@buildbase/sdk 0.0.51 → 0.0.54

package/dist/index.d.ts

@@ -1116,6 +1116,8 @@ declare abstract class BaseApi {
     private reportError;
     /** Execute fetch with timeout, retries, debug logging, and error callback. */
     private executeFetch;
+    /** Backoff sleep that ends early (with an AbortError) when the signal fires. */
+    private static delay;
     /** Internal: execute fetch against a resolved URL with timeout, retries, debug logging, and error callback. */
     private executeFetchUrl;
     /**
@@ -1860,15 +1862,40 @@ declare function cleanBBParams(): void;
 /**
  * Security utilities for the SDK.
  */
+/** Options for {@link validateRedirectUrl}. */
+interface RedirectValidationOptions {
+    /**
+     * Require absolute URLs to be same-origin with the current page
+     * (`window.location.origin`). Relative paths always pass. Use for any
+     * user-controllable target (return URLs, `?next=` params) — it turns an
+     * open redirect into a same-site navigation. Outside a browser there is no
+     * origin to compare against, so absolute URLs are rejected.
+     */
+    sameOrigin?: boolean;
+    /**
+     * Origins additionally allowed for absolute URLs, e.g.
+     * `['https://checkout.stripe.com']`. Matched against `URL.origin` exactly.
+     */
+    allowedOrigins?: string[];
+}
 /**
- * Validate that a URL is safe to redirect to.
- * Prevents open redirect attacks by ensuring the URL uses https (or http on localhost).
- * Returns the URL if safe, or null if not.
+ * Validate that a URL is safe to redirect to. Returns the URL if safe, null if
+ * not.
+ *
+ * - **Relative paths** (`/dashboard`) are safe and always allowed —
+ *   protocol-relative (`//evil.com`) and backslash (`/\evil.com`) forms are
+ *   not treated as relative.
+ * - **Absolute URLs** must be `https:` (or `http:` on localhost). By default
+ *   any such URL passes (needed for cross-origin targets like Stripe checkout);
+ *   pass `sameOrigin` and/or `allowedOrigins` to restrict — then the URL must
+ *   match at least one of them. Always restrict user-controllable targets.
  */
-declare function validateRedirectUrl(url: string | null | undefined): string | null;
+declare function validateRedirectUrl(url: string | null | undefined, options?: RedirectValidationOptions): string | null;
 /**
  * Safely redirect to a URL after validating it.
- * Falls back to fallbackUrl if the target URL is invalid.
+ * Falls back to fallbackUrl (itself validated — else `/`) if the target URL is
+ * invalid. Pass `options` to restrict user-controllable targets (see
+ * {@link validateRedirectUrl}).
  *
  * Browser-only: navigation requires `window.location`. On non-browser runtimes
  * (Node, edge, Deno, Bun) there is nothing to navigate, so this is a no-op that
@@ -1876,7 +1903,7 @@ declare function validateRedirectUrl(url: string | null | undefined): string | n
  * that needs the resolved target should call {@link validateRedirectUrl} and
  * issue the redirect with its own framework (e.g. `Response.redirect`).
  */
-declare function safeRedirect(url: string | null | undefined, fallbackUrl?: string): boolean;
+declare function safeRedirect(url: string | null | undefined, fallbackUrl?: string, options?: RedirectValidationOptions): boolean;
 
 /**
  * Auth intent preservation — saves and restores the URL the user was on
@@ -1884,7 +1911,8 @@ declare function safeRedirect(url: string | null | undefined, fallbackUrl?: stri
  */
 /**
  * Save the current URL as the post-auth redirect target.
- * Validates the URL before storing — rejects unsafe URLs silently.
+ * Validates the URL before storing — rejects unsafe URLs silently. Same-origin
+ * only: the return URL is "where the user was", never another site.
  */
 declare function saveAuthIntent(returnUrl: string): void;
 /**
@@ -1916,7 +1944,15 @@ declare const PLAN_CURRENCY_OPTIONS: {
     value: "usd" | "eur" | "gbp" | "jpy" | "cad" | "aud" | "chf" | "cny" | "hkd" | "sgd" | "inr" | "mxn" | "brl" | "nzd" | "sek" | "nok" | "dkk" | "pln" | "thb";
     label: string;
 }[];
-/** Format cents as money string (e.g. 1999, "usd" -> "$19.99"). Caller must pass currency (e.g. from plan or workspace). */
+/** True when `currency` has no minor unit (JPY, KRW, …) — amounts are whole units, not cents. */
+declare function isZeroDecimalCurrency(currency: string | null | undefined): boolean;
+/**
+ * Convert a minor-unit amount to its display number for `currency`:
+ * `minorAmountToDisplay(1999, 'usd')` → `"19.99"`,
+ * `minorAmountToDisplay(1000, 'jpy')` → `"1,000"` (zero-decimal — no division).
+ */
+declare function minorAmountToDisplay(amount: number, currency: string): string;
+/** Format cents as money string (e.g. 1999, "usd" -> "$19.99"; 1000, "jpy" -> "¥1,000"). Caller must pass currency (e.g. from plan or workspace). */
 declare function formatCents(cents: number, currency: string): string;
 /** Translatable labels for overage/quota formatting */
 interface OverageLabels {
@@ -2186,8 +2222,9 @@ interface PermissionContext {
  * 3. settings.workspace.permissions[role] (org-level template)
  * 4. DEFAULT_ROLE_PERMISSIONS[role] (SDK built-in defaults)
  * 5. Merge in appPermissions (developer-defined) for the role
- * 6. If role not found → use defaultRole from settings, then 'member'
- * 7. Apply setting restrictions (canInviteMembers, canCreateWorkspace)
+ * 6. If role not found → use an explicitly-configured, known `defaultRole`;
+ *    otherwise deny (no silent 'member' fallback for unknown roles)
+ * 7. Apply setting restrictions (canInviteMembers)
  */
 declare function resolvePermissions(ctx: PermissionContext): Set<string>;
 /**
@@ -2222,6 +2259,652 @@ interface BetaFormResponse {
     message: string;
 }
 
+/**
+ * Type-safe translation keys for the BuildBase SDK.
+ * All user-facing strings are defined here.
+ */
+interface SDKMessages {
+    security: {
+        connectedAgentsTitle: string;
+        connectedAgentsDescription: string;
+        connectedAgentsDisconnect: string;
+        connectedAgentsEmpty: string;
+        connectedAgentsAccess: string;
+        connectedAgentsGranted: string;
+        inactive: string;
+        inactiveHint: string;
+        passkeysTitle: string;
+        passkeysDescription: string;
+        noPasskeys: string;
+        addHint: string;
+        rename: string;
+        remove: string;
+        removeTitle: string;
+        removeDescription: string;
+        renamePlaceholder: string;
+        lastUsed: string;
+        added: string;
+    };
+    settings: {
+        titles: {
+            profile: string;
+            security: string;
+            general: string;
+            users: string;
+            subscription: string;
+            usage: string;
+            credits: string;
+            features: string;
+            notifications: string;
+            permissions: string;
+            danger: string;
+        };
+        sidebar: {
+            account: string;
+            workspace: string;
+            profile: string;
+            security: string;
+            general: string;
+            users: string;
+            subscription: string;
+            usage: string;
+            credits: string;
+            features: string;
+            notifications: string;
+            permissions: string;
+            danger: string;
+        };
+        common: {
+            refresh: string;
+            refreshing: string;
+            retry: string;
+            retrying: string;
+            save: string;
+            saving: string;
+            cancel: string;
+            delete: string;
+            dismiss: string;
+            loading: string;
+            success: string;
+            error: string;
+            refreshAction: string;
+            retryAction: string;
+            noPermissionTitle: string;
+            noPermissionDescription: string;
+            billingManageOnly: string;
+            openSettings: string;
+            back: string;
+        };
+    };
+    subscription: {
+        managePlan: string;
+        changePlan: string;
+        viewPricingPlans: string;
+        viewPlans: string;
+        upgradePlan: string;
+        subscribe: string;
+        currentPlan: string;
+        noSubscription: string;
+        choosePlan: string;
+        choosePlanDescription: string;
+        forWorkspace: string;
+        planUpdateAvailable: string;
+        updateSuccess: string;
+        updateFailed: string;
+        cancelTitle: string;
+        cancelConfirm: string;
+        cancelKeep: string;
+        cancelButton: string;
+        canceling: string;
+        cancelSuccess: string;
+        cancelNotCharged: string;
+        cancelResumeAnytime: string;
+        cancelTrialTitle: string;
+        cancelTrialConfirm: string;
+        cancelTrialAccess: string;
+        cancelTrialNoCharge: string;
+        cancelTrialResume: string;
+        cancelTrialKeep: string;
+        cancelTrialButton: string;
+        resumeTitle: string;
+        resumeTrial: string;
+        resumeConfirm: string;
+        resumeKeep: string;
+        resumeButton: string;
+        resuming: string;
+        resumeSuccess: string;
+        managePayment: string;
+        openingPortal: string;
+        viewAllPlans: string;
+        scheduledCancellation: string;
+        scheduledTrialCancellation: string;
+        paymentPastDue: string;
+        paymentPastDueDescription: string;
+        subscriptionPaused: string;
+        subscriptionPausedDescription: string;
+        errorLoading: string;
+        errorLoadingDescription: string;
+        errorProcessing: string;
+        errorCanceling: string;
+        errorResuming: string;
+        invalidWorkspace: string;
+        billingInterval: {
+            monthly: string;
+            quarterly: string;
+            yearly: string;
+            perMonth: string;
+            perQuarter: string;
+            perYear: string;
+        };
+        seats: {
+            title: string;
+            members: string;
+            included: string;
+            billable: string;
+            perExtraSeat: string;
+            limit: string;
+            includedSeats: string;
+            maxSeats: string;
+            freeWithBase: string;
+            allIncluded: string;
+            extra: string;
+            unlimited: string;
+        };
+        items: {
+            features: string;
+            limits: string;
+            quotas: string;
+            credits: string;
+            creditsPerMonth: string;
+            creditsOneTime: string;
+            creditRenewal: string;
+            creditModeReset: string;
+            creditModeTopup: string;
+            creditModeLifetime: string;
+            /** @deprecated */
+            creditsPerPeriod: string;
+            /** @deprecated */
+            creditRollover: string;
+        };
+        checkout: {
+            upgrade: string;
+            downgrade: string;
+            switchTo: string;
+            select: string;
+        };
+        status: {
+            active: string;
+            canceling: string;
+            trial: string;
+            canceled: string;
+            pastDue: string;
+            paused: string;
+            deprecated: string;
+            unknown: string;
+        };
+        plan: string;
+        invoicesTab: string;
+        tabsLabel: string;
+        endsOn: string;
+        versionLabel: string;
+        changePlanButton: string;
+        noPlanAssigned: string;
+        free: string;
+        perSeatDisplay: string;
+        estTotalDisplay: string;
+        nextBillingDisplay: string;
+        membersInWorkspace: string;
+        billingInCurrency: string;
+        savingsPercent: string;
+        switchToInterval: string;
+        seatPriceDisplay: string;
+        trialEnded: string;
+        trialEndsIn: string;
+        onTrial: string;
+        upgradeToKeepAccess: string;
+        viewInvoices: string;
+        cancelTrial: string;
+        dunningFinal: string;
+        dunningSuspended: string;
+        dunningRecovery: string;
+        dunningSuspendedDescription: string;
+        dunningRecoveryDescription: string;
+        cancelEndDescription: string;
+        trialEndDescription: string;
+        cancelEndFallback: string;
+        resumeChargeDate: string;
+        resumeChargeFallback: string;
+        resumeContinue: string;
+        resumeCancelAnytime: string;
+        retainAccess: string;
+        retainAccessFallback: string;
+        noPlansAvailable: string;
+        noPlansAvailableHint: string;
+        startTrialDescription: string;
+        noSubscriptionDescription: string;
+        startFreeTrial: string;
+        startTrialDays: string;
+        trialBadge: string;
+    };
+    users: {
+        emailPlaceholder: string;
+        title: string;
+        adminOnly: string;
+        inviteByEmail: string;
+        inviteButton: string;
+        inviting: string;
+        inviteSuccess: string;
+        emailRequired: string;
+        invalidEmail: string;
+        inviteFailed: string;
+        seatLimitReached: string;
+        memberLimitReached: string;
+        role: string;
+        you: string;
+        owner: string;
+        noMembers: string;
+        extraSeatCost: string;
+        unknownUser: string;
+        seats: string;
+        members: string;
+        included: string;
+        perExtraSeat: string;
+        maxMembers: string;
+        available: string;
+        noMemberLimit: string;
+        seatHeading: string;
+        limitReached: string;
+        memberCount: string;
+        subscriptionRequired: string;
+        seatLimitMessage: string;
+        settingsLimitMessage: string;
+        memberLimitMessage: string;
+        selectRole: string;
+        inviteAs: string;
+    };
+    invoices: {
+        title: string;
+        description: string;
+        pay: string;
+        view: string;
+        viewDetails: string;
+        download: string;
+        errorLoading: string;
+        noInvoices: string;
+        noInvoicesWithSub: string;
+        paidAmount: string;
+        na: string;
+        status: {
+            draft: string;
+            open: string;
+            paid: string;
+            uncollectible: string;
+            void: string;
+        };
+    };
+    usage: {
+        title: string;
+        description: string;
+        totalResources: string;
+        overallUsage: string;
+        inOverage: string;
+        estOverageCost: string;
+        overageDetected: string;
+        overageDescription: string;
+        overageUnits: string;
+        rate: string;
+        billableBlocks: string;
+        estimatedCharge: string;
+        noData: string;
+        noDataHint: string;
+        used: string;
+        remaining: string;
+        overLimit: string;
+        percentUsed: string;
+        availableRemaining: string;
+        overLimitCount: string;
+        overageWarning: string;
+        fullyUsed: string;
+        renewingSoon: string;
+        almostFull: string;
+        overage: string;
+        errorLoading: string;
+        perUnit: string;
+        perUnits: string;
+        rateDisplay: string;
+        resourcesExceeded: string;
+        estOverageCharges: string;
+        overageRateDisplay: string;
+        resetDateDisplay: string;
+        daysRemainingDisplay: string;
+    };
+    profile: {
+        email: string;
+        name: string;
+        language: string;
+        country: string;
+        currency: string;
+        timezone: string;
+        profileImage: string;
+        success: string;
+        nameMinLength: string;
+        save: string;
+        reset: string;
+    };
+    general: {
+        ownerOnly: string;
+        name: string;
+        namePlaceholder: string;
+        nameMinLength: string;
+        billingCurrency: string;
+        icon: string;
+        iconDescription: string;
+        imageUrl: string;
+        imageUrlPlaceholder: string;
+        imageUrlDescription: string;
+        previewLabel: string;
+        previewImageAlt: string;
+        success: string;
+        chooseEmoji: string;
+        customImageUrl: string;
+        updateWorkspace: string;
+    };
+    features: {
+        title: string;
+        ownerOnly: string;
+        noFeatures: string;
+        enabled: string;
+        disabled: string;
+        enabling: string;
+        disabling: string;
+        featureSuccess: string;
+        updateSuccess: string;
+        actionStatus: string;
+    };
+    danger: {
+        title: string;
+        adminOnly: string;
+        deleteWorkspace: string;
+        deleteConfirm: string;
+        deleteWarning: string;
+        deleting: string;
+        deleteDescription: string;
+        deleteConfirmDescription: string;
+        failedToDelete: string;
+    };
+    notifications: {
+        title: string;
+        permissionDenied: string;
+        notSupported: string;
+        manageDescription: string;
+        blocked: string;
+        blockedDescription: string;
+        pushTitle: string;
+        pushEnabledDescription: string;
+        pushDisabledDescription: string;
+        enabling: string;
+        disabling: string;
+        enable: string;
+        disable: string;
+        toggleAction: string;
+        pushDescription: string;
+        deviceNote: string;
+        prefsSaved: string;
+        loadingPrefs: string;
+        categories: {
+            workspace: string;
+            billing: string;
+        };
+        events: {
+            workspace_invite: string;
+            workspace_invite_desc: string;
+            workspace_removed: string;
+            workspace_removed_desc: string;
+            workspace_role_changed: string;
+            workspace_role_changed_desc: string;
+            subscription_created: string;
+            subscription_created_desc: string;
+            subscription_upgraded: string;
+            subscription_upgraded_desc: string;
+            subscription_canceled: string;
+            subscription_canceled_desc: string;
+            subscription_suspended: string;
+            subscription_suspended_desc: string;
+            trial_ending: string;
+            trial_ending_desc: string;
+            trial_expired: string;
+            trial_expired_desc: string;
+            payment_failed: string;
+            payment_failed_desc: string;
+            payment_action_required: string;
+            payment_action_required_desc: string;
+            payment_succeeded: string;
+            payment_succeeded_desc: string;
+        };
+        unblock: {
+            firefox: {
+                step1: string;
+                step2: string;
+                step3: string;
+                step4: string;
+            };
+            safari: {
+                step1: string;
+                step2: string;
+                step3: string;
+                step4: string;
+            };
+            edge: {
+                step1: string;
+                step2: string;
+                step3: string;
+                step4: string;
+            };
+            chrome: {
+                step1: string;
+                step2: string;
+                step3: string;
+                step4: string;
+            };
+        };
+    };
+    quota: {
+        includedOnly: string;
+        includedWithOverage: string;
+        includedHardLimit: string;
+        unitFallback: string;
+    };
+    pricing: {
+        title: string;
+        description: string;
+        currency: string;
+        billingIn: string;
+        noPlansCurrency: string;
+        noPlansCurrencyHint: string;
+        noPlans: string;
+        free: string;
+        included: string;
+        save: string;
+        current: string;
+        processing: string;
+        unavailable: string;
+        selectCurrency: string;
+        billingInterval: string;
+    };
+    beta: {
+        logoAlt: string;
+        nameLabel: string;
+        emailLabel: string;
+        submitText: string;
+        submittingText: string;
+        errorMessage: string;
+        tryAgain: string;
+        privacyConsent: string;
+        privacyPolicy: string;
+        and: string;
+        termsOfService: string;
+    };
+    workspace: {
+        switchTitle: string;
+        switchDescription: string;
+        notLoggedIn: string;
+        availableWorkspaces: string;
+        loadingWorkspaces: string;
+        searchPlaceholder: string;
+        noWorkspacesFound: string;
+        noWorkspacesAvailable: string;
+        switchTo: string;
+        membersCount: string;
+        createNew: string;
+        createTitle: string;
+        createDescription: string;
+        workspaceName: string;
+        workspaceNamePlaceholder: string;
+        workspaceNameMinLength: string;
+        workspaceIcon: string;
+        iconDescription: string;
+        chooseEmoji: string;
+        customImageUrl: string;
+        imageUrl: string;
+        imageUrlPlaceholder: string;
+        imageUrlDescription: string;
+        invalidUrl: string;
+        creating: string;
+        createWorkspace: string;
+    };
+    dropdowns: {
+        search: string;
+        chooseOption: string;
+        chooseCountry: string;
+        searchCountry: string;
+        chooseLanguage: string;
+        searchLanguage: string;
+        chooseCurrency: string;
+        searchCurrency: string;
+        chooseTimezone: string;
+        searchTimezone: string;
+        noResults: string;
+    };
+    push: {
+        failedToSubscribe: string;
+        failedToUnsubscribe: string;
+    };
+    permissions: {
+        title: string;
+        description: string;
+        ownerOnly: string;
+        save: string;
+        saving: string;
+        saveSuccess: string;
+    };
+    credits: {
+        title: string;
+        description: string;
+        balance: string;
+        available: string;
+        totalGranted: string;
+        totalConsumed: string;
+        totalExpired: string;
+        noCredits: string;
+        noCreditsHint: string;
+        buyCredits: string;
+        buyAmount: string;
+        purchasing: string;
+        packages: string;
+        noPackages: string;
+        creditsAmount: string;
+        validityDays: string;
+        validityUnlimited: string;
+        transactions: string;
+        noTransactions: string;
+        loadMore: string;
+        viewAll: string;
+        expiringSoon: string;
+        expiringInDays: string;
+        noExpiring: string;
+        type: {
+            plan_grant: string;
+            pack_purchased: string;
+            consumed: string;
+            expired: string;
+            admin_grant: string;
+            admin_revoke: string;
+            refund: string;
+        };
+        dialogTitle: string;
+        dialogDescription: string;
+        dialogDescriptionWorkspace: string;
+        perCredit: string;
+        purchaseSuccess: string;
+        purchaseCanceled: string;
+        purchaseFailed: string;
+        errorLoading: string;
+        insufficientCredits: string;
+    };
+    loading: {
+        restoringSession: string;
+        redirecting: string;
+        signingIn: string;
+        verifyingAccount: string;
+        almostThere: string;
+    };
+    errors: {
+        networkError: string;
+        unauthorized: string;
+        notFound: string;
+        generic: string;
+        fetchPlans: string;
+        fetchPlanGroup: string;
+        fetchPlanGroupVersion: string;
+        fetchPlanGroupVersions: string;
+        fetchSubscription: string;
+        createCheckout: string;
+        updateSubscription: string;
+        fetchInvoices: string;
+        fetchInvoice: string;
+        openBillingPortal: string;
+        cancelSubscription: string;
+        resumeSubscription: string;
+        recordUsage: string;
+        fetchQuotaUsage: string;
+        fetchAllQuotaUsage: string;
+        fetchUsageLogs: string;
+        fetchCreditBalance: string;
+        consumeCredits: string;
+        purchaseCredits: string;
+        fetchCreditPackages: string;
+        fetchCreditTransactions: string;
+        fetchExpiringCredits: string;
+    };
+}
+/**
+ * Generates a union of all valid dot-separated key paths from SDKMessages.
+ * Supports up to 4 levels of nesting (covers all current keys, e.g.
+ * "notifications.unblock.firefox.step1").
+ * Used to make `t()` calls compile-time safe with autocomplete.
+ *
+ * @example
+ * TranslationKey → "settings.titles.profile" | "settings.common.refresh" | ...
+ */
+type Level1 = keyof SDKMessages & string;
+type Level2 = {
+    [K1 in Level1]: SDKMessages[K1] extends Record<string, unknown> ? `${K1}.${keyof SDKMessages[K1] & string}` : never;
+}[Level1];
+type Level3 = {
+    [K1 in Level1]: SDKMessages[K1] extends Record<string, unknown> ? {
+        [K2 in keyof SDKMessages[K1] & string]: SDKMessages[K1][K2] extends Record<string, unknown> ? `${K1}.${K2}.${keyof SDKMessages[K1][K2] & string}` : never;
+    }[keyof SDKMessages[K1] & string] : never;
+}[Level1];
+type Level4 = {
+    [K1 in Level1]: SDKMessages[K1] extends Record<string, unknown> ? {
+        [K2 in keyof SDKMessages[K1] & string]: SDKMessages[K1][K2] extends Record<string, unknown> ? {
+            [K3 in keyof SDKMessages[K1][K2] & string]: SDKMessages[K1][K2][K3] extends Record<string, unknown> ? `${K1}.${K2}.${K3}.${keyof SDKMessages[K1][K2][K3] & string}` : never;
+        }[keyof SDKMessages[K1][K2] & string] : never;
+    }[keyof SDKMessages[K1] & string] : never;
+}[Level1];
+/** Union of all valid translation key paths (e.g. "settings.titles.profile") */
+type TranslationKey = Level2 | Level3 | Level4;
+
 /**
  * Verify that a webhook request came from BuildBase.
  *
@@ -2310,17 +2993,17 @@ declare function parseWebhookEvent(options: {
  *
  * Makes a consuming app "agent ready" (see https://isitagentready.com) by
  * serving the standard machine-readable discovery documents an AI agent looks
- * for — with the BuildBase server as the source of truth.
- *
- * The heavy lifting already lives on the platform: an org admin configures
- * agent readiness once (protected resources, scopes, llms.txt) and the server
- * publishes the OAuth2 authorization-server metadata (RFC 8414) and the
- * per-resource protected-resource metadata (RFC 9728). This module lets an app
- * re-serve those documents from its own origin — where agents actually look —
- * plus generate the static discovery documents (Agent Card, Agent Skills,
- * security.txt) from local config. The result: an org admin adds full agent
- * support to their app in a couple of lines, and never hand-writes a
- * `.well-known` route.
+ * for.
+ *
+ * Ownership is split: the platform owns AUTH — it publishes the OAuth2
+ * authorization-server metadata (RFC 8414) and this module re-serves it from
+ * the app's origin, where agents actually look. Everything else (protected
+ * resources and their scopes, RFC 9728 metadata, llms.txt, sitemap, Agent
+ * Card, Agent Skills, security.txt) is CONTENT the app owns — declared locally
+ * in {@link AgentReadyConfig} and generated here; the shared authorization
+ * server stays scope- and resource-agnostic. The result: an org admin adds
+ * full agent support to their app in a couple of lines, and never hand-writes
+ * a `.well-known` route.
  *
  * Zero React and no framework types — every function returns plain data. The
  * only runtime dependency is `fetch`; SHA-256 (for Agent Skills digests) is a
@@ -2332,34 +3015,31 @@ declare function parseWebhookEvent(options: {
  * @example Next.js App Router — the entire integration:
  * ```ts
  * // lib/agent-ready.ts
- * import type { AgentReadyConfig } from "@buildbase/sdk";
+ * import { resolveAgentPath, type AgentReadyConfig } from "@buildbase/sdk";
  * export const agentConfig: AgentReadyConfig = {
  *   serverUrl: process.env.BUILDBASE_URL!,
  *   orgId: process.env.BUILDBASE_ORG_ID!,
  *   siteUrl: "https://imejis.io",
  *   site: { name: "Imejis", description: "Generate images from templates via API." },
+ *   robots: { contentSignals: { search: true, aiInput: true, aiTrain: false } },
  * };
- *
- * // app/.well-known/[...path]/route.ts
- * import { resolveWellKnown } from "@buildbase/sdk";
- * import { agentConfig } from "@/lib/agent-ready";
- * export async function GET(req: Request) {
- *   const doc = await resolveWellKnown(new URL(req.url).pathname, agentConfig);
+ * export async function serveAgentPath(req: Request): Promise<Response> {
+ *   const doc = await resolveAgentPath(new URL(req.url).pathname, agentConfig);
  *   if (!doc) return new Response('{"error":"not_found"}', { status: 404 });
  *   return new Response(doc.body, {
  *     status: doc.status,
- *     headers: { "Content-Type": doc.contentType, "Cache-Control": doc.cacheControl },
+ *     headers: {
+ *       "Content-Type": doc.contentType,
+ *       "Cache-Control": doc.cacheControl,
+ *       ...(doc.vary ? { Vary: doc.vary } : {}),
+ *     },
  *   });
  * }
  *
- * // app/llms.txt/route.ts
- * import { buildLlmsTxt, fetchAgentReadiness } from "@buildbase/sdk";
- * import { agentConfig } from "@/lib/agent-ready";
- * export async function GET() {
- *   const doc = buildLlmsTxt(agentConfig, await fetchAgentReadiness(agentConfig));
- *   if (!doc) return new Response("Not found", { status: 404 });
- *   return new Response(doc.body, { headers: { "Content-Type": doc.contentType } });
- * }
+ * // app/.well-known/[...path]/route.ts — plus identical two-liners at
+ * // app/robots.txt/route.ts, app/llms.txt/route.ts, app/auth.md/route.ts, …
+ * import { serveAgentPath } from "@/lib/agent-ready";
+ * export const GET = serveAgentPath;
  * ```
  */
 /**
@@ -2370,21 +3050,16 @@ declare function parseWebhookEvent(options: {
 interface AgentReadinessBundle {
     /** False when the org has not enabled agent readiness — everything else absent. */
     enabled: boolean;
-    /** Pointer to the org's RFC 8414 authorization-server metadata. */
+    /**
+     * Pointer to the org's RFC 8414 authorization-server metadata. This is the
+     * ONLY thing the platform owns and serves — discovery content (protected
+     * resources, llms.txt, sitemap, API catalog, skills) is app-owned and
+     * defined locally in {@link AgentReadyConfig}.
+     */
     authorizationServer?: {
         issuer: string;
         metadataUrl: string;
     };
-    /**
-     * RFC 9728 protected-resource metadata objects, ready to serve. Each `metadata`
-     * is a complete document; `resource` is the canonical resource URI it describes.
-     */
-    protectedResources?: Array<{
-        resource: string;
-        metadata: Record<string, unknown>;
-    }>;
-    /** Org-authored llms.txt content, or null when unset. */
-    llmsTxt?: string | null;
 }
 /** An Agent Skill (Agent Skills Discovery RFC v0.2.0) published by this app. */
 interface AgentSkill {
@@ -2415,7 +3090,7 @@ interface ApiCatalogApi {
     /** Optional human title for the API. */
     title?: string;
 }
-/** MCP Server Card (SEP-1649 / SEP-2127), advertising a live MCP server. */
+/** MCP Server Card (SEP-1649 v1.0), advertising a live MCP server. */
 interface McpServerCard {
     /** Server name. */
     name: string;
@@ -2425,13 +3100,103 @@ interface McpServerCard {
     endpoint: string;
     /** Transport type. Defaults to `"streamable-http"`. */
     transport?: string;
-    /** Capabilities object, e.g. `{ tools: {}, resources: {} }`. */
+    /** MCP protocol version the server speaks. Defaults to `"2025-06-18"`. */
+    protocolVersion?: string;
+    /**
+     * Capability flags. Booleans per SEP-1649 v1.0; a legacy object value
+     * (e.g. `{ tools: {} }`) is normalized to booleans by presence.
+     */
     capabilities?: Record<string, unknown>;
     /** Optional human description. */
     description?: string;
     /** Documentation URL. */
     documentationUrl?: string;
 }
+/** One OAuth scope an app declares in its scope catalog. */
+interface AppScope {
+    /** Scope name, e.g. `designs:read`. */
+    name: string;
+    /** Human-readable description, shown on the consent screen. */
+    description: string;
+}
+/** One skill advertised on the A2A Agent Card. */
+interface A2ACardSkill {
+    id: string;
+    name: string;
+    description: string;
+    tags?: string[];
+}
+/**
+ * Overrides for the A2A Agent Card (`/.well-known/agent-card.json`). Every
+ * field is optional — the card is fully derived from `site` + `skills` by
+ * default. See {@link buildA2AAgentCard}.
+ */
+interface A2ACardConfig {
+    name?: string;
+    version?: string;
+    description?: string;
+    /** The endpoint agents connect to. Defaults to `siteUrl`. */
+    serviceUrl?: string;
+    /** Transport protocol advertised for `serviceUrl`. Defaults to `'http'`. */
+    transportProtocol?: string;
+    /** A2A capability flags. Defaults to `{ streaming: false, pushNotifications: false }`. */
+    capabilities?: Record<string, unknown>;
+    /** Skills; defaults to a mapping of `config.skills` (or a generic site skill). */
+    skills?: A2ACardSkill[];
+}
+/** One robots.txt policy group (a `User-agent:` block). */
+interface RobotsPolicy {
+    /** User-agent(s) this group applies to, e.g. `'*'` or `'GPTBot'`. */
+    userAgent: string | string[];
+    /** Paths to allow, e.g. `['/']`. */
+    allow?: string[];
+    /** Paths to disallow, e.g. `['/api/']`. */
+    disallow?: string[];
+    /** Optional `Crawl-delay` (non-standard but widely honored). */
+    crawlDelay?: number;
+}
+/**
+ * Content Signals (https://contentsignals.org) — declares how crawlers may use
+ * this site's content. Each flag renders as `<signal>=yes|no`; omitted flags
+ * are not emitted (unset = no preference expressed).
+ */
+interface ContentSignals {
+    /** May content be indexed for search? → `search=yes|no`. */
+    search?: boolean;
+    /** May content be used as AI input (RAG, grounding)? → `ai-input=yes|no`. */
+    aiInput?: boolean;
+    /** May content be used for AI training? → `ai-train=yes|no`. */
+    aiTrain?: boolean;
+}
+/** Configuration for `buildRobotsTxt`. Every field is optional. */
+interface RobotsConfig {
+    /** Policy groups. Defaults to `[{ userAgent: '*', allow: ['/'] }]`. */
+    policies?: RobotsPolicy[];
+    /**
+     * Stance toward known AI crawlers ({@link AI_BOT_USER_AGENTS}): `'allow'`
+     * (default — an explicit `Allow: /` group per bot, so readiness checkers see
+     * AI bots addressed), `'deny'` (a `Disallow: /` group per bot), or explicit
+     * per-bot policies for finer control.
+     */
+    aiBots?: 'allow' | 'deny' | RobotsPolicy[];
+    /** Content-Signal directive attached to the `User-agent: *` group. */
+    contentSignals?: ContentSignals;
+    /**
+     * Sitemap URLs. Defaults to `${siteUrl}/sitemap.xml` when `config.sitemap`
+     * is set; pass `[]` to emit no `Sitemap:` line.
+     */
+    sitemaps?: string[];
+}
+/** One URL entry for the generated sitemap.xml. */
+interface SitemapUrl {
+    /** Absolute URL, or a path resolved against `siteUrl`. */
+    loc: string;
+    /** ISO-8601 last-modified date. */
+    lastmod?: string;
+    changefreq?: 'always' | 'hourly' | 'daily' | 'weekly' | 'monthly' | 'yearly' | 'never';
+    /** 0.0–1.0. */
+    priority?: number;
+}
 /** Configuration for the agent-readiness discovery layer. */
 interface AgentReadyConfig {
     /** BuildBase server base URL, e.g. `https://api.buildbase.app` (no trailing slash needed). */
@@ -2459,6 +3224,15 @@ interface AgentReadyConfig {
     };
     /** Agent Skills to publish. Omit to skip the Agent Skills documents. */
     skills?: AgentSkill[];
+    /**
+     * The app's OAuth scope catalog — the source of truth for `scopes_supported`
+     * in this app's RFC 9728 protected-resource metadata (served from your own
+     * origin). Declare real, per-app scopes here (`designs:read`,
+     * `render:execute`, …) instead of placeholders. A `protectedResources` entry
+     * without its own `scopes` list inherits every catalog scope name. Scopes are
+     * app-owned: the shared BuildBase authorization server stays scope-agnostic.
+     */
+    scopes?: AppScope[];
     /** security.txt fields (RFC 9116). Omit to skip serving security.txt. */
     security?: {
         /** Contact URI(s) — email (`mailto:`) or URL. */
@@ -2484,8 +3258,81 @@ interface AgentReadyConfig {
      * `buildAuthMd` generates one from the OAuth metadata + site config.
      */
     authMd?: string;
+    /**
+     * Local `/llms.txt` content. Takes precedence over the org-authored llms.txt
+     * from the platform bundle — use when the app owns richer llms.txt content.
+     */
+    llmsTxt?: string;
+    /**
+     * Local `/llms-full.txt` content (llmstxt.org expanded document). Omit to
+     * skip serving it (or serve your own static file, which then wins).
+     */
+    llmsFullTxt?: string;
+    /**
+     * A2A Agent Card served at `/.well-known/agent-card.json`. Served by
+     * DEFAULT, derived from `site` + `skills`, so readiness scanners find a
+     * valid card with zero config. Pass `false` to disable, or an object to
+     * override any derived field.
+     */
+    a2aCard?: false | A2ACardConfig;
+    /**
+     * Web Bot Auth key directory (IETF WebBotAuth) served at
+     * `/.well-known/http-message-signatures-directory`. Only for apps whose own
+     * outbound bot/agent signs its requests — publish the JWKS public keys here
+     * so receiving sites can verify the signatures. Omitted = not served.
+     */
+    webBotAuth?: {
+        keys: Array<Record<string, unknown>>;
+    };
+    /**
+     * Extra literal documents served by {@link resolveAgentPath}, keyed by exact
+     * request path. The escape hatch for anything the SDK has no builder for —
+     * commerce discovery (x402, UCP, ACP, MPP), `/openapi.json`, future
+     * `.well-known` documents. A string value infers its content type from the
+     * path extension. Extra paths take precedence over built-in documents, so
+     * they can also override any SDK-generated document.
+     */
+    extraPaths?: Record<string, string | {
+        body: string;
+        contentType?: string;
+        status?: number;
+        cacheControl?: string;
+    }>;
+    /** robots.txt generation (`buildRobotsTxt`). Omitted = sane defaults. */
+    robots?: RobotsConfig;
+    /**
+     * URLs for a minimal generated sitemap.xml (`buildSitemap`). Omit when the
+     * app already generates sitemaps (e.g. next-sitemap) — the builder then
+     * returns null and your own files win.
+     */
+    sitemap?: {
+        urls: Array<string | SitemapUrl>;
+    };
+    /**
+     * RFC 9728 protected resources this app serves, defined locally (app-owned).
+     * When set, the SDK builds the `/.well-known/oauth-protected-resource`
+     * document from this config — `authorization_servers` is derived from
+     * `serverUrl`/`orgId` (the BuildBase issuer). Takes precedence over the
+     * platform bundle. Omit to fall back to the org-configured bundle.
+     */
+    protectedResources?: Array<{
+        /** The protected API's resource URI. Defaults to `siteUrl`. */
+        resource?: string;
+        /** Scopes this resource accepts (`scopes_supported`). */
+        scopes?: string[];
+        /** Human documentation URL (`resource_documentation`). */
+        documentationUrl?: string;
+        /** Bearer methods (`bearer_methods_supported`). Defaults to `['header']`. */
+        bearerMethods?: string[];
+    }>;
     /** TTL (seconds) for cached platform fetches. Default 300 (5 min). */
     cacheTtlSeconds?: number;
+    /**
+     * Timeout (ms) for platform fetches. Fail-soft on timeout, so a hung or slow
+     * BuildBase server can't hang discovery routes forever. Default 5000; set `0`
+     * to disable.
+     */
+    fetchTimeoutMs?: number;
     /** Injectable fetch, mainly for testing. Defaults to the global `fetch`. */
     fetch?: typeof fetch;
 }
@@ -2495,7 +3342,15 @@ interface DiscoveryDocument {
     contentType: string;
     body: string;
     cacheControl: string;
+    /** Value for a `Vary` response header, when the body is negotiated. */
+    vary?: string;
 }
+/**
+ * User-agent strings of the known AI crawlers/agents that agent-readiness
+ * checkers look for in robots.txt (`buildRobotsTxt` emits a policy group per
+ * entry when `robots.aiBots` is `'allow'`/`'deny'`).
+ */
+declare const AI_BOT_USER_AGENTS: readonly string[];
 /**
  * SHA-256 of `content` as `sha256:<hex>`, via the shared pure-JS hash (no Web
  * Crypto / Node `crypto`), so output is identical on every runtime.
@@ -2509,7 +3364,7 @@ declare function sha256Digest(content: string): string;
  * simply see the app as not (yet) agent-ready.
  */
 declare function fetchAgentReadiness(config: AgentReadyConfig): Promise<AgentReadinessBundle>;
-/** Clear the in-memory agent-readiness cache (mainly for tests). */
+/** Clear the in-memory agent-readiness caches (mainly for tests). */
 declare function clearAgentReadinessCache(): void;
 /**
  * The Agent Card served at `/.well-known/agent.json`. A stable, machine-readable
@@ -2519,26 +3374,87 @@ declare function buildAgentCard(config: AgentReadyConfig, bundle: AgentReadiness
 /**
  * Resolve the RFC 9728 protected-resource metadata for a request path, or null
  * if no configured resource maps to it.
+ *
+ * App-owned. `authorization_servers` uses the platform bundle's real
+ * `authorizationServer.issuer` when provided (so this doc can't advertise a
+ * different issuer than the AS metadata / agent card / auth.md), falling back
+ * to the `serverUrl`/`orgId` heuristic when the bundle isn't available.
  */
-declare function buildProtectedResourceMetadata(requestPath: string, config: AgentReadyConfig, bundle: AgentReadinessBundle): DiscoveryDocument | null;
+declare function buildProtectedResourceMetadata(requestPath: string, config: AgentReadyConfig, authServerIssuer?: string): DiscoveryDocument | null;
 /** Agent Skills discovery index (Agent Skills Discovery RFC v0.2.0). */
 declare function buildAgentSkillsIndex(config: AgentReadyConfig): DiscoveryDocument | null;
 /** Serve a single skill's SKILL.md by request path, or null if none matches. */
 declare function buildSkillMd(requestPath: string, config: AgentReadyConfig): DiscoveryDocument | null;
 /** security.txt (RFC 9116), or null when not configured. */
 declare function buildSecurityTxt(config: AgentReadyConfig): DiscoveryDocument | null;
-/** The org-authored llms.txt, or null when the org hasn't set one. */
-declare function buildLlmsTxt(config: AgentReadyConfig, bundle: AgentReadinessBundle): DiscoveryDocument | null;
+/**
+ * The `/llms.txt` document from `config.llmsTxt` (app-authored). Returns null
+ * when not set — serve your own static file instead. llms.txt is app content,
+ * not platform-managed.
+ */
+declare function buildLlmsTxt(config: AgentReadyConfig): DiscoveryDocument | null;
+/**
+ * The `/llms-full.txt` document from `config.llmsFullTxt` (app-authored).
+ * Returns null when not set — serve your own static file instead.
+ */
+declare function buildLlmsFullTxt(config: AgentReadyConfig): DiscoveryDocument | null;
+/**
+ * A2A Agent Card (https://a2a-protocol.org) for `/.well-known/agent-card.json`.
+ * Served by default, fully derived from `site` + `skills`, so a consumer is
+ * A2A-discoverable with zero config; `config.a2aCard` overrides any field or
+ * disables the card entirely (`false`). Skills fall back to a generic
+ * site-content skill when none are configured — the card must carry at least
+ * one skill to validate.
+ */
+declare function buildA2AAgentCard(config: AgentReadyConfig): DiscoveryDocument | null;
+/**
+ * Web Bot Auth key directory (JWKS) for
+ * `/.well-known/http-message-signatures-directory`. Returns null unless
+ * `config.webBotAuth.keys` is set — signing keys are the app's own and can't
+ * be derived.
+ */
+declare function buildWebBotAuthDirectory(config: AgentReadyConfig): DiscoveryDocument | null;
+/** One DNS record the org should publish for DNS-AID agent discovery. */
+interface DnsAidRecord {
+    /** Fully-qualified record name, e.g. `_a2a._agents.example.com`. */
+    name: string;
+    /** Record type — HTTPS for HTTPS endpoints, SVCB otherwise. */
+    type: 'HTTPS' | 'SVCB';
+    ttl: number;
+    /** Record data, e.g. `1 example.com. alpn="h2" port=443`. */
+    data: string;
+}
+/**
+ * DNS-AID (DNS for AI Discovery) records this app should publish under its
+ * domain's `_agents` namespace. DNS records can't be served over HTTP — hand
+ * these to the org's DNS provider (and DNSSEC-sign the zone). Derived from the
+ * same config as the HTTP discovery surface, so the two never disagree.
+ */
+declare function buildDnsAidRecords(config: AgentReadyConfig): DnsAidRecord[];
 /**
  * API Catalog (RFC 9727) as a `linkset+json` document for
  * `/.well-known/api-catalog`. Returns null when no APIs are configured.
  */
 declare function buildApiCatalog(config: AgentReadyConfig): DiscoveryDocument | null;
 /**
- * MCP Server Card (SEP-1649) for `/.well-known/mcp/server-card.json`. Returns
- * null when no card is configured (i.e. no MCP server is running).
+ * MCP Server Card (SEP-1649 v1.0) for `/.well-known/mcp/server-card.json`.
+ * Returns null when no card is configured (i.e. no MCP server is running).
  */
 declare function buildMcpServerCard(config: AgentReadyConfig): DiscoveryDocument | null;
+/**
+ * MCP discovery manifest (SEP-1960) for `/.well-known/mcp.json` — the
+ * origin-level index of every MCP server this app exposes. Complements the
+ * per-server card (SEP-1649): scanners and agents probe this path first, then
+ * follow `server_card` for detail. Returns null when no MCP server is
+ * configured.
+ *
+ * The transport endpoint may live on a different origin than the app serving
+ * this manifest (e.g. card on `www.`, server on `api.`); the `authentication`
+ * pointer is derived from the ENDPOINT's origin per RFC 9728 path derivation,
+ * so agents land on the metadata the server's own WWW-Authenticate challenge
+ * advertises.
+ */
+declare function buildMcpDiscoveryManifest(config: AgentReadyConfig): DiscoveryDocument | null;
 /**
  * The `/auth.md` document (agent registration + authentication instructions).
  * Uses `config.authMd` verbatim when provided; otherwise generates one from the
@@ -2546,6 +3462,42 @@ declare function buildMcpServerCard(config: AgentReadyConfig): DiscoveryDocument
  * there is nothing to describe (no authorizationServer and no override).
  */
 declare function buildAuthMd(config: AgentReadyConfig, bundle: AgentReadinessBundle): DiscoveryDocument | null;
+/**
+ * robots.txt with AI-bot policy groups, Content Signals, and sitemap
+ * references. Always returns a document — with no `config.robots` it emits an
+ * allow-all default policy plus an explicit `Allow: /` group per known AI bot.
+ */
+declare function buildRobotsTxt(config: AgentReadyConfig): DiscoveryDocument;
+/**
+ * A minimal sitemap.xml from `config.sitemap.urls`, or null when not
+ * configured. Meant for API-first apps that would otherwise have no sitemap —
+ * apps with real content pipelines (e.g. next-sitemap) should keep those and
+ * omit `config.sitemap`.
+ */
+declare function buildSitemap(config: AgentReadyConfig): DiscoveryDocument | null;
+/**
+ * True when an `Accept` header prefers markdown (`text/markdown` /
+ * `text/x-markdown`) over `text/html` — q-value aware, so
+ * `text/html;q=0.5, text/markdown` is markdown but `text/markdown;q=0.1,
+ * text/html` is not. A bare wildcard does not count as a markdown preference.
+ */
+declare function wantsMarkdown(acceptHeader: string | null | undefined): boolean;
+/**
+ * Markdown content negotiation: pick the markdown or HTML variant of a page
+ * per the `Accept` header. The returned document carries `vary: 'Accept'` —
+ * forward it so caches key on the header.
+ */
+declare function negotiateMarkdown(acceptHeader: string | null | undefined, variants: {
+    html: string;
+    markdown: string;
+}, config?: Pick<AgentReadyConfig, 'cacheTtlSeconds'>): DiscoveryDocument;
+/**
+ * Value for a `Link` response header advertising this app's discovery
+ * documents (llms.txt, Agent Card, and — when configured — sitemap, API
+ * catalog, MCP server card). Sync and pure (no platform fetch), so it's safe
+ * in edge middleware.
+ */
+declare function buildDiscoveryLinkHeader(config: AgentReadyConfig): string;
 /**
  * Resolve any `.well-known` request path to its discovery document, or null if
  * this app serves nothing there (caller should 404).
@@ -2554,10 +3506,18 @@ declare function buildAuthMd(config: AgentReadyConfig, bundle: AgentReadinessBun
  * oauth-authorization-server (pointer), agent-skills index + SKILL.md,
  * security.txt, api-catalog (RFC 9727), and the MCP server card.
  *
- * Root-level docs are served via their own builders (they aren't under
- * `.well-known`): `buildLlmsTxt` for `/llms.txt` and `buildAuthMd` for `/auth.md`.
+ * Root-level docs (`/robots.txt`, `/llms.txt`, `/auth.md`, …) are not handled
+ * here — use {@link resolveAgentPath}, which covers both, for new wiring.
  */
 declare function resolveWellKnown(requestPath: string, config: AgentReadyConfig): Promise<DiscoveryDocument | null>;
+/**
+ * Superset of {@link resolveWellKnown}: resolves ANY agent-facing path — the
+ * root-level documents (`/robots.txt`, `/sitemap.xml`, `/llms.txt`,
+ * `/auth.md`, `/security.txt`) plus everything under `/.well-known/*`. One
+ * catch-all (or middleware) wired to this function covers the app's entire
+ * agent-readiness surface. Returns null for paths this app doesn't serve.
+ */
+declare function resolveAgentPath(requestPath: string, config: AgentReadyConfig): Promise<DiscoveryDocument | null>;
 /** A WebMCP tool definition exposed to in-page agents via `navigator.modelContext`. */
 interface WebMcpTool {
     name: string;
@@ -2644,6 +3604,13 @@ interface AppTokenRequestClaims {
     resource?: string[];
     /** The OAuth2 client's display title. */
     clientTitle?: string;
+    /**
+     * Per-user BuildBase session bound to this grant. Embed it ENCRYPTED in the
+     * token you mint (JWTs are signed, not encrypted) and never store it — your
+     * MCP/agent endpoints decrypt it per request to call BuildBase as this user
+     * (`buildbase.withSession(...)`). Fresh on every grant, including refresh.
+     */
+    sessionId?: string;
     [claim: string]: unknown;
 }
 /** The payload BuildBase sends to `applicationRevokeUrl`. */
@@ -2653,14 +3620,40 @@ interface AppRevokeRequestClaims {
     reason: string;
     [claim: string]: unknown;
 }
+/** Options for {@link verifyClientJwt} (all optional; secure defaults). */
+interface VerifyClientJwtOptions {
+    /** Allowed clock skew in seconds for `exp`/`nbf`. Default 60. */
+    clockToleranceSec?: number;
+    /**
+     * Require a numeric `exp` claim. Default **true** — a JWT with no expiry
+     * would never expire, so a leaked token stays valid forever. Set `false`
+     * only for a token type you know is intentionally non-expiring.
+     */
+    requireExp?: boolean;
+    /** If set, `iss` must equal this value (RFC 7519 issuer check). */
+    issuer?: string;
+    /** If set, `aud` must equal (or, for an array `aud`, include) this value. */
+    audience?: string;
+}
 /**
  * Verify a BuildBase-issued HS256 JWT (signed with the client secret) and return
- * its payload. Checks the signature (timing-safe), the algorithm, and `exp`/`nbf`.
+ * its payload. Checks the signature (timing-safe), the algorithm, `exp`/`nbf`,
+ * and — by default — that an `exp` is present at all. Optionally pins `iss`/`aud`.
  * Throws {@link AppBridgeError} on any failure.
  */
-declare function verifyClientJwt(token: string, clientSecret: string, clockToleranceSec?: number): Record<string, any>;
+declare function verifyClientJwt(token: string, clientSecret: string, options?: VerifyClientJwtOptions): Record<string, any>;
 /** Extract the token from an `Authorization: Bearer <token>` header. */
 declare function extractBearerToken(authorization: string | null | undefined): string | null;
+/**
+ * Sign an HS256 JWT — the symmetric counterpart of {@link verifyClientJwt}.
+ * Sets `iat` and `exp` (from `expiresInSec`, default 3600) unless the payload
+ * already carries them. The intended use is minting the app's own agent access
+ * tokens in an `applicationTokenUrl` handler, embedding whatever claims the
+ * MCP/API layer needs to verify later (e.g. `sub`, `scope`, a session id).
+ */
+declare function signClientJwt(payload: Record<string, unknown>, secret: string, options?: {
+    expiresInSec?: number;
+}): string;
 interface VerifyOptions {
     /** The `Authorization` header value from the incoming request. */
     authorization: string | null | undefined;
@@ -2735,20 +3728,6 @@ declare function handleAppRevokeRequest(options: {
     success: boolean;
     message?: string;
 }>>;
-/**
- * Build the 401 an agent should receive when it calls your protected API without
- * a valid token. The `WWW-Authenticate: Bearer resource_metadata=...` header
- * points the agent at your `/.well-known/oauth-protected-resource` document,
- * bootstrapping the OAuth discovery flow (RFC 9728 §5.1, RFC 6750 §3).
- *
- * @example
- * ```ts
- * if (!isValid(token)) {
- *   const c = bearerChallenge({ resourceMetadataUrl: "https://imejis.io/.well-known/oauth-protected-resource" });
- *   res.writeHead(c.status, c.headers).end(c.body);
- * }
- * ```
- */
 declare function bearerChallenge(options: {
     resourceMetadataUrl: string;
     error?: 'invalid_token' | 'insufficient_scope' | string;
@@ -3043,5 +4022,198 @@ interface BuildBaseResult extends ScopedActions {
 }
 declare function BuildBase(config: BuildBaseConfig): BuildBaseResult;
 
-export { ApiVersion, AppBridgeError, AuthApi, AuthStatus, BBAction, BBScreen, BBStatus, BB_PARAM, BaseApi, BetaForm, BillingIntervals, BuildBase, CURRENCY_DISPLAY, CURRENCY_FLAG, CreditBucketSource, CreditBucketStatus, CreditTransactionType, DEFAULT_ROLE_PERMISSIONS, DunningState, EventEmitter, InvoiceStatuses, PLAN_CURRENCY_CODES, PLAN_CURRENCY_OPTIONS, PUSH_SERVICE_WORKER_SCRIPT, Permission, PushApi, SDKEvent, SettingsApi, SubscriptionItemType, SubscriptionStatus, UserApi, WorkspaceApi, appTokenFailure, appTokenSuccess, bearerChallenge, buildAgentCard, buildAgentSkillsIndex, buildApiCatalog, buildAuthMd, buildLlmsTxt, buildMcpServerCard, buildProtectedResourceMetadata, buildSecurityTxt, buildSkillMd, calculateBillableSeats, calculateSeatOverageCents, calculateTotalSubscriptionCents, cleanBBParams, clearAgentReadinessCache, clearAuthIntent, consumeAuthIntent, createBBUrl, createCheckoutRedirectUrls, createCreditPurchaseRedirectUrls, BuildBase as default, eventEmitter, extractBearerToken, fetchAgentReadiness, formatCents, formatOverageRate, formatOverageRateWithLabel, formatQuotaIncludedOverage, formatQuotaWithPrice, getAvailableCurrenciesFromPlans, getBasePriceCents, getBillingIntervalAndCurrencyFromPriceId, getCurrencyFlag, getCurrencySymbol, getDisplayCurrency, getPerSeatPriceCents, getPricingVariant, getQuotaDisplayValue, getQuotaDisplayWithVariant, getQuotaOverageCents, getQuotaUnitLabelFromName, getSeatPricing, getStripePriceIdForInterval, handleAppRevokeRequest, handleAppTokenRequest, hasPermission, invalidateCreditBalance, invalidateQuotaUsage, invalidateSubscription, parseWebhookEvent, provideWebMcpTools, readBBParams, resolveMaxUsers, resolvePermissions, resolveWellKnown, safeRedirect, saveAuthIntent, sha256Digest, validateInvite, validateRedirectUrl, verifyAppRevokeRequest, verifyAppTokenRequest, verifyClientJwt, verifyWebhookSignature };
-export type { AgentReadinessBundle, AgentReadyConfig, AgentSkill, ApiCatalogApi, AppRevokeRequestClaims, AppTokenRequestClaims, AppTokenResponseBody, AppTokenResult, BBActionType, BBScreenType, BBStatusType, BetaFormData, BetaFormResponse, BillingInterval, BuildBaseConfig, BuildBaseResult, BuildBaseSession, CheckoutResult, CreditActions, CreditBucketSourceType, CreditBucketStatusType, CreditTransactionTypeValue, DiscoveryDocument, DunningStateType, EventData, EventType, FeatureActions, FormatQuotaWithPriceOptions, GetCheckoutStripeParams, HandlerResult, IAllQuotaUsageResponse, IBaseApiConfig, IBasePricing, IBetaConfig, ICheckoutSessionRequest, ICheckoutSessionResponse, ICheckoutStripeOptions, IConsumeCreditsRequest, IConsumeCreditsResponse, ICreditBalance, ICreditBucket, ICreditBucketsQuery, ICreditBucketsResponse, ICreditPackage, ICreditPackagePricingVariant, ICreditPurchaseRequest, ICreditPurchaseResponse, ICreditTransaction, ICreditTransactionsQuery, ICreditTransactionsResponse, IEventCallbacks, IExpiringCreditsResponse, IInvoice, IInvoiceListResponse, IInvoiceResponse, IOsConfig, IOsState, IPlan, IPlanGroup, IPlanGroupInfo, IPlanGroupLatestVersion, IPlanGroupResponse, IPlanGroupVersion, IPlanGroupVersionWithPlans, IPlanGroupVersionsResponse, IPlanVersion, IPlanVersionSummary, IPlanVersionWithPlan, IPricingVariant, IPublicCreditPackage, IPublicCreditPackagesResponse, IPublicPlanItem, IPublicPlanItemCategory, IPublicPlanVersion, IPublicPlansResponse, IQuotaByInterval, IQuotaIntervalValue, IQuotaOveragePriceIdsByInterval, IQuotaOveragesByInterval, IQuotaUsageStatus, IQuotaUsageStatusResponse, IRecordUsageRequest, IRecordUsageResponse, IStripePricesByInterval, ISubscription, ISubscriptionItem, ISubscriptionResponse, ISubscriptionUpdateRequest, ISubscriptionUpdateResponse, IUsageLogEntry, IUsageLogsQuery, IUsageLogsResponse, InviteBlockReason, InviteValidation, InvoiceActions, InvoiceStatus, InvoiceStatusType, MaxUsersConfig, McpServerCard, NotificationData, NotificationEvent, NotificationResult, OnWorkspaceChangeParams, PermissionActions, PermissionContext, PermissionKey, PlanActions, PlanVersionWithPricingVariants, QuotaDisplayValue, QuotaDisplayWithOverage, RolePermissionMap, ScopedActions, SettingsActions, SubscriptionActions, SubscriptionItemTypeValue, SubscriptionStatusType, UsageActions, UserActions, UserCreatedEventData, UserUpdatedEventData, WebMcpTool, WorkspaceActions, WorkspaceChangedEventData, WorkspaceCreatedEventData, WorkspaceDeletedEventData, WorkspaceUpdatedEventData, WorkspaceUserAddedEventData, WorkspaceUserRemovedEventData, WorkspaceUserRoleChangedEventData };
+/**
+ * MCP server toolkit (server-side, framework-agnostic).
+ *
+ * Turns a consuming app into a live MCP (Model Context Protocol) server so AI
+ * agents can operate its BuildBase capabilities — workspaces, subscriptions,
+ * quotas, credits, feature flags, permissions — plus any custom tools the app
+ * defines. The transport is stateless Streamable HTTP: a single JSON-RPC
+ * message per POST, no sessions and no SSE, which keeps the handler pure and
+ * identical on Node 18+, edge, Deno, and Bun.
+ *
+ * Zero framework types: the core `handle()` takes a plain
+ * `{ method, headers, body }` and returns `{ status, headers, body }` (wire it
+ * into Express/Fastify/Hono yourself), while `fetch()` adapts Web-standard
+ * `Request` → `Response` for Next.js App Router and edge runtimes.
+ *
+ * Agents authenticate with the Bearer tokens the app mints via the OAuth2
+ * app-bridge (`handleAppTokenRequest` + `signClientJwt`); the `auth.verify`
+ * callback maps a verified token to the BuildBase session the tools run under.
+ *
+ * @example Next.js App Router — the entire integration:
+ * ```ts
+ * // lib/mcp.ts
+ * import BuildBase from '@buildbase/sdk';
+ * import { createMcpHandler, verifyClientJwt } from '@buildbase/sdk/mcp';
+ *
+ * const buildbase = BuildBase({
+ *   serverUrl: process.env.BUILDBASE_URL!,
+ *   orgId: process.env.BUILDBASE_ORG_ID!,
+ * });
+ *
+ * export const mcp = createMcpHandler({
+ *   buildbase,
+ *   serverInfo: { name: 'imejis', version: '1.0.0' },
+ *   auth: {
+ *     verify: (token) => {
+ *       const c = verifyClientJwt(token, process.env.BUILDBASE_CLIENT_SECRET!);
+ *       return { sessionId: String(c.sid), userId: String(c.sub), scopes: c.scope };
+ *     },
+ *     resourceMetadataUrl: 'https://imejis.io/.well-known/oauth-protected-resource',
+ *   },
+ * });
+ *
+ * // app/api/mcp/route.ts
+ * import { mcp } from '@/lib/mcp';
+ * export const POST = (req: Request) => mcp.fetch(req);
+ * export const GET = (req: Request) => mcp.fetch(req);    // 405 per spec (no SSE)
+ * export const DELETE = (req: Request) => mcp.fetch(req); // 405 (stateless)
+ * ```
+ */
+
+/** A transport-agnostic HTTP request (mirror of the DiscoveryDocument idea). */
+interface McpHttpRequest {
+    /** HTTP method, e.g. `'POST'`. */
+    method: string;
+    /** Header map. Keys are matched case-insensitively. */
+    headers: Record<string, string | undefined>;
+    /** Raw JSON body string, or an already-parsed value (e.g. Express req.body). */
+    body?: string | unknown;
+}
+/** The identity a verified Bearer token resolves to. */
+interface McpAuthInfo {
+    /** BuildBase session all tool calls run under (`buildbase.withSession(...)`). */
+    sessionId: string;
+    /** The acting BuildBase user id — default subject for permission checks. */
+    userId?: string;
+    /** Pin tools to one workspace; used when the agent omits `workspaceId`. */
+    workspaceId?: string;
+    /** OAuth scopes granted to the agent; filters tools with `requiredScopes`. */
+    scopes?: string[];
+    /** Raw verified claims, passed through to tool context. */
+    claims?: Record<string, unknown>;
+}
+
+/**
+ * BuildBase agent-auth presets (server-side, framework-agnostic).
+ *
+ * The BuildBase security model: the platform runs the OAuth2 flow (login,
+ * consent, PKCE, refresh) but the APP mints and verifies its own user tokens,
+ * signed with the app's own secret. The platform only relays the minted token
+ * to the agent — it never sees the secret, so it can neither forge nor decode
+ * an app token. The per-user BuildBase session travels inside the token only
+ * as an AES-256-GCM-encrypted `sid` claim, so it is never stored and never
+ * plaintext anywhere; access to it expires with the token.
+ *
+ * These presets make that model a one-liner on each side of the flow, and run
+ * entirely in the app's process — pure local crypto, zero platform calls:
+ *
+ *   • {@link mintAgentToken}  — inside your `applicationTokenUrl` handler:
+ *     signs the app JWT (HS256) with your secret, stamps `aud` from the RFC
+ *     8707 resource, and embeds the encrypted `sid` automatically.
+ *   • {@link buildbaseAuth}   — the `auth` config for `createMcpHandler`:
+ *     verifies the JWT, enforces audience binding, decrypts the `sid`, and
+ *     maps the claims to `McpAuthInfo`.
+ *
+ * @example The full loop:
+ * ```ts
+ * // applicationTokenUrl route — the platform calls this on every grant
+ * const { status, body } = await handleAppTokenRequest({
+ *   authorization: req.headers.get("authorization"),
+ *   clientSecret: process.env.BUILDBASE_CLIENT_SECRET!,
+ *   mintToken: (claims) => mintAgentToken({ claims, secret: process.env.SYSTEM_SECRET! }),
+ * });
+ *
+ * // MCP server — verifies what the route above minted
+ * const mcp = createMcpHandler({
+ *   buildbase,
+ *   auth: buildbaseAuth({ secret: process.env.SYSTEM_SECRET!, resource: "https://app.example.com/api/mcp" }),
+ * });
+ * ```
+ *
+ * AES-GCM comes from WebCrypto (`globalThis.crypto.subtle`) — Node 18+, Bun,
+ * Deno, edge runtimes, browsers. The wire format is
+ * `base64url(iv(12) || authTag(16) || ciphertext)` with the key derived as
+ * `SHA-256(secret + ":bb-session")`, byte-compatible with Node
+ * `createCipheriv("aes-256-gcm", ...)` implementations of the same layout.
+ */
+
+/** Encrypt/decrypt pair for the `sid` claim, bound to one app secret. */
+interface SessionRefCrypto {
+    /** Encrypt a BuildBase session id for embedding in an app JWT. */
+    encryptSessionRef(sessionId: string): Promise<string>;
+    /** Decrypt a `sid` claim. Returns null on any failure (wrong key, garbage). */
+    decryptSessionRef(ref: string): Promise<string | null>;
+}
+/**
+ * Session-ref crypto derived from the app's secret. Both sides of the loop
+ * ({@link mintAgentToken}, {@link buildbaseAuth}) use this internally — reach
+ * for it directly only when minting or verifying tokens by hand.
+ */
+declare function createSessionRefCrypto(secret: string): SessionRefCrypto;
+/** Options for {@link mintAgentToken}. */
+interface MintAgentTokenOptions {
+    /** The verified platform claims (from `handleAppTokenRequest`'s callback). */
+    claims: AppTokenRequestClaims;
+    /** The APP's token-signing secret. Never leaves this process. */
+    secret: string;
+    /** Token lifetime in seconds. Default 3600 — keep agent tokens short-lived. */
+    expiresInSec?: number;
+    /**
+     * App-specific claims merged into the token — e.g. a `workspaceId` resolved
+     * by your own user sync. Merged last, so they can override the defaults.
+     */
+    extraClaims?: Record<string, unknown>;
+}
+/**
+ * Mint the app's agent access token from a platform grant: HS256-signed with
+ * YOUR secret, `aud` bound to the granted RFC 8707 resource(s), scopes carried
+ * through, and the per-user BuildBase session embedded as an encrypted `sid`
+ * claim. The result plugs straight into `handleAppTokenRequest`'s `mintToken`.
+ */
+declare function mintAgentToken(options: MintAgentTokenOptions): Promise<{
+    token: string;
+    expiresIn: number;
+}>;
+/** Options for {@link buildbaseAuth}. */
+interface BuildBaseAuthOptions {
+    /** The APP's token-signing secret — the same one `mintAgentToken` used. */
+    secret: string;
+    /**
+     * The protected resource(s) this server IS. Enforces RFC 8707 audience
+     * binding — the token's `aud` must include one of these URIs. Pass an array
+     * when the server is addressable under more than one resource identifier
+     * (e.g. the canonical `<host>/mcp` plus the literal endpoint URL); the
+     * FIRST entry is the canonical one used to derive `resourceMetadataUrl`.
+     */
+    resource?: string | string[];
+    /**
+     * Explicit RFC 9728 metadata URL for the 401 challenge. Defaults to the
+     * path-derived `/.well-known/oauth-protected-resource<path>` of the first
+     * `resource`.
+     */
+    resourceMetadataUrl?: string;
+    /**
+     * Reject tokens that carry no `aud` claim at all. Default false: audience is
+     * enforced when present, and legacy audience-less tokens still work. Turn
+     * this on once every minted token is audience-bound.
+     */
+    requireAudience?: boolean;
+    /** Extra JWT verification options (clock tolerance, issuer pinning). */
+    verify?: Pick<VerifyClientJwtOptions, 'clockToleranceSec' | 'issuer'>;
+}
+/**
+ * The `auth` config for `createMcpHandler`, prewired for BuildBase-minted app
+ * tokens: HS256 verification with your secret, RFC 8707 audience binding,
+ * `sid` decryption to the BuildBase session, claim mapping to `McpAuthInfo`,
+ * and the derived RFC 9728 `resourceMetadataUrl`. Entirely local — the token
+ * and secret never leave this process.
+ */
+declare function buildbaseAuth(options: BuildBaseAuthOptions): {
+    verify: (token: string, req: McpHttpRequest) => Promise<McpAuthInfo | null>;
+    resourceMetadataUrl?: string;
+};
+
+export { AI_BOT_USER_AGENTS, ApiVersion, AppBridgeError, AuthApi, AuthStatus, BBAction, BBScreen, BBStatus, BB_PARAM, BaseApi, BetaForm, BillingIntervals, BuildBase, CURRENCY_DISPLAY, CURRENCY_FLAG, CreditBucketSource, CreditBucketStatus, CreditTransactionType, DEFAULT_ROLE_PERMISSIONS, DunningState, EventEmitter, InvoiceStatuses, PLAN_CURRENCY_CODES, PLAN_CURRENCY_OPTIONS, PUSH_SERVICE_WORKER_SCRIPT, Permission, PushApi, SDKEvent, SettingsApi, SubscriptionItemType, SubscriptionStatus, UserApi, WorkspaceApi, appTokenFailure, appTokenSuccess, bearerChallenge, buildA2AAgentCard, buildAgentCard, buildAgentSkillsIndex, buildApiCatalog, buildAuthMd, buildDiscoveryLinkHeader, buildDnsAidRecords, buildLlmsFullTxt, buildLlmsTxt, buildMcpDiscoveryManifest, buildMcpServerCard, buildProtectedResourceMetadata, buildRobotsTxt, buildSecurityTxt, buildSitemap, buildSkillMd, buildWebBotAuthDirectory, buildbaseAuth, calculateBillableSeats, calculateSeatOverageCents, calculateTotalSubscriptionCents, cleanBBParams, clearAgentReadinessCache, clearAuthIntent, consumeAuthIntent, createBBUrl, createCheckoutRedirectUrls, createCreditPurchaseRedirectUrls, createSessionRefCrypto, BuildBase as default, eventEmitter, extractBearerToken, fetchAgentReadiness, formatCents, formatOverageRate, formatOverageRateWithLabel, formatQuotaIncludedOverage, formatQuotaWithPrice, getAvailableCurrenciesFromPlans, getBasePriceCents, getBillingIntervalAndCurrencyFromPriceId, getCurrencyFlag, getCurrencySymbol, getDisplayCurrency, getPerSeatPriceCents, getPricingVariant, getQuotaDisplayValue, getQuotaDisplayWithVariant, getQuotaOverageCents, getQuotaUnitLabelFromName, getSeatPricing, getStripePriceIdForInterval, handleAppRevokeRequest, handleAppTokenRequest, hasPermission, invalidateCreditBalance, invalidateQuotaUsage, invalidateSubscription, isZeroDecimalCurrency, minorAmountToDisplay, mintAgentToken, negotiateMarkdown, parseWebhookEvent, provideWebMcpTools, readBBParams, resolveAgentPath, resolveMaxUsers, resolvePermissions, resolveWellKnown, safeRedirect, saveAuthIntent, sha256Digest, signClientJwt, validateInvite, validateRedirectUrl, verifyAppRevokeRequest, verifyAppTokenRequest, verifyClientJwt, verifyWebhookSignature, wantsMarkdown };
+export type { A2ACardConfig, A2ACardSkill, AgentReadinessBundle, AgentReadyConfig, AgentSkill, ApiCatalogApi, AppRevokeRequestClaims, AppScope, AppTokenRequestClaims, AppTokenResponseBody, AppTokenResult, BBActionType, BBScreenType, BBStatusType, BetaFormData, BetaFormResponse, BillingInterval, BuildBaseAuthOptions, BuildBaseConfig, BuildBaseResult, BuildBaseSession, CheckoutResult, ContentSignals, CreditActions, CreditBucketSourceType, CreditBucketStatusType, CreditTransactionTypeValue, DiscoveryDocument, DnsAidRecord, DunningStateType, EventData, EventType, FeatureActions, FormatQuotaWithPriceOptions, GetCheckoutStripeParams, HandlerResult, IAllQuotaUsageResponse, IBaseApiConfig, IBasePricing, IBetaConfig, ICheckoutSessionRequest, ICheckoutSessionResponse, ICheckoutStripeOptions, IConsumeCreditsRequest, IConsumeCreditsResponse, ICreditBalance, ICreditBucket, ICreditBucketsQuery, ICreditBucketsResponse, ICreditPackage, ICreditPackagePricingVariant, ICreditPurchaseRequest, ICreditPurchaseResponse, ICreditTransaction, ICreditTransactionsQuery, ICreditTransactionsResponse, IEventCallbacks, IExpiringCreditsResponse, IInvoice, IInvoiceListResponse, IInvoiceResponse, IOsConfig, IOsState, IPlan, IPlanGroup, IPlanGroupInfo, IPlanGroupLatestVersion, IPlanGroupResponse, IPlanGroupVersion, IPlanGroupVersionWithPlans, IPlanGroupVersionsResponse, IPlanVersion, IPlanVersionSummary, IPlanVersionWithPlan, IPricingVariant, IPublicCreditPackage, IPublicCreditPackagesResponse, IPublicPlanItem, IPublicPlanItemCategory, IPublicPlanVersion, IPublicPlansResponse, IQuotaByInterval, IQuotaIntervalValue, IQuotaOveragePriceIdsByInterval, IQuotaOveragesByInterval, IQuotaUsageStatus, IQuotaUsageStatusResponse, IRecordUsageRequest, IRecordUsageResponse, ISettings, IStripePricesByInterval, ISubscription, ISubscriptionItem, ISubscriptionResponse, ISubscriptionUpdateRequest, ISubscriptionUpdateResponse, IUsageLogEntry, IUsageLogsQuery, IUsageLogsResponse, IUser, IWorkspace, InviteBlockReason, InviteValidation, InvoiceActions, InvoiceStatus, InvoiceStatusType, MaxUsersConfig, McpServerCard, MintAgentTokenOptions, NotificationData, NotificationEvent, NotificationResult, OnWorkspaceChangeParams, PermissionActions, PermissionContext, PermissionKey, PlanActions, PlanVersionWithPricingVariants, QuotaDisplayValue, QuotaDisplayWithOverage, RedirectValidationOptions, RobotsConfig, RobotsPolicy, RolePermissionMap, ScopedActions, SessionRefCrypto, SettingsActions, SitemapUrl, SubscriptionActions, SubscriptionItemTypeValue, SubscriptionStatusType, TranslationKey, UsageActions, UserActions, UserCreatedEventData, UserUpdatedEventData, WebMcpTool, WorkspaceActions, WorkspaceChangedEventData, WorkspaceCreatedEventData, WorkspaceDeletedEventData, WorkspaceUpdatedEventData, WorkspaceUserAddedEventData, WorkspaceUserRemovedEventData, WorkspaceUserRoleChangedEventData };