wellness-cgm-mcp 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,17 @@
+# Changelog
+
+## [Unreleased]
+
+## [0.1.0] - 2026-05-10
+
+### Added
+
+- Initial release. Local-first CGM MCP server with full Dexcom Developer API support (sandbox + production).
+- 10 MCP tools: standard 5 (`cgm_agent_manifest`, `cgm_capabilities`, `cgm_connection_status`, `cgm_privacy_audit`, `cgm_data_inventory`) + CGM-specific 5 (`cgm_glucose_now`, `cgm_glucose_window`, `cgm_daily_summary`, `cgm_meal_response`, `cgm_authorize_url`).
+- Glucose math: time-in-range (ADA diabetic 70-180 + Levels-style metabolic-health 70-140), GMI (Bergenstal 2018 formula), CV, mean/median/min/max/stdev.
+- Meal response: baseline → peak → return-to-baseline with bands (excellent < 30 / good 30-49 / moderate 50-79 / poor ≥ 80).
+- Dexcom OAuth flow scaffolded: `cgm_authorize_url` MCP tool + `wellness-cgm authorize` / `wellness-cgm exchange <code>` CLI helpers.
+- **Mock mode by default** — without DEXCOM_ACCESS_TOKEN, every tool returns synthetic 5-minute-interval readings clearly tagged with `mock: true`. Lets agents demo the full surface without setup.
+- One-line stderr community CTA on CLI commands (TTY-gated).
+- `community` block on the agent manifest.
+- FreeStyle Libre via LibreLink Up community proxy listed as v0.2 roadmap.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 David Batista
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,151 @@
+<!-- delx-wellness header v2 -->
+<h1 align="center">Wellness CGM MCP</h1>
+
+<h3 align="center">
+  Local-first continuous glucose monitor MCP for AI agents.<br>
+  Dexcom Developer API. <strong>Levels-killer pattern, agent-first, $0.</strong>
+</h3>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/wellness-cgm-mcp"><img src="https://img.shields.io/npm/v/wellness-cgm-mcp?style=for-the-badge&labelColor=0F172A&color=10B981&logo=npm&logoColor=white" alt="npm version" /></a>
+  <a href="https://www.npmjs.com/package/wellness-cgm-mcp"><img src="https://img.shields.io/npm/dm/wellness-cgm-mcp?style=for-the-badge&labelColor=0F172A&color=0EA5A3&logo=npm&logoColor=white" alt="npm downloads" /></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/LICENSE-MIT-22C55E?style=for-the-badge&labelColor=0F172A" alt="License MIT" /></a>
+  <a href="https://wellness.delx.ai/connectors/cgm"><img src="https://img.shields.io/badge/SITE-wellness.delx.ai-0EA5A3?style=for-the-badge&labelColor=0F172A" alt="Site" /></a>
+</p>
+
+<p align="center">
+  <a href="https://github.com/davidmosiah/wellness-cgm-mcp/stargazers"><img src="https://img.shields.io/github/stars/davidmosiah/wellness-cgm-mcp?style=for-the-badge&labelColor=0F172A&color=FBBF24&logo=github" alt="GitHub stars" /></a>
+  <a href="https://modelcontextprotocol.io"><img src="https://img.shields.io/badge/BUILT_FOR-MCP-7C3AED?style=for-the-badge&labelColor=0F172A" alt="Built for MCP" /></a>
+  <a href="https://github.com/davidmosiah/delx-wellness-hermes"><img src="https://img.shields.io/badge/HERMES-one--command_setup-10B981?style=for-the-badge&labelColor=0F172A" alt="Hermes" /></a>
+  <a href="https://github.com/davidmosiah/delx-wellness-openclaw"><img src="https://img.shields.io/badge/OPENCLAW-one--command_setup-FB923C?style=for-the-badge&labelColor=0F172A" alt="OpenClaw" /></a>
+</p>
+
+<p align="center">
+  <strong>🩸 Why this exists:</strong> Levels charges $199/mo to do exactly this — read your CGM, correlate with meals, flag spikes. <code>wellness-cgm-mcp</code> is the same game as a free local-first MCP. Stelo OTC + Dexcom developer API + your agent + <code>wellness-nourish</code> = the full metabolic loop.
+</p>
+
+> ⚡ **One-command install** — pick your runtime:
+> - [Delx Wellness for Hermes](https://github.com/davidmosiah/delx-wellness-hermes): `npx -y delx-wellness-hermes setup`
+> - [Delx Wellness for OpenClaw](https://github.com/davidmosiah/delx-wellness-openclaw): `npx -y delx-wellness-openclaw setup`
+
+---
+<!-- /delx-wellness header v2 -->
+
+## Overview
+
+Local MCP server that exposes Dexcom CGM data (and synthetic mock data when no token is set) to any MCP-aware agent. v0.1 ships full Dexcom Developer API support — sandbox + production. FreeStyle Libre via LibreLink Up is roadmapped for v0.2.
+
+## Try It In 60 Seconds (mock mode, zero setup)
+
+```bash
+npx -y wellness-cgm-mcp doctor       # see env / mode
+npx -y wellness-cgm-mcp status
+
+# In Claude Desktop / Cursor / etc., add:
+# {
+#   "mcpServers": {
+#     "wellness-cgm": {
+#       "command": "npx",
+#       "args": ["-y", "wellness-cgm-mcp"]
+#     }
+#   }
+# }
+```
+
+The agent now has 10 CGM tools. Without a Dexcom token, every tool returns synthetic readings tagged `mock: true` — perfect for prototyping.
+
+## Live setup (Dexcom Developer)
+
+```bash
+# 1. Sign up at https://developer.dexcom.com (sandbox is free)
+# 2. Create an app, register your redirect URI
+export DEXCOM_ENV=sandbox
+export DEXCOM_CLIENT_ID=...
+export DEXCOM_CLIENT_SECRET=...
+export DEXCOM_REDIRECT_URI=https://your.callback/redirect
+
+# 3. Get the OAuth URL, open it, grant access, copy the code from the redirect
+npx -y wellness-cgm-mcp authorize
+
+# 4. Swap code for tokens
+npx -y wellness-cgm-mcp exchange <auth_code_from_redirect>
+
+# 5. Set DEXCOM_ACCESS_TOKEN to the access_token, restart the MCP — flips from mock to live.
+```
+
+## Tools (10)
+
+| Tool | Purpose |
+|---|---|
+| `cgm_agent_manifest` | Runtime contract |
+| `cgm_capabilities` | Providers, metrics, privacy modes |
+| `cgm_connection_status` | env, credentials, mode (live vs mock) |
+| `cgm_privacy_audit` | Local storage + outbound destinations |
+| `cgm_data_inventory` | Metric catalog + TIR ranges + GMI formula |
+| **`cgm_glucose_now`** | **Most recent EGV + trend** |
+| `cgm_glucose_window` | All EGVs over last N hours |
+| **`cgm_daily_summary`** | **Mean / GMI / CV / 2 TIR profiles** |
+| **`cgm_meal_response`** | **Baseline → peak → return + band** |
+| `cgm_authorize_url` | Dexcom OAuth URL builder |
+
+## Two Time-In-Range profiles in every summary
+
+- **Diabetic** (70-180 mg/dL) — ADA standard for adults with diabetes.
+- **Metabolic health** (70-140 mg/dL) — Levels-style for non-DM users.
+
+Agents surface BOTH so the user picks the one that fits their context.
+
+## Meal response bands
+
+| Peak Δ from baseline | Band |
+|---|---|
+| < 30 mg/dL | excellent |
+| 30-49 | good |
+| 50-79 | moderate |
+| ≥ 80 | poor |
+
+Combine with `wellness-nourish` to compute "what did I eat → what happened" automatically.
+
+## The killer combo
+
+```
+wellness-nourish: meal at 13:15 (rice + chicken)
+       ↓
+wellness-cgm-mcp.cgm_meal_response(meal_time)
+       ↓
+{ peak: 167, peak_delta: 72, band: "moderate", peak_time_minutes: 45 }
+       ↓
+whoop-mcp.recovery: 67%
+       ↓
+Agent: "That meal hit a moderate spike (peak +72 mg/dL at 45 min)
+        AND recovery is borderline. Try protein-first next time, or
+        swap white rice for lentils — should drop the peak ~30 mg/dL."
+```
+
+Levels charges $199/mo for this. Here it is, free, local-first, MCP.
+
+## Privacy
+
+- ✅ **Tokens local only** — DEXCOM_ACCESS_TOKEN stays in env vars.
+- ✅ **Mock mode by default** — every tool returns synthetic data with `mock: true` until a token is configured.
+- ✅ **No third-party telemetry** — only outbound calls go to Dexcom.
+
+Run `wellness-cgm-mcp doctor` to inspect.
+
+## Roadmap
+
+- **v0.2** — FreeStyle Libre via LibreLink Up community proxy. Refresh-token rotation. Cross-meal automation with wellness-nourish.
+- **v0.3** — Per-meal historical browser (which foods spike YOU?).
+- **v0.4** — Threshold alerts (agent notified when glucose holds > X mg/dL for Y minutes).
+
+## What this is NOT
+
+- Not medical advice or diagnosis.
+- Not for insulin/medication dosing decisions — defer to clinician.
+- Not affiliated with Dexcom or Abbott.
+
+## License
+
+MIT — see [LICENSE](LICENSE).
+
+<sub>wellness-cgm-mcp is independent open-source software. Dexcom and FreeStyle Libre are trademarks of their respective owners. Neither company is affiliated with or endorses this project.</sub>

package/SECURITY.md

@@ -0,0 +1,21 @@
+# Security Policy
+
+## Reporting
+
+Email **mosiahdavid@gmail.com** with details and reproduction. Do not open a public issue.
+
+## Scope
+
+CGM data is medical-record sensitive. The relevant security surfaces:
+
+- Dexcom OAuth tokens stored in env vars (never logged).
+- Local cache directory under `~/.wellness-cgm`.
+- HTTP transport (`--http`) bound to `127.0.0.1` by default.
+- Outbound calls to sandbox-api.dexcom.com / api.dexcom.com.
+
+If you find token leaks, unintended outbound destinations, or unexpected behaviors with sensitive data, please report.
+
+## Out of scope
+
+- Dexcom API vulnerabilities — report to Dexcom.
+- LibreLink Up risks — that integration is not in v0.1.

package/dist/cli/commands.d.ts

@@ -0,0 +1,2 @@
+export declare function isCliCommand(args: string[]): boolean;
+export declare function runCliCommand(args: string[]): Promise<number>;

package/dist/cli/commands.js

@@ -0,0 +1,143 @@
+import { NPM_PACKAGE_NAME, SERVER_VERSION } from "../constants.js";
+import { DexcomClient } from "../services/dexcom-client.js";
+import { buildCapabilities } from "../services/capabilities.js";
+import { buildPrivacyAudit } from "../services/privacy-audit.js";
+const COMMANDS = new Set(["status", "doctor", "setup", "authorize", "exchange"]);
+function printCommunityCTA() {
+    if (process.env.WELLNESS_CGM_QUIET === "1")
+        return;
+    if (!process.stderr.isTTY)
+        return;
+    process.stderr.write(`\n✨ wellness-cgm-mcp v${SERVER_VERSION} — bringing CGM into the agent loop. A star ⭐ helps surface this to other AI builders.\n` +
+        `   ⭐  https://github.com/davidmosiah/wellness-cgm-mcp\n` +
+        `   💬  https://github.com/davidmosiah/wellness-cgm-mcp/issues\n` +
+        `   🐦  https://x.com/delx369\n` +
+        `   (silence with WELLNESS_CGM_QUIET=1)\n\n`);
+}
+export function isCliCommand(args) {
+    const command = args[0];
+    return command !== undefined && COMMANDS.has(command);
+}
+export async function runCliCommand(args) {
+    const [command, ...rest] = args;
+    try {
+        switch (command) {
+            case "status":
+                return printStatus();
+            case "doctor":
+                return doctor();
+            case "setup":
+                return setup(rest);
+            case "authorize":
+                return authorize();
+            case "exchange":
+                return await exchange(rest);
+            default:
+                return -1;
+        }
+    }
+    catch (err) {
+        console.error(err.message);
+        return 1;
+    }
+}
+function printStatus() {
+    const c = new DexcomClient();
+    console.log(JSON.stringify({
+        name: NPM_PACKAGE_NAME,
+        version: SERVER_VERSION,
+        env: c.env,
+        client_id_configured: Boolean(c.clientId),
+        access_token_configured: c.hasAuth(),
+        mode: c.hasAuth() ? "live" : "mock",
+    }, null, 2));
+    printCommunityCTA();
+    return 0;
+}
+function doctor() {
+    const c = new DexcomClient();
+    const checks = [
+        { name: "node", ok: true, detail: process.version },
+        { name: "dexcom_env", ok: true, detail: c.env },
+        { name: "client_id", ok: Boolean(c.clientId), detail: c.clientId ? "set" : "missing" },
+        { name: "redirect_uri", ok: Boolean(c.redirectUri), detail: c.redirectUri ?? "missing" },
+        {
+            name: "access_token",
+            ok: c.hasAuth(),
+            detail: c.hasAuth() ? "present" : "missing — running in mock mode",
+        },
+    ];
+    console.log(JSON.stringify({
+        ok: true,
+        package: NPM_PACKAGE_NAME,
+        version: SERVER_VERSION,
+        mode: c.hasAuth() ? "live" : "mock",
+        checks,
+        privacy: buildPrivacyAudit(),
+        capabilities: buildCapabilities(),
+    }, null, 2));
+    printCommunityCTA();
+    return 0;
+}
+function setup(args) {
+    const optional = (args[0] ?? "generic").toLowerCase();
+    console.log(JSON.stringify({
+        client: optional,
+        config: {
+            mcpServers: {
+                "wellness-cgm": {
+                    command: "npx",
+                    args: ["-y", NPM_PACKAGE_NAME],
+                    env: {
+                        DEXCOM_ENV: "sandbox",
+                        DEXCOM_CLIENT_ID: "${DEXCOM_CLIENT_ID}",
+                        DEXCOM_CLIENT_SECRET: "${DEXCOM_CLIENT_SECRET}",
+                        DEXCOM_REDIRECT_URI: "${DEXCOM_REDIRECT_URI}",
+                        DEXCOM_ACCESS_TOKEN: "${DEXCOM_ACCESS_TOKEN:-}",
+                    },
+                },
+            },
+        },
+        next_steps: [
+            "Sign up at https://developer.dexcom.com and create a project (sandbox is free).",
+            "Set DEXCOM_CLIENT_ID, DEXCOM_CLIENT_SECRET, DEXCOM_REDIRECT_URI in your env or MCP config.",
+            "Run `wellness-cgm authorize` to print the OAuth URL — open it, grant access, copy the auth code from the redirect.",
+            "Run `wellness-cgm exchange <auth_code>` to swap the code for an access_token.",
+            "Set DEXCOM_ACCESS_TOKEN and restart the MCP. Until then, all tools return mock data.",
+        ],
+    }, null, 2));
+    printCommunityCTA();
+    return 0;
+}
+function authorize() {
+    const c = new DexcomClient();
+    try {
+        const url = c.buildAuthorizeUrl();
+        console.log(JSON.stringify({ ok: true, env: c.env, authorize_url: url }, null, 2));
+        return 0;
+    }
+    catch (err) {
+        console.error(err.message);
+        return 1;
+    }
+}
+async function exchange(args) {
+    const code = args[0];
+    if (!code) {
+        console.error("usage: wellness-cgm exchange <auth_code>");
+        return 1;
+    }
+    const c = new DexcomClient();
+    const tokens = await c.exchangeAuthCode(code);
+    console.log(JSON.stringify({
+        ok: true,
+        env: c.env,
+        access_token: tokens.access_token,
+        refresh_token: tokens.refresh_token,
+        expires_at: tokens.expires_at,
+        scope: tokens.scope,
+        next: "Set DEXCOM_ACCESS_TOKEN to the access_token above (and DEXCOM_REFRESH_TOKEN to the refresh_token).",
+    }, null, 2));
+    return 0;
+}
+//# sourceMappingURL=commands.js.map

package/dist/cli/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/cli/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEjE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AAEjF,SAAS,iBAAiB;IACxB,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,GAAG;QAAE,OAAO;IACnD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO;IAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yBAAyB,cAAc,0FAA0F;QAC/H,yDAAyD;QACzD,iEAAiE;QACjE,gCAAgC;QAChC,4CAA4C,CAC/C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAc;IAChD,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,QAAQ;gBACX,OAAO,WAAW,EAAE,CAAC;YACvB,KAAK,QAAQ;gBACX,OAAO,MAAM,EAAE,CAAC;YAClB,KAAK,OAAO;gBACV,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;YACrB,KAAK,WAAW;gBACd,OAAO,SAAS,EAAE,CAAC;YACrB,KAAK,UAAU;gBACb,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC9B;gBACE,OAAO,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,CAAC,GAAG,IAAI,YAAY,EAAE,CAAC;IAC7B,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,cAAc;QACvB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,oBAAoB,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QACzC,uBAAuB,EAAE,CAAC,CAAC,OAAO,EAAE;QACpC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;KACpC,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACF,iBAAiB,EAAE,CAAC;IACpB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,MAAM;IACb,MAAM,CAAC,GAAG,IAAI,YAAY,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG;QACb,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE;QACnD,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE;QAC/C,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE;QACtF,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,WAAW,IAAI,SAAS,EAAE;QACxF;YACE,IAAI,EAAE,cAAc;YACpB,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;YACf,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gCAAgC;SACnE;KACF,CAAC;IACF,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,gBAAgB;QACzB,OAAO,EAAE,cAAc;QACvB,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACnC,MAAM;QACN,OAAO,EAAE,iBAAiB,EAAE;QAC5B,YAAY,EAAE,iBAAiB,EAAE;KAClC,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACF,iBAAiB,EAAE,CAAC;IACpB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,KAAK,CAAC,IAAc;IAC3B,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE;YACN,UAAU,EAAE;gBACV,cAAc,EAAE;oBACd,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC;oBAC9B,GAAG,EAAE;wBACH,UAAU,EAAE,SAAS;wBACrB,gBAAgB,EAAE,qBAAqB;wBACvC,oBAAoB,EAAE,yBAAyB;wBAC/C,mBAAmB,EAAE,wBAAwB;wBAC7C,mBAAmB,EAAE,0BAA0B;qBAChD;iBACF;aACF;SACF;QACD,UAAU,EAAE;YACV,iFAAiF;YACjF,4FAA4F;YAC5F,oHAAoH;YACpH,+EAA+E;YAC/E,sFAAsF;SACvF;KACF,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACF,iBAAiB,EAAE,CAAC;IACpB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,CAAC,GAAG,IAAI,YAAY,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,CAAC,iBAAiB,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAc;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,CAAC,GAAG,IAAI,YAAY,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,EAAE,EAAE,IAAI;QACR,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,oGAAoG;KAC3G,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/constants.d.ts

@@ -0,0 +1,21 @@
+export declare const SERVER_NAME = "wellness-cgm-mcp";
+export declare const SERVER_VERSION = "0.1.0";
+export declare const NPM_PACKAGE_NAME = "wellness-cgm-mcp";
+export declare const PINNED_NPM_PACKAGE = "wellness-cgm-mcp@0.1.0";
+export declare const USER_AGENT = "wellness-cgm-mcp/0.1.0 (https://wellness.delx.ai/connectors/cgm; contact: david@delx.ai)";
+export declare const DEFAULT_HOST = "127.0.0.1";
+export declare const DEFAULT_PORT = 3012;
+export declare const LOCAL_DIR_NAME = ".wellness-cgm";
+export declare const DEXCOM_SANDBOX_BASE = "https://sandbox-api.dexcom.com";
+export declare const DEXCOM_PRODUCTION_BASE = "https://api.dexcom.com";
+export declare const DEXCOM_OAUTH_AUTHORIZE = "/v2/oauth2/login";
+export declare const DEXCOM_OAUTH_TOKEN = "/v2/oauth2/token";
+/** Time-in-range thresholds (mg/dL). ADA standard for adults with diabetes (also useful for non-DM users). */
+export declare const TIR_LOW_MGDL = 70;
+export declare const TIR_HIGH_MGDL = 180;
+/** Tighter "metabolic health" range used for non-DM users (Levels-style). */
+export declare const MH_LOW_MGDL = 70;
+export declare const MH_HIGH_MGDL = 140;
+export declare const SUPPORTED_PROVIDERS: readonly ["dexcom", "libre"];
+export type CgmProvider = typeof SUPPORTED_PROVIDERS[number];
+export type DexcomEnv = "sandbox" | "production";

package/dist/constants.js

@@ -0,0 +1,20 @@
+export const SERVER_NAME = "wellness-cgm-mcp";
+export const SERVER_VERSION = "0.1.0";
+export const NPM_PACKAGE_NAME = "wellness-cgm-mcp";
+export const PINNED_NPM_PACKAGE = `${NPM_PACKAGE_NAME}@${SERVER_VERSION}`;
+export const USER_AGENT = `${NPM_PACKAGE_NAME}/${SERVER_VERSION} (https://wellness.delx.ai/connectors/cgm; contact: david@delx.ai)`;
+export const DEFAULT_HOST = "127.0.0.1";
+export const DEFAULT_PORT = 3012;
+export const LOCAL_DIR_NAME = ".wellness-cgm";
+export const DEXCOM_SANDBOX_BASE = "https://sandbox-api.dexcom.com";
+export const DEXCOM_PRODUCTION_BASE = "https://api.dexcom.com";
+export const DEXCOM_OAUTH_AUTHORIZE = "/v2/oauth2/login";
+export const DEXCOM_OAUTH_TOKEN = "/v2/oauth2/token";
+/** Time-in-range thresholds (mg/dL). ADA standard for adults with diabetes (also useful for non-DM users). */
+export const TIR_LOW_MGDL = 70;
+export const TIR_HIGH_MGDL = 180;
+/** Tighter "metabolic health" range used for non-DM users (Levels-style). */
+export const MH_LOW_MGDL = 70;
+export const MH_HIGH_MGDL = 140;
+export const SUPPORTED_PROVIDERS = ["dexcom", "libre"];
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAC9C,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC;AACtC,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AACnD,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,gBAAgB,IAAI,cAAc,EAAE,CAAC;AAC1E,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,gBAAgB,IAAI,cAAc,oEAAoE,CAAC;AAEpI,MAAM,CAAC,MAAM,YAAY,GAAG,WAAW,CAAC;AACxC,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AACjC,MAAM,CAAC,MAAM,cAAc,GAAG,eAAe,CAAC;AAE9C,MAAM,CAAC,MAAM,mBAAmB,GAAG,gCAAgC,CAAC;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAC/D,MAAM,CAAC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AACzD,MAAM,CAAC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAErD,8GAA8G;AAC9G,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAC/B,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AACjC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAC9B,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAEhC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAU,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,76 @@
+#!/usr/bin/env node
+import cors from "cors";
+import express from "express";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { DEFAULT_HOST, DEFAULT_PORT, SERVER_NAME, SERVER_VERSION } from "./constants.js";
+import { isCliCommand, runCliCommand } from "./cli/commands.js";
+import { registerCgmTools } from "./tools/cgm-tools.js";
+function createServer() {
+    const server = new McpServer({ name: SERVER_NAME, version: SERVER_VERSION });
+    registerCgmTools(server);
+    return server;
+}
+async function runStdio() {
+    const server = createServer();
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+async function runHttp() {
+    const app = express();
+    const host = process.env.WELLNESS_CGM_HOST ?? DEFAULT_HOST;
+    const port = Number(process.env.WELLNESS_CGM_PORT ?? DEFAULT_PORT);
+    const allowedOrigin = process.env.WELLNESS_CGM_ALLOWED_ORIGIN ?? `http://${host}:${port}`;
+    app.use(express.json({ limit: "1mb" }));
+    app.use(cors({ origin: allowedOrigin }));
+    app.get("/health", (_req, res) => res.json({ ok: true, name: SERVER_NAME, version: SERVER_VERSION }));
+    app.post("/mcp", async (req, res) => {
+        const server = createServer();
+        const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: undefined, enableJsonResponse: true });
+        res.on("close", () => {
+            transport.close().catch(() => undefined);
+            server.close().catch(() => undefined);
+        });
+        try {
+            await server.connect(transport);
+            await transport.handleRequest(req, res, req.body);
+        }
+        catch (error) {
+            console.error("MCP HTTP request failed:", error);
+            if (!res.headersSent) {
+                res.status(500).json({ jsonrpc: "2.0", error: { code: -32603, message: "Internal server error" }, id: null });
+            }
+        }
+    });
+    app.listen(port, host, () => {
+        console.error(`${SERVER_NAME} HTTP transport listening on http://${host}:${port}/mcp`);
+    });
+}
+const args = process.argv.slice(2);
+if (args.includes("--http")) {
+    await runHttp();
+}
+else if (isCliCommand(args)) {
+    const code = await runCliCommand(args);
+    process.exit(code);
+}
+else if (args.length === 0 || args.includes("--stdio")) {
+    await runStdio();
+}
+else {
+    console.error([
+        `${SERVER_NAME} v${SERVER_VERSION}`,
+        "",
+        "Usage:",
+        "  wellness-cgm                Run MCP stdio server (default).",
+        "  wellness-cgm --http         Run MCP Streamable HTTP server.",
+        "  wellness-cgm doctor         Local DX checks.",
+        "  wellness-cgm status         Show current configuration.",
+        "  wellness-cgm setup [client] Print MCP client config snippet.",
+        "  wellness-cgm authorize      Print Dexcom OAuth authorize URL.",
+        "  wellness-cgm exchange <code> Swap an auth code for an access_token.",
+    ].join("\n"));
+    process.exit(1);
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACzF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,SAAS,YAAY;IACnB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IAC7E,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,QAAQ;IACrB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,YAAY,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,YAAY,CAAC,CAAC;IACnE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC;IAE1F,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACxC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IAEzC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IAEtG,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;QACjH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACnB,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACzC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;YACjD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAChH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;QAC1B,OAAO,CAAC,KAAK,CAAC,GAAG,WAAW,uCAAuC,IAAI,IAAI,IAAI,MAAM,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEnC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC5B,MAAM,OAAO,EAAE,CAAC;AAClB,CAAC;KAAM,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;KAAM,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;IACzD,MAAM,QAAQ,EAAE,CAAC;AACnB,CAAC;KAAM,CAAC;IACN,OAAO,CAAC,KAAK,CACX;QACE,GAAG,WAAW,KAAK,cAAc,EAAE;QACnC,EAAE;QACF,QAAQ;QACR,+DAA+D;QAC/D,+DAA+D;QAC/D,gDAAgD;QAChD,2DAA2D;QAC3D,gEAAgE;QAChE,iEAAiE;QACjE,uEAAuE;KACxE,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/services/agent-manifest.d.ts

@@ -0,0 +1,28 @@
+import { buildCapabilities } from "./capabilities.js";
+import { buildPrivacyAudit } from "./privacy-audit.js";
+export type CgmAgentClient = "claude" | "codex" | "cursor" | "windsurf" | "hermes" | "openclaw" | "generic";
+export interface CgmAgentManifest {
+    name: string;
+    version: string;
+    client: string;
+    supported_clients: CgmAgentClient[];
+    install: {
+        command: string;
+        args: string[];
+        optional_env: string[];
+    };
+    recommended_first_calls: string[];
+    tools: ReadonlyArray<string>;
+    resources: string[];
+    agent_rules: string[];
+    community: {
+        repo: string;
+        issues: string;
+        twitter: string;
+        docs: string;
+        invite: string;
+    };
+    capabilities: ReturnType<typeof buildCapabilities>;
+    privacy: ReturnType<typeof buildPrivacyAudit>;
+}
+export declare function buildAgentManifest(client?: CgmAgentClient): CgmAgentManifest;

package/dist/services/agent-manifest.js

@@ -0,0 +1,70 @@
+import { PINNED_NPM_PACKAGE, SERVER_NAME, SERVER_VERSION } from "../constants.js";
+import { buildCapabilities } from "./capabilities.js";
+import { buildPrivacyAudit } from "./privacy-audit.js";
+const SUPPORTED_CLIENTS = [
+    "claude",
+    "codex",
+    "cursor",
+    "windsurf",
+    "hermes",
+    "openclaw",
+    "generic",
+];
+const TOOLS = [
+    "cgm_agent_manifest",
+    "cgm_capabilities",
+    "cgm_connection_status",
+    "cgm_privacy_audit",
+    "cgm_data_inventory",
+    "cgm_glucose_now",
+    "cgm_glucose_window",
+    "cgm_daily_summary",
+    "cgm_meal_response",
+    "cgm_authorize_url",
+];
+export function buildAgentManifest(client = "generic") {
+    return {
+        name: SERVER_NAME,
+        version: SERVER_VERSION,
+        client,
+        supported_clients: SUPPORTED_CLIENTS,
+        install: {
+            command: "npx",
+            args: ["-y", PINNED_NPM_PACKAGE],
+            optional_env: [
+                "DEXCOM_ENV",
+                "DEXCOM_CLIENT_ID",
+                "DEXCOM_CLIENT_SECRET",
+                "DEXCOM_REDIRECT_URI",
+                "DEXCOM_ACCESS_TOKEN",
+                "DEXCOM_REFRESH_TOKEN",
+                "WELLNESS_CGM_LOCAL_DIR",
+            ],
+        },
+        recommended_first_calls: ["cgm_connection_status", "cgm_capabilities", "cgm_glucose_now"],
+        tools: TOOLS,
+        resources: [
+            "wellness-cgm-mcp://agent-manifest",
+            "wellness-cgm-mcp://capabilities",
+            "wellness-cgm-mcp://privacy-audit",
+        ],
+        agent_rules: [
+            "Call cgm_connection_status before any provider-backed tool.",
+            "Without DEXCOM_ACCESS_TOKEN, all glucose tools return mock data — clearly tagged.",
+            "Surface the time-in-range profile being used (diabetic 70-180 vs metabolic-health 70-140).",
+            "When meal_response band is 'poor', cross-reference the meal in wellness-nourish and suggest a swap.",
+            "Treat CGM data as medical-record sensitive. Defer insulin / medication dosing to clinician.",
+            "Never claim diagnostic accuracy.",
+        ],
+        community: {
+            repo: "https://github.com/davidmosiah/wellness-cgm-mcp",
+            issues: "https://github.com/davidmosiah/wellness-cgm-mcp/issues",
+            twitter: "https://x.com/delx369",
+            docs: "https://wellness.delx.ai/connectors/cgm",
+            invite: "If wellness-cgm-mcp helps your agent close the metabolic-health loop, a star on the repository increases visibility for other AI builders.",
+        },
+        capabilities: buildCapabilities(),
+        privacy: buildPrivacyAudit(),
+    };
+}
+//# sourceMappingURL=agent-manifest.js.map

package/dist/services/agent-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-manifest.js","sourceRoot":"","sources":["../../src/services/agent-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,kBAAkB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAIvD,MAAM,iBAAiB,GAAqB;IAC1C,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,UAAU;IACV,SAAS;CACV,CAAC;AAEF,MAAM,KAAK,GAAG;IACZ,oBAAoB;IACpB,kBAAkB;IAClB,uBAAuB;IACvB,mBAAmB;IACnB,oBAAoB;IACpB,iBAAiB;IACjB,oBAAoB;IACpB,mBAAmB;IACnB,mBAAmB;IACnB,mBAAmB;CACX,CAAC;AAiBX,MAAM,UAAU,kBAAkB,CAAC,SAAyB,SAAS;IACnE,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,cAAc;QACvB,MAAM;QACN,iBAAiB,EAAE,iBAAiB;QACpC,OAAO,EAAE;YACP,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,CAAC,IAAI,EAAE,kBAAkB,CAAC;YAChC,YAAY,EAAE;gBACZ,YAAY;gBACZ,kBAAkB;gBAClB,sBAAsB;gBACtB,qBAAqB;gBACrB,qBAAqB;gBACrB,sBAAsB;gBACtB,wBAAwB;aACzB;SACF;QACD,uBAAuB,EAAE,CAAC,uBAAuB,EAAE,kBAAkB,EAAE,iBAAiB,CAAC;QACzF,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE;YACT,mCAAmC;YACnC,iCAAiC;YACjC,kCAAkC;SACnC;QACD,WAAW,EAAE;YACX,6DAA6D;YAC7D,mFAAmF;YACnF,4FAA4F;YAC5F,qGAAqG;YACrG,6FAA6F;YAC7F,kCAAkC;SACnC;QACD,SAAS,EAAE;YACT,IAAI,EAAE,iDAAiD;YACvD,MAAM,EAAE,wDAAwD;YAChE,OAAO,EAAE,uBAAuB;YAChC,IAAI,EAAE,yCAAyC;YAC/C,MAAM,EACJ,4IAA4I;SAC/I;QACD,YAAY,EAAE,iBAAiB,EAAE;QACjC,OAAO,EAAE,iBAAiB,EAAE;KAC7B,CAAC;AACJ,CAAC"}

package/dist/services/capabilities.d.ts

@@ -0,0 +1,9 @@
+import { type CgmProvider } from "../constants.js";
+export interface CgmCapabilities {
+    providers: ReadonlyArray<CgmProvider>;
+    configured: ReadonlyArray<CgmProvider>;
+    metrics: ReadonlyArray<string>;
+    privacy_modes: ReadonlyArray<"summary" | "structured" | "raw">;
+    notes: string[];
+}
+export declare function buildCapabilities(): CgmCapabilities;

package/dist/services/capabilities.js

@@ -0,0 +1,31 @@
+import { SUPPORTED_PROVIDERS } from "../constants.js";
+export function buildCapabilities() {
+    const configured = [];
+    if (process.env.DEXCOM_ACCESS_TOKEN)
+        configured.push("dexcom");
+    // libre = LibreLink Up (community proxy); not in v0.1
+    return {
+        providers: SUPPORTED_PROVIDERS,
+        configured,
+        metrics: [
+            "current_glucose_mgdl",
+            "trend_arrow",
+            "time_in_range_70_180_pct",
+            "time_in_range_70_140_pct",
+            "mean_glucose_mgdl",
+            "median_glucose_mgdl",
+            "gmi_pct",
+            "cv_pct",
+            "meal_response_band",
+        ],
+        privacy_modes: ["summary", "structured", "raw"],
+        notes: [
+            "Dexcom v0.1 ships against the official Developer API (sandbox + production).",
+            "FreeStyle Libre via LibreLink Up community proxy is roadmapped for v0.2.",
+            "Without a Dexcom token, all glucose tools return mock readings so agents can demo the surface.",
+            "Time-in-range uses two profiles: ADA diabetic (70-180 mg/dL) AND Levels-style metabolic-health (70-140 mg/dL).",
+            "GMI (estimated A1C) is computed via Bergenstal 2018 formula: 3.31 + 0.02392 × mean(mg/dL).",
+        ],
+    };
+}
+//# sourceMappingURL=capabilities.js.map