@ait-co/devtools 0.1.144 → 0.2.1

package/dist/mcp/server.js

@@ -1,1093 +1,53 @@
-#!/usr/bin/env node
-import { Server } from "@modelcontextprotocol/sdk/server/index.js";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
-//#region src/mcp/ait-http-source.ts
-function isObject$1(value) {
-	return typeof value === "object" && value !== null;
-}
-var HttpAitSource = class {
-	stateEndpoint;
-	fetchImpl;
-	constructor(options) {
-		this.stateEndpoint = options.stateEndpoint;
-		this.fetchImpl = options.fetchImpl ?? ((url) => fetch(url));
-	}
-	async fetchState() {
-		const res = await this.fetchImpl(this.stateEndpoint);
-		if (!res.ok) throw new Error(`Failed to fetch mock state from ${this.stateEndpoint}: HTTP ${res.status} ${res.statusText}. Ensure the Vite dev server is running with the @ait-co/devtools unplugin option \`mcp: true\`.`);
-		const body = await res.json();
-		return isObject$1(body) ? body : {};
-	}
-	async get(method) {
-		switch (method) {
-			case "AIT.getMockState": return await this.fetchState();
-			case "AIT.getOperationalEnvironment": {
-				const state = await this.fetchState();
-				return {
-					environment: typeof state.environment === "string" ? state.environment : "unknown",
-					sdkVersion: typeof state.appVersion === "string" ? state.appVersion : null
-				};
-			}
-			case "AIT.getSdkCallHistory": {
-				const raw = (await this.fetchState()).sdkCallLog;
-				return { calls: Array.isArray(raw) ? raw : [] };
-			}
-			default: throw new Error(`Unknown AIT method: ${String(method)}`);
-		}
-	}
-};
-//#endregion
-//#region src/mcp/envelope.ts
-/**
-* Returns `true` when `AIT_MCP_COMPAT=chrome-devtools` is set, which bypasses
-* envelope wrapping and returns raw payloads (0.1.x back-compat).
-*/
-function isCompatMode() {
-	return process.env.AIT_MCP_COMPAT === "chrome-devtools";
-}
-/**
-* Maps `McpEnvironment` to `EnvelopeEnv`. These are now the same 3-value
-* union (`mock | relay-dev | relay-mobile`; `relay-live` removed in #665),
-* so this is identity — kept as a named export for surface stability if
-* envelope env diverges in the future.
-*/
-function toEnvelopeEnv(env) {
-	return env;
-}
+//#region src/stubs/moved.ts
 /**
-* Wraps `data` in a `ToolEnvelope<T>` **unless** compat mode is active, in
-* which case `data` is returned as-is.
+* Shared copy for the transition stubs left behind by the debug-surface split
+* (#818).
 *
-* Use this at every tool call-site in `debug-server.ts` and `server.ts`.
+* TRANSITION — REMOVE IN 1.0.0. Everything in `src/stubs/` exists only so a
+* consumer still on a pre-0.2.0 wiring gets a sentence telling them where the
+* code went, instead of a bare `ERR_PACKAGE_PATH_NOT_EXPORTED`. Once 1.0.0
+* drops them, the same import fails with the resolver's own error — which is
+* the correct end state, just a worse first encounter.
 *
-* @example
-* ```ts
-* return jsonResult(wrapEnvelope(listPages(connection, tunnel), {
-*   tool: 'list_pages',
-*   env: resolveEnvironment(),
-*   attached: connection.listTargets().length > 0,
-* }));
-* ```
-*/
-function wrapEnvelope(data, ctx) {
-	if (isCompatMode()) return data;
-	return {
-		ok: true,
-		data,
-		meta: {
-			tool: ctx.tool,
-			env: toEnvelopeEnv(ctx.env),
-			attached: ctx.attached,
-			contentType: ctx.contentType ?? "json"
-		}
-	};
-}
-//#endregion
-//#region src/mcp/errors.ts
-/**
-* 한국어 한 줄 "원인 + 다음 행동" 포맷으로 에러 결과를 빌드한다.
-*
-* @param message - 사용자에게 보여줄 에러 본문 (원인 + 다음 행동 포함).
-*/
-function mcpError(message) {
-	return {
-		content: [{
-			type: "text",
-			text: message
-		}],
-		isError: true
-	};
-}
-/**
-* Tier A/B 환경 불일치 거부 메시지.
+* Two stub shapes, and the difference between them is a safety property, not a
+* style choice:
 *
-* @param toolName    - 거부된 tool 이름.
-* @param requiredEnv - 해당 tool이 요구하는 환경 ('mock' | 'relay').
-* @param currentEnv  - 현재 세션 환경.
-* @param reason      - 환경이 결정된 근거를 나타내는 파생 문자열
-*                      (예: `derived:kind=relay,liveIntent=true`).
+*   - Node-side tooling subpaths (`/mcp/server`, `/mcp/cli`, `/test-runner`)
+*     THROW on import. They only ever run in a developer's terminal, so failing
+*     loudly at the earliest possible moment is right.
+*   - The in-app subpaths (`/in-app`, `/in-app/auto`) MUST NOT throw. That code
+*     could be sitting in a shipped production bundle; a throw there takes the
+*     user's mini-app down. They degrade to a no-op plus one `console.error`.
 */
-function tierRejectionError(toolName, requiredEnv, currentEnv, reason) {
-	return mcpError(`${`${toolName}은 ${requiredEnv === "relay" ? "relay (실기기 연결)" : "mock (로컬 브라우저)"} 환경에서만 사용할 수 있습니다. 현재 환경: ${currentEnv === "relay" ? "relay" : "mock"} (${reason}). ${requiredEnv === "relay" ? "relay로 전환하려면 MCP_ENV=relay 설정 후 서버를 재시작하고 start_attach → QR 스캔으로 실기기를 attach하세요." : "mock으로 전환하려면 MCP_ENV=mock 설정 후 서버를 재시작하세요."}`}\n\n${`tool ${toolName} is available only in ${requiredEnv}. Current environment is ${currentEnv} (${reason}).`}`);
-}
-//#endregion
-//#region src/mcp/sdk-signatures.ts
-function isObject(v) {
-	return typeof v === "object" && v !== null && !Array.isArray(v);
-}
-function describeArgs(args) {
-	try {
-		return JSON.stringify(args);
-	} catch {
-		return String(args);
-	}
-}
+/** The package that now owns the MCP daemon, test runner, and dev bridge. */
+const DEBUGGER_PACKAGE = "@ait-co/debugger";
 /**
-* 등록된 메서드 목록.
+* Builds the migration sentence for a moved subpath.
 *
-* 시그니처 출처 확인:
-*   - 함수가 인자를 받지 않으면 args[0] 없음 → `args.length === 0`을 체크하지 않고
-*     그냥 통과시킨다(args 무시하는 stub가 많아서 noArgs 체크가 noise).
-*   - 실 SDK 시그니처는 `src/__typecheck.ts`의 `Assert<Mock, Original>` 줄로 보장.
+* SECRET-HANDLING: fixed text plus the two specifiers only — no paths, hosts,
+* URLs, or environment values.
 */
-const SIGNATURES = [
-	{
-		name: "setDeviceOrientation",
-		validateArgs(args) {
-			const arg = args[0];
-			if (!isObject(arg)) return {
-				ok: false,
-				expected: "{ type: 'portrait' | 'landscape' }",
-				received: describeArgs(args)
-			};
-			const type = arg.type;
-			if (type !== "portrait" && type !== "landscape") return {
-				ok: false,
-				expected: "{ type: 'portrait' | 'landscape' }",
-				received: describeArgs(args)
-			};
-			return { ok: true };
-		},
-		example: "call_sdk('setDeviceOrientation', [{ type: 'landscape' }])"
-	},
-	{
-		name: "setIosSwipeGestureEnabled",
-		validateArgs(args) {
-			const arg = args[0];
-			if (!isObject(arg) || typeof arg.isEnabled !== "boolean") return {
-				ok: false,
-				expected: "{ isEnabled: boolean }",
-				received: describeArgs(args)
-			};
-			return { ok: true };
-		},
-		example: "call_sdk('setIosSwipeGestureEnabled', [{ isEnabled: false }])"
-	},
-	{
-		name: "setSecureScreen",
-		validateArgs(args) {
-			const arg = args[0];
-			if (!isObject(arg) || typeof arg.enabled !== "boolean") return {
-				ok: false,
-				expected: "{ enabled: boolean }",
-				received: describeArgs(args)
-			};
-			return { ok: true };
-		},
-		example: "call_sdk('setSecureScreen', [{ enabled: true }])"
-	},
-	{
-		name: "setScreenAwakeMode",
-		validateArgs(args) {
-			const arg = args[0];
-			if (!isObject(arg) || typeof arg.enabled !== "boolean") return {
-				ok: false,
-				expected: "{ enabled: boolean }",
-				received: describeArgs(args)
-			};
-			return { ok: true };
-		},
-		example: "call_sdk('setScreenAwakeMode', [{ enabled: true }])"
-	},
-	{
-		name: "getOperationalEnvironment",
-		validateArgs(_args) {
-			return { ok: true };
-		},
-		example: "call_sdk('getOperationalEnvironment', [])"
-	},
-	{
-		name: "getPlatformOS",
-		validateArgs(_args) {
-			return { ok: true };
-		},
-		example: "call_sdk('getPlatformOS', [])"
-	},
-	{
-		name: "getDeviceId",
-		validateArgs(_args) {
-			return { ok: true };
-		},
-		example: "call_sdk('getDeviceId', [])"
-	},
-	{
-		name: "getLocale",
-		validateArgs(_args) {
-			return { ok: true };
-		},
-		example: "call_sdk('getLocale', [])"
-	},
-	{
-		name: "getNetworkStatus",
-		validateArgs(_args) {
-			return { ok: true };
-		},
-		example: "call_sdk('getNetworkStatus', [])"
-	},
-	{
-		name: "getSchemeUri",
-		validateArgs(_args) {
-			return { ok: true };
-		},
-		example: "call_sdk('getSchemeUri', [])"
-	},
-	{
-		name: "requestReview",
-		validateArgs(_args) {
-			return { ok: true };
-		},
-		example: "call_sdk('requestReview', [])"
-	},
-	{
-		name: "closeView",
-		validateArgs(_args) {
-			return { ok: true };
-		},
-		example: "call_sdk('closeView', [])"
-	}
-];
-new Map(SIGNATURES.map((s) => [s.name, s]));
-SIGNATURES.map((s) => s.name);
-[
-	"[ait-debug] AIT_DEBUG_TOTP_SECRET이 필수입니다. 32자 이상 16진수(hex) 문자열을 설정하세요.",
-	"발급: openssl rand -hex 32",
-	"데몬은 start_debug의 projectRoot 인자로 받은 디렉토리에서 .ait_relay 파일을 읽어 이 시크릿을 채웁니다.",
-	"프로젝트에서 pnpm dev:phone:cdp를 한 번 띄우면 unplugin이 .ait_relay를 자동 생성하니(tunnel.cdp 옵션 필요), projectRoot를 전달하세요.",
-	"자세히: https://docs.aitc.dev/guides/relay-auth-totp"
-].join("\n");
-new Set([
-	{
-		name: "list_console_messages",
-		description: "Lists recent console messages (console.log/warn/error/info) captured from the attached mini-app page over CDP (Runtime.consoleAPICalled). Read-only. Returns level, text, timestamp, and stringified args, oldest-first.",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "list_network_requests",
-		description: "Lists recent network requests (XHR/fetch) captured from the attached mini-app page over CDP (Network.requestWillBeSent + Network.responseReceived). Read-only. Returns url, method, status, and timing, oldest-first.",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "list_pages",
-		description: "Returns the single active page (at most one) the relay sees attached. When a second page attaches, the previous one is evicted (last-attach wins — single-attach model). The result includes `singleAttachModel: true` so the agent knows the array is always 0 or 1 entries. Also returns whether the cloudflared tunnel is up and the public wss relay URL. The `tunnel` field includes `droppedAt` (ISO timestamp or null/undefined): when non-null the tunnel has permanently dropped after 3 failed reissue attempts — restart the debug server with `npx @ait-co/devtools devtools-mcp`. Each page entry includes a `lastSeenAt` ISO timestamp (last inbound CDP message from that target — useful to detect stale entries when the phone app backgrounded). The result also includes `crashDetectedAt` (ISO timestamp or null): when non-null, a page crash was detected via Inspector.targetCrashed / Target.targetDestroyed since the last attach, the pages list will be empty, and `crashWarning` shows a Korean hint to re-attach. Call this first to confirm a page is attached before reading console/network. When a page attaches or detaches the server emits notifications/tools/list_changed — call tools/list again to get the full updated tool surface.",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "start_attach",
-		description: "The tool result already shows the QR to the user directly (Claude Code renders MCP tool output to the user's screen; they press Ctrl+O to expand if it's collapsed). Do NOT re-print or re-render the QR in your reply — that just wastes output tokens. Simply tell the user to scan the QR shown in this tool's output with their phone camera. Single entry point to attach a real device: switches the debug mode (if `mode` is given), builds the self-attaching deep-link QR for the active relay environment, and waits for the phone to attach — all in one call (replaces the old attach-URL + start_debug two-step). Scan the QR with the phone camera to open the mini-app and attach it to this debug session (QR is the single entry path — no USB cable or platform CLI needed).\n\nmode (optional): pass \"relay-sandbox\" (env 2) or \"relay-staging\" (env 3) to switch the active environment first. When omitted, the current relay environment is used as-is (no switch). Passing \"local-browser\" returns an error — start_attach is relay-only (env 2/3). When the session is already in the requested mode, the switch is skipped.\n\nEnvironment-specific behaviour:\n  • env 3 / relay-staging: requires scheme_url — the intoss-private://…?_deploymentId=<uuid> URL from `ait deploy --scheme-only`. Splices debug=1 + relay URL into the scheme URL.\n  • env 2 / relay-sandbox: scheme_url is NOT used. Instead, reads AIT_TUNNEL_BASE_URL (the https://*.trycloudflare.com app tunnel from `tunnel:{cdp:true}`) and builds a launcher PWA deep-link (https://devtools.aitc.dev/launcher/?url=…&debug=1&relay=…). When projectRoot is given, the app name from <projectRoot>/package.json is added as name= so the launcher partner bar shows it.\n\nWaits for a page to attach by default (up to wait_timeout_seconds, default 60 s). The server automatically opens the QR dashboard in the OS default browser when running on a local GUI machine — headless/remote environments fall back to the text QR in the tool output.\n\nTOTP auto re-mint: when AIT_DEBUG_TOTP_SECRET is set on the MCP server, the attachUrl carries a one-time code (at=<code>) valid for ~3 minutes (the relay gate accepts ±6 TOTP steps). While waiting, start_attach AUTOMATICALLY re-mints a fresh code before the current one expires and refreshes the dashboard QR in place (no browser re-open). You do NOT need to re-call start_attach every time the code would expire — a single call covers the whole wait window. The response includes a `totp` field with `expiresAt` and a `reminted` count of how many fresh codes were issued during the wait. Without AIT_DEBUG_TOTP_SECRET, the attachUrl has no expiry.\n\nselfdebug (env 2 / relay-sandbox only): pass selfdebug=true to add &selfdebug=1 to the launcher deep-link. The launcher PWA then registers its own document as the CDP target instead of the framed mini-app. SINGLE-ATTACH MODEL: attaching the launcher self-target evicts any currently-attached mini-app target — use this mode exclusively for diagnosing the launcher document itself (DOM, safe-area, console). Not applicable in env 3 (relay-staging) — passing selfdebug=true there returns an error.",
-		inputSchema: {
-			type: "object",
-			properties: {
-				mode: {
-					type: "string",
-					enum: [
-						"local-browser",
-						"relay-sandbox",
-						"relay-staging"
-					],
-					description: "Optional debug mode to switch into before attaching. \"relay-sandbox\" = env 2 (launcher PWA), \"relay-staging\" = env 3 (intoss-private dog-food). \"local-browser\" returns an error (start_attach is relay-only). Omit to keep the current relay environment."
-				},
-				scheme_url: {
-					type: "string",
-					description: "The intoss-private:// scheme URL from `ait deploy --scheme-only` (must carry _deploymentId). Required for env 3/relay-staging mode. Not used in env 2/relay-sandbox mode (use AIT_TUNNEL_BASE_URL instead). The authority (host) must be the app name (e.g. intoss-private://aitc-sdk-example?_deploymentId=…). Generic values like \"web\" or an empty host indicate a malformed URL."
-				},
-				wait_timeout_seconds: {
-					type: "number",
-					description: "Maximum seconds to wait for a page to attach (default 60, range 1–600). Values outside the range or invalid inputs (0, negative, NaN) fall back to the default silently. During the wait the TOTP code is auto re-minted as needed, so a single call covers the whole window."
-				},
-				projectRoot: {
-					type: "string",
-					description: "Absolute path to the mini-app project root (the directory containing its package.json and .ait_urls). When AIT_TUNNEL_BASE_URL is unset (env 2 / relay-mobile only), the daemon reads the app tunnel URL from <projectRoot>/.ait_urls written by the dev server (tunnel:{cdp:true}). Pass this because the daemon's own cwd is fixed at launch. Omit when AIT_TUNNEL_BASE_URL is set explicitly."
-				},
-				selfdebug: {
-					type: "boolean",
-					description: "Env 2 / relay-sandbox only. When true, adds &selfdebug=1 to the launcher deep-link so the launcher PWA registers its own document as the CDP target (launcher diagnostics mode). SINGLE-ATTACH MODEL: self-target attach evicts any currently-attached mini-app target. Use only when you need to inspect the launcher itself (DOM, safe-area, console). Passing selfdebug=true in env 3 (relay-staging) returns an error. Default: false (omitted)."
-				}
-			},
-			required: []
-		},
-		availableIn: "relay"
-	},
-	{
-		name: "get_dom_document",
-		description: "Returns the DOM tree of the attached mini-app page over CDP (DOM.getDocument). Read-only. Use for structural/layout regression diagnosis (e.g. confirming an element exists, inspecting attributes). Returns the document root node with children.",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "take_snapshot",
-		description: "Captures a serialized snapshot of the attached page over CDP (DOMSnapshot.captureSnapshot). Read-only. Returns the documents + interned strings table for visual-regression diagnosis (e.g. checking computed CSS custom properties like --sat against the live layout).",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "take_screenshot",
-		description: "Captures a PNG screenshot of the attached mini-app page over CDP (Page.captureScreenshot) so the agent can see the phone screen directly. Read-only. Returns an image content block — this is the only debug tool that returns an image; all other debug tools return text (JSON).",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "measure_safe_area",
-		description: "Runs a safe-area probe on the attached mini-app page via Runtime.evaluate and returns normalized safe-area insets, viewport geometry, device pixel ratio, and User-Agent. Read-only — does not modify page state. Tier C per RFC #277: the same Runtime.evaluate probe runs in both `mock` (devtools panel page with window.__ait state) and `relay` (real-device WebView with window.__sdk). The result includes a `source: \"mock\" | \"relay-dev\" | \"relay-mobile\"` field so consumers can identify provenance without inspecting payload values. (`relay-mobile` = env 2 real-device PWA over an external relay; `relay-dev` = env 3 dog-food WebView; relay-live/env 4 removed #665.) Use in a relay session (phone attached) to get ground-truth values for upgrading a viewport preset from extrapolated/placeholder to measured. Requires a page to be attached — call list_pages first.",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "evaluate",
-		description: "Evaluates an arbitrary JavaScript expression on the attached mini-app page via CDP Runtime.evaluate (returnByValue: true) and returns the result. NOT read-only — the expression can have side effects (DOM mutations, SDK calls, state changes). Requires the relay to be attached — call list_pages first. Throws if the evaluation throws an exception on the page.\n\nSECURITY: expression and result are not redacted — never include secrets or auth tokens in the expression.\n\nPositive-allowlist kill-switch (#665): this tool is blocked when the attached page is on a non-debug host (apps.tossmini.com / env 4). Only localhost, *.trycloudflare.com, and *.private-apps.tossmini.com are allowed. relay-live (env 4) and the LIVE confirm guard are removed.",
-		inputSchema: {
-			type: "object",
-			properties: { expression: {
-				type: "string",
-				description: "JavaScript expression to evaluate in the page context."
-			} },
-			required: ["expression"]
-		},
-		availableIn: "both"
-	},
-	{
-		name: "list_exceptions",
-		description: "Lists JS-level exceptions captured via `Runtime.exceptionThrown` from the relay attached page. Includes timestamp, exception text, source URL/line, and stack trace. Use to root-cause SDK throws that may precede a Toss app crash (#265 / #267). The buffer holds up to 50 most recent exceptions and survives target replaced/crashed/destroyed events so an exception just before a crash is preserved. Returns up to 50 most recent by default.",
-		inputSchema: {
-			type: "object",
-			properties: { limit: {
-				type: "number",
-				description: "Maximum number of exceptions to return (default 50, max 50)."
-			} },
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "call_sdk",
-		description: "Calls a dog-food SDK method via the window.__sdkCall bridge (exported by @apps-in-toss/web-framework only in __DEBUG_BUILD__ bundles). NOT read-only — SDK calls have side effects (navigation, payments, permissions, etc.). On env 3/4 (real device relay) this hits the real SDK; on env 1 (local mock) and env 2 (PWA relay — real WebKit, mock SDK) it hits the mock SDK. Requires the relay to be attached — call list_pages first. Returns {ok: true, value} on success or {ok: false, error} on failure. If a Runtime.exceptionThrown event was observed within [callStart-50ms, callEnd+200ms], the result also includes `recentException` for crash triage. Returns a clear error if window.__sdkCall is not available — on relay (env 3/4) that means a non-dog-food bundle (redeploy via `ait build && aitcc app deploy`); on local (--target=local, env 1) it means the dev bridge is not installed (start the dev server with `pnpm dev`).\n\nSECURITY: method name, args, and result value are not redacted — never include secrets.\n\nPositive-allowlist kill-switch (#665): blocked when the attached page is on a non-debug host (apps.tossmini.com / env 4). relay-live and the LIVE guard removed.\n\nIMPORTANT — 인자 시그니처 (잘못된 인자로 호출하면 토스 앱 crash 위험):\n  setDeviceOrientation:        call_sdk(\"setDeviceOrientation\", [{ type: \"landscape\" }])  // NOT \"landscape\"\n  setIosSwipeGestureEnabled:   call_sdk(\"setIosSwipeGestureEnabled\", [{ isEnabled: false }])\n  setSecureScreen:             call_sdk(\"setSecureScreen\", [{ enabled: true }])\n  setScreenAwakeMode:          call_sdk(\"setScreenAwakeMode\", [{ enabled: true }])\n  getOperationalEnvironment:   call_sdk(\"getOperationalEnvironment\", [])\n  getPlatformOS:               call_sdk(\"getPlatformOS\", [])\n  getDeviceId:                 call_sdk(\"getDeviceId\", [])\n  getLocale:                   call_sdk(\"getLocale\", [])\n  getNetworkStatus:            call_sdk(\"getNetworkStatus\", [])\n  getSchemeUri:                call_sdk(\"getSchemeUri\", [])\n  requestReview:               call_sdk(\"requestReview\", [])\n  closeView:                   call_sdk(\"closeView\", [])",
-		inputSchema: {
-			type: "object",
-			properties: {
-				name: {
-					type: "string",
-					description: "SDK method name to call (e.g. \"getOperationalEnvironment\")."
-				},
-				args: {
-					type: "array",
-					description: "Arguments to pass to the SDK method (optional, default []).",
-					items: {}
-				}
-			},
-			required: ["name"]
-		},
-		availableIn: "both"
-	},
-	{
-		name: "AIT.getSdkCallHistory",
-		description: "Returns the recent Apps in Toss SDK call trace (method, args, result/error, timestamp) that raw CDP cannot observe. Read-only. Use to confirm an SDK call fired and how it resolved (e.g. a saveBase64Data permission regression).",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "AIT.getMockState",
-		description: "Returns the devtools mock state snapshot (window.__ait) — environment, permissions, location, auth, network, IAP, and more. Read-only. In dev mode this is the live browser mock state; in debug mode the in-app side reports it over the AIT domain.",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "AIT.getOperationalEnvironment",
-		description: "Returns getOperationalEnvironment() plus the resolved SDK version — metadata raw CDP cannot observe. Read-only.",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "start_debug",
-		description: "Switches the active debug environment in-place (issue #348) — no Claude Code restart and no MCP re-handshake. One daemon holds both a local (env 1, mock SDK in a Chromium) and a relay (env 2/3, real-device over the Chii relay + cloudflared tunnel) connection at once; this tool flips which one every other tool reads from, lazily booting the requested family's infra on first use and keeping the inactive one warm so an existing attach survives the switch. After switching it emits notifications/tools/list_changed — call tools/list again to see the updated tool surface for the new environment.\n\nPositive-allowlist kill-switch (#665): relay sessions on apps.tossmini.com (env 4, released production) are silently blocked at both the in-app gate and this MCP layer — relay-live and the LIVE guard have been removed. Only localhost/loopback (env 1), *.trycloudflare.com (env 2), and *.private-apps.tossmini.com (env 3) are allowed.\n\nmodes:\n  local-browser — env 1: desktop Chromium with the mock SDK and a local CDP attach. Side-effect tools (call_sdk/evaluate) run unguarded against the mock; nothing touches a real device or real users. No prerequisites — the default, always-available environment for state/contract and visual-layout work.\n  relay-sandbox — env 2: a real-device PWA (real WebKit engine, mock SDK) over an external Chii relay. CDP covers real-device WebKit DOM, console, exceptions, and safe-area observation; call_sdk still hits the mock (SDK fidelity needs relay-staging). Side-effect tools run unguarded against the mock. Only the dual-connection daemon can enter relay-sandbox in-place; a single-connection session rejects it with \"동적 전환할 수 없습니다 … relay-sandbox 모드로 재시작하세요\" — follow that hint and restart the MCP server in relay-sandbox mode rather than retrying. Prerequisites: both AIT_RELAY_BASE_URL (the relay base the unplugin emits when started with tunnel:{cdp:true}, used for the CDP attach) and AIT_TUNNEL_BASE_URL (the dev-server tunnel host, required by start_attach to render the launcher QR) must be set before the MCP server starts — the unplugin does not auto-forward either; set them explicitly. Both carry relay/tunnel hosts (secret-class) — keep them out of logs.\n  relay-staging — env 3: a real-device Toss WebView dog-food build with the REAL SDK over the intoss-private relay. The first environment where call_sdk exercises the genuine native bridge. Side-effect tools run unguarded (dog-food, not released to real users). Prerequisite: a dog-food candidate bundle built with `RELEASE_CHANNEL=dogfood ait build`, then uploaded with `ait deploy` (add `--scheme-only` to print the resulting intoss-private://…?_deploymentId=… deep-link); open that deep-link/QR on the device to cold-load the bundle with the relay injected. Unlike env 2, env 3 is NOT a dev-server tunnel — it is a deployed bundle reached via the intoss-private scheme, so `pnpm dev` plays no part here.\n\nFor a relay mode (relay-sandbox/relay-staging), also pass projectRoot — the absolute mini-app project root — so the daemon can read the relay auth secret from <projectRoot>/.ait_relay (read-only; the daemon never mints it). Omit it for local-browser.",
-		inputSchema: {
-			type: "object",
-			properties: {
-				mode: {
-					type: "string",
-					enum: [
-						"local-browser",
-						"relay-sandbox",
-						"relay-staging"
-					],
-					description: "Target environment to switch to. relay-live (env 4) has been removed (#665) — use relay-staging (env 3) for dog-food debugging."
-				},
-				projectRoot: {
-					type: "string",
-					description: "Absolute path to the mini-app project root (the directory containing its package.json and .ait_relay). The daemon reads the relay auth secret from <projectRoot>/.ait_relay (read-only) when switching to a relay environment (relay-staging/relay-sandbox). Pass this because the daemon's own cwd is fixed at launch and may not be the project being debugged. Omit for mode=local-browser (no secret needed)."
-				}
-			},
-			required: ["mode"]
-		},
-		availableIn: "both"
-	},
-	{
-		name: "get_debug_status",
-		description: "Reports the current debug session state — which environment/mode is active, whether a page is attached, and a full diagnostic snapshot — in one call. Use this any time to answer \"what mode am I in right now?\" or \"why is this not working?\" without chaining tools. Fields: mcpVersion (MCP SDK version), devtoolsVersion (@ait-co/devtools package version), tunnel (up/wssUrl/pid/startedAt), pages (list_pages result + lastSeenAt stats), lastAttachAt, lastDetachAt, recentErrors (last N server-side errors, PII/secret redacted), authRejects ({count, lastAt} — relay TOTP 401 rejections, secret-free; count > 0 with empty pages means the phone reached the relay but its code was rejected), environment (kind: mock|relay-dev|relay-mobile, env: mock|relay backward-compat, reason, liveGuardActive: always false — relay-live and LIVE guard removed (#665); start_debug mode→kind mapping: relay-sandbox→relay-mobile, relay-staging→relay-dev, local-browser→mock), serverLockHolder (pid + startedAt from the lock file, or null), nextRecommendedAction ({tool, reason} or null — the single next tool to call; in local-target mode tunnel.up=false is normal so \"restart\" is never recommended). All fields are nullable — missing data is null, not an error. debug-mode only — dev-mode (--mode=dev) does not support relay diagnostics. Tier C (both mock and relay).",
-		inputSchema: {
-			type: "object",
-			properties: { recent_errors_limit: {
-				type: "number",
-				description: "Maximum number of recent server-side errors to include (default 10, max 50)."
-			} },
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "run_tests",
-		description: "Runs mini-app test files on the attached page over CDP (Runtime.evaluate). Each matched file is bundled with esbuild (SDK imports redirected to the live mock/SDK), injected into the attached WebView, and executed; returns per-file results plus flattened totals (passed/failed/skipped/total). When there is no attached page and the current environment is relay (env 3), this tool automatically shows the QR dashboard and waits for a phone to connect before running (scheme_url required for env 3 relay-dev). Files run SEQUENTIALLY (single-attach model: the relay/local target serves one page), and one run_tests call runs at a time (a concurrent call is rejected). Test verification (assert/snapshot) is delegated to the in-page Vitest runtime; this tool is the transport + report. The per-file results array is the progress record — on partial failure you see exactly which files passed/failed/timed-out. Positive-allowlist kill-switch (#665): blocked when the attached page is on a non-debug host. debug-mode only — dev-mode (--mode=dev) has no CDP. Tier C (both mock/local and relay).",
-		inputSchema: {
-			type: "object",
-			properties: {
-				files: {
-					type: "array",
-					items: { type: "string" },
-					description: "Glob patterns or file paths to run (e.g. [\"src/**/*.ait.test.ts\"]). Resolved relative to projectRoot when given, else the daemon cwd. Required, non-empty."
-				},
-				projectRoot: {
-					type: "string",
-					description: "Absolute path to the mini-app project root used as the glob base. Pass this because the daemon's cwd is fixed at launch. Optional."
-				},
-				timeout_ms: {
-					type: "number",
-					description: "Per-file evaluate timeout in ms (default 30000, range 1000–600000). Out-of-range/invalid values fall back to the default."
-				},
-				scheme_url: {
-					type: "string",
-					description: "intoss-private:// deep-link URL from `ait deploy --scheme-only` (env 3 relay-dev only). Required when there is no attached page and the environment is relay-dev — the tool uses it to build the QR attach URL and wait for the phone to connect. Ignored when a page is already attached."
-				},
-				cell: {
-					type: "object",
-					description: "Optional cell object to inject into globalThis BEFORE running tests (e.g. { \"__AIT_CELL__\": { \"sdkLine\": \"2.x\", \"platform\": \"ios\" } }). Applied only on the auto-attach path (no-page → attach → inject → run). When a page is already attached the caller is responsible for any prior injection. Ignored when empty or absent. Values must be JSON-serialisable.",
-					additionalProperties: true
-				}
-			},
-			required: ["files"]
-		},
-		availableIn: "both"
-	}
-].map((t) => t.name));
-`
-(function() {
-  var el = document.createElement('div');
-  el.style.cssText = 'position:fixed;top:0;left:0;width:0;height:0;visibility:hidden;' +
-    'padding-top:env(safe-area-inset-top,0px);' +
-    'padding-right:env(safe-area-inset-right,0px);' +
-    'padding-bottom:env(safe-area-inset-bottom,0px);' +
-    'padding-left:env(safe-area-inset-left,0px)';
-  document.documentElement.appendChild(el);
-  var cs = window.getComputedStyle(el);
-  var cssEnv = {
-    top: parseFloat(cs.paddingTop) || 0,
-    right: parseFloat(cs.paddingRight) || 0,
-    bottom: parseFloat(cs.paddingBottom) || 0,
-    left: parseFloat(cs.paddingLeft) || 0
-  };
-  document.documentElement.removeChild(el);
-  var sdkInsets = null;
-  var sdkInsetsSource = null;
-  var sdkInsetsError = undefined;
-  try {
-    var sdk = window.__sdk;
-    var ait = window.__ait;
-    if (sdk && sdk.SafeAreaInsets && typeof sdk.SafeAreaInsets.get === 'function') {
-      sdkInsets = sdk.SafeAreaInsets.get();
-      sdkInsetsSource = 'window.__sdk';
-    } else if (sdk && typeof sdk.getSafeAreaInsets === 'function') {
-      sdkInsets = sdk.getSafeAreaInsets();
-      sdkInsetsSource = 'window.__sdk';
-    } else if (ait && ait.state && ait.state.safeAreaInsets &&
-               typeof ait.state.safeAreaInsets.top === 'number') {
-      var s = ait.state.safeAreaInsets;
-      sdkInsets = { top: s.top, bottom: s.bottom, left: s.left, right: s.right };
-      sdkInsetsSource = 'window.__ait';
-    } else if (!sdk && !ait) {
-      sdkInsetsError = 'neither window.__sdk (relay) nor window.__ait (mock) available';
-    } else if (sdk) {
-      sdkInsetsError = 'neither SafeAreaInsets.get nor getSafeAreaInsets found on window.__sdk';
-    } else {
-      sdkInsetsError = 'window.__ait.state.safeAreaInsets is missing or malformed';
-    }
-  } catch(e) {
-    sdkInsetsError = String(e && e.message || e);
-  }
-  var navBarHeight = null;
-  var navBarHeightSource = 'not-exposed-by-sdk';
-  try {
-    var nb = document.querySelector('.ait-navbar');
-    if (nb) {
-      navBarHeight = nb.getBoundingClientRect().height;
-      navBarHeightSource = 'dom-.ait-navbar';
-    }
-  } catch(_) {}
-  var result = {
-    cssEnv: cssEnv,
-    sdkInsets: sdkInsets,
-    sdkInsetsSource: sdkInsetsSource,
-    navBarHeight: navBarHeight,
-    navBarHeightSource: navBarHeightSource,
-    innerWidth: window.innerWidth,
-    innerHeight: window.innerHeight,
-    devicePixelRatio: window.devicePixelRatio,
-    userAgent: navigator.userAgent
-  };
-  if (sdkInsetsError !== undefined) result.sdkInsetsError = sdkInsetsError;
-  return JSON.stringify(result);
-})()
-`.trim();
-/** Set of tool names served by the AIT source rather than the CDP connection. */
-const AIT_TOOL_NAMES = new Set([
-	"AIT.getSdkCallHistory",
-	"AIT.getMockState",
-	"AIT.getOperationalEnvironment"
-]);
-/** True for the Phase 3 AIT.* tools (served by an `AitSource`, not CDP). */
-function isAitToolName(name) {
-	return AIT_TOOL_NAMES.has(name);
-}
-/** Returns the recent SDK call trace (`AIT.getSdkCallHistory`). */
-function getSdkCallHistory(source) {
-	return source.get("AIT.getSdkCallHistory");
-}
-/** Returns the devtools mock-state snapshot (`AIT.getMockState`). */
-function getMockState(source) {
-	return source.get("AIT.getMockState");
-}
-/** Returns the operational environment + SDK version (`AIT.getOperationalEnvironment`). */
-function getOperationalEnvironment(source) {
-	return source.get("AIT.getOperationalEnvironment");
+function movedMessage(oldSubpath, newPackage, install) {
+	return [
+		`[@ait-co/devtools] '${oldSubpath}' 는 0.2.0에서 제거되었습니다.`,
+		`이 기능은 '${newPackage}' 로 이동했습니다.`,
+		`설치: ${install}`
+	].join(" ");
 }
 //#endregion
-//#region src/mcp/server.ts
+//#region src/stubs/mcp-server.ts
 /**
-* @ait-co/devtools dev-mode MCP server (stdio).
-*
-* Exposes the live browser mock state from a running Vite dev server to AI
-* coding agents via the Model Context Protocol (MCP).
-*
-* Architecture:
-*   Browser (aitState) → Vite dev server endpoint (/api/ait-devtools/state)
-*                      ← HTTP GET ← this stdio MCP server ← AI agent
-*
-* The Vite endpoint is registered by the unplugin when `mcp: true` is set in
-* the plugin options (see `src/unplugin/index.ts`).
-*
-* Phase 3 tool-surface alignment: dev mode and debug mode now expose the same
-* `AIT.*` tools (`AIT.getMockState`, `AIT.getOperationalEnvironment`,
-* `AIT.getSdkCallHistory`). In dev mode they are backed by the HTTP mock-state
-* endpoint (see `HttpAitSource`); in debug mode by the Chii channel. So an AI
-* sees a coherent tool whether attached to a phone (debug) or a dev browser
-* (dev). `devtools_get_mock_state` (the original devtools#130 name) is kept as a
-* backward-compatible alias of `AIT.getMockState`.
-*
-* Issue #305 (M2-1) — dev/debug tool-surface unification:
-* dev-mode now also exposes `list_pages`, `get_debug_status`, `measure_safe_area`,
-* and `call_sdk` so the docs/qa/scenarios.md acceptance sequence
-* `list_pages → measure_safe_area → call_sdk` works in dev mode without
-* "Unknown tool" failures.
+* TRANSITION STUB — REMOVE IN 1.0.0.
 *
-* - `list_pages`       — shim: returns the Vite dev URL as a single-entry array.
-* - `get_debug_status`  — dumps dev-mode server state (endpoint URL, last fetch
-*                        error, reachability, mode/environment metadata).
-* - `measure_safe_area`— reads safeAreaInsets from the mock state snapshot
-*                        (source: 'mock-vite').
-* - `call_sdk`         — reads mock state and builds a mock-equivalent result
-*                        using window.__ait.state for supported methods; returns
-*                        an explicit tier-filter error for methods that require
-*                        a live CDP bridge.
-* - CDP-only tools (`evaluate`, `take_screenshot`, `get_dom_document`,
-*                   `take_snapshot`, `list_console_messages`,
-*                   `list_network_requests`, `list_exceptions`) — return an
-*                   explicit tier-filter error explaining that CDP is unavailable
-*                   in dev-mode and pointing to `--mode=local` or `--mode=debug`.
+* `@ait-co/devtools/mcp/server` moved to `@ait-co/debugger/mcp/server` (#818).
 *
-* This module is reached via the `devtools-mcp --mode=dev` CLI entry (see
-* `cli.ts`); the default (no flag) bin mode is the debug-mode CDP/Chii server.
-*
-* Usage (in your MCP client config, e.g. Claude Desktop):
-*   {
-*     "mcpServers": {
-*       "ait-devtools": {
-*         "command": "pnpm",
-*         "args": ["exec", "devtools-mcp", "--mode=dev"],
-*         "env": { "AIT_DEVTOOLS_URL": "http://localhost:5173" }
-*       }
-*     }
-*   }
-*/
-/** Error message prefix for CDP-dependent tools called in dev-mode. */
-const CDP_UNAVAILABLE_IN_DEV_MODE = "dev-mode에서는 CDP 연결이 없어 이 도구를 사용할 수 없습니다. 실기기 또는 로컬 Chromium에 붙이려면 `devtools-mcp --mode=local` 또는 `devtools-mcp` (debug 모드 기본)로 전환하세요.";
-/**
-* Tool descriptors served by the dev-mode server.
-*
-* All dev-mode tools are Tier C (both envs) per RFC #277 — the dev-mode server
-* itself is the mock-side embodiment of those Tier C tools. `availableIn` is
-* declared so the surface stays consistent with the debug-mode registry.
-*
-* Issue #305: CDP-only tools are also listed with explicit descriptions so
-* agents do not get "Unknown tool" failures — they get a clear tier-filter
-* error message instead.
-*/
-const DEV_TOOL_DEFINITIONS = [
-	{
-		name: "AIT.getMockState",
-		description: "Returns the devtools mock state snapshot (window.__ait) from the running browser session — environment, permissions, location, auth, network, IAP, and more. Read-only. Requires the Vite dev server running with the @ait-co/devtools unplugin option `mcp: true`. Same tool as in debug mode, where the in-app side reports it over the AIT domain.",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "AIT.getOperationalEnvironment",
-		description: "Returns the operational environment + SDK/app version derived from the dev mock state. Read-only.",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "AIT.getSdkCallHistory",
-		description: "Returns the SDK call trace. In dev mode the HTTP mock-state endpoint records no trace, so this returns an empty list; in debug mode it is populated over the AIT domain. Read-only.",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "devtools_get_mock_state",
-		description: "Backward-compatible alias of AIT.getMockState (the original devtools#130 name). Returns the current AIT DevTools mock state snapshot. Read-only. Prefer AIT.getMockState in new configs.",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "list_pages",
-		description: "dev-mode: returns the Vite dev server URL as a single-entry page list. No CDP relay is involved — `tunnel.up` is always false and `devMode: true` marks this as a shim result. Call this first to confirm the dev server is reachable. In debug mode (`devtools-mcp` / `--mode=local`) this returns real attached pages.",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "get_debug_status",
-		description: "dev-mode: reports the current dev session state — Vite endpoint URL, last fetch timestamp/error, mock state endpoint reachability, mode (\"dev\"), and environment metadata — in one call. Use this any time to confirm what the dev server is doing or when its connection is suspect. In debug mode this returns tunnel/relay/attach status instead.",
-		inputSchema: {
-			type: "object",
-			properties: { recent_errors_limit: {
-				type: "number",
-				description: "Ignored in dev-mode (no error ring buffer). Present for schema parity."
-			} },
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "measure_safe_area",
-		description: "dev-mode: reads safe-area insets from the mock state snapshot via the Vite endpoint. Returns `{ source: \"mock-vite\", sdkInsets, sdkInsetsSource: \"window.__ait\", ... }`. Values reflect what the DevTools panel reports at the time of the last state push. In debug mode this runs a Runtime.evaluate CDP probe on the attached page.",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "call_sdk",
-		description: "dev-mode: calls a mock SDK method via the Vite mock state endpoint. Supported methods read from window.__ait mock state (e.g. getOperationalEnvironment). Returns the same `{ok, value}` / `{ok, error}` envelope as debug mode. In debug mode this calls the real SDK via window.__sdkCall over CDP.",
-		inputSchema: {
-			type: "object",
-			properties: {
-				name: {
-					type: "string",
-					description: "Mock SDK method name to call (e.g. \"getOperationalEnvironment\")."
-				},
-				args: {
-					type: "array",
-					description: "Arguments (ignored in dev-mode mock path; present for schema parity).",
-					items: {}
-				}
-			},
-			required: ["name"]
-		},
-		availableIn: "both"
-	},
-	{
-		name: "start_attach",
-		description: "Switches into a relay mode (if given), builds a self-attaching deep-link QR for a real device, and waits for the phone to attach — all in one call. NOT available in dev-mode — requires a live cloudflared relay (Tier B, relay-only). To use this tool: restart the MCP server with `--mode=debug` (or omit --mode) and set MCP_ENV=relay, then call start_attach to generate the QR for phone scanning. See: https://docs.aitc.dev/guides/debug-relay",
-		inputSchema: {
-			type: "object",
-			properties: {
-				mode: {
-					type: "string",
-					enum: [
-						"local-browser",
-						"relay-sandbox",
-						"relay-staging"
-					],
-					description: "Optional relay mode to switch into before attaching."
-				},
-				scheme_url: {
-					type: "string",
-					description: "The intoss-private:// URL from `ait deploy --scheme-only` (env 3/relay-staging)."
-				},
-				wait_timeout_seconds: {
-					type: "number",
-					description: "Maximum seconds to wait for a page to attach (default 60, range 1–600). Invalid inputs fall back to default."
-				}
-			},
-			required: []
-		},
-		availableIn: "relay"
-	},
-	{
-		name: "evaluate",
-		description: "Evaluates an arbitrary JavaScript expression via CDP Runtime.evaluate. NOT available in dev-mode (no CDP connection). Switch to `--mode=local` or `--mode=debug` for CDP access.",
-		inputSchema: {
-			type: "object",
-			properties: { expression: {
-				type: "string",
-				description: "JavaScript expression to evaluate."
-			} },
-			required: ["expression"]
-		},
-		availableIn: "both"
-	},
-	{
-		name: "take_screenshot",
-		description: "Captures a PNG screenshot via CDP Page.captureScreenshot. NOT available in dev-mode (no CDP connection). Switch to `--mode=local` or `--mode=debug`.",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "get_dom_document",
-		description: "Returns the DOM tree via CDP DOM.getDocument. NOT available in dev-mode (no CDP connection). Switch to `--mode=local` or `--mode=debug`.",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "take_snapshot",
-		description: "Captures a serialized page snapshot via CDP DOMSnapshot.captureSnapshot. NOT available in dev-mode (no CDP connection). Switch to `--mode=local` or `--mode=debug`.",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "list_console_messages",
-		description: "Lists console messages captured via CDP Runtime.consoleAPICalled. NOT available in dev-mode (no CDP connection). Switch to `--mode=local` or `--mode=debug`.",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "list_network_requests",
-		description: "Lists network requests captured via CDP Network events. NOT available in dev-mode (no CDP connection). Switch to `--mode=local` or `--mode=debug`.",
-		inputSchema: {
-			type: "object",
-			properties: {},
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "list_exceptions",
-		description: "Lists JS exceptions captured via CDP Runtime.exceptionThrown. NOT available in dev-mode (no CDP connection). Switch to `--mode=local` or `--mode=debug`.",
-		inputSchema: {
-			type: "object",
-			properties: { limit: {
-				type: "number",
-				description: "Maximum exceptions to return."
-			} },
-			required: []
-		},
-		availableIn: "both"
-	},
-	{
-		name: "run_tests",
-		description: "Runs mini-app test files on the attached page over CDP (Runtime.evaluate). NOT available in dev-mode (no CDP connection). Switch to `--mode=local` or `--mode=debug`.",
-		inputSchema: {
-			type: "object",
-			properties: {
-				files: {
-					type: "array",
-					items: { type: "string" },
-					description: "Glob patterns or file paths to run."
-				},
-				projectRoot: {
-					type: "string",
-					description: "Glob base directory."
-				},
-				timeout_ms: {
-					type: "number",
-					description: "Per-file evaluate timeout in ms."
-				}
-			},
-			required: ["files"]
-		},
-		availableIn: "both"
-	}
-];
-/** All tool names served in dev-mode (including tier-filter stubs). */
-const DEV_TOOL_NAMES = new Set(DEV_TOOL_DEFINITIONS.map((t) => t.name));
-/** CDP-only tools — return a tier-filter error in dev-mode. */
-const CDP_ONLY_TOOL_NAMES = new Set([
-	"evaluate",
-	"take_screenshot",
-	"get_dom_document",
-	"take_snapshot",
-	"list_console_messages",
-	"list_network_requests",
-	"list_exceptions",
-	"run_tests"
-]);
-/**
-* Tier B tools — relay-only per RFC #277.
-* Listed in dev-mode tool surface (issue #323) so agents get a hand-off hint
-* toward `--mode=debug` instead of "Unknown tool".
+* Throws at module evaluation: this entry only ever loads inside a developer's
+* MCP host / terminal, never in a shipped app bundle, so failing immediately
+* and loudly is the helpful behaviour. Contrast with `src/stubs/in-app.ts`,
+* which must not throw.
 */
-const TIER_B_TOOL_NAMES = new Set(["start_attach"]);
-/**
-* Builds the `list_pages` dev-mode shim response.
-* Returns the Vite dev URL as a single-entry page list with `devMode: true`.
-*/
-function buildDevListPagesResult(devtoolsUrl) {
-	return {
-		pages: [{
-			url: devtoolsUrl,
-			title: "dev fixture",
-			attached: true
-		}],
-		tunnel: { up: false },
-		devMode: true,
-		singleAttachModel: true
-	};
-}
-/**
-* Builds the `get_debug_status` dev-mode response.
-* Probes the mock state endpoint reachability and returns server metadata.
-*/
-async function buildDevDiagnostics(devtoolsUrl, stateEndpoint, fetchImpl) {
-	let reachable = false;
-	let lastFetchError = null;
-	let lastFetchAt = null;
-	try {
-		const res = await fetchImpl(stateEndpoint);
-		reachable = res.ok;
-		lastFetchAt = (/* @__PURE__ */ new Date()).toISOString();
-		if (!res.ok) lastFetchError = `HTTP ${res.status} ${res.statusText}`;
-	} catch (err) {
-		lastFetchError = err instanceof Error ? err.message : String(err);
-		lastFetchAt = (/* @__PURE__ */ new Date()).toISOString();
-	}
-	return {
-		mode: "dev",
-		devtoolsUrl,
-		mcpStateEndpoint: stateEndpoint,
-		mockStateEndpointReachable: reachable,
-		lastFetchAt,
-		lastFetchError,
-		environment: {
-			kind: "mock",
-			reason: "dev-mode — Vite HTTP endpoint, no CDP connection"
-		},
-		nextRecommendedAction: reachable ? null : "mock state endpoint가 응답하지 않습니다. Vite dev 서버가 `mcp: true` 옵션으로 실행 중인지 확인하고, 필요하면 dev 서버를 재시작하세요."
-	};
-}
-/**
-* Builds the `measure_safe_area` dev-mode response from mock state.
-* Reads `safeAreaInsets` from the AIT mock state and returns a parity-schema
-* result with `source: 'mock-vite'`.
-*/
-async function buildDevMeasureSafeArea(aitSource) {
-	const rawInsets = (await aitSource.get("AIT.getMockState")).safeAreaInsets;
-	let sdkInsets = null;
-	if (rawInsets !== null && typeof rawInsets === "object" && !Array.isArray(rawInsets)) {
-		const r = rawInsets;
-		sdkInsets = {
-			top: typeof r.top === "number" ? r.top : 0,
-			right: typeof r.right === "number" ? r.right : 0,
-			bottom: typeof r.bottom === "number" ? r.bottom : 0,
-			left: typeof r.left === "number" ? r.left : 0
-		};
-	}
-	return {
-		source: "mock-vite",
-		cssEnv: {
-			top: 0,
-			right: 0,
-			bottom: 0,
-			left: 0
-		},
-		sdkInsets,
-		sdkInsetsSource: sdkInsets !== null ? "window.__ait" : null,
-		...sdkInsets === null ? { sdkInsetsError: "window.__ait.state.safeAreaInsets not found in mock state snapshot" } : {},
-		innerWidth: null,
-		innerHeight: null,
-		devicePixelRatio: null,
-		userAgent: null,
-		navBarHeight: null,
-		navBarHeightSource: "not-available-in-dev-mode"
-	};
-}
-/**
-* Builds the `call_sdk` dev-mode response.
-*
-* Supported methods are served from the mock state snapshot. Unsupported
-* methods return `{ ok: false, error: 'dev-mode-unsupported: ...' }` so the
-* agent gets an informative message rather than a generic failure.
-*/
-async function buildDevCallSdk(methodName, aitSource) {
-	switch (methodName) {
-		case "getOperationalEnvironment": return {
-			ok: true,
-			value: (await aitSource.get("AIT.getOperationalEnvironment")).environment
-		};
-		default: return {
-			ok: false,
-			error: `dev-mode-unsupported: "${methodName}"은 dev-mode에서 직접 호출할 수 없습니다. CDP bridge(window.__sdkCall)가 없으므로 실제 SDK 호출은 \`--mode=local\` 또는 debug 모드에서만 가능합니다. 지원 메서드: getOperationalEnvironment (mock state에서 읽음).`
-		};
-	}
-}
-/** Builds the dev-mode MCP server (does not connect a transport). */
-function createDevServer(deps = {}) {
-	const devtoolsUrl = process.env.AIT_DEVTOOLS_URL ?? "http://localhost:5173";
-	const stateEndpoint = `${devtoolsUrl}/api/ait-devtools/state`;
-	const aitSource = deps.aitSource ?? new HttpAitSource({ stateEndpoint });
-	const server = new Server({
-		name: "ait-devtools",
-		version: "0.1.144"
-	}, { capabilities: { tools: {} } });
-	server.setRequestHandler(ListToolsRequestSchema, () => ({ tools: DEV_TOOL_DEFINITIONS.map((tool) => ({ ...tool })) }));
-	server.setRequestHandler(CallToolRequestSchema, async (request) => {
-		const name = request.params.name;
-		if (!DEV_TOOL_NAMES.has(name)) return mcpError(`알 수 없는 tool: ${name}`);
-		if (CDP_ONLY_TOOL_NAMES.has(name)) return mcpError(`${name}: ${CDP_UNAVAILABLE_IN_DEV_MODE}`);
-		if (TIER_B_TOOL_NAMES.has(name)) return tierRejectionError(name, "relay", "mock", "dev-mode — Vite HTTP endpoint, no CDP/relay connection. `--mode=debug` (または `devtools-mcp` without --mode) + MCP_ENV=relay로 재시작하세요.");
-		try {
-			const effective = name === "devtools_get_mock_state" ? "AIT.getMockState" : name;
-			if (isAitToolName(effective)) switch (effective) {
-				case "AIT.getMockState": return jsonResult(await getMockState(aitSource));
-				case "AIT.getOperationalEnvironment": return jsonResult(await getOperationalEnvironment(aitSource));
-				case "AIT.getSdkCallHistory": return jsonResult(await getSdkCallHistory(aitSource));
-				default: return mcpError(`알 수 없는 tool: ${name}`);
-			}
-			switch (name) {
-				case "list_pages": return envelopeResult("list_pages", buildDevListPagesResult(devtoolsUrl));
-				case "get_debug_status": return envelopeResult("get_debug_status", await buildDevDiagnostics(devtoolsUrl, stateEndpoint, (url) => fetch(url)));
-				case "measure_safe_area": return envelopeResult("measure_safe_area", await buildDevMeasureSafeArea(aitSource));
-				case "call_sdk": {
-					const sdkName = request.params.arguments?.name;
-					if (typeof sdkName !== "string" || sdkName === "") return mcpError("call_sdk: name 인자가 비어 있습니다. 호출할 메서드 이름을 전달하세요.");
-					return envelopeResult("call_sdk", await buildDevCallSdk(sdkName, aitSource));
-				}
-				default: return mcpError(`알 수 없는 tool: ${name}`);
-			}
-		} catch (err) {
-			return mcpError(`${name} 실패: ${err instanceof Error ? err.message : String(err)}\nVite dev 서버가 @ait-co/devtools unplugin \`mcp: true\` 옵션으로 실행 중인지 확인하세요. AIT_DEVTOOLS_URL 환경변수가 올바르게 설정됐는지도 확인하세요.`);
-		}
-	});
-	return server;
-}
-function jsonResult(value) {
-	return { content: [{
-		type: "text",
-		text: JSON.stringify(value, null, 2)
-	}] };
-}
-/**
-* Wraps `value` in a `ToolEnvelope` (when compat mode is off) and returns it
-* as a text content block. In dev-mode `env` is always `'mock'` and
-* `attached` is always `true` (the Vite dev server is the single implicit
-* "attached" page).
-*
-* When `AIT_MCP_COMPAT=chrome-devtools` the envelope is skipped and the raw
-* value is returned — identical to `jsonResult` (0.1.x back-compat).
-*/
-function envelopeResult(tool, value) {
-	const wrapped = wrapEnvelope(value, {
-		tool,
-		env: "mock",
-		attached: true
-	});
-	return { content: [{
-		type: "text",
-		text: JSON.stringify(wrapped, null, 2)
-	}] };
-}
-/** Builds the dev-mode server and connects it over stdio. */
-async function runDevServer() {
-	const server = createDevServer();
-	const transport = new StdioServerTransport();
-	await server.connect(transport);
-}
+throw new Error(movedMessage("@ait-co/devtools/mcp/server", `${DEBUGGER_PACKAGE}/mcp/server`, `pnpm add -D ${DEBUGGER_PACKAGE}`));
 //#endregion
-export { createDevServer, runDevServer };
+export {};
 
 //# sourceMappingURL=server.js.map