@absolutejs/mcp 0.12.0 → 0.14.0

package/dist/manifest.js

@@ -63,22 +63,22 @@ var TypeSystemPolicy;
 // node_modules/@sinclair/typebox/build/esm/type/guard/value.mjs
 var exports_value = {};
 __export(exports_value, {
-  IsUndefined: () => IsUndefined2,
-  IsUint8Array: () => IsUint8Array,
-  IsSymbol: () => IsSymbol,
-  IsString: () => IsString,
-  IsRegExp: () => IsRegExp,
-  IsObject: () => IsObject2,
-  IsNumber: () => IsNumber2,
-  IsNull: () => IsNull,
-  IsIterator: () => IsIterator,
-  IsFunction: () => IsFunction,
-  IsDate: () => IsDate,
-  IsBoolean: () => IsBoolean,
-  IsBigInt: () => IsBigInt,
-  IsAsyncIterator: () => IsAsyncIterator,
+  HasPropertyKey: () => HasPropertyKey,
   IsArray: () => IsArray2,
-  HasPropertyKey: () => HasPropertyKey
+  IsAsyncIterator: () => IsAsyncIterator,
+  IsBigInt: () => IsBigInt,
+  IsBoolean: () => IsBoolean,
+  IsDate: () => IsDate,
+  IsFunction: () => IsFunction,
+  IsIterator: () => IsIterator,
+  IsNull: () => IsNull,
+  IsNumber: () => IsNumber2,
+  IsObject: () => IsObject2,
+  IsRegExp: () => IsRegExp,
+  IsString: () => IsString,
+  IsSymbol: () => IsSymbol,
+  IsUint8Array: () => IsUint8Array,
+  IsUndefined: () => IsUndefined2
 });
 function HasPropertyKey(value, key) {
   return key in value;
@@ -1097,57 +1097,57 @@ function Unknown(options) {
 // node_modules/@sinclair/typebox/build/esm/type/guard/type.mjs
 var exports_type = {};
 __export(exports_type, {
-  TypeGuardUnknownTypeError: () => TypeGuardUnknownTypeError,
-  IsVoid: () => IsVoid2,
-  IsUnsafe: () => IsUnsafe2,
-  IsUnknown: () => IsUnknown2,
-  IsUnionLiteral: () => IsUnionLiteral,
-  IsUnion: () => IsUnion2,
-  IsUndefined: () => IsUndefined4,
-  IsUint8Array: () => IsUint8Array3,
-  IsTuple: () => IsTuple2,
-  IsTransform: () => IsTransform2,
-  IsThis: () => IsThis2,
-  IsTemplateLiteral: () => IsTemplateLiteral2,
-  IsSymbol: () => IsSymbol3,
-  IsString: () => IsString3,
-  IsSchema: () => IsSchema2,
-  IsRegExp: () => IsRegExp3,
-  IsRef: () => IsRef2,
-  IsRecursive: () => IsRecursive,
-  IsRecord: () => IsRecord2,
-  IsReadonly: () => IsReadonly2,
-  IsProperties: () => IsProperties,
-  IsPromise: () => IsPromise2,
-  IsOptional: () => IsOptional2,
-  IsObject: () => IsObject4,
-  IsNumber: () => IsNumber4,
-  IsNull: () => IsNull3,
-  IsNot: () => IsNot2,
-  IsNever: () => IsNever2,
-  IsMappedResult: () => IsMappedResult2,
-  IsMappedKey: () => IsMappedKey2,
-  IsLiteralValue: () => IsLiteralValue2,
-  IsLiteralString: () => IsLiteralString,
-  IsLiteralNumber: () => IsLiteralNumber,
-  IsLiteralBoolean: () => IsLiteralBoolean,
-  IsLiteral: () => IsLiteral2,
-  IsKindOf: () => IsKindOf2,
-  IsKind: () => IsKind2,
-  IsIterator: () => IsIterator3,
-  IsIntersect: () => IsIntersect2,
-  IsInteger: () => IsInteger2,
-  IsImport: () => IsImport,
-  IsFunction: () => IsFunction3,
-  IsDate: () => IsDate3,
-  IsConstructor: () => IsConstructor2,
-  IsComputed: () => IsComputed2,
-  IsBoolean: () => IsBoolean3,
-  IsBigInt: () => IsBigInt3,
-  IsAsyncIterator: () => IsAsyncIterator3,
-  IsArray: () => IsArray4,
+  IsAny: () => IsAny2,
   IsArgument: () => IsArgument2,
-  IsAny: () => IsAny2
+  IsArray: () => IsArray4,
+  IsAsyncIterator: () => IsAsyncIterator3,
+  IsBigInt: () => IsBigInt3,
+  IsBoolean: () => IsBoolean3,
+  IsComputed: () => IsComputed2,
+  IsConstructor: () => IsConstructor2,
+  IsDate: () => IsDate3,
+  IsFunction: () => IsFunction3,
+  IsImport: () => IsImport,
+  IsInteger: () => IsInteger2,
+  IsIntersect: () => IsIntersect2,
+  IsIterator: () => IsIterator3,
+  IsKind: () => IsKind2,
+  IsKindOf: () => IsKindOf2,
+  IsLiteral: () => IsLiteral2,
+  IsLiteralBoolean: () => IsLiteralBoolean,
+  IsLiteralNumber: () => IsLiteralNumber,
+  IsLiteralString: () => IsLiteralString,
+  IsLiteralValue: () => IsLiteralValue2,
+  IsMappedKey: () => IsMappedKey2,
+  IsMappedResult: () => IsMappedResult2,
+  IsNever: () => IsNever2,
+  IsNot: () => IsNot2,
+  IsNull: () => IsNull3,
+  IsNumber: () => IsNumber4,
+  IsObject: () => IsObject4,
+  IsOptional: () => IsOptional2,
+  IsPromise: () => IsPromise2,
+  IsProperties: () => IsProperties,
+  IsReadonly: () => IsReadonly2,
+  IsRecord: () => IsRecord2,
+  IsRecursive: () => IsRecursive,
+  IsRef: () => IsRef2,
+  IsRegExp: () => IsRegExp3,
+  IsSchema: () => IsSchema2,
+  IsString: () => IsString3,
+  IsSymbol: () => IsSymbol3,
+  IsTemplateLiteral: () => IsTemplateLiteral2,
+  IsThis: () => IsThis2,
+  IsTransform: () => IsTransform2,
+  IsTuple: () => IsTuple2,
+  IsUint8Array: () => IsUint8Array3,
+  IsUndefined: () => IsUndefined4,
+  IsUnion: () => IsUnion2,
+  IsUnionLiteral: () => IsUnionLiteral,
+  IsUnknown: () => IsUnknown2,
+  IsUnsafe: () => IsUnsafe2,
+  IsVoid: () => IsVoid2,
+  TypeGuardUnknownTypeError: () => TypeGuardUnknownTypeError
 });
 class TypeGuardUnknownTypeError extends TypeBoxError {
 }
@@ -2498,68 +2498,68 @@ function Void(options) {
 // node_modules/@sinclair/typebox/build/esm/type/type/type.mjs
 var exports_type2 = {};
 __export(exports_type2, {
-  Void: () => Void,
-  Uppercase: () => Uppercase,
-  Unsafe: () => Unsafe,
-  Unknown: () => Unknown,
-  Union: () => Union,
-  Undefined: () => Undefined,
-  Uncapitalize: () => Uncapitalize,
-  Uint8Array: () => Uint8Array2,
-  Tuple: () => Tuple,
-  Transform: () => Transform,
-  TemplateLiteral: () => TemplateLiteral,
-  Symbol: () => Symbol2,
-  String: () => String2,
-  ReturnType: () => ReturnType,
-  Rest: () => Rest,
-  Required: () => Required,
-  RegExp: () => RegExp2,
-  Ref: () => Ref,
-  Recursive: () => Recursive,
-  Record: () => Record,
-  ReadonlyOptional: () => ReadonlyOptional,
-  Readonly: () => Readonly,
-  Promise: () => Promise2,
-  Pick: () => Pick,
-  Partial: () => Partial,
-  Parameters: () => Parameters,
-  Optional: () => Optional,
-  Omit: () => Omit,
-  Object: () => Object2,
-  Number: () => Number2,
-  Null: () => Null,
-  Not: () => Not,
-  Never: () => Never,
-  Module: () => Module,
-  Mapped: () => Mapped,
-  Lowercase: () => Lowercase,
-  Literal: () => Literal,
-  KeyOf: () => KeyOf,
-  Iterator: () => Iterator,
-  Intersect: () => Intersect,
-  Integer: () => Integer,
-  Instantiate: () => Instantiate,
-  InstanceType: () => InstanceType,
-  Index: () => Index,
-  Function: () => Function,
-  Extract: () => Extract,
-  Extends: () => Extends,
-  Exclude: () => Exclude,
-  Enum: () => Enum,
-  Date: () => Date2,
-  ConstructorParameters: () => ConstructorParameters,
-  Constructor: () => Constructor,
-  Const: () => Const,
-  Composite: () => Composite,
-  Capitalize: () => Capitalize,
-  Boolean: () => Boolean2,
-  BigInt: () => BigInt,
-  Awaited: () => Awaited,
-  AsyncIterator: () => AsyncIterator,
-  Array: () => Array2,
+  Any: () => Any,
   Argument: () => Argument,
-  Any: () => Any
+  Array: () => Array2,
+  AsyncIterator: () => AsyncIterator,
+  Awaited: () => Awaited,
+  BigInt: () => BigInt,
+  Boolean: () => Boolean2,
+  Capitalize: () => Capitalize,
+  Composite: () => Composite,
+  Const: () => Const,
+  Constructor: () => Constructor,
+  ConstructorParameters: () => ConstructorParameters,
+  Date: () => Date2,
+  Enum: () => Enum,
+  Exclude: () => Exclude,
+  Extends: () => Extends,
+  Extract: () => Extract,
+  Function: () => Function,
+  Index: () => Index,
+  InstanceType: () => InstanceType,
+  Instantiate: () => Instantiate,
+  Integer: () => Integer,
+  Intersect: () => Intersect,
+  Iterator: () => Iterator,
+  KeyOf: () => KeyOf,
+  Literal: () => Literal,
+  Lowercase: () => Lowercase,
+  Mapped: () => Mapped,
+  Module: () => Module,
+  Never: () => Never,
+  Not: () => Not,
+  Null: () => Null,
+  Number: () => Number2,
+  Object: () => Object2,
+  Omit: () => Omit,
+  Optional: () => Optional,
+  Parameters: () => Parameters,
+  Partial: () => Partial,
+  Pick: () => Pick,
+  Promise: () => Promise2,
+  Readonly: () => Readonly,
+  ReadonlyOptional: () => ReadonlyOptional,
+  Record: () => Record,
+  Recursive: () => Recursive,
+  Ref: () => Ref,
+  RegExp: () => RegExp2,
+  Required: () => Required,
+  Rest: () => Rest,
+  ReturnType: () => ReturnType,
+  String: () => String2,
+  Symbol: () => Symbol2,
+  TemplateLiteral: () => TemplateLiteral,
+  Transform: () => Transform,
+  Tuple: () => Tuple,
+  Uint8Array: () => Uint8Array2,
+  Uncapitalize: () => Uncapitalize,
+  Undefined: () => Undefined,
+  Union: () => Union,
+  Unknown: () => Unknown,
+  Unsafe: () => Unsafe,
+  Uppercase: () => Uppercase,
+  Void: () => Void
 });
 
 // node_modules/@sinclair/typebox/build/esm/type/type/index.mjs
@@ -2861,9 +2861,7 @@ var manifest = defineManifest()({
     tagline: "Let AI assistants connect to your site and use its tools."
   },
   requires: {
-    peers: [
-      { name: "elysia", range: "^2.0.0-beta.6", reason: "plugin host" }
-    ]
+    peers: [{ name: "elysia", range: "^2.0.0-beta.6", reason: "plugin host" }]
   },
   settings: Type.Object({
     instructions: Type.Optional(Type.String({

package/dist/src/budgetedTool.d.ts

@@ -0,0 +1,13 @@
+import type { McpTool, McpToolReturn } from "./types";
+export type McpCreditWorkRequest = {
+    requestId: string;
+    maxCredits: number;
+    input: unknown;
+};
+/** Wrap a synchronous tool with an explicit per-work credit budget. The executor
+ * must bind the caller, claim durable work, track usage, and persist its result.
+ * Do not wrap deferred jobs without transferring their budget to the worker. */
+export declare const budgetedMcpTool: (options: {
+    tool: McpTool;
+    execute: (request: McpCreditWorkRequest, run: () => Promise<McpToolReturn>) => Promise<McpToolReturn>;
+}) => McpTool;

package/dist/src/commerce.d.ts

@@ -0,0 +1,50 @@
+/** Host commerce eligibility, not payment authorization. All inputs are
+ * server-owned; never derive a permissive profile from clientInfo alone. */
+export declare const COMMERCE_POLICY_VERSION = "2026-09-10.1";
+export declare const COMMERCE_POLICY_SOURCES: Readonly<{
+    claude: "https://support.claude.com/en/articles/13454812-use-interactive-connectors-in-claude";
+    chatgpt: "https://developers.openai.com/plugins/app-guidelines#commerce-and-monetization";
+    chatgptCheckout: "https://developers.openai.com/plugins/build/monetization";
+    cursorMarketplace: "https://cursor.com/marketplace-publisher-terms";
+}>;
+export type CommerceAction = "entitlement_status" | "informational_link" | "paid_access" | "pricing" | "external_checkout" | "saved_method_purchase" | "new_method_collection" | "subscription" | "automatic_refill";
+export type CommerceCategory = "physical_goods" | "digital_service" | "usage_credits" | "subscription";
+export type CommerceProfile = "claude-interactive" | "chatgpt-plugin" | "cursor-marketplace" | "direct-mcp" | "self-hosted" | "unknown";
+export type CommerceRequirement = {
+    action: CommerceAction;
+    /** All product categories this tool can expose, including every cart line.
+     * Dynamic catalogs must be classified by the server before registration. */
+    categories: readonly CommerceCategory[];
+};
+export type CommerceReview = {
+    id: string;
+    profile: CommerceProfile;
+    actions: readonly CommerceAction[];
+    categories: readonly CommerceCategory[];
+    reviewedAt: string;
+    expiresAt: string;
+    sourceUrls: readonly string[];
+};
+export type CommerceContext = {
+    /** Ambiguous channels are evaluated as the intersection of their rules. */
+    profiles: readonly CommerceProfile[];
+    reviews?: readonly CommerceReview[];
+    /** Reviewed and tested capabilities; these do not establish permission. */
+    capabilities?: {
+        externalLinks?: boolean;
+        interactiveUi?: boolean;
+        nativePaymentSheet?: boolean;
+    };
+};
+export type CommerceDecision = {
+    allowed: boolean;
+    status: "permitted" | "restricted" | "unverified";
+    reason: string;
+    policyVersion: string;
+    sourceUrls: string[];
+    reviewIds: string[];
+};
+/** Published restrictions cannot be overridden by a deployment review.
+ * Unverified paths need explicit, fresh server-side review evidence. */
+export declare const evaluateCommerce: (req: CommerceRequirement, context: CommerceContext, now?: Date) => CommerceDecision;
+export { createCreditBalanceTool, type McpCreditBalance } from "./creditStatus";

package/dist/src/creditStatus.d.ts

@@ -0,0 +1,13 @@
+import type { McpTool } from "./types";
+/** Service credits, not currency or the host model's token usage. */
+export type McpCreditBalance = {
+    allowance: number;
+    consumed: number;
+    remaining: number;
+    periodEnd: string | null;
+};
+/** Account identity belongs in the bound reader, never model input. Keep this
+ * tool outside paid-work balance gates so exhausted users can recover. */
+export declare const createCreditBalanceTool: (options: {
+    read: () => McpCreditBalance | Promise<McpCreditBalance>;
+}) => McpTool;

package/dist/src/index.d.ts

@@ -42,3 +42,6 @@ export { createSessionRegistry, type SessionRegistry } from "./sessions";
 export { createMemoryMcpTaskStore, publicMcpTask } from "./tasks";
 export { createPostgresMcpSessionStore, createPostgresMcpTaskStore, mcpPostgresSchemaSql, type McpSqlClient, type McpSqlResult, } from "./postgres";
 export type { McpAgencyOptions, McpAudioContent, McpElicitAnswer, McpElicitationRequest, McpElicitBus, McpElicitResult, McpFormElicitationRequest, McpSessionStore, McpAuthResult, McpCallGate, McpCallMeta, McpContent, McpImageContent, McpPromptArgument, McpPromptDefinition, McpPrompts, McpResource, McpResourceLink, McpResources, McpServerConfig, McpServerInfo, McpTextContent, McpTask, McpTaskStatus, McpTaskStore, McpTasksOptions, McpTool, McpToolAnnotations, McpToolCallContext, McpToolContext, McpToolRegistry, McpToolResult, McpToolReturn, McpUrlElicitationRequest, } from "./types";
+export * from "./commerce";
+export { createCreditBalanceTool, type McpCreditBalance } from "./creditStatus";
+export { budgetedMcpTool, type McpCreditWorkRequest } from "./budgetedTool";

package/dist/src/types.d.ts

@@ -1,3 +1,4 @@
+import type { CommerceContext, CommerceRequirement } from "./commerce";
 import type { Agency, AgentActor } from "@absolutejs/agency";
 import type { ToolAuthorization } from "@absolutejs/manifest";
 /** MCP behaviour hints, passed straight through to the client on `tools/list`.
@@ -122,6 +123,8 @@ export type McpToolCallContext = {
 };
 /** One callable tool. `inputSchema` is a JSON Schema object. */
 export type McpTool = {
+    /** Server-owned commerce classification; fails closed without commerce context. */
+    commerce?: CommerceRequirement;
     annotations?: McpToolAnnotations;
     /** OpenID AuthZEN COAZ opt-in marker. When true, inputSchema MUST carry an
      *  `x-coaz-mapping`; hosts should evaluate it before invoking the handler. */
@@ -265,6 +268,12 @@ export type McpServerInfo = {
     version: string;
 };
 export type McpServerConfig<Caller> = {
+    /** Resolve trusted deployment policy afresh for discovery and execution.
+     * Does not replace agency approval, ownership, or payment confirmation. */
+    commerce?: (context: {
+        caller: Caller;
+        name: string;
+    }) => CommerceContext | Promise<CommerceContext>;
     /** Per-tool action policy enforcement, approval, leases, and receipts. */
     agency?: McpAgencyOptions<Caller>;
     /** Resolve the request into a caller, or a reason for the 401. The package