@dereekb/firebase-server 14.3.0 → 14.5.0

package/mcp/index.esm.js

@@ -1,10 +1,10 @@
 import { Injectable, Inject, Optional, Logger, Post, Req, Res, Get, Delete, Controller, HttpStatus } from '@nestjs/common';
 import { existsSync, readFileSync } from 'node:fs';
 import { McpServer, isLegacyRequest, isJsonContentType, createMcpHandler } from '@modelcontextprotocol/server';
-import { callModelOidcScopeForCallType, resolveEffectiveOidcScopeTerms, inferKeyFromTwoWayFlatFirestoreModelKey, oidcScopeTermsSatisfied } from '@dereekb/firebase';
+import { callModelOidcScopeForCallType, resolveEffectiveOidcScopeTerms, CLI_TOKEN_OIDC_SCOPE, inferKeyFromTwoWayFlatFirestoreModelKey, oidcScopeTermsSatisfied } from '@dereekb/firebase';
 import { getOidcScopesFromRequest, OidcProviderConfigService } from '@dereekb/firebase-server/oidc';
-import { makeValuesGroupMap, IMPERSONATION_URL_QUERY_PARAM, performAsyncTasks, authRolesSetHasRoles } from '@dereekb/util';
-import { ModelApiCallModelDispatchService, ModelApiGetService, FirebaseServerStorageService, FirebaseServerEnvService, FirebaseServerAnalyticsService } from '@dereekb/firebase-server';
+import { makeValuesGroupMap, AUTH_ADMIN_ROLE, IMPERSONATION_URL_QUERY_PARAM, performAsyncTasks, authRolesSetHasRoles } from '@dereekb/util';
+import { requestClientIp, ModelApiCallModelDispatchService, ModelApiGetService, FirebaseServerStorageService, FirebaseServerEnvService, FirebaseServerAnalyticsService } from '@dereekb/firebase-server';
 import { inspect } from 'node:util';
 import { arktypeToJsonSchemaForExport } from '@dereekb/model';
 import { toWebRequest, toNodeHandler, NodeStreamableHTTPServerTransport } from '@modelcontextprotocol/node';
@@ -12,7 +12,7 @@ import { toWebRequest, toNodeHandler, NodeStreamableHTTPServerTransport } from '
 function _class_call_check$5(instance, Constructor) {
     if (!(instance instanceof Constructor)) throw new TypeError("Cannot call a class as a function");
 }
-function _define_property$a(obj, key, value) {
+function _define_property$c(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -81,7 +81,7 @@ function _define_property$a(obj, key, value) {
      * discovery document. Claude custom-connector reads this to discover the OIDC issuer.
      *
      * @example 'https://api.example.com/oidc'
-     */ _define_property$a(this, "oidcIssuer", void 0);
+     */ _define_property$c(this, "oidcIssuer", void 0);
     /**
      * The canonical resource URL of the MCP endpoint.
      *
@@ -89,7 +89,7 @@ function _define_property$a(obj, key, value) {
      * and used as the audience the access token's `aud` claim should match.
      *
      * @example 'https://api.example.com/mcp'
-     */ _define_property$a(this, "mcpUrl", void 0);
+     */ _define_property$c(this, "mcpUrl", void 0);
     /**
      * Optional filter applied to the OIDC provider's scope list when building the
      * protected-resource discovery document's `scopes_supported` (RFC 9728 §2).
@@ -98,9 +98,11 @@ function _define_property$a(obj, key, value) {
      * injected {@link OidcProviderConfigService.clientRequestableScopesSupported}, so
      * the MCP resource advertises the scopes the issuer grants an arbitrary client
      * without the app restating them. Scopes only an admin-assigned provider profile
-     * unlocks are already excluded — requesting one is fatal at the consent unlock
-     * gate. Provide this only to narrow the set further; it returns the subset to
-     * advertise. When unset, the whole base list is advertised.
+     * unlocks are excluded from that base list, since an unassigned client can never
+     * be granted one. Provide this to narrow the set further — or to add such a gated
+     * scope back deliberately, which is safe: the consent URL builder withholds it
+     * from any client whose profiles do not unlock it, so that client's flow completes
+     * without it rather than failing. When unset, the whole base list is advertised.
      *
      * Advertising these matters because dynamic-registration MCP clients (the Claude
      * Code CLI) read `scopes_supported` to decide which scopes to request on the
@@ -108,19 +110,19 @@ function _define_property$a(obj, key, value) {
      * the OIDC provider nothing to grant and ending the interaction in `access_denied`.
      *
      * @example (allScopes) => allScopes.filter((scope) => scope === 'openid' || scope.startsWith('model.'))
-     */ _define_property$a(this, "scopesSupported", void 0);
+     */ _define_property$c(this, "scopesSupported", void 0);
     /**
      * Optional name advertised on the MCP `initialize` handshake. Defaults to
      * {@link DEFAULT_MCP_SERVER_NAME}.
-     */ _define_property$a(this, "serverName", void 0);
+     */ _define_property$c(this, "serverName", void 0);
     /**
      * Optional version advertised on the MCP `initialize` handshake.
-     */ _define_property$a(this, "serverVersion", void 0);
+     */ _define_property$c(this, "serverVersion", void 0);
     /**
      * Optional override for the `instructions` string passed to `new McpServer(...)` and
      * advertised on the JSON-RPC `initialize` handshake. Defaults to
      * {@link DEFAULT_MCP_SERVER_INSTRUCTIONS}.
-     */ _define_property$a(this, "serverInstructions", void 0);
+     */ _define_property$c(this, "serverInstructions", void 0);
     /**
      * Absolute path to a pre-rendered MCP manifest JSON file produced by
      * `dbx-cli-generate-mcp-manifest`. When set, the runtime reads it once at
@@ -130,7 +132,7 @@ function _define_property$a(obj, key, value) {
      * Optional. When unset or the file is missing, the runtime falls back to
      * today's behavior (auto-generated descriptions, ArkType-derived input
      * schemas, no output schemas) and emits a single boot warning.
-     */ _define_property$a(this, "mcpManifestPath", void 0);
+     */ _define_property$c(this, "mcpManifestPath", void 0);
     /**
      * Absolute path to a pre-rendered route manifest JSON file produced by
      * `dbx-cli-generate-route-manifest`. When set, the runtime reads it once at
@@ -140,7 +142,7 @@ function _define_property$a(obj, key, value) {
      * Optional. When unset or the file is missing, the runtime skips registering
      * `url-models` and emits a single boot warning when the path was set but
      * unreadable.
-     */ _define_property$a(this, "mcpRouteManifestPath", void 0);
+     */ _define_property$c(this, "mcpRouteManifestPath", void 0);
     /**
      * When `true`, the MCP server only advertises tools whose effective read-only classification is `true`.
      *
@@ -150,7 +152,7 @@ function _define_property$a(obj, key, value) {
      *
      * The advertised `serverName` on the JSON-RPC `initialize` handshake is suffixed with
      * ` (read-only)` so the client surface reflects the mode.
-     */ _define_property$a(this, "readOnly", void 0);
+     */ _define_property$c(this, "readOnly", void 0);
     /**
      * Controls the auto-injected `reason` parameter added to every advertised tool's input schema.
      *
@@ -160,7 +162,7 @@ function _define_property$a(obj, key, value) {
      * When enabled, every advertised tool's `inputSchema` carries a required `reason` string the model
      * fills with a short justification for the call. The value is forwarded to analytics and stripped
      * from the dispatched handler body. See {@link McpReasonParameterConfig}.
-     */ _define_property$a(this, "reasonParameter", void 0);
+     */ _define_property$c(this, "reasonParameter", void 0);
     /**
      * Default OIDC scope group term required on EVERY `callModel` op, mirrored into MCP tool-list
      * visibility, unless a finer term overrides it (a per-function `requiredScope`, then a
@@ -170,13 +172,13 @@ function _define_property$a(obj, key, value) {
      *
      * Set this to the SAME value passed to `ModelApiDispatchConfig.defaultRequiredScope` to
      * keep tool visibility and enforcement in lockstep.
-     */ _define_property$a(this, "defaultRequiredScope", void 0);
+     */ _define_property$c(this, "defaultRequiredScope", void 0);
     /**
      * Per-model OIDC scope group-term overrides, keyed by {@link FirestoreModelType}, mirrored into MCP
      * tool-list visibility. Set this to the SAME value passed to
      * `ModelApiDispatchConfig.modelRequiredScopes` so per-model / verb-keyed restrictions that
      * confine a subset client apply identically to the advertised tool list.
-     */ _define_property$a(this, "modelRequiredScopes", void 0);
+     */ _define_property$c(this, "modelRequiredScopes", void 0);
 };
 /**
  * NestJS injection token for the optional {@link McpAuthRoleReader} provider.
@@ -184,6 +186,9 @@ function _define_property$a(obj, key, value) {
 /**
  * NestJS injection token for the optional {@link McpModelRolesTargetUidPredicate} provider.
  */ var MCP_MODEL_ROLES_TARGET_UID_PREDICATE = 'MCP_MODEL_ROLES_TARGET_UID_PREDICATE';
+/**
+ * NestJS injection token for the optional {@link McpCliTokenMinter} provider.
+ */ var MCP_CLI_TOKEN_MINTER = 'MCP_CLI_TOKEN_MINTER';
 
 function _type_of$5(obj) {
     "@swc/helpers - typeof";
@@ -213,7 +218,7 @@ function _array_like_to_array$b(arr, len) {
 function _array_without_holes$7(arr) {
     if (Array.isArray(arr)) return _array_like_to_array$b(arr);
 }
-function _define_property$9(obj, key, value) {
+function _define_property$b(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -232,7 +237,7 @@ function _iterable_to_array$7(iter) {
 function _non_iterable_spread$7() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread$7(target) {
+function _object_spread$9(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -242,7 +247,7 @@ function _object_spread$7(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$9(target, key, source[key]);
+            _define_property$b(target, key, source[key]);
         });
     }
     return target;
@@ -351,9 +356,9 @@ function _unsupported_iterable_to_array$b(o, minLen) {
         var _base_type;
         var base = (typeof inputSchema === "undefined" ? "undefined" : _type_of$4(inputSchema)) === 'object' && inputSchema != null ? inputSchema : {};
         var existingProperties = _type_of$4(base.properties) === 'object' && base.properties != null ? base.properties : {};
-        var next = _object_spread_props$3(_object_spread$7({}, base), {
+        var next = _object_spread_props$3(_object_spread$9({}, base), {
             type: (_base_type = base.type) !== null && _base_type !== void 0 ? _base_type : 'object',
-            properties: _object_spread_props$3(_object_spread$7({}, existingProperties), _define_property$9({}, resolved.parameterName, {
+            properties: _object_spread_props$3(_object_spread$9({}, existingProperties), _define_property$b({}, resolved.parameterName, {
                 type: 'string',
                 maxLength: resolved.maxLength,
                 description: resolved.description
@@ -387,7 +392,7 @@ function _unsupported_iterable_to_array$b(o, minLen) {
     var result;
     if (resolved.enabled && !toolDeclaresOwnReason && Object.prototype.hasOwnProperty.call(args, resolved.parameterName)) {
         var rawValue = args[resolved.parameterName];
-        var nextArgs = _object_spread$7({}, args);
+        var nextArgs = _object_spread$9({}, args);
         delete nextArgs[resolved.parameterName];
         var stringValue = rawValue == null ? '' : String(rawValue);
         var clamped = stringValue.length > resolved.maxLength ? stringValue.slice(0, resolved.maxLength) : stringValue;
@@ -740,7 +745,7 @@ function scoreCandidates(states, pathname) {
     });
 }
 
-function asyncGeneratorStep$7(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$8(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -751,16 +756,16 @@ function asyncGeneratorStep$7(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$7(fn) {
+function _async_to_generator$8(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$7(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$8(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$7(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$8(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
@@ -772,7 +777,7 @@ function _instanceof$1(left, right) {
         return !!right[Symbol.hasInstance](left);
     } else return left instanceof right;
 }
-function _ts_generator$7(thisArg, body) {
+function _ts_generator$8(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -900,9 +905,9 @@ function _ts_generator$7(thisArg, body) {
  * @param details - The handler-level API details (carries the mapper + Tier 2/3 formatters).
  * @returns The MCP tool response content.
  */ function formatMcpToolResponse(result, params, details) {
-    return _async_to_generator$7(function() {
+    return _async_to_generator$8(function() {
         var mcp, value, _tmp, context, response, summary;
-        return _ts_generator$7(this, function(_state) {
+        return _ts_generator$8(this, function(_state) {
             switch(_state.label){
                 case 0:
                     mcp = details === null || details === void 0 ? void 0 : details.mcp;
@@ -1096,6 +1101,17 @@ function _array_like_to_array$9(arr, len) {
 function _array_with_holes$4(arr) {
     if (Array.isArray(arr)) return arr;
 }
+function _define_property$a(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else obj[key] = value;
+    return obj;
+}
 function _iterable_to_array_limit$4(arr, i) {
     var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
     if (_i == null) return;
@@ -1123,6 +1139,21 @@ function _iterable_to_array_limit$4(arr, i) {
 function _non_iterable_rest$4() {
     throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
+function _object_spread$8(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$a(target, key, source[key]);
+        });
+    }
+    return target;
+}
 function _sliced_to_array$4(arr, i) {
     return _array_with_holes$4(arr) || _iterable_to_array_limit$4(arr, i) || _unsupported_iterable_to_array$9(arr, i) || _non_iterable_rest$4();
 }
@@ -1214,7 +1245,7 @@ function _unsupported_iterable_to_array$9(o, minLen) {
  * @param input - The tool identity, schemas, dispatch target, static handler, and read-only classification.
  * @returns A statically-registered {@link McpToolDefinition} to append to the MCP server factory's tool registry.
  */ function buildStaticToolDefinition(input) {
-    var name = input.name, inputSchema = input.inputSchema, outputSchema = input.outputSchema, dispatch = input.dispatch, staticHandler = input.staticHandler, effectiveReadOnly = input.effectiveReadOnly, rule = input.rule;
+    var name = input.name, inputSchema = input.inputSchema, outputSchema = input.outputSchema, dispatch = input.dispatch, staticHandler = input.staticHandler, effectiveReadOnly = input.effectiveReadOnly, rule = input.rule, requiredScopeTerms = input.requiredScopeTerms;
     var annotations = resolveMcpToolAnnotations(effectiveReadOnly);
     var description = applyWriteMarker(input.description, annotations);
     return {
@@ -1225,11 +1256,13 @@ function _unsupported_iterable_to_array$9(o, minLen) {
         annotations: annotations,
         dispatch: dispatch,
         staticHandler: staticHandler,
-        filterMetadata: {
+        filterMetadata: _object_spread$8({
             visibilityKind: 'declarative',
             rule: rule !== null && rule !== void 0 ? rule : {},
             effectiveReadOnly: effectiveReadOnly
-        },
+        }, requiredScopeTerms == null ? undefined : {
+            requiredScopeTerms: requiredScopeTerms
+        }),
         staticWireEntry: buildStaticWireEntry({
             name: name,
             description: description,
@@ -1762,7 +1795,7 @@ function _array_like_to_array$8(arr, len) {
 function _array_without_holes$6(arr) {
     if (Array.isArray(arr)) return _array_like_to_array$8(arr);
 }
-function asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$7(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -1773,16 +1806,16 @@ function asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$6(fn) {
+function _async_to_generator$7(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$7(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$7(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
@@ -1799,7 +1832,7 @@ function _non_iterable_spread$6() {
 function _to_consumable_array$6(arr) {
     return _array_without_holes$6(arr) || _iterable_to_array$6(arr) || _unsupported_iterable_to_array$8(arr) || _non_iterable_spread$6();
 }
-function _ts_generator$6(thisArg, body) {
+function _ts_generator$7(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -1968,9 +2001,9 @@ function _unsupported_iterable_to_array$8(o, minLen) {
 }
 // MARK: Handler
 function modelGetToolHandler(args, ctx, deps) {
-    return _async_to_generator$6(function() {
+    return _async_to_generator$7(function() {
         var result, input, identity, resolvedKeys, merged, error;
-        return _ts_generator$6(this, function(_state) {
+        return _ts_generator$7(this, function(_state) {
             switch(_state.label){
                 case 0:
                     _state.trys.push([
@@ -2077,9 +2110,9 @@ function resolveKeys$1(keys, identity) {
     return resolved;
 }
 function readInChunks$1(input) {
-    return _async_to_generator$6(function() {
+    return _async_to_generator$7(function() {
         var modelType, keys, auth, readDocuments, merged, offset, _merged_results, _merged_errors, batch, partial;
-        return _ts_generator$6(this, function(_state) {
+        return _ts_generator$7(this, function(_state) {
             switch(_state.label){
                 case 0:
                     modelType = input.modelType, keys = input.keys, auth = input.auth, readDocuments = input.readDocuments;
@@ -2193,7 +2226,7 @@ var MODEL_GET_OUTPUT_SCHEMA = {
     }
 };
 
-function asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -2204,22 +2237,22 @@ function asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, key, arg) {
     if (info.done) resolve(value);
     else Promise.resolve(value).then(_next, _throw);
 }
-function _async_to_generator$5(fn) {
+function _async_to_generator$6(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _define_property$8(obj, key, value) {
+function _define_property$9(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -2230,7 +2263,7 @@ function _define_property$8(obj, key, value) {
     } else obj[key] = value;
     return obj;
 }
-function _object_spread$6(target) {
+function _object_spread$7(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -2240,12 +2273,12 @@ function _object_spread$6(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$8(target, key, source[key]);
+            _define_property$9(target, key, source[key]);
         });
     }
     return target;
 }
-function _ts_generator$5(thisArg, body) {
+function _ts_generator$6(thisArg, body) {
     var f, y, t, _ = {
         label: 0,
         sent: function() {
@@ -2408,9 +2441,9 @@ function _ts_generator$5(thisArg, body) {
 }
 // MARK: Handler
 function modelRolesToolHandler(args, ctx, deps) {
-    return _async_to_generator$5(function() {
+    return _async_to_generator$6(function() {
         var result, input, identity, targetUid, keys, resolved, error;
-        return _ts_generator$5(this, function(_state) {
+        return _ts_generator$6(this, function(_state) {
             switch(_state.label){
                 case 0:
                     _state.trys.push([
@@ -2437,7 +2470,7 @@ function modelRolesToolHandler(args, ctx, deps) {
                     keys = resolveKeys(input.keys, identity);
                     return [
                         4,
-                        deps.readRoleMaps(_object_spread$6({
+                        deps.readRoleMaps(_object_spread$7({
                             modelType: input.modelType,
                             keys: keys,
                             auth: ctx.auth
@@ -2486,9 +2519,9 @@ function modelRolesToolHandler(args, ctx, deps) {
  * @returns The uid to resolve as, or `undefined` to resolve as the caller.
  * @throws {Error} When another user's uid is requested and the predicate denies (or is absent).
  */ function resolveTargetUid(input) {
-    return _async_to_generator$5(function() {
+    return _async_to_generator$6(function() {
         var requestedUid, auth, canTargetOtherUids, result, allowed, _tmp;
-        return _ts_generator$5(this, function(_state) {
+        return _ts_generator$6(this, function(_state) {
             switch(_state.label){
                 case 0:
                     requestedUid = input.requestedUid, auth = input.auth, canTargetOtherUids = input.canTargetOtherUids;
@@ -2551,7 +2584,7 @@ function parseModelRolesInput(args) {
         }
         return value;
     });
-    return _object_spread$6({
+    return _object_spread$7({
         modelType: modelType,
         keys: normalizedKeys
     }, uid === undefined ? {} : {
@@ -2702,7 +2735,7 @@ function _array_like_to_array$7(arr, len) {
 function _array_without_holes$5(arr) {
     if (Array.isArray(arr)) return _array_like_to_array$7(arr);
 }
-function _define_property$7(obj, key, value) {
+function _define_property$8(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -2721,7 +2754,7 @@ function _iterable_to_array$5(iter) {
 function _non_iterable_spread$5() {
     throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread$5(target) {
+function _object_spread$6(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -2731,7 +2764,7 @@ function _object_spread$5(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$7(target, key, source[key]);
+            _define_property$8(target, key, source[key]);
         });
     }
     return target;
@@ -2930,7 +2963,7 @@ function resolveModelInfoOutput(input, manifest) {
             }
         }
         if (tables.length > 0) {
-            result = _object_spread_props$2(_object_spread$5({}, output), {
+            result = _object_spread_props$2(_object_spread$6({}, output), {
                 enums: tables
             });
         }
@@ -2984,7 +3017,7 @@ function parseModelInfoInput(args) {
     var modelGroup = parseModelGroupArg(args['modelGroup']);
     var all = parseBooleanArg(args['all'], 'all');
     var fields = parseBooleanArg(args['fields'], 'fields');
-    return _object_spread$5(_object_spread_props$2(_object_spread$5(_object_spread_props$2(_object_spread$5({}, modelQueries == null ? {} : {
+    return _object_spread$6(_object_spread_props$2(_object_spread$6(_object_spread_props$2(_object_spread$6({}, modelQueries == null ? {} : {
         modelQueries: modelQueries
     }), {
         modelIsArray: Array.isArray(args['model'])
@@ -3147,7 +3180,7 @@ function toModelRow(entry, detailed) {
     return detailed ? entry : toSummaryRow(entry);
 }
 function toSummaryRow(entry) {
-    return _object_spread$5({
+    return _object_spread$6({
         modelType: entry.modelType,
         modelName: entry.modelName,
         identityConst: entry.identityConst,
@@ -3482,7 +3515,7 @@ var MODEL_INFO_OUTPUT_SCHEMA = {
             type: 'string',
             description: 'Present when `mode` is `"list"` from a `modelGroup` filter. The canonical group name.'
         },
-        model: _object_spread_props$2(_object_spread$5({}, MODEL_ROW_SCHEMA), {
+        model: _object_spread_props$2(_object_spread$6({}, MODEL_ROW_SCHEMA), {
             description: 'Present when `mode` is `"single"`. The matched model entry (full detail unless `fields:false`).'
         }),
         notFound: {
@@ -3555,7 +3588,7 @@ var MODEL_INFO_OUTPUT_SCHEMA = {
     ]
 };
 
-function _define_property$6(obj, key, value) {
+function _define_property$7(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -3566,7 +3599,7 @@ function _define_property$6(obj, key, value) {
     } else obj[key] = value;
     return obj;
 }
-function _object_spread$4(target) {
+function _object_spread$5(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -3576,7 +3609,7 @@ function _object_spread$4(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$6(target, key, source[key]);
+            _define_property$7(target, key, source[key]);
         });
     }
     return target;
@@ -3705,7 +3738,7 @@ function parseModelDecodeInput(args) {
     };
 }
 function toSegment(prefix, id, entry) {
-    var segment = entry ? _object_spread$4({
+    var segment = entry ? _object_spread$5({
         prefix: prefix,
         id: id,
         modelType: entry.modelType,
@@ -4003,7 +4036,7 @@ function _array_like_to_array$6(arr, len) {
 function _array_with_holes$3(arr) {
     if (Array.isArray(arr)) return arr;
 }
-function _define_property$5(obj, key, value) {
+function _define_property$6(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -4041,7 +4074,7 @@ function _iterable_to_array_limit$3(arr, i) {
 function _non_iterable_rest$3() {
     throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
 }
-function _object_spread$3(target) {
+function _object_spread$4(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -4051,7 +4084,7 @@ function _object_spread$3(target) {
             }));
         }
         ownKeys.forEach(function(key) {
-            _define_property$5(target, key, source[key]);
+            _define_property$6(target, key, source[key]);
         });
     }
     return target;
@@ -4167,7 +4200,7 @@ function whoamiToolHandler(args, ctx, deps) {
             if (claim1 == null) {
                 unknownClaimKeys.push(key);
             } else {
-                claimDetails.push(_object_spread$3({
+                claimDetails.push(_object_spread$4({
                     key: claim1.key,
                     description: claim1.description,
                     grantedRoles: claim1.mapping.roles,
@@ -4192,7 +4225,7 @@ function whoamiToolHandler(args, ctx, deps) {
             }
         }
     }
-    var output = _object_spread$3({
+    var output = _object_spread$4({
         authenticated: true,
         uid: auth.uid,
         roles: roles,
@@ -4204,12 +4237,12 @@ function whoamiToolHandler(args, ctx, deps) {
     }, token.email_verified == null ? {} : {
         emailVerified: token.email_verified
     }, detail === 'summary' ? {} : {
-        claims: _object_spread$3({}, token)
+        claims: _object_spread$4({}, token)
     }, detail === 'full' ? {
         claimDetails: claimDetails,
         unknownClaimKeys: unknownClaimKeys
     } : {});
-    var text = renderText(output, detail);
+    var text = renderText$1(output, detail);
     return buildResult(output, text);
 }
 // Coerces the `detail` input into a WhoamiDetailLevel, defaulting unknown or absent values to `summary`.
@@ -4228,7 +4261,7 @@ function buildResult(output, text) {
         structuredContent: output
     };
 }
-function renderText(output, detail) {
+function renderText$1(output, detail) {
     var lines = [
         '# whoami',
         ''
@@ -4445,6 +4478,361 @@ var WHOAMI_OUTPUT_SCHEMA = {
     }
 };
 
+function asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) resolve(value);
+    else Promise.resolve(value).then(_next, _throw);
+}
+function _async_to_generator$5(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _define_property$5(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else obj[key] = value;
+    return obj;
+}
+function _object_spread$3(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$5(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function _ts_generator$5(thisArg, body) {
+    var f, y, t, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    }, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype), d = Object.defineProperty;
+    return d(g, "next", {
+        value: verb(0)
+    }), d(g, "throw", {
+        value: verb(1)
+    }), d(g, "return", {
+        value: verb(2)
+    }), typeof Symbol === "function" && d(g, Symbol.iterator, {
+        value: function() {
+            return this;
+        }
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(g && (g = 0, op[0] && (_ = 0)), _)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+// MARK: Constants
+/**
+ * Reserved tool name for the built-in `cli-token` static tool.
+ */ var CLI_TOKEN_TOOL_NAME = 'cli-token';
+/**
+ * Synthetic call type used in the tool's dispatch identity. `create` so the visibility classifier
+ * treats the tool as a write — minting a credential is not a read.
+ */ var CLI_TOKEN_DISPATCH_CALL = 'create';
+/**
+ * Synthetic model type used in the tool's dispatch identity.
+ */ var CLI_TOKEN_DISPATCH_MODEL_TYPE = 'auth';
+// MARK: Factory
+/**
+ * Builds the built-in `cli-token` MCP tool definition — the agent-facing half of the CLI handoff.
+ *
+ * Mints a short-lived CLI login credential carrying no more privilege than the calling session and
+ * returns the one-time claim code that unwraps it, optionally alongside a signed download URL for
+ * the CLI binary so a bare machine can go from nothing to logged in without a human.
+ *
+ * Three independent gates apply before the handler ever runs:
+ *
+ * - `requiredScopeTerms: [token.cli]` — the tool is invisible to `tools/list` AND uncallable without
+ *   the scope, through the factory's existing scope filter.
+ * - `visibility.requiredRoles: [admin]` — the declarative role gate, which fails closed when the app
+ *   wires no `McpAuthRoleReader`.
+ * - The mint endpoint's own admin predicate, inside the minter.
+ *
+ * @param deps - The app-supplied minter.
+ * @returns A statically-registered {@link McpToolDefinition} to append to the MCP server factory's tool registry.
+ */ function createCliTokenTool(deps) {
+    var handler = function handler(args, ctx) {
+        return cliTokenToolHandler(args, ctx, deps);
+    };
+    return buildStaticToolDefinition({
+        name: CLI_TOKEN_TOOL_NAME,
+        description: 'Mints a short-lived CLI login credential for YOU (the calling session) and returns a one-time claim code plus, when available, a signed download URL for the CLI binary. The credential is capped at one hour, carries no more privilege than this session (never `token.cli` or `token.service`), and expires with this session if that is sooner. The refresh token is never returned here — redeem the claim code with `<cli> auth handoff <code>` within two minutes.',
+        inputSchema: CLI_TOKEN_INPUT_SCHEMA,
+        outputSchema: CLI_TOKEN_OUTPUT_SCHEMA,
+        dispatch: {
+            call: CLI_TOKEN_DISPATCH_CALL,
+            modelType: CLI_TOKEN_DISPATCH_MODEL_TYPE
+        },
+        staticHandler: handler,
+        effectiveReadOnly: false,
+        requiredScopeTerms: [
+            CLI_TOKEN_OIDC_SCOPE
+        ],
+        rule: {
+            requireAuthenticated: true,
+            requiredRoles: [
+                AUTH_ADMIN_ROLE
+            ]
+        }
+    });
+}
+// MARK: Handler
+function cliTokenToolHandler(args, ctx, deps) {
+    return _async_to_generator$5(function() {
+        var minted, output;
+        return _ts_generator$5(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    return [
+                        4,
+                        deps.minter({
+                            auth: ctx.auth,
+                            scopes: parseScopes(args['scopes']),
+                            ttlSeconds: parseTtlSeconds(args['ttlSeconds']),
+                            includeDownloadUrl: args['includeDownloadUrl'] !== false,
+                            // resolved from the tool call's raw request so an MCP mint records the same address an HTTP mint
+                            // does — see McpCliTokenMintInput.requestIp
+                            requestIp: requestClientIp(ctx.rawRequest)
+                        })
+                    ];
+                case 1:
+                    minted = _state.sent();
+                    output = buildOutput(minted);
+                    return [
+                        2,
+                        {
+                            content: [
+                                {
+                                    type: 'text',
+                                    text: renderText(output)
+                                }
+                            ],
+                            structuredContent: output
+                        }
+                    ];
+            }
+        });
+    })();
+}
+function buildOutput(minted) {
+    var _minted_cliName;
+    var cliName = (_minted_cliName = minted.cliName) !== null && _minted_cliName !== void 0 ? _minted_cliName : '<cli>';
+    return _object_spread$3({
+        claimCode: minted.claimCode,
+        claimExpiresAt: minted.claimExpiresAt,
+        expiresAt: minted.expiresAt,
+        scope: minted.scope,
+        handoffCommand: "".concat(cliName, " auth handoff ").concat(minted.claimCode)
+    }, minted.cliName == null ? {} : {
+        cliName: minted.cliName
+    }, minted.downloadUrl == null ? {} : {
+        downloadUrl: minted.downloadUrl
+    }, minted.downloadSha256 == null ? {} : {
+        downloadSha256: minted.downloadSha256
+    });
+}
+// Reads the optional `scopes` input as a string array, ignoring anything that is not a non-empty string.
+function parseScopes(value) {
+    var result;
+    if (Array.isArray(value)) {
+        var scopes = value.filter(function(entry) {
+            return typeof entry === 'string' && entry.length > 0;
+        });
+        result = scopes.length > 0 ? scopes : undefined;
+    }
+    return result;
+}
+// Reads the optional `ttlSeconds` input, ignoring non-positive or non-finite values (the minter clamps the rest).
+function parseTtlSeconds(value) {
+    return typeof value === 'number' && Number.isFinite(value) && value > 0 ? Math.floor(value) : undefined;
+}
+function renderText(output) {
+    var lines = [
+        '# CLI credential minted',
+        ''
+    ];
+    if (output.downloadUrl == null) {
+        lines.push('## Log in', '');
+    } else {
+        var _output_cliName;
+        var cliName = (_output_cliName = output.cliName) !== null && _output_cliName !== void 0 ? _output_cliName : 'cli';
+        lines.push('## 1. Download the CLI', '', '```sh', "curl -fsSL -o ".concat(cliName, ' "').concat(output.downloadUrl, '" && chmod +x ').concat(cliName), '```', '');
+        if (output.downloadSha256 != null) {
+            lines.push("SHA-256: `".concat(output.downloadSha256, "`"), '');
+        }
+        lines.push('## 2. Log it in', '');
+    }
+    lines.push('```sh', "./".concat(output.handoffCommand), '```', '', "- **claim code expires:** ".concat(output.claimExpiresAt, " (one-time use)"), "- **credential expires:** ".concat(output.expiresAt), "- **scopes:** `".concat(output.scope, "`"), '', '_The claim code is single-use and short-lived; the credential it unwraps is capped at one hour. Re-run this tool for a fresh one rather than trying to extend either._');
+    return lines.join('\n');
+}
+// MARK: Schemas
+var CLI_TOKEN_INPUT_SCHEMA = {
+    type: 'object',
+    properties: {
+        scopes: {
+            type: 'array',
+            items: {
+                type: 'string'
+            },
+            description: 'Optional subset of YOUR OWN scopes to grant the credential. May only narrow — a scope you do not hold is ignored, and `token.cli` / `token.service` are always stripped. Defaults to every scope this session holds.'
+        },
+        ttlSeconds: {
+            type: 'integer',
+            description: 'Optional requested lifetime in seconds. Clamped to one hour and to the remaining life of this session.'
+        },
+        includeDownloadUrl: {
+            type: 'boolean',
+            description: 'Also mint a signed download URL for the CLI binary (default true). Has no effect when the app does not publish one.'
+        }
+    },
+    additionalProperties: false
+};
+var CLI_TOKEN_OUTPUT_SCHEMA = {
+    type: 'object',
+    required: [
+        'claimCode',
+        'claimExpiresAt',
+        'expiresAt',
+        'scope',
+        'handoffCommand'
+    ],
+    description: 'The one-time claim code and the minted credential’s metadata. The refresh token itself is never returned here.',
+    properties: {
+        claimCode: {
+            type: 'string'
+        },
+        claimExpiresAt: {
+            type: 'string'
+        },
+        expiresAt: {
+            type: 'string'
+        },
+        scope: {
+            type: 'string'
+        },
+        cliName: {
+            type: 'string'
+        },
+        downloadUrl: {
+            type: 'string'
+        },
+        downloadSha256: {
+            type: 'string'
+        },
+        handoffCommand: {
+            type: 'string'
+        }
+    }
+};
+
 function _array_like_to_array$5(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
@@ -6517,7 +6905,7 @@ var McpServerFactoryService_1;
  * per request and has no session concept at all — and it is equally what the SDK
  * recommends for stateless 2025-era serving, so one factory backs both eras.
  */ var McpServerFactoryService = McpServerFactoryService_1 = /*#__PURE__*/ function() {
-    function McpServerFactoryService(mcpConfig, dispatchService, modelApiGetService, roleReader, analyticsService, storageService, modelRolesTargetUidPredicate) {
+    function McpServerFactoryService(mcpConfig, dispatchService, modelApiGetService, roleReader, analyticsService, storageService, modelRolesTargetUidPredicate, cliTokenMinter) {
         _class_call_check$3(this, McpServerFactoryService);
         _define_property$3(this, "mcpConfig", void 0);
         _define_property$3(this, "dispatchService", void 0);
@@ -6525,6 +6913,7 @@ var McpServerFactoryService_1;
         _define_property$3(this, "roleReader", void 0);
         _define_property$3(this, "storageService", void 0);
         _define_property$3(this, "modelRolesTargetUidPredicate", void 0);
+        _define_property$3(this, "cliTokenMinter", void 0);
         _define_property$3(this, "_logger", new Logger(McpServerFactoryService_1.name));
         _define_property$3(this, "_cachedTools", void 0);
         _define_property$3(this, "_cachedStaticTools", void 0);
@@ -6545,6 +6934,7 @@ var McpServerFactoryService_1;
         this.roleReader = roleReader;
         this.storageService = storageService;
         this.modelRolesTargetUidPredicate = modelRolesTargetUidPredicate;
+        this.cliTokenMinter = cliTokenMinter;
         this._analyticsService = analyticsService !== null && analyticsService !== void 0 ? analyticsService : noopMcpAnalyticsService();
     }
     _create_class$3(McpServerFactoryService, [
@@ -6864,6 +7254,13 @@ var McpServerFactoryService_1;
                             roleReader: this.roleReader
                         }));
                     }
+                    // `cli-token` only exists when the app wires a minter — the mint needs the OIDC provider,
+                    // which this package deliberately does not depend on.
+                    if (this.cliTokenMinter != null) {
+                        staticTools.push(createCliTokenTool({
+                            minter: this.cliTokenMinter
+                        }));
+                    }
                     // Guard against the auto-generated tools accidentally claiming a static tool name. The first
                     // dispatch wins via Map.set order, so a collision would silently shadow one side.
                     var generatedNames = new Set((_ref = (_this__cachedTools = this._cachedTools) === null || _this__cachedTools === void 0 ? void 0 : _this__cachedTools.tools.map(function(t) {
@@ -7578,7 +7975,9 @@ McpServerFactoryService = McpServerFactoryService_1 = __decorate([
     __param(5, Optional()),
     __param(5, Inject(FirebaseServerStorageService)),
     __param(6, Optional()),
-    __param(6, Inject(MCP_MODEL_ROLES_TARGET_UID_PREDICATE))
+    __param(6, Inject(MCP_MODEL_ROLES_TARGET_UID_PREDICATE)),
+    __param(7, Optional()),
+    __param(7, Inject(MCP_CLI_TOKEN_MINTER))
 ], McpServerFactoryService);
 
 function asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, key, arg) {
@@ -8292,9 +8691,10 @@ function _unsupported_iterable_to_array$2(o, minLen) {
                 var _this_mcpConfig = this.mcpConfig, mcpUrl = _this_mcpConfig.mcpUrl, oidcIssuer = _this_mcpConfig.oidcIssuer, scopesFilter = _this_mcpConfig.scopesSupported;
                 // Base scope list is what the issuer grants an arbitrary client, NOT its full
                 // `scopes_supported`: a dynamic-registration client copies this list verbatim onto
-                // `/authorize`, and a provider-profile-gated scope in it would be hard-rejected at the
-                // consent unlock gate (`access_denied`) for every client lacking that profile assignment.
-                // The optional filter narrows the list further.
+                // `/authorize`, and a provider-profile-gated scope in it is useless to every client lacking
+                // that profile assignment. The optional filter adjusts the list — usually narrowing it, but
+                // an app may also add a gated scope back so an assigned client can request it at all (the
+                // consent builder withholds it from the unassigned ones, so their flow still completes).
                 var providerScopes = this.oidcProviderConfigService.clientRequestableScopesSupported;
                 var scopes = scopesFilter ? scopesFilter(providerScopes) : providerScopes;
                 return _object_spread({
@@ -8620,4 +9020,4 @@ function _unsupported_iterable_to_array(o, minLen) {
     };
 }
 
-export { BATCH_EXECUTE_DISPATCH_CALL, BATCH_EXECUTE_DISPATCH_MODEL_TYPE, BATCH_EXECUTE_TOOL_NAME, DEFAULT_BATCH_EXECUTE_MAX_PARALLEL, DEFAULT_JSON_SCHEMA_GENERATION_OPTIONS, DEFAULT_MCP_ANALYTICS_EVENT_NAME, DEFAULT_MCP_PATH, DEFAULT_MCP_REASON_PARAMETER_DESCRIPTION, DEFAULT_MCP_REASON_PARAMETER_MAX_LENGTH, DEFAULT_MCP_REASON_PARAMETER_NAME, DEFAULT_MCP_REASON_PARAMETER_REQUIRED, DEFAULT_MCP_SERVER_INSTRUCTIONS, DEFAULT_MCP_SERVER_NAME, DEFAULT_SPECIFIER_KEY, DEFAULT_VOID_MCP_SUCCESS_VALUE, ENUM_INFO_DISPATCH_CALL, ENUM_INFO_DISPATCH_MODEL_TYPE, ENUM_INFO_TOOL_NAME, ENUM_TABLE_SCHEMA, FIREBASE_SERVER_MCP_ANALYTICS_CONFIG, FIREBASE_SERVER_MCP_ROUTES_FOR_GLOBAL_ROUTE_EXCLUDE, FirebaseServerMcpAnalyticsService, MAX_BATCH_EXECUTE_FILE_BYTES, MAX_BATCH_EXECUTE_OPERATIONS, MCP_ANALYTICS_SERVICE, MCP_AUTH_ROLE_READER, MCP_CALL_TYPE_ABBREVIATIONS, MCP_MANIFEST_VERSION, MCP_MODEL_GET_BATCH_SIZE, MCP_MODEL_ROLES_MAX_KEYS, MCP_MODEL_ROLES_TARGET_UID_PREDICATE, MCP_TOOL_NAME_MAX_LENGTH, MCP_TOOL_NAME_WARN_LENGTH, MCP_WRITE_TOOL_DESCRIPTION_PREFIX, MODEL_DECODE_DISPATCH_CALL, MODEL_DECODE_DISPATCH_MODEL_TYPE, MODEL_DECODE_TOOL_NAME, MODEL_GET_DISPATCH_CALL, MODEL_GET_DISPATCH_MODEL_TYPE, MODEL_GET_TOOL_NAME, MODEL_INFO_DISPATCH_CALL, MODEL_INFO_DISPATCH_MODEL_TYPE, MODEL_INFO_GROUPS_HINT, MODEL_INFO_TOOL_NAME, MODEL_INFO_UNGROUPED_LABEL, MODEL_ROLES_DISPATCH_CALL, MODEL_ROLES_DISPATCH_MODEL_TYPE, MODEL_ROLES_TOOL_NAME, McpAnalyticsService, McpController, McpModuleConfig, McpServerFactoryService, McpWellKnownController, ROUTE_MANIFEST_VERSION, URL_MODELS_DISPATCH_CALL, URL_MODELS_DISPATCH_MODEL_TYPE, URL_MODELS_TOOL_NAME, abbreviateMcpCallType, appMcpAnalyticsModuleMetadata, applyMcpReasonParameterToSchema, applyWriteMarker, batchOperationCoordKey, buildDefaultMcpToolDescription, buildDisambiguatedMcpToolName, buildMcpToolName, buildStaticToolDefinition, buildStaticWireEntry, classifyVisibility, createBatchExecuteTool, createEnumInfoTool, createModelDecodeTool, createModelGetTool, createModelInfoTool, createModelRolesTool, createUrlModelsTool, decodeFirestoreModelKey, extractMcpReasonFromArgs, findModelEntry, formatMcpToolErrorResponse, formatMcpToolResponse, generateMcpToolDefinitions, handleStreamableHttpMcpRequest, matchRouteManifestUrl, mcpManifestKey, mcpModuleMetadata, mcpSchemaDeclaresProperty, noopMcpAnalyticsService, parseUrlModelsPathname, readUrlModelsImpersonationUid, resolveEffectiveReadOnly, resolveEnumInfoOutput, resolveMcpReasonParameterConfig, resolveMcpToolAnnotations, resolveRequiredScope, validateMcpToolName };
+export { BATCH_EXECUTE_DISPATCH_CALL, BATCH_EXECUTE_DISPATCH_MODEL_TYPE, BATCH_EXECUTE_TOOL_NAME, CLI_TOKEN_DISPATCH_CALL, CLI_TOKEN_DISPATCH_MODEL_TYPE, CLI_TOKEN_TOOL_NAME, DEFAULT_BATCH_EXECUTE_MAX_PARALLEL, DEFAULT_JSON_SCHEMA_GENERATION_OPTIONS, DEFAULT_MCP_ANALYTICS_EVENT_NAME, DEFAULT_MCP_PATH, DEFAULT_MCP_REASON_PARAMETER_DESCRIPTION, DEFAULT_MCP_REASON_PARAMETER_MAX_LENGTH, DEFAULT_MCP_REASON_PARAMETER_NAME, DEFAULT_MCP_REASON_PARAMETER_REQUIRED, DEFAULT_MCP_SERVER_INSTRUCTIONS, DEFAULT_MCP_SERVER_NAME, DEFAULT_SPECIFIER_KEY, DEFAULT_VOID_MCP_SUCCESS_VALUE, ENUM_INFO_DISPATCH_CALL, ENUM_INFO_DISPATCH_MODEL_TYPE, ENUM_INFO_TOOL_NAME, ENUM_TABLE_SCHEMA, FIREBASE_SERVER_MCP_ANALYTICS_CONFIG, FIREBASE_SERVER_MCP_ROUTES_FOR_GLOBAL_ROUTE_EXCLUDE, FirebaseServerMcpAnalyticsService, MAX_BATCH_EXECUTE_FILE_BYTES, MAX_BATCH_EXECUTE_OPERATIONS, MCP_ANALYTICS_SERVICE, MCP_AUTH_ROLE_READER, MCP_CALL_TYPE_ABBREVIATIONS, MCP_CLI_TOKEN_MINTER, MCP_MANIFEST_VERSION, MCP_MODEL_GET_BATCH_SIZE, MCP_MODEL_ROLES_MAX_KEYS, MCP_MODEL_ROLES_TARGET_UID_PREDICATE, MCP_TOOL_NAME_MAX_LENGTH, MCP_TOOL_NAME_WARN_LENGTH, MCP_WRITE_TOOL_DESCRIPTION_PREFIX, MODEL_DECODE_DISPATCH_CALL, MODEL_DECODE_DISPATCH_MODEL_TYPE, MODEL_DECODE_TOOL_NAME, MODEL_GET_DISPATCH_CALL, MODEL_GET_DISPATCH_MODEL_TYPE, MODEL_GET_TOOL_NAME, MODEL_INFO_DISPATCH_CALL, MODEL_INFO_DISPATCH_MODEL_TYPE, MODEL_INFO_GROUPS_HINT, MODEL_INFO_TOOL_NAME, MODEL_INFO_UNGROUPED_LABEL, MODEL_ROLES_DISPATCH_CALL, MODEL_ROLES_DISPATCH_MODEL_TYPE, MODEL_ROLES_TOOL_NAME, McpAnalyticsService, McpController, McpModuleConfig, McpServerFactoryService, McpWellKnownController, ROUTE_MANIFEST_VERSION, URL_MODELS_DISPATCH_CALL, URL_MODELS_DISPATCH_MODEL_TYPE, URL_MODELS_TOOL_NAME, abbreviateMcpCallType, appMcpAnalyticsModuleMetadata, applyMcpReasonParameterToSchema, applyWriteMarker, batchOperationCoordKey, buildDefaultMcpToolDescription, buildDisambiguatedMcpToolName, buildMcpToolName, buildStaticToolDefinition, buildStaticWireEntry, classifyVisibility, createBatchExecuteTool, createCliTokenTool, createEnumInfoTool, createModelDecodeTool, createModelGetTool, createModelInfoTool, createModelRolesTool, createUrlModelsTool, decodeFirestoreModelKey, extractMcpReasonFromArgs, findModelEntry, formatMcpToolErrorResponse, formatMcpToolResponse, generateMcpToolDefinitions, handleStreamableHttpMcpRequest, matchRouteManifestUrl, mcpManifestKey, mcpModuleMetadata, mcpSchemaDeclaresProperty, noopMcpAnalyticsService, parseUrlModelsPathname, readUrlModelsImpersonationUid, resolveEffectiveReadOnly, resolveEnumInfoOutput, resolveMcpReasonParameterConfig, resolveMcpToolAnnotations, resolveRequiredScope, validateMcpToolName };