pyxis-mcp 0.1.0 → 0.2.0

package/README.md

@@ -15,6 +15,8 @@ you can revoke at any time.**
 [![License: MIT](https://img.shields.io/github/license/samuelcsantana/pyxis-mcp)](LICENSE)
 [![TypeScript strict](https://img.shields.io/badge/TypeScript-strict-3178C6?logo=typescript&logoColor=white)](tsconfig.json)
 [![Conventional Commits](https://img.shields.io/badge/Conventional%20Commits-1.0.0-FE5196?logo=conventionalcommits&logoColor=white)](https://www.conventionalcommits.org)
+[![npm](https://img.shields.io/npm/v/pyxis-mcp?logo=npm)](https://www.npmjs.com/package/pyxis-mcp)
+[![npm provenance](https://img.shields.io/badge/npm-provenance-2E7D32?logo=npm)](https://www.npmjs.com/package/pyxis-mcp#provenance)
 
 **[Pyxis](https://pyxis-analytics.dev)** · **[Live demo](https://demo.pyxis-analytics.dev)** ·
 **[API reference](https://samuelcsantana.github.io/pyxis-api/)**
@@ -22,7 +24,8 @@ you can revoke at any time.**
 </div>
 
 > **Status:** on npm as `pyxis-mcp`, every release published from GitHub Actions with
-> provenance. The fifteen tools read the live Pyxis API.
+> provenance. The fifteen tools read the live Pyxis API. The package also exports them as a
+> library, which a host serves over HTTP with each caller's token.
 
 ## Ecosystem
 
@@ -68,7 +71,9 @@ project's time zone; `list_projects` gives each project's today, so call it firs
 A result is JSON text, `{ "untrusted_visitor_text": "…", "report": … }`: the report is the API's
 answer, and the first field reminds the agent that names, paths and values inside it were written by
 the site's visitors. Problems come back as tool errors the agent can act on (a revoked token, an
-unknown project, the rate limit and when to retry).
+unknown project, the rate limit and when to retry). When the API refuses a request (any `4xx`), the
+error carries the API's own code and reason, such as a suspended account; only a `5xx` asks to try
+again later.
 
 ## Configuration
 
@@ -109,17 +114,65 @@ A self-hosted Pyxis adds `PYXIS_API_URL`. To run it from source instead, `npm ci
 in a clone and use `node /path/to/pyxis-mcp/dist/cli.js` as the command. Keep the token out of
 shared files and chats; revoke it in the dashboard the moment it leaks.
 
+## Use it as a library
+
+Clients that only accept remote servers need the tools at a URL. The package exports them so a
+host can serve them from its own endpoint, over Streamable HTTP, with the token of whoever is
+calling. It is an ES module that a CommonJS host can also `require()` (Node 22.12 or later).
+
+```ts
+import { handleHttpRequest, PyxisApi } from 'pyxis-mcp';
+
+export function answerMcp(request: Request, callerToken: string): Promise<Response> {
+  const api = new PyxisApi({
+    token: callerToken,
+    apiUrl: 'https://api.pyxis-analytics.dev',
+    problemTexts: {
+      refusedToken: 'Pyxis refused this connection: connect Pyxis again in your MCP client.',
+      unreachableAdvice: 'Try again in a moment.',
+    },
+  });
+  return handleHttpRequest(request, api);
+}
+```
+
+| Export                                      | What it does                                                          |
+| ------------------------------------------- | --------------------------------------------------------------------- |
+| `handleHttpRequest(request, api, options?)` | Answers one MCP exchange: a web `Request` in, a web `Response` out    |
+| `createServer(api, options?)`               | The MCP server with the fifteen tools, for a transport of your choice |
+| `new PyxisApi(options)`                     | The client the tools read through, one per caller                     |
+
+`PyxisApi` options: `token` and `apiUrl` (required); `userAgent` (default `pyxis-mcp/<version>`);
+`fetch` (default the global one; a host can pass one that answers inside its own process);
+`timeoutMs` (default 15 seconds); `problemTexts`, the two sentences that depend on where the server
+runs: `refusedToken` and `unreachableAdvice` (default: the local server's, which name
+`PYXIS_TOKEN` and `PYXIS_API_URL`). `createServer` takes `version` (default the package's) and
+`now` (the clock); `handleHttpRequest` takes those and `allowedOrigins`.
+
+What the handler does: each request gets a server and a transport of its own, closed once it is
+answered, so there is no session id and no event stream, only JSON answers. It answers `405` with
+`Allow: POST` to any other method, `403` to a request with an `Origin` header unless that origin is
+in `allowedOrigins` (none by default: MCP clients do not call from web pages), and `413` to a body
+over 64 KiB. What it leaves to the host: authenticating the caller (and the `401` with
+`WWW-Authenticate` that starts a client's sign-in), rate limits and the host name
+([ADR 0003](docs/adr/0003-stateless-http-handler-for-hosts.md)).
+
 ## Architecture
 
 ```mermaid
 flowchart LR
   Agent["MCP client<br>(Claude Code, Cursor…)"] -- "stdio, JSON-RPC" --> Server["pyxis-mcp<br>(on the user's machine)"]
   Server -- "HTTPS GET<br>Authorization: Bearer pyxis_at_…" --> API["Pyxis API"]
+  Remote["Remote MCP client"] -- "Streamable HTTP POST<br>with the caller's token" --> Host["A host's endpoint<br>handleHttpRequest"]
+  Host -- "GET with the same token" --> API
   API --> DB[("Events")]
 ```
 
-The server opens no port and keeps no state. The API decides what the token may read, exactly as
-it does for a dashboard session ([ADR 0002](docs/adr/0002-local-read-only-server.md)).
+The local server opens no port and keeps no state. The API decides what the token may read,
+exactly as it does for a dashboard session ([ADR 0002](docs/adr/0002-local-read-only-server.md)).
+A host runs the same tools for remote clients: it authenticates the caller, and the tools read with
+that caller's token, so the token never leaves the server that issued it
+([ADR 0003](docs/adr/0003-stateless-http-handler-for-hosts.md)).
 
 ## Tech stack
 
@@ -138,12 +191,17 @@ npm run lint && npm run typecheck && npm run test:cov && npm run build
 
 - `npm run test:cov` runs the unit tests in Node and fails below **100%** of statements, branches,
   functions and lines. The server is tested with a real MCP client over an in-memory transport and
-  a fake `fetch`.
+  a fake `fetch`; the HTTP handler with web `Request` objects, from `initialize` to a tool call,
+  and every refusal.
 - One file is left out of the unit coverage: `src/cli.ts`, which only wires the modules to the
   standard input and output. `npm run test:e2e` covers it: after `npm run build`, a real MCP client
   starts `dist/cli.js`, lists the tools and calls them against a local fake of the API, checks that
   standard output carries nothing but the protocol, and that a bad configuration stops the process
   with the reason on standard error.
+- `npm run test:e2e` also starts `e2e/http-host.ts`, a small HTTP host that imports `pyxis-mcp` by
+  its name, and drives it with the SDK's Streamable HTTP client: tools against the fake API with
+  the caller's token, no session, the host's own words for a refused token, `405` and `403`. The
+  package is also loaded by name with `import` and with `require`.
 - `src/contract.test.ts` checks the tools against `contract/openapi.json`, the API's own contract
   (`npm run contract:sync` copies it from pyxis-api): every route a token may read has a tool, and
   every tool sends only declared parameters, with values inside their enums.
@@ -158,9 +216,11 @@ src/
 ├── pyxis-api.ts     one GET to the API, failures as sentences
 ├── tools.ts         the fifteen tools: input schemas, routes, requests
 ├── server.ts        registers the tools on the MCP server
+├── http.ts          one stateless Streamable HTTP exchange
+├── index.ts         the library's public exports
 ├── version.ts       the package version, for the server and the user agent
 └── cli.ts           the executable: stdio transport
-e2e/                 the built server driven by a real MCP client
+e2e/                 the built package driven by real MCP clients, over stdio and over HTTP
 contract/            the API's OpenAPI contract, copied from pyxis-api
 eslint-rules/        the local rule that forbids comments
 scripts/             the comment check and the contract sync
@@ -175,20 +235,25 @@ docs/adr/            architecture decision records
   http only to localhost), and never reaches a log, an error message or a tool result.
 - Text written by a site's visitors is returned as data, and each tool description says it is not
   an instruction.
+- Over HTTP, the handler keeps no session, refuses requests sent by web pages and bodies over 64
+  KiB, and reads with the token of the caller its host authenticated.
 - Vulnerabilities: see [SECURITY.md](SECURITY.md).
 
 ## Architecture decisions
 
-| ADR                                                    | Decision                                                     |
-| ------------------------------------------------------ | ------------------------------------------------------------ |
-| [0001](docs/adr/0001-record-architecture-decisions.md) | Record architecture decisions                                |
-| [0002](docs/adr/0002-local-read-only-server.md)        | A local, read-only server that uses the admin's access token |
+| ADR                                                       | Decision                                                          |
+| --------------------------------------------------------- | ----------------------------------------------------------------- |
+| [0001](docs/adr/0001-record-architecture-decisions.md)    | Record architecture decisions                                     |
+| [0002](docs/adr/0002-local-read-only-server.md)           | A local, read-only server that uses the admin's access token      |
+| [0003](docs/adr/0003-stateless-http-handler-for-hosts.md) | A stateless HTTP handler that a host runs with the caller's token |
 
 ## Roadmap
 
 - [x] Repository skeleton, quality gates, configuration reader
 - [x] Tools over the API's read routes, tested against its OpenAPI contract
 - [x] First release on npm, with provenance
+- [x] The tools as a library, served over stateless Streamable HTTP by a host
+- [ ] A remote endpoint in the Pyxis API, signed in with OAuth, for clients that only take URLs
 - [ ] Setup guides for Claude Code, Claude Desktop and Cursor
 
 ## Contributing and license

package/dist/cli.js

@@ -3,11 +3,9 @@ import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js'
 import { ConfigError, readConfig } from './config.js';
 import { PyxisApi } from './pyxis-api.js';
 import { createServer } from './server.js';
-import { PACKAGE_VERSION, userAgent } from './version.js';
 const EXIT_FAILURE = 1;
 async function start() {
-    const config = readConfig(process.env);
-    const server = createServer(new PyxisApi(config, userAgent()), { version: PACKAGE_VERSION });
+    const server = createServer(new PyxisApi(readConfig(process.env)));
     await server.connect(new StdioServerTransport());
 }
 start().catch((error) => {

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE1D,MAAM,YAAY,GAAG,CAAC,CAAC;AAEvB,KAAK,UAAU,KAAK;IAClB,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IAC7F,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC/B,MAAM,MAAM,GACV,KAAK,YAAY,WAAW;QAC1B,CAAC,CAAC,KAAK,CAAC,OAAO;QACf,CAAC,CAAC,oBAAoB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACvG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,MAAM,IAAI,CAAC,CAAC;IAC/C,OAAO,CAAC,QAAQ,GAAG,YAAY,CAAC;AAClC,CAAC,CAAC,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,YAAY,GAAG,CAAC,CAAC;AAEvB,KAAK,UAAU,KAAK;IAClB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC/B,MAAM,MAAM,GACV,KAAK,YAAY,WAAW;QAC1B,CAAC,CAAC,KAAK,CAAC,OAAO;QACf,CAAC,CAAC,oBAAoB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACvG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,MAAM,IAAI,CAAC,CAAC;IAC/C,OAAO,CAAC,QAAQ,GAAG,YAAY,CAAC;AAClC,CAAC,CAAC,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,12 @@
+import type { PyxisApi } from './pyxis-api.js';
+import { type ServerOptions } from './server.js';
+export declare const MAX_REQUEST_BYTES: number;
+export declare const ALLOWED_METHOD = "POST";
+export declare const HTTP_REFUSALS: {
+    readonly method: "Method not allowed: this server keeps no session and answers POST only.";
+    readonly origin: "Forbidden: this server does not answer requests sent by a web page.";
+};
+export interface HttpOptions extends ServerOptions {
+    readonly allowedOrigins?: readonly string[];
+}
+export declare function handleHttpRequest(request: Request, api: PyxisApi, options?: HttpOptions): Promise<Response>;

package/dist/http.js

@@ -0,0 +1,44 @@
+import { WebStandardStreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js';
+import { createServer } from './server.js';
+export const MAX_REQUEST_BYTES = 64 * 1024;
+export const ALLOWED_METHOD = 'POST';
+export const HTTP_REFUSALS = {
+    method: 'Method not allowed: this server keeps no session and answers POST only.',
+    origin: 'Forbidden: this server does not answer requests sent by a web page.',
+};
+const STATUS_FORBIDDEN = 403;
+const STATUS_METHOD_NOT_ALLOWED = 405;
+const JSON_RPC_SERVER_ERROR = -32000;
+const JSON_MEDIA_TYPE = 'application/json';
+function refusal(status, message, headers = {}) {
+    return new Response(JSON.stringify({
+        jsonrpc: '2.0',
+        error: { code: JSON_RPC_SERVER_ERROR, message },
+        id: null,
+    }), { status, headers: { 'content-type': JSON_MEDIA_TYPE, ...headers } });
+}
+function comesFromForeignPage(request, allowedOrigins) {
+    const origin = request.headers.get('origin');
+    return origin !== null && !allowedOrigins.includes(origin);
+}
+export async function handleHttpRequest(request, api, options = {}) {
+    if (request.method !== ALLOWED_METHOD) {
+        return refusal(STATUS_METHOD_NOT_ALLOWED, HTTP_REFUSALS.method, { allow: ALLOWED_METHOD });
+    }
+    if (comesFromForeignPage(request, options.allowedOrigins ?? [])) {
+        return refusal(STATUS_FORBIDDEN, HTTP_REFUSALS.origin);
+    }
+    const server = createServer(api, options);
+    const transport = new WebStandardStreamableHTTPServerTransport({
+        enableJsonResponse: true,
+        maxRequestBodySize: MAX_REQUEST_BYTES,
+    });
+    await server.connect(transport);
+    try {
+        return await transport.handleRequest(request);
+    }
+    finally {
+        await server.close();
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wCAAwC,EAAE,MAAM,+DAA+D,CAAC;AAEzH,OAAO,EAAE,YAAY,EAAsB,MAAM,aAAa,CAAC;AAE/D,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AAErC,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,MAAM,EAAE,yEAAyE;IACjF,MAAM,EAAE,qEAAqE;CACrE,CAAC;AAEX,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,yBAAyB,GAAG,GAAG,CAAC;AACtC,MAAM,qBAAqB,GAAG,CAAC,KAAK,CAAC;AACrC,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAM3C,SAAS,OAAO,CAAC,MAAc,EAAE,OAAe,EAAE,UAAkC,EAAE;IACpF,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE;QAC/C,EAAE,EAAE,IAAI;KACT,CAAC,EACF,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,OAAO,EAAE,EAAE,CACrE,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAgB,EAAE,cAAiC;IAC/E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgB,EAChB,GAAa,EACb,UAAuB,EAAE;IAEzB,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACtC,OAAO,OAAO,CAAC,yBAAyB,EAAE,aAAa,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC;QAChE,OAAO,OAAO,CAAC,gBAAgB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,wCAAwC,CAAC;QAC7D,kBAAkB,EAAE,IAAI;QACxB,kBAAkB,EAAE,iBAAiB;KACtC,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { handleHttpRequest, type HttpOptions } from './http.js';
+export { PyxisApi, type ApiOutcome, type Fetch, type ProblemTexts, type PyxisApiOptions, type Query, type QueryValue, } from './pyxis-api.js';
+export { createServer, type ServerOptions } from './server.js';

package/dist/index.js

@@ -0,0 +1,4 @@
+export { handleHttpRequest } from './http.js';
+export { PyxisApi, } from './pyxis-api.js';
+export { createServer } from './server.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAoB,MAAM,WAAW,CAAC;AAChE,OAAO,EACL,QAAQ,GAOT,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,YAAY,EAAsB,MAAM,aAAa,CAAC"}

package/dist/pyxis-api.d.ts

@@ -11,18 +11,30 @@ export type ApiOutcome = {
     readonly problem: string;
 };
 export type Fetch = (url: string, init: RequestInit) => Promise<Response>;
+export interface ProblemTexts {
+    readonly refusedToken: string;
+    readonly unreachableAdvice: string;
+}
+export declare const LOCAL_PROBLEM_TEXTS: ProblemTexts;
+export interface PyxisApiOptions extends PyxisConfig {
+    readonly userAgent?: string;
+    readonly fetch?: Fetch;
+    readonly timeoutMs?: number;
+    readonly problemTexts?: ProblemTexts;
+}
 export declare const PROBLEMS: {
-    readonly refusedToken: "PYXIS_TOKEN was refused: it may be revoked or expired. Create a new access token in the Pyxis dashboard, under Settings, Access tokens.";
     readonly notFound: "Not found: no project with this id among the projects this token can read. Call list_projects for the ids.";
     readonly rejected: "The Pyxis API refused the request.";
     readonly notJson: "The Pyxis API answered with something that is not JSON.";
 };
 export declare function requestUrl(apiUrl: string, path: string, query: Query): string;
 export declare class PyxisApi {
-    private readonly config;
+    private readonly token;
+    private readonly apiUrl;
     private readonly userAgent;
     private readonly fetch;
     private readonly timeoutMs;
-    constructor(config: PyxisConfig, userAgent: string, fetch?: Fetch, timeoutMs?: number);
+    private readonly problemTexts;
+    constructor(options: PyxisApiOptions);
     get(path: string, query?: Query): Promise<ApiOutcome>;
 }

package/dist/pyxis-api.js

@@ -1,13 +1,18 @@
+import { userAgent } from './version.js';
 export const REQUEST_TIMEOUT_MS = 15_000;
 export const REQUESTS_PER_MINUTE = 60;
-const STATUS_BAD_REQUEST = 400;
 const STATUS_UNAUTHORIZED = 401;
 const STATUS_NOT_FOUND = 404;
 const STATUS_TOO_MANY_REQUESTS = 429;
+const FIRST_CLIENT_ERROR = 400;
+const FIRST_SERVER_ERROR = 500;
 const RETRY_AFTER_HEADER = 'retry-after';
 const JSON_MEDIA_TYPE = 'application/json';
-export const PROBLEMS = {
+export const LOCAL_PROBLEM_TEXTS = {
     refusedToken: 'PYXIS_TOKEN was refused: it may be revoked or expired. Create a new access token in the Pyxis dashboard, under Settings, Access tokens.',
+    unreachableAdvice: 'Check PYXIS_API_URL and the network, then try again.',
+};
+export const PROBLEMS = {
     notFound: 'Not found: no project with this id among the projects this token can read. Call list_projects for the ids.',
     rejected: 'The Pyxis API refused the request.',
     notJson: 'The Pyxis API answered with something that is not JSON.',
@@ -56,37 +61,44 @@ function rateLimitedProblem(response) {
         : 'in a minute';
     return `Too many requests: each access token may make ${String(REQUESTS_PER_MINUTE)} requests a minute. Try again ${wait}.`;
 }
-async function problemOf(response) {
+function isRefusal(status) {
+    return status >= FIRST_CLIENT_ERROR && status < FIRST_SERVER_ERROR;
+}
+async function problemOf(response, texts) {
     switch (response.status) {
         case STATUS_UNAUTHORIZED:
-            return PROBLEMS.refusedToken;
+            return texts.refusedToken;
         case STATUS_NOT_FOUND:
             return PROBLEMS.notFound;
         case STATUS_TOO_MANY_REQUESTS:
             return rateLimitedProblem(response);
-        case STATUS_BAD_REQUEST:
-            return rejectedProblem(response);
         default:
-            return `The Pyxis API answered ${String(response.status)}. Try again later.`;
+            return isRefusal(response.status)
+                ? rejectedProblem(response)
+                : `The Pyxis API answered ${String(response.status)}. Try again later.`;
     }
 }
 export class PyxisApi {
-    config;
+    token;
+    apiUrl;
     userAgent;
     fetch;
     timeoutMs;
-    constructor(config, userAgent, fetch = globalThis.fetch, timeoutMs = REQUEST_TIMEOUT_MS) {
-        this.config = config;
-        this.userAgent = userAgent;
-        this.fetch = fetch;
-        this.timeoutMs = timeoutMs;
+    problemTexts;
+    constructor(options) {
+        this.token = options.token;
+        this.apiUrl = options.apiUrl;
+        this.userAgent = options.userAgent ?? userAgent();
+        this.fetch = options.fetch ?? globalThis.fetch;
+        this.timeoutMs = options.timeoutMs ?? REQUEST_TIMEOUT_MS;
+        this.problemTexts = options.problemTexts ?? LOCAL_PROBLEM_TEXTS;
     }
     async get(path, query = {}) {
         let response;
         try {
-            response = await this.fetch(requestUrl(this.config.apiUrl, path, query), {
+            response = await this.fetch(requestUrl(this.apiUrl, path, query), {
                 headers: {
-                    authorization: `Bearer ${this.config.token}`,
+                    authorization: `Bearer ${this.token}`,
                     accept: JSON_MEDIA_TYPE,
                     'user-agent': this.userAgent,
                 },
@@ -97,11 +109,11 @@ export class PyxisApi {
             const reason = error instanceof Error ? error.name : 'Error';
             return {
                 ok: false,
-                problem: `The Pyxis API at ${this.config.apiUrl} did not answer (${reason}). Check PYXIS_API_URL and the network, then try again.`,
+                problem: `The Pyxis API at ${this.apiUrl} did not answer (${reason}). ${this.problemTexts.unreachableAdvice}`,
             };
         }
         if (!response.ok) {
-            return { ok: false, problem: await problemOf(response) };
+            return { ok: false, problem: await problemOf(response, this.problemTexts) };
         }
         const body = await readJson(response);
         return body === undefined ? { ok: false, problem: PROBLEMS.notJson } : { ok: true, body };

package/dist/pyxis-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"pyxis-api.js","sourceRoot":"","sources":["../src/pyxis-api.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AACzC,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAEtC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AACzC,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAU3C,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,YAAY,EACV,yIAAyI;IAC3I,QAAQ,EACN,4GAA4G;IAC9G,QAAQ,EAAE,oCAAoC;IAC9C,OAAO,EAAE,yDAAyD;CAC1D,CAAC;AAEX,SAAS,WAAW,CAAC,GAAQ,EAAE,KAAY;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,IAAY,EAAE,KAAY;IACnE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,cAAc,CACrB,IAAa,EACb,GAAQ;IAER,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,GAAG,IAAI,IAAI;QACX,OAAQ,IAA6B,CAAC,GAAG,CAAC,KAAK,QAAQ,CACxD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAkB;IAC/C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QACrE,OAAO,GAAG,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAC;AAC3B,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAkB;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACpE,MAAM,IAAI,GACR,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC;QAC3C,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,UAAU;QACpC,CAAC,CAAC,aAAa,CAAC;IACpB,OAAO,iDAAiD,MAAM,CAAC,mBAAmB,CAAC,iCAAiC,IAAI,GAAG,CAAC;AAC9H,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,QAAkB;IACzC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxB,KAAK,mBAAmB;YACtB,OAAO,QAAQ,CAAC,YAAY,CAAC;QAC/B,KAAK,gBAAgB;YACnB,OAAO,QAAQ,CAAC,QAAQ,CAAC;QAC3B,KAAK,wBAAwB;YAC3B,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACtC,KAAK,kBAAkB;YACrB,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACnC;YACE,OAAO,0BAA0B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,oBAAoB,CAAC;IACjF,CAAC;AACH,CAAC;AAED,MAAM,OAAO,QAAQ;IAEA;IACA;IACA;IACA;IAJnB,YACmB,MAAmB,EACnB,SAAiB,EACjB,QAAe,UAAU,CAAC,KAAK,EAC/B,YAAoB,kBAAkB;QAHtC,WAAM,GAAN,MAAM,CAAa;QACnB,cAAS,GAAT,SAAS,CAAQ;QACjB,UAAK,GAAL,KAAK,CAA0B;QAC/B,cAAS,GAAT,SAAS,CAA6B;IACtD,CAAC;IAEJ,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,QAAe,EAAE;QACvC,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE;gBACvE,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;oBAC5C,MAAM,EAAE,eAAe;oBACvB,YAAY,EAAE,IAAI,CAAC,SAAS;iBAC7B;gBACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7D,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,oBAAoB,IAAI,CAAC,MAAM,CAAC,MAAM,oBAAoB,MAAM,yDAAyD;aACnI,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC5F,CAAC;CACF"}
+{"version":3,"file":"pyxis-api.js","sourceRoot":"","sources":["../src/pyxis-api.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AACzC,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAEtC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,kBAAkB,GAAG,aAAa,CAAC;AACzC,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAe3C,MAAM,CAAC,MAAM,mBAAmB,GAAiB;IAC/C,YAAY,EACV,yIAAyI;IAC3I,iBAAiB,EAAE,sDAAsD;CAC1E,CAAC;AASF,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,QAAQ,EACN,4GAA4G;IAC9G,QAAQ,EAAE,oCAAoC;IAC9C,OAAO,EAAE,yDAAyD;CAC1D,CAAC;AAEX,SAAS,WAAW,CAAC,GAAQ,EAAE,KAAY;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,IAAY,EAAE,KAAY;IACnE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,cAAc,CACrB,IAAa,EACb,GAAQ;IAER,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,GAAG,IAAI,IAAI;QACX,OAAQ,IAA6B,CAAC,GAAG,CAAC,KAAK,QAAQ,CACxD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAkB;IAC/C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QACrE,OAAO,GAAG,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAC;AAC3B,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAkB;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACpE,MAAM,IAAI,GACR,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC;QAC3C,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,UAAU;QACpC,CAAC,CAAC,aAAa,CAAC;IACpB,OAAO,iDAAiD,MAAM,CAAC,mBAAmB,CAAC,iCAAiC,IAAI,GAAG,CAAC;AAC9H,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,MAAM,IAAI,kBAAkB,IAAI,MAAM,GAAG,kBAAkB,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,QAAkB,EAAE,KAAmB;IAC9D,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxB,KAAK,mBAAmB;YACtB,OAAO,KAAK,CAAC,YAAY,CAAC;QAC5B,KAAK,gBAAgB;YACnB,OAAO,QAAQ,CAAC,QAAQ,CAAC;QAC3B,KAAK,wBAAwB;YAC3B,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACtC;YACE,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC/B,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC;gBAC3B,CAAC,CAAC,0BAA0B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,oBAAoB,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,MAAM,OAAO,QAAQ;IACF,KAAK,CAAS;IACd,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,KAAK,CAAQ;IACb,SAAS,CAAS;IAClB,YAAY,CAAe;IAE5C,YAAY,OAAwB;QAClC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAC/C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACzD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,QAAe,EAAE;QACvC,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE;gBAChE,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;oBACrC,MAAM,EAAE,eAAe;oBACvB,YAAY,EAAE,IAAI,CAAC,SAAS;iBAC7B;gBACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7D,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,oBAAoB,IAAI,CAAC,MAAM,oBAAoB,MAAM,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE;aAC9G,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC5F,CAAC;CACF"}

package/dist/server.d.ts

@@ -6,8 +6,8 @@ export declare const SERVER_NAME = "pyxis";
 export declare const SERVER_INSTRUCTIONS = "Pyxis is privacy-first product analytics: visits, page views, named events and the site's requests to its backend, with no cookies and no personal data. Start with list_projects for the project ids and each project's today, then ask for a range of dates. Every tool only reads.";
 export declare const UNEXPECTED_ANSWER = "The Pyxis API answered in a shape this server does not recognize. Update pyxis-mcp, or report it at https://github.com/samuelcsantana/pyxis-mcp/issues.";
 export interface ServerOptions {
-    readonly version: string;
+    readonly version?: string;
     readonly now?: () => Date;
 }
 export declare function runTool(tool: PyxisTool, api: PyxisApi, args: unknown, now: Date): Promise<CallToolResult>;
-export declare function createServer(api: PyxisApi, options: ServerOptions): McpServer;
+export declare function createServer(api: PyxisApi, options?: ServerOptions): McpServer;

package/dist/server.js

@@ -1,5 +1,6 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { PYXIS_TOOLS, ToolInputError, VISITOR_TEXT_NOTE, } from './tools.js';
+import { PACKAGE_VERSION } from './version.js';
 export const SERVER_NAME = 'pyxis';
 export const SERVER_INSTRUCTIONS = "Pyxis is privacy-first product analytics: visits, page views, named events and the site's requests to its backend, with no cookies and no personal data. Start with list_projects for the project ids and each project's today, then ask for a range of dates. Every tool only reads.";
 export const UNEXPECTED_ANSWER = 'The Pyxis API answered in a shape this server does not recognize. Update pyxis-mcp, or report it at https://github.com/samuelcsantana/pyxis-mcp/issues.';
@@ -45,9 +46,9 @@ export async function runTool(tool, api, args, now) {
     const report = tool.report(outcome.body, now);
     return report === undefined ? failure(UNEXPECTED_ANSWER) : success(report);
 }
-export function createServer(api, options) {
+export function createServer(api, options = {}) {
     const now = options.now ?? (() => new Date());
-    const server = new McpServer({ name: SERVER_NAME, version: options.version }, { instructions: SERVER_INSTRUCTIONS });
+    const server = new McpServer({ name: SERVER_NAME, version: options.version ?? PACKAGE_VERSION }, { instructions: SERVER_INSTRUCTIONS });
     for (const tool of PYXIS_TOOLS) {
         server.registerTool(tool.name, {
             title: tool.title,

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGpE,OAAO,EACL,WAAW,EAGX,cAAc,EACd,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAEpB,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC;AAEnC,MAAM,CAAC,MAAM,mBAAmB,GAC9B,uRAAuR,CAAC;AAE1R,MAAM,CAAC,MAAM,iBAAiB,GAC5B,yJAAyJ,CAAC;AAE5J,MAAM,SAAS,GAAG;IAChB,YAAY,EAAE,IAAI;IAClB,eAAe,EAAE,KAAK;IACtB,cAAc,EAAE,IAAI;IACpB,aAAa,EAAE,KAAK;CACZ,CAAC;AAOX,SAAS,OAAO,CAAC,OAAe;IAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,OAAO,CAAC,MAAe;IAC9B,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC;aAC5E;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAe,EAAE,IAAa;IAC/C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAe,EACf,GAAa,EACb,IAAa,EACb,GAAS;IAET,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC9C,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAa,EAAE,OAAsB;IAChE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAC/C,EAAE,YAAY,EAAE,mBAAmB,EAAE,CACtC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,CAAC,YAAY,CACjB,IAAI,CAAC,IAAI,EACT;YACE,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,SAAS;SACvB,EACD,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAC1C,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGpE,OAAO,EACL,WAAW,EAGX,cAAc,EACd,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC;AAEnC,MAAM,CAAC,MAAM,mBAAmB,GAC9B,uRAAuR,CAAC;AAE1R,MAAM,CAAC,MAAM,iBAAiB,GAC5B,yJAAyJ,CAAC;AAE5J,MAAM,SAAS,GAAG;IAChB,YAAY,EAAE,IAAI;IAClB,eAAe,EAAE,KAAK;IACtB,cAAc,EAAE,IAAI;IACpB,aAAa,EAAE,KAAK;CACZ,CAAC;AAOX,SAAS,OAAO,CAAC,OAAe;IAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,OAAO,CAAC,MAAe;IAC9B,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC;aAC5E;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAe,EAAE,IAAa;IAC/C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAe,EACf,GAAa,EACb,IAAa,EACb,GAAS;IAET,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC9C,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAa,EAAE,UAAyB,EAAE;IACrE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe,EAAE,EAClE,EAAE,YAAY,EAAE,mBAAmB,EAAE,CACtC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,CAAC,YAAY,CACjB,IAAI,CAAC,IAAI,EACT;YACE,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,SAAS;SACvB,EACD,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAC1C,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pyxis-mcp",
-  "version": "0.1.0",
-  "description": "MCP server for Pyxis, privacy-first product analytics: lets an AI agent read your dashboard's numbers with a read-only token.",
+  "version": "0.2.0",
+  "description": "MCP server for Pyxis, privacy-first product analytics: lets an AI agent read your dashboard's numbers with a read-only token, locally over stdio or hosted over HTTP.",
   "keywords": [
     "mcp",
     "model-context-protocol",
@@ -21,6 +21,15 @@
   "license": "MIT",
   "author": "Samuel Santana",
   "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
   "engines": {
     "node": ">=22"
   },