@zeph-to/mcp-server 1.2.2 → 1.4.0

package/dist/api-client.d.ts

@@ -10,7 +10,7 @@ export declare class ZephApiClient {
     private readonly baseUrl;
     constructor(config: McpServerConfig);
     sendPush(params: {
-        title: string;
+        title?: string;
         body?: string;
         url?: string;
         type?: string;
@@ -22,7 +22,12 @@ export declare class ZephApiClient {
             fileName: string;
             fileSize: number;
             fileType: string;
+            iv?: string;
+            encryptedKey?: string;
         }[];
+        isEncrypted?: boolean;
+        encryptedKey?: string;
+        senderPublicKey?: string;
     }): Promise<PushResponse>;
     triggerHook(hookId: string, params: {
         title: string;
@@ -34,7 +39,7 @@ export declare class ZephApiClient {
         timeout?: number;
         fallback?: string;
         metadata?: Record<string, unknown>;
-        hookType?: 'one-way' | 'interactive' | 'input';
+        hookType?: 'one-way' | 'interactive' | 'input' | 'combo';
     }): Promise<HookTriggerResponse>;
     getHookEvent(hookId: string, eventId: string): Promise<HookEventResponse>;
     listDevices(): Promise<DevicesResponse>;
@@ -50,7 +55,7 @@ export declare class ZephApiClient {
         fileType: string;
         fileSize: number;
     }): Promise<UploadRequestResponse>;
-    uploadToS3(url: string, content: string, contentType: string): Promise<void>;
+    uploadToS3(url: string, content: string | Buffer, contentType: string): Promise<void>;
     private request;
 }
 //# sourceMappingURL=api-client.d.ts.map

package/dist/api-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../src/api-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAEV,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAEpB,qBAAa,QAAS,SAAQ,KAAK;aAGf,IAAI,EAAE,MAAM;aACZ,MAAM,EAAE,MAAM;gBAF9B,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM;CAKjC;AAKD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,MAAM,EAAE,eAAe;IAK7B,QAAQ,CAAC,MAAM,EAAE;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KACrF,GAAG,OAAO,CAAC,YAAY,CAAC;IAInB,WAAW,CACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,QAAQ,CAAC,EAAE,SAAS,GAAG,aAAa,GAAG,OAAO,CAAC;KAChD,GACA,OAAO,CAAC,mBAAmB,CAAC;IAIzB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAIzE,WAAW,IAAI,OAAO,CAAC,eAAe,CAAC;IAIvC,UAAU,CAAC,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAQjF,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAIrD,gBAAgB,IAAI,OAAO,CAAC,eAAe,CAAC;IAI5C,YAAY,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAIzC,aAAa,CAAC,MAAM,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI5B,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAYpE,OAAO;CAsCtB"}
+{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../src/api-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAEV,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAEpB,qBAAa,QAAS,SAAQ,KAAK;aAGf,IAAI,EAAE,MAAM;aACZ,MAAM,EAAE,MAAM;gBAF9B,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM;CAKjC;AAKD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,MAAM,EAAE,eAAe;IAK7B,QAAQ,CAAC,MAAM,EAAE;QACrB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,EAAE,CAAC,EAAE,MAAM,CAAC;YAAC,YAAY,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QACxH,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,YAAY,CAAC;IAInB,WAAW,CACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,QAAQ,CAAC,EAAE,SAAS,GAAG,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;KAC1D,GACA,OAAO,CAAC,mBAAmB,CAAC;IAIzB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAIzE,WAAW,IAAI,OAAO,CAAC,eAAe,CAAC;IAIvC,UAAU,CAAC,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAQjF,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAIrD,gBAAgB,IAAI,OAAO,CAAC,eAAe,CAAC;IAI5C,YAAY,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAIzC,aAAa,CAAC,MAAM,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI5B,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAc7E,OAAO;CAsCtB"}

package/dist/api-client.js

@@ -55,10 +55,12 @@ class ZephApiClient {
         return this.request('POST', '/files/upload-request', params);
     }
     async uploadToS3(url, content, contentType) {
+        const isText = typeof content === 'string';
+        const body = isText ? content : new Uint8Array(content);
         const response = await fetch(url, {
             method: 'PUT',
-            headers: { 'Content-Type': `${contentType}; charset=utf-8` },
-            body: content,
+            headers: { 'Content-Type': isText ? `${contentType}; charset=utf-8` : contentType },
+            body,
             signal: AbortSignal.timeout(DEFAULT_TIMEOUT_MS),
         });
         if (!response.ok) {

package/dist/crypto.d.ts

@@ -0,0 +1,59 @@
+/**
+ * E2E encryption for MCP server — self-contained ECDH P-256 + AES-256-GCM
+ * Mirrors @zeph/crypto API but bundled inline (no external dependency).
+ * Uses Web Crypto API (globalThis.crypto.subtle) — Node.js 18+.
+ */
+/**
+ * Initialize crypto: sync keys with server, then fallback to local/generate.
+ * Server is source of truth for per-user key pair.
+ * Safe to call concurrently — deduplicates to single init.
+ * Returns the exported public key (Base64 SPKI).
+ */
+export declare const initCrypto: (apiKey?: string, baseUrl?: string) => Promise<string>;
+export declare const getKeyPair: () => CryptoKeyPair | null;
+export declare const getPublicKey: () => string | null;
+/**
+ * Encrypt push body for a recipient.
+ * Returns fields ready to merge into the sendPush payload.
+ */
+export declare const encryptPushBody: (input: {
+    title?: string;
+    body?: string;
+    url?: string;
+}, recipientPublicKeyRaw: string) => Promise<{
+    body: string;
+    encryptedKey: string;
+    senderPublicKey: string;
+    isEncrypted: true;
+}>;
+/**
+ * Encrypt push body for self (all own devices).
+ */
+export declare const encryptPushBodyForSelf: (input: {
+    title?: string;
+    body?: string;
+    url?: string;
+}) => Promise<{
+    body: string;
+    encryptedKey: string;
+    senderPublicKey: string;
+    isEncrypted: true;
+}>;
+/**
+ * Encrypt file content for a recipient.
+ * Returns encrypted buffer + key material for file attachment metadata.
+ */
+export declare const encryptFileForRecipient: (content: string, recipientPublicKeyRaw: string) => Promise<{
+    ciphertext: Buffer;
+    iv: string;
+    encryptedKey: string;
+}>;
+/**
+ * Encrypt file content for self (all own devices).
+ */
+export declare const encryptFileForSelf: (content: string) => Promise<{
+    ciphertext: Buffer;
+    iv: string;
+    encryptedKey: string;
+}>;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA0JH;;;;;GAKG;AACH,eAAO,MAAM,UAAU,GAAI,SAAS,MAAM,EAAE,UAAU,MAAM,KAAG,OAAO,CAAC,MAAM,CAwD5E,CAAC;AA4BF,eAAO,MAAM,UAAU,QAAO,aAAa,GAAG,IAAqB,CAAC;AACpE,eAAO,MAAM,YAAY,QAAO,MAAM,GAAG,IAA+B,CAAC;AAEzE;;;GAGG;AACH,eAAO,MAAM,eAAe,GAC1B,OAAO;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,EACtD,uBAAuB,MAAM,KAC5B,OAAO,CAAC;IACT,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,IAAI,CAAC;CACnB,CAeA,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB,GACjC,OAAO;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,KACrD,OAAO,CAAC;IACT,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,IAAI,CAAC;CACnB,CAaA,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,uBAAuB,GAClC,SAAS,MAAM,EACf,uBAAuB,MAAM,KAC5B,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CASlE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,GAC7B,SAAS,MAAM,KACd,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAQlE,CAAC"}

package/dist/crypto.js

@@ -0,0 +1,252 @@
+"use strict";
+/**
+ * E2E encryption for MCP server — self-contained ECDH P-256 + AES-256-GCM
+ * Mirrors @zeph/crypto API but bundled inline (no external dependency).
+ * Uses Web Crypto API (globalThis.crypto.subtle) — Node.js 18+.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encryptFileForSelf = exports.encryptFileForRecipient = exports.encryptPushBodyForSelf = exports.encryptPushBody = exports.getPublicKey = exports.getKeyPair = exports.initCrypto = void 0;
+/// <reference lib="dom" />
+const fs_1 = require("fs");
+const path_1 = require("path");
+// ─── Base64 helpers ───
+const toBase64 = (buffer) => {
+    const bytes = new Uint8Array(buffer);
+    let binary = '';
+    for (let i = 0; i < bytes.length; i++) {
+        binary += String.fromCharCode(bytes[i]);
+    }
+    return btoa(binary);
+};
+const fromBase64 = (base64) => {
+    const binary = atob(base64);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++) {
+        bytes[i] = binary.charCodeAt(i);
+    }
+    return bytes.buffer;
+};
+// ─── ECDH key management ───
+const ECDH_PARAMS = { name: 'ECDH', namedCurve: 'P-256' };
+const generateKeyPair = async () => crypto.subtle.generateKey(ECDH_PARAMS, true, ['deriveKey', 'deriveBits']);
+const exportKeyPair = async (keyPair) => {
+    const [publicRaw, privateRaw] = await Promise.all([
+        crypto.subtle.exportKey('spki', keyPair.publicKey),
+        crypto.subtle.exportKey('pkcs8', keyPair.privateKey),
+    ]);
+    return { publicKey: toBase64(publicRaw), privateKey: toBase64(privateRaw) };
+};
+const importPublicKey = async (base64) => crypto.subtle.importKey('spki', fromBase64(base64), ECDH_PARAMS, true, []);
+const importPrivateKey = async (base64) => crypto.subtle.importKey('pkcs8', fromBase64(base64), ECDH_PARAMS, true, ['deriveKey', 'deriveBits']);
+const importKeyPair = async (exported) => {
+    const [publicKey, privateKey] = await Promise.all([
+        importPublicKey(exported.publicKey),
+        importPrivateKey(exported.privateKey),
+    ]);
+    return { publicKey, privateKey };
+};
+const deriveAesKey = async (privateKey, publicKey) => crypto.subtle.deriveKey({ name: 'ECDH', public: publicKey }, privateKey, { name: 'AES-GCM', length: 256 }, false, ['encrypt', 'decrypt']);
+const encrypt = async (plaintext, senderPrivateKey, recipientPublicKey) => {
+    const messageKey = await crypto.subtle.generateKey({ name: 'AES-GCM', length: 256 }, true, ['encrypt', 'decrypt']);
+    const iv = crypto.getRandomValues(new Uint8Array(12));
+    const ciphertext = await crypto.subtle.encrypt({ name: 'AES-GCM', iv }, messageKey, new TextEncoder().encode(plaintext));
+    const sharedKey = await deriveAesKey(senderPrivateKey, recipientPublicKey);
+    const rawMessageKey = await crypto.subtle.exportKey('raw', messageKey);
+    const keyIv = crypto.getRandomValues(new Uint8Array(12));
+    const encryptedKey = await crypto.subtle.encrypt({ name: 'AES-GCM', iv: keyIv }, sharedKey, rawMessageKey);
+    return {
+        ciphertext: toBase64(ciphertext),
+        iv: toBase64(iv.buffer),
+        encryptedKey: toBase64(encryptedKey),
+        keyIv: toBase64(keyIv.buffer),
+    };
+};
+// ─── File encryption ───
+const encryptFileContent = async (content, senderPrivateKey, recipientPublicKey) => {
+    const buffer = new TextEncoder().encode(content).buffer;
+    const fileKey = await crypto.subtle.generateKey({ name: 'AES-GCM', length: 256 }, true, ['encrypt', 'decrypt']);
+    const iv = crypto.getRandomValues(new Uint8Array(12));
+    const ciphertext = await crypto.subtle.encrypt({ name: 'AES-GCM', iv }, fileKey, buffer);
+    const sharedKey = await deriveAesKey(senderPrivateKey, recipientPublicKey);
+    const rawFileKey = await crypto.subtle.exportKey('raw', fileKey);
+    const keyIv = crypto.getRandomValues(new Uint8Array(12));
+    const encryptedKey = await crypto.subtle.encrypt({ name: 'AES-GCM', iv: keyIv }, sharedKey, rawFileKey);
+    return {
+        ciphertext: Buffer.from(ciphertext),
+        iv: toBase64(iv.buffer),
+        encryptedKey: toBase64(encryptedKey),
+        keyIv: toBase64(keyIv.buffer),
+    };
+};
+// ─── Key persistence (~/.config/zeph/keys.json) ───
+const KEYS_DIR = (0, path_1.join)(process.env.HOME ?? '~', '.config', 'zeph');
+const KEYS_PATH = (0, path_1.join)(KEYS_DIR, 'keys.json');
+const loadStoredKeys = () => {
+    try {
+        return JSON.parse((0, fs_1.readFileSync)(KEYS_PATH, 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+};
+const storeKeys = (exported) => {
+    (0, fs_1.mkdirSync)(KEYS_DIR, { recursive: true, mode: 0o700 });
+    (0, fs_1.writeFileSync)(KEYS_PATH, JSON.stringify(exported, null, 2), { mode: 0o600 });
+};
+// ─── Cached state ───
+let cachedKeyPair = null;
+let cachedExportedPublicKey = null;
+let cachedOwnPublicKey = null;
+let initPromise = null;
+/**
+ * Initialize crypto: sync keys with server, then fallback to local/generate.
+ * Server is source of truth for per-user key pair.
+ * Safe to call concurrently — deduplicates to single init.
+ * Returns the exported public key (Base64 SPKI).
+ */
+const initCrypto = (apiKey, baseUrl) => {
+    if (initPromise)
+        return initPromise;
+    initPromise = (async () => {
+        const stored = loadStoredKeys();
+        // Try server sync if API key available
+        if (apiKey) {
+            const serverKeys = await fetchServerKeys(apiKey, baseUrl);
+            if (serverKeys) {
+                if (!stored || stored.publicKey !== serverKeys.publicKey) {
+                    storeKeys(serverKeys);
+                }
+                cachedKeyPair = await importKeyPair(serverKeys);
+                cachedExportedPublicKey = serverKeys.publicKey;
+                cachedOwnPublicKey = cachedKeyPair.publicKey;
+                return serverKeys.publicKey;
+            }
+            if (stored) {
+                await uploadServerKeys(stored, apiKey, baseUrl);
+                cachedKeyPair = await importKeyPair(stored);
+                cachedExportedPublicKey = stored.publicKey;
+                cachedOwnPublicKey = cachedKeyPair.publicKey;
+                return stored.publicKey;
+            }
+            const keyPair = await generateKeyPair();
+            const exported = await exportKeyPair(keyPair);
+            storeKeys(exported);
+            await uploadServerKeys(exported, apiKey, baseUrl);
+            cachedKeyPair = keyPair;
+            cachedExportedPublicKey = exported.publicKey;
+            cachedOwnPublicKey = keyPair.publicKey;
+            return exported.publicKey;
+        }
+        // No API key — local-only mode
+        if (stored) {
+            cachedKeyPair = await importKeyPair(stored);
+            cachedExportedPublicKey = stored.publicKey;
+            cachedOwnPublicKey = cachedKeyPair.publicKey;
+            return stored.publicKey;
+        }
+        const keyPair = await generateKeyPair();
+        const exported = await exportKeyPair(keyPair);
+        storeKeys(exported);
+        cachedKeyPair = keyPair;
+        cachedExportedPublicKey = exported.publicKey;
+        cachedOwnPublicKey = keyPair.publicKey;
+        return exported.publicKey;
+    })().catch((err) => {
+        initPromise = null;
+        throw err;
+    });
+    return initPromise;
+};
+exports.initCrypto = initCrypto;
+// ─── Server key sync helpers ───
+const fetchServerKeys = async (apiKey, baseUrl) => {
+    try {
+        const url = `${(baseUrl ?? 'https://api.zeph.to/v1').replace(/\/$/, '')}/users/me/keys`;
+        const res = await fetch(url, { headers: { 'X-API-Key': apiKey } });
+        if (!res.ok)
+            return null;
+        const json = await res.json();
+        const keys = json.data?.encryptionKeys;
+        return keys?.publicKey && keys?.privateKey ? keys : null;
+    }
+    catch {
+        return null;
+    }
+};
+const uploadServerKeys = async (keys, apiKey, baseUrl) => {
+    try {
+        const url = `${(baseUrl ?? 'https://api.zeph.to/v1').replace(/\/$/, '')}/users/me/keys`;
+        await fetch(url, {
+            method: 'PUT',
+            headers: { 'X-API-Key': apiKey, 'Content-Type': 'application/json' },
+            body: JSON.stringify(keys),
+        });
+    }
+    catch { /* non-critical */ }
+};
+const getKeyPair = () => cachedKeyPair;
+exports.getKeyPair = getKeyPair;
+const getPublicKey = () => cachedExportedPublicKey;
+exports.getPublicKey = getPublicKey;
+/**
+ * Encrypt push body for a recipient.
+ * Returns fields ready to merge into the sendPush payload.
+ */
+const encryptPushBody = async (input, recipientPublicKeyRaw) => {
+    if (!cachedKeyPair || !cachedExportedPublicKey)
+        throw new Error('Crypto not initialized');
+    const recipientKey = await importPublicKey(recipientPublicKeyRaw);
+    const payload = await encrypt(JSON.stringify({ title: input.title, body: input.body, url: input.url }), cachedKeyPair.privateKey, recipientKey);
+    return {
+        body: JSON.stringify({ ciphertext: payload.ciphertext, iv: payload.iv }),
+        encryptedKey: JSON.stringify({ encryptedKey: payload.encryptedKey, keyIv: payload.keyIv }),
+        senderPublicKey: cachedExportedPublicKey,
+        isEncrypted: true,
+    };
+};
+exports.encryptPushBody = encryptPushBody;
+/**
+ * Encrypt push body for self (all own devices).
+ */
+const encryptPushBodyForSelf = async (input) => {
+    if (!cachedKeyPair || !cachedExportedPublicKey || !cachedOwnPublicKey)
+        throw new Error('Crypto not initialized');
+    const payload = await encrypt(JSON.stringify({ title: input.title, body: input.body, url: input.url }), cachedKeyPair.privateKey, cachedOwnPublicKey);
+    return {
+        body: JSON.stringify({ ciphertext: payload.ciphertext, iv: payload.iv }),
+        encryptedKey: JSON.stringify({ encryptedKey: payload.encryptedKey, keyIv: payload.keyIv }),
+        senderPublicKey: cachedExportedPublicKey,
+        isEncrypted: true,
+    };
+};
+exports.encryptPushBodyForSelf = encryptPushBodyForSelf;
+/**
+ * Encrypt file content for a recipient.
+ * Returns encrypted buffer + key material for file attachment metadata.
+ */
+const encryptFileForRecipient = async (content, recipientPublicKeyRaw) => {
+    if (!cachedKeyPair)
+        throw new Error('Crypto not initialized');
+    const recipientKey = await importPublicKey(recipientPublicKeyRaw);
+    const result = await encryptFileContent(content, cachedKeyPair.privateKey, recipientKey);
+    return {
+        ciphertext: result.ciphertext,
+        iv: result.iv,
+        encryptedKey: JSON.stringify({ encryptedKey: result.encryptedKey, keyIv: result.keyIv }),
+    };
+};
+exports.encryptFileForRecipient = encryptFileForRecipient;
+/**
+ * Encrypt file content for self (all own devices).
+ */
+const encryptFileForSelf = async (content) => {
+    if (!cachedKeyPair || !cachedOwnPublicKey)
+        throw new Error('Crypto not initialized');
+    const result = await encryptFileContent(content, cachedKeyPair.privateKey, cachedOwnPublicKey);
+    return {
+        ciphertext: result.ciphertext,
+        iv: result.iv,
+        encryptedKey: JSON.stringify({ encryptedKey: result.encryptedKey, keyIv: result.keyIv }),
+    };
+};
+exports.encryptFileForSelf = encryptFileForSelf;

package/dist/index.js

@@ -7,6 +7,7 @@ const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
 const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
 const config_js_1 = require("./config.js");
 const api_client_js_1 = require("./api-client.js");
+const crypto_js_1 = require("./crypto.js");
 const notify_js_1 = require("./tools/notify.js");
 const prompt_js_1 = require("./tools/prompt.js");
 const input_js_1 = require("./tools/input.js");
@@ -15,6 +16,7 @@ const list_js_1 = require("./tools/list.js");
 const dismiss_js_1 = require("./tools/dismiss.js");
 const broadcast_js_1 = require("./tools/broadcast.js");
 const file_js_1 = require("./tools/file.js");
+const ask_js_1 = require("./tools/ask.js");
 const devices_js_1 = require("./resources/devices.js");
 const channels_js_1 = require("./resources/channels.js");
 const getVersion = () => {
@@ -26,8 +28,7 @@ const getVersion = () => {
         return '0.0.0';
     }
 };
-const createServer = () => {
-    const config = (0, config_js_1.loadConfig)();
+const createServer = (config) => {
     const client = new api_client_js_1.ZephApiClient(config);
     const server = new mcp_js_1.McpServer({
         name: 'zeph',
@@ -46,6 +47,7 @@ const createServer = () => {
             '- zeph_file: Send a text file (logs, reports, code)',
             '- zeph_prompt: Ask user to choose from options (requires ZEPH_HOOK_ID)',
             '- zeph_input: Request text input from user (requires ZEPH_HOOK_ID)',
+            '- zeph_ask: Ask user with buttons + text input combined (requires ZEPH_HOOK_ID). Prefer this over zeph_prompt/zeph_input when you need both options and free-text.',
             '',
             'Resources:',
             '- zeph://devices: Check which devices are online',
@@ -61,12 +63,22 @@ const createServer = () => {
     (0, file_js_1.registerFileTool)(server, client, config);
     (0, prompt_js_1.registerPromptTool)(server, client, config);
     (0, input_js_1.registerInputTool)(server, client, config);
+    (0, ask_js_1.registerAskTool)(server, client, config);
     (0, devices_js_1.registerDevicesResource)(server, client);
     (0, channels_js_1.registerChannelsResource)(server, client);
     return server;
 };
 const main = async () => {
-    const server = createServer();
+    const config = (0, config_js_1.loadConfig)();
+    // Initialize E2E encryption keys (sync with server)
+    try {
+        const publicKey = await (0, crypto_js_1.initCrypto)(config.apiKey, config.baseUrl);
+        console.error(`[Crypto] E2E encryption ready (publicKey: ${publicKey.slice(0, 20)}...)`);
+    }
+    catch (err) {
+        console.error('[Crypto] E2E encryption unavailable:', err);
+    }
+    const server = createServer(config);
     const transport = new stdio_js_1.StdioServerTransport();
     await server.connect(transport);
     console.error('Zeph MCP Server running on stdio');

package/dist/tools/ask.d.ts

@@ -0,0 +1,5 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { ZephApiClient } from '../api-client.js';
+import type { McpServerConfig } from '../config.js';
+export declare const registerAskTool: (server: McpServer, client: ZephApiClient, config: McpServerConfig) => void;
+//# sourceMappingURL=ask.d.ts.map

package/dist/tools/ask.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask.d.ts","sourceRoot":"","sources":["../../src/tools/ask.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD,eAAO,MAAM,eAAe,GAAI,QAAQ,SAAS,EAAE,QAAQ,aAAa,EAAE,QAAQ,eAAe,SA+EhG,CAAC"}

package/dist/tools/ask.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAskTool = void 0;
+const zod_1 = require("zod");
+const error_format_js_1 = require("../error-format.js");
+const poll_js_1 = require("../poll.js");
+const registerAskTool = (server, client, config) => {
+    server.registerTool('zeph_ask', {
+        description: 'Ask the user a question with optional quick-reply buttons and a text input field. Combines prompt (buttons) and input (text) in a single notification. The user can either tap a button or type a response. Blocks until the user responds or the timeout is reached. Requires ZEPH_HOOK_ID environment variable.',
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            openWorldHint: true,
+        },
+        inputSchema: {
+            title: zod_1.z.string().describe('Question or request title'),
+            body: zod_1.z.string().optional().describe('Context or instructions'),
+            actions: zod_1.z
+                .array(zod_1.z.object({
+                id: zod_1.z.string().describe('Unique action identifier'),
+                label: zod_1.z.string().describe('Display label for the button'),
+                style: zod_1.z.enum(['primary', 'secondary', 'danger']).default('secondary')
+                    .describe('Button style (default: secondary)'),
+            }))
+                .min(1)
+                .max(4)
+                .optional()
+                .describe('Quick-reply buttons (1-4). Omit for text-only input'),
+            placeholder: zod_1.z.string().optional().describe('Input field placeholder hint'),
+            inputType: zod_1.z
+                .enum(['text', 'multiline'])
+                .default('text')
+                .describe('Input field type (default: text)'),
+            timeout: zod_1.z
+                .number()
+                .min(10)
+                .max(600)
+                .default(120)
+                .describe('Seconds to wait for response (default: 120)'),
+            fallback: zod_1.z
+                .string()
+                .optional()
+                .describe('Action ID to auto-select on timeout'),
+        },
+    }, async ({ title, body, actions, placeholder, inputType, timeout, fallback }, ctx) => {
+        if (!config.hookId)
+            return (0, error_format_js_1.hookNotConfiguredError)();
+        try {
+            const trigger = await client.triggerHook(config.hookId, {
+                title,
+                body,
+                actions,
+                timeout,
+                fallback,
+                hookType: 'combo',
+                metadata: { placeholder, inputType },
+            });
+            const event = await (0, poll_js_1.pollForResponse)(client, config.hookId, trigger.data.eventId, timeout, ctx);
+            if (!event) {
+                if (fallback)
+                    return (0, error_format_js_1.textResult)({ actionId: fallback, timedOut: true });
+                return (0, error_format_js_1.timeoutError)(timeout, 'Try again or use zeph_notify for one-way communication');
+            }
+            const response = event.data.response;
+            if (response?.actionId)
+                return (0, error_format_js_1.textResult)({ actionId: response.actionId, timedOut: false });
+            return (0, error_format_js_1.textResult)({ value: response?.value ?? '', timedOut: false });
+        }
+        catch (err) {
+            return (0, error_format_js_1.formatToolError)(err);
+        }
+    });
+};
+exports.registerAskTool = registerAskTool;

package/dist/tools/file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../src/tools/file.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAGpD,eAAO,MAAM,gBAAgB,GAAI,QAAQ,SAAS,EAAE,QAAQ,aAAa,EAAE,QAAQ,eAAe,SA2CjG,CAAC"}
+{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../src/tools/file.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAwBpD,eAAO,MAAM,gBAAgB,GAAI,QAAQ,SAAS,EAAE,QAAQ,aAAa,EAAE,QAAQ,eAAe,SA0EjG,CAAC"}

package/dist/tools/file.js

@@ -3,6 +3,26 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerFileTool = void 0;
 const zod_1 = require("zod");
 const error_format_js_1 = require("../error-format.js");
+const crypto_js_1 = require("../crypto.js");
+const inferMimeType = (fileName) => {
+    const ext = fileName.split('.').pop()?.toLowerCase();
+    const map = {
+        txt: 'text/plain',
+        json: 'application/json',
+        csv: 'text/csv',
+        md: 'text/markdown',
+        html: 'text/html',
+        xml: 'text/xml',
+        yaml: 'text/yaml',
+        yml: 'text/yaml',
+        log: 'text/plain',
+        ts: 'text/typescript',
+        js: 'text/javascript',
+        py: 'text/x-python',
+        sh: 'text/x-shellscript',
+    };
+    return map[ext ?? ''] ?? 'text/plain';
+};
 const registerFileTool = (server, client, config) => {
     server.registerTool('zeph_file', {
         description: 'Send a text file to the user\'s device. The content is uploaded and delivered as a file push. Use for logs, reports, code snippets, or any text content.',
@@ -19,20 +39,50 @@ const registerFileTool = (server, client, config) => {
         },
     }, async ({ fileName, content, title, targetDeviceId }) => {
         try {
-            const fileType = inferMimeType(fileName);
-            const fileSize = new TextEncoder().encode(content).byteLength;
-            // Step 1: Request upload URL
-            const upload = await client.requestUpload({ fileName, fileType, fileSize });
-            // Step 2: Upload content to S3
-            await client.uploadToS3(upload.data.uploadUrl, content, fileType);
-            // Step 3: Send file push
-            const result = await client.sendPush({
-                title: title ?? fileName,
+            const canEncrypt = !!(0, crypto_js_1.getKeyPair)() && !!(0, crypto_js_1.getPublicKey)();
+            let fileType = inferMimeType(fileName);
+            const originalSize = new TextEncoder().encode(content).byteLength;
+            // Step 1: Optionally encrypt file content
+            let uploadContent = content;
+            let uploadSize = originalSize;
+            let fileIv;
+            let fileEncryptedKey;
+            if (canEncrypt) {
+                try {
+                    const encrypted = await (0, crypto_js_1.encryptFileForSelf)(content);
+                    uploadContent = encrypted.ciphertext;
+                    uploadSize = encrypted.ciphertext.length;
+                    fileType = 'application/octet-stream';
+                    fileIv = encrypted.iv;
+                    fileEncryptedKey = encrypted.encryptedKey;
+                }
+                catch (err) {
+                    console.error('[Crypto] File encryption failed, sending plaintext:', err);
+                }
+            }
+            // Step 2: Request upload URL
+            const upload = await client.requestUpload({ fileName, fileType, fileSize: uploadSize });
+            // Step 3: Upload content to S3
+            await client.uploadToS3(upload.data.uploadUrl, uploadContent, fileType);
+            // Step 4: Send file push (encrypt push body if possible)
+            const pushTitle = title ?? fileName;
+            let pushPayload = {
+                title: pushTitle,
                 type: 'file',
-                files: [{ fileKey: upload.data.fileKey, fileName, fileSize, fileType }],
+                files: [{ fileKey: upload.data.fileKey, fileName, fileSize: originalSize, fileType: inferMimeType(fileName), iv: fileIv, encryptedKey: fileEncryptedKey }],
                 targetDeviceId: targetDeviceId ?? config.deviceId,
-            });
-            return (0, error_format_js_1.textResult)({ pushId: result.data.pushId, fileKey: upload.data.fileKey, fileSize });
+            };
+            if (canEncrypt) {
+                try {
+                    const enc = await (0, crypto_js_1.encryptPushBodyForSelf)({ title: pushTitle });
+                    pushPayload = { ...pushPayload, title: undefined, body: enc.body, isEncrypted: enc.isEncrypted, encryptedKey: enc.encryptedKey, senderPublicKey: enc.senderPublicKey };
+                }
+                catch (err) {
+                    console.error('[Crypto] Push encryption failed, sending plaintext:', err);
+                }
+            }
+            const result = await client.sendPush(pushPayload);
+            return (0, error_format_js_1.textResult)({ pushId: result.data.pushId, fileKey: upload.data.fileKey, fileSize: originalSize, encrypted: canEncrypt });
         }
         catch (err) {
             return (0, error_format_js_1.formatToolError)(err);
@@ -40,22 +90,3 @@ const registerFileTool = (server, client, config) => {
     });
 };
 exports.registerFileTool = registerFileTool;
-const inferMimeType = (fileName) => {
-    const ext = fileName.split('.').pop()?.toLowerCase();
-    const map = {
-        txt: 'text/plain',
-        json: 'application/json',
-        csv: 'text/csv',
-        md: 'text/markdown',
-        html: 'text/html',
-        xml: 'text/xml',
-        yaml: 'text/yaml',
-        yml: 'text/yaml',
-        log: 'text/plain',
-        ts: 'text/typescript',
-        js: 'text/javascript',
-        py: 'text/x-python',
-        sh: 'text/x-shellscript',
-    };
-    return map[ext ?? ''] ?? 'text/plain';
-};

package/dist/tools/notify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notify.d.ts","sourceRoot":"","sources":["../../src/tools/notify.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAWpD,eAAO,MAAM,kBAAkB,GAAI,QAAQ,SAAS,EAAE,QAAQ,aAAa,EAAE,QAAQ,eAAe,SA+DnG,CAAC"}
+{"version":3,"file":"notify.d.ts","sourceRoot":"","sources":["../../src/tools/notify.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAYpD,eAAO,MAAM,kBAAkB,GAAI,QAAQ,SAAS,EAAE,QAAQ,aAAa,EAAE,QAAQ,eAAe,SA2GnG,CAAC"}

package/dist/tools/notify.js

@@ -3,7 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerNotifyTool = void 0;
 const zod_1 = require("zod");
 const error_format_js_1 = require("../error-format.js");
-const BODY_FILE_THRESHOLD = 0;
+const crypto_js_1 = require("../crypto.js");
+const BODY_FILE_THRESHOLD = 512;
 const PREVIEW_LENGTH = 200;
 const inferMimeType = (fileName) => {
     const ext = fileName.split('.').pop()?.toLowerCase();
@@ -12,7 +13,7 @@ const inferMimeType = (fileName) => {
 };
 const registerNotifyTool = (server, client, config) => {
     server.registerTool('zeph_notify', {
-        description: 'Send a one-way push notification to the user\'s devices. Use this to inform the user about task completion, errors, or status updates. Long bodies (>1KB) are automatically uploaded as a file for full viewing.',
+        description: 'Send a one-way push notification to the user\'s devices. Use this to inform the user about task completion, errors, or status updates. Long bodies (>512B) are automatically uploaded as a file for full viewing.',
         annotations: {
             readOnlyHint: false,
             destructiveHint: false,
@@ -33,33 +34,73 @@ const registerNotifyTool = (server, client, config) => {
             const deviceId = targetDeviceId ?? config.deviceId;
             const bodyBytes = body ? new TextEncoder().encode(body).byteLength : 0;
             const isLongBody = bodyBytes > BODY_FILE_THRESHOLD;
+            const canEncrypt = !!(0, crypto_js_1.getKeyPair)() && !!(0, crypto_js_1.getPublicKey)();
             if (isLongBody && body) {
                 const fileName = 'response.md';
                 const fileType = inferMimeType(fileName);
                 const fileSize = bodyBytes;
-                const upload = await client.requestUpload({ fileName, fileType, fileSize });
-                await client.uploadToS3(upload.data.uploadUrl, body, fileType);
+                // Encrypt file content if keys available
+                let uploadContent = body;
+                let uploadContentType = fileType;
+                let fileIv;
+                let fileEncryptedKey;
+                if (canEncrypt) {
+                    try {
+                        const encrypted = await (0, crypto_js_1.encryptFileForSelf)(body);
+                        uploadContent = encrypted.ciphertext;
+                        uploadContentType = 'application/octet-stream';
+                        fileIv = encrypted.iv;
+                        fileEncryptedKey = encrypted.encryptedKey;
+                    }
+                    catch (err) {
+                        console.error('[Crypto] File encryption failed, sending plaintext:', err);
+                    }
+                }
+                const upload = await client.requestUpload({ fileName, fileType: uploadContentType, fileSize: typeof uploadContent === 'string' ? fileSize : uploadContent.length });
+                await client.uploadToS3(upload.data.uploadUrl, uploadContent, uploadContentType);
                 const preview = body.length > PREVIEW_LENGTH ? body.slice(0, PREVIEW_LENGTH) + '...' : body;
-                const result = await client.sendPush({
+                // Encrypt push body (title/preview/url) if keys available
+                let pushPayload = {
                     title,
                     body: preview,
                     url,
                     type: 'file',
                     priority,
-                    files: [{ fileKey: upload.data.fileKey, fileName, fileSize, fileType }],
+                    files: [{ fileKey: upload.data.fileKey, fileName, fileSize, fileType, iv: fileIv, encryptedKey: fileEncryptedKey }],
                     targetDeviceId: deviceId,
-                });
-                return (0, error_format_js_1.textResult)({ pushId: result.data.pushId, fileKey: upload.data.fileKey, autoFile: true });
+                };
+                if (canEncrypt) {
+                    try {
+                        const enc = await (0, crypto_js_1.encryptPushBodyForSelf)({ title, body: preview, url });
+                        pushPayload = { ...pushPayload, title: undefined, body: enc.body, isEncrypted: enc.isEncrypted, encryptedKey: enc.encryptedKey, senderPublicKey: enc.senderPublicKey };
+                    }
+                    catch (err) {
+                        console.error('[Crypto] Push encryption failed, sending plaintext:', err);
+                    }
+                }
+                const result = await client.sendPush(pushPayload);
+                return (0, error_format_js_1.textResult)({ pushId: result.data.pushId, fileKey: upload.data.fileKey, autoFile: true, encrypted: canEncrypt });
             }
-            const result = await client.sendPush({
+            // Short body — encrypt push only
+            let pushPayload = {
                 title,
                 body,
                 url,
                 type: 'hook',
                 priority,
                 targetDeviceId: deviceId,
-            });
-            return (0, error_format_js_1.textResult)({ pushId: result.data.pushId });
+            };
+            if (canEncrypt) {
+                try {
+                    const enc = await (0, crypto_js_1.encryptPushBodyForSelf)({ title, body, url });
+                    pushPayload = { ...pushPayload, title: undefined, body: enc.body, isEncrypted: enc.isEncrypted, encryptedKey: enc.encryptedKey, senderPublicKey: enc.senderPublicKey };
+                }
+                catch (err) {
+                    console.error('[Crypto] Push encryption failed, sending plaintext:', err);
+                }
+            }
+            const result = await client.sendPush(pushPayload);
+            return (0, error_format_js_1.textResult)({ pushId: result.data.pushId, encrypted: canEncrypt });
         }
         catch (err) {
             return (0, error_format_js_1.formatToolError)(err);

package/dist/types.d.ts

@@ -34,6 +34,7 @@ export interface DeviceRecord {
     model?: string;
     isOnline?: boolean;
     lastSeenAt?: string;
+    publicKey?: string;
 }
 export interface DevicesResponse {
     data: DeviceRecord[];

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE;QACJ,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE;QACJ,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE;QACJ,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC;QAC5D,QAAQ,CAAC,EAAE;YACT,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;SAC5B,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,UAAU,EAAE;QACV,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE;QACJ,SAAS,EAAE,OAAO,GAAG,MAAM,CAAC;QAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,aAAa,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE;QACJ,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE;QACJ,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE;QACJ,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE;QACJ,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC;QAC5D,QAAQ,CAAC,EAAE;YACT,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;SAC5B,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,UAAU,EAAE;QACV,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE;QACJ,SAAS,EAAE,OAAO,GAAG,MAAM,CAAC;QAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,aAAa,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE;QACJ,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zeph-to/mcp-server",
-  "version": "1.2.2",
+  "version": "1.4.0",
   "description": "Zeph MCP server — AI agent notifications, prompts, and input via MCP protocol",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",