@cyanheads/mcp-ts-core 0.12.7 → 0.12.8

package/dist/utils/types/guards.d.ts

@@ -54,56 +54,6 @@ export declare function isRecord(value: unknown): value is Record<string, unknow
  * ```
  */
 export declare function hasProperty<K extends PropertyKey>(obj: unknown, key: K): obj is Record<K, unknown>;
-/**
- * Type guard to check if an object has a property of a specific type.
- *
- * @param obj - Object to check
- * @param key - Property key to look for
- * @param typeGuard - Type guard function for the property value
- * @returns True if object has the property and it matches the type
- *
- * @example
- * ```typescript
- * if (hasPropertyOfType(obj, 'count', (v): v is number => typeof v === 'number')) {
- *   // obj.count is now typed as number
- *   console.log(obj.count + 1);
- * }
- * ```
- */
-export declare function hasPropertyOfType<K extends PropertyKey, T>(obj: unknown, key: K, typeGuard: (value: unknown) => value is T): obj is Record<K, T>;
-/**
- * Type guard to check if a value is a string.
- *
- * @param value - Value to check
- * @returns True if value is a string
- *
- * @example
- * ```typescript
- * if (isString(value)) {
- *   // value is now typed as string
- *   console.log(value.toUpperCase());
- * }
- * ```
- */
-export declare function isString(value: unknown): value is string;
-/**
- * Type guard to check if a value is a number.
- *
- * `NaN` is explicitly excluded — `typeof NaN === 'number'` is true in JavaScript,
- * but `NaN` is almost never a valid value in the contexts where this guard is used.
- *
- * @param value - Value to check
- * @returns True if value is a finite or infinite number (excluding NaN)
- *
- * @example
- * ```typescript
- * if (isNumber(value)) {
- *   // value is now typed as number (NaN excluded)
- *   console.log(value.toFixed(2));
- * }
- * ```
- */
-export declare function isNumber(value: unknown): value is number;
 /**
  * Type guard to check if an error is an AggregateError.
  *
@@ -140,22 +90,6 @@ export declare function isAggregateError(error: unknown): error is Error & {
 export declare function isErrorWithCode(error: unknown): error is Error & {
     code: unknown;
 };
-/**
- * Type guard to check if an error has a status property.
- *
- * @param error - Error to check
- * @returns True if error has a status property
- *
- * @example
- * ```typescript
- * if (isErrorWithStatus(error)) {
- *   console.log(`HTTP status: ${error.status}`);
- * }
- * ```
- */
-export declare function isErrorWithStatus(error: unknown): error is Error & {
-    status: unknown;
-};
 /**
  * Safely get a property from an object if it exists.
  *
@@ -170,40 +104,4 @@ export declare function isErrorWithStatus(error: unknown): error is Error & {
  * ```
  */
 export declare function getProperty<K extends PropertyKey>(obj: unknown, key: K): unknown;
-/**
- * Safely get a string property from an object.
- *
- * @param obj - Object to get property from
- * @param key - Property key
- * @returns String value or undefined if property doesn't exist or is not a string
- *
- * @example
- * ```typescript
- * const traceId = getStringProperty(context, 'traceId');
- * if (traceId) {
- *   // traceId is typed as string
- *   console.log(traceId.toUpperCase());
- * }
- * ```
- */
-export declare function getStringProperty<K extends PropertyKey>(obj: unknown, key: K): string | undefined;
-/**
- * Safely get a number property from an object.
- *
- * Returns `undefined` if the property is absent, not a number, or is `NaN`.
- *
- * @param obj - Object to get property from
- * @param key - Property key
- * @returns Number value or undefined if property doesn't exist, is not a number, or is NaN
- *
- * @example
- * ```typescript
- * const retries = getNumberProperty(config, 'maxRetries');
- * if (retries !== undefined) {
- *   // retries is typed as number
- *   console.log(`Max retries: ${retries}`);
- * }
- * ```
- */
-export declare function getNumberProperty<K extends PropertyKey>(obj: unknown, key: K): number | undefined;
 //# sourceMappingURL=guards.d.ts.map

package/dist/utils/types/guards.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../../../src/utils/types/guards.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,WAAW,EAC/C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,CAAC,GACL,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAE3B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,WAAW,EAAE,CAAC,EACxD,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,CAAC,EACN,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,IAAI,CAAC,GACxC,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAErB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,KAAK,GAAG;IAAE,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAEvF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,KAAK,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAElF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,KAAK,GAAG;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,CAEtF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,OAAO,CAEhF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,MAAM,GAAG,SAAS,CAGjG;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,MAAM,GAAG,SAAS,CAGjG"}
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../../../src/utils/types/guards.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,WAAW,EAC/C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,CAAC,GACL,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAE3B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,KAAK,GAAG;IAAE,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAEvF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,KAAK,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAElF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,OAAO,CAEhF"}

package/dist/utils/types/guards.js

@@ -60,62 +60,6 @@ export function isRecord(value) {
 export function hasProperty(obj, key) {
     return isObject(obj) && key in obj;
 }
-/**
- * Type guard to check if an object has a property of a specific type.
- *
- * @param obj - Object to check
- * @param key - Property key to look for
- * @param typeGuard - Type guard function for the property value
- * @returns True if object has the property and it matches the type
- *
- * @example
- * ```typescript
- * if (hasPropertyOfType(obj, 'count', (v): v is number => typeof v === 'number')) {
- *   // obj.count is now typed as number
- *   console.log(obj.count + 1);
- * }
- * ```
- */
-export function hasPropertyOfType(obj, key, typeGuard) {
-    return hasProperty(obj, key) && typeGuard(obj[key]);
-}
-/**
- * Type guard to check if a value is a string.
- *
- * @param value - Value to check
- * @returns True if value is a string
- *
- * @example
- * ```typescript
- * if (isString(value)) {
- *   // value is now typed as string
- *   console.log(value.toUpperCase());
- * }
- * ```
- */
-export function isString(value) {
-    return typeof value === 'string';
-}
-/**
- * Type guard to check if a value is a number.
- *
- * `NaN` is explicitly excluded — `typeof NaN === 'number'` is true in JavaScript,
- * but `NaN` is almost never a valid value in the contexts where this guard is used.
- *
- * @param value - Value to check
- * @returns True if value is a finite or infinite number (excluding NaN)
- *
- * @example
- * ```typescript
- * if (isNumber(value)) {
- *   // value is now typed as number (NaN excluded)
- *   console.log(value.toFixed(2));
- * }
- * ```
- */
-export function isNumber(value) {
-    return typeof value === 'number' && !Number.isNaN(value);
-}
 /**
  * Type guard to check if an error is an AggregateError.
  *
@@ -152,22 +96,6 @@ export function isAggregateError(error) {
 export function isErrorWithCode(error) {
     return error instanceof Error && hasProperty(error, 'code');
 }
-/**
- * Type guard to check if an error has a status property.
- *
- * @param error - Error to check
- * @returns True if error has a status property
- *
- * @example
- * ```typescript
- * if (isErrorWithStatus(error)) {
- *   console.log(`HTTP status: ${error.status}`);
- * }
- * ```
- */
-export function isErrorWithStatus(error) {
-    return error instanceof Error && hasProperty(error, 'status');
-}
 /**
  * Safely get a property from an object if it exists.
  *
@@ -184,46 +112,4 @@ export function isErrorWithStatus(error) {
 export function getProperty(obj, key) {
     return hasProperty(obj, key) ? obj[key] : undefined;
 }
-/**
- * Safely get a string property from an object.
- *
- * @param obj - Object to get property from
- * @param key - Property key
- * @returns String value or undefined if property doesn't exist or is not a string
- *
- * @example
- * ```typescript
- * const traceId = getStringProperty(context, 'traceId');
- * if (traceId) {
- *   // traceId is typed as string
- *   console.log(traceId.toUpperCase());
- * }
- * ```
- */
-export function getStringProperty(obj, key) {
-    const value = getProperty(obj, key);
-    return isString(value) ? value : undefined;
-}
-/**
- * Safely get a number property from an object.
- *
- * Returns `undefined` if the property is absent, not a number, or is `NaN`.
- *
- * @param obj - Object to get property from
- * @param key - Property key
- * @returns Number value or undefined if property doesn't exist, is not a number, or is NaN
- *
- * @example
- * ```typescript
- * const retries = getNumberProperty(config, 'maxRetries');
- * if (retries !== undefined) {
- *   // retries is typed as number
- *   console.log(`Max retries: ${retries}`);
- * }
- * ```
- */
-export function getNumberProperty(obj, key) {
-    const value = getProperty(obj, key);
-    return isNumber(value) ? value : undefined;
-}
 //# sourceMappingURL=guards.js.map

package/dist/utils/types/guards.js.map

@@ -1 +1 @@
-{"version":3,"file":"guards.js","sourceRoot":"","sources":["../../../src/utils/types/guards.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,WAAW,CACzB,GAAY,EACZ,GAAM;IAEN,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAY,EACZ,GAAM,EACN,SAAyC;IAEzC,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,KAAK,YAAY,KAAK,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,KAAK,YAAY,KAAK,IAAI,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,OAAO,KAAK,YAAY,KAAK,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CAAwB,GAAY,EAAE,GAAM;IACrE,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAAwB,GAAY,EAAE,GAAM;IAC3E,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,iBAAiB,CAAwB,GAAY,EAAE,GAAM;IAC3E,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"guards.js","sourceRoot":"","sources":["../../../src/utils/types/guards.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,WAAW,CACzB,GAAY,EACZ,GAAM;IAEN,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,KAAK,YAAY,KAAK,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,KAAK,YAAY,KAAK,IAAI,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CAAwB,GAAY,EAAE,GAAM;IACrE,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cyanheads/mcp-ts-core",
-  "version": "0.12.7",
+  "version": "0.12.8",
   "mcpName": "io.github.cyanheads/mcp-ts-core",
   "description": "Agent-native TypeScript framework for MCP servers. Includes runtime infrastructure and agent skills for building, testing, and shipping servers.",
   "files": [
@@ -206,10 +206,10 @@
     "@opentelemetry/exporter-trace-otlp-http": "^0.222.0",
     "@opentelemetry/instrumentation-http": "^0.222.0",
     "@opentelemetry/instrumentation-pino": "^0.68.0",
-    "@opentelemetry/resources": "^2.10.0",
-    "@opentelemetry/sdk-metrics": "^2.10.0",
+    "@opentelemetry/resources": "^2.11.0",
+    "@opentelemetry/sdk-metrics": "^2.11.0",
     "@opentelemetry/sdk-node": "^0.222.0",
-    "@opentelemetry/sdk-trace-node": "^2.10.0",
+    "@opentelemetry/sdk-trace-node": "^2.11.0",
     "@opentelemetry/semantic-conventions": "^1.43.0",
     "@socketsecurity/bun-security-scanner": "^1.1.2",
     "@supabase/supabase-js": "^2.115.0",
@@ -230,7 +230,7 @@
     "execa": "^10.0.1",
     "fast-check": "^4.9.0",
     "fast-xml-parser": "^5.11.1",
-    "ignore": "^7.0.7",
+    "ignore": "^7.0.8",
     "js-yaml": "^5.4.1",
     "linkedom": "^0.18.13",
     "node-cron": "^4.6.0",
@@ -241,7 +241,7 @@
     "pino-pretty": "^13.1.3",
     "repomix": "^1.18.0",
     "sanitize-html": "^2.17.7",
-    "tsc-alias": "^1.9.2",
+    "tsc-alias": "^1.9.4",
     "typedoc": "^0.28.20",
     "typescript": "^7.0.2",
     "typescript-v6": "npm:typescript@^6.0.3",

package/skills/add-provider/SKILL.md

@@ -4,7 +4,7 @@ description: >
   Add a new storage or service provider to the core package. Use when implementing a new backend for StorageService (e.g., a new database) or a new service provider (e.g., a new LLM backend).
 metadata:
   author: cyanheads
-  version: "1.0"
+  version: "1.1"
   audience: internal
   type: reference
 ---
@@ -53,7 +53,20 @@ Provider file location and naming differ by domain:
 1. **Identify the provider interface** — read the interface file for the target domain
    (see table above).
 2. **Create the provider file** following the file convention for its domain (see above).
-3. **Implement the interface** — all methods must be implemented.
+3. **Implement the interface** — all methods must be implemented. Storage providers build
+   on `src/storage/core/providerHelpers.ts` rather than re-deriving what the existing
+   providers share:
+
+   - `getManyViaGet` / `setManyViaSet` / `deleteManyViaDelete` — the batch methods as a
+     parallel fan-out over the single-key methods, for backends with no native batch API.
+   - `encodeEnvelope` / `decodeEnvelope` — the TTL envelope for backends with no TTL of their
+     own (R2, filesystem). `decodeEnvelope` returns `{ kind: 'expired' }` so the provider can
+     delete on read, returns pre-envelope JSON as a plain value, and throws `SyntaxError` on
+     invalid JSON so the provider can attach the key to the error it raises.
+   - `paginateSortedKeys` — one `list()` page over an already-sorted key set, with the cursor
+     for the page that follows.
+   - `escapeLikePattern` — escapes `%`, `_`, and `\` in a prefix before a SQL `LIKE`.
+
 4. **Lazy-load dependencies** if Tier 3:
 
    ```typescript
@@ -94,7 +107,7 @@ Provider file location and naming differ by domain:
    `isServerless()` guard:
 
    ```typescript
-   // src/storage/core/storageFactory.ts ~line 112
+   // src/storage/core/storageFactory.ts
    !['in-memory', 'cloudflare-r2', 'cloudflare-kv', 'cloudflare-d1'].includes(providerType)
    ```
 
@@ -115,9 +128,10 @@ Provider file location and naming differ by domain:
 - [ ] Registered in the correct factory for the domain (see Step 5)
 - [ ] Storage: provider string added to `z.enum` in `src/config/index.ts`
 - [ ] Storage: Worker-compatible array in `storageFactory.ts` updated if applicable
+- [ ] Storage: batch, TTL envelope, paging, and `LIKE` escaping come from `providerHelpers.ts`, not a local copy
 - [ ] Speech: `provider` literal added to `SpeechProviderConfig` union in `types.ts`
 - [ ] LLM: `src/core/app.ts` instantiation logic updated if adding a second LLM provider
 - [ ] Optional peer dependency added to both `peerDependencies` and `peerDependenciesMeta` in `package.json` if Tier 3
 - [ ] `bun run rebuild` succeeds
 - [ ] `bun run devcheck` passes
-- [ ] Test file created at `src/storage/providers/{{name}}/{{name}}Provider.test.ts` (or equivalent path for the domain) and `bun run test` passes
+- [ ] Tests added under `tests/unit/storage/providers/{{providerName}}/` (storage) or `tests/unit/services/{{domain}}/providers/{{provider-name}}.provider.test.ts` (LLM / speech), and `bun run test` passes

package/skills/api-config/SKILL.md

@@ -4,7 +4,7 @@ description: >
   Reference for core and server configuration in `@cyanheads/mcp-ts-core`. Covers env var tables with defaults, priority order, server-specific Zod schema pattern, and Workers lazy-parsing requirement.
 metadata:
   author: cyanheads
-  version: "1.15"
+  version: "1.16"
   audience: external
   type: reference
 ---
@@ -95,7 +95,6 @@ await createApp({
 | `MCP_HTTP_RESUMABILITY` | `mcpHttpResumability` | `true` | SSE stream replay under stateful HTTP. On by default — selecting a session mode is the opt-in. Kill switch only; no effect on stateless serving or the session-less 2026-07-28 era |
 | `MCP_HTTP_RESUMABILITY_MAX_EVENTS` | `mcpHttpResumabilityMaxEvents` | `512` | Events retained per session for replay; oldest evicted first. Lower it on a server whose tools return large results |
 | `MCP_HTTP_RESUMABILITY_TTL_MS` | `mcpHttpResumabilityTtlMs` | `300000` | 5 min; how long a retained event stays replayable |
-| `MCP_RESPONSE_VERBOSITY` | `mcpResponseVerbosity` | `standard` | `minimal` \| `standard` \| `full` |
 | `MCP_ALLOWED_ORIGINS` | `mcpAllowedOrigins` | — | Comma-separated list; omit to allow all |
 | `MCP_SERVER_RESOURCE_IDENTIFIER` | `mcpServerResourceIdentifier` | — | RFC 8707 resource indicator URL |
 | `MCP_PUBLIC_URL` | `mcpPublicUrl` | — | Public-facing origin for reverse proxies (Cloudflare Tunnel, nginx, ALB) so emitted URLs carry the correct scheme |
@@ -131,19 +130,6 @@ await createApp({
 | `DEV_MCP_CLIENT_ID` | `devMcpClientId` | — | Dev-only: override client ID |
 | `DEV_MCP_SCOPES` | `devMcpScopes` | — | Dev-only: comma-separated scope overrides |
 
-#### OAuth proxy (optional sub-object)
-
-Activated when `OAUTH_PROXY_AUTHORIZATION_URL` or `OAUTH_PROXY_TOKEN_URL` is set.
-
-| Env Var | `AppConfig` field | Notes |
-|:--------|:-----------------|:------|
-| `OAUTH_PROXY_AUTHORIZATION_URL` | `oauthProxy.authorizationUrl` | Proxy authorization endpoint |
-| `OAUTH_PROXY_TOKEN_URL` | `oauthProxy.tokenUrl` | Proxy token endpoint |
-| `OAUTH_PROXY_REVOCATION_URL` | `oauthProxy.revocationUrl` | Optional |
-| `OAUTH_PROXY_ISSUER_URL` | `oauthProxy.issuerUrl` | Optional |
-| `OAUTH_PROXY_SERVICE_DOCUMENTATION_URL` | `oauthProxy.serviceDocumentationUrl` | Optional |
-| `OAUTH_PROXY_DEFAULT_CLIENT_REDIRECT_URIS` | `oauthProxy.defaultClientRedirectUris` | Comma-separated list |
-
 ---
 
 ### Storage
@@ -174,13 +160,13 @@ Activated when `OAUTH_PROXY_AUTHORIZATION_URL` or `OAUTH_PROXY_TOKEN_URL` is set
 
 #### Supabase (optional sub-object)
 
-Activated when both `SUPABASE_URL` and `SUPABASE_ANON_KEY` are set.
+Activated when `SUPABASE_URL` is set.
 
 | Env Var | `AppConfig` field | Notes |
 |:--------|:-----------------|:------|
 | `SUPABASE_URL` | `supabase.url` | Required to activate |
-| `SUPABASE_ANON_KEY` | `supabase.anonKey` | Required to activate |
-| `SUPABASE_SERVICE_ROLE_KEY` | `supabase.serviceRoleKey` | Optional; elevated access |
+| `SUPABASE_SERVICE_ROLE_KEY` | `supabase.serviceRoleKey` | Required by the `supabase` storage provider (admin client) |
+| `SUPABASE_ANON_KEY` | `supabase.anonKey` | Optional; for the server's own public client — the framework never reads it |
 
 ---
 

package/skills/api-services/SKILL.md

@@ -4,7 +4,7 @@ description: >
   API reference for built-in service providers (LLM, Speech, Graph). Use when looking up service interfaces, provider capabilities, or integration patterns.
 metadata:
   author: cyanheads
-  version: "1.4"
+  version: "1.5"
   audience: external
   type: reference
 ---

package/skills/api-services/references/speech.md

@@ -24,7 +24,7 @@ The provider interface — implemented by ElevenLabs (TTS) and Whisper (STT):
 | `.getSTTProvider()` | `ISpeechProvider` | Throws `McpError(InvalidRequest)` if no STT provider configured |
 | `.hasTTS()` | `boolean` | Check if TTS is available |
 | `.hasSTT()` | `boolean` | Check if STT is available |
-| `.healthCheck()` | `Promise<{ tts: boolean; stt: boolean }>` | Checks both providers sequentially |
+| `.healthCheck()` | `Promise<{ tts: boolean; stt: boolean }>` | Checks both providers in parallel |
 
 ## Providers
 
@@ -52,7 +52,6 @@ const ttsProvider = speechService.getTTSProvider();
 const ttsResult = await ttsProvider.textToSpeech({
   text: 'Hello, world!',
   voice: { voiceId: 'some-voice-id' },
-  format: 'mp3',
 });
 
 // Speech-to-Text

package/skills/api-telemetry/SKILL.md

@@ -4,7 +4,7 @@ description: >
   Catalog of OpenTelemetry instrumentation built into framework `@cyanheads/mcp-ts-core` — spans, metrics, completion logs, env config, runtime caveats, custom instrumentation patterns, and cardinality rules. Use when enabling OTel export, adding custom spans or metrics in services, debugging missing telemetry, looking up attribute names, or deciding what's safe to put on a metric attribute vs. a span.
 metadata:
   author: cyanheads
-  version: "1.7"
+  version: "1.8"
   audience: external
   type: reference
 ---
@@ -227,7 +227,7 @@ export async function doWork() {
 }
 ```
 
-Span context propagates automatically — `withSpan` calls inside a `tool_execution:*` span appear as children. `runInContext(ctx, fn)` carries the active OTel context across async boundaries (`setTimeout`, `queueMicrotask`).
+Span context propagates automatically — `withSpan` calls inside a `tool_execution:*` span appear as children. `runInContext(ctx, fn)` re-establishes the span `ctx` names as the active one across async boundaries (`setTimeout`, `queueMicrotask`), so spans opened inside `fn` parent to the request's span.
 
 For attribute keys, prefer the `ATTR_*` constants exported from `@cyanheads/mcp-ts-core/utils` (telemetry/attributes) over hand-typed strings — keeps you in step with framework conventions and avoids typos. Standard OTel semantic conventions (HTTP, cloud, service, network, etc.) are NOT re-exported — import those directly from `@opentelemetry/semantic-conventions`.
 

package/skills/api-utils/SKILL.md

@@ -4,7 +4,7 @@ description: >
   API reference for all utilities exported from `@cyanheads/mcp-ts-core/utils`. Use when looking up utility method signatures, options, peer dependencies, or usage patterns.
 metadata:
   author: cyanheads
-  version: "2.8"
+  version: "2.9"
   audience: external
   type: reference
 ---
@@ -163,7 +163,7 @@ Helper API only. For the catalog of what the framework auto-emits (span names, m
 | Export | Signature | Notes |
 |:-------|:----------|:------|
 | `withSpan` | `async <T>(operationName: string, fn: (span: Span) => Promise<T>, attributes?: Record<string, string \| number \| boolean>) -> Promise<T>` | Creates an active span, calls `fn(span)`, sets `OK` on success or records exception + sets `ERROR` on throw, then ends the span. Always rethrows. |
-| `runInContext` | `(ctx: RequestContext \| undefined, fn: () => T) -> T` | Runs `fn` inside the currently active OTel context. When `ctx` has no `traceId`/`spanId`, calls `fn` directly. Does not restore a specific span — use for carrying context across async boundaries (`setTimeout`, `queueMicrotask`). |
+| `runInContext` | `(ctx: RequestContext \| undefined, fn: () => T) -> T` | Runs `fn` with the span `ctx` names (`traceId`/`spanId`) re-established as the active OTel span, so spans opened inside `fn` parent to it. When `ctx` has no `traceId`/`spanId`, calls `fn` directly. Use for carrying a request's trace across async boundaries (`setTimeout`, `queueMicrotask`). |
 | `buildTraceparent` | `(ctx?: RequestContext) -> string \| undefined` | Builds a W3C `traceparent` header (`00-<traceId>-<spanId>-01`) from `ctx` or the active span. Returns `undefined` when neither source yields both IDs. |
 | `extractTraceparent` | `(headers: Headers \| Record<string, string \| undefined>) -> TraceparentInfo \| undefined` | Parses a W3C `traceparent` header. Returns `undefined` when absent or malformed. `TraceparentInfo: { traceId, spanId, sampled }`. |
 | `createContextWithParentTrace` | `(parentHeaders: Headers \| Record<string, string \| undefined>, operation: string) -> RequestContext` | Extracts `traceparent` from headers and creates a child `RequestContext` inheriting `traceId`/`parentSpanId`. |