@kynver-app/mcp-estimator 0.2.6 → 0.2.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kynver-app/mcp-estimator",
-  "version": "0.2.6",
+  "version": "0.2.8",
   "description": "Kynver Estimator MCP server — chat, estimate, and catalog tools",
   "type": "module",
   "bin": {

package/src/lib/mcp-sse-server.ts

@@ -1,249 +1,249 @@
-// @generated — synced from packages/kynver-mcp-sse-lib/src/index.ts via scripts/sync-mcp-sse-server.mjs
-// Do not edit by hand; change the canonical file and re-run the sync script.
-
-import { createServer, type IncomingMessage, type ServerResponse } from "node:http";
-import { timingSafeEqual } from "node:crypto";
-import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";
-import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-
-export const MAX_SSE_BODY_BYTES = 1 * 1024 * 1024;
-
-export type SessionAuth =
-  | { kind: "apiKey"; apiKey: string }
-  | { kind: "internal"; userId: string };
-
-type SessionEntry = {
-  transport: SSEServerTransport;
-  userId: string;
-  auth: SessionAuth;
-};
-
-type RequestContextStore = {
-  run: <T>(store: { userId?: string }, fn: () => Promise<T>) => Promise<T>;
-};
-
-export type StartKynverMcpSseServerOptions = {
-  label: string;
-  defaultPort: number;
-  createMcpServer: () => McpServer | Promise<McpServer>;
-  requestContext: RequestContextStore;
-};
-
-const FORBIDDEN_QUERY_KEYS = ["secret", "userId"] as const;
-
-export function headerValue(req: IncomingMessage, name: string): string | null {
-  const v = req.headers[name];
-  return typeof v === "string" ? v : Array.isArray(v) ? (v[0] ?? null) : null;
-}
-
-export function timingSafeEqualString(a: string, b: string): boolean {
-  const left = Buffer.from(a);
-  const right = Buffer.from(b);
-  if (left.length !== right.length) return false;
-  return timingSafeEqual(left, right);
-}
-
-export function hasForbiddenQueryAuth(url: URL): boolean {
-  return FORBIDDEN_QUERY_KEYS.some((key) => url.searchParams.has(key));
-}
-
-function queryApiKey(url: URL): string {
-  return url.searchParams.get("apiKey")?.trim() ?? "";
-}
-
-export function resolveListenHost(): string {
-  const configured = process.env.MCP_SSE_HOST?.trim();
-  return configured || "127.0.0.1";
-}
-
-export function parseJsonBody(req: IncomingMessage, maxBytes = MAX_SSE_BODY_BYTES): Promise<unknown> {
-  return new Promise((resolve, reject) => {
-    const chunks: Buffer[] = [];
-    let totalSize = 0;
-    req.on("data", (chunk: Buffer) => {
-      totalSize += chunk.length;
-      if (totalSize > maxBytes) {
-        req.destroy();
-        reject(new Error("Request body too large"));
-        return;
-      }
-      chunks.push(chunk);
-    });
-    req.on("end", () => {
-      try {
-        resolve(JSON.parse(Buffer.concat(chunks).toString()));
-      } catch (error) {
-        reject(error);
-      }
-    });
-    req.on("error", reject);
-  });
-}
-
-export function validateMcporterServerName(name: string): string {
-  const trimmed = name.trim();
-  if (!/^[a-zA-Z0-9_-]+$/.test(trimmed)) {
-    throw new Error("Invalid mcporter server name.");
-  }
-  return trimmed;
-}
-
-function bearerToken(req: IncomingMessage): string {
-  const auth = headerValue(req, "authorization");
-  if (!auth) return "";
-  const match = /^Bearer\s+(.+)$/i.exec(auth);
-  return match?.[1]?.trim() ?? "";
-}
-
-function resolveInternalAuth(
-  req: IncomingMessage,
-  serviceSecret: string,
-): { userId: string; auth: SessionAuth } | null {
-  const internalUserId = headerValue(req, "x-kynver-user-id");
-  const internalSecret = headerValue(req, "x-kynver-service-secret");
-  if (!internalUserId || !serviceSecret || !internalSecret) return null;
-  if (!timingSafeEqualString(internalSecret, serviceSecret)) return null;
-  return { userId: internalUserId, auth: { kind: "internal", userId: internalUserId } };
-}
-
-function verifyPostAuth(
-  req: IncomingMessage,
-  url: URL,
-  sessionAuth: SessionAuth,
-  serviceSecret: string,
-): boolean {
-  if (sessionAuth.kind === "apiKey") {
-    const token = bearerToken(req) || queryApiKey(url);
-    return token.length > 0 && timingSafeEqualString(token, sessionAuth.apiKey);
-  }
-  const internal = resolveInternalAuth(req, serviceSecret);
-  return (
-    internal !== null &&
-    internal.userId === sessionAuth.userId &&
-    internal.auth.kind === "internal"
-  );
-}
-
-async function resolveUserFromApiKey(baseUrl: string, apiKey: string): Promise<string | null> {
-  try {
-    const res = await fetch(`${baseUrl.replace(/\/$/, "")}/api/users/me`, {
-      headers: { Authorization: `Bearer ${apiKey}` },
-    });
-    if (!res.ok) return null;
-    const data = (await res.json()) as { id?: string };
-    return data.id ?? null;
-  } catch {
-    return null;
-  }
-}
-
-function parseUrl(req: IncomingMessage, port: number): URL {
-  return new URL(req.url ?? "/", `http://localhost:${port}`);
-}
-
-function json(res: ServerResponse, status: number, body: Record<string, unknown>) {
-  res.writeHead(status, { "Content-Type": "application/json" });
-  res.end(JSON.stringify(body));
-}
-
-export function startKynverMcpSseServer(options: StartKynverMcpSseServerOptions): void {
-  const port = parseInt(process.env.PORT ?? String(options.defaultPort), 10);
-  const baseUrl = process.env.KYNVER_API_URL ?? "https://kynver.com";
-  const serviceSecret = process.env.KYNVER_SERVICE_SECRET ?? "";
-  const host = resolveListenHost();
-  const sessions: Record<string, SessionEntry> = {};
-
-  const httpServer = createServer(async (req: IncomingMessage, res: ServerResponse) => {
-    const url = parseUrl(req, port);
-    const path = url.pathname;
-
-    if (req.method === "GET" && path === "/sse") {
-      if (hasForbiddenQueryAuth(url)) {
-        json(res, 400, {
-          error:
-            "Internal auth via query params is not allowed. Use X-Kynver-User-Id and X-Kynver-Service-Secret headers.",
-        });
-        return;
-      }
-
-      if (url.searchParams.has("apiKey")) {
-        console.warn("[MCP SSE] WARNING: apiKey in query string may leak via logs. Prefer Authorization header when your client supports it.");
-      }
-
-      let userId: string | null = null;
-      let auth: SessionAuth | null = null;
-
-      const internal = serviceSecret ? resolveInternalAuth(req, serviceSecret) : null;
-      if (internal) {
-        userId = internal.userId;
-        auth = internal.auth;
-      } else {
-        const apiKey = bearerToken(req) || queryApiKey(url);
-        if (apiKey) {
-          userId = await resolveUserFromApiKey(baseUrl, apiKey);
-          if (userId) auth = { kind: "apiKey", apiKey };
-        }
-      }
-
-      if (!userId || !auth) {
-        json(res, 401, {
-          error:
-            "Unauthorized. Pass API key via Authorization: Bearer <key> or internal X-Kynver-User-Id + X-Kynver-Service-Secret headers.",
-        });
-        return;
-      }
-
-      console.log(`[MCP SSE] New connection (${options.label}, user: ${userId.slice(0, 8)}...)`);
-
-      const transport = new SSEServerTransport("/messages", res);
-      sessions[transport.sessionId] = { transport, userId, auth };
-
-      res.on("close", () => {
-        delete sessions[transport.sessionId];
-      });
-
-      const server = await options.createMcpServer();
-      await server.connect(transport);
-      return;
-    }
-
-    if (req.method === "POST" && path === "/messages") {
-      const sessionId = url.searchParams.get("sessionId");
-      const entry = sessionId ? sessions[sessionId] : undefined;
-
-      if (!entry) {
-        json(res, 400, { error: "No active SSE session for this sessionId" });
-        return;
-      }
-
-      if (!verifyPostAuth(req, url, entry.auth, serviceSecret)) {
-        json(res, 401, { error: "Unauthorized. Re-send the same credentials used to open the SSE session." });
-        return;
-      }
-
-      try {
-        const body = await parseJsonBody(req);
-        await options.requestContext.run({ userId: entry.userId }, async () => {
-          await entry.transport.handlePostMessage(req, res, body);
-        });
-      } catch (error) {
-        json(res, 400, {
-          error: error instanceof Error ? error.message : "Invalid request body",
-        });
-      }
-      return;
-    }
-
-    if (req.method === "GET" && path === "/health") {
-      res.writeHead(200, { "Content-Type": "text/plain" });
-      res.end("ok");
-      return;
-    }
-
-    json(res, 404, { error: "Not found" });
-  });
-
-  httpServer.listen(port, host, () => {
-    console.log(`[MCP SSE] ${options.label} listening on ${host}:${port}`);
-  });
-}
+// @generated — synced from packages/kynver-mcp-sse-lib/src/index.ts via scripts/sync-mcp-sse-server.mjs
+// Do not edit by hand; change the canonical file and re-run the sync script.
+
+import { createServer, type IncomingMessage, type ServerResponse } from "node:http";
+import { timingSafeEqual } from "node:crypto";
+import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+
+export const MAX_SSE_BODY_BYTES = 1 * 1024 * 1024;
+
+export type SessionAuth =
+  | { kind: "apiKey"; apiKey: string }
+  | { kind: "internal"; userId: string };
+
+type SessionEntry = {
+  transport: SSEServerTransport;
+  userId: string;
+  auth: SessionAuth;
+};
+
+type RequestContextStore = {
+  run: <T>(store: { userId?: string }, fn: () => Promise<T>) => Promise<T>;
+};
+
+export type StartKynverMcpSseServerOptions = {
+  label: string;
+  defaultPort: number;
+  createMcpServer: () => McpServer | Promise<McpServer>;
+  requestContext: RequestContextStore;
+};
+
+const FORBIDDEN_QUERY_KEYS = ["secret", "userId"] as const;
+
+export function headerValue(req: IncomingMessage, name: string): string | null {
+  const v = req.headers[name];
+  return typeof v === "string" ? v : Array.isArray(v) ? (v[0] ?? null) : null;
+}
+
+export function timingSafeEqualString(a: string, b: string): boolean {
+  const left = Buffer.from(a);
+  const right = Buffer.from(b);
+  if (left.length !== right.length) return false;
+  return timingSafeEqual(left, right);
+}
+
+export function hasForbiddenQueryAuth(url: URL): boolean {
+  return FORBIDDEN_QUERY_KEYS.some((key) => url.searchParams.has(key));
+}
+
+function queryApiKey(url: URL): string {
+  return url.searchParams.get("apiKey")?.trim() ?? "";
+}
+
+export function resolveListenHost(): string {
+  const configured = process.env.MCP_SSE_HOST?.trim();
+  return configured || "127.0.0.1";
+}
+
+export function parseJsonBody(req: IncomingMessage, maxBytes = MAX_SSE_BODY_BYTES): Promise<unknown> {
+  return new Promise((resolve, reject) => {
+    const chunks: Buffer[] = [];
+    let totalSize = 0;
+    req.on("data", (chunk: Buffer) => {
+      totalSize += chunk.length;
+      if (totalSize > maxBytes) {
+        req.destroy();
+        reject(new Error("Request body too large"));
+        return;
+      }
+      chunks.push(chunk);
+    });
+    req.on("end", () => {
+      try {
+        resolve(JSON.parse(Buffer.concat(chunks).toString()));
+      } catch (error) {
+        reject(error);
+      }
+    });
+    req.on("error", reject);
+  });
+}
+
+export function validateMcporterServerName(name: string): string {
+  const trimmed = name.trim();
+  if (!/^[a-zA-Z0-9_-]+$/.test(trimmed)) {
+    throw new Error("Invalid mcporter server name.");
+  }
+  return trimmed;
+}
+
+function bearerToken(req: IncomingMessage): string {
+  const auth = headerValue(req, "authorization");
+  if (!auth) return "";
+  const match = /^Bearer\s+(.+)$/i.exec(auth);
+  return match?.[1]?.trim() ?? "";
+}
+
+function resolveInternalAuth(
+  req: IncomingMessage,
+  serviceSecret: string,
+): { userId: string; auth: SessionAuth } | null {
+  const internalUserId = headerValue(req, "x-kynver-user-id");
+  const internalSecret = headerValue(req, "x-kynver-service-secret");
+  if (!internalUserId || !serviceSecret || !internalSecret) return null;
+  if (!timingSafeEqualString(internalSecret, serviceSecret)) return null;
+  return { userId: internalUserId, auth: { kind: "internal", userId: internalUserId } };
+}
+
+function verifyPostAuth(
+  req: IncomingMessage,
+  url: URL,
+  sessionAuth: SessionAuth,
+  serviceSecret: string,
+): boolean {
+  if (sessionAuth.kind === "apiKey") {
+    const token = bearerToken(req) || queryApiKey(url);
+    return token.length > 0 && timingSafeEqualString(token, sessionAuth.apiKey);
+  }
+  const internal = resolveInternalAuth(req, serviceSecret);
+  return (
+    internal !== null &&
+    internal.userId === sessionAuth.userId &&
+    internal.auth.kind === "internal"
+  );
+}
+
+async function resolveUserFromApiKey(baseUrl: string, apiKey: string): Promise<string | null> {
+  try {
+    const res = await fetch(`${baseUrl.replace(/\/$/, "")}/api/users/me`, {
+      headers: { Authorization: `Bearer ${apiKey}` },
+    });
+    if (!res.ok) return null;
+    const data = (await res.json()) as { id?: string };
+    return data.id ?? null;
+  } catch {
+    return null;
+  }
+}
+
+function parseUrl(req: IncomingMessage, port: number): URL {
+  return new URL(req.url ?? "/", `http://localhost:${port}`);
+}
+
+function json(res: ServerResponse, status: number, body: Record<string, unknown>) {
+  res.writeHead(status, { "Content-Type": "application/json" });
+  res.end(JSON.stringify(body));
+}
+
+export function startKynverMcpSseServer(options: StartKynverMcpSseServerOptions): void {
+  const port = parseInt(process.env.PORT ?? String(options.defaultPort), 10);
+  const baseUrl = process.env.KYNVER_API_URL ?? "https://kynver.com";
+  const serviceSecret = process.env.KYNVER_SERVICE_SECRET ?? "";
+  const host = resolveListenHost();
+  const sessions: Record<string, SessionEntry> = {};
+
+  const httpServer = createServer(async (req: IncomingMessage, res: ServerResponse) => {
+    const url = parseUrl(req, port);
+    const path = url.pathname;
+
+    if (req.method === "GET" && path === "/sse") {
+      if (hasForbiddenQueryAuth(url)) {
+        json(res, 400, {
+          error:
+            "Internal auth via query params is not allowed. Use X-Kynver-User-Id and X-Kynver-Service-Secret headers.",
+        });
+        return;
+      }
+
+      if (url.searchParams.has("apiKey")) {
+        console.warn("[MCP SSE] WARNING: apiKey in query string may leak via logs. Prefer Authorization header when your client supports it.");
+      }
+
+      let userId: string | null = null;
+      let auth: SessionAuth | null = null;
+
+      const internal = serviceSecret ? resolveInternalAuth(req, serviceSecret) : null;
+      if (internal) {
+        userId = internal.userId;
+        auth = internal.auth;
+      } else {
+        const apiKey = bearerToken(req) || queryApiKey(url);
+        if (apiKey) {
+          userId = await resolveUserFromApiKey(baseUrl, apiKey);
+          if (userId) auth = { kind: "apiKey", apiKey };
+        }
+      }
+
+      if (!userId || !auth) {
+        json(res, 401, {
+          error:
+            "Unauthorized. Pass API key via Authorization: Bearer <key> or internal X-Kynver-User-Id + X-Kynver-Service-Secret headers.",
+        });
+        return;
+      }
+
+      console.log(`[MCP SSE] New connection (${options.label}, user: ${userId.slice(0, 8)}...)`);
+
+      const transport = new SSEServerTransport("/messages", res);
+      sessions[transport.sessionId] = { transport, userId, auth };
+
+      res.on("close", () => {
+        delete sessions[transport.sessionId];
+      });
+
+      const server = await options.createMcpServer();
+      await server.connect(transport);
+      return;
+    }
+
+    if (req.method === "POST" && path === "/messages") {
+      const sessionId = url.searchParams.get("sessionId");
+      const entry = sessionId ? sessions[sessionId] : undefined;
+
+      if (!entry) {
+        json(res, 400, { error: "No active SSE session for this sessionId" });
+        return;
+      }
+
+      if (!verifyPostAuth(req, url, entry.auth, serviceSecret)) {
+        json(res, 401, { error: "Unauthorized. Re-send the same credentials used to open the SSE session." });
+        return;
+      }
+
+      try {
+        const body = await parseJsonBody(req);
+        await options.requestContext.run({ userId: entry.userId }, async () => {
+          await entry.transport.handlePostMessage(req, res, body);
+        });
+      } catch (error) {
+        json(res, 400, {
+          error: error instanceof Error ? error.message : "Invalid request body",
+        });
+      }
+      return;
+    }
+
+    if (req.method === "GET" && path === "/health") {
+      res.writeHead(200, { "Content-Type": "text/plain" });
+      res.end("ok");
+      return;
+    }
+
+    json(res, 404, { error: "Not found" });
+  });
+
+  httpServer.listen(port, host, () => {
+    console.log(`[MCP SSE] ${options.label} listening on ${host}:${port}`);
+  });
+}

package/src/lib/package-version.ts

@@ -1,55 +1,55 @@
-// @generated — synced from packages/kynver-mcp-sse-lib/src/package-version.ts via scripts/sync-mcp-sse-server.mjs
-// Do not edit by hand; change the canonical file and re-run the sync script.
-
-import { existsSync, readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-
-function resolvePackageRoot(moduleUrl: string): string {
-  let dir = dirname(fileURLToPath(moduleUrl));
-  for (let depth = 0; depth < 6; depth += 1) {
-    if (existsSync(join(dir, "package.json"))) return dir;
-    const parent = dirname(dir);
-    if (parent === dir) break;
-    dir = parent;
-  }
-  throw new Error(`package.json not found above ${dirname(fileURLToPath(moduleUrl))}`);
-}
-
-/** Read a field from the nearest `package.json` above this module. */
-export function readOwnPackageJsonField(
-  moduleUrl: string,
-  field: "version" | "name",
-): string {
-  const pkgPath = join(resolvePackageRoot(moduleUrl), "package.json");
-  const pkg = JSON.parse(readFileSync(pkgPath, "utf8")) as Record<string, unknown>;
-  const value = pkg[field];
-  if (typeof value !== "string" || !value.trim()) {
-    throw new Error(`Missing package.json ${field} at ${pkgPath}`);
-  }
-  return value;
-}
-
-export function readOwnPackageVersion(moduleUrl: string = import.meta.url): string {
-  return readOwnPackageJsonField(moduleUrl, "version");
-}
-
-export function wantsCliVersion(argv: string[]): boolean {
-  return argv.some((arg) => arg === "--version" || arg === "-v");
-}
-
-export function printCliVersionAndExit(version: string, binName?: string): never {
-  console.log(binName ? `${binName} ${version}` : version);
-  process.exit(0);
-}
-
-/** When `--version` / `-v` is present, print package version and exit before side effects. */
-export function handleCliVersionFlag(
-  argv: string[],
-  moduleUrl: string = import.meta.url,
-  binName?: string,
-): boolean {
-  if (!wantsCliVersion(argv)) return false;
-  printCliVersionAndExit(readOwnPackageVersion(moduleUrl), binName);
-  return true;
-}
+// @generated — synced from packages/kynver-mcp-sse-lib/src/package-version.ts via scripts/sync-mcp-sse-server.mjs
+// Do not edit by hand; change the canonical file and re-run the sync script.
+
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+function resolvePackageRoot(moduleUrl: string): string {
+  let dir = dirname(fileURLToPath(moduleUrl));
+  for (let depth = 0; depth < 6; depth += 1) {
+    if (existsSync(join(dir, "package.json"))) return dir;
+    const parent = dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  throw new Error(`package.json not found above ${dirname(fileURLToPath(moduleUrl))}`);
+}
+
+/** Read a field from the nearest `package.json` above this module. */
+export function readOwnPackageJsonField(
+  moduleUrl: string,
+  field: "version" | "name",
+): string {
+  const pkgPath = join(resolvePackageRoot(moduleUrl), "package.json");
+  const pkg = JSON.parse(readFileSync(pkgPath, "utf8")) as Record<string, unknown>;
+  const value = pkg[field];
+  if (typeof value !== "string" || !value.trim()) {
+    throw new Error(`Missing package.json ${field} at ${pkgPath}`);
+  }
+  return value;
+}
+
+export function readOwnPackageVersion(moduleUrl: string = import.meta.url): string {
+  return readOwnPackageJsonField(moduleUrl, "version");
+}
+
+export function wantsCliVersion(argv: string[]): boolean {
+  return argv.some((arg) => arg === "--version" || arg === "-v");
+}
+
+export function printCliVersionAndExit(version: string, binName?: string): never {
+  console.log(binName ? `${binName} ${version}` : version);
+  process.exit(0);
+}
+
+/** When `--version` / `-v` is present, print package version and exit before side effects. */
+export function handleCliVersionFlag(
+  argv: string[],
+  moduleUrl: string = import.meta.url,
+  binName?: string,
+): boolean {
+  if (!wantsCliVersion(argv)) return false;
+  printCliVersionAndExit(readOwnPackageVersion(moduleUrl), binName);
+  return true;
+}

package/src/server.ts

@@ -18,6 +18,7 @@ import * as clientTools from "./tools/client-tools.js";
 import * as takeoffTools from "./tools/takeoff-tools.js";
 import * as intakeTools from "./tools/intake-tools.js";
 import * as remodelEstimateTools from "./tools/remodel-estimate-tools.js";
+import * as remodelDeliverableTools from "./tools/remodel-deliverable-tools.js";
 import { readOwnPackageVersion } from "./lib/package-version.js";
 
 const PACKAGE_VERSION = readOwnPackageVersion(import.meta.url);
@@ -73,6 +74,8 @@ export function createEstimatorServer(): McpServer {
   register(estimateTools.deleteEstimate.name, { description: estimateTools.deleteEstimate.description, inputSchema: estimateTools.deleteEstimate.inputSchemaZod }, (args) => estimateTools.deleteEstimate.execute(args as any));
   register(estimateTools.duplicateEstimate.name, { description: estimateTools.duplicateEstimate.description, inputSchema: estimateTools.duplicateEstimate.inputSchemaZod }, (args) => estimateTools.duplicateEstimate.execute(args as any));
   register(remodelEstimateTools.buildRemodelEstimate.name, { description: remodelEstimateTools.buildRemodelEstimate.description, inputSchema: remodelEstimateTools.buildRemodelEstimate.inputSchemaZod }, (args) => remodelEstimateTools.buildRemodelEstimate.execute(args as any));
+  register(remodelDeliverableTools.buildRemodelDeliverable.name, { description: remodelDeliverableTools.buildRemodelDeliverable.description, inputSchema: remodelDeliverableTools.buildRemodelDeliverable.inputSchemaZod }, (args) => remodelDeliverableTools.buildRemodelDeliverable.execute(args as any));
+  register(remodelDeliverableTools.draftRemodelDeliverable.name, { description: remodelDeliverableTools.draftRemodelDeliverable.description, inputSchema: remodelDeliverableTools.draftRemodelDeliverable.inputSchemaZod }, (args) => remodelDeliverableTools.draftRemodelDeliverable.execute(args as any));
 
   // --- Template tools (4) ---
   register(templateTools.saveTemplate.name, { description: templateTools.saveTemplate.description, inputSchema: templateTools.saveTemplate.inputSchemaZod }, (args) => templateTools.saveTemplate.execute(args as any));

package/src/tools/remodel-deliverable-tools.ts

@@ -0,0 +1,163 @@
+import { z } from "zod";
+import * as client from "../lib/kynver-client.js";
+
+const packageSchema = z.object({
+  intake: z.object({
+    projectName: z.string().optional(),
+    scopes: z.array(
+      z.object({
+        key: z.string(),
+        label: z.string().optional(),
+        quantity: z.number().optional(),
+        unit: z.string().optional(),
+        serviceCode: z.string().optional(),
+        budgetLump: z.number().optional(),
+        notes: z.string().optional(),
+      })
+    ),
+    expandScopeComponents: z.boolean().optional(),
+    includeStandardAlternates: z.boolean().optional(),
+    exclusions: z.array(z.string()).optional(),
+    assumptions: z.array(z.string()).optional(),
+    notes: z.string().optional(),
+  }),
+  pricing: z
+    .object({
+      contingencyPercent: z.number().optional(),
+      markupPercent: z.number().optional(),
+      profitPercent: z.number().optional(),
+    })
+    .optional(),
+});
+
+const buildDeliverableSchema = z.object({
+  preset: z.enum(["matthew-portland-2026-06"]).optional(),
+  client: z.object({
+    projectTitle: z.string(),
+    clientName: z.string().optional(),
+    preparedBy: z.string().optional(),
+    location: z.string().optional(),
+    documentType: z.string().optional(),
+    validityNote: z.string().optional(),
+  }),
+  budgetPackage: packageSchema.optional(),
+  fullPackage: packageSchema.optional(),
+  alternates: z
+    .array(
+      z.object({
+        key: z.string(),
+        label: z.string(),
+        description: z.string(),
+        budgetPlaceholder: z.number().nullable(),
+      })
+    )
+    .optional(),
+  correctionNote: z.string().optional(),
+  scopeBasis: z.array(z.string()).optional(),
+});
+
+export const buildRemodelDeliverable = {
+  name: "estimator_build_remodel_deliverable",
+  description:
+    "Build a dogfoodable residential remodel deliverable package with distinct budget/base and full/dream scope sections, separate alternates (never in headline totals), client-facing line-item descriptions, HTML/PDF handoff metadata, and MCP tool guidance for deeper detail. Use preset matthew-portland-2026-06 for the Matthew Portland fixture ($339,025 full / $167,200 bank-budget). Does not persist — use handoff JSON + reviewMarkdown to render client PDF/HTML. Supersedes hand-built deliverables that omitted structured sections. For single-scope preview only, use estimator_build_remodel_estimate. Prefer estimator_draft_remodel_deliverable when you have scope notes and want the tool to assemble the budget/full intakes for you.",
+  inputSchemaZod: buildDeliverableSchema,
+  execute: async (args: z.infer<typeof buildDeliverableSchema>): Promise<string> => {
+    if (!client.hasApiKey()) return client.noApiKeyMessage();
+    const data = await client.post(
+      "/estimator/estimates/build-remodel-deliverable",
+      args
+    );
+    return JSON.stringify(data);
+  },
+};
+
+const draftScopeSchema = z.object({
+  key: z.string().min(1),
+  label: z.string().optional(),
+  quantity: z.number().positive().optional(),
+  unit: z.string().optional(),
+  serviceCode: z.string().optional(),
+  budgetLump: z.number().nonnegative().optional(),
+  notes: z.string().optional(),
+});
+
+const draftPricingSchema = z
+  .object({
+    contingencyPercent: z.number().optional(),
+    markupPercent: z.number().optional(),
+    profitPercent: z.number().optional(),
+  })
+  .optional();
+
+const draftScopeBundleSchema = z.object({
+  label: z.string().optional(),
+  whatsIncluded: z.string().optional(),
+  projectName: z.string().optional(),
+  scopes: z.array(draftScopeSchema),
+  assumptions: z.array(z.string()).optional(),
+  exclusions: z.array(z.string()).optional(),
+  notes: z.string().optional(),
+  expandScopeComponents: z.boolean().optional(),
+  pricing: draftPricingSchema,
+});
+
+const draftBudgetBundleSchema = draftScopeBundleSchema.extend({
+  derivedFromFull: z
+    .object({
+      omitFromFullKeys: z.array(z.string()).optional(),
+      replaceWithAllowanceLump: z
+        .array(
+          z.object({
+            key: z.string().min(1),
+            label: z.string().optional(),
+            budgetLump: z.number().nonnegative(),
+            notes: z.string().optional(),
+          })
+        )
+        .optional(),
+      additionalScopes: z.array(draftScopeSchema).optional(),
+    })
+    .optional(),
+});
+
+const draftDeliverableSchema = z.object({
+  client: z.object({
+    projectTitle: z.string().min(1),
+    clientName: z.string().optional(),
+    preparedBy: z.string().optional(),
+    location: z.string().optional(),
+    documentType: z.string().optional(),
+    validityNote: z.string().optional(),
+  }),
+  fullScope: draftScopeBundleSchema,
+  budgetScope: draftBudgetBundleSchema.optional(),
+  alternates: z
+    .array(
+      z.object({
+        key: z.string(),
+        label: z.string(),
+        description: z.string(),
+        budgetPlaceholder: z.number().nullable(),
+      })
+    )
+    .optional(),
+  correctionNote: z.string().optional(),
+  scopeBasis: z.array(z.string()).optional(),
+});
+
+export const draftRemodelDeliverable = {
+  name: "estimator_draft_remodel_deliverable",
+  description:
+    "Draft a sendable residential remodel deliverable package from scope notes in a single call. Provide one fullScope.scopes list (each scope is a key like 'kitchen', 'bath_primary', 'drywall', or a custom slug, plus optional budgetLump/notes — the built-in catalog supplies label/unit/default rate). The budget package can be (a) provided explicitly via budgetScope.scopes, (b) derived from full via budgetScope.derivedFromFull.omitFromFullKeys (drop scopes from full), and/or budgetScope.derivedFromFull.replaceWithAllowanceLump (collapse component-detail rooms into single allowance lines), or (c) omitted to mirror full as collapsed allowances. Returns the full RemodelDeliverablePackage including budgetScope, fullScope, alternates, allowances, assumptions, exclusions, handoff metadata, reviewMarkdown (agent-facing), and clientMarkdown (sendable). Does not persist. Use this for fresh remodel intakes instead of estimator_build_remodel_deliverable when you have not yet authored both intakes by hand.",
+  inputSchemaZod: draftDeliverableSchema,
+  execute: async (
+    args: z.infer<typeof draftDeliverableSchema>
+  ): Promise<string> => {
+    if (!client.hasApiKey()) return client.noApiKeyMessage();
+    const data = await client.post(
+      "/estimator/estimates/draft-remodel-deliverable",
+      args
+    );
+    return JSON.stringify(data);
+  },
+};