theleadrouter-mcp 0.1.0

package/CLAUDE.md

@@ -0,0 +1,238 @@
+# theLeadRouter — Lead Routing Platform
+
+This file teaches Claude Code about the theLeadRouter platform — a B2B lead distribution system that routes leads from partners to buyers through offer-based contracts.
+
+## First Time Here?
+
+If the user is new to theLeadRouter or says anything like "get started", "I'm new", "help me set up", or "walk me through this" — run the `/welcome` skill. It will detect their role (admin, partner, or buyer) and walk them through setup step by step.
+
+## Available Skills
+
+| Skill | For | What it does |
+|-------|-----|--------------|
+| `/welcome` | Everyone | First-time setup wizard — detects role, checks MCP, guided walkthrough |
+| `/admin-guide` | Admins | Full platform config reference — entities, routing engine, troubleshooting |
+| `/partner-guide` | Partners | Lead submission, posting specs, campaigns, portal, API integration |
+| `/buyer-guide` | Buyers | Contracts, filters, delivery, dedup, billing, returns, portal |
+
+## Core Concepts
+
+**Lead routing** = a partner submits a lead, the system evaluates which buyers want it, and delivers it to the winners.
+
+### Entity Hierarchy
+
+```
+Tenant (organization)
+│
+├── Vertical Group (optional grouping of related verticals)
+│   └── Vertical (lead category — "Solar", "Medicare", etc.)
+│       └── Vertical Fields (custom fields for this lead type)
+│
+├── Partner (lead source — affiliate, publisher)
+│   └── Campaign (program with posting key, pricing, caps)
+│       └── Campaign Fields (extra fields beyond vertical fields)
+│
+├── Buyer (lead purchaser — advertiser, client)
+│   └── Contract (agreement with filters, caps, pricing, delivery)
+│
+├── Offer (distribution hub — connects campaigns to contracts)
+│   ├── Linked Campaigns (which campaigns feed leads in)
+│   ├── Linked Contracts (which buyers are eligible)
+│   └── DQ Contracts (fallback buyers for rejected leads)
+│
+└── Intake Center (buyer's CRM/backend system)
+    └── Disposition Mappings (external status codes)
+```
+
+### How Routing Works
+
+1. **Partner submits lead** via `POST /api/v1/leads/submit` with campaign's `postingKey` (lr_xxx)
+2. **Campaign identifies the Offer** — which defines distribution rules
+3. **Routing engine evaluates each Contract** linked to the offer:
+   - Contract status = active?
+   - Buyer status = active?
+   - Buyer balance within credit limit?
+   - Within contract's operating hours/schedule?
+   - Geographic filters match (state/zip)?
+   - Demographic filters match (age/gender)?
+   - Custom filters match (vertical-specific fields)?
+   - Cap limits not exceeded (daily/weekly/monthly)?
+   - Dedup check passed (buyer hasn't received this person recently)?
+4. **Winners selected** by distribution rule: highest price, priority rank, weighted random, or round-robin
+5. **Lead delivered** to buyer endpoints
+6. **If all rejected** — DQ contracts evaluated as fallback
+
+### Distribution Types
+
+| Type | Behavior |
+|------|----------|
+| `exclusive` | One buyer gets the lead (highest bid/priority wins) |
+| `multisell` | All eligible buyers get a copy |
+| `hybrid` | Top N buyers get the lead (configurable via maxSales) |
+
+### Distribution Rules
+
+| Rule | How winners are picked |
+|------|----------------------|
+| `price` | Highest pricePerLead wins |
+| `priority` | Lowest priority number wins |
+| `weight` | Random selection weighted by contract weight |
+| `round_robin` | Rotate through eligible contracts |
+
+## Setup Order
+
+Entities must be created in this order (foreign key dependencies):
+
+1. Vertical Group (optional)
+2. Vertical (requires: vertical group if grouping)
+3. Vertical Fields (requires: vertical)
+4. Partner (standalone)
+5. Buyer (standalone)
+6. Intake Center (standalone)
+7. Campaign (requires: partner + vertical)
+8. Contract (requires: buyer + vertical)
+9. Offer (requires: vertical)
+10. Link Campaign to Offer
+11. Link Contract to Offer
+
+## Key Entities Reference
+
+### Verticals
+Lead categories. Every lead belongs to one vertical. Verticals define the field schema.
+- **Admin UI:** Settings > Verticals
+- **Key fields:** name, slug, verticalGroupId (optional), status
+
+### Vertical Groups
+Optional grouping of related verticals. Controls dedup and attribution scope.
+- **dedupScope:** `offer` | `vertical` | `group` — how far duplicate detection reaches
+- **attributionScope:** same options — how far attribution tracking reaches
+
+### Partners
+Organizations that submit leads (affiliates, publishers).
+- **Admin UI:** Partners (sidebar)
+- **Key fields:** name, email, status (active/paused/inactive), paymentCycle, balance
+
+### Campaigns
+A partner's specific lead program. Has its own posting key, pricing, and caps.
+- **Admin UI:** Partners > [Partner] > Campaigns
+- **Key fields:** partnerId, verticalId, postingKey (auto-generated lr_xxx), pricingModel (fixed/revshare), costPerLead, dailyCap/weeklyCap/monthlyCap, status
+
+**Three-tier field architecture:**
+1. **Global fields** (always present): firstName, lastName, email, phone, address, city, state, zipCode, dateOfBirth, ipAddress, tcpaConsent
+2. **Vertical fields** (shared across campaigns in a vertical): e.g., utilityBill, homeOwner for Solar
+3. **Campaign fields** (specific to one campaign): additional custom fields
+
+**Lead submission:**
+```
+POST /api/v1/leads/submit
+Authorization: Bearer lr_xxx  (campaign's postingKey)
+Content-Type: application/json
+
+{
+  "campaignId": "uuid-or-display-id",
+  "firstName": "John",
+  "lastName": "Doe",
+  "email": "john@example.com",
+  "phone": "5551234567",
+  "zipCode": "90210",
+  "ipAddress": "1.2.3.4",
+  "tcpaConsent": true,
+  "trustedFormCertUrl": "https://cert.trustedform.com/xxx",
+  ...verticalFields,
+  ...campaignFields
+}
+```
+
+### Buyers
+Organizations that purchase leads (advertisers, clients).
+- **Admin UI:** Buyers (sidebar)
+- **Key fields:** name, status, balance, creditLimit, dedupEnabled, dedupFields (default: email+phone), dedupWindowDays (default: 30)
+
+### Contracts
+A buyer's agreement to purchase leads. Defines what they want, how many, at what price, and how to deliver.
+- **Admin UI:** Buyers > [Buyer] > Contracts
+
+**Pricing:**
+- pricingModel: `fixed` or `ping_post`
+- pricePerLead: amount buyer pays
+- exclusiveMultiplier: price multiplier for exclusive leads
+
+**Filters:**
+- geoFilters: `{ "states": ["CA", "TX"], "zipCodes": ["902*"] }`
+- demographicFilters: `{ "minAge": 25, "maxAge": 65 }`
+- customFilters: vertical-specific field requirements
+
+**Caps:**
+- Lead count: dailyLeadCap, weeklyLeadCap, monthlyLeadCap
+- Spend: dailySpendCap, weeklySpendCap, monthlySpendCap
+
+**Schedule:**
+- scheduleTimezone (default: America/Los_Angeles)
+- scheduleHours: operating hours per day of week
+- Empty scheduleHours = 24/7
+
+**Delivery:**
+- deliveryMethodOverride / deliveryUrlOverride
+- deliveryConfig: field mapping, headers
+- intakeCenterId: link to intake center for delivery config
+
+### Offers
+The distribution hub. Connects campaigns (sources) to contracts (buyers).
+- **Admin UI:** Offers (sidebar)
+- **Key fields:** verticalId, distributionType, distributionRule, maxSales (for hybrid), visibility (public/private)
+- **Tabs:** Basic Info, Campaigns (link sources), Contracts (link buyers + set weight/priority), DQ Contracts (fallback)
+
+### Intake Centers
+A buyer's CRM or backend system for lead delivery.
+- **Admin UI:** Settings > Intake Centers
+- **Key fields:** name, deliveryMethod (http_post/http_get/email), deliveryUrl, authMethod, authKeyName
+- **Disposition mappings:** external status codes from buyer's system mapped to internal dispositions
+- **Program cascades:** buyer's program codes mapped to specific contracts
+
+## End-to-End Campaign Setup
+
+1. **Create Vertical** (if new lead type) — Settings > Verticals, add fields
+2. **Create Partner** — Partners > Create, set name/email/payment cycle
+3. **Create Campaign** — Partner detail > Add Campaign, set vertical/pricing/caps
+4. **Create Buyer** — Buyers > Create, set name/balance/dedup settings
+5. **Create Intake Center** (if buyer has CRM) — Settings > Intake Centers
+6. **Create Contract** — Buyer detail > Add Contract, set filters/caps/pricing/delivery
+7. **Create Offer** — Offers > Create, set distribution type/rule
+8. **Link Campaign to Offer** — Offer detail > Campaigns tab
+9. **Link Contract to Offer** — Offer detail > Contracts tab, set weight/priority
+10. **Test** — submit a test lead, check routing waterfall in lead detail
+
+## Common Gotchas
+
+1. **Vertical mismatch** — Campaign, contract, and offer must reference the SAME vertical
+2. **Posting key vs API key** — postingKey (lr_xxx on campaign) is for lead submission, not the same as admin/partner API keys
+3. **Buyer balance** — if balance exceeds creditLimit, contracts are skipped during routing
+4. **Cap resets** — caps reset at midnight in the contract's scheduleTimezone, not UTC
+5. **Inactive cascades** — pausing a buyer pauses all their contracts; pausing an offer can cascade to campaigns
+6. **Dedup is buyer-level** — per-buyer, not global. Two different buyers can both receive the same person
+7. **Offer needs both sides** — an offer with campaigns but no contracts = leads accepted but nowhere to route
+8. **Schedule hours** — empty means 24/7; if set, leads outside hours are rejected (not queued)
+9. **Filter format** — geo filters use state abbreviations ("CA" not "California"), zips support wildcards ("902*")
+10. **DQ contracts are separate** — linked via DQ Contracts tab, not the regular Contracts tab
+
+## API Endpoints
+
+| Endpoint | Purpose |
+|----------|---------|
+| `POST /api/v1/leads/submit` | Submit a lead (partner API) |
+| `GET /api/v1/campaigns/{id}/posting` | Get posting spec for a campaign |
+| `GET /api/admin/leads` | List leads (admin) |
+| `GET /api/admin/leads/{id}` | Lead detail with routing info |
+| `GET /api/admin/buyers` | List buyers |
+| `GET /api/admin/partners` | List partners |
+| `GET /api/admin/offers` | List offers |
+| `GET /api/admin/contracts` | List contracts |
+| `GET /api/admin/verticals` | List verticals |
+
+## Auth
+
+- **Admin dashboard:** Session-based (JWT in `lr_session` cookie)
+- **Partner lead submission:** `Authorization: Bearer lr_xxx` (campaign postingKey)
+- **Partner portal API:** Session cookie or partner API key
+- **Buyer portal API:** Session cookie or buyer API key
+- **Admin API:** `Authorization: Bearer lr_xxx` (admin API key)

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 iSCALE LLC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,166 @@
+# theLeadRouter MCP — Claude Code Integration
+
+[![Built with AI](https://img.shields.io/badge/Built%20with-AI-blue)](https://builtwithai.com)
+
+Connect [Claude Code](https://claude.ai/code) to your [theLeadRouter](https://theleadrouter.com) lead routing platform. This repo provides:
+
+1. **Role-specific skills** — teach Claude Code how theLeadRouter works from your perspective (admin, partner, or buyer)
+2. **MCP server** — connects Claude Code to your instance via API so it can query leads, manage entities, pull reports, and more
+
+**Built by [iSCALE](https://builtwithai.com) — AI-powered tools for lead generation at scale.**
+
+## Quick Start
+
+### Option 1: Clone this repo (recommended)
+
+```bash
+git clone https://github.com/iscale-llc/theleadrouter-mcp.git
+cd theleadrouter-mcp
+```
+
+Then open Claude Code in this directory. It automatically loads the `CLAUDE.md` and all skills.
+
+Say **"I'm new, help me get started"** or run `/welcome` — Claude Code will detect your role and walk you through setup step by step.
+
+### Option 2: Copy just your role's skill
+
+Copy only the skill you need into your project's `.claude/skills/` directory:
+
+```bash
+# For admins (full platform setup & management)
+cp -r .claude/skills/admin-guide /path/to/your/project/.claude/skills/
+
+# For partners (lead submission, campaigns, portal)
+cp -r .claude/skills/partner-guide /path/to/your/project/.claude/skills/
+
+# For buyers (contracts, filters, delivery, billing)
+cp -r .claude/skills/buyer-guide /path/to/your/project/.claude/skills/
+```
+
+## Skills by Role
+
+### Admin Guide (`/admin-guide`)
+
+Full platform configuration and management:
+- Entity hierarchy and setup order (verticals → partners → buyers → campaigns → contracts → offers)
+- Routing engine internals — how the system evaluates contracts
+- Distribution patterns (exclusive, multisell, hybrid, ping-post)
+- Intake centers and delivery configuration
+- Troubleshooting routing failures
+- All admin API endpoints
+
+### Partner Guide (`/partner-guide`)
+
+Lead submission and campaign management:
+- How to submit leads via API (`POST /api/v1/leads/submit`)
+- Posting specs — required fields, sample requests, response formats
+- Common rejection reasons and how to fix them
+- Sessions API for multi-step funnels
+- Co-registration flows
+- Partner portal overview and API endpoints
+- Campaign caps and pricing models
+
+### Buyer Guide (`/buyer-guide`)
+
+Receiving and managing leads:
+- Contract configuration (filters, caps, pricing, schedule)
+- Delivery setup (HTTP POST/GET, email, CRM integration)
+- Dedup settings and how duplicate prevention works
+- Balance, billing, and credit limits
+- Returns and disposition tracking
+- CPA (cost per acquisition) and conversion postbacks
+- Ping-post auction model
+- Buyer portal and API endpoints
+
+## Setting Up the MCP Server
+
+The MCP server lets Claude Code interact with your theLeadRouter instance directly — querying leads, managing buyers, pulling reports, etc.
+
+### 1. Generate an API key
+
+Go to **Settings > API Keys** in your admin dashboard and create an API key. It will start with `lr_`.
+
+### 2. Add to your Claude Code config
+
+Add the following to your `.mcp.json` file. Replace `lr_your_key_here` with your actual key.
+
+```json
+{
+  "mcpServers": {
+    "theleadrouter": {
+      "command": "npx",
+      "args": ["-y", "theleadrouter-mcp@latest"],
+      "env": {
+        "ISCALE_API_URL": "https://leads.iscale.com",
+        "ISCALE_API_KEY": "lr_your_key_here"
+      }
+    }
+  }
+}
+```
+
+### 3. Restart Claude Code
+
+Close and reopen Claude Code so it picks up the new MCP server config.
+
+### 4. Verify the connection
+
+Try asking: `"Use search_leads to show me recent leads"`
+
+## MCP Server Tools
+
+Once connected, Claude Code can use 300+ tools across these categories:
+
+| Category | Examples |
+|----------|----------|
+| **Leads** | `search_leads`, `get_lead`, `get_lead_distributions`, `submit_lead` |
+| **Buyers** | `list_buyers`, `get_buyer_balance`, `update_buyer_status` |
+| **Partners** | `list_partners`, `get_partner`, `create_partner` |
+| **Contracts** | `list_contracts`, `create_contract`, `update_contract_status` |
+| **Campaigns** | `list_campaigns`, `get_posting_instructions` |
+| **Offers** | `list_offers`, `link_campaign_to_offer` |
+| **Reports** | `get_report`, `list_transactions`, `list_payouts` |
+| **People (CRM)** | `search_people`, `get_person_timeline` |
+| **Calls & IVR** | `list_calls`, `get_call`, `list_tracking_numbers` |
+| **Compliance** | `check_suppression`, `list_audit_logs` |
+
+## Example Prompts
+
+### For Admins
+```
+"Set up a new solar vertical with fields for utilityBill and homeOwner"
+"Create a campaign for partner SunLeads on the solar vertical"
+"Why didn't lead L-12345 route to any buyers?"
+"Show me all contracts that are hitting their daily cap"
+"Pull a revenue report for last week grouped by buyer"
+```
+
+### For Partners
+```
+"Show me the posting spec for campaign C-789"
+"What fields do I need to submit a solar lead?"
+"Why was my last lead rejected?"
+"Show me my leads from today and their statuses"
+"What offers are available for me to enroll in?"
+```
+
+### For Buyers
+```
+"What's my current balance and credit limit?"
+"Show me all leads I received today"
+"Which of my contracts are paused?"
+"Return lead L-12345 — invalid phone number"
+"How many leads am I getting per day this week?"
+```
+
+## About
+
+theLeadRouter is a B2B lead distribution platform that routes leads from partners to buyers through offer-based contracts. Learn more at [theleadrouter.com](https://theleadrouter.com).
+
+Built by [iSCALE](https://builtwithai.com) — browse all our open-source AI tools at [builtwithai.com/open-source](https://builtwithai.com/open-source).
+
+## Help & Documentation
+
+- **User Manual:** Available in your admin dashboard under Help > User Manual
+- **API Reference:** Help > API Docs
+- **Claude Code tab:** Help > Claude Code (in-app setup instructions)

package/dist/api-client.d.ts

@@ -0,0 +1,10 @@
+import type { ApiClientConfig, ApiResponse } from './types.js';
+export declare class ApiClient {
+    private baseUrl;
+    private apiKey;
+    constructor(config: ApiClientConfig);
+    get<T = unknown>(path: string, params?: Record<string, string>): Promise<ApiResponse<T>>;
+    post<T = unknown>(path: string, body?: unknown): Promise<ApiResponse<T>>;
+    patch<T = unknown>(path: string, body?: unknown): Promise<ApiResponse<T>>;
+}
+//# sourceMappingURL=api-client.d.ts.map

package/dist/api-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../src/api-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE9D,qBAAa,SAAS;IACpB,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,MAAM,CAAQ;gBAEV,MAAM,EAAE,eAAe;IAK7B,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAoBxF,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAiBxE,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;CAgBhF"}

package/dist/api-client.js

@@ -0,0 +1,64 @@
+export class ApiClient {
+    baseUrl;
+    apiKey;
+    constructor(config) {
+        this.baseUrl = config.baseUrl.replace(/\/$/, '');
+        this.apiKey = config.apiKey;
+    }
+    async get(path, params) {
+        const url = new URL(`${this.baseUrl}${path}`);
+        if (params) {
+            for (const [k, v] of Object.entries(params)) {
+                if (v !== undefined && v !== null && v !== '')
+                    url.searchParams.set(k, v);
+            }
+        }
+        const res = await fetch(url.toString(), {
+            headers: {
+                'Authorization': `Bearer ${this.apiKey}`,
+                'Accept': 'application/json',
+            },
+        });
+        try {
+            return await res.json();
+        }
+        catch {
+            return { error: { code: 'PARSE_ERROR', message: `HTTP ${res.status}: ${res.statusText}` } };
+        }
+    }
+    async post(path, body) {
+        const res = await fetch(`${this.baseUrl}${path}`, {
+            method: 'POST',
+            headers: {
+                'Authorization': `Bearer ${this.apiKey}`,
+                'Content-Type': 'application/json',
+                'Accept': 'application/json',
+            },
+            body: body ? JSON.stringify(body) : undefined,
+        });
+        try {
+            return await res.json();
+        }
+        catch {
+            return { error: { code: 'PARSE_ERROR', message: `HTTP ${res.status}: ${res.statusText}` } };
+        }
+    }
+    async patch(path, body) {
+        const res = await fetch(`${this.baseUrl}${path}`, {
+            method: 'PATCH',
+            headers: {
+                'Authorization': `Bearer ${this.apiKey}`,
+                'Content-Type': 'application/json',
+                'Accept': 'application/json',
+            },
+            body: body ? JSON.stringify(body) : undefined,
+        });
+        try {
+            return await res.json();
+        }
+        catch {
+            return { error: { code: 'PARSE_ERROR', message: `HTTP ${res.status}: ${res.statusText}` } };
+        }
+    }
+}
+//# sourceMappingURL=api-client.js.map

package/dist/api-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../src/api-client.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,SAAS;IACZ,OAAO,CAAQ;IACf,MAAM,CAAQ;IAEtB,YAAY,MAAuB;QACjC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAChD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC7B,CAAC;IAED,KAAK,CAAC,GAAG,CAAc,IAAY,EAAE,MAA+B;QAClE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC,CAAA;QAC7C,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE;oBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAC3E,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACtC,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;gBACxC,QAAQ,EAAE,kBAAkB;aAC7B;SACF,CAAC,CAAA;QACF,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,CAAA;QAC7F,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAc,IAAY,EAAE,IAAc;QAClD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;gBACxC,cAAc,EAAE,kBAAkB;gBAClC,QAAQ,EAAE,kBAAkB;aAC7B;YACD,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAA;QACF,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,CAAA;QAC7F,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAc,IAAY,EAAE,IAAc;QACnD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAChD,MAAM,EAAE,OAAO;YACf,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;gBACxC,cAAc,EAAE,kBAAkB;gBAClC,QAAQ,EAAE,kBAAkB;aAC7B;YACD,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAA;QACF,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,CAAA;QAC7F,CAAC;IACH,CAAC;CACF"}

package/dist/auth-adapter.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Auth adapters bridge MCP tool handlers to different auth mechanisms.
+ * - SessionAuthAdapter: forwards session cookie (for in-app agent chat)
+ * - ApiKeyAuthAdapter: Bearer token (for external MCP consumers)
+ */
+export interface AuthAdapter {
+    fetch(path: string, opts?: {
+        method?: string;
+        body?: unknown;
+        params?: Record<string, string>;
+    }): Promise<unknown>;
+}
+export declare class SessionAuthAdapter implements AuthAdapter {
+    private cookie;
+    private baseUrl;
+    constructor(cookie: string, baseUrl?: string);
+    fetch(path: string, opts?: {
+        method?: string;
+        body?: unknown;
+        params?: Record<string, string>;
+    }): Promise<unknown>;
+}
+export declare class ApiKeyAuthAdapter implements AuthAdapter {
+    private apiKey;
+    private baseUrl;
+    constructor(apiKey: string, baseUrl: string);
+    fetch(path: string, opts?: {
+        method?: string;
+        body?: unknown;
+        params?: Record<string, string>;
+    }): Promise<unknown>;
+}
+//# sourceMappingURL=auth-adapter.d.ts.map

package/dist/auth-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-adapter.d.ts","sourceRoot":"","sources":["../src/auth-adapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QACzB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,IAAI,CAAC,EAAE,OAAO,CAAA;QACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAChC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACrB;AAED,qBAAa,kBAAmB,YAAW,WAAW;IAElD,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,OAAO;gBADP,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,MAC4E;IAGzF,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;CAoCzH;AAED,qBAAa,iBAAkB,YAAW,WAAW;IAEjD,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,OAAO;gBADP,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM;IAGnB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;CAoCzH"}

package/dist/auth-adapter.js

@@ -0,0 +1,87 @@
+/**
+ * Auth adapters bridge MCP tool handlers to different auth mechanisms.
+ * - SessionAuthAdapter: forwards session cookie (for in-app agent chat)
+ * - ApiKeyAuthAdapter: Bearer token (for external MCP consumers)
+ */
+export class SessionAuthAdapter {
+    cookie;
+    baseUrl;
+    constructor(cookie, baseUrl = process.env.ROUTING_API_URL
+        || (process.env.VERCEL_URL ? `https://${process.env.VERCEL_URL}` : 'http://localhost:4005')) {
+        this.cookie = cookie;
+        this.baseUrl = baseUrl;
+    }
+    async fetch(path, opts) {
+        const url = new URL(path, this.baseUrl);
+        if (opts?.params) {
+            for (const [key, value] of Object.entries(opts.params)) {
+                url.searchParams.set(key, value);
+            }
+        }
+        const res = await globalThis.fetch(url.toString(), {
+            method: opts?.method || 'GET',
+            headers: {
+                'Content-Type': 'application/json',
+                Cookie: this.cookie,
+            },
+            body: opts?.body ? JSON.stringify(opts.body) : undefined,
+        });
+        if (!res.ok) {
+            const err = await res.json().catch(() => ({}));
+            const apiErr = err.error;
+            return {
+                error: true,
+                code: apiErr?.code || 'UNKNOWN',
+                message: apiErr?.message || `Failed (${res.status})`,
+                details: apiErr?.details || undefined,
+                status: res.status,
+            };
+        }
+        // Handle 204 No Content (common for DELETE)
+        if (res.status === 204 || res.headers.get('content-length') === '0') {
+            return { success: true };
+        }
+        return res.json();
+    }
+}
+export class ApiKeyAuthAdapter {
+    apiKey;
+    baseUrl;
+    constructor(apiKey, baseUrl) {
+        this.apiKey = apiKey;
+        this.baseUrl = baseUrl;
+    }
+    async fetch(path, opts) {
+        const url = new URL(path, this.baseUrl);
+        if (opts?.params) {
+            for (const [key, value] of Object.entries(opts.params)) {
+                url.searchParams.set(key, value);
+            }
+        }
+        const res = await globalThis.fetch(url.toString(), {
+            method: opts?.method || 'GET',
+            headers: {
+                'Content-Type': 'application/json',
+                'Authorization': `Bearer ${this.apiKey}`,
+            },
+            body: opts?.body ? JSON.stringify(opts.body) : undefined,
+        });
+        if (!res.ok) {
+            const err = await res.json().catch(() => ({}));
+            const apiErr = err.error;
+            return {
+                error: true,
+                code: apiErr?.code || 'UNKNOWN',
+                message: apiErr?.message || `Failed (${res.status})`,
+                details: apiErr?.details || undefined,
+                status: res.status,
+            };
+        }
+        // Handle 204 No Content (common for DELETE)
+        if (res.status === 204 || res.headers.get('content-length') === '0') {
+            return { success: true };
+        }
+        return res.json();
+    }
+}
+//# sourceMappingURL=auth-adapter.js.map

package/dist/auth-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-adapter.js","sourceRoot":"","sources":["../src/auth-adapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,MAAM,OAAO,kBAAkB;IAEnB;IACA;IAFV,YACU,MAAc,EACd,UAAkB,OAAO,CAAC,GAAG,CAAC,eAAe;WAChD,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC;QAFrF,WAAM,GAAN,MAAM,CAAQ;QACd,YAAO,GAAP,OAAO,CAC8E;IAC5F,CAAC;IAEJ,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,IAA2E;QACnG,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;YACjB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YAClC,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACjD,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,KAAK;YAC7B,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB;YACD,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SACzD,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAC9C,MAAM,MAAM,GAAI,GAAW,CAAC,KAAK,CAAA;YACjC,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,SAAS;gBAC/B,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,WAAW,GAAG,CAAC,MAAM,GAAG;gBACpD,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,SAAS;gBACrC,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAA;QACH,CAAC;QAED,4CAA4C;QAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,GAAG,EAAE,CAAC;YACpE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;QAC1B,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAE,CAAA;IACnB,CAAC;CACF;AAED,MAAM,OAAO,iBAAiB;IAElB;IACA;IAFV,YACU,MAAc,EACd,OAAe;QADf,WAAM,GAAN,MAAM,CAAQ;QACd,YAAO,GAAP,OAAO,CAAQ;IACtB,CAAC;IAEJ,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,IAA2E;QACnG,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;YACjB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YAClC,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACjD,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,KAAK;YAC7B,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;aACzC;YACD,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SACzD,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAC9C,MAAM,MAAM,GAAI,GAAW,CAAC,KAAK,CAAA;YACjC,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,SAAS;gBAC/B,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,WAAW,GAAG,CAAC,MAAM,GAAG;gBACpD,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,SAAS;gBACrC,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAA;QACH,CAAC;QAED,4CAA4C;QAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,GAAG,EAAE,CAAC;YACpE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;QAC1B,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAE,CAAA;IACnB,CAAC;CACF"}

package/dist/bin/iscale-mcp.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=iscale-mcp.d.ts.map

package/dist/bin/iscale-mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iscale-mcp.d.ts","sourceRoot":"","sources":["../../src/bin/iscale-mcp.ts"],"names":[],"mappings":""}

package/dist/bin/iscale-mcp.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import { startServer } from '../index.js';
+startServer().catch((error) => {
+    console.error('Fatal error:', error);
+    process.exit(1);
+});
+//# sourceMappingURL=iscale-mcp.js.map

package/dist/bin/iscale-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iscale-mcp.js","sourceRoot":"","sources":["../../src/bin/iscale-mcp.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IAC5B,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/dist/build-registry.d.ts

@@ -0,0 +1,3 @@
+import { ToolRegistry } from './registry.js';
+export declare function buildRegistry(): ToolRegistry;
+//# sourceMappingURL=build-registry.d.ts.map