@plitzi/sdk-server 0.32.16 → 0.32.18

package/dist/src/modules/mcp/tools/screenshot.d.ts

@@ -11,6 +11,24 @@ export declare const screenshotShape: {
             before: "before";
             after: "after";
         }>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"repeatElement">;
+        pageRef: z.ZodString;
+        ref: z.ZodString;
+        elementType: z.ZodOptional<z.ZodString>;
+        label: z.ZodOptional<z.ZodString>;
+        style: z.ZodOptional<z.ZodObject<{
+            base: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            slots: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
+        }, z.core.$strip>>;
+        parentRef: z.ZodOptional<z.ZodString>;
+        position: z.ZodOptional<z.ZodEnum<{
+            inside: "inside";
+            before: "before";
+            after: "after";
+        }>>;
+        template: z.ZodType<import('./operations/schema').TemplateElement, unknown, z.core.$ZodTypeInternals<import('./operations/schema').TemplateElement, unknown>>;
+        items: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"patchElement">;
         pageRef: z.ZodString;
@@ -223,6 +241,38 @@ export declare const screenshotShape: {
         }, z.core.$strip>>>;
         type: z.ZodLiteral<"upsertDefinition">;
         ref: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"upsertDefinitions">;
+        definitions: z.ZodRecord<z.ZodString, z.ZodObject<{
+            desktop: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+            tablet: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+            mobile: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+            states: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+                desktop: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                tablet: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                mobile: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+            }, z.core.$strip>>>;
+            variants: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+                desktop: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                tablet: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                mobile: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+            }, z.core.$strip>>>;
+            slots: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+                desktop: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                tablet: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                mobile: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                states: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+                    desktop: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                    tablet: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                    mobile: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                }, z.core.$strip>>>;
+                variants: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+                    desktop: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                    tablet: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                    mobile: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+                }, z.core.$strip>>>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         desktop: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>>;
         tablet: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>>;

package/dist/src/modules/mcp/tools/shared/expandOperations.d.ts

@@ -0,0 +1,13 @@
+import { ValidationError } from '../../types';
+import { Operation } from '../operations';
+/** Rewrites the sugar ops into the vocabulary the rest of the pipeline knows, BEFORE validation — today that is
+ *  `repeatElement`, which stands for the `upsertElement` its template + rows expand to. Everything downstream
+ *  (validator, dispatch, audit, versions) therefore stays unaware of it, and a row that renders a bad element is
+ *  reported by the ordinary element checks.
+ *
+ *  One op in, one op out: the indices the agent sent are the indices every error path names, so `operations[3]`
+ *  still means the fourth operation it wrote. */
+export declare const expandOperations: (ops: Operation[]) => {
+    operations: Operation[];
+    errors: ValidationError[];
+};

package/dist/src/modules/mcp/tools/validate.d.ts

@@ -12,6 +12,24 @@ export declare const validateShape: {
             before: "before";
             after: "after";
         }>>;
+    }, import('zod/v4/core').$strip>, import('zod').ZodObject<{
+        type: import('zod').ZodLiteral<"repeatElement">;
+        pageRef: import('zod').ZodString;
+        ref: import('zod').ZodString;
+        elementType: import('zod').ZodOptional<import('zod').ZodString>;
+        label: import('zod').ZodOptional<import('zod').ZodString>;
+        style: import('zod').ZodOptional<import('zod').ZodObject<{
+            base: import('zod').ZodOptional<import('zod').ZodArray<import('zod').ZodString>>;
+            slots: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodArray<import('zod').ZodString>>>;
+        }, import('zod/v4/core').$strip>>;
+        parentRef: import('zod').ZodOptional<import('zod').ZodString>;
+        position: import('zod').ZodOptional<import('zod').ZodEnum<{
+            inside: "inside";
+            before: "before";
+            after: "after";
+        }>>;
+        template: import('zod').ZodType<import('./operations/schema').TemplateElement, unknown, import('zod/v4/core').$ZodTypeInternals<import('./operations/schema').TemplateElement, unknown>>;
+        items: import('zod').ZodArray<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnknown>>;
     }, import('zod/v4/core').$strip>, import('zod').ZodObject<{
         type: import('zod').ZodLiteral<"patchElement">;
         pageRef: import('zod').ZodString;
@@ -224,6 +242,38 @@ export declare const validateShape: {
         }, import('zod/v4/core').$strip>>>;
         type: import('zod').ZodLiteral<"upsertDefinition">;
         ref: import('zod').ZodString;
+    }, import('zod/v4/core').$strip>, import('zod').ZodObject<{
+        type: import('zod').ZodLiteral<"upsertDefinitions">;
+        definitions: import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodObject<{
+            desktop: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber]>>>;
+            tablet: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber]>>>;
+            mobile: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber]>>>;
+            states: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodObject<{
+                desktop: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber]>>>;
+                tablet: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber]>>>;
+                mobile: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber]>>>;
+            }, import('zod/v4/core').$strip>>>;
+            variants: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodObject<{
+                desktop: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber]>>>;
+                tablet: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber]>>>;
+                mobile: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber]>>>;
+            }, import('zod/v4/core').$strip>>>;
+            slots: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodObject<{
+                desktop: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber]>>>;
+                tablet: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber]>>>;
+                mobile: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber]>>>;
+                states: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodObject<{
+                    desktop: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber]>>>;
+                    tablet: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber]>>>;
+                    mobile: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber]>>>;
+                }, import('zod/v4/core').$strip>>>;
+                variants: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodObject<{
+                    desktop: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber]>>>;
+                    tablet: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber]>>>;
+                    mobile: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber]>>>;
+                }, import('zod/v4/core').$strip>>>;
+            }, import('zod/v4/core').$strip>>>;
+        }, import('zod/v4/core').$strip>>;
     }, import('zod/v4/core').$strip>, import('zod').ZodObject<{
         desktop: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber, import('zod').ZodNull]>>>;
         tablet: import('zod').ZodOptional<import('zod').ZodRecord<import('zod').ZodString, import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber, import('zod').ZodNull]>>>;

package/dist/src/modules/oauth/metadata.d.ts

@@ -22,10 +22,17 @@ export declare const resourceMetadataUrl: (config: OAuthConfig, req: SSRRequest)
  *  describes `https://host/mcp` while the bare path describes the origin.
  *
  *  A server mounted at the ORIGIN is `https://host/`, WITH the trailing slash: a host parses the URL the user
- *  typed before it does anything with it, and an empty path renders as `/` — that normalized form is what the
- *  client sends back as the `resource` parameter (asserted in the connector e2e). A document claiming to be
- *  `https://host` then disagrees with the request made against it, and Claude's connector drops the grant it
- *  just completed — it takes the token and never opens the session. */
+ *  typed before it does anything with it, and an empty path renders as `/` — Claude's connector was observed
+ *  asking for exactly `resource=https%3A%2F%2Fhost%2F`, so that is the form the document must claim.
+ *
+ *  It does NOT make a bare-origin connector work, and nothing here can. Claude's remote-connector service will
+ *  not open a session against an MCP endpoint whose URL has no path: the whole grant succeeds — discovery,
+ *  registration, consent, a 200 from /token with the scope it asked for — and then it reports
+ *  `McpAuthorizationError` ("the integration rejected the credentials it just issued") without ever presenting
+ *  the bearer. Verified against the same deployment, minutes apart: at /mcp the token is followed by
+ *  `initialize`, at / nothing follows it, in the ingress log as well as this server's. Claiming `https://host/mcp`
+ *  from the bare document would only fail sooner — a client checks that the resource it is handed is no MORE
+ *  specific than the URL it holds. Publish the connector URL WITH its path. */
 export declare const protectedResourceMetadata: (config: OAuthConfig, req: SSRRequest) => Record<string, unknown>;
 /** RFC 8414. Public clients with PKCE only: a desktop host stores no secret, so `none` is the sole endpoint auth
  *  method and S256 the sole challenge method. `offline_access` is advertised whenever refresh grants are issued,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plitzi/sdk-server",
-  "version": "0.32.16",
+  "version": "0.32.18",
   "license": "AGPL-3.0",
   "files": [
     "dist"
@@ -29,9 +29,9 @@
   "dependencies": {
     "@modelcontextprotocol/ext-apps": "^1.7.5",
     "@modelcontextprotocol/sdk": "^1.30.0",
-    "@plitzi/plitzi-sdk": "0.32.16",
-    "@plitzi/sdk-schema": "0.32.16",
-    "@plitzi/sdk-shared": "0.32.16",
+    "@plitzi/plitzi-sdk": "0.32.18",
+    "@plitzi/sdk-schema": "0.32.18",
+    "@plitzi/sdk-shared": "0.32.18",
     "ejs": "^6.0.1",
     "esbuild": "^0.28.1",
     "zod": "^4.4.3"
@@ -44,7 +44,7 @@
     "@types/ejs": "^3.1.5",
     "@types/jsdom": "^28.0.3",
     "@types/node": "^26.1.2",
-    "@types/react": "^19.2.17",
+    "@types/react": "^19.2.18",
     "@vitejs/plugin-react": "^6.0.5",
     "@vitest/coverage-v8": "^4.1.10",
     "eslint": "^9.39.5",