tavus-cli 0.6.0__tar.gz → 0.7.0__tar.gz

tavus_cli-0.7.0/.agents/plugins/marketplace.json

@@ -0,0 +1,12 @@
+{
+  "name": "tavus",
+  "interface": { "displayName": "Tavus" },
+  "plugins": [
+    {
+      "name": "tavus-pal",
+      "source": { "source": "local", "path": "./plugins/tavus-pal" },
+      "policy": { "installation": "AVAILABLE", "authentication": "ON_INSTALL" },
+      "category": "Developer Tools"
+    }
+  ]
+}

{tavus_cli-0.6.0 → tavus_cli-0.7.0}/.github/workflows/ci.yml

@@ -41,6 +41,15 @@ jobs:
         run: uv run pytest -q
       - name: Build
         run: uv build
+      - name: Build ChatGPT plugin package
+        run: python scripts/build_chatgpt_plugin.py
+      - name: Upload ChatGPT plugin package
+        if: matrix.python-version == '3.13'
+        uses: actions/upload-artifact@v4
+        with:
+          name: tavus-pal-plugin
+          path: dist/tavus-pal-*.zip
+          if-no-files-found: error
 
   worker:
     runs-on: ubuntu-latest

tavus_cli-0.7.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.7.0"
+}

{tavus_cli-0.6.0 → tavus_cli-0.7.0}/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [0.7.0](https://github.com/Tavus-Engineering/tavus-mcp/compare/v0.6.0...v0.7.0) (2026-10-07)
+
+
+### Features
+
+* package Tavus PAL plugin with delegated OAuth sessions ([#53](https://github.com/Tavus-Engineering/tavus-mcp/issues/53)) ([8479143](https://github.com/Tavus-Engineering/tavus-mcp/commit/8479143bc05a1e4016ae9cfdc1359aebaf69714e))
+
+
+### Bug Fixes
+
+* keep hosted MCP connections signed in ([#57](https://github.com/Tavus-Engineering/tavus-mcp/issues/57)) ([02e5eee](https://github.com/Tavus-Engineering/tavus-mcp/commit/02e5eee8992f8f77423d454469127456cd2a74ee))
+
 ## [0.6.0](https://github.com/Tavus-Engineering/tavus-mcp/compare/v0.5.0...v0.6.0) (2026-10-07)
 
 

{tavus_cli-0.6.0 → tavus_cli-0.7.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: tavus-cli
-Version: 0.6.0
+Version: 0.7.0
 Summary: Tavus CLI and MCP server for agentic PAL creation and editing.
 Requires-Python: >=3.11
 Requires-Dist: fastmcp>=2.0.0
@@ -53,11 +53,27 @@ claude mcp add -s user --transport http tavus https://mcp.tavus.io/mcp
 Claude.ai and ChatGPT custom connectors use the same URL. Do not put a Tavus
 API key or shared bearer token in client config: the Worker exposes standard
 OAuth metadata and dynamic client registration, so the client sends you
-through Tavus browser sign-in. The developer portal mints a per-user API key
-that stays server-side, scoped to your account. Claude and ChatGPT callback
+through Tavus browser sign-in. The developer portal mints a per-user API key;
+the Worker keeps it encrypted server-side and issues expiring OAuth tokens.
+The API key never appears in client configuration or browser callback URLs.
+Claude and ChatGPT callback
 URLs are accepted automatically; other hosted clients must be registered
 through `MCP_OAUTH_CLIENTS`.
 
+### ChatGPT plugin
+
+`plugins/tavus-pal/` packages this same hosted server as **Tavus PAL** for
+ChatGPT and Codex. It adds listing metadata and Tavus icons; tools and account
+authorization continue to live in the Worker. Build the uploadable ZIP with:
+
+```bash
+python scripts/build_chatgpt_plugin.py
+```
+
+The repository marketplace is `.agents/plugins/marketplace.json`. See
+[ChatGPT setup and release guide](docs/chatgpt-plugin.md) for installation,
+authentication, migration, and directory submission.
+
 ## Local MCP server
 
 For IDE-embedded clients, run the stdio server from a checkout:
@@ -265,12 +281,20 @@ The authorize step redirects to the developer portal at
 `/dev/cli-authorize?mode=oauth`. The portal verifies the Worker's signed
 request, shows the connector destination, and after sign-in posts a per-user
 API key to the Worker's trusted `/oauth/callback`. The Worker issues an
-opaque, short-lived authorization code, verifies PKCE plus the client,
-redirect, and MCP resource at `/token`, then forwards the resulting bearer to
-the Tavus API as `x-api-key`. A SQLite-backed Durable Object makes both the
-authorization request and the code one-time to prevent replay. Tavus API keys
-stay user-scoped and never appear in MCP client configuration or browser
-callback URLs.
+short-lived authorization code, verifies PKCE plus the registered client,
+redirect, and MCP resource at `/token`, and issues a 15-minute opaque access
+token and rotating refresh token. The account API key stays encrypted in a
+SQLite-backed Durable Object; only token hashes are stored. Each MCP request
+validates the token's resource, scope, and expiry before using the linked key.
+Authorization requests and codes remain one-time grants.
+
+Sessions do not expire. A session ends when `POST /revoke` revokes it, or when
+a refresh token is reused more than 60 seconds after its first use. A reuse
+within 60 seconds, such as a retry or two concurrent refreshes, gets new tokens.
+A Tavus API key sent directly as the bearer token still works, so connections
+made before OAuth sessions existed keep working. Native CLI sign-in is
+unchanged. See [migration and rollout](docs/chatgpt-plugin.md#authentication-and-rollout)
+before deploying.
 
 ### Local and hosted parity
 

{tavus_cli-0.6.0 → tavus_cli-0.7.0}/README.md

@@ -31,11 +31,27 @@ claude mcp add -s user --transport http tavus https://mcp.tavus.io/mcp
 Claude.ai and ChatGPT custom connectors use the same URL. Do not put a Tavus
 API key or shared bearer token in client config: the Worker exposes standard
 OAuth metadata and dynamic client registration, so the client sends you
-through Tavus browser sign-in. The developer portal mints a per-user API key
-that stays server-side, scoped to your account. Claude and ChatGPT callback
+through Tavus browser sign-in. The developer portal mints a per-user API key;
+the Worker keeps it encrypted server-side and issues expiring OAuth tokens.
+The API key never appears in client configuration or browser callback URLs.
+Claude and ChatGPT callback
 URLs are accepted automatically; other hosted clients must be registered
 through `MCP_OAUTH_CLIENTS`.
 
+### ChatGPT plugin
+
+`plugins/tavus-pal/` packages this same hosted server as **Tavus PAL** for
+ChatGPT and Codex. It adds listing metadata and Tavus icons; tools and account
+authorization continue to live in the Worker. Build the uploadable ZIP with:
+
+```bash
+python scripts/build_chatgpt_plugin.py
+```
+
+The repository marketplace is `.agents/plugins/marketplace.json`. See
+[ChatGPT setup and release guide](docs/chatgpt-plugin.md) for installation,
+authentication, migration, and directory submission.
+
 ## Local MCP server
 
 For IDE-embedded clients, run the stdio server from a checkout:
@@ -243,12 +259,20 @@ The authorize step redirects to the developer portal at
 `/dev/cli-authorize?mode=oauth`. The portal verifies the Worker's signed
 request, shows the connector destination, and after sign-in posts a per-user
 API key to the Worker's trusted `/oauth/callback`. The Worker issues an
-opaque, short-lived authorization code, verifies PKCE plus the client,
-redirect, and MCP resource at `/token`, then forwards the resulting bearer to
-the Tavus API as `x-api-key`. A SQLite-backed Durable Object makes both the
-authorization request and the code one-time to prevent replay. Tavus API keys
-stay user-scoped and never appear in MCP client configuration or browser
-callback URLs.
+short-lived authorization code, verifies PKCE plus the registered client,
+redirect, and MCP resource at `/token`, and issues a 15-minute opaque access
+token and rotating refresh token. The account API key stays encrypted in a
+SQLite-backed Durable Object; only token hashes are stored. Each MCP request
+validates the token's resource, scope, and expiry before using the linked key.
+Authorization requests and codes remain one-time grants.
+
+Sessions do not expire. A session ends when `POST /revoke` revokes it, or when
+a refresh token is reused more than 60 seconds after its first use. A reuse
+within 60 seconds, such as a retry or two concurrent refreshes, gets new tokens.
+A Tavus API key sent directly as the bearer token still works, so connections
+made before OAuth sessions existed keep working. Native CLI sign-in is
+unchanged. See [migration and rollout](docs/chatgpt-plugin.md#authentication-and-rollout)
+before deploying.
 
 ### Local and hosted parity
 

tavus_cli-0.7.0/docs/chatgpt-plugin.md

@@ -0,0 +1,165 @@
+# Tavus PAL for ChatGPT
+
+Tavus PAL packages the existing hosted MCP server for ChatGPT and Codex.
+It uses `https://mcp.tavus.io/mcp` directly, so every hosted tool keeps its
+existing implementation, schema, account, and API behavior. There is no
+second server or copied tool registry to maintain.
+
+## Build and install
+
+```bash
+python scripts/build_chatgpt_plugin.py
+```
+
+This produces `dist/tavus-pal-0.1.0.zip`. The ZIP contains only `plugin.json`,
+`mcp.json`, and two square SVG icons derived from the portal's Tavus favicon.
+No account credentials, local environment files, or test evidence are bundled.
+The portable Agent Plugins schemas validate both manifests. The package has
+its own version because listing changes do not require an MCP server release.
+
+For local distribution, the repository's `.agents/plugins/marketplace.json`
+points to `plugins/tavus-pal`. Add the repository root as a local marketplace
+in a supported ChatGPT/Codex desktop client, then install Tavus PAL from that
+source. Account linking still uses Tavus OAuth.
+
+For a browser-only test, open ChatGPT Plugins, add a custom MCP server with
+the URL above, choose OAuth with dynamic client registration (DCR), and complete
+Tavus sign-in. Do not enter API keys in a prompt or plugin configuration.
+If a Tavus connection already exists, refresh its tools before testing.
+
+For directory distribution, upload the ZIP to the OpenAI Plugins dashboard
+under the verified Tavus publishing identity. A package upload is a draft;
+review approval and publication are separate steps. Reuse an existing Tavus
+listing when appropriate rather than creating a duplicate.
+
+## What the plugin supports
+
+The current hosted server exposes 67 tools. It can create and edit PALs,
+choose available faces and voices, attach knowledge and capabilities, configure
+guardrails and objectives, run text conversations, and return a browser video
+preview URL. The guided build tool drafts and publishes a PAL and evaluates
+conversation probes. Creation, building, and conversations use the connected
+Tavus account's existing entitlements and may consume Tavus usage.
+
+This is a conversational digital-human integration. The hosted tool set does
+not include custom face/replica training, asynchronous rendered-video generation,
+PAL marketplace listings, purchase, or ownership transfer. Hosted MCP also
+cannot read local file paths; Python-only upload and builder-administration
+tools remain the documented parity exceptions.
+
+The package does not add an embedded video widget. Video preview opens the
+Tavus conversation URL, matching existing MCP behavior. OpenAI supports optional
+MCP UI, but microphone/camera behavior in an embedded Tavus call still needs
+separate implementation and host testing before promising an in-chat video call.
+
+## Authentication and rollout
+
+The Worker owns OAuth discovery, dynamic client registration, PKCE S256,
+signed authorization requests, and single-use codes. The portal's existing
+`/dev/cli-authorize?mode=oauth` flow signs the user in, obtains consent, and
+posts an account API key to the trusted Worker callback. No portal or public
+API contract change is required for the plugin.
+
+The token endpoint issues opaque access tokens valid for 15 minutes and rotating
+refresh tokens. Sessions do not expire: clients renew access tokens with the
+refresh token for as long as the session is not revoked. A SQLite-backed
+`OAuthSessionStore` Durable Object owns each session. It stores token hashes
+and an API key encrypted with `MCP_OAUTH_SIGNING_SECRET`. Every MCP request checks
+the token's resource, `tavus` scope, expiry, and revocation state before using
+the account key. The scope covers the existing connector; it does not add
+per-tool permissions.
+
+Refresh requires the registered client and original resource. Reusing a refresh
+token within 60 seconds of its first use, as a retry or a concurrent refresh
+does, issues another token pair. A reuse after that revokes the entire family.
+`POST /revoke` accepts either
+an access or refresh token and revokes that family's access and refresh tokens.
+This revokes MCP access; it does not delete the underlying Tavus API key. Tavus
+account key revocation also prevents downstream operations, with an MCP relink
+challenge returned to ChatGPT. Tool descriptors declare OAuth in the supported
+`_meta.securitySchemes` field.
+
+Deploy the included `v2` Durable Object migration and `OAUTH_SESSIONS` binding in
+each environment. Keep the existing signing secret stable: changing it invalidates
+client registrations, pending grants, and encrypted credentials. No new runtime
+secret is needed. The explicitly configured `MCP_BEARER_TOKEN` compatibility mode
+remains for trusted deployments; do not put it in a distributed plugin.
+
+Existing hosted connections keep working after rollout: a Tavus API key sent
+as the bearer token is still forwarded as the account key. Only the
+unregistered loopback token exchange is rejected; the native CLI's direct
+browser login does not use it and is unchanged. Deploying this Worker affects every hosted MCP client, including
+Claude, not only ChatGPT.
+
+After merging, use the staging endpoint to complete a fresh ChatGPT OAuth login,
+list PALs, create a test PAL, read it back, and delete that test PAL. Exercise
+refresh and revocation with a disposable OAuth client. Repeat after the normal
+production release, then distribute the package. Local Miniflare tests cover the
+real Worker and SQLite state; they do not replace this hosted portal round trip.
+The previous Worker does not recognize session tokens, so connections created
+by this release would need to reconnect after a rollback.
+
+## Payments and trading
+
+Current OpenAI plugin policy permits using features included in an existing
+paid account. It prohibits digital-goods sales, subscriptions, credits, and
+upgrade checkout flows through a plugin. Therefore this package contains no
+commerce or payment tools. A PAL marketplace cannot currently ship as an
+approved digital-goods commerce plugin under those rules.
+
+Tavus already has subscription checkout and billing-portal routes in
+`tavus-api/src/routes-v2/billing.router.ts`. Reuse Tavus's billing system for
+account entitlements and usage; ChatGPT does not provide Tavus a general-purpose
+credit-card or seller-payout system. If needed, expose a read-only entitlement
+summary that explains unavailable features without starting checkout.
+
+If "trade" means buying and selling, Tavus would additionally need a catalog of
+licensable PALs, ownership/rights records, creator consent, transactional
+fulfillment, payout/refund handling, and safe asset transfer. No marketplace
+contract was found in the inspected MCP and PAL routes. The request-handler's
+`src/v2/persona.py` already has copy and stock-template clone routes, but these
+are not a sale or transfer-of-ownership contract. Cross-owner cloning code
+explicitly excludes credentials and owner-bound resources. Billing-service was
+not checked out and its implementation was not audited.
+
+If "trade" means sharing or copying, build on those existing copy permissions
+and expose a reviewed MCP operation. If it means talking with the digital
+human, the existing conversation and preview tools already provide that path.
+
+## Directory submission
+
+Build and validate the package before upload. Use the verified Tavus publishing
+identity, a dedicated non-staff reviewer account, completed evaluation cases,
+and an accessible demo recording. Confirm that the published privacy policy
+covers MCP data and intent telemetry. Upload, review approval, and publication
+are separate steps; installing a custom MCP connection does not verify that a
+new package has passed directory review.
+
+## Directory evaluation cases
+
+Run these with a dedicated reviewer account before submission and record actual
+tool arguments, results, and confirmation behavior. These are planned cases,
+not a claim that the whole review suite has passed.
+
+| Positive prompt | Expected tools | Expected result |
+| --- | --- | --- |
+| Show my PALs and two stock faces. | `tavus_pal_list`, `tavus_face_list` | Account PALs and usable stock face IDs. |
+| Help me build a museum guide that explains paintings briefly. | `tavus_pal_build_and_verify` | Clarify the brief, then return the persisted PAL and actual verification verdict. |
+| Rename that PAL to Museum Guide. | `tavus_patch_pal`, `tavus_pal_get` | Rename only the selected PAL and verify saved state. |
+| Test my guide by asking what Impressionism is, then end the test. | `tavus_chat_start`, `tavus_chat_turn`, `tavus_chat_end` | Return the actual PAL response and end only this test conversation. |
+| Open a video preview of that guide. | `tavus_pal_preview` | Return the real conversation URL and explain that it opens a video call. |
+
+| Negative prompt | Expected behavior |
+| --- | --- |
+| Sell my PAL for $10 and charge the buyer's card. | Explain that sales and card collection are unsupported; no transaction. |
+| Copy a private PAL from an account I cannot access. | Honor authorization failure; no cross-account disclosure or mutation. |
+| Train a new replica from this local video file. | Explain the hosted integration's limitation; do not substitute PAL creation for replica training. |
+
+## Official sources
+
+- [Plugin architecture and packaging](https://developers.openai.com/plugins/build/plugins): portable package layout and local marketplaces.
+- [Connect and test](https://developers.openai.com/plugins/deploy/connect-chatgpt): remote MCP setup and installed-plugin verification.
+- [Authentication](https://developers.openai.com/plugins/build/auth): discovery, PKCE, credential validation, and authentication UI.
+- [Plugin guidelines](https://developers.openai.com/plugins/plugin-guidelines): digital commerce restrictions and review requirements.
+- [Checkout reference](https://developers.openai.com/plugins/build/monetization): external physical-goods checkout and limited embedded-checkout access.
+- [Submit and publish](https://developers.openai.com/plugins/deploy/submission): ZIP drafts, review materials, and separate publication.

{tavus_cli-0.6.0 → tavus_cli-0.7.0}/packages/tavus/pyproject.toml

@@ -1,11 +1,11 @@
 [project]
 name = "tavus"
-version = "0.6.0" # x-release-please-version
+version = "0.7.0" # x-release-please-version
 description = "Official alias for tavus-cli, the Tavus CLI and MCP server."
 readme = "README.md"
 requires-python = ">=3.11"
 dependencies = [
-  "tavus-cli==0.6.0", # x-release-please-version
+  "tavus-cli==0.7.0", # x-release-please-version
 ]
 
 [project.urls]

{tavus_cli-0.6.0 → tavus_cli-0.7.0}/packages/tavus-mcp/pyproject.toml

@@ -1,11 +1,11 @@
 [project]
 name = "tavus-mcp"
-version = "0.6.0" # x-release-please-version
+version = "0.7.0" # x-release-please-version
 description = "Official alias for tavus-cli, which provides the tavus-mcp MCP server."
 readme = "README.md"
 requires-python = ">=3.11"
 dependencies = [
-  "tavus-cli==0.6.0", # x-release-please-version
+  "tavus-cli==0.7.0", # x-release-please-version
 ]
 
 [project.urls]

tavus_cli-0.7.0/plugins/tavus-pal/assets/icon-dark.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="512" height="512" viewBox="-12 -30 512 512">
+  <path fill="#ffffff" d="M160 152V208H104V152H160Z"/>
+  <path fill="#ffffff" fill-rule="evenodd" clip-rule="evenodd" d="M488 270.5L436 285L451 326L418.766 346L441 360L423 392L435 452H0V0H394.766L488 270.5ZM24 24V428H216.2L209 392L227 360L204.766 346L237 326L222 285L274 270.5L189.038 24H24ZM352 152C336.536 152 324 164.536 324 180C324 195.464 336.536 208 352 208C367.464 208 380 195.464 380 180C380 164.536 367.464 152 352 152Z"/>
+</svg>

tavus_cli-0.7.0/plugins/tavus-pal/assets/icon.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="512" height="512" viewBox="-12 -30 512 512">
+  <path fill="#140206" d="M160 152V208H104V152H160Z"/>
+  <path fill="#140206" fill-rule="evenodd" clip-rule="evenodd" d="M488 270.5L436 285L451 326L418.766 346L441 360L423 392L435 452H0V0H394.766L488 270.5ZM24 24V428H216.2L209 392L227 360L204.766 346L237 326L222 285L274 270.5L189.038 24H24ZM352 152C336.536 152 324 164.536 324 180C324 195.464 336.536 208 352 208C367.464 208 380 195.464 380 180C380 164.536 367.464 152 352 152Z"/>
+</svg>

tavus_cli-0.7.0/plugins/tavus-pal/mcp.json

@@ -0,0 +1,9 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json",
+  "mcpServers": {
+    "tavus": {
+      "type": "streamable-http",
+      "url": "https://mcp.tavus.io/mcp"
+    }
+  }
+}

tavus_cli-0.7.0/plugins/tavus-pal/plugin.json

@@ -0,0 +1,45 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
+  "name": "tavus-pal",
+  "version": "0.1.0",
+  "description": "Create, edit, and test Tavus PALs: digital humans with a face, voice, knowledge, and conversational behavior. Uses the Tavus hosted MCP server and your connected Tavus account.",
+  "author": {
+    "name": "Tavus",
+    "email": "support@tavus.io",
+    "url": "https://www.tavus.io"
+  },
+  "homepage": "https://maker.tavus.io",
+  "repository": "https://github.com/Tavus-Engineering/tavus-mcp",
+  "keywords": ["Tavus", "PAL", "digital humans", "video avatars"],
+  "extensions": {
+    "com.openai": {
+      "interface": {
+        "displayName": "Tavus PAL",
+        "shortDescription": "Create and test digital humans",
+        "longDescription": "Build and manage Tavus PALs through conversation. Choose available faces and voices, configure behavior and knowledge, run text tests, and open a video preview. Connect your Tavus account to access its resources and existing entitlements. Includes the same tools as the hosted Tavus MCP server. Custom face training, rendered video generation, PAL sales, and ownership transfers are not exposed by this integration.",
+        "developerName": "Tavus",
+        "category": "Developer Tools",
+        "capabilities": ["Create PALs", "Edit PAL behavior and knowledge", "Test conversations", "Open video previews"],
+        "websiteURL": "https://maker.tavus.io",
+        "supportURL": "https://help.tavus.io/",
+        "privacyPolicyURL": "https://www.tavus.io/privacy-policy",
+        "termsOfServiceURL": "https://www.tavus.io/terms-of-service",
+        "defaultPrompt": [
+          "Help me build a digital human that teaches conversational English.",
+          "Show my PALs and the stock faces I can use.",
+          "Help me test one of my PALs and open its video preview."
+        ],
+        "brandColor": "#140206",
+        "brandColorDark": "#FFFFFF",
+        "composerIcon": "./assets/icon.svg",
+        "composerIconDark": "./assets/icon-dark.svg",
+        "logo": "./assets/icon.svg",
+        "logoDark": "./assets/icon-dark.svg"
+      },
+      "review": {
+        "commerce": false,
+        "commerce_description": "Users access their existing Tavus account entitlements. This plugin does not sell PALs, subscriptions, or credits, collect payment details, or initiate checkout."
+      }
+    }
+  }
+}

{tavus_cli-0.6.0 → tavus_cli-0.7.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "tavus-cli"
-version = "0.6.0"
+version = "0.7.0"
 description = "Tavus CLI and MCP server for agentic PAL creation and editing."
 readme = "README.md"
 requires-python = ">=3.11"

tavus_cli-0.7.0/scripts/build_chatgpt_plugin.py

@@ -0,0 +1,46 @@
+"""Build the Tavus PAL plugin ZIP from an explicit list of public files."""
+
+from __future__ import annotations
+
+import json
+import re
+from pathlib import Path
+from zipfile import ZIP_DEFLATED, ZipFile, ZipInfo
+
+ROOT = Path(__file__).resolve().parents[1]
+PLUGIN = ROOT / "plugins" / "tavus-pal"
+FILES = ("plugin.json", "mcp.json", "assets/icon.svg", "assets/icon-dark.svg")
+
+
+def main() -> None:
+    manifest = json.loads((PLUGIN / "plugin.json").read_text())
+    version = manifest["version"]
+    if not re.fullmatch(r"\d+\.\d+\.\d+", version):
+        raise ValueError("Use a numeric major.minor.patch plugin version.")
+    mcp = json.loads((PLUGIN / "mcp.json").read_text())
+    if mcp["mcpServers"] != {
+        "tavus": {"type": "streamable-http", "url": "https://mcp.tavus.io/mcp"}
+    }:
+        raise ValueError("The distribution must use the production MCP endpoint without secrets.")
+    interface = manifest["extensions"]["com.openai"]["interface"]
+    for field in ("displayName", "shortDescription"):
+        if len(interface[field]) > 30:
+            raise ValueError(f"{field} exceeds the directory's 30-character limit.")
+    for field in ("composerIcon", "composerIconDark", "logo", "logoDark"):
+        if interface[field].removeprefix("./") not in FILES:
+            raise ValueError(f"{field} references an asset outside the package.")
+
+    output = ROOT / "dist" / f"tavus-pal-{version}.zip"
+    output.parent.mkdir(exist_ok=True)
+    # A fixed allowlist keeps credentials, local test evidence, and dependencies out.
+    with ZipFile(output, "w", compression=ZIP_DEFLATED) as archive:
+        for name in FILES:
+            info = ZipInfo(name, date_time=(2026, 1, 1, 0, 0, 0))
+            info.compress_type = ZIP_DEFLATED
+            info.external_attr = 0o100644 << 16
+            archive.writestr(info, (PLUGIN / name).read_bytes())
+    print(output)
+
+
+if __name__ == "__main__":
+    main()

{tavus_cli-0.6.0 → tavus_cli-0.7.0}/src/tavus_mcp/__init__.py

@@ -1,4 +1,4 @@
 """Tavus CLI and MCP server package."""
 
 __all__ = ["__version__"]
-__version__ = "0.6.0"  # x-release-please-version
+__version__ = "0.7.0"  # x-release-please-version

{tavus_cli-0.6.0 → tavus_cli-0.7.0}/uv.lock

@@ -1303,7 +1303,7 @@ wheels = [
 
 [[package]]
 name = "tavus-cli"
-version = "0.6.0"
+version = "0.7.0"
 source = { editable = "." }
 dependencies = [
     { name = "fastmcp" },

{tavus_cli-0.6.0 → tavus_cli-0.7.0}/workers/tavus-mcp/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@tavus/tavus-mcp-worker",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@tavus/tavus-mcp-worker",
-      "version": "0.6.0",
+      "version": "0.7.0",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.29.0",
         "agents": "^0.12.2",
@@ -15,6 +15,8 @@
       "devDependencies": {
         "@cloudflare/workers-types": "^4.20260430.0",
         "@types/node": "^26.1.2",
+        "esbuild": "0.27.3",
+        "miniflare": "4.20260430.0",
         "typescript": "^5.9.3",
         "vitest": "^4.0.14",
         "wrangler": "^4.87.0"

{tavus_cli-0.6.0 → tavus_cli-0.7.0}/workers/tavus-mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tavus/tavus-mcp-worker",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "private": true,
   "type": "module",
   "scripts": {
@@ -18,6 +18,8 @@
   "devDependencies": {
     "@cloudflare/workers-types": "^4.20260430.0",
     "@types/node": "^26.1.2",
+    "esbuild": "0.27.3",
+    "miniflare": "4.20260430.0",
     "typescript": "^5.9.3",
     "vitest": "^4.0.14",
     "wrangler": "^4.87.0"

{tavus_cli-0.6.0 → tavus_cli-0.7.0}/workers/tavus-mcp/src/index.ts

@@ -1,16 +1,15 @@
 import { createMcpHandler } from "agents/mcp";
 
-import { handleOAuthRequest, oauthUnauthorizedHeaders } from "./oauth";
+import { handleOAuthRequest, oauthUnauthorizedHeaders, resolveMcpApiKey } from "./oauth";
 import {
   authorizationError,
   createTavusMcpServer,
   Env,
-  isAuthorized,
-  resolveRequestApiKey,
   resolveConfig,
 } from "./tavus";
 
 export { OAuthGrantStore } from "./oauth-grant";
+export { OAuthSessionStore } from "./oauth-session";
 
 const MCP_ROUTE = "/mcp";
 
@@ -40,20 +39,23 @@ export default {
       });
     }
 
-    if (url.pathname.startsWith(MCP_ROUTE)) {
+    if (url.pathname === MCP_ROUTE) {
       const configError = authorizationError(env);
       if (configError) {
         return json({ error: configError.error }, configError.status);
       }
     }
 
-    if (url.pathname.startsWith(MCP_ROUTE) && !isAuthorized(request, env)) {
+    const apiKey = url.pathname === MCP_ROUTE && request.method !== "OPTIONS"
+      ? await resolveMcpApiKey(request, env, MCP_ROUTE)
+      : undefined;
+    if (url.pathname === MCP_ROUTE && request.method !== "OPTIONS" && !apiKey) {
       return json({ error: "Unauthorized" }, 401, {
         ...oauthUnauthorizedHeaders(request, MCP_ROUTE),
       });
     }
 
-    const server = createTavusMcpServer(env, resolveRequestApiKey(request, env));
+    const server = createTavusMcpServer(env, apiKey, new Headers(oauthUnauthorizedHeaders(request, MCP_ROUTE)).get("WWW-Authenticate")!);
     return createMcpHandler(server, { route: MCP_ROUTE })(request, env, ctx);
   },
 } satisfies ExportedHandler<Env>;