dexter-dao/dexter-mcp

Dexter API · Dexter FE · Dexter MCP · Dexter Vault · Dexter Facilitator

This repository contains one codebase for two independently deployed OAuth MCP services and the shared @dexterai/x402-core package:

The npm packages (@dexterai/opendexter, @dexterai/x402-discovery) live in Dexter-DAO/opendexter-ide.

This OpenDexter source candidate requires the coordinated internal package train recorded in release/opendexter-dependency-train.json. Its release runtime is Node ^20.19.0 || >=22.12.0, matching the pinned Vite toolchain; npm run verify:release:runtime checks that boundary before install or build. The exact internal versions are published and this candidate carries a registry-resolved lock. Release construction fails closed if either the lock or installed graph drifts from the recorded train. An isolated local source train and its installed dependency graph can be checked without deploying:

OPENDXTER_IDE_SOURCE=/absolute/path/to/opendexter-ide-candidate \
DEXTER_VAULT_SDK_SOURCE=/absolute/path/to/dexter-vault-sdk-candidate \
OPENDEXTER_API_SOURCE_ROOT=/absolute/path/to/dexter-api-candidate \
OPENDEXTER_FACILITATOR_SOURCE_ROOT=/absolute/path/to/dexter-facilitator-candidate \
OPENDXTER_RUNTIME_ROOT=/absolute/path/to/disposable-installed-graph \
  npm run verify:release:source

The source gate verifies the current Node runtime, package Git provenance, exact installed versions, source-link destinations, built entrypoints, and npm peer closure. Before npm can run, it rejects dirty or unpinned external source repositories and any pack lifecycle hook outside the exact reviewed contract.