delx-living-body 0.1.0

package/AGENTS.md

@@ -0,0 +1,45 @@
+# AGENTS.md — delx-living-body
+
+Quick reference for AI agents working with this MCP server.
+
+## What it is
+
+A **meta-MCP server**: it composes other locally-installed Delx Wellness connectors (WHOOP, Oura, Garmin, etc.) into a single unified surface. Pure data composition — no LLM calls inside the server.
+
+## Tools (6)
+
+1. `living_body_status` — which connectors are detected? Safe, no subprocess spawning.
+2. `living_body_ask` — main tool. Spawns children in parallel, returns synthesized answer. **Requires `explicit_user_intent: true`**.
+3. `living_body_daily_brief` — markdown brief from each connector's daily summary.
+4. `living_body_compose_context` — normalized `delx-wellness-context/v1` shape merged across sources.
+5. `living_body_health_check` — all 15 known connectors with install hints for missing ones.
+6. `living_body_capabilities` — self-description and per-connector availability matrix.
+
+## Recommended agent flow
+
+1. Call `living_body_capabilities` once at session start.
+2. Call `living_body_status` to see what's installed.
+3. For a specific question → `living_body_ask` (always with `explicit_user_intent: true`).
+4. For raw merged context to hand off to another tool → `living_body_compose_context`.
+5. For a daily-stand-up-style summary → `living_body_daily_brief`.
+6. If sources are missing → show the user the `install_hint` from `living_body_health_check`.
+
+## Rules
+
+- **Always pass `explicit_user_intent: true`** to `living_body_ask`. The tool spawns multiple subprocesses and should never be called speculatively.
+- **Default privacy mode is `structured`.** Only use `raw` when the user explicitly asks for vendor-native payloads.
+- **Treat output as operational context, not medical advice.**
+- Don't ask the user to install every connector. Only suggest installing what's needed for the current question.
+- The synthesizer is rule-based — its reasoning trace has stable `rule_id`s (`rec_low`, `bb_high`, etc.). When you summarize for the user, you can reference these.
+
+## Confidence interpretation
+
+- `low` — 0 or 1 sources, or sources disagree by >35 points on overlapping scores.
+- `medium` — 2 non-conflicting sources.
+- `high` — 3+ non-conflicting sources.
+
+## Troubleshooting
+
+- "no sources used" → run `living_body_health_check`. Probably nothing is installed or every child timed out.
+- A child timed out → its package may be slow to npx-install. Pre-install it: `npx -y <package> setup`.
+- Cache feels stale → `DELX_LIVING_BODY_NO_CACHE=true` or delete `~/.delx-living-body/cache.sqlite`.

package/CHANGELOG.md

@@ -0,0 +1,22 @@
+# Changelog
+
+All notable changes to `delx-living-body` are documented here.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and this project follows semantic versioning.
+
+## [0.1.0] - 2026-05-23
+
+Initial release.
+
+### Added
+
+- **6 MCP tools**: `living_body_status`, `living_body_ask`, `living_body_daily_brief`, `living_body_compose_context`, `living_body_health_check`, `living_body_capabilities`.
+- **Registry of 15 known wellness connectors** (WHOOP, Oura, Garmin, Strava, Fitbit, Apple/Samsung/Google Health, Withings, Polar, Eight Sleep, Nourish, Air, Cycle Coach, CGM).
+- **Auto-detection** via `~/.<vendor>-mcp/tokens.json`, `config.json`, export paths, or `~/.delx-wellness/profile.json` device list.
+- **Composer service** that spawns detected children via `npx -y <package>` over StdioClientTransport, calls their `*_wellness_context` tool in parallel, and aggregates results into a `delx-wellness-context/v1` shape.
+- **Rule-based synthesizer** with 14 heuristic rules (`rec_low`, `rec_mid`, `rec_high`, `bb_low`, `bb_high`, `sleep_poor`, `sleep_good`, `strain_high`, `cycle_luteal`, `cycle_follicular`, `load_high`, `load_low`, `no_data`, `conflict`). No LLM is called.
+- **SQLite response cache** at `~/.delx-living-body/cache.sqlite` (chmod 600), 5 min TTL by default. Disable with `DELX_LIVING_BODY_NO_CACHE=true`.
+- **Privacy guarantees**: never reads child credentials; strips secret-shaped env vars before spawning children; honors `raw` only with `explicit_user_intent`; per-child timeout 30s.
+- **CLI**: `doctor`, `setup`, `version`, `help`.
+- **Transports**: stdio (default) and local HTTP (`--http`).
+- **Tests**: typecheck, smoke (6 tools verified), detector (6 synthetic homes), composer (3 stub child MCPs + timeout path + secret-stripping check), synthesizer (14/14 heuristic rules, 8 intent classes), metadata.

package/CONTRIBUTING.md

@@ -0,0 +1,43 @@
+# Contributing
+
+## Setup
+
+```bash
+git clone https://github.com/davidmosiah/delx-living-body.git
+cd delx-living-body
+npm install
+npm test
+```
+
+## Tests
+
+- `npm run smoke` — boot the MCP server and verify the 6 tools register.
+- `npm run test:detector` — verify `~/.<vendor>-mcp/` detection across 6 synthetic homes.
+- `npm run test:composer` — verify composition + timeout path + secret-stripping using stub child MCPs.
+- `npm run test:synthesizer` — verify 14/14 heuristic rules fire on fixture data.
+- `npm run test:metadata` — verify package.json/server.json consistency.
+
+`npm test` runs all of them after typecheck and build.
+
+## Adding a new known connector
+
+1. Edit `src/constants.ts` → append to `KNOWN_CONNECTORS`.
+2. Make sure the upstream MCP exposes either `*_wellness_context` or `*_daily_summary` (or both).
+3. Update `README.md` table.
+4. Add an entry to `examples/` if the connector has unusual config.
+5. Bump version in `package.json`, `server.json`, and `src/constants.ts`.
+6. Add a CHANGELOG entry.
+
+## Adding a new heuristic rule
+
+1. Add the rule to `HEURISTIC_RULES` in `src/services/synthesizer.ts` with a stable `rule_id`.
+2. Wire it inside `applyRules()`.
+3. Optionally adjust `buildRecommendation()` for each intent class.
+4. Add a test case in `scripts/test-synthesizer.mjs` so `heuristic_rules_covered` includes the new id.
+
+## Coding conventions
+
+- Strict TypeScript, ESM, Node >= 20.
+- No additional runtime deps without justification — current set is `@modelcontextprotocol/sdk`, `better-sqlite3`, `cors`, `express`, `zod`.
+- Never read child connector token files. Never forward parent secret env vars to children.
+- Never call an LLM from this server.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 David Batista
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,158 @@
+# delx-living-body
+
+> Meta-MCP that turns 15 wellness MCPs into one unified body data layer for AI agents.
+
+[![npm](https://img.shields.io/npm/v/delx-living-body)](https://www.npmjs.com/package/delx-living-body)
+[![license](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+
+Today, answering "should I train hard today?" forces an agent to orchestrate WHOOP recovery, Garmin Body Battery, Oura sleep, Nourish nutrition, and cycle phase across five separate MCP servers. That's brittle for users and confusing for the agent.
+
+`delx-living-body` is **one** MCP server that:
+
+1. **Auto-detects** which of 15 Delx Wellness connectors you already have installed locally — no manual config
+2. **Composes** parallel calls to the right subset
+3. **Synthesizes** a natural-language answer plus a structured reasoning trace and per-source confidence — using rule-based reasoning, **no LLM calls**
+
+Install it once. Get a unified body data layer. Works with whatever wellness MCPs you already have.
+
+## Install
+
+```bash
+npx -y delx-living-body
+```
+
+That's the whole install. No OAuth flow, no API keys — `delx-living-body` has no auth of its own. Each child connector handles its own credentials.
+
+## Tools (6)
+
+| Tool | Purpose |
+|---|---|
+| `living_body_status` | Which connectors are detected? Safe; no subprocess spawning. |
+| `living_body_ask` | Main tool. Spawns detected children in parallel, returns synthesized answer. Requires `explicit_user_intent: true`. |
+| `living_body_daily_brief` | Markdown brief built from each connector's `daily_summary`. |
+| `living_body_compose_context` | Normalized `delx-wellness-context/v1` shape merged across sources. |
+| `living_body_health_check` | All 15 known connectors with install hints for missing ones. |
+| `living_body_capabilities` | Self-description + per-connector availability matrix. |
+
+## How detection works
+
+For each known connector, `delx-living-body` checks:
+
+1. `~/.<vendor>-mcp/tokens.json` exists
+2. `~/.<vendor>-mcp/config.json` exists (password-based connectors like Eight Sleep)
+3. An export file at the path in the vendor's env var (Apple Health, Samsung Health)
+4. `~/.delx-wellness/profile.json` lists the device
+
+If any check passes → `detected`. Otherwise → `missing` (with install hint). Stateless connectors (Cycle Coach) are always considered available.
+
+Detection results cache for 60s (`DELX_LIVING_BODY_DETECT_TTL`).
+
+## Known connectors (15)
+
+| ID | Package | Category |
+|---|---|---|
+| `whoop` | `whoop-mcp-unofficial` | recovery |
+| `oura` | `oura-mcp-unofficial` | sleep |
+| `garmin` | `garmin-mcp-unofficial` | recovery |
+| `strava` | `strava-mcp-unofficial` | training |
+| `fitbit` | `fitbit-mcp-unofficial` | recovery |
+| `google_health` | `google-health-mcp-unofficial` | multi |
+| `withings` | `withings-mcp-unofficial` | multi |
+| `apple_health` | `apple-health-mcp-unofficial` | multi |
+| `samsung_health` | `samsung-health-mcp-unofficial` | multi |
+| `polar` | `polar-mcp-unofficial` | training |
+| `eight_sleep` | `eight-sleep-mcp-unofficial` | sleep |
+| `nourish` | `wellness-nourish` | nutrition |
+| `air` | `wellness-air` | environment |
+| `cycle_coach` | `wellness-cycle-coach` | cycle |
+| `cgm` | `wellness-cgm-mcp` | glucose |
+
+## Composition flow
+
+When `living_body_ask` or `living_body_compose_context` runs:
+
+1. Detect installed connectors.
+2. For each, spawn it as a child MCP via `npx -y <package>` over StdioClientTransport.
+3. Call the child's `*_wellness_context` (or `*_daily_summary`) tool in parallel.
+4. Normalize results into a `delx-wellness-context/v1` shape with merged scores.
+5. Run the synthesizer (rule-based, offline) to produce a recommendation + reasoning trace.
+
+Critically: **`delx-living-body` never calls an LLM.** Synthesis is deterministic so downstream agents can reason on top of a stable trace.
+
+## Synthesizer rules
+
+14 heuristic rules, each with a stable `rule_id` that appears in the reasoning trace:
+
+- `rec_low` / `rec_mid` / `rec_high` — recovery score bands
+- `bb_low` / `bb_high` — Garmin Body Battery bands
+- `sleep_poor` / `sleep_good` — sleep score bands
+- `strain_high` — WHOOP strain ≥ 18
+- `cycle_luteal` / `cycle_follicular` — cycle phase signals
+- `load_high` / `load_low` — aggregate training load
+- `no_data` — nothing installed, advisory only
+- `conflict` — sources disagree → low confidence
+
+## Privacy & security
+
+- `delx-living-body` **never reads child connector tokens or config files** — children read their own credentials independently.
+- Upstream secret env vars (`*_CLIENT_SECRET`, `*_ACCESS_TOKEN`, `*_REFRESH_TOKEN`, `*_API_KEY`, `*_PASSWORD`) are stripped before spawning children.
+- Children are spawned with `privacy_mode=structured` by default. `raw` is only honored when the caller sets `explicit_user_intent: true` on `living_body_ask`.
+- Child responses are not logged verbatim — only counts and summary fields.
+- Per-child call timeout: 30s. A hanging child is marked `timeout` and skipped.
+- Cache lives at `~/.delx-living-body/cache.sqlite` (chmod 600), 5 min TTL. Disable with `DELX_LIVING_BODY_NO_CACHE=true`.
+- No phone-home from `delx-living-body` itself.
+
+See [SECURITY.md](SECURITY.md) for the full threat model.
+
+## Env vars
+
+| Variable | Default | Purpose |
+|---|---|---|
+| `DELX_LIVING_BODY_DETECT_TTL` | `60` | Detection cache TTL in seconds |
+| `DELX_LIVING_BODY_NO_CACHE` | unset | Disable SQLite response cache |
+| `DELX_LIVING_BODY_CACHE_PATH` | `~/.delx-living-body/cache.sqlite` | Override cache path |
+| `DELX_LIVING_BODY_NPM_RUNNER` | `npx` | Override npm runner for child spawning |
+| `DELX_LIVING_BODY_CHILD_OVERRIDE_<ID>` | unset | Override child binary path (testing only) |
+| `LIVING_BODY_MCP_HOST` / `LIVING_BODY_MCP_PORT` | `127.0.0.1` / `3030` | HTTP transport bind address |
+
+## CLI
+
+```bash
+living-body-mcp-server                # MCP stdio server (default)
+living-body-mcp-server --http         # Local HTTP transport
+living-body-mcp-server doctor         # Detect installed connectors
+living-body-mcp-server doctor --json  # JSON output
+living-body-mcp-server setup          # Print profile path + install hints
+living-body-mcp-server version
+```
+
+## Use with Claude Desktop
+
+```json
+{
+  "mcpServers": {
+    "living-body": {
+      "command": "npx",
+      "args": ["-y", "delx-living-body"]
+    }
+  }
+}
+```
+
+## Use with Cursor
+
+```json
+{
+  "mcpServers": {
+    "living-body": { "command": "npx", "args": ["-y", "delx-living-body"] }
+  }
+}
+```
+
+## Not medical advice
+
+Outputs are operational context for training/recovery/sleep/nutrition agents. Not for medical diagnosis or clinical use.
+
+## License
+
+MIT — see [LICENSE](LICENSE). Built by [David Mosiah](https://github.com/davidmosiah).

package/SECURITY.md

@@ -0,0 +1,54 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Email **support@delx.ai** with details. Please do not open a public GitHub issue for security reports.
+
+## Threat model
+
+`delx-living-body` is a meta-MCP server: it auto-detects locally installed Delx Wellness connectors and spawns them as child processes. The threat surface is:
+
+1. **Credential leakage** — could `delx-living-body` exfiltrate child connector tokens?
+2. **Subprocess injection** — could a malicious agent trick the parent into spawning unintended binaries?
+3. **Cache exfiltration** — could cached responses leak to unauthorized callers?
+
+## Defenses
+
+### 1. Credentials
+
+- `delx-living-body` **never reads** a child's `tokens.json`, `config.json`, or export file. It only checks for **existence** to decide whether the connector is "detected".
+- When spawning children, `delx-living-body` **strips secret-shaped env vars** before forwarding: any name matching `/(CLIENT_SECRET|REFRESH_TOKEN|ACCESS_TOKEN|API_KEY|PRIVATE_KEY|PASSWORD)$/i` is dropped.
+- Each child reads its own credentials from its own files. Children are also given `MCP_PROBE=1` when only detecting (no auth-requiring calls expected).
+- Child responses are never logged verbatim — only counts and summary fields.
+
+### 2. Subprocess control
+
+- The list of spawnable binaries is hard-coded in `src/constants.ts` as `KNOWN_CONNECTORS`. Callers cannot inject arbitrary connectors.
+- Each child is spawned via `npx -y <pinned-package-name>`. The package name comes from the registry, not from caller input.
+- The `DELX_LIVING_BODY_CHILD_OVERRIDE_<ID>` env var allows overriding binaries for testing. It is not exposed through any MCP tool.
+- `living_body_ask` requires `explicit_user_intent: true` on every call — agents cannot speculatively spawn child processes.
+- Per-call timeout: 30s. Hanging children are aborted.
+
+### 3. Caching
+
+- Cache lives at `~/.delx-living-body/cache.sqlite` with directory mode `0o700` and file mode `0o600`.
+- TTL is 5 minutes by default and 60s for detection.
+- Disable entirely with `DELX_LIVING_BODY_NO_CACHE=true`.
+
+## Privacy modes
+
+- `summary` — minimal interpretive fields.
+- `structured` — default for all child calls. Normalized vendor payloads.
+- `raw` — full vendor payloads. **Only honored on `living_body_ask` when `explicit_user_intent: true`**. Discouraged for routine composition.
+
+## What `delx-living-body` does NOT do
+
+- Does not call any LLM (synthesis is rule-based and offline).
+- Does not phone home or send telemetry anywhere.
+- Does not read child credentials.
+- Does not forward parent secret env vars to children.
+- Does not store user data outside the local SQLite cache.
+
+## Not medical advice
+
+Outputs are operational context for training/recovery/sleep/nutrition agents. They are not medical advice and must not be used for diagnosis or clinical decisions.

package/dist/cli/commands.d.ts

@@ -0,0 +1 @@
+export declare function runCliCommand(args: string[]): Promise<number | undefined>;

package/dist/cli/commands.js

@@ -0,0 +1,89 @@
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { KNOWN_CONNECTORS, NPM_PACKAGE_NAME, SERVER_VERSION } from "../constants.js";
+import { detect, installHint } from "../services/detector.js";
+export async function runCliCommand(args) {
+    const [command, ...rest] = args;
+    if (!command || command === "--http")
+        return undefined;
+    if (command === "setup")
+        return runSetup(rest);
+    if (command === "doctor" || command === "status")
+        return runDoctor(rest);
+    if (command === "version" || command === "--version" || command === "-v") {
+        console.log(SERVER_VERSION);
+        return 0;
+    }
+    if (command === "help" || command === "--help" || command === "-h") {
+        printHelp();
+        return 0;
+    }
+    if (!command.startsWith("--")) {
+        console.error(`Unknown command: ${command}`);
+        printHelp();
+        return 1;
+    }
+    return undefined;
+}
+function runSetup(_args) {
+    const home = homedir();
+    const profilePath = join(home, ".delx-wellness", "profile.json");
+    console.log("delx-living-body has no auth of its own — each child connector handles its own setup.");
+    console.log("");
+    console.log("Shared profile (optional, read by every Delx Wellness connector):");
+    console.log(`  ${profilePath}`);
+    console.log("");
+    console.log("To install a connector, run any of:");
+    for (const c of KNOWN_CONNECTORS) {
+        console.log(`  ${installHint(c).padEnd(48)} # ${c.display_name}`);
+    }
+    return 0;
+}
+function runDoctor(args) {
+    const json = args.includes("--json");
+    const result = detect();
+    const payload = {
+        project: NPM_PACKAGE_NAME,
+        version: SERVER_VERSION,
+        total_known: KNOWN_CONNECTORS.length,
+        total_installed: result.detected.length,
+        detected: result.detected.map((d) => ({ id: d.id, status: d.status, method: d.detection_method, path: d.detected_path })),
+        missing: result.missing.map((d) => d.id)
+    };
+    if (json) {
+        console.log(JSON.stringify(payload, null, 2));
+        return 0;
+    }
+    console.log("delx-living-body · Doctor");
+    console.log(`Version: ${SERVER_VERSION}`);
+    console.log(`Known connectors: ${payload.total_known}`);
+    console.log(`Installed locally: ${payload.total_installed}`);
+    console.log("");
+    for (const d of payload.detected) {
+        console.log(`  + ${d.id} (${d.method ?? "?"})${d.path ? ` at ${d.path}` : ""}`);
+    }
+    for (const id of payload.missing) {
+        console.log(`  - ${id} (missing)`);
+    }
+    return 0;
+}
+function printHelp() {
+    console.log(`delx-living-body — meta-MCP that composes installed Delx Wellness connectors.
+
+Usage:
+  living-body-mcp-server                Start MCP stdio server
+  living-body-mcp-server --http         Start local HTTP MCP server
+  living-body-mcp-server doctor         Detect installed connectors (alias: status)
+  living-body-mcp-server doctor --json  JSON output
+  living-body-mcp-server setup          Print shared-profile path and per-connector install hints
+  living-body-mcp-server version        Print server version
+
+Env:
+  DELX_LIVING_BODY_DETECT_TTL           Detection cache TTL (seconds, default 60)
+  DELX_LIVING_BODY_NO_CACHE             Disable SQLite response cache when true
+  DELX_LIVING_BODY_CACHE_PATH           Override default cache path
+  DELX_LIVING_BODY_NPM_RUNNER           Path to npx (default: npx)
+  DELX_LIVING_BODY_CHILD_OVERRIDE_<ID>  Override a child connector binary (testing only)
+`);
+}
+//# sourceMappingURL=commands.js.map

package/dist/cli/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/cli/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE9D,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAc;IAChD,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAChC,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACvD,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACzE,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACnE,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QAC7C,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAe;IAC/B,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,uFAAuF,CAAC,CAAC;IACrG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW,EAAE,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,gBAAgB;QACzB,OAAO,EAAE,cAAc;QACvB,WAAW,EAAE,gBAAgB,CAAC,MAAM;QACpC,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QACvC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QACzH,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzC,CAAC;IACF,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,YAAY,cAAc,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,sBAAsB,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;CAgBb,CAAC,CAAC;AACH,CAAC"}

package/dist/constants.d.ts

@@ -0,0 +1,37 @@
+export declare const SERVER_NAME = "living-body-mcp-server";
+export declare const SERVER_VERSION = "0.1.0";
+export declare const NPM_PACKAGE_NAME = "delx-living-body";
+export declare const PINNED_NPM_PACKAGE = "delx-living-body@0.1.0";
+export declare const MCP_NAME = "io.github.davidmosiah/delx-living-body";
+export declare const CONTEXT_CONTRACT_VERSION = "delx-wellness-context/v1";
+export declare const DEFAULT_CHILD_TIMEOUT_MS = 30000;
+export declare const DEFAULT_DETECT_TTL_SECONDS = 60;
+export declare const DEFAULT_RESPONSE_TTL_SECONDS = 300;
+export type ConnectorAuthShape = "tokens.json" | "config.json" | "export-path" | "stateless";
+export interface KnownConnector {
+    /** Stable id used in tool args, registry */
+    id: string;
+    /** npm package name */
+    package: string;
+    /** Friendly name */
+    display_name: string;
+    /** Local home dir under HOME (~/.<vendor>-mcp/) */
+    home_dir: string;
+    /** Tool name on the child server that returns wellness_context */
+    context_tool: string | null;
+    /** Tool name on the child server that returns daily_summary */
+    daily_summary_tool: string | null;
+    /** Shape of credential storage */
+    auth_shape: ConnectorAuthShape;
+    /** Optional env var that points at an export file (apple/samsung) */
+    export_env_var?: string;
+    /** Optional default export path under HOME */
+    default_export_path?: string;
+    /** Category — used by synthesizer to weight inputs */
+    category: "recovery" | "sleep" | "training" | "nutrition" | "cycle" | "environment" | "glucose" | "multi";
+    /** Stateless connectors don't require local files to be considered available */
+    stateless?: boolean;
+}
+export declare const KNOWN_CONNECTORS: KnownConnector[];
+export declare const CONNECTOR_BY_ID: Record<string, KnownConnector>;
+export declare const PROFILE_PATH_REL = ".delx-wellness/profile.json";

package/dist/constants.js

@@ -0,0 +1,169 @@
+export const SERVER_NAME = "living-body-mcp-server";
+export const SERVER_VERSION = "0.1.0";
+export const NPM_PACKAGE_NAME = "delx-living-body";
+export const PINNED_NPM_PACKAGE = `${NPM_PACKAGE_NAME}@${SERVER_VERSION}`;
+export const MCP_NAME = "io.github.davidmosiah/delx-living-body";
+export const CONTEXT_CONTRACT_VERSION = "delx-wellness-context/v1";
+export const DEFAULT_CHILD_TIMEOUT_MS = 30_000;
+export const DEFAULT_DETECT_TTL_SECONDS = 60;
+export const DEFAULT_RESPONSE_TTL_SECONDS = 300;
+export const KNOWN_CONNECTORS = [
+    {
+        id: "whoop",
+        package: "whoop-mcp-unofficial",
+        display_name: "WHOOP",
+        home_dir: ".whoop-mcp",
+        context_tool: "whoop_wellness_context",
+        daily_summary_tool: "whoop_daily_summary",
+        auth_shape: "tokens.json",
+        category: "recovery"
+    },
+    {
+        id: "oura",
+        package: "oura-mcp-unofficial",
+        display_name: "Oura",
+        home_dir: ".oura-mcp",
+        context_tool: "oura_wellness_context",
+        daily_summary_tool: "oura_daily_summary",
+        auth_shape: "tokens.json",
+        category: "sleep"
+    },
+    {
+        id: "garmin",
+        package: "garmin-mcp-unofficial",
+        display_name: "Garmin",
+        home_dir: ".garmin-mcp",
+        context_tool: "garmin_wellness_context",
+        daily_summary_tool: "garmin_daily_summary",
+        auth_shape: "tokens.json",
+        category: "recovery"
+    },
+    {
+        id: "strava",
+        package: "strava-mcp-unofficial",
+        display_name: "Strava",
+        home_dir: ".strava-mcp",
+        context_tool: "strava_training_context",
+        daily_summary_tool: "strava_daily_summary",
+        auth_shape: "tokens.json",
+        category: "training"
+    },
+    {
+        id: "fitbit",
+        package: "fitbit-mcp-unofficial",
+        display_name: "Fitbit",
+        home_dir: ".fitbit-mcp",
+        context_tool: "fitbit_wellness_context",
+        daily_summary_tool: "fitbit_daily_summary",
+        auth_shape: "tokens.json",
+        category: "recovery"
+    },
+    {
+        id: "google_health",
+        package: "google-health-mcp-unofficial",
+        display_name: "Google Health Connect",
+        home_dir: ".google-health-mcp",
+        context_tool: "google_health_wellness_context",
+        daily_summary_tool: "google_health_daily_summary",
+        auth_shape: "tokens.json",
+        category: "multi"
+    },
+    {
+        id: "withings",
+        package: "withings-mcp-unofficial",
+        display_name: "Withings",
+        home_dir: ".withings-mcp",
+        context_tool: "withings_wellness_context",
+        daily_summary_tool: "withings_daily_summary",
+        auth_shape: "tokens.json",
+        category: "multi"
+    },
+    {
+        id: "apple_health",
+        package: "apple-health-mcp-unofficial",
+        display_name: "Apple Health",
+        home_dir: ".apple-health-mcp",
+        context_tool: "apple_health_wellness_context",
+        daily_summary_tool: "apple_health_daily_summary",
+        auth_shape: "export-path",
+        export_env_var: "APPLE_HEALTH_EXPORT_PATH",
+        default_export_path: ".apple-health-mcp/export.xml",
+        category: "multi"
+    },
+    {
+        id: "samsung_health",
+        package: "samsung-health-mcp-unofficial",
+        display_name: "Samsung Health",
+        home_dir: ".samsung-health-mcp",
+        context_tool: "samsung_health_wellness_context",
+        daily_summary_tool: "samsung_health_daily_summary",
+        auth_shape: "export-path",
+        export_env_var: "SAMSUNG_HEALTH_EXPORT_PATH",
+        default_export_path: ".samsung-health-mcp/export.zip",
+        category: "multi"
+    },
+    {
+        id: "polar",
+        package: "polar-mcp-unofficial",
+        display_name: "Polar",
+        home_dir: ".polar-mcp",
+        context_tool: "polar_wellness_context",
+        daily_summary_tool: "polar_daily_summary",
+        auth_shape: "tokens.json",
+        category: "training"
+    },
+    {
+        id: "eight_sleep",
+        package: "eight-sleep-mcp-unofficial",
+        display_name: "Eight Sleep",
+        home_dir: ".eight-sleep-mcp",
+        context_tool: "eight_sleep_wellness_context",
+        daily_summary_tool: "eight_sleep_daily_summary",
+        auth_shape: "config.json",
+        category: "sleep"
+    },
+    {
+        id: "nourish",
+        package: "wellness-nourish",
+        display_name: "Nourish (nutrition)",
+        home_dir: ".wellness-nourish",
+        context_tool: "nourish_wellness_context",
+        daily_summary_tool: "nourish_daily_summary",
+        auth_shape: "config.json",
+        category: "nutrition"
+    },
+    {
+        id: "air",
+        package: "wellness-air",
+        display_name: "Air (environment)",
+        home_dir: ".wellness-air",
+        context_tool: "air_wellness_context",
+        daily_summary_tool: "air_daily_summary",
+        auth_shape: "config.json",
+        category: "environment"
+    },
+    {
+        id: "cycle_coach",
+        package: "wellness-cycle-coach",
+        display_name: "Cycle Coach",
+        home_dir: ".wellness-cycle-coach",
+        context_tool: "cycle_wellness_context",
+        daily_summary_tool: "cycle_daily_summary",
+        auth_shape: "stateless",
+        category: "cycle",
+        stateless: true
+    },
+    {
+        id: "cgm",
+        package: "wellness-cgm-mcp",
+        display_name: "Continuous Glucose Monitor",
+        home_dir: ".wellness-cgm-mcp",
+        context_tool: "cgm_wellness_context",
+        daily_summary_tool: "cgm_daily_summary",
+        auth_shape: "tokens.json",
+        category: "glucose"
+    }
+];
+export const CONNECTOR_BY_ID = Object.fromEntries(KNOWN_CONNECTORS.map((c) => [c.id, c]));
+export const PROFILE_PATH_REL = ".delx-wellness/profile.json";
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,wBAAwB,CAAC;AACpD,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC;AACtC,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AACnD,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,gBAAgB,IAAI,cAAc,EAAE,CAAC;AAC1E,MAAM,CAAC,MAAM,QAAQ,GAAG,wCAAwC,CAAC;AAEjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AACnE,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAC/C,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAC7C,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAyChD,MAAM,CAAC,MAAM,gBAAgB,GAAqB;IAChD;QACE,EAAE,EAAE,OAAO;QACX,OAAO,EAAE,sBAAsB;QAC/B,YAAY,EAAE,OAAO;QACrB,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,wBAAwB;QACtC,kBAAkB,EAAE,qBAAqB;QACzC,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,MAAM;QACV,OAAO,EAAE,qBAAqB;QAC9B,YAAY,EAAE,MAAM;QACpB,QAAQ,EAAE,WAAW;QACrB,YAAY,EAAE,uBAAuB;QACrC,kBAAkB,EAAE,oBAAoB;QACxC,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,OAAO,EAAE,uBAAuB;QAChC,YAAY,EAAE,QAAQ;QACtB,QAAQ,EAAE,aAAa;QACvB,YAAY,EAAE,yBAAyB;QACvC,kBAAkB,EAAE,sBAAsB;QAC1C,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,OAAO,EAAE,uBAAuB;QAChC,YAAY,EAAE,QAAQ;QACtB,QAAQ,EAAE,aAAa;QACvB,YAAY,EAAE,yBAAyB;QACvC,kBAAkB,EAAE,sBAAsB;QAC1C,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,OAAO,EAAE,uBAAuB;QAChC,YAAY,EAAE,QAAQ;QACtB,QAAQ,EAAE,aAAa;QACvB,YAAY,EAAE,yBAAyB;QACvC,kBAAkB,EAAE,sBAAsB;QAC1C,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,OAAO,EAAE,8BAA8B;QACvC,YAAY,EAAE,uBAAuB;QACrC,QAAQ,EAAE,oBAAoB;QAC9B,YAAY,EAAE,gCAAgC;QAC9C,kBAAkB,EAAE,6BAA6B;QACjD,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,yBAAyB;QAClC,YAAY,EAAE,UAAU;QACxB,QAAQ,EAAE,eAAe;QACzB,YAAY,EAAE,2BAA2B;QACzC,kBAAkB,EAAE,wBAAwB;QAC5C,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,cAAc;QAClB,OAAO,EAAE,6BAA6B;QACtC,YAAY,EAAE,cAAc;QAC5B,QAAQ,EAAE,mBAAmB;QAC7B,YAAY,EAAE,+BAA+B;QAC7C,kBAAkB,EAAE,4BAA4B;QAChD,UAAU,EAAE,aAAa;QACzB,cAAc,EAAE,0BAA0B;QAC1C,mBAAmB,EAAE,8BAA8B;QACnD,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,OAAO,EAAE,+BAA+B;QACxC,YAAY,EAAE,gBAAgB;QAC9B,QAAQ,EAAE,qBAAqB;QAC/B,YAAY,EAAE,iCAAiC;QAC/C,kBAAkB,EAAE,8BAA8B;QAClD,UAAU,EAAE,aAAa;QACzB,cAAc,EAAE,4BAA4B;QAC5C,mBAAmB,EAAE,gCAAgC;QACrD,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,OAAO;QACX,OAAO,EAAE,sBAAsB;QAC/B,YAAY,EAAE,OAAO;QACrB,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,wBAAwB;QACtC,kBAAkB,EAAE,qBAAqB;QACzC,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,OAAO,EAAE,4BAA4B;QACrC,YAAY,EAAE,aAAa;QAC3B,QAAQ,EAAE,kBAAkB;QAC5B,YAAY,EAAE,8BAA8B;QAC5C,kBAAkB,EAAE,2BAA2B;QAC/C,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,SAAS;QACb,OAAO,EAAE,kBAAkB;QAC3B,YAAY,EAAE,qBAAqB;QACnC,QAAQ,EAAE,mBAAmB;QAC7B,YAAY,EAAE,0BAA0B;QACxC,kBAAkB,EAAE,uBAAuB;QAC3C,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,WAAW;KACtB;IACD;QACE,EAAE,EAAE,KAAK;QACT,OAAO,EAAE,cAAc;QACvB,YAAY,EAAE,mBAAmB;QACjC,QAAQ,EAAE,eAAe;QACzB,YAAY,EAAE,sBAAsB;QACpC,kBAAkB,EAAE,mBAAmB;QACvC,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,aAAa;KACxB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,OAAO,EAAE,sBAAsB;QAC/B,YAAY,EAAE,aAAa;QAC3B,QAAQ,EAAE,uBAAuB;QACjC,YAAY,EAAE,wBAAwB;QACtC,kBAAkB,EAAE,qBAAqB;QACzC,UAAU,EAAE,WAAW;QACvB,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,IAAI;KAChB;IACD;QACE,EAAE,EAAE,KAAK;QACT,OAAO,EAAE,kBAAkB;QAC3B,YAAY,EAAE,4BAA4B;QAC1C,QAAQ,EAAE,mBAAmB;QAC7B,YAAY,EAAE,sBAAsB;QACpC,kBAAkB,EAAE,mBAAmB;QACvC,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,SAAS;KACpB;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAmC,MAAM,CAAC,WAAW,CAC/E,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CACvC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,6BAA6B,CAAC"}