SWI-10226 feat: add Express Registration API + zero-to-one auth flow - #6

Closed

kshahbw wants to merge 58 commits into

mainfrom

feat/express-registration

Commits on Mar 27, 2026

test: add Express Registration API spec fixture
kshahbw
committed
eae175e
feat: add Express Registration API with no-auth support

kshahbw
and
claude
committed
12a0a65
fix: assert Authorization header absent in no-auth Express test

kshahbw
and
claude
committed
1edb162
test: add Express tool parameter validation tests
kshahbw
committed
fe757ae
docs: add Express Registration API to README

kshahbw
and
claude
committed
b88e761
fix: rename Express verifyCode to verifyRegistrationCode to avoid MFA collision

kshahbw
and
claude
committed
aa91d68
feat: zero-to-one auth flow — optional startup credentials + setCredentials tool

kshahbw
and
claude
committed
da73918
fix: address code review — idempotency guard, mutable defaults, test fidelity

kshahbw
and
claude
committed
800414f

Commits on Mar 30, 2026

feat: serve CLI agent reference as MCP resource

kshahbw
and
claude
committed
7664a2f
Revert "feat: serve CLI agent reference as MCP resource"
kshahbw
committed
0f0a121
docs: add AGENTS.md — structured agent reference for MCP server tools

kshahbw
and
claude
committed
6b28c6d

Commits on Apr 2, 2026

docs: add MCP server v2 design spec — instructions, hosting, callbacks, voice

kshahbw
and
claude
committed
6ffddc0
docs: resolve open questions in v2 design spec

kshahbw
and
claude
committed
3f10374
docs: add multi-session safety to v2 design spec

kshahbw
and
claude
committed
92d9681
docs: add MCP server v2 implementation plan — 11 tasks, TDD, full code

kshahbw
and
claude
committed
3f3d80d
feat: add dynamic instructions builder for MCP initialization

kshahbw
and
claude
committed
af637be
feat: add tool profiles for context window management

kshahbw
and
claude
committed
4818800
fix: update test_servers resource count assertion (2 → 3)

kshahbw
and
claude
committed
ccc0de9
feat: add local spec caching with fallback on network failure

kshahbw
and
claude
committed
4186810
feat: wire dynamic instructions into FastMCP initialization

kshahbw
and
claude
committed
ea7a4bb
feat: add in-memory event store with per-session cursors and call state

kshahbw
and
claude
committed
9ac028f
fix: add sleep to event store timestamp test to prevent flakiness

kshahbw
and
claude
committed
23ad7bf
feat: add Starlette callback routes for messaging and voice webhooks

kshahbw
and
claude
committed
a4fcf37
feat: add getInboundMessages and getCallbackEvents MCP tools

kshahbw
and
claude
committed
50f137f
feat: add generateBXML and respondToCallback voice tools

kshahbw
and
claude
committed
88031bb
feat: wire transport config, callbacks, voice tools, and instructions into app

kshahbw
and
claude
committed
e16631f
docs: update AGENTS.md and README with callbacks, voice, hosting, and profiles

kshahbw
and
claude
committed
d9d952b
test: add integration tests for full MCP server setup

kshahbw
and
claude
committed
128173c
fix: bundle express spec locally, support local file paths in spec loader

kshahbw
and
claude
committed
5ccaeca
fix: use FastMCP custom_route for callbacks instead of Starlette mount

kshahbw
and
claude
committed
76e1fae
fix: make account_id optional in setCredentials

kshahbw
and
claude
committed
3ea68f9
feat: switch to OAuth2 client credentials flow, drop Basic Auth

kshahbw
and
claude
committed
4c52a7a
feat: add voice, numbers, and toll-free-verification API specs

kshahbw
and
claude
committed
b5cd490
fix: remove hardcoded tool count from server tests

kshahbw
and
claude
committed
6d41ce1
docs: update all documentation for OAuth2 auth and new capabilities

kshahbw
and
claude
committed
9f79319
chore: add .DS_Store, .obsidian, .serena, .mcp.json to gitignore

kshahbw
and
claude
committed
a3acb40
fix: package bundled specs correctly for uvx installation

kshahbw
and
claude
committed
05e1638
fix: resolve listCalls tool collision between voice and insights specs

kshahbw
and
claude
committed
5f08ab8
fix: config dict reference bug and test isolation for mid-session auth

kshahbw
and
claude
committed
23e65bc
fix: bundle AGENTS.md as package data for uvx installs

kshahbw
and
claude
committed
36e1c8f
feat: add configureCallbacks tool to wire webhook URLs on Bandwidth apps

kshahbw
and
claude
committed
922cd44
fix: redact secrets from resource://config, remove dead Basic Auth helper

kshahbw
and
claude
committed
823691c
fix: rewrite instructions with step-by-step recipes for voice and messaging

kshahbw
and
claude
committed
d768c36
feat: load all tools at startup regardless of auth state

kshahbw
and
claude
committed
eb082b6
chore: bump version to 0.2.0 for uvx cache bust

kshahbw
and
claude
committed
d17db4a
fix: include all Python modules in wheel build

kshahbw
and
claude
committed
6857cfd
fix: patch Bandwidth numbers spec for OpenAPI compatibility

kshahbw
and
claude
committed
404cffc
feat: default to curated 21-tool set, numbers spec opt-in via profile

kshahbw
and
claude
committed
249c1b4
chore: bump version to 0.3.0

kshahbw
and
claude
committed
b40cb6c
fix: use FastMCP lifespan for setup to prevent initialization race

kshahbw
and
claude
committed
b6c72b4

Commits on Apr 3, 2026

fix: remove broken Numbers API (XML), add follow_redirects, curate profiles

kshahbw
and
claude
committed
2328aad
feat: auto-tunnel via cloudflared for dev mode callbacks

kshahbw
and
claude
committed
cf01cf2
feat: pre-queue BXML before call is answered, fix answer callback flow

kshahbw
and
claude
committed
91d8e7b
fix: register callback routes at module level, not in lifespan

kshahbw
and
claude
committed
4132216
fix: rewrite voice instructions with concrete values from config

kshahbw
and
claude
committed
5f629b1
feat: add discovery tools — listApplications, listPhoneNumbers, createApplication

kshahbw
and
claude
committed
22222c9
fix: configureCallbacks uses Dashboard XML API, auto-configure on startup

kshahbw
and
claude
committed
4a2be02

Commits on Apr 8, 2026

chore: remove redundant files and dead imports

kshahbw
and
claude
committed
87b8b5f