@dereekb/firebase-server 13.16.0 → 13.17.0

package/mcp/index.cjs.js

@@ -17,7 +17,7 @@ function _class_call_check$5(instance, Constructor) {
         throw new TypeError("Cannot call a class as a function");
     }
 }
-function _define_property$7(obj, key, value) {
+function _define_property$8(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -71,7 +71,7 @@ function _define_property$7(obj, key, value) {
      * discovery document. Claude custom-connector reads this to discover the OIDC issuer.
      *
      * @example 'https://api.example.com/oidc'
-     */ _define_property$7(this, "oidcIssuer", void 0);
+     */ _define_property$8(this, "oidcIssuer", void 0);
     /**
      * The canonical resource URL of the MCP endpoint.
      *
@@ -79,19 +79,19 @@ function _define_property$7(obj, key, value) {
      * and used as the audience the access token's `aud` claim should match.
      *
      * @example 'https://api.example.com/mcp'
-     */ _define_property$7(this, "mcpUrl", void 0);
+     */ _define_property$8(this, "mcpUrl", void 0);
     /**
      * Optional name advertised on the MCP `initialize` handshake. Defaults to
      * {@link DEFAULT_MCP_SERVER_NAME}.
-     */ _define_property$7(this, "serverName", void 0);
+     */ _define_property$8(this, "serverName", void 0);
     /**
      * Optional version advertised on the MCP `initialize` handshake.
-     */ _define_property$7(this, "serverVersion", void 0);
+     */ _define_property$8(this, "serverVersion", void 0);
     /**
      * Optional override for the `instructions` string passed to `new McpServer(...)` and
      * advertised on the JSON-RPC `initialize` handshake. Defaults to
      * {@link DEFAULT_MCP_SERVER_INSTRUCTIONS}.
-     */ _define_property$7(this, "serverInstructions", void 0);
+     */ _define_property$8(this, "serverInstructions", void 0);
     /**
      * Absolute path to a pre-rendered MCP manifest JSON file produced by
      * `dbx-cli-generate-mcp-manifest`. When set, the runtime reads it once at
@@ -101,7 +101,17 @@ function _define_property$7(obj, key, value) {
      * Optional. When unset or the file is missing, the runtime falls back to
      * today's behavior (auto-generated descriptions, ArkType-derived input
      * schemas, no output schemas) and emits a single boot warning.
-     */ _define_property$7(this, "mcpManifestPath", void 0);
+     */ _define_property$8(this, "mcpManifestPath", void 0);
+    /**
+     * Absolute path to a pre-rendered route manifest JSON file produced by
+     * `dbx-cli-generate-route-manifest`. When set, the runtime reads it once at
+     * boot and registers the built-in `url-models` tool, which decodes an app URL
+     * into the Firestore models its page renders.
+     *
+     * Optional. When unset or the file is missing, the runtime skips registering
+     * `url-models` and emits a single boot warning when the path was set but
+     * unreadable.
+     */ _define_property$8(this, "mcpRouteManifestPath", void 0);
     /**
      * When `true`, the MCP server only advertises tools whose effective read-only classification is `true`.
      *
@@ -111,19 +121,19 @@ function _define_property$7(obj, key, value) {
      *
      * The advertised `serverName` on the JSON-RPC `initialize` handshake is suffixed with
      * ` (read-only)` so the client surface reflects the mode.
-     */ _define_property$7(this, "readOnly", void 0);
+     */ _define_property$8(this, "readOnly", void 0);
 };
 /**
  * NestJS injection token for the optional {@link McpAuthRoleReader} provider.
  */ var MCP_AUTH_ROLE_READER = 'MCP_AUTH_ROLE_READER';
 
-function _type_of$3(obj) {
+function _type_of$4(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
 function __decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if ((typeof Reflect === "undefined" ? "undefined" : _type_of$3(Reflect)) === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    if ((typeof Reflect === "undefined" ? "undefined" : _type_of$4(Reflect)) === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
     else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
@@ -192,7 +202,290 @@ function _class_call_check$4(instance, Constructor) {
     return isDefault ? "".concat(modelType, ".").concat(call, "._") : "".concat(modelType, ".").concat(call, ".").concat(specifier);
 }
 
-function asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, key, arg) {
+function _array_like_to_array$9(arr, len) {
+    if (len == null || len > arr.length) len = arr.length;
+    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
+    return arr2;
+}
+function _array_with_holes$5(arr) {
+    if (Array.isArray(arr)) return arr;
+}
+function _iterable_to_array_limit$5(arr, i) {
+    var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
+    if (_i == null) return;
+    var _arr = [];
+    var _n = true;
+    var _d = false;
+    var _s, _e;
+    try {
+        for(_i = _i.call(arr); !(_n = (_s = _i.next()).done); _n = true){
+            _arr.push(_s.value);
+            if (i && _arr.length === i) break;
+        }
+    } catch (err) {
+        _d = true;
+        _e = err;
+    } finally{
+        try {
+            if (!_n && _i["return"] != null) _i["return"]();
+        } finally{
+            if (_d) throw _e;
+        }
+    }
+    return _arr;
+}
+function _non_iterable_rest$5() {
+    throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
+}
+function _sliced_to_array$5(arr, i) {
+    return _array_with_holes$5(arr) || _iterable_to_array_limit$5(arr, i) || _unsupported_iterable_to_array$9(arr, i) || _non_iterable_rest$5();
+}
+function _unsupported_iterable_to_array$9(o, minLen) {
+    if (!o) return;
+    if (typeof o === "string") return _array_like_to_array$9(o, minLen);
+    var n = Object.prototype.toString.call(o).slice(8, -1);
+    if (n === "Object" && o.constructor) n = o.constructor.name;
+    if (n === "Map" || n === "Set") return Array.from(n);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$9(o, minLen);
+}
+/**
+ * Runtime mirror of the build-time route manifest schema + a ported URL matcher.
+ *
+ * Structural mirror of `@dereekb/dbx-cli`'s `route-manifest.ts` types and the
+ * pure `url-match.ts` matcher, so the firebase-server/mcp runtime can consume
+ * the generated `route.manifest.json` without taking a runtime dependency on
+ * the build-time CLI package. Both sides bump {@link ROUTE_MANIFEST_VERSION}
+ * together when the manifest shape changes.
+ */ /**
+ * Version stamp embedded in `route.manifest.json`. Runtime loaders refuse
+ * manifests whose `version` does not match. Mirror in `@dereekb/dbx-cli`'s
+ * `ROUTE_MANIFEST_VERSION` — bump both together.
+ */ var ROUTE_MANIFEST_VERSION = 1;
+/**
+ * Extracts the normalized pathname from a full URL or a bare path. Strips the
+ * scheme/host/port, query string, and hash; collapses an empty path to `/` and
+ * trims a single trailing slash.
+ *
+ * @param url - A full URL (`https://app.example.co/worker/x/timesheets/list`) or bare path.
+ * @returns The normalized pathname.
+ *
+ * @example
+ * ```ts
+ * parseUrlModelsPathname('https://app.hellosubs.co/worker/abc/timesheets/list/'); // => '/worker/abc/timesheets/list'
+ * ```
+ */ function parseUrlModelsPathname(url) {
+    var trimmed = url.trim();
+    var pathname;
+    if (RegExp("^[a-z][a-z0-9+.-]*:\\/\\/", "iu").test(trimmed)) {
+        pathname = new URL(trimmed).pathname;
+    } else {
+        var hashStripped = trimmed.split('#', 1)[0];
+        var pathPart = hashStripped.split('?', 1)[0];
+        pathname = pathPart.startsWith('/') ? pathPart : "/".concat(pathPart);
+    }
+    return normalizePathname(pathname);
+}
+/**
+ * Matches a URL against the manifest's states, preferring a literal match over
+ * a parameterised one. A tie at either tier collapses to `ambiguous`; otherwise
+ * the closest near-misses are scored and returned in a `none` result.
+ *
+ * @param input - The manifest and the URL (or pathname) to resolve.
+ * @returns A discriminated match / ambiguous / none result.
+ */ function matchRouteManifestUrl(input) {
+    var pathname = parseUrlModelsPathname(input.url);
+    var states = input.manifest.states;
+    var literal = states.filter(function(s) {
+        return s.fullUrl !== undefined && normalizePathname(s.fullUrl) === pathname;
+    });
+    var result;
+    if (literal.length === 1) {
+        result = {
+            kind: 'match',
+            via: 'literal',
+            state: literal[0],
+            params: {},
+            pathname: pathname
+        };
+    } else if (literal.length > 1) {
+        result = {
+            kind: 'ambiguous',
+            states: literal,
+            pathname: pathname
+        };
+    } else {
+        result = matchParamOrNone(states, pathname);
+    }
+    return result;
+}
+function matchParamOrNone(states, pathname) {
+    var inputSegments = splitSegments(pathname);
+    var hits = [];
+    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+    try {
+        for(var _iterator = states[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+            var state = _step.value;
+            if (state.fullUrl === undefined || !hasParamSegment(state.fullUrl)) {
+                continue;
+            }
+            var params = tryMatchSegments(splitSegments(state.fullUrl), inputSegments);
+            if (params) {
+                hits.push({
+                    state: state,
+                    params: params
+                });
+            }
+        }
+    } catch (err) {
+        _didIteratorError = true;
+        _iteratorError = err;
+    } finally{
+        try {
+            if (!_iteratorNormalCompletion && _iterator.return != null) {
+                _iterator.return();
+            }
+        } finally{
+            if (_didIteratorError) {
+                throw _iteratorError;
+            }
+        }
+    }
+    var result;
+    if (hits.length === 1) {
+        result = {
+            kind: 'match',
+            via: 'param',
+            state: hits[0].state,
+            params: hits[0].params,
+            pathname: pathname
+        };
+    } else if (hits.length > 1) {
+        result = {
+            kind: 'ambiguous',
+            states: hits.map(function(h) {
+                return h.state;
+            }),
+            pathname: pathname
+        };
+    } else {
+        result = {
+            kind: 'none',
+            candidates: scoreCandidates(states, pathname),
+            pathname: pathname
+        };
+    }
+    return result;
+}
+// MARK: Pure URL helpers (mirror of @dereekb/dbx-cli url-match.ts)
+function normalizePathname(pathname) {
+    var result;
+    if (pathname.length === 0) {
+        result = '/';
+    } else if (pathname.length > 1 && pathname.endsWith('/')) {
+        result = pathname.slice(0, -1);
+    } else {
+        result = pathname;
+    }
+    return result;
+}
+function splitSegments(path) {
+    var normalized = path.startsWith('/') ? path.slice(1) : path;
+    return normalized.length === 0 ? [] : normalized.split('/');
+}
+function hasParamSegment(path) {
+    return path.includes(':') || path.includes('{');
+}
+function tryMatchSegments(route, input) {
+    if (route.length !== input.length) {
+        return undefined;
+    }
+    var params = {};
+    var result = params;
+    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+    try {
+        for(var _iterator = route.entries()[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+            var _step_value = _sliced_to_array$5(_step.value, 2), i = _step_value[0], r = _step_value[1];
+            var v = input[i];
+            if (r.startsWith(':')) {
+                params[r.slice(1)] = decodeURIComponent(v);
+            } else if (r.startsWith('{') && r.endsWith('}')) {
+                var inner = r.slice(1, -1);
+                var colonIdx = inner.indexOf(':');
+                var key = colonIdx >= 0 ? inner.slice(0, colonIdx) : inner;
+                params[key] = decodeURIComponent(v);
+            } else if (r !== v) {
+                result = undefined;
+                break;
+            }
+        }
+    } catch (err) {
+        _didIteratorError = true;
+        _iteratorError = err;
+    } finally{
+        try {
+            if (!_iteratorNormalCompletion && _iterator.return != null) {
+                _iterator.return();
+            }
+        } finally{
+            if (_didIteratorError) {
+                throw _iteratorError;
+            }
+        }
+    }
+    return result;
+}
+function scoreCandidates(states, pathname) {
+    var segments = splitSegments(pathname);
+    var scored = [];
+    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+    try {
+        for(var _iterator = states[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+            var state = _step.value;
+            if (state.fullUrl === undefined) {
+                continue;
+            }
+            var candidateSegments = splitSegments(state.fullUrl);
+            var score = 0;
+            var maxIndex = Math.min(segments.length, candidateSegments.length);
+            for(var i = 0; i < maxIndex; i += 1){
+                if (segments[i] === candidateSegments[i]) {
+                    score += 2;
+                } else if (candidateSegments[i].startsWith(':') || candidateSegments[i].startsWith('{')) {
+                    score += 1;
+                } else {
+                    break;
+                }
+            }
+            if (score > 0) {
+                scored.push({
+                    state: state,
+                    score: score
+                });
+            }
+        }
+    } catch (err) {
+        _didIteratorError = true;
+        _iteratorError = err;
+    } finally{
+        try {
+            if (!_iteratorNormalCompletion && _iterator.return != null) {
+                _iterator.return();
+            }
+        } finally{
+            if (_didIteratorError) {
+                throw _iteratorError;
+            }
+        }
+    }
+    scored.sort(function(a, b) {
+        return b.score - a.score;
+    });
+    return scored.slice(0, 5).map(function(s) {
+        return s.state;
+    });
+}
+
+function asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -206,16 +499,16 @@ function asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$5(fn) {
+function _async_to_generator$6(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
@@ -229,7 +522,7 @@ function _instanceof$1(left, right) {
         return left instanceof right;
     }
 }
-function _ts_generator$5(thisArg, body) {
+function _ts_generator$6(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -357,9 +650,9 @@ function _ts_generator$5(thisArg, body) {
  * @param details - The handler-level API details (carries the mapper + Tier 2/3 formatters).
  * @returns The MCP tool response content.
  */ function formatMcpToolResponse(result, params, details) {
-    return _async_to_generator$5(function() {
+    return _async_to_generator$6(function() {
         var mcp, value, _tmp, context, response, summary;
-        return _ts_generator$5(this, function(_state) {
+        return _ts_generator$6(this, function(_state) {
             switch(_state.label){
                 case 0:
                     mcp = details === null || details === void 0 ? void 0 : details.mcp;
@@ -512,6 +805,28 @@ function stringifyResult(result) {
     }
     return READ_ONLY_BY_CALL_TYPE[callType];
 }
+/**
+ * Maps an effective read-only classification to the standard MCP {@link ToolAnnotations} hints
+ * advertised on `tools/list`.
+ *
+ * A definitively read-only tool advertises `{ readOnlyHint: true }`. Everything else — a known
+ * write (`false`) or an unclassified verb (`undefined`, e.g. `invoke`/custom) — fails safe to
+ * `{ readOnlyHint: false, destructiveHint: true }` so a client never mistakes an ambiguous tool
+ * for a safe read. `idempotentHint` / `openWorldHint` are intentionally left unset.
+ *
+ * Co-located with {@link resolveEffectiveReadOnly} / {@link READ_ONLY_BY_CALL_TYPE} so the
+ * read/write classification rules stay in one file.
+ *
+ * @param effectiveReadOnly - The resolved read-only classification from {@link resolveEffectiveReadOnly}.
+ * @returns The MCP annotations describing the tool's read/write behaviour.
+ */ function resolveMcpToolAnnotations(effectiveReadOnly) {
+    return effectiveReadOnly === true ? {
+        readOnlyHint: true
+    } : {
+        readOnlyHint: false,
+        destructiveHint: true
+    };
+}
 /**
  * Resolves the OIDC scope required to invoke a given call type, or `undefined` for
  * non-CRUD calls. Thin re-export so the tool generator doesn't need to reach into
@@ -523,15 +838,15 @@ function stringifyResult(result) {
     return firebase.callModelOidcScopeForCallType(callType);
 }
 
-function _array_like_to_array$7(arr, len) {
+function _array_like_to_array$8(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
     return arr2;
 }
-function _array_with_holes$3(arr) {
+function _array_with_holes$4(arr) {
     if (Array.isArray(arr)) return arr;
 }
-function _iterable_to_array_limit$3(arr, i) {
+function _iterable_to_array_limit$4(arr, i) {
     var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
     if (_i == null) return;
     var _arr = [];
@@ -555,23 +870,23 @@ function _iterable_to_array_limit$3(arr, i) {
     }
     return _arr;
 }
-function _non_iterable_rest$3() {
+function _non_iterable_rest$4() {
     throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _sliced_to_array$3(arr, i) {
-    return _array_with_holes$3(arr) || _iterable_to_array_limit$3(arr, i) || _unsupported_iterable_to_array$7(arr, i) || _non_iterable_rest$3();
+function _sliced_to_array$4(arr, i) {
+    return _array_with_holes$4(arr) || _iterable_to_array_limit$4(arr, i) || _unsupported_iterable_to_array$8(arr, i) || _non_iterable_rest$4();
 }
-function _type_of$2(obj) {
+function _type_of$3(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
-function _unsupported_iterable_to_array$7(o, minLen) {
+function _unsupported_iterable_to_array$8(o, minLen) {
     if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$7(o, minLen);
+    if (typeof o === "string") return _array_like_to_array$8(o, minLen);
     var n = Object.prototype.toString.call(o).slice(8, -1);
     if (n === "Object" && o.constructor) n = o.constructor.name;
     if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$7(o, minLen);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$8(o, minLen);
 }
 /**
  * Default `toJsonSchema()` options.
@@ -607,18 +922,33 @@ function _unsupported_iterable_to_array$7(o, minLen) {
     var inputSchema = (_input_inputSchema = input.inputSchema) !== null && _input_inputSchema !== void 0 ? _input_inputSchema : {
         type: 'object'
     };
-    var entry = input.outputSchema == null ? {
+    var entry = {
         name: input.name,
         description: input.description,
         inputSchema: inputSchema
-    } : {
-        name: input.name,
-        description: input.description,
-        inputSchema: inputSchema,
-        outputSchema: input.outputSchema
     };
+    if (input.outputSchema != null) {
+        entry.outputSchema = input.outputSchema;
+    }
+    if (input.annotations != null) {
+        entry.annotations = input.annotations;
+    }
     return Object.freeze(entry);
 }
+/**
+ * Description prefix prepended to a mutating tool's description so MCP clients that don't render
+ * {@link ToolAnnotations} still surface the write signal in plain text.
+ */ var MCP_WRITE_TOOL_DESCRIPTION_PREFIX = '[WRITE] ';
+/**
+ * Prepends {@link MCP_WRITE_TOOL_DESCRIPTION_PREFIX} to a description when its annotations mark the
+ * tool as a write (`readOnlyHint === false`). Read-only tools are returned unchanged.
+ *
+ * @param description - The base tool description.
+ * @param annotations - The resolved MCP annotations for the tool.
+ * @returns The description, prefixed with the write marker when the tool mutates.
+ */ function applyWriteMarker(description, annotations) {
+    return annotations.readOnlyHint === false ? "".concat(MCP_WRITE_TOOL_DESCRIPTION_PREFIX).concat(description) : description;
+}
 // MARK: Naming
 /**
  * The default specifier key used when a handler is not behind a specifier router.
@@ -837,18 +1167,18 @@ function _unsupported_iterable_to_array$7(o, minLen) {
     var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
     try {
         for(var _iterator = Object.entries(apiDetails.models)[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
-            var _step_value = _sliced_to_array$3(_step.value, 2), modelType = _step_value[0], modelEntry = _step_value[1];
+            var _step_value = _sliced_to_array$4(_step.value, 2), modelType = _step_value[0], modelEntry = _step_value[1];
             var _iteratorNormalCompletion1 = true, _didIteratorError1 = false, _iteratorError1 = undefined;
             try {
                 for(var _iterator1 = Object.entries(modelEntry.calls)[Symbol.iterator](), _step1; !(_iteratorNormalCompletion1 = (_step1 = _iterator1.next()).done); _iteratorNormalCompletion1 = true){
-                    var _step_value1 = _sliced_to_array$3(_step1.value, 2), callType = _step_value1[0], callDetails = _step_value1[1];
+                    var _step_value1 = _sliced_to_array$4(_step1.value, 2), callType = _step_value1[0], callDetails = _step_value1[1];
                     if (callDetails == null) {
                         continue;
                     }
                     var _iteratorNormalCompletion2 = true, _didIteratorError2 = false, _iteratorError2 = undefined;
                     try {
                         for(var _iterator2 = Object.entries(callDetails.specifiers)[Symbol.iterator](), _step2; !(_iteratorNormalCompletion2 = (_step2 = _iterator2.next()).done); _iteratorNormalCompletion2 = true){
-                            var _step_value2 = _sliced_to_array$3(_step2.value, 2), specifierKey = _step_value2[0], handlerDetails = _step_value2[1];
+                            var _step_value2 = _sliced_to_array$4(_step2.value, 2), specifierKey = _step_value2[0], handlerDetails = _step_value2[1];
                             var _ref;
                             var _naming_modelSegments, _handlerDetails_mcp, _handlerDetails_mcp1;
                             if (handlerDetails == null) {
@@ -985,7 +1315,7 @@ function _unsupported_iterable_to_array$7(o, minLen) {
         return;
     }
     var manifestEntry = manifest === null || manifest === void 0 ? void 0 : manifest.get(mcpManifestKey(modelType, callType, specifier));
-    var description = (_ref = manifestEntry === null || manifestEntry === void 0 ? void 0 : manifestEntry.description) !== null && _ref !== void 0 ? _ref : buildDefaultMcpToolDescription(modelType, callType, specifier);
+    var baseDescription = (_ref = manifestEntry === null || manifestEntry === void 0 ? void 0 : manifestEntry.description) !== null && _ref !== void 0 ? _ref : buildDefaultMcpToolDescription(modelType, callType, specifier);
     var inputSchema = resolveInputSchema({
         handlerDetails: handlerDetails,
         manifestEntry: manifestEntry,
@@ -1019,6 +1349,8 @@ function _unsupported_iterable_to_array$7(o, minLen) {
     }
     var requiredScope = (_resolveRequiredScope = resolveRequiredScope(callType)) !== null && _resolveRequiredScope !== void 0 ? _resolveRequiredScope : undefined;
     var effectiveReadOnly = resolveEffectiveReadOnly((_handlerDetails_mcp = handlerDetails.mcp) === null || _handlerDetails_mcp === void 0 ? void 0 : _handlerDetails_mcp.readOnly, callType);
+    var annotations = resolveMcpToolAnnotations(effectiveReadOnly);
+    var description = applyWriteMarker(baseDescription, annotations);
     var filterMetadata;
     if (classified.visibilityKind === 'declarative') {
         filterMetadata = {
@@ -1061,13 +1393,15 @@ function _unsupported_iterable_to_array$7(o, minLen) {
         name: name,
         description: description,
         inputSchema: inputSchema,
-        outputSchema: outputSchema
+        outputSchema: outputSchema,
+        annotations: annotations
     });
     var definition = {
         name: name,
         description: description,
         inputSchema: inputSchema,
         outputSchema: outputSchema,
+        annotations: annotations,
         details: handlerDetails,
         dispatch: dispatch,
         filterMetadata: filterMetadata,
@@ -1096,7 +1430,7 @@ function resolveInputSchema(context) {
     var result;
     try {
         var exported = model.arktypeToJsonSchemaForExport(handlerDetails.inputType);
-        if (exported && (typeof exported === "undefined" ? "undefined" : _type_of$2(exported)) === 'object') {
+        if (exported && (typeof exported === "undefined" ? "undefined" : _type_of$3(exported)) === 'object') {
             result = exported;
         } else {
             // arktypeToJsonSchemaForExport returned a non-object (shouldn't happen for object schemas).
@@ -1115,15 +1449,15 @@ function resolveInputSchema(context) {
     return result;
 }
 
-function _array_like_to_array$6(arr, len) {
+function _array_like_to_array$7(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
     return arr2;
 }
-function _array_without_holes$5(arr) {
-    if (Array.isArray(arr)) return _array_like_to_array$6(arr);
+function _array_without_holes$6(arr) {
+    if (Array.isArray(arr)) return _array_like_to_array$7(arr);
 }
-function asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -1137,39 +1471,39 @@ function asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$4(fn) {
+function _async_to_generator$5(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _iterable_to_array$5(iter) {
+function _iterable_to_array$6(iter) {
     if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter);
 }
-function _non_iterable_spread$5() {
+function _non_iterable_spread$6() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _to_consumable_array$5(arr) {
-    return _array_without_holes$5(arr) || _iterable_to_array$5(arr) || _unsupported_iterable_to_array$6(arr) || _non_iterable_spread$5();
+function _to_consumable_array$6(arr) {
+    return _array_without_holes$6(arr) || _iterable_to_array$6(arr) || _unsupported_iterable_to_array$7(arr) || _non_iterable_spread$6();
 }
-function _unsupported_iterable_to_array$6(o, minLen) {
+function _unsupported_iterable_to_array$7(o, minLen) {
     if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$6(o, minLen);
+    if (typeof o === "string") return _array_like_to_array$7(o, minLen);
     var n = Object.prototype.toString.call(o).slice(8, -1);
     if (n === "Object" && o.constructor) n = o.constructor.name;
     if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$6(o, minLen);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$7(o, minLen);
 }
-function _ts_generator$4(thisArg, body) {
+function _ts_generator$5(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -1339,9 +1673,9 @@ function _ts_generator$4(thisArg, body) {
 }
 // MARK: Handler
 function modelGetToolHandler(args, ctx, deps) {
-    return _async_to_generator$4(function() {
+    return _async_to_generator$5(function() {
         var result, input, identity, resolvedKeys, merged, error;
-        return _ts_generator$4(this, function(_state) {
+        return _ts_generator$5(this, function(_state) {
             switch(_state.label){
                 case 0:
                     _state.trys.push([
@@ -1358,7 +1692,7 @@ function modelGetToolHandler(args, ctx, deps) {
                     resolvedKeys = resolveKeys(input.keys, identity);
                     return [
                         4,
-                        readInChunks({
+                        readInChunks$1({
                             modelType: input.modelType,
                             keys: resolvedKeys,
                             auth: ctx.auth,
@@ -1447,10 +1781,10 @@ function resolveKeys(keys, identity) {
     }
     return resolved;
 }
-function readInChunks(input) {
-    return _async_to_generator$4(function() {
+function readInChunks$1(input) {
+    return _async_to_generator$5(function() {
         var modelType, keys, auth, readDocuments, merged, offset, _merged_results, _merged_errors, batch, partial;
-        return _ts_generator$4(this, function(_state) {
+        return _ts_generator$5(this, function(_state) {
             switch(_state.label){
                 case 0:
                     modelType = input.modelType, keys = input.keys, auth = input.auth, readDocuments = input.readDocuments;
@@ -1472,8 +1806,8 @@ function readInChunks(input) {
                     ];
                 case 2:
                     partial = _state.sent();
-                    (_merged_results = merged.results).push.apply(_merged_results, _to_consumable_array$5(partial.results));
-                    (_merged_errors = merged.errors).push.apply(_merged_errors, _to_consumable_array$5(partial.errors));
+                    (_merged_results = merged.results).push.apply(_merged_results, _to_consumable_array$6(partial.results));
+                    (_merged_errors = merged.errors).push.apply(_merged_errors, _to_consumable_array$6(partial.errors));
                     _state.label = 3;
                 case 3:
                     offset += MCP_MODEL_GET_BATCH_SIZE;
@@ -1564,15 +1898,15 @@ var MODEL_GET_OUTPUT_SCHEMA = {
     }
 };
 
-function _array_like_to_array$5(arr, len) {
+function _array_like_to_array$6(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
     return arr2;
 }
-function _array_without_holes$4(arr) {
-    if (Array.isArray(arr)) return _array_like_to_array$5(arr);
+function _array_without_holes$5(arr) {
+    if (Array.isArray(arr)) return _array_like_to_array$6(arr);
 }
-function _define_property$6(obj, key, value) {
+function _define_property$7(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -1585,13 +1919,13 @@ function _define_property$6(obj, key, value) {
     }
     return obj;
 }
-function _iterable_to_array$4(iter) {
+function _iterable_to_array$5(iter) {
     if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter);
 }
-function _non_iterable_spread$4() {
+function _non_iterable_spread$5() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread$2(target) {
+function _object_spread$4(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -1601,12 +1935,12 @@ function _object_spread$2(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$6(target, key, source[key]);
+            _define_property$7(target, key, source[key]);
         });
     }
     return target;
 }
-function ownKeys(object, enumerableOnly) {
+function ownKeys$1(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -1614,27 +1948,27 @@ function ownKeys(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props(target, source) {
+function _object_spread_props$1(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys(Object(source)).forEach(function(key) {
+        ownKeys$1(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
     return target;
 }
-function _to_consumable_array$4(arr) {
-    return _array_without_holes$4(arr) || _iterable_to_array$4(arr) || _unsupported_iterable_to_array$5(arr) || _non_iterable_spread$4();
+function _to_consumable_array$5(arr) {
+    return _array_without_holes$5(arr) || _iterable_to_array$5(arr) || _unsupported_iterable_to_array$6(arr) || _non_iterable_spread$5();
 }
-function _unsupported_iterable_to_array$5(o, minLen) {
+function _unsupported_iterable_to_array$6(o, minLen) {
     if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$5(o, minLen);
+    if (typeof o === "string") return _array_like_to_array$6(o, minLen);
     var n = Object.prototype.toString.call(o).slice(8, -1);
     if (n === "Object" && o.constructor) n = o.constructor.name;
     if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$5(o, minLen);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$6(o, minLen);
 }
 // MARK: Constants
 /**
@@ -1713,7 +2047,8 @@ function modelInfoToolHandler(args, _ctx, deps) {
     var result;
     try {
         var input = parseModelInfoInput(args);
-        var output = resolveModelInfoOutput(input, deps.manifest);
+        var resolved = resolveModelInfoOutput(input, deps.manifest);
+        var output = attachReferencedEnums(resolved, deps.enums);
         result = {
             content: [
                 {
@@ -1750,13 +2085,120 @@ function resolveModelInfoOutput(input, manifest) {
     }
     return output;
 }
-// MARK: Input parsing
-function parseModelInfoInput(args) {
-    var modelQueries = parseModelArg(args['model']);
-    var modelGroup = parseModelGroupArg(args['modelGroup']);
-    var all = parseBooleanArg(args['all'], 'all');
+// MARK: Enum attachment
+/**
+ * Attaches the value→label tables for every enum referenced (by `enumRef`) on the returned models'
+ * fields — recursively through `nestedFields` — as a top-level `enums` section.
+ *
+ * Gated behind full field detail: only `single` / `multiple` rows and `list` rows that opted into
+ * `fields:true` carry the persisted `fields` array, so the compact default modes are untouched.
+ * Returns the input unchanged when no enum map is wired or no referenced enum resolves.
+ *
+ * @param output - The resolved model-info output.
+ * @param enums - The optional enum value tables keyed by name.
+ * @returns The output, with an `enums` section attached when detailed rows reference known enums.
+ */ function attachReferencedEnums(output, enums) {
+    var result = output;
+    if (enums != null) {
+        var referenced = new Set();
+        var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+        try {
+            for(var _iterator = collectDetailedEntries(output)[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+                var entry = _step.value;
+                collectFieldEnumRefs(entry.fields, referenced);
+            }
+        } catch (err) {
+            _didIteratorError = true;
+            _iteratorError = err;
+        } finally{
+            try {
+                if (!_iteratorNormalCompletion && _iterator.return != null) {
+                    _iterator.return();
+                }
+            } finally{
+                if (_didIteratorError) {
+                    throw _iteratorError;
+                }
+            }
+        }
+        var tables = [];
+        var _iteratorNormalCompletion1 = true, _didIteratorError1 = false, _iteratorError1 = undefined;
+        try {
+            for(var _iterator1 = referenced[Symbol.iterator](), _step1; !(_iteratorNormalCompletion1 = (_step1 = _iterator1.next()).done); _iteratorNormalCompletion1 = true){
+                var name = _step1.value;
+                var table = enums[name];
+                if (table != null) tables.push(table);
+            }
+        } catch (err) {
+            _didIteratorError1 = true;
+            _iteratorError1 = err;
+        } finally{
+            try {
+                if (!_iteratorNormalCompletion1 && _iterator1.return != null) {
+                    _iterator1.return();
+                }
+            } finally{
+                if (_didIteratorError1) {
+                    throw _iteratorError1;
+                }
+            }
+        }
+        if (tables.length > 0) {
+            result = _object_spread_props$1(_object_spread$4({}, output), {
+                enums: tables
+            });
+        }
+    }
+    return result;
+}
+/**
+ * Collects the full {@link McpManifestModelEntry} rows (those carrying a persisted `fields` array)
+ * from a model-info output. Summary rows (which expose `fieldCount`, not `fields`) are skipped.
+ *
+ * @param output - The resolved model-info output.
+ * @returns The detailed model entries present in the output.
+ */ function collectDetailedEntries(output) {
+    var rows = [];
+    if (output.mode === 'single') {
+        rows.push(output.model);
+    } else if (output.mode === 'list' || output.mode === 'multiple') {
+        var _rows;
+        (_rows = rows).push.apply(_rows, _to_consumable_array$5(output.models));
+    }
+    return rows.filter(function(row) {
+        return Array.isArray(row.fields);
+    });
+}
+function collectFieldEnumRefs(fields, into) {
+    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+    try {
+        for(var _iterator = fields[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+            var field = _step.value;
+            if (field.enumRef) into.add(field.enumRef);
+            if (field.nestedFields) collectFieldEnumRefs(field.nestedFields, into);
+        }
+    } catch (err) {
+        _didIteratorError = true;
+        _iteratorError = err;
+    } finally{
+        try {
+            if (!_iteratorNormalCompletion && _iterator.return != null) {
+                _iterator.return();
+            }
+        } finally{
+            if (_didIteratorError) {
+                throw _iteratorError;
+            }
+        }
+    }
+}
+// MARK: Input parsing
+function parseModelInfoInput(args) {
+    var modelQueries = parseModelArg(args['model']);
+    var modelGroup = parseModelGroupArg(args['modelGroup']);
+    var all = parseBooleanArg(args['all'], 'all');
     var fields = parseBooleanArg(args['fields'], 'fields');
-    return _object_spread$2(_object_spread_props(_object_spread$2(_object_spread_props(_object_spread$2({}, modelQueries == null ? {} : {
+    return _object_spread$4(_object_spread_props$1(_object_spread$4(_object_spread_props$1(_object_spread$4({}, modelQueries == null ? {} : {
         modelQueries: modelQueries
     }), {
         modelIsArray: Array.isArray(args['model'])
@@ -1774,14 +2216,14 @@ function parseModelArg(raw) {
         result = undefined;
     } else if (typeof raw === 'string') {
         result = [
-            requireNonEmptyString(raw, 'model')
+            requireNonEmptyString$1(raw, 'model')
         ];
     } else if (Array.isArray(raw)) {
         if (raw.length === 0) {
             throw new Error('model-info: "model" array must contain at least one entry.');
         }
         result = raw.map(function(value, index) {
-            return requireNonEmptyString(value, "model[".concat(index, "]"));
+            return requireNonEmptyString$1(value, "model[".concat(index, "]"));
         });
     } else {
         throw new TypeError('model-info: "model" must be a string or an array of strings when provided.');
@@ -1793,7 +2235,7 @@ function parseModelGroupArg(raw) {
     if (raw == null) {
         result = undefined;
     } else if (typeof raw === 'string') {
-        result = requireNonEmptyString(raw, 'modelGroup');
+        result = requireNonEmptyString$1(raw, 'modelGroup');
     } else {
         throw new TypeError('model-info: "modelGroup" must be a string when provided.');
     }
@@ -1810,7 +2252,7 @@ function parseBooleanArg(raw, label) {
     }
     return result;
 }
-function requireNonEmptyString(value, label) {
+function requireNonEmptyString$1(value, label) {
     if (typeof value !== 'string') {
         throw new TypeError('model-info: "'.concat(label, '" must be a string.'));
     }
@@ -1919,7 +2361,7 @@ function toModelRow(entry, detailed) {
     return detailed ? entry : toSummaryRow(entry);
 }
 function toSummaryRow(entry) {
-    return _object_spread$2({
+    return _object_spread$4({
         modelType: entry.modelType,
         modelName: entry.modelName,
         identityConst: entry.identityConst,
@@ -1947,7 +2389,7 @@ function toSummaryRow(entry) {
  *
  * @__NO_SIDE_EFFECTS__
  */ function computeGroupCounts(manifest) {
-    var grouped = util.makeValuesGroupMap(_to_consumable_array$4(manifest), function(entry) {
+    var grouped = util.makeValuesGroupMap(_to_consumable_array$5(manifest), function(entry) {
         var _entry_modelGroup;
         return (_entry_modelGroup = entry.modelGroup) !== null && _entry_modelGroup !== void 0 ? _entry_modelGroup : MODEL_INFO_UNGROUPED_LABEL;
     });
@@ -2157,6 +2599,48 @@ var MODEL_ROW_SCHEMA = {
         }
     }
 };
+/**
+ * JSON-schema for one enum value→label table. Shared with the `enum-info` tool so both advertise the
+ * identical enum shape.
+ */ var ENUM_TABLE_SCHEMA = {
+    type: 'object',
+    required: [
+        'name',
+        'values'
+    ],
+    properties: {
+        name: {
+            type: 'string'
+        },
+        description: {
+            type: 'string'
+        },
+        values: {
+            type: 'array',
+            items: {
+                type: 'object',
+                required: [
+                    'name',
+                    'value'
+                ],
+                properties: {
+                    name: {
+                        type: 'string'
+                    },
+                    value: {
+                        type: [
+                            'string',
+                            'number'
+                        ]
+                    },
+                    description: {
+                        type: 'string'
+                    }
+                }
+            }
+        }
+    }
+};
 // MCP's `tools/list` validator requires `outputSchema.type === 'object'` at the root
 // (see @modelcontextprotocol/sdk Zod schema), so the variants are expressed via a top-level
 // object whose nested `oneOf` discriminates by the `mode` literal.
@@ -2212,7 +2696,7 @@ var MODEL_INFO_OUTPUT_SCHEMA = {
             type: 'string',
             description: 'Present when `mode` is `"list"` from a `modelGroup` filter. The canonical group name.'
         },
-        model: _object_spread_props(_object_spread$2({}, MODEL_ROW_SCHEMA), {
+        model: _object_spread_props$1(_object_spread$4({}, MODEL_ROW_SCHEMA), {
             description: 'Present when `mode` is `"single"`. The matched model entry (full detail unless `fields:false`).'
         }),
         notFound: {
@@ -2233,6 +2717,11 @@ var MODEL_INFO_OUTPUT_SCHEMA = {
                     }
                 }
             }
+        },
+        enums: {
+            type: 'array',
+            description: 'Value→label tables for the enums referenced by the returned models’ fields. Present only when full field detail is returned (single/multiple modes, or list/all with `fields:true`) and at least one referenced enum is registered.',
+            items: ENUM_TABLE_SCHEMA
         }
     },
     oneOf: [
@@ -2280,7 +2769,7 @@ var MODEL_INFO_OUTPUT_SCHEMA = {
     ]
 };
 
-function _define_property$5(obj, key, value) {
+function _define_property$6(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -2293,7 +2782,7 @@ function _define_property$5(obj, key, value) {
     }
     return obj;
 }
-function _object_spread$1(target) {
+function _object_spread$3(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -2303,7 +2792,7 @@ function _object_spread$1(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$5(target, key, source[key]);
+            _define_property$6(target, key, source[key]);
         });
     }
     return target;
@@ -2441,7 +2930,7 @@ function parseModelDecodeInput(args) {
     };
 }
 function toSegment(prefix, id, entry) {
-    var segment = entry ? _object_spread$1({
+    var segment = entry ? _object_spread$3({
         prefix: prefix,
         id: id,
         modelType: entry.modelType,
@@ -2539,18 +3028,219 @@ var MODEL_DECODE_OUTPUT_SCHEMA = {
     }
 };
 
-function _array_like_to_array$4(arr, len) {
+// MARK: Constants
+/**
+ * Reserved tool name for the built-in `enum-info` static tool.
+ */ var ENUM_INFO_TOOL_NAME = 'enum-info';
+/**
+ * Synthetic call type used in the tool's dispatch identity. Mirrors the `info` call shared with
+ * `model-info`.
+ */ var ENUM_INFO_DISPATCH_CALL = 'info';
+/**
+ * Synthetic model type used in the tool's dispatch identity. Apps avoiding collisions should not
+ * register a real model literally named "enum".
+ */ var ENUM_INFO_DISPATCH_MODEL_TYPE = 'enum';
+// MARK: Factory
+/**
+ * Builds the built-in `enum-info` MCP tool definition — the symmetric counterpart to `model-info`
+ * for raw enum decoding.
+ *
+ * Resolves each requested enum name against the manifest's `enums` block and returns the matching
+ * value→label tables; misses land in `notFound`. A bare string is treated as a one-element array.
+ *
+ * Output is delivered as both stringified JSON in `content[0].text` and `structuredContent` so MCP
+ * clients can consume either form.
+ *
+ * @param deps - The frozen enum value tables loaded at boot from the MCP manifest JSON.
+ * @returns A statically-registered {@link McpToolDefinition} ready to be appended to the MCP server
+ *   factory's tool registry.
+ */ function createEnumInfoTool(deps) {
+    var handler = function handler(args, ctx) {
+        return Promise.resolve(enumInfoToolHandler(args, ctx, deps));
+    };
+    var name = ENUM_INFO_TOOL_NAME;
+    var count = Object.keys(deps.enums).length;
+    var description = "Look up enum value→label tables by name (".concat(count, " enum").concat(count === 1 ? '' : 's', ' registered). Pass `enum` (a string or array of enum declaration names, e.g. "JobWorkerTimesheetState") to decode the raw persisted integer/string values a model field stores. Misses are reported in `notFound`.');
+    return {
+        name: name,
+        description: description,
+        inputSchema: ENUM_INFO_INPUT_SCHEMA,
+        outputSchema: ENUM_INFO_OUTPUT_SCHEMA,
+        dispatch: {
+            call: ENUM_INFO_DISPATCH_CALL,
+            modelType: ENUM_INFO_DISPATCH_MODEL_TYPE
+        },
+        staticHandler: handler,
+        filterMetadata: {
+            visibilityKind: 'declarative',
+            rule: {
+                requireAuthenticated: true
+            },
+            effectiveReadOnly: true
+        },
+        staticWireEntry: buildStaticWireEntry({
+            name: name,
+            description: description,
+            inputSchema: ENUM_INFO_INPUT_SCHEMA,
+            outputSchema: ENUM_INFO_OUTPUT_SCHEMA
+        })
+    };
+}
+// MARK: Handler
+function enumInfoToolHandler(args, _ctx, deps) {
+    var result;
+    try {
+        var names = parseEnumInfoInput(args);
+        var output = resolveEnumInfoOutput(names, deps.enums);
+        result = {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify(output)
+                }
+            ],
+            structuredContent: output
+        };
+    } catch (error) {
+        result = formatMcpToolErrorResponse(error);
+    }
+    return result;
+}
+/**
+ * Resolves each requested enum name against the registered value tables.
+ *
+ * @param names - The requested enum declaration names.
+ * @param enums - The registered enum value tables keyed by name.
+ * @returns The matched tables, with any unmatched names in `notFound`.
+ *
+ * @__NO_SIDE_EFFECTS__
+ */ function resolveEnumInfoOutput(names, enums) {
+    var found = [];
+    var notFound = [];
+    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+    try {
+        for(var _iterator = names[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+            var name = _step.value;
+            var table = enums[name];
+            if (table == null) {
+                notFound.push(name);
+            } else {
+                found.push(table);
+            }
+        }
+    } catch (err) {
+        _didIteratorError = true;
+        _iteratorError = err;
+    } finally{
+        try {
+            if (!_iteratorNormalCompletion && _iterator.return != null) {
+                _iterator.return();
+            }
+        } finally{
+            if (_didIteratorError) {
+                throw _iteratorError;
+            }
+        }
+    }
+    return notFound.length > 0 ? {
+        enums: found,
+        notFound: notFound
+    } : {
+        enums: found
+    };
+}
+// MARK: Input parsing
+function parseEnumInfoInput(args) {
+    var raw = args['enum'];
+    var result;
+    if (raw == null) {
+        throw new Error('enum-info: "enum" is required and must be a string or an array of strings.');
+    } else if (typeof raw === 'string') {
+        result = [
+            requireNonEmptyString(raw, 'enum')
+        ];
+    } else if (Array.isArray(raw)) {
+        if (raw.length === 0) {
+            throw new Error('enum-info: "enum" array must contain at least one entry.');
+        }
+        result = raw.map(function(value, index) {
+            return requireNonEmptyString(value, "enum[".concat(index, "]"));
+        });
+    } else {
+        throw new TypeError('enum-info: "enum" must be a string or an array of strings.');
+    }
+    return result;
+}
+function requireNonEmptyString(value, label) {
+    if (typeof value !== 'string') {
+        throw new TypeError('enum-info: "'.concat(label, '" must be a string.'));
+    }
+    var trimmed = value.trim();
+    if (trimmed.length === 0) {
+        throw new Error('enum-info: "'.concat(label, '" must be a non-empty string.'));
+    }
+    return trimmed;
+}
+// MARK: Schemas
+var ENUM_INFO_INPUT_SCHEMA = {
+    type: 'object',
+    required: [
+        'enum'
+    ],
+    properties: {
+        enum: {
+            description: 'One enum name (string) or many (string array), each matched exactly by declaration name (e.g. "JobWorkerTimesheetState"). Misses are reported in `notFound`.',
+            oneOf: [
+                {
+                    type: 'string',
+                    minLength: 1
+                },
+                {
+                    type: 'array',
+                    minItems: 1,
+                    items: {
+                        type: 'string',
+                        minLength: 1
+                    }
+                }
+            ]
+        }
+    },
+    additionalProperties: false
+};
+var ENUM_INFO_OUTPUT_SCHEMA = {
+    type: 'object',
+    required: [
+        'enums'
+    ],
+    properties: {
+        enums: {
+            type: 'array',
+            description: 'The resolved enum value→label tables, in request order.',
+            items: ENUM_TABLE_SCHEMA
+        },
+        notFound: {
+            type: 'array',
+            description: 'Requested enum names that matched no registered enum.',
+            items: {
+                type: 'string'
+            }
+        }
+    }
+};
+
+function _array_like_to_array$5(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
     return arr2;
 }
-function _array_with_holes$2(arr) {
+function _array_with_holes$3(arr) {
     if (Array.isArray(arr)) return arr;
 }
-function _array_without_holes$3(arr) {
-    if (Array.isArray(arr)) return _array_like_to_array$4(arr);
+function _array_without_holes$4(arr) {
+    if (Array.isArray(arr)) return _array_like_to_array$5(arr);
 }
-function _define_property$4(obj, key, value) {
+function _define_property$5(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -2563,10 +3253,10 @@ function _define_property$4(obj, key, value) {
     }
     return obj;
 }
-function _iterable_to_array$3(iter) {
+function _iterable_to_array$4(iter) {
     if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter);
 }
-function _iterable_to_array_limit$2(arr, i) {
+function _iterable_to_array_limit$3(arr, i) {
     var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
     if (_i == null) return;
     var _arr = [];
@@ -2590,13 +3280,13 @@ function _iterable_to_array_limit$2(arr, i) {
     }
     return _arr;
 }
-function _non_iterable_rest$2() {
+function _non_iterable_rest$3() {
     throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _non_iterable_spread$3() {
+function _non_iterable_spread$4() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread(target) {
+function _object_spread$2(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -2606,24 +3296,24 @@ function _object_spread(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$4(target, key, source[key]);
+            _define_property$5(target, key, source[key]);
         });
     }
     return target;
 }
-function _sliced_to_array$2(arr, i) {
-    return _array_with_holes$2(arr) || _iterable_to_array_limit$2(arr, i) || _unsupported_iterable_to_array$4(arr, i) || _non_iterable_rest$2();
+function _sliced_to_array$3(arr, i) {
+    return _array_with_holes$3(arr) || _iterable_to_array_limit$3(arr, i) || _unsupported_iterable_to_array$5(arr, i) || _non_iterable_rest$3();
 }
-function _to_consumable_array$3(arr) {
-    return _array_without_holes$3(arr) || _iterable_to_array$3(arr) || _unsupported_iterable_to_array$4(arr) || _non_iterable_spread$3();
+function _to_consumable_array$4(arr) {
+    return _array_without_holes$4(arr) || _iterable_to_array$4(arr) || _unsupported_iterable_to_array$5(arr) || _non_iterable_spread$4();
 }
-function _unsupported_iterable_to_array$4(o, minLen) {
+function _unsupported_iterable_to_array$5(o, minLen) {
     if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$4(o, minLen);
+    if (typeof o === "string") return _array_like_to_array$5(o, minLen);
     var n = Object.prototype.toString.call(o).slice(8, -1);
     if (n === "Object" && o.constructor) n = o.constructor.name;
     if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$4(o, minLen);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$5(o, minLen);
 }
 // MARK: Constants
 /**
@@ -2697,14 +3387,14 @@ function whoamiToolHandler(ctx, deps) {
     }
     var token = (_auth_token = auth.token) !== null && _auth_token !== void 0 ? _auth_token : {};
     var presentKeys = Object.entries(token).filter(function(param) {
-        var _param = _sliced_to_array$2(param, 2), value = _param[1];
+        var _param = _sliced_to_array$3(param, 2), value = _param[1];
         return value !== undefined;
     }).map(function(param) {
-        var _param = _sliced_to_array$2(param, 1), key = _param[0];
+        var _param = _sliced_to_array$3(param, 1), key = _param[0];
         return key;
     });
     var roleSet = deps.roleReader == null ? new Set() : deps.roleReader(token);
-    var roles = _to_consumable_array$3(roleSet).sort(function(a, b) {
+    var roles = _to_consumable_array$4(roleSet).sort(function(a, b) {
         return a.localeCompare(b);
     });
     var claimsByKey = new Map();
@@ -2741,7 +3431,7 @@ function whoamiToolHandler(ctx, deps) {
             if (claim1 == null) {
                 unknownClaimKeys.push(key);
             } else {
-                claimDetails.push(_object_spread({
+                claimDetails.push(_object_spread$2({
                     key: claim1.key,
                     description: claim1.description,
                     grantedRoles: claim1.mapping.roles,
@@ -2766,10 +3456,10 @@ function whoamiToolHandler(ctx, deps) {
             }
         }
     }
-    var output1 = _object_spread({
+    var output1 = _object_spread$2({
         authenticated: true,
         uid: auth.uid,
-        claims: _object_spread({}, token),
+        claims: _object_spread$2({}, token),
         roles: roles,
         claimDetails: claimDetails,
         unknownClaimKeys: unknownClaimKeys
@@ -2854,121 +3544,1020 @@ function appendClaimDetailLines(lines, claimDetails) {
             if (_didIteratorError) {
                 throw _iteratorError;
             }
-        }
-    }
+        }
+    }
+}
+function appendUnknownClaimLines(lines, unknownClaimKeys) {
+    if (unknownClaimKeys.length === 0) {
+        return;
+    }
+    lines.push('', '## Unknown claim keys');
+    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+    try {
+        for(var _iterator = unknownClaimKeys[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+            var key = _step.value;
+            lines.push("- `".concat(key, "`"));
+        }
+    } catch (err) {
+        _didIteratorError = true;
+        _iteratorError = err;
+    } finally{
+        try {
+            if (!_iteratorNormalCompletion && _iterator.return != null) {
+                _iterator.return();
+            }
+        } finally{
+            if (_didIteratorError) {
+                throw _iteratorError;
+            }
+        }
+    }
+}
+// MARK: Schemas
+var WHOAMI_INPUT_SCHEMA = {
+    type: 'object',
+    properties: {},
+    additionalProperties: false
+};
+var WHOAMI_OUTPUT_SCHEMA = {
+    type: 'object',
+    required: [
+        'authenticated',
+        'claims',
+        'roles',
+        'claimDetails',
+        'unknownClaimKeys'
+    ],
+    description: 'Caller identity, raw token claims, decoded role set, and per-claim descriptions for every key present on the live token.',
+    properties: {
+        authenticated: {
+            type: 'boolean'
+        },
+        uid: {
+            type: 'string'
+        },
+        email: {
+            type: 'string'
+        },
+        emailVerified: {
+            type: 'boolean'
+        },
+        app: {
+            type: 'string'
+        },
+        claims: {
+            type: 'object',
+            additionalProperties: true
+        },
+        roles: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
+        },
+        claimDetails: {
+            type: 'array',
+            items: {
+                type: 'object',
+                required: [
+                    'key',
+                    'description',
+                    'grantedRoles',
+                    'inverse',
+                    'tags'
+                ],
+                properties: {
+                    key: {
+                        type: 'string'
+                    },
+                    interfaceName: {
+                        type: 'string'
+                    },
+                    description: {
+                        type: 'string'
+                    },
+                    grantedRoles: {
+                        type: 'array',
+                        items: {
+                            type: 'string'
+                        }
+                    },
+                    inverse: {
+                        type: 'boolean'
+                    },
+                    tags: {
+                        type: 'array',
+                        items: {
+                            type: 'string'
+                        }
+                    }
+                }
+            }
+        },
+        unknownClaimKeys: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
+        }
+    }
+};
+
+function _array_like_to_array$4(arr, len) {
+    if (len == null || len > arr.length) len = arr.length;
+    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
+    return arr2;
+}
+function _array_with_holes$2(arr) {
+    if (Array.isArray(arr)) return arr;
+}
+function _array_without_holes$3(arr) {
+    if (Array.isArray(arr)) return _array_like_to_array$4(arr);
+}
+function asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$4(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _define_property$4(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _iterable_to_array$3(iter) {
+    if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter);
+}
+function _iterable_to_array_limit$2(arr, i) {
+    var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
+    if (_i == null) return;
+    var _arr = [];
+    var _n = true;
+    var _d = false;
+    var _s, _e;
+    try {
+        for(_i = _i.call(arr); !(_n = (_s = _i.next()).done); _n = true){
+            _arr.push(_s.value);
+            if (i && _arr.length === i) break;
+        }
+    } catch (err) {
+        _d = true;
+        _e = err;
+    } finally{
+        try {
+            if (!_n && _i["return"] != null) _i["return"]();
+        } finally{
+            if (_d) throw _e;
+        }
+    }
+    return _arr;
+}
+function _non_iterable_rest$2() {
+    throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
+}
+function _non_iterable_spread$3() {
+    throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
+}
+function _object_spread$1(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$4(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function ownKeys(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
+    }
+    return target;
+}
+function _sliced_to_array$2(arr, i) {
+    return _array_with_holes$2(arr) || _iterable_to_array_limit$2(arr, i) || _unsupported_iterable_to_array$4(arr, i) || _non_iterable_rest$2();
+}
+function _to_consumable_array$3(arr) {
+    return _array_without_holes$3(arr) || _iterable_to_array$3(arr) || _unsupported_iterable_to_array$4(arr) || _non_iterable_spread$3();
+}
+function _unsupported_iterable_to_array$4(o, minLen) {
+    if (!o) return;
+    if (typeof o === "string") return _array_like_to_array$4(o, minLen);
+    var n = Object.prototype.toString.call(o).slice(8, -1);
+    if (n === "Object" && o.constructor) n = o.constructor.name;
+    if (n === "Map" || n === "Set") return Array.from(n);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$4(o, minLen);
+}
+function _ts_generator$4(thisArg, body) {
+    var f, y, t, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    }, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype), d = Object.defineProperty;
+    return d(g, "next", {
+        value: verb(0)
+    }), d(g, "throw", {
+        value: verb(1)
+    }), d(g, "return", {
+        value: verb(2)
+    }), typeof Symbol === "function" && d(g, Symbol.iterator, {
+        value: function() {
+            return this;
+        }
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(g && (g = 0, op[0] && (_ = 0)), _)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+// MARK: Constants
+/**
+ * Reserved tool name for the built-in `url-models` static tool.
+ */ var URL_MODELS_TOOL_NAME = 'url-models';
+/**
+ * Synthetic call type used in the tool's dispatch identity.
+ */ var URL_MODELS_DISPATCH_CALL = 'url-models';
+/**
+ * Synthetic model type used in the tool's dispatch identity. The tool isn't
+ * bound to a real model (the `url` is its input), so we use the literal "route".
+ */ var URL_MODELS_DISPATCH_MODEL_TYPE = 'route';
+/**
+ * Placeholder segment standing for the caller's authenticated uid.
+ */ var AUTH_UID_PLACEHOLDER = '{authUid}';
+// MARK: Factory
+/**
+ * Builds the built-in `url-models` MCP tool definition.
+ *
+ * Matches a pasted app URL against the build-time route manifest and returns the
+ * Firestore models the page renders — model types plus concrete keys with the
+ * route params and `{authUid}` substituted. Optionally filtered to specific
+ * `models`, reduced to keys-only, or loaded via the same permission-checked read
+ * path as `model-get`.
+ *
+ * A URL that matches no state returns a structured `{ matched: null, candidates }`
+ * (not an error) so the caller can suggest near-misses.
+ *
+ * @param deps - The route manifest plus the shared read-documents / identity callbacks.
+ * @returns A statically-registered {@link McpToolDefinition}.
+ */ function createUrlModelsTool(deps) {
+    var handler = function handler(args, ctx) {
+        return urlModelsToolHandler(args, ctx, deps);
+    };
+    var name = URL_MODELS_TOOL_NAME;
+    var description = 'Decode an app URL (or path) into the Firestore models its page renders. Pass a URL like `https://app.example.co/worker/abc/timesheets/list`; the tool matches it against the build-time route manifest and returns each model type plus the concrete key (route params + `{authUid}` substituted). Use `models` to filter to specific types, `keysOnly` for just the resolved keys, or `load: true` to fetch the documents via the same permission-checked path as `model-get` (cannot combine `load` with `keysOnly`).';
+    return {
+        name: name,
+        description: description,
+        inputSchema: URL_MODELS_INPUT_SCHEMA,
+        outputSchema: URL_MODELS_OUTPUT_SCHEMA,
+        dispatch: {
+            call: URL_MODELS_DISPATCH_CALL,
+            modelType: URL_MODELS_DISPATCH_MODEL_TYPE
+        },
+        staticHandler: handler,
+        filterMetadata: {
+            visibilityKind: 'declarative',
+            rule: {
+                requireAuthenticated: true
+            },
+            effectiveReadOnly: true
+        },
+        staticWireEntry: buildStaticWireEntry({
+            name: name,
+            description: description,
+            inputSchema: URL_MODELS_INPUT_SCHEMA,
+            outputSchema: URL_MODELS_OUTPUT_SCHEMA
+        })
+    };
+}
+// MARK: Handler
+function urlModelsToolHandler(args, ctx, deps) {
+    return _async_to_generator$4(function() {
+        var result, input, payload, error;
+        return _ts_generator$4(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    _state.trys.push([
+                        0,
+                        2,
+                        ,
+                        3
+                    ]);
+                    input = parseUrlModelsInput(args);
+                    return [
+                        4,
+                        resolveUrlModels(input, ctx, deps)
+                    ];
+                case 1:
+                    payload = _state.sent();
+                    result = {
+                        content: [
+                            {
+                                type: 'text',
+                                text: JSON.stringify(payload)
+                            }
+                        ],
+                        structuredContent: payload
+                    };
+                    return [
+                        3,
+                        3
+                    ];
+                case 2:
+                    error = _state.sent();
+                    result = formatMcpToolErrorResponse(error);
+                    return [
+                        3,
+                        3
+                    ];
+                case 3:
+                    return [
+                        2,
+                        result
+                    ];
+            }
+        });
+    })();
+}
+function parseUrlModelsInput(args) {
+    var url = args.url;
+    if (typeof url !== 'string' || url.length === 0) {
+        throw new Error('url-models: "url" is required and must be a non-empty string.');
+    }
+    var keysOnly = args.keysOnly === true;
+    var load = args.load === true;
+    if (keysOnly && load) {
+        throw new Error('url-models: "keysOnly" and "load" cannot be combined — "keysOnly" returns keys without loading documents.');
+    }
+    var models;
+    if (args.models !== undefined) {
+        if (!Array.isArray(args.models) || args.models.some(function(m) {
+            return typeof m !== 'string';
+        })) {
+            throw new Error('url-models: "models" must be an array of model-type strings.');
+        }
+        models = args.models;
+    }
+    var currentUserUid;
+    if (args.currentUserUid !== undefined) {
+        if (typeof args.currentUserUid !== 'string' || args.currentUserUid.length === 0) {
+            throw new Error('url-models: "currentUserUid" must be a non-empty string.');
+        }
+        currentUserUid = args.currentUserUid;
+    }
+    return _object_spread$1(_object_spread_props(_object_spread$1({
+        url: url
+    }, models === undefined ? {} : {
+        models: models
+    }), {
+        keysOnly: keysOnly,
+        load: load
+    }), currentUserUid === undefined ? {} : {
+        currentUserUid: currentUserUid
+    });
+}
+function resolveUrlModels(input, ctx, deps) {
+    return _async_to_generator$4(function() {
+        var matchResult, payload, _tmp;
+        return _ts_generator$4(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    matchResult = matchRouteManifestUrl({
+                        manifest: deps.routeManifest,
+                        url: input.url
+                    });
+                    if (!(matchResult.kind === 'none')) return [
+                        3,
+                        1
+                    ];
+                    payload = {
+                        url: input.url,
+                        pathname: matchResult.pathname,
+                        matched: null,
+                        candidates: matchResult.candidates.map(stateSummary)
+                    };
+                    return [
+                        3,
+                        4
+                    ];
+                case 1:
+                    if (!(matchResult.kind === 'ambiguous')) return [
+                        3,
+                        2
+                    ];
+                    payload = {
+                        url: input.url,
+                        pathname: matchResult.pathname,
+                        matched: null,
+                        ambiguous: matchResult.states.map(stateSummary)
+                    };
+                    return [
+                        3,
+                        4
+                    ];
+                case 2:
+                    _tmp = {
+                        url: input.url,
+                        pathname: matchResult.pathname
+                    };
+                    return [
+                        4,
+                        buildMatchedPayload({
+                            match: matchResult,
+                            input: input,
+                            ctx: ctx,
+                            deps: deps
+                        })
+                    ];
+                case 3:
+                    payload = (_tmp.matched = _state.sent(), _tmp);
+                    _state.label = 4;
+                case 4:
+                    return [
+                        2,
+                        payload
+                    ];
+            }
+        });
+    })();
+}
+function stateSummary(state) {
+    return {
+        name: state.name,
+        fullUrl: state.fullUrl
+    };
+}
+function buildMatchedPayload(args) {
+    return _async_to_generator$4(function() {
+        var _input_currentUserUid, _ctx_auth, match, input, ctx, deps, uid, filtered, resolved, loaded, _tmp;
+        return _ts_generator$4(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    match = args.match, input = args.input, ctx = args.ctx, deps = args.deps;
+                    // `currentUserUid` (when supplied) overrides the uid used to fill `{authUid}` placeholders so a
+                    // caller can preview another user's page-models. The document-load path still uses `ctx.auth`, so
+                    // this is a key-substitution preview only — no privilege escalation on the actual reads.
+                    uid = (_input_currentUserUid = input.currentUserUid) !== null && _input_currentUserUid !== void 0 ? _input_currentUserUid : (_ctx_auth = ctx.auth) === null || _ctx_auth === void 0 ? void 0 : _ctx_auth.uid;
+                    filtered = input.models === undefined ? match.state.models : match.state.models.filter(function(m) {
+                        var _input_models;
+                        return (_input_models = input.models) === null || _input_models === void 0 ? void 0 : _input_models.includes(m.modelType);
+                    });
+                    resolved = filtered.map(function(entry) {
+                        return resolveModelEntry({
+                            entry: entry,
+                            params: match.params,
+                            uid: uid,
+                            keysOnly: input.keysOnly === true,
+                            deps: deps,
+                            ctx: ctx
+                        });
+                    });
+                    if (!(input.load === true)) return [
+                        3,
+                        2
+                    ];
+                    return [
+                        4,
+                        loadResolvedModels(resolved, ctx, deps)
+                    ];
+                case 1:
+                    _tmp = _state.sent();
+                    return [
+                        3,
+                        3
+                    ];
+                case 2:
+                    _tmp = undefined;
+                    _state.label = 3;
+                case 3:
+                    loaded = _tmp;
+                    return [
+                        2,
+                        _object_spread$1({
+                            state: {
+                                name: match.state.name,
+                                fullUrl: match.state.fullUrl,
+                                component: match.state.component,
+                                componentFile: match.state.componentFile
+                            },
+                            via: match.via,
+                            params: match.params,
+                            models: resolved
+                        }, loaded === undefined ? {} : {
+                            loaded: loaded
+                        })
+                    ];
+            }
+        });
+    })();
+}
+function resolveModelEntry(input) {
+    var entry = input.entry, keysOnly = input.keysOnly;
+    var base = keysOnly ? {
+        modelType: entry.modelType,
+        kind: entry.kind
+    } : _object_spread$1({
+        modelType: entry.modelType,
+        kind: entry.kind
+    }, entry.keyTemplate === undefined ? {} : {
+        keyTemplate: entry.keyTemplate
+    }, entry.description === undefined ? {} : {
+        description: entry.description
+    }, entry.from === undefined ? {} : {
+        from: entry.from
+    });
+    var result;
+    if (entry.kind === 'list') {
+        result = base;
+    } else if (entry.kind === 'id') {
+        result = _object_spread$1({}, base, resolveIdKey(input));
+    } else {
+        result = _object_spread$1({}, base, resolveFullKey(input));
+    }
+    return result;
+}
+function resolveIdKey(input) {
+    var _entry_keyTemplate;
+    var entry = input.entry, params = input.params, uid = input.uid, deps = input.deps, ctx = input.ctx;
+    var value = substitutePlaceholder((_entry_keyTemplate = entry.keyTemplate) !== null && _entry_keyTemplate !== void 0 ? _entry_keyTemplate : '', params, uid);
+    var result;
+    if (value.kind === 'unresolved') {
+        result = {
+            unresolved: value.unresolved
+        };
+    } else {
+        var identity = deps.resolveIdentity(entry.modelType, ctx.auth);
+        if (identity == null) {
+            result = {
+                unresolved: {
+                    reason: 'unknown-model-type',
+                    message: "Unknown model type `".concat(entry.modelType, "`.")
+                }
+            };
+        } else if (identity.type === 'root') {
+            result = {
+                key: "".concat(identity.collectionName, "/").concat(value.value)
+            };
+        } else {
+            result = {
+                unresolved: {
+                    reason: 'subcollection-requires-key-template',
+                    message: "Model `".concat(entry.modelType, "` is a subcollection; an `id` key template cannot be promoted to a full key. Annotate it with a full `gb/:id/...` key template.")
+                }
+            };
+        }
+    }
+    return result;
+}
+function resolveFullKey(input) {
+    var _entry_keyTemplate;
+    var entry = input.entry, params = input.params, uid = input.uid;
+    var segments = ((_entry_keyTemplate = entry.keyTemplate) !== null && _entry_keyTemplate !== void 0 ? _entry_keyTemplate : '').split('/');
+    var parts = [];
+    var unresolved;
+    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+    try {
+        for(var _iterator = segments[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+            var segment = _step.value;
+            if (segment.startsWith(':') || segment === AUTH_UID_PLACEHOLDER) {
+                var value = substitutePlaceholder(segment, params, uid);
+                if (value.kind === 'unresolved') {
+                    unresolved = value.unresolved;
+                    break;
+                }
+                parts.push(value.value);
+            } else {
+                parts.push(segment);
+            }
+        }
+    } catch (err) {
+        _didIteratorError = true;
+        _iteratorError = err;
+    } finally{
+        try {
+            if (!_iteratorNormalCompletion && _iterator.return != null) {
+                _iterator.return();
+            }
+        } finally{
+            if (_didIteratorError) {
+                throw _iteratorError;
+            }
+        }
+    }
+    return unresolved === undefined ? {
+        key: parts.join('/')
+    } : {
+        unresolved: unresolved
+    };
+}
+function substitutePlaceholder(segment, params, uid) {
+    var result;
+    if (segment === AUTH_UID_PLACEHOLDER) {
+        result = uid == null || uid.length === 0 ? {
+            kind: 'unresolved',
+            unresolved: {
+                reason: 'auth-required',
+                message: 'This page keys a model by the caller uid (`{authUid}`) but the request is not authenticated.'
+            }
+        } : {
+            kind: 'value',
+            value: uid
+        };
+    } else if (segment.startsWith(':')) {
+        var paramName = segment.slice(1);
+        var value = params[paramName];
+        result = value === undefined ? {
+            kind: 'unresolved',
+            unresolved: {
+                reason: 'missing-param',
+                message: "Route param `:".concat(paramName, "` was not captured from the URL.")
+            }
+        } : {
+            kind: 'value',
+            value: value
+        };
+    } else {
+        result = {
+            kind: 'value',
+            value: segment
+        };
+    }
+    return result;
+}
+// MARK: Load
+function loadResolvedModels(resolved, ctx, deps) {
+    return _async_to_generator$4(function() {
+        var keysByType, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, model, existing, out, _iteratorNormalCompletion1, _didIteratorError1, _iteratorError1, _iterator1, _step1, _step_value, modelType, keys, merged, err;
+        return _ts_generator$4(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    keysByType = new Map();
+                    _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+                    try {
+                        for(_iterator = resolved[Symbol.iterator](); !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+                            model = _step.value;
+                            if (model.key !== undefined) {
+                                existing = keysByType.get(model.modelType);
+                                if (existing === undefined) {
+                                    keysByType.set(model.modelType, [
+                                        model.key
+                                    ]);
+                                } else {
+                                    existing.push(model.key);
+                                }
+                            }
+                        }
+                    } catch (err) {
+                        _didIteratorError = true;
+                        _iteratorError = err;
+                    } finally{
+                        try {
+                            if (!_iteratorNormalCompletion && _iterator.return != null) {
+                                _iterator.return();
+                            }
+                        } finally{
+                            if (_didIteratorError) {
+                                throw _iteratorError;
+                            }
+                        }
+                    }
+                    out = [];
+                    _iteratorNormalCompletion1 = true, _didIteratorError1 = false, _iteratorError1 = undefined;
+                    _state.label = 1;
+                case 1:
+                    _state.trys.push([
+                        1,
+                        6,
+                        7,
+                        8
+                    ]);
+                    _iterator1 = keysByType[Symbol.iterator]();
+                    _state.label = 2;
+                case 2:
+                    if (!!(_iteratorNormalCompletion1 = (_step1 = _iterator1.next()).done)) return [
+                        3,
+                        5
+                    ];
+                    _step_value = _sliced_to_array$2(_step1.value, 2), modelType = _step_value[0], keys = _step_value[1];
+                    return [
+                        4,
+                        readInChunks({
+                            modelType: modelType,
+                            keys: keys,
+                            auth: ctx.auth,
+                            readDocuments: deps.readDocuments
+                        })
+                    ];
+                case 3:
+                    merged = _state.sent();
+                    out.push({
+                        modelType: modelType,
+                        results: merged.results,
+                        errors: merged.errors
+                    });
+                    _state.label = 4;
+                case 4:
+                    _iteratorNormalCompletion1 = true;
+                    return [
+                        3,
+                        2
+                    ];
+                case 5:
+                    return [
+                        3,
+                        8
+                    ];
+                case 6:
+                    err = _state.sent();
+                    _didIteratorError1 = true;
+                    _iteratorError1 = err;
+                    return [
+                        3,
+                        8
+                    ];
+                case 7:
+                    try {
+                        if (!_iteratorNormalCompletion1 && _iterator1.return != null) {
+                            _iterator1.return();
+                        }
+                    } finally{
+                        if (_didIteratorError1) {
+                            throw _iteratorError1;
+                        }
+                    }
+                    return [
+                        7
+                    ];
+                case 8:
+                    return [
+                        2,
+                        out
+                    ];
+            }
+        });
+    })();
 }
-function appendUnknownClaimLines(lines, unknownClaimKeys) {
-    if (unknownClaimKeys.length === 0) {
-        return;
-    }
-    lines.push('', '## Unknown claim keys');
-    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
-    try {
-        for(var _iterator = unknownClaimKeys[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
-            var key = _step.value;
-            lines.push("- `".concat(key, "`"));
-        }
-    } catch (err) {
-        _didIteratorError = true;
-        _iteratorError = err;
-    } finally{
-        try {
-            if (!_iteratorNormalCompletion && _iterator.return != null) {
-                _iterator.return();
-            }
-        } finally{
-            if (_didIteratorError) {
-                throw _iteratorError;
+function readInChunks(input) {
+    return _async_to_generator$4(function() {
+        var modelType, keys, auth, readDocuments, merged, offset, _merged_results, _merged_errors, batch, partial;
+        return _ts_generator$4(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    modelType = input.modelType, keys = input.keys, auth = input.auth, readDocuments = input.readDocuments;
+                    merged = {
+                        results: [],
+                        errors: []
+                    };
+                    offset = 0;
+                    _state.label = 1;
+                case 1:
+                    if (!(offset < keys.length)) return [
+                        3,
+                        4
+                    ];
+                    batch = keys.slice(offset, offset + MCP_MODEL_GET_BATCH_SIZE);
+                    return [
+                        4,
+                        readDocuments(modelType, batch, auth)
+                    ];
+                case 2:
+                    partial = _state.sent();
+                    (_merged_results = merged.results).push.apply(_merged_results, _to_consumable_array$3(partial.results));
+                    (_merged_errors = merged.errors).push.apply(_merged_errors, _to_consumable_array$3(partial.errors));
+                    _state.label = 3;
+                case 3:
+                    offset += MCP_MODEL_GET_BATCH_SIZE;
+                    return [
+                        3,
+                        1
+                    ];
+                case 4:
+                    return [
+                        2,
+                        merged
+                    ];
             }
-        }
-    }
+        });
+    })();
 }
 // MARK: Schemas
-var WHOAMI_INPUT_SCHEMA = {
-    type: 'object',
-    properties: {},
-    additionalProperties: false
-};
-var WHOAMI_OUTPUT_SCHEMA = {
+var URL_MODELS_INPUT_SCHEMA = {
     type: 'object',
     required: [
-        'authenticated',
-        'claims',
-        'roles',
-        'claimDetails',
-        'unknownClaimKeys'
+        'url'
     ],
-    description: 'Caller identity, raw token claims, decoded role set, and per-claim descriptions for every key present on the live token.',
     properties: {
-        authenticated: {
-            type: 'boolean'
+        url: {
+            type: 'string',
+            minLength: 1,
+            description: 'Full URL or pathname, e.g. "https://app.example.co/worker/abc/timesheets/list".'
         },
-        uid: {
-            type: 'string'
+        models: {
+            type: 'array',
+            items: {
+                type: 'string'
+            },
+            description: 'Restrict the output to these model types.'
         },
-        email: {
-            type: 'string'
+        keysOnly: {
+            type: 'boolean',
+            description: 'Return only the resolved keys (no descriptions or documents). Cannot combine with "load".'
         },
-        emailVerified: {
-            type: 'boolean'
+        load: {
+            type: 'boolean',
+            description: 'Load each resolved document via the permission-checked read path. Cannot combine with "keysOnly".'
         },
-        app: {
+        currentUserUid: {
+            type: 'string',
+            minLength: 1,
+            description: "Override the uid used to fill `{authUid}` placeholders when resolving model keys (defaults to the authenticated caller). Use to preview the models another user would see on a page. `load` still reads via the calling user's permissions."
+        }
+    },
+    additionalProperties: false
+};
+var URL_MODELS_OUTPUT_SCHEMA = {
+    type: 'object',
+    required: [
+        'url',
+        'pathname',
+        'matched'
+    ],
+    properties: {
+        url: {
             type: 'string'
         },
-        claims: {
-            type: 'object',
-            additionalProperties: true
+        pathname: {
+            type: 'string'
         },
-        roles: {
-            type: 'array',
-            items: {
-                type: 'string'
+        matched: {
+            type: [
+                'object',
+                'null'
+            ],
+            description: 'The matched page and its models, or null when no state matched.',
+            properties: {
+                state: {
+                    type: 'object'
+                },
+                via: {
+                    type: 'string'
+                },
+                params: {
+                    type: 'object'
+                },
+                models: {
+                    type: 'array',
+                    items: {
+                        type: 'object'
+                    }
+                },
+                loaded: {
+                    type: 'array',
+                    items: {
+                        type: 'object'
+                    }
+                }
             }
         },
-        claimDetails: {
+        ambiguous: {
             type: 'array',
             items: {
-                type: 'object',
-                required: [
-                    'key',
-                    'description',
-                    'grantedRoles',
-                    'inverse',
-                    'tags'
-                ],
-                properties: {
-                    key: {
-                        type: 'string'
-                    },
-                    interfaceName: {
-                        type: 'string'
-                    },
-                    description: {
-                        type: 'string'
-                    },
-                    grantedRoles: {
-                        type: 'array',
-                        items: {
-                            type: 'string'
-                        }
-                    },
-                    inverse: {
-                        type: 'boolean'
-                    },
-                    tags: {
-                        type: 'array',
-                        items: {
-                            type: 'string'
-                        }
-                    }
-                }
-            }
+                type: 'object'
+            },
+            description: 'Competing states when the URL matched more than one.'
         },
-        unknownClaimKeys: {
+        candidates: {
             type: 'array',
             items: {
-                type: 'string'
-            }
+                type: 'object'
+            },
+            description: 'Closest near-miss states when nothing matched.'
         }
     }
 };
@@ -3048,7 +4637,7 @@ function _non_iterable_rest$1() {
 function _sliced_to_array$1(arr, i) {
     return _array_with_holes$1(arr) || _iterable_to_array_limit$1(arr, i) || _unsupported_iterable_to_array$3(arr, i) || _non_iterable_rest$1();
 }
-function _type_of$1(obj) {
+function _type_of$2(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
@@ -3442,7 +5031,7 @@ function parseJsonArrayOperations(fileText) {
     return parsed;
 }
 function validateOperation(value, index) {
-    if (value == null || (typeof value === "undefined" ? "undefined" : _type_of$1(value)) !== 'object') {
+    if (value == null || (typeof value === "undefined" ? "undefined" : _type_of$2(value)) !== 'object') {
         throw new Error("batch-execute: operation[".concat(index, "] must be an object."));
     }
     var candidate = value;
@@ -3934,12 +5523,31 @@ function _non_iterable_rest() {
 function _non_iterable_spread$2() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
+function _object_spread(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$3(target, key, source[key]);
+        });
+    }
+    return target;
+}
 function _sliced_to_array(arr, i) {
     return _array_with_holes(arr) || _iterable_to_array_limit(arr, i) || _unsupported_iterable_to_array$2(arr, i) || _non_iterable_rest();
 }
 function _to_consumable_array$2(arr) {
     return _array_without_holes$2(arr) || _iterable_to_array$2(arr) || _unsupported_iterable_to_array$2(arr) || _non_iterable_spread$2();
 }
+function _type_of$1(obj) {
+    "@swc/helpers - typeof";
+    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
+}
 function _unsupported_iterable_to_array$2(o, minLen) {
     if (!o) return;
     if (typeof o === "string") return _array_like_to_array$2(o, minLen);
@@ -4068,7 +5676,10 @@ var McpServerFactoryService_1;
         _define_property$3(this, "_cachedStaticTools", void 0);
         _define_property$3(this, "_cachedManifest", void 0);
         _define_property$3(this, "_cachedManifestModels", void 0);
+        _define_property$3(this, "_cachedManifestEnums", void 0);
         _define_property$3(this, "_cachedManifestAuth", void 0);
+        _define_property$3(this, "_cachedRouteManifest", void 0);
+        _define_property$3(this, "_routeManifestLoaded", false);
         _define_property$3(this, "_manifestLoaded", false);
         _define_property$3(this, "_loggedSkips", false);
         _define_property$3(this, "_warnedMissingRoleReader", false);
@@ -4343,15 +5954,39 @@ var McpServerFactoryService_1;
                                 return getService.getModelIdentity(modelType, auth);
                             }
                         }));
+                        // `url-models` reuses the model-get read/identity path, so it is only offered when the get
+                        // service is wired AND a route manifest with at least one state was loaded.
+                        var routeManifest = this._resolveRouteManifest();
+                        if (routeManifest != null && routeManifest.states.length > 0) {
+                            staticTools.push(createUrlModelsTool({
+                                routeManifest: routeManifest,
+                                readDocuments: function readDocuments(modelType, keys, auth) {
+                                    return getService.readDocuments(modelType, keys, auth);
+                                },
+                                resolveIdentity: function resolveIdentity(modelType, auth) {
+                                    return getService.getModelIdentity(modelType, auth);
+                                }
+                            }));
+                        }
                     }
                     var modelManifest = this._cachedManifestModels;
+                    var enumManifest = this._cachedManifestEnums;
                     if (modelManifest != null && modelManifest.length > 0) {
-                        staticTools.push(createModelInfoTool({
+                        staticTools.push(createModelInfoTool(_object_spread({
                             manifest: modelManifest
-                        }), createModelDecodeTool({
+                        }, enumManifest == null ? {} : {
+                            enums: enumManifest
+                        })), createModelDecodeTool({
                             manifest: modelManifest
                         }));
                     }
+                    // `enum-info` only needs the enum value tables — register it whenever the manifest carries a
+                    // non-empty `enums` block, independent of the model catalog.
+                    if (enumManifest != null && Object.keys(enumManifest).length > 0) {
+                        staticTools.push(createEnumInfoTool({
+                            enums: enumManifest
+                        }));
+                    }
                     var authManifest = this._cachedManifestAuth;
                     if (authManifest != null) {
                         staticTools.push(createWhoamiTool({
@@ -4513,9 +6148,55 @@ var McpServerFactoryService_1;
             value: function _resetManifestCache() {
                 this._cachedManifest = undefined;
                 this._cachedManifestModels = undefined;
+                this._cachedManifestEnums = undefined;
                 this._cachedManifestAuth = undefined;
             }
         },
+        {
+            /**
+     * Reads the pre-rendered route manifest JSON once, validates its version, and caches the result
+     * for the process lifetime. Drives whether the built-in `url-models` static tool is registered.
+     *
+     * Missing file or wrong version fall back to "no route manifest" with a single boot warning;
+     * the `url-models` tool is then simply not offered.
+     *
+     * @returns The cached route manifest, or `undefined` when none was loaded.
+     */ key: "_resolveRouteManifest",
+            value: function _resolveRouteManifest() {
+                if (!this._routeManifestLoaded) {
+                    this._routeManifestLoaded = true;
+                    var path = this.mcpConfig.mcpRouteManifestPath;
+                    if (path == null) {
+                        this._cachedRouteManifest = undefined;
+                    } else if (node_fs.existsSync(path)) {
+                        this._parseRouteManifestFile(path);
+                    } else {
+                        this._logger.warn("MCP route manifest path is set but the file is missing: ".concat(path, ". The url-models tool will not be registered."));
+                        this._cachedRouteManifest = undefined;
+                    }
+                }
+                return this._cachedRouteManifest;
+            }
+        },
+        {
+            key: "_parseRouteManifestFile",
+            value: function _parseRouteManifestFile(path) {
+                try {
+                    var raw = node_fs.readFileSync(path, 'utf8');
+                    var parsed = JSON.parse(raw);
+                    if (parsed.version === ROUTE_MANIFEST_VERSION) {
+                        this._cachedRouteManifest = parsed;
+                        this._logger.log("Loaded MCP route manifest from ".concat(path, ": ").concat(parsed.states.length, " states."));
+                    } else {
+                        this._logger.warn("MCP route manifest version mismatch at ".concat(path, ": got ").concat(String(parsed.version), ", expected ").concat(ROUTE_MANIFEST_VERSION, ". The url-models tool will not be registered."));
+                        this._cachedRouteManifest = undefined;
+                    }
+                } catch (error) {
+                    this._logger.warn("Failed to read MCP route manifest at ".concat(path, ": ").concat(error.message, ". The url-models tool will not be registered."));
+                    this._cachedRouteManifest = undefined;
+                }
+            }
+        },
         {
             key: "_parseManifestFile",
             value: function _parseManifestFile(path) {
@@ -4562,11 +6243,14 @@ var McpServerFactoryService_1;
                 }
                 var models = Array.isArray(parsed.models) && parsed.models.length > 0 ? parsed.models : undefined;
                 var modelSuffix = models == null ? '' : ", ".concat(models.length, " model entries");
+                var enums = parsed.enums != null && _type_of$1(parsed.enums) === 'object' && Object.keys(parsed.enums).length > 0 ? parsed.enums : undefined;
+                var enumSuffix = enums == null ? '' : ", ".concat(Object.keys(enums).length, " enum entries");
                 var auth = parsed.auth != null && Array.isArray(parsed.auth.claims) ? parsed.auth : undefined;
                 var authSuffix = auth == null ? '' : ", ".concat(auth.claims.length, " auth claim entries");
-                this._logger.log("Loaded MCP manifest from ".concat(path, ": ").concat(map.size, " tool entries").concat(modelSuffix).concat(authSuffix, "."));
+                this._logger.log("Loaded MCP manifest from ".concat(path, ": ").concat(map.size, " tool entries").concat(modelSuffix).concat(enumSuffix).concat(authSuffix, "."));
                 this._cachedManifest = map;
                 this._cachedManifestModels = models;
+                this._cachedManifestEnums = enums;
                 this._cachedManifestAuth = auth;
             }
         },
@@ -4750,6 +6434,9 @@ var McpServerFactoryService_1;
                     if (tool.outputSchema != null) {
                         wire.outputSchema = tool.outputSchema;
                     }
+                    if (tool.annotations != null) {
+                        wire.annotations = tool.annotations;
+                    }
                     result = wire;
                 }
                 return result;
@@ -5779,6 +7466,10 @@ exports.DEFAULT_MCP_SERVER_INSTRUCTIONS = DEFAULT_MCP_SERVER_INSTRUCTIONS;
 exports.DEFAULT_MCP_SERVER_NAME = DEFAULT_MCP_SERVER_NAME;
 exports.DEFAULT_SPECIFIER_KEY = DEFAULT_SPECIFIER_KEY;
 exports.DEFAULT_VOID_MCP_SUCCESS_VALUE = DEFAULT_VOID_MCP_SUCCESS_VALUE;
+exports.ENUM_INFO_DISPATCH_CALL = ENUM_INFO_DISPATCH_CALL;
+exports.ENUM_INFO_DISPATCH_MODEL_TYPE = ENUM_INFO_DISPATCH_MODEL_TYPE;
+exports.ENUM_INFO_TOOL_NAME = ENUM_INFO_TOOL_NAME;
+exports.ENUM_TABLE_SCHEMA = ENUM_TABLE_SCHEMA;
 exports.FIREBASE_SERVER_MCP_ANALYTICS_CONFIG = FIREBASE_SERVER_MCP_ANALYTICS_CONFIG;
 exports.FIREBASE_SERVER_MCP_ROUTES_FOR_GLOBAL_ROUTE_EXCLUDE = FIREBASE_SERVER_MCP_ROUTES_FOR_GLOBAL_ROUTE_EXCLUDE;
 exports.MAX_BATCH_EXECUTE_FILE_BYTES = MAX_BATCH_EXECUTE_FILE_BYTES;
@@ -5790,6 +7481,7 @@ exports.MCP_MANIFEST_VERSION = MCP_MANIFEST_VERSION;
 exports.MCP_MODEL_GET_BATCH_SIZE = MCP_MODEL_GET_BATCH_SIZE;
 exports.MCP_TOOL_NAME_MAX_LENGTH = MCP_TOOL_NAME_MAX_LENGTH;
 exports.MCP_TOOL_NAME_WARN_LENGTH = MCP_TOOL_NAME_WARN_LENGTH;
+exports.MCP_WRITE_TOOL_DESCRIPTION_PREFIX = MCP_WRITE_TOOL_DESCRIPTION_PREFIX;
 exports.MODEL_DECODE_DISPATCH_CALL = MODEL_DECODE_DISPATCH_CALL;
 exports.MODEL_DECODE_DISPATCH_MODEL_TYPE = MODEL_DECODE_DISPATCH_MODEL_TYPE;
 exports.MODEL_DECODE_TOOL_NAME = MODEL_DECODE_TOOL_NAME;
@@ -5803,8 +7495,13 @@ exports.MODEL_INFO_TOOL_NAME = MODEL_INFO_TOOL_NAME;
 exports.MODEL_INFO_UNGROUPED_LABEL = MODEL_INFO_UNGROUPED_LABEL;
 exports.McpAnalyticsService = McpAnalyticsService;
 exports.McpModuleConfig = McpModuleConfig;
+exports.ROUTE_MANIFEST_VERSION = ROUTE_MANIFEST_VERSION;
+exports.URL_MODELS_DISPATCH_CALL = URL_MODELS_DISPATCH_CALL;
+exports.URL_MODELS_DISPATCH_MODEL_TYPE = URL_MODELS_DISPATCH_MODEL_TYPE;
+exports.URL_MODELS_TOOL_NAME = URL_MODELS_TOOL_NAME;
 exports.abbreviateMcpCallType = abbreviateMcpCallType;
 exports.appMcpAnalyticsModuleMetadata = appMcpAnalyticsModuleMetadata;
+exports.applyWriteMarker = applyWriteMarker;
 exports.batchOperationCoordKey = batchOperationCoordKey;
 exports.buildDefaultMcpToolDescription = buildDefaultMcpToolDescription;
 exports.buildDisambiguatedMcpToolName = buildDisambiguatedMcpToolName;
@@ -5812,18 +7509,24 @@ exports.buildMcpToolName = buildMcpToolName;
 exports.buildStaticWireEntry = buildStaticWireEntry;
 exports.classifyVisibility = classifyVisibility;
 exports.createBatchExecuteTool = createBatchExecuteTool;
+exports.createEnumInfoTool = createEnumInfoTool;
 exports.createModelDecodeTool = createModelDecodeTool;
 exports.createModelGetTool = createModelGetTool;
 exports.createModelInfoTool = createModelInfoTool;
+exports.createUrlModelsTool = createUrlModelsTool;
 exports.decodeFirestoreModelKey = decodeFirestoreModelKey;
 exports.findModelEntry = findModelEntry;
 exports.formatMcpToolErrorResponse = formatMcpToolErrorResponse;
 exports.formatMcpToolResponse = formatMcpToolResponse;
 exports.generateMcpToolDefinitions = generateMcpToolDefinitions;
 exports.handleStreamableHttpMcpRequest = handleStreamableHttpMcpRequest;
+exports.matchRouteManifestUrl = matchRouteManifestUrl;
 exports.mcpManifestKey = mcpManifestKey;
 exports.mcpModuleMetadata = mcpModuleMetadata;
 exports.noopMcpAnalyticsService = noopMcpAnalyticsService;
+exports.parseUrlModelsPathname = parseUrlModelsPathname;
 exports.resolveEffectiveReadOnly = resolveEffectiveReadOnly;
+exports.resolveEnumInfoOutput = resolveEnumInfoOutput;
+exports.resolveMcpToolAnnotations = resolveMcpToolAnnotations;
 exports.resolveRequiredScope = resolveRequiredScope;
 exports.validateMcpToolName = validateMcpToolName;