WARM_CONTEXT_API_KEY_FILE';
-    const oppositeKeyFile = mode === 'automation' ? 'WARM_CONTEXT_API_KEY_FILE' : 'WARM_AUTOMATION_API_KEY_FILE';
+    const credential = getCredential(mode);
+    const oppositeCredential = getOppositeCredential(mode);
+    const selectedKeyFile = credential.apiKeyFileEnv;
     for (const name of [
         'WARM_API_KEY',
         'WARM_API_KEY_FILE',
-        'WARM_CONTEXT_API_KEY',
-        'WARM_AUTOMATION_API_KEY',
-        oppositeKeyFile,
+        credential.apiKeyEnv,
+        oppositeCredential.apiKeyEnv,
+        oppositeCredential.apiKeyFileEnv,
     ]) {
         delete nextEnv[name];
     }
@@ -306,19 +312,21 @@ function configureToml(client, mode, preserveSelectedKeyFile) {
         }
     }
     const serverName = getServerName(mode);
-    const tomlCommand = platform() === 'win32' ? 'cmd' : 'npx';
-    const tomlArgs = platform() === 'win32'
-        ? `["/c", "npx", "-y", "${WARM_MCP_PACKAGE_SPEC}", "mcp", "--mode", "${mode}"]`
-        : `["-y", "${WARM_MCP_PACKAGE_SPEC}", "mcp", "--mode", "${mode}"]`;
+    const serverConfig = WARM_MCP_SERVER_CONFIGS[mode];
+    const tomlCommand = platform() === 'win32' ? 'cmd' : serverConfig.command;
+    const posixArgs = formatTomlStringArray(serverConfig.args);
+    const windowsArgs = formatTomlStringArray(['/c', serverConfig.command, ...serverConfig.args]);
+    const tomlArgs = platform() === 'win32' ? windowsArgs : posixArgs;
     const warmBlock = `[mcp_servers.${serverName}]${lineEnding}command = "${tomlCommand}"${lineEnding}args = ${tomlArgs}${lineEnding}`;
-    const selectedKeyFile = mode === 'automation' ? 'WARM_AUTOMATION_API_KEY_FILE' : 'WARM_CONTEXT_API_KEY_FILE';
-    const oppositeKeyFile = mode === 'automation' ? 'WARM_CONTEXT_API_KEY_FILE' : 'WARM_AUTOMATION_API_KEY_FILE';
+    const credential = getCredential(mode);
+    const oppositeCredential = getOppositeCredential(mode);
+    const selectedKeyFile = credential.apiKeyFileEnv;
     const removedEnvNames = new Set([
         'WARM_API_KEY',
         'WARM_API_KEY_FILE',
-        'WARM_CONTEXT_API_KEY',
-        'WARM_AUTOMATION_API_KEY',
-        oppositeKeyFile,
+        credential.apiKeyEnv,
+        oppositeCredential.apiKeyEnv,
+        oppositeCredential.apiKeyFileEnv,
         ...(!preserveSelectedKeyFile ? [selectedKeyFile] : []),
     ]);
     const preservedEnvLines = getTomlEnvStatus(content, mode).envLines.filter((line) => {
@@ -449,8 +457,7 @@ export async function install(options = {}) {
     }
     const apiKeyPath = getWarmApiKeyPath(mode);
     const storedApiKey = readConfigFile(apiKeyPath);
-    const migratedApiKey = needsSetup.find((status) => typeof status.inlineApiKey === 'string' && status.inlineApiKey.length > 0)
-        ?.inlineApiKey ?? null;
+    const migratedApiKey = needsSetup.find((status) => typeof status.inlineApiKey === 'string' && status.inlineApiKey.length > 0)?.inlineApiKey ?? null;
     const usableApiKeyFileOverride = needsSetup.find((status) => status.apiKeyFileOverride && !status.inlineApiKey && status.credentialApiKey);
     const targetMissingCredential = needsSetup.some((status) => !status.credentialApiKey);
     let apiKeyToStore = null;
@@ -469,7 +476,7 @@ export async function install(options = {}) {
             shouldStoreApiKey = true;
         }
         else if (usableApiKeyFileOverride && !targetMissingCredential) {
-            console.log(`  Reusing existing ${mode === 'automation' ? 'WARM_AUTOMATION_API_KEY_FILE' : 'WARM_CONTEXT_API_KEY_FILE'} override.`);
+            console.log(`  Reusing existing ${getCredential(mode).apiKeyFileEnv} override.`);
             console.log('');
         }
         else {

package/dist/server.d.ts

@@ -1,5 +1,6 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { type Implementation } from '@modelcontextprotocol/sdk/types.js';
+import { type PrivateMcpMode } from '@warmio/contracts/mcp';
 import { createWarmApiClient, type WarmApiClientOptions, getConfiguredApiKey, verifyWarmApiKey, WarmApiError } from './warm-api-client.js';
 export { createWarmApiClient, getConfiguredApiKey, verifyWarmApiKey, WarmApiError };
 export type { WarmApiClientOptions } from './warm-api-client.js';
@@ -7,7 +8,7 @@ export interface WarmServerOptions extends WarmApiClientOptions {
     mode?: WarmServerMode;
     serverInfo?: Implementation;
 }
-export type WarmServerMode = 'automation' | 'context';
+export type WarmServerMode = PrivateMcpMode;
 export declare const API_URL: string;
 export declare const WARM_SERVER_INFO: {
     name: string;

package/dist/types.d.ts

@@ -1,7 +1,8 @@
-export declare const WARM_CONTEXT_TOOL_NAMES: readonly ["get_financial_context", "get_transactions", "verify_key"];
-export declare const WARM_AUTOMATION_TOOL_NAMES: readonly ["search_operations", "describe_operation", "invoke_operation"];
-export declare const WARM_TOOL_NAMES: readonly ["get_financial_context", "get_transactions", "verify_key", "search_operations", "describe_operation", "invoke_operation"];
-export type WarmToolName = (typeof WARM_TOOL_NAMES)[number];
+import { privateMcpToolDefinitions } from '@warmio/contracts/mcp';
+export declare const WARM_CONTEXT_TOOL_NAMES: string[];
+export declare const WARM_AUTOMATION_TOOL_NAMES: string[];
+export declare const WARM_TOOL_NAMES: string[];
+export type WarmToolName = (typeof privateMcpToolDefinitions)[number]['name'];
 export type { Account, AutomationInput, AutomationOperation, AutomationOperationDescription, Budget, DescribeOperationOutput, FinancialContext, FinancialContextMeta, GetTransactionsInput, GetTransactionsOutput, Goal, Health, Holding, InvokeOperationOutput, LatestTransactions, Liability, Position, Recurring, Snapshot, Status, Transaction, TransactionIndex, TransactionMonth, VerifyKeyOutput, WarmApiClient, WarmApiClientOptions, } from './warm-api-client.js';
-export type { WarmApiAudience } from './config-paths.js';
+export type { PrivateMcpMode } from '@warmio/contracts/mcp';
 export type { WarmServerOptions } from './server.js';

package/dist/types.js

@@ -1,11 +1,8 @@
-export const WARM_CONTEXT_TOOL_NAMES = [
-    'get_financial_context',
-    'get_transactions',
-    'verify_key',
-];
-export const WARM_AUTOMATION_TOOL_NAMES = [
-    'search_operations',
-    'describe_operation',
-    'invoke_operation',
-];
-export const WARM_TOOL_NAMES = [...WARM_CONTEXT_TOOL_NAMES, ...WARM_AUTOMATION_TOOL_NAMES];
+import { privateMcpToolDefinitions } from '@warmio/contracts/mcp';
+export const WARM_CONTEXT_TOOL_NAMES = privateMcpToolDefinitions
+    .filter((tool) => tool.mode === 'context')
+    .map((tool) => tool.name);
+export const WARM_AUTOMATION_TOOL_NAMES = privateMcpToolDefinitions
+    .filter((tool) => tool.mode === 'automation')
+    .map((tool) => tool.name);
+export const WARM_TOOL_NAMES = privateMcpToolDefinitions.map((tool) => tool.name);

package/dist/warm-api-client.d.ts

@@ -1,8 +1,8 @@
-import { type WarmApiAudience } from './config-paths.js';
+import { type PrivateMcpMode } from '@warmio/contracts/mcp';
 import type { AutomationInput, AutomationOperation, FinancialContext, FinancialContextAccount, FinancialContextBudget, FinancialContextGoal, FinancialContextHealth, FinancialContextHolding, FinancialContextLiability, FinancialContextMeta, FinancialContextPosition, FinancialContextRecurring, FinancialContextSnapshot, FinancialContextStatus, FinancialContextTransaction, FinancialContextTransactionIndex, LatestTransactions, TransactionMonth } from '@warmio/contracts/types';
 export type { AutomationInput, AutomationOperation, FinancialContext, FinancialContextMeta, LatestTransactions, TransactionMonth, } from '@warmio/contracts/types';
 export interface WarmApiClientOptions {
-    audience?: WarmApiAudience;
+    audience?: PrivateMcpMode;
     apiKeyResolver?: () => string | null;
     apiUrl?: string;
     fetchImplementation?: typeof fetch;
@@ -63,7 +63,7 @@ export interface WarmApiClient {
     validateAudience(): Promise<VerifyKeyOutput>;
     verifyKey(): Promise<VerifyKeyOutput>;
 }
-export declare function getConfiguredApiKey(audience?: WarmApiAudience): string | null;
+export declare function getConfiguredApiKey(audience?: PrivateMcpMode): string | null;
 export declare function resetConfiguredApiKeyCache(): void;
 interface WarmApiResponse<TBody> {
     body: TBody;
@@ -77,4 +77,4 @@ export declare class WarmApiError extends Error {
     constructor(message: string, response: WarmApiResponse<unknown>);
 }
 export declare function createWarmApiClient(options?: WarmApiClientOptions): WarmApiClient;
-export declare function verifyWarmApiKey(apiKey: string, audience?: WarmApiAudience): Promise<VerifyKeyOutput>;
+export declare function verifyWarmApiKey(apiKey: string, audience?: PrivateMcpMode): Promise<VerifyKeyOutput>;

package/dist/warm-api-client.js

@@ -1,10 +1,20 @@
-import { getWarmApiKeyPath, readConfigFile, } from './config-paths.js';
-const DEFAULT_API_URL = process.env.WARM_API_URL || 'https://app.warm.io';
+import { getWarmApiKeyPath, readConfigFile } from './config-paths.js';
+import { API_ORIGIN, apiEndpointManifest, } from '@warmio/contracts/api';
+import { WARM_MCP_CREDENTIALS, WARM_MCP_INSTALLER_COMMANDS, } from '@warmio/contracts/mcp';
+const DEFAULT_API_URL = process.env.WARM_API_URL || API_ORIGIN;
 const DEFAULT_REQUEST_TIMEOUT_MS = (() => {
     const raw = Number(process.env.WARM_API_TIMEOUT_MS || 10_000);
     return Number.isFinite(raw) && raw > 0 ? raw : 10_000;
 })();
 const cachedApiKeys = new Map();
+const endpointByOperationId = Object.fromEntries(apiEndpointManifest.map((endpoint) => [endpoint.operation_id, endpoint]));
+function getEndpointPath(operationId, audience) {
+    const endpoint = endpointByOperationId[operationId];
+    if (endpoint.audience !== audience) {
+        throw new Error(`API operation ${operationId} is not available to ${audience}.`);
+    }
+    return endpoint.path;
+}
 function getRequestSignal(timeoutMs) {
     if (typeof AbortSignal.timeout === 'function') {
         return AbortSignal.timeout(timeoutMs);
@@ -27,7 +37,7 @@ export function getConfiguredApiKey(audience = 'context') {
     if (cachedApiKeys.has(audience)) {
         return cachedApiKeys.get(audience) ?? null;
     }
-    const environmentKey = audience === 'automation' ? 'WARM_AUTOMATION_API_KEY' : 'WARM_CONTEXT_API_KEY';
+    const environmentKey = WARM_MCP_CREDENTIALS[audience].apiKeyEnv;
     const apiKey = process.env[environmentKey]?.trim() || readConfigFile(getWarmApiKeyPath(audience));
     cachedApiKeys.set(audience, apiKey);
     return apiKey;
@@ -65,7 +75,7 @@ async function requestWarmApi(request, options) {
     const requestOptions = createWarmApiClientConfig(options);
     const apiKey = requestOptions.apiKeyResolver?.() ?? getConfiguredApiKey(requestOptions.audience);
     if (!apiKey) {
-        throw new Error(`No ${requestOptions.audience} API key configured. Run "npx @warmio/mcp install --mode ${requestOptions.audience}" or set ${requestOptions.audience === 'automation' ? 'WARM_AUTOMATION_API_KEY' : 'WARM_CONTEXT_API_KEY'}.`);
+        throw new Error(`No ${requestOptions.audience} API key configured. Run "${WARM_MCP_INSTALLER_COMMANDS[requestOptions.audience]}" or set ${WARM_MCP_CREDENTIALS[requestOptions.audience].apiKeyEnv}.`);
     }
     const url = new URL(request.endpoint, requestOptions.apiUrl);
     Object.entries(request.query || {}).forEach(([key, value]) => {
@@ -119,23 +129,29 @@ async function requestSuccessfulJson(request, options) {
     return response.body;
 }
 export function createWarmApiClient(options = {}) {
-    const getFinancialContext = async () => await requestSuccessfulJson({ endpoint: '/api/financial-context' }, options);
-    const getFinancialContextMeta = async () => await requestSuccessfulJson({ endpoint: '/api/financial-context/meta' }, options);
+    const getFinancialContext = async () => await requestSuccessfulJson({ endpoint: getEndpointPath('getFinancialContext', 'context') }, options);
+    const getFinancialContextMeta = async () => await requestSuccessfulJson({ endpoint: getEndpointPath('getFinancialContextMeta', 'context') }, options);
     const getTransactions = async (input) => {
         const rawInput = input;
         if (typeof rawInput.month === 'string' && rawInput.latest !== undefined) {
             throw new Error('`month` and `latest` are mutually exclusive.');
         }
         if (typeof rawInput.month === 'string') {
-            return await requestSuccessfulJson({ endpoint: '/api/financial-context/transactions', query: { month: rawInput.month } }, options);
+            return await requestSuccessfulJson({
+                endpoint: getEndpointPath('getFinancialContextTransactions', 'context'),
+                query: { month: rawInput.month },
+            }, options);
         }
         if (rawInput.latest === true) {
-            return await requestSuccessfulJson({ endpoint: '/api/financial-context/transactions', query: { latest: '1' } }, options);
+            return await requestSuccessfulJson({
+                endpoint: getEndpointPath('getFinancialContextTransactions', 'context'),
+                query: { latest: '1' },
+            }, options);
         }
         throw new Error('Call getTransactions with `month` in YYYY-MM format or `latest: true`.');
     };
     const verifyKey = async () => {
-        const response = await requestSuccessfulJson({ endpoint: '/api/verify' }, options);
+        const response = await requestSuccessfulJson({ endpoint: getEndpointPath('verifyApiAccess', 'context') }, options);
         return {
             audience: response.audience,
             status: response.status || (response.valid ? 'ok' : 'invalid'),
@@ -147,14 +163,18 @@ export function createWarmApiClient(options = {}) {
         const expectedAudience = createWarmApiClientConfig(options).audience;
         if (!result.valid || result.audience !== expectedAudience) {
             const article = expectedAudience === 'automation' ? 'an' : 'a';
-            throw new Error(`This MCP mode requires ${article} ${expectedAudience} API key. Run "npx @warmio/mcp install --mode ${expectedAudience}" to configure a separate key.`);
+            throw new Error(`This MCP mode requires ${article} ${expectedAudience} API key. Run "${WARM_MCP_INSTALLER_COMMANDS[expectedAudience]}" to configure a separate key.`);
         }
         return result;
     };
-    const searchOperations = async (query) => await requestSuccessfulJson({ body: query ? { query } : {}, endpoint: '/api/automation/operations/search', method: 'POST' }, options);
+    const searchOperations = async (query) => await requestSuccessfulJson({
+        body: query ? { query } : {},
+        endpoint: getEndpointPath('searchOperations', 'automation'),
+        method: 'POST',
+    }, options);
     const describeOperation = async (operationId, input) => await requestSuccessfulJson({
         body: { operation_id: operationId, ...(input ? { input } : {}) },
-        endpoint: '/api/automation/operations/describe',
+        endpoint: getEndpointPath('describeOperation', 'automation'),
         method: 'POST',
     }, options);
     const invokeOperation = async (operationId, input, approvalId) => await requestSuccessfulJson({
@@ -163,7 +183,7 @@ export function createWarmApiClient(options = {}) {
             input: input ?? {},
             ...(approvalId ? { approval_id: approvalId } : {}),
         },
-        endpoint: '/api/automation/operations/invoke',
+        endpoint: getEndpointPath('invokeOperation', 'automation'),
         method: 'POST',
     }, options);
     return {

package/package.json

@@ -1,9 +1,12 @@
 {
   "name": "@warmio/mcp",
-  "version": "8.0.0",
+  "version": "9.1.0",
   "mcpName": "io.github.jasonstockman/warmio",
   "description": "Warm CLI and compact context or automation MCP server",
   "type": "module",
+  "engines": {
+    "node": ">=18"
+  },
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "publishConfig": {
@@ -25,10 +28,6 @@
     "./install": {
       "types": "./dist/install.d.ts",
       "default": "./dist/install.js"
-    },
-    "./manifest": {
-      "types": "./dist/manifest.d.ts",
-      "default": "./dist/manifest.js"
     }
   },
   "bin": {
@@ -38,7 +37,7 @@
     "dist"
   ],
   "scripts": {
-    "build": "tsc",
+    "build": "node scripts/clean.mjs && tsc",
     "test": "npm run build && node --test test/*.mjs",
     "start": "node dist/index.js mcp",
     "start:http": "node dist/index.js http",
@@ -61,7 +60,7 @@
     "url": "git+https://github.com/jasonstockman/warm-mcp.git"
   },
   "dependencies": {
-    "@warmio/contracts": "1.0.0",
+    "@warmio/contracts": "1.2.0",
     "@modelcontextprotocol/sdk": "^1.27.1",
     "dotenv": "^17.2.3",
     "zod": "^3.25.76"

package/dist/manifest.d.ts

@@ -1,85 +0,0 @@
-export declare const WARM_MCP_PACKAGE_NAME: "@warmio/mcp";
-export declare const WARM_MCP_PACKAGE_SPEC: "@warmio/mcp@latest";
-export declare const WARM_MCP_INSTALL_COMMAND: "npx -y @warmio/mcp@latest";
-export declare const WARM_MCP_CLIENTS: readonly [{
-    readonly id: "claude-code";
-    readonly name: "Claude Code";
-    readonly format: "json";
-}, {
-    readonly id: "claude-desktop";
-    readonly name: "Claude Desktop";
-    readonly format: "json";
-}, {
-    readonly id: "cursor";
-    readonly name: "Cursor";
-    readonly format: "json";
-}, {
-    readonly id: "windsurf";
-    readonly name: "Windsurf";
-    readonly format: "json";
-}, {
-    readonly id: "opencode";
-    readonly name: "OpenCode";
-    readonly format: "json";
-}, {
-    readonly id: "codex-cli";
-    readonly name: "Codex CLI";
-    readonly format: "toml";
-}, {
-    readonly id: "antigravity";
-    readonly name: "Antigravity";
-    readonly format: "json";
-}, {
-    readonly id: "gemini-cli";
-    readonly name: "Gemini CLI";
-    readonly format: "json";
-}];
-export type WarmMcpClientId = (typeof WARM_MCP_CLIENTS)[number]['id'];
-export declare const WARM_MCP_PROJECT_CONFIGS: readonly [".mcp.json", ".cursor/mcp.json", ".vscode/mcp.json"];
-export declare const WARM_MCP_SERVER_COMMANDS: {
-    readonly automation: "npx -y @warmio/mcp@latest mcp --mode automation";
-    readonly context: "npx -y @warmio/mcp@latest mcp --mode context";
-};
-export declare const WARM_MCP_MANIFEST: {
-    readonly clients: readonly [{
-        readonly id: "claude-code";
-        readonly name: "Claude Code";
-        readonly format: "json";
-    }, {
-        readonly id: "claude-desktop";
-        readonly name: "Claude Desktop";
-        readonly format: "json";
-    }, {
-        readonly id: "cursor";
-        readonly name: "Cursor";
-        readonly format: "json";
-    }, {
-        readonly id: "windsurf";
-        readonly name: "Windsurf";
-        readonly format: "json";
-    }, {
-        readonly id: "opencode";
-        readonly name: "OpenCode";
-        readonly format: "json";
-    }, {
-        readonly id: "codex-cli";
-        readonly name: "Codex CLI";
-        readonly format: "toml";
-    }, {
-        readonly id: "antigravity";
-        readonly name: "Antigravity";
-        readonly format: "json";
-    }, {
-        readonly id: "gemini-cli";
-        readonly name: "Gemini CLI";
-        readonly format: "json";
-    }];
-    readonly installCommand: "npx -y @warmio/mcp@latest";
-    readonly packageName: "@warmio/mcp";
-    readonly packageSpec: "@warmio/mcp@latest";
-    readonly projectConfigs: readonly [".mcp.json", ".cursor/mcp.json", ".vscode/mcp.json"];
-    readonly serverCommands: {
-        readonly automation: "npx -y @warmio/mcp@latest mcp --mode automation";
-        readonly context: "npx -y @warmio/mcp@latest mcp --mode context";
-    };
-};

package/dist/manifest.js

@@ -1,30 +0,0 @@
-export const WARM_MCP_PACKAGE_NAME = '@warmio/mcp';
-export const WARM_MCP_PACKAGE_SPEC = `${WARM_MCP_PACKAGE_NAME}@latest`;
-export const WARM_MCP_INSTALL_COMMAND = `npx -y ${WARM_MCP_PACKAGE_SPEC}`;
-export const WARM_MCP_CLIENTS = [
-    { id: 'claude-code', name: 'Claude Code', format: 'json' },
-    { id: 'claude-desktop', name: 'Claude Desktop', format: 'json' },
-    { id: 'cursor', name: 'Cursor', format: 'json' },
-    { id: 'windsurf', name: 'Windsurf', format: 'json' },
-    { id: 'opencode', name: 'OpenCode', format: 'json' },
-    { id: 'codex-cli', name: 'Codex CLI', format: 'toml' },
-    { id: 'antigravity', name: 'Antigravity', format: 'json' },
-    { id: 'gemini-cli', name: 'Gemini CLI', format: 'json' },
-];
-export const WARM_MCP_PROJECT_CONFIGS = [
-    '.mcp.json',
-    '.cursor/mcp.json',
-    '.vscode/mcp.json',
-];
-export const WARM_MCP_SERVER_COMMANDS = {
-    automation: `${WARM_MCP_INSTALL_COMMAND} mcp --mode automation`,
-    context: `${WARM_MCP_INSTALL_COMMAND} mcp --mode context`,
-};
-export const WARM_MCP_MANIFEST = {
-    clients: WARM_MCP_CLIENTS,
-    installCommand: WARM_MCP_INSTALL_COMMAND,
-    packageName: WARM_MCP_PACKAGE_NAME,
-    packageSpec: WARM_MCP_PACKAGE_SPEC,
-    projectConfigs: WARM_MCP_PROJECT_CONFIGS,
-    serverCommands: WARM_MCP_SERVER_COMMANDS,
-};