viviscape-mcp 2.0.1 → 2.0.2

package/README.md

@@ -1,10 +1,10 @@
 # viviscape-mcp
 
-MCP server for the [ViviScape](https://viviscape.io) API — exposes CRM, projects, companies, tasks, time tracking, notes, and insights as tools for Claude and other MCP clients.
+MCP server for the [ViviScape](https://viviscape.io) API - exposes CRM, projects, companies, tasks, time tracking, notes, and insights as tools for Claude and other MCP clients.
 
 ## Installation
 
-No install needed — run via `npx`:
+No install needed - run via `npx`:
 
 ```bash
 npx viviscape-mcp
@@ -18,7 +18,7 @@ npm install -g viviscape-mcp
 
 ## Sign in
 
-Authentication is per-user, the same browser flow the ViviScape CLI uses — no
+Authentication is per-user, the same browser flow the ViviScape CLI uses - no
 API keys. Sign in once:
 
 ```bash
@@ -74,7 +74,7 @@ args = ["-y", "viviscape-mcp"]
 
 ## ChatGPT (Developer Mode / Apps SDK)
 
-ChatGPT only accepts **remote HTTP** MCP servers — it does not run local stdio
+ChatGPT only accepts **remote HTTP** MCP servers - it does not run local stdio
 processes. Bridge this server to an HTTP endpoint with
 [`mcp-remote`](https://www.npmjs.com/package/mcp-remote) or
 [`supergateway`](https://www.npmjs.com/package/supergateway), then expose it
@@ -88,11 +88,11 @@ npx -y supergateway --stdio "npx -y viviscape-mcp" --port 8000
 ```
 
 The gateway shares the host's stored session, so everyone reaching that endpoint
-acts as the signed-in user — put your own auth in front of it.
+acts as the signed-in user - put your own auth in front of it.
 
 Expose `http://localhost:8000/sse` publicly, then in ChatGPT:
 
-**Settings → Connectors → Create → Custom MCP server**
+**Settings -> Connectors -> Create -> Custom MCP server**
 - **URL:** `https://your-public-host/sse`
 - **Auth:** none (or bearer, depending on your gateway)
 
@@ -100,16 +100,16 @@ Expose `http://localhost:8000/sse` publicly, then in ChatGPT:
 
 The server exposes tools across these domains:
 
-- **Prospects** — `prospect_add`, `prospect_get`, `prospect_update`, `prospect_query`, follow-ups, notes
-- **Clients** — `client_add`, `client_get`, `client_get_by_email`, `clients_by_company`
-- **Companies** — `company_add`, `company_list`, `company_update`
-- **Projects** — `project_get`, `project_list`, `project_list_active`, `project_staff`, `project_tasks`, `projects_by_company`
-- **Tasks** — `task_add`, `task_get`, `task_update`, `tasks_open`, `tasks_pending`, `tasks_by_company`, `tasks_by_milestone`
-- **Time logs** — `timelog_add`, `timelog_update`
-- **Notes** — `note_add`, `note_get`, `note_update`, `note_remove`, `notes_mine`, `notes_query`
-- **Insights** — hours by person/service/project, AI summary, person stats, time totals
-- **Account** — `account_info`, `account_services`, `account_users`
-- **Auth** — `auth_login`, `auth_status`, `auth_logout`
+- **Prospects** - `prospect_add`, `prospect_get`, `prospect_update`, `prospect_query`, follow-ups, notes
+- **Clients** - `client_add`, `client_get`, `client_get_by_email`, `clients_by_company`
+- **Companies** - `company_add`, `company_list`, `company_update`
+- **Projects** - `project_get`, `project_list`, `project_list_active`, `project_staff`, `project_tasks`, `projects_by_company`
+- **Tasks** - `task_add`, `task_get`, `task_update`, `tasks_open`, `tasks_pending`, `tasks_by_company`, `tasks_by_milestone`
+- **Time logs** - `timelog_add`, `timelog_update`
+- **Notes** - `note_add`, `note_get`, `note_update`, `note_remove`, `notes_mine`, `notes_query`
+- **Insights** - hours by person/service/project, AI summary, person stats, time totals
+- **Account** - `account_info`, `account_services`, `account_users`
+- **Auth** - `auth_login`, `auth_status`, `auth_logout`
 
 ## Development
 

package/dist/api-client.js

@@ -242,7 +242,7 @@ export class ViviScapeClient {
         if (res.status >= 300 && res.status < 400)
             throw new SessionExpiredError();
         if (!res.ok) {
-            const snippet = text.length > 400 ? `${text.slice(0, 400)}…` : text;
+            const snippet = text.length > 400 ? `${text.slice(0, 400)}...` : text;
             throw new ApiError(res.status, `API ${method} ${path} returned ${res.status}: ${snippet}`);
         }
         // Cookie-auth middleware bounces unauthenticated API calls to /login, which
@@ -267,7 +267,7 @@ export class ViviScapeClient {
     post(path, body) {
         return this.request('POST', path, body);
     }
-    // ── Prospects ──────────────────────────────────────────────
+    // -- Prospects ----------------------------------------------
     async addProspect(data) {
         return this.post('prospect/add', {
             ...data,
@@ -304,7 +304,7 @@ export class ViviScapeClient {
     async removeProspect(prospectId) {
         return this.get(`prospect/remove/${prospectId}`);
     }
-    // ── Prospect notes ─────────────────────────────────────────
+    // -- Prospect notes -----------------------------------------
     async addProspectNote(data) {
         return this.post('prospect/note/add', { user_id: this.userId, ...data });
     }
@@ -317,7 +317,7 @@ export class ViviScapeClient {
     async removeProspectNote(noteId) {
         return this.get(`prospect/note/remove/${noteId}`);
     }
-    // ── Prospect follow-ups ────────────────────────────────────
+    // -- Prospect follow-ups ------------------------------------
     async addFollowup(data) {
         return this.post('prospect/followup/add', { user_id: this.userId, ...data });
     }
@@ -327,7 +327,7 @@ export class ViviScapeClient {
     async getFollowups(prospectId) {
         return this.get(`prospect/followups/list/${prospectId}`);
     }
-    // ── Companies & clients ────────────────────────────────────
+    // -- Companies & clients ------------------------------------
     async listCompanies() {
         return this.get(`user/accounts?user_id=${this.userId}&account_id=${this.accountId}`);
     }
@@ -349,7 +349,7 @@ export class ViviScapeClient {
     async getClientByEmail(data) {
         return this.post('client/email', data);
     }
-    // ── Projects (groups) ──────────────────────────────────────
+    // -- Projects (groups) --------------------------------------
     async getMyProjects() {
         return this.get(`user/groups/company?user_id=${this.userId}&account_id=${this.accountId}&companyid=0`);
     }
@@ -371,7 +371,7 @@ export class ViviScapeClient {
     async getActiveProjectsByUser(userId) {
         return this.get(`user/groups/active?user_id=${userId || this.userId}&account_id=${this.accountId}`);
     }
-    // ── Tasks ──────────────────────────────────────────────────
+    // -- Tasks --------------------------------------------------
     async addTask(data) {
         return this.post('tasks/add', buildTaskPayload(data, this.ctx));
     }
@@ -411,14 +411,14 @@ export class ViviScapeClient {
     async getCompanyTasks(companyId) {
         return this.get(`company/tasks?company_id=${companyId}&user_id=${this.userId}`);
     }
-    // ── Time logs ──────────────────────────────────────────────
+    // -- Time logs ----------------------------------------------
     async addTimeLog(data) {
         return this.post('logs/add', buildTimeLogPayload(data, this.ctx));
     }
     async updateTimeLog(data) {
         return this.post('logs/update', buildTimeLogPayload(data, this.ctx));
     }
-    // ── Notes ──────────────────────────────────────────────────
+    // -- Notes --------------------------------------------------
     async getMyNotes() {
         return this.get('notes/me');
     }
@@ -451,7 +451,7 @@ export class ViviScapeClient {
             module: 'notes',
         });
     }
-    // ── Account ────────────────────────────────────────────────
+    // -- Account ------------------------------------------------
     async getAccountInfo() {
         return this.get(`account/id/${this.accountId}`);
     }
@@ -464,7 +464,7 @@ export class ViviScapeClient {
     async getUsers() {
         return this.get(`account/users/${this.accountId}`);
     }
-    // ── Insights ───────────────────────────────────────────────
+    // -- Insights -----------------------------------------------
     async getHoursByPerson(data) {
         const userId = Number(data.user_id) || this.userId;
         return this.get(`insights/logs/hours/person/${userId}?account_id=${this.accountId}` +

package/dist/auth/auth-service.d.ts

@@ -1,7 +1,7 @@
 import { Credentials } from './credentials.js';
 import { TokenStore } from './token-store.js';
 /**
- * Browser login over a loopback bridge — the same flow as `vs auth login`
+ * Browser login over a loopback bridge - the same flow as `vs auth login`
  * (ViviScape.CLI/Auth/AuthService.cs): open /auth/cli/connect on ViviScape Work,
  * the page posts the signed-in session to a one-shot listener on 127.0.0.1.
  */

package/dist/auth/auth-service.js

@@ -5,7 +5,7 @@ import { APP_NAME, CLI_CONNECT_PATH, baseUrl } from '../config.js';
 import { parseCredentials } from './credentials.js';
 import { createTokenStore } from './token-store.js';
 /**
- * Browser login over a loopback bridge — the same flow as `vs auth login`
+ * Browser login over a loopback bridge - the same flow as `vs auth login`
  * (ViviScape.CLI/Auth/AuthService.cs): open /auth/cli/connect on ViviScape Work,
  * the page posts the signed-in session to a one-shot listener on 127.0.0.1.
  */
@@ -39,14 +39,14 @@ export class AuthService {
                     if (!creds)
                         throw new Error('The login bridge posted an unreadable payload.');
                     if (posted !== state)
-                        throw new Error('State mismatch — possible CSRF.');
+                        throw new Error('State mismatch - possible CSRF.');
                     creds.base_url = creds.base_url || baseUrl();
                     this.store.write(creds);
                     respond(res, 200, 'application/json', '{"ok":true}');
                     settle({ creds });
                 })
                     .catch((err) => {
-                    // Reject the callback but keep listening — a stray or hostile post
+                    // Reject the callback but keep listening - a stray or hostile post
                     // must not cancel a login the user is still completing.
                     respond(res, 400, 'application/json', JSON.stringify({ ok: false, message: err.message }));
                     log(`Rejected a login callback: ${err.message}`);
@@ -127,7 +127,7 @@ function respond(res, status, contentType, body) {
         'Access-Control-Allow-Origin': '*',
         'Access-Control-Allow-Headers': 'Content-Type',
         'Access-Control-Allow-Methods': 'POST,GET,OPTIONS',
-        // Chrome Private Network Access — let a public origin reach loopback.
+        // Chrome Private Network Access - let a public origin reach loopback.
         'Access-Control-Allow-Private-Network': 'true',
         'Access-Control-Max-Age': '600',
     });

package/dist/auth/permissions.d.ts

@@ -1,6 +1,6 @@
 import { Credentials } from './credentials.js';
 /**
- * Plan gating — mirrors ViviScape.CLI/Auth/Permissions.cs. The job here is a
+ * Plan gating - mirrors ViviScape.CLI/Auth/Permissions.cs. The job here is a
  * clean error when the account's tier can't reach a feature; role-level RBAC
  * stays on the server.
  */

package/dist/auth/permissions.js

@@ -1,6 +1,6 @@
 import { baseUrl } from '../config.js';
 /**
- * Plan gating — mirrors ViviScape.CLI/Auth/Permissions.cs. The job here is a
+ * Plan gating - mirrors ViviScape.CLI/Auth/Permissions.cs. The job here is a
  * clean error when the account's tier can't reach a feature; role-level RBAC
  * stays on the server.
  */
@@ -38,9 +38,9 @@ export class PermissionDeniedError extends Error {
 export function requireFeature(feature, creds) {
     const min = MIN_PLAN[feature];
     if (min === undefined)
-        return; // unknown → allow
+        return; // unknown -> allow
     const forced = process.env.VS_FORCE_PLAN;
-    // An unknown tier is not a denial — only gate when the login told us the plan.
+    // An unknown tier is not a denial - only gate when the login told us the plan.
     if (!forced && !creds.plan_type)
         return;
     const have = forced ? parsePlan(forced) : parsePlan(creds.plan_type);

package/dist/auth/token-store.d.ts

@@ -1,6 +1,6 @@
 import { Credentials } from './credentials.js';
 /**
- * Credential persistence — Windows Credential Manager on win32 (the same store
+ * Credential persistence - Windows Credential Manager on win32 (the same store
  * and the same blob format the ViviScape CLI uses), a 0600 file elsewhere.
  * Mirrors ViviScape.CLI/Auth/TokenStore.cs.
  */

package/dist/auth/token-store.js

@@ -4,7 +4,7 @@ import { homedir, tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { CLI_CREDENTIAL_KEY, CREDENTIAL_KEY } from '../config.js';
 import { parseCredentials } from './credentials.js';
-// ── Windows Credential Manager ────────────────────────────────
+// -- Windows Credential Manager --------------------------------
 const CRED_PS1 = `param(
   [Parameter(Mandatory=$true)][ValidateSet('read','write','delete')][string]$Action,
   [Parameter(Mandatory=$true)][string]$Target,
@@ -123,7 +123,7 @@ class WindowsCredentialStore {
         });
     }
 }
-// ── Plain file store (non-Windows, or Credential Manager unavailable) ──
+// -- Plain file store (non-Windows, or Credential Manager unavailable) --
 class FileStore {
     path;
     cliPath;

package/dist/config.d.ts

@@ -1,12 +1,12 @@
 /**
- * Shared configuration — mirrors ViviScape.CLI/Config.cs so the MCP server and
+ * Shared configuration - mirrors ViviScape.CLI/Config.cs so the MCP server and
  * the CLI talk to the same host, the same API prefix, and the same login bridge.
  */
 export declare const APP_NAME = "viviscape-mcp";
 export declare const DISPLAY_NAME = "ViviScape MCP";
 /** Credential Manager / credential-file target for this client. */
 export declare const CREDENTIAL_KEY = "ViviScape.MCP:default";
-/** The CLI's target — read as a fallback so `vs auth login` also signs in the MCP. */
+/** The CLI's target - read as a fallback so `vs auth login` also signs in the MCP. */
 export declare const CLI_CREDENTIAL_KEY = "ViviScape.CLI:default";
 export declare const API_PREFIX = "/api/v1/core";
 export declare const CLI_CONNECT_PATH = "/auth/cli/connect";

package/dist/config.js

@@ -1,12 +1,12 @@
 /**
- * Shared configuration — mirrors ViviScape.CLI/Config.cs so the MCP server and
+ * Shared configuration - mirrors ViviScape.CLI/Config.cs so the MCP server and
  * the CLI talk to the same host, the same API prefix, and the same login bridge.
  */
 export const APP_NAME = 'viviscape-mcp';
 export const DISPLAY_NAME = 'ViviScape MCP';
 /** Credential Manager / credential-file target for this client. */
 export const CREDENTIAL_KEY = 'ViviScape.MCP:default';
-/** The CLI's target — read as a fallback so `vs auth login` also signs in the MCP. */
+/** The CLI's target - read as a fallback so `vs auth login` also signs in the MCP. */
 export const CLI_CREDENTIAL_KEY = 'ViviScape.CLI:default';
 export const API_PREFIX = '/api/v1/core';
 export const CLI_CONNECT_PATH = '/auth/cli/connect';

package/dist/index.js

@@ -37,9 +37,9 @@ const server = new McpServer({
 function json(data) {
     return JSON.stringify(data, null, 2);
 }
-// ════════════════════════════════════════════════════════════
+// ============================================================
 // AUTH
-// ════════════════════════════════════════════════════════════
+// ============================================================
 server.tool('auth_status', 'Show the ViviScape session this server is using (user, account, role, plan)', {}, async () => {
     const creds = auth.current();
     if (!creds) {
@@ -98,9 +98,9 @@ server.tool('auth_logout', 'Clear the stored ViviScape session', {}, async () =>
     invalidateClient();
     return { content: [{ type: 'text', text: json({ signed_in: false }) }] };
 });
-// ════════════════════════════════════════════════════════════
+// ============================================================
 // PROSPECTS
-// ════════════════════════════════════════════════════════════
+// ============================================================
 server.tool('prospect_add', 'Add a new prospect/lead to the ViviScape CRM', {
     first_name: z.string().describe('First name'),
     last_name: z.string().describe('Last name'),
@@ -158,9 +158,9 @@ server.tool('prospect_remove', 'Remove a prospect from the CRM', { prospect_id:
     const result = await requireClient().removeProspect(prospect_id);
     return { content: [{ type: 'text', text: json(result) }] };
 });
-// ════════════════════════════════════════════════════════════
+// ============================================================
 // PROSPECT NOTES
-// ════════════════════════════════════════════════════════════
+// ============================================================
 server.tool('prospect_note_add', 'Add a note to a prospect', {
     prospect_id: z.number().describe('Prospect ID'),
     note: z.string().describe('Note content'),
@@ -184,9 +184,9 @@ server.tool('prospect_note_remove', 'Remove a prospect note', { note_id: z.numbe
     const result = await requireClient().removeProspectNote(note_id);
     return { content: [{ type: 'text', text: json(result) }] };
 });
-// ════════════════════════════════════════════════════════════
+// ============================================================
 // PROSPECT FOLLOWUPS
-// ════════════════════════════════════════════════════════════
+// ============================================================
 server.tool('prospect_followup_add', 'Add a followup record for a prospect', {
     prospect_id: z.number().describe('Prospect ID'),
     contact_method: z.string().optional().describe('Contact method (e.g., email, phone, meeting)'),
@@ -213,9 +213,9 @@ server.tool('prospect_followups_list', 'Get all followup records for a prospect'
     const result = await requireClient().getFollowups(prospect_id);
     return { content: [{ type: 'text', text: json(result) }] };
 });
-// ════════════════════════════════════════════════════════════
+// ============================================================
 // COMPANIES & CLIENTS
-// ════════════════════════════════════════════════════════════
+// ============================================================
 server.tool('company_list', 'List all companies', {}, async () => {
     const result = await requireClient().listCompanies();
     return { content: [{ type: 'text', text: json(result) }] };
@@ -269,9 +269,9 @@ server.tool('clients_by_company', 'Get all clients for a company', { company_id:
     const result = await requireClient().getClientsByCompany(company_id);
     return { content: [{ type: 'text', text: json(result) }] };
 });
-// ════════════════════════════════════════════════════════════
+// ============================================================
 // PROJECTS & TASKS
-// ════════════════════════════════════════════════════════════
+// ============================================================
 server.tool('project_list', 'Get all projects for current user', {}, async () => {
     const result = await requireClient().getMyProjects();
     return { content: [{ type: 'text', text: json(result) }] };
@@ -359,9 +359,9 @@ server.tool('projects_active_by_user', 'Get active projects for a specific user'
     const result = await requireClient().getActiveProjectsByUser(user_id);
     return { content: [{ type: 'text', text: json(result) }] };
 });
-// ════════════════════════════════════════════════════════════
+// ============================================================
 // TIME TRACKING
-// ════════════════════════════════════════════════════════════
+// ============================================================
 server.tool('timelog_add', 'Log time against a task. Duration uses shorthand format (e.g., 1h30m, 30m, 2h). Builds full LOG_Time payload.', {
     task_id: z.number().describe('Task ID to log time against'),
     user_id: z.number().optional().describe('User ID who performed the work. Defaults to Art Hicks (210)'),
@@ -391,9 +391,9 @@ server.tool('timelog_update', 'Update an existing time log entry. Builds full LO
     const result = await requireClient().updateTimeLog(params);
     return { content: [{ type: 'text', text: json(result) }] };
 });
-// ════════════════════════════════════════════════════════════
+// ============================================================
 // NOTES
-// ════════════════════════════════════════════════════════════
+// ============================================================
 server.tool('notes_mine', 'Get all notes for the current user', {}, async () => {
     const result = await requireClient().getMyNotes();
     return { content: [{ type: 'text', text: json(result) }] };
@@ -427,9 +427,9 @@ server.tool('notes_query', 'Search notes', {
     const result = await requireClient().queryNotes(params);
     return { content: [{ type: 'text', text: json(result) }] };
 });
-// ════════════════════════════════════════════════════════════
+// ============================================================
 // ACCOUNT
-// ════════════════════════════════════════════════════════════
+// ============================================================
 server.tool('account_info', 'Get account information', {}, async () => {
     const result = await requireClient().getAccountInfo();
     return { content: [{ type: 'text', text: json(result) }] };
@@ -442,9 +442,9 @@ server.tool('account_services', 'Get active services for the account', {}, async
     const result = await requireClient().getActiveServices();
     return { content: [{ type: 'text', text: json(result) }] };
 });
-// ════════════════════════════════════════════════════════════
+// ============================================================
 // INSIGHTS
-// ════════════════════════════════════════════════════════════
+// ============================================================
 server.tool('insights_hours_by_person', 'Get logged hours by person', {
     user_id: z.number().describe('User ID'),
     start_date: z.string().describe('Start date (ISO 8601)'),
@@ -527,10 +527,10 @@ server.tool('insights_all_users_time', 'Get time totals for all users', {}, asyn
     const result = await requireClient().getAllUsersTime();
     return { content: [{ type: 'text', text: json(result) }] };
 });
-// ════════════════════════════════════════════════════════════
+// ============================================================
 // START
-// ════════════════════════════════════════════════════════════
-/** `viviscape-mcp login | logout | status` — the interactive auth surface. */
+// ============================================================
+/** `viviscape-mcp login | logout | status` - the interactive auth surface. */
 async function runCommand(command) {
     switch (command) {
         case 'login': {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "viviscape-mcp",
-  "version": "2.0.1",
+  "version": "2.0.2",
   "description": "MCP server for the ViviScape API — CRM, projects, companies, notes, and insights, authenticated as the signed-in ViviScape user",
   "type": "module",
   "main": "dist/index.js",