@qverisai/mcp 0.10.0 → 0.12.0

package/dist/output-schemas.js

@@ -40,6 +40,16 @@ const executeResponseSchema = {
     },
     additionalProperties: true,
 };
+const probeResponseSchema = {
+    type: 'object',
+    properties: {
+        schema: { type: 'object', additionalProperties: true },
+        quote: { type: 'object', additionalProperties: true },
+        coverage: { type: 'object', additionalProperties: true },
+        sample: { type: 'object', additionalProperties: true },
+    },
+    additionalProperties: true,
+};
 const auditResponseSchema = {
     type: 'object',
     properties: {
@@ -54,6 +64,7 @@ const auditResponseSchema = {
 export const TOOL_OUTPUT_SCHEMAS = {
     discover: searchResponseSchema,
     inspect: searchResponseSchema,
+    probe: probeResponseSchema,
     call: executeResponseSchema,
     usage_history: auditResponseSchema,
     credits_ledger: auditResponseSchema,

package/dist/output-schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"output-schemas.js","sourceRoot":"","sources":["../src/output-schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,oBAAoB,GAAG;IAC3B,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yCAAyC,EAAE;QACrF,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,OAAO,EAAE;YACP,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC/B,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACnC,aAAa,EAAE,EAAE;iBAClB;gBACD,oBAAoB,EAAE,IAAI;aAC3B;SACF;KACF;IACD,oBAAoB,EAAE,IAAI;CAClB,CAAC;AAEX,MAAM,qBAAqB,GAAG;IAC5B,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE;QACtF,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC5B,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE;QACvD,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KACtC;IACD,oBAAoB,EAAE,IAAI;CAClB,CAAC;AAEX,MAAM,mBAAmB,GAAG;IAC1B,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACjC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACnC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAAE;KAChF;IACD,oBAAoB,EAAE,IAAI;CAClB,CAAC;AAEX,4EAA4E;AAC5E,MAAM,CAAC,MAAM,mBAAmB,GAA2B;IACzD,QAAQ,EAAE,oBAAoB;IAC9B,OAAO,EAAE,oBAAoB;IAC7B,IAAI,EAAE,qBAAqB;IAC3B,aAAa,EAAE,mBAAmB;IAClC,cAAc,EAAE,mBAAmB;CACpC,CAAC"}
+{"version":3,"file":"output-schemas.js","sourceRoot":"","sources":["../src/output-schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,oBAAoB,GAAG;IAC3B,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yCAAyC,EAAE;QACrF,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,OAAO,EAAE;YACP,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC/B,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACnC,aAAa,EAAE,EAAE;iBAClB;gBACD,oBAAoB,EAAE,IAAI;aAC3B;SACF;KACF;IACD,oBAAoB,EAAE,IAAI;CAClB,CAAC;AAEX,MAAM,qBAAqB,GAAG;IAC5B,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE;QACtF,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC5B,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE;QACvD,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KACtC;IACD,oBAAoB,EAAE,IAAI;CAClB,CAAC;AAEX,MAAM,mBAAmB,GAAG;IAC1B,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE;QACtD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE;QACrD,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE;QACxD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE;KACvD;IACD,oBAAoB,EAAE,IAAI;CAClB,CAAC;AAEX,MAAM,mBAAmB,GAAG;IAC1B,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACjC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACnC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAAE;KAChF;IACD,oBAAoB,EAAE,IAAI;CAClB,CAAC;AAEX,4EAA4E;AAC5E,MAAM,CAAC,MAAM,mBAAmB,GAA2B;IACzD,QAAQ,EAAE,oBAAoB;IAC9B,OAAO,EAAE,oBAAoB;IAC7B,KAAK,EAAE,mBAAmB;IAC1B,IAAI,EAAE,qBAAqB;IAC3B,aAAa,EAAE,mBAAmB;IAClC,cAAc,EAAE,mBAAmB;CACpC,CAAC"}

package/dist/server-card.d.ts

@@ -37,10 +37,52 @@ export interface ServerCardInfo {
     };
     /** Protocol versions the server negotiates (from the MCP SDK). */
     protocolVersions?: string[];
+    /**
+     * Header inputs advertised on the card's remote, e.g. a Bearer template
+     * built with {@link bearerAuthHeaderInput}. Only used when a remote URL is
+     * passed to {@link buildServerCard}; secret inputs must stay templated —
+     * {@link buildServerCard} rejects literal secret material.
+     */
+    remoteHeaders?: ServerCardKeyValueInput[];
+}
+/**
+ * A user-supplied or pre-set input value, used for {@link ServerCardRemote}
+ * URL variables and header values (schema `$defs/Input`).
+ */
+export interface ServerCardInput {
+    /** Allowed values for the input. If provided, the user must select one. */
+    choices?: string[];
+    /** Default value. SHOULD be a valid value for the input. */
+    default?: string;
+    /** Human-readable explanation of the input. */
+    description?: string;
+    /** Input format hint. */
+    format?: 'boolean' | 'filepath' | 'number' | 'string';
+    /** Whether the input must be supplied for the connection to succeed. */
+    isRequired?: boolean;
+    /** Whether the input is a secret (clients must handle it securely). */
+    isSecret?: boolean;
+    /** Placeholder shown during configuration. */
+    placeholder?: string;
+    /** Pre-set value; `{curly_braces}` identifiers substitute from `variables`. */
+    value?: string;
+}
+/**
+ * A named {@link ServerCardInput} — used for HTTP headers — whose `value` may
+ * reference `{variable}` placeholders (schema `$defs/KeyValueInput`).
+ */
+export interface ServerCardKeyValueInput extends ServerCardInput {
+    name: string;
+    /** Variables referenced as `{placeholders}` inside `value`. */
+    variables?: Record<string, ServerCardInput>;
 }
 export interface ServerCardRemote {
     type: 'streamable-http';
     url: string;
+    /** HTTP headers required or accepted when connecting to this remote. */
+    headers?: ServerCardKeyValueInput[];
+    /** Variables referenced as `{placeholders}` in `url`. */
+    variables?: Record<string, ServerCardInput>;
     supportedProtocolVersions?: string[];
 }
 export interface ServerCard {
@@ -67,10 +109,27 @@ export interface McpCatalog {
     specVersion: typeof CATALOG_SPEC_VERSION;
     entries: McpCatalogEntry[];
 }
+/**
+ * Authorization header template for bearer-credential remotes.
+ *
+ * The credential itself never appears in the card: the header value is the
+ * template `Bearer {<variableName>}` and the variable is declared
+ * required + secret, so discovery clients prompt for it and store it securely.
+ */
+export declare function bearerAuthHeaderInput(options?: {
+    /** Template variable name (default `api_key`). */
+    variableName?: string;
+    /** Header description shown by configuration UIs. */
+    description?: string;
+    /** Description of the secret variable itself. */
+    variableDescription?: string;
+}): ServerCardKeyValueInput;
 /**
  * Build the Server Card describing this server's identity and remote endpoint.
  *
- * @param info - Static metadata (name/version/description/...).
+ * @param info - Static metadata (name/version/description/...). When
+ *   `info.remoteHeaders` is set, the headers are attached to the remote after
+ *   the no-literal-secrets check.
  * @param remoteUrl - The absolute Streamable HTTP endpoint URL clients connect
  *   to (e.g. `https://mcp.example.com/mcp`).
  */

package/dist/server-card.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server-card.d.ts","sourceRoot":"","sources":["../src/server-card.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,eAAO,MAAM,sBAAsB,8EAA8E,CAAC;AAClH,eAAO,MAAM,sBAAsB,qCAAqC,CAAC;AACzE,eAAO,MAAM,YAAY,kCAAkC,CAAC;AAC5D,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAE5C,gFAAgF;AAChF,MAAM,WAAW,cAAc;IAC7B,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,iBAAiB,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,sBAAsB,CAAC;IACzC,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,OAAO,oBAAoB,CAAC;IACzC,OAAO,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,UAAU,CAkBpF;AAcD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,CAc9E"}
+{"version":3,"file":"server-card.d.ts","sourceRoot":"","sources":["../src/server-card.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,eAAO,MAAM,sBAAsB,8EAA8E,CAAC;AAClH,eAAO,MAAM,sBAAsB,qCAAqC,CAAC;AACzE,eAAO,MAAM,YAAY,kCAAkC,CAAC;AAC5D,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAE5C,gFAAgF;AAChF,MAAM,WAAW,cAAc;IAC7B,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,uBAAuB,EAAE,CAAC;CAC3C;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yBAAyB;IACzB,MAAM,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACtD,wEAAwE;IACxE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,uEAAuE;IACvE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAwB,SAAQ,eAAe;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,iBAAiB,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,wEAAwE;IACxE,OAAO,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACpC,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC5C,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,sBAAsB,CAAC;IACzC,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,OAAO,oBAAoB,CAAC;IACzC,OAAO,EAAE,eAAe,EAAE,CAAC;CAC5B;AAsDD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,GAAE;IACP,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,mBAAmB,CAAC,EAAE,MAAM,CAAC;CACzB,GACL,uBAAuB,CAmBzB;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,UAAU,CAsBpF;AAcD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,CAc9E"}

package/dist/server-card.js

@@ -22,10 +22,83 @@ export const SERVER_CARD_SCHEMA_URL = 'https://static.modelcontextprotocol.io/sc
 export const SERVER_CARD_MEDIA_TYPE = 'application/mcp-server-card+json';
 export const CATALOG_PATH = '/.well-known/mcp/catalog.json';
 export const CATALOG_SPEC_VERSION = 'draft';
+/** `{variable}` placeholder syntax accepted by the Server Card schema. */
+const TEMPLATE_PLACEHOLDER = /\{[a-zA-Z_][a-zA-Z0-9_]*\}/;
+const VARIABLE_NAME = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
+/**
+ * Reject header metadata that would publish secret material in the card.
+ *
+ * The card is a public, unauthenticated discovery document: a secret may only
+ * be *described* (name + required/secret flags), never carried. Secret header
+ * values must be templates referencing a `{variable}` — with nothing beyond a
+ * short alphabetic scheme prefix (e.g. `Bearer `) around the placeholders, so
+ * a literal credential can't ride alongside one — and secret variables must
+ * not embed a literal `value` or `default`.
+ */
+function assertHeadersCarryNoSecrets(headers) {
+    for (const header of headers) {
+        if (header.isSecret) {
+            if (header.default !== undefined) {
+                throw new Error(`Server Card header "${header.name}": secret headers must not declare a literal default.`);
+            }
+            if (header.value !== undefined) {
+                if (!TEMPLATE_PLACEHOLDER.test(header.value)) {
+                    throw new Error(`Server Card header "${header.name}": secret header values must reference a {variable} placeholder, ` +
+                        `never a literal credential.`);
+                }
+                // After stripping placeholders, only a single short alphabetic scheme
+                // token (e.g. "Bearer", "Basic") may remain: hyphens, digits, and
+                // multiple words are how literal credentials ride along a template.
+                const residue = header.value.replace(new RegExp(TEMPLATE_PLACEHOLDER, 'g'), ' ').trim();
+                if (!/^[A-Za-z]{0,16}$/.test(residue)) {
+                    throw new Error(`Server Card header "${header.name}": secret header values must only contain {variable} placeholders ` +
+                        `and an optional short alphabetic scheme prefix (e.g. "Bearer {api_key}").`);
+                }
+            }
+        }
+        for (const [name, variable] of Object.entries(header.variables ?? {})) {
+            // Untyped embedder config can carry null entries; skip them here — the
+            // schema validation tests reject them as structurally invalid anyway.
+            if (variable && variable.isSecret && (variable.value !== undefined || variable.default !== undefined)) {
+                throw new Error(`Server Card header "${header.name}" variable "${name}": secret variables must not embed a ` +
+                    `literal value or default.`);
+            }
+        }
+    }
+}
+/**
+ * Authorization header template for bearer-credential remotes.
+ *
+ * The credential itself never appears in the card: the header value is the
+ * template `Bearer {<variableName>}` and the variable is declared
+ * required + secret, so discovery clients prompt for it and store it securely.
+ */
+export function bearerAuthHeaderInput(options = {}) {
+    const variableName = options.variableName ?? 'api_key';
+    if (!VARIABLE_NAME.test(variableName)) {
+        throw new Error(`Invalid Server Card template variable name: "${variableName}".`);
+    }
+    return {
+        name: 'Authorization',
+        description: options.description ?? 'Bearer authentication for this remote endpoint.',
+        isRequired: true,
+        isSecret: true,
+        value: `Bearer {${variableName}}`,
+        variables: {
+            [variableName]: {
+                description: options.variableDescription ?? 'Secret credential for this remote endpoint.',
+                isRequired: true,
+                isSecret: true,
+            },
+        },
+    };
+}
 /**
  * Build the Server Card describing this server's identity and remote endpoint.
  *
- * @param info - Static metadata (name/version/description/...).
+ * @param info - Static metadata (name/version/description/...). When
+ *   `info.remoteHeaders` is set, the headers are attached to the remote after
+ *   the no-literal-secrets check.
  * @param remoteUrl - The absolute Streamable HTTP endpoint URL clients connect
  *   to (e.g. `https://mcp.example.com/mcp`).
  */
@@ -38,6 +111,10 @@ export function buildServerCard(info, remoteUrl) {
     };
     if (remoteUrl) {
         const remote = { type: 'streamable-http', url: remoteUrl };
+        if (info.remoteHeaders && info.remoteHeaders.length > 0) {
+            assertHeadersCarryNoSecrets(info.remoteHeaders);
+            remote.headers = info.remoteHeaders;
+        }
         if (info.protocolVersions && info.protocolVersions.length > 0) {
             remote.supportedProtocolVersions = info.protocolVersions;
         }

package/dist/server-card.js.map

@@ -1 +1 @@
-{"version":3,"file":"server-card.js","sourceRoot":"","sources":["../src/server-card.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,2EAA2E,CAAC;AAClH,MAAM,CAAC,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AACzE,MAAM,CAAC,MAAM,YAAY,GAAG,+BAA+B,CAAC;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AA4C5C;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAoB,EAAE,SAAkB;IACtE,MAAM,IAAI,GAAe;QACvB,OAAO,EAAE,sBAAsB;QAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC;IACF,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAqB,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;QAC7E,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,MAAM,CAAC,yBAAyB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACxC,IAAI,IAAI,CAAC,UAAU;QAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACvD,IAAI,IAAI,CAAC,UAAU;QAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,SAAS,eAAe,CAAC,IAAoB;IAC3C,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAoB,EAAE,OAAe;IAChE,gFAAgF;IAChF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC;IAC3D,OAAO;QACL,WAAW,EAAE,oBAAoB;QACjC,OAAO,EAAE;YACP;gBACE,UAAU,EAAE,WAAW,eAAe,CAAC,IAAI,CAAC,IAAI,UAAU,EAAE;gBAC5D,WAAW,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI;gBACpC,SAAS,EAAE,sBAAsB;gBACjC,GAAG,EAAE,OAAO;aACb;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"server-card.js","sourceRoot":"","sources":["../src/server-card.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,2EAA2E,CAAC;AAClH,MAAM,CAAC,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AACzE,MAAM,CAAC,MAAM,YAAY,GAAG,+BAA+B,CAAC;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAwF5C,0EAA0E;AAC1E,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AAC1D,MAAM,aAAa,GAAG,0BAA0B,CAAC;AAEjD;;;;;;;;;GASG;AACH,SAAS,2BAA2B,CAAC,OAAkC;IACrE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,IAAI,uDAAuD,CAAC,CAAC;YAC7G,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC7C,MAAM,IAAI,KAAK,CACb,uBAAuB,MAAM,CAAC,IAAI,mEAAmE;wBACnG,6BAA6B,CAChC,CAAC;gBACJ,CAAC;gBACD,sEAAsE;gBACtE,kEAAkE;gBAClE,oEAAoE;gBACpE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,oBAAoB,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;gBACxF,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtC,MAAM,IAAI,KAAK,CACb,uBAAuB,MAAM,CAAC,IAAI,oEAAoE;wBACpG,2EAA2E,CAC9E,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;YACtE,uEAAuE;YACvE,sEAAsE;YACtE,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,EAAE,CAAC;gBACtG,MAAM,IAAI,KAAK,CACb,uBAAuB,MAAM,CAAC,IAAI,eAAe,IAAI,uCAAuC;oBAC1F,2BAA2B,CAC9B,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAOI,EAAE;IAEN,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,SAAS,CAAC;IACvD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,gDAAgD,YAAY,IAAI,CAAC,CAAC;IACpF,CAAC;IACD,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,iDAAiD;QACrF,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,WAAW,YAAY,GAAG;QACjC,SAAS,EAAE;YACT,CAAC,YAAY,CAAC,EAAE;gBACd,WAAW,EAAE,OAAO,CAAC,mBAAmB,IAAI,6CAA6C;gBACzF,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,IAAI;aACf;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,IAAoB,EAAE,SAAkB;IACtE,MAAM,IAAI,GAAe;QACvB,OAAO,EAAE,sBAAsB;QAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC;IACF,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAqB,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;QAC7E,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,2BAA2B,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAChD,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC;QACtC,CAAC;QACD,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,MAAM,CAAC,yBAAyB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACxC,IAAI,IAAI,CAAC,UAAU;QAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACvD,IAAI,IAAI,CAAC,UAAU;QAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,SAAS,eAAe,CAAC,IAAoB;IAC3C,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAoB,EAAE,OAAe;IAChE,gFAAgF;IAChF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC;IAC3D,OAAO;QACL,WAAW,EAAE,oBAAoB;QACjC,OAAO,EAAE;YACP;gBACE,UAAU,EAAE,WAAW,eAAe,CAAC,IAAI,CAAC,IAAI,UAAU,EAAE;gBAC5D,WAAW,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI;gBACpC,SAAS,EAAE,sBAAsB;gBACjC,GAAG,EAAE,OAAO;aACb;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/execute.d.ts

@@ -44,6 +44,8 @@ export interface ExecuteToolInput {
      * @minimum -1 (-1 means no limit)
      */
     max_response_size?: number;
+    /** Server-side result projection. Omit for the legacy/full response. */
+    respond_with?: 'full' | 'summary' | `fields:${string}`;
 }
 /**
  * JSON Schema for the call tool input.
@@ -73,6 +75,11 @@ export declare const executeToolSchema: {
             description: string;
             default: number;
         };
+        respond_with: {
+            type: string;
+            pattern: string;
+            description: string;
+        };
     };
     required: string[];
 };

package/dist/tools/execute.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../../src/tools/execute.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;;;OAMG;IACH,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAExC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;CAoC7B,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,gBAAgB,EACvB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,eAAe,CAAC,CAa1B"}
+{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../../src/tools/execute.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;;;OAMG;IACH,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAExC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,MAAM,EAAE,CAAC;CACxD;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyC7B,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,gBAAgB,EACvB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,eAAe,CAAC,CAc1B"}

package/dist/tools/execute.js

@@ -40,6 +40,11 @@ export const executeToolSchema = {
                 'Use -1 for no limit. Default is 20480 (20KB).',
             default: 20480,
         },
+        respond_with: {
+            type: 'string',
+            pattern: '^(full|summary|fields:.+)$',
+            description: 'Server-side result projection: "full", "summary", or "fields:<JSONPath,...>". Omit for full.',
+        },
     },
     required: ['tool_id', 'search_id', 'params_to_tool'],
 };
@@ -61,6 +66,7 @@ export async function executeExecuteTool(client, input, defaultSessionId) {
         session_id: input.session_id ?? defaultSessionId,
         parameters: input.params_to_tool,
         max_response_size: input.max_response_size,
+        ...(input.respond_with !== undefined && { respond_with: input.respond_with }),
     });
     return response;
 }

package/dist/tools/execute.js.map

@@ -1 +1 @@
-{"version":3,"file":"execute.js","sourceRoot":"","sources":["../../src/tools/execute.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA+CH;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,QAAiB;IACvB,UAAU,EAAE;QACV,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,gFAAgF;SAC9F;QACD,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,oEAAoE;gBACpE,2DAA2D;SAC9D;QACD,cAAc,EAAE;YACd,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,yDAAyD;gBACzD,sDAAsD;gBACtD,gDAAgD;SACnD;QACD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,iDAAiD;gBACjD,6DAA6D;SAChE;QACD,iBAAiB,EAAE;YACjB,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,0CAA0C;gBAC1C,6FAA6F;gBAC7F,+CAA+C;YACjD,OAAO,EAAE,KAAK;SACf;KACF;IACD,QAAQ,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,gBAAgB,CAAC;CACrD,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAoB,EACpB,KAAuB,EACvB,gBAAwB;IAExB,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE;QACvD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,gBAAgB;QAChD,UAAU,EAAE,KAAK,CAAC,cAAc;QAChC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;KAC3C,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"execute.js","sourceRoot":"","sources":["../../src/tools/execute.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAkDH;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,QAAiB;IACvB,UAAU,EAAE;QACV,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,gFAAgF;SAC9F;QACD,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,oEAAoE;gBACpE,2DAA2D;SAC9D;QACD,cAAc,EAAE;YACd,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,yDAAyD;gBACzD,sDAAsD;gBACtD,gDAAgD;SACnD;QACD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,iDAAiD;gBACjD,6DAA6D;SAChE;QACD,iBAAiB,EAAE;YACjB,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,0CAA0C;gBAC1C,6FAA6F;gBAC7F,+CAA+C;YACjD,OAAO,EAAE,KAAK;SACf;QACD,YAAY,EAAE;YACZ,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,4BAA4B;YACrC,WAAW,EAAE,8FAA8F;SAC5G;KACF;IACD,QAAQ,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,gBAAgB,CAAC;CACrD,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAoB,EACpB,KAAuB,EACvB,gBAAwB;IAExB,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE;QACvD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,gBAAgB;QAChD,UAAU,EAAE,KAAK,CAAC,cAAc;QAChC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;KAC9E,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC"}

package/dist/tools/probe.d.ts

@@ -0,0 +1,43 @@
+import type { QverisClient } from '../api/client.js';
+import type { ProbeCheck, ProbeLiveBudget, ProbeResponse } from '../types.js';
+export interface ProbeToolInput {
+    tool_id: string;
+    parameters?: Record<string, unknown>;
+    checks?: ProbeCheck[];
+    live_budget?: ProbeLiveBudget;
+}
+export declare const probeToolSchema: {
+    type: "object";
+    properties: {
+        tool_id: {
+            type: string;
+            minLength: number;
+            description: string;
+        };
+        parameters: {
+            type: string;
+            additionalProperties: boolean;
+            default: {};
+            description: string;
+        };
+        checks: {
+            type: string;
+            items: {
+                type: string;
+                enum: string[];
+            };
+            minItems: number;
+            default: string[];
+            description: string;
+        };
+        live_budget: {
+            type: string;
+            enum: string[];
+            default: string;
+            description: string;
+        };
+    };
+    required: string[];
+};
+export declare function executeProbeTool(client: QverisClient, input: ProbeToolInput): Promise<ProbeResponse>;
+//# sourceMappingURL=probe.d.ts.map

package/dist/tools/probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../../src/tools/probe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE9E,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC;IACtB,WAAW,CAAC,EAAE,eAAe,CAAC;CAC/B;AAED,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6B3B,CAAC;AAEF,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAM1G"}

package/dist/tools/probe.js

@@ -0,0 +1,38 @@
+export const probeToolSchema = {
+    type: 'object',
+    properties: {
+        tool_id: {
+            type: 'string',
+            minLength: 1,
+            description: 'Capability ID to validate without executing it.',
+        },
+        parameters: {
+            type: 'object',
+            additionalProperties: true,
+            default: {},
+            description: 'Candidate parameters to validate.',
+        },
+        checks: {
+            type: 'array',
+            items: { type: 'string', enum: ['schema', 'quote', 'coverage', 'sample'] },
+            minItems: 1,
+            default: ['schema'],
+            description: 'Probe checks to request. Schema and quote are implemented; coverage and sample may be unknown.',
+        },
+        live_budget: {
+            type: 'string',
+            enum: ['none', 'metadata', 'sampled'],
+            default: 'none',
+            description: 'Probe budget. Probe does not execute the capability or consume credits.',
+        },
+    },
+    required: ['tool_id'],
+};
+export async function executeProbeTool(client, input) {
+    return client.probeTool(input.tool_id, {
+        parameters: input.parameters ?? {},
+        checks: input.checks ?? ['schema'],
+        live_budget: input.live_budget ?? 'none',
+    });
+}
+//# sourceMappingURL=probe.js.map

package/dist/tools/probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../src/tools/probe.ts"],"names":[],"mappings":"AAUA,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,QAAiB;IACvB,UAAU,EAAE;QACV,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,iDAAiD;SAC/D;QACD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,IAAI;YAC1B,OAAO,EAAE,EAAE;YACX,WAAW,EAAE,mCAAmC;SACjD;QACD,MAAM,EAAE;YACN,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE;YAC1E,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,CAAC,QAAQ,CAAC;YACnB,WAAW,EAAE,gGAAgG;SAC9G;QACD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC;YACrC,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,yEAAyE;SACvF;KACF;IACD,QAAQ,EAAE,CAAC,SAAS,CAAC;CACtB,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAoB,EAAE,KAAqB;IAChF,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE;QACrC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE;QAClC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,MAAM;KACzC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/search.d.ts

@@ -33,6 +33,10 @@ export interface SearchToolsInput {
      * If not provided, the server will use an auto-generated session ID.
      */
     session_id?: string;
+    /** Compact routing cards or the complete result shape. Omit for full. */
+    view?: 'routing' | 'full';
+    /** Response language. Omit to use server-side negotiation. */
+    lang?: 'zh' | 'en';
 }
 /**
  * JSON Schema for the discover tool input.
@@ -56,6 +60,16 @@ export declare const searchToolsSchema: {
             type: string;
             description: string;
         };
+        view: {
+            type: string;
+            enum: string[];
+            description: string;
+        };
+        lang: {
+            type: string;
+            enum: string[];
+            description: string;
+        };
     };
     required: string[];
 };

package/dist/tools/search.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/tools/search.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;OAOG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;CAyB7B,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,gBAAgB,EACvB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,cAAc,CAAC,CAQzB"}
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/tools/search.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;OAOG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,yEAAyE;IACzE,IAAI,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAE1B,8DAA8D;IAC9D,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACpB;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoC7B,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,gBAAgB,EACvB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,cAAc,CAAC,CAUzB"}

package/dist/tools/search.js

@@ -31,6 +31,16 @@ export const searchToolsSchema = {
             description: 'Session identifier for tracking user sessions. ' +
                 'If not provided, an auto-generated session ID will be used.',
         },
+        view: {
+            type: 'string',
+            enum: ['routing', 'full'],
+            description: 'Response projection. "routing" returns compact routing cards; "full" or omitted returns complete results.',
+        },
+        lang: {
+            type: 'string',
+            enum: ['zh', 'en'],
+            description: 'Response language. Omit to use server-side language negotiation.',
+        },
     },
     required: ['query'],
 };
@@ -47,6 +57,8 @@ export async function executeSearchTools(client, input, defaultSessionId) {
         query: input.query,
         limit: input.limit ?? 20,
         session_id: input.session_id ?? defaultSessionId,
+        ...(input.view !== undefined && { view: input.view }),
+        ...(input.lang !== undefined && { lang: input.lang }),
     });
     return response;
 }

package/dist/tools/search.js.map

@@ -1 +1 @@
-{"version":3,"file":"search.js","sourceRoot":"","sources":["../../src/tools/search.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAkCH;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,QAAiB;IACvB,UAAU,EAAE;QACV,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,kEAAkE;gBAClE,gGAAgG;gBAChG,+DAA+D;SAClE;QACD,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,6CAA6C;YAC1D,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,GAAG;SACb;QACD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,iDAAiD;gBACjD,6DAA6D;SAChE;KACF;IACD,QAAQ,EAAE,CAAC,OAAO,CAAC;CACpB,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAoB,EACpB,KAAuB,EACvB,gBAAwB;IAExB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC;QACxC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,gBAAgB;KACjD,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../../src/tools/search.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAwCH;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,QAAiB;IACvB,UAAU,EAAE;QACV,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,kEAAkE;gBAClE,gGAAgG;gBAChG,+DAA+D;SAClE;QACD,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,6CAA6C;YAC1D,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,GAAG;SACb;QACD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,iDAAiD;gBACjD,6DAA6D;SAChE;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;YACzB,WAAW,EACT,2GAA2G;SAC9G;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;YAClB,WAAW,EAAE,kEAAkE;SAChF;KACF;IACD,QAAQ,EAAE,CAAC,OAAO,CAAC;CACpB,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAoB,EACpB,KAAuB,EACvB,gBAAwB;IAExB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC;QACxC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,gBAAgB;QAChD,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACrD,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;KACtD,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/types.d.ts

@@ -16,13 +16,16 @@ export interface SearchRequest {
     query: string;
     /**
      * Maximum number of results to return.
+     * Minimum: 1. Maximum: 100.
      * @default 20
-     * @minimum 1
-     * @maximum 100
      */
     limit?: number;
     /** Session identifier for tracking user sessions. */
     session_id?: string;
+    /** Response projection. Omit for the legacy/full response shape. */
+    view?: 'routing' | 'full';
+    /** Response language. Omit to use server-side language negotiation. */
+    lang?: 'zh' | 'en';
 }
 /**
  * Parameter definition for a tool.
@@ -131,9 +134,17 @@ export interface ToolInfo {
     /** Unique identifier for the tool (used in call) */
     tool_id: string;
     /** Human-readable display name */
-    name: string;
+    name?: string;
     /** Detailed description of what the tool does */
-    description: string;
+    description?: string;
+    /** Compact capability label returned by the routing projection. */
+    capability?: string;
+    /** Compact cost class returned by the routing projection. */
+    cost_class?: string;
+    /** Compact reliability grade returned by the routing projection. */
+    reliability?: string;
+    /** Whether the capability supports point-in-time requests. */
+    as_of_support?: boolean;
     /** Tool categories/tags: category objects, or plain strings in legacy responses */
     categories?: Array<string | ToolCategory>;
     /** Standardized capability descriptors with coverage tags */
@@ -240,10 +251,12 @@ export interface ExecuteRequest {
      * Maximum size of response data in bytes.
      * If the tool generates data longer than this, it will be truncated
      * and a download URL will be provided for the full content.
+     * Minimum: -1 (`-1` means no limit).
      * @default 20480 (20KB)
-     * @minimum -1 (-1 means no limit)
      */
     max_response_size?: number;
+    /** Server-side result projection. Omit for the legacy/full response. */
+    respond_with?: 'full' | 'summary' | `fields:${string}`;
 }
 /**
  * Result data when the response fits within max_response_size.
@@ -275,10 +288,28 @@ export interface ExecuteResultTruncated {
      */
     content_schema?: Record<string, unknown>;
 }
+/** Compact result returned by `respond_with: "summary"`. */
+export interface ExecuteResultSummary {
+    respond_with: 'summary';
+    content_schema?: Record<string, unknown>;
+    summary?: {
+        size_bytes?: number;
+        row_count?: number;
+        fields?: string[];
+        [key: string]: unknown;
+    };
+    full_content_file_url?: string;
+    message?: string;
+}
+/** Selected result fields returned by a `fields:<JSONPath,...>` projection. */
+export interface ExecuteResultFields {
+    respond_with: `fields:${string}`;
+    data?: unknown;
+}
 /**
  * Union type for execution results (either full data or truncated).
  */
-export type ExecuteResult = ExecuteResultData | ExecuteResultTruncated;
+export type ExecuteResult = ExecuteResultData | ExecuteResultTruncated | ExecuteResultSummary | ExecuteResultFields | unknown[] | string | number | boolean | null;
 /**
  * Response from the Execute Tool API.
  */
@@ -286,9 +317,9 @@ export interface ExecuteResponse {
     /** Unique identifier for this execution record */
     execution_id: string;
     /** The tool that was executed */
-    tool_id: string;
+    tool_id?: string;
     /** The parameters that were passed to the tool */
-    parameters: Record<string, unknown>;
+    parameters?: Record<string, unknown>;
     /**
      * The execution result.
      * Contains either `data` (if within size limit) or truncation info.
@@ -316,6 +347,40 @@ export interface ExecuteResponse {
     /** Timestamp of execution (ISO 8601 format) */
     created_at?: string;
 }
+export type ProbeCheck = 'schema' | 'quote' | 'coverage' | 'sample';
+export type ProbeLiveBudget = 'none' | 'metadata' | 'sampled';
+export interface ProbeRequest {
+    parameters?: Record<string, unknown>;
+    checks?: ProbeCheck[];
+    live_budget?: ProbeLiveBudget;
+}
+export interface ProbeSchemaViolation {
+    param?: string | null;
+    type: string;
+    message: string;
+}
+export interface ProbeSchemaResult {
+    valid: boolean;
+    violations?: ProbeSchemaViolation[] | null;
+    note?: string | null;
+}
+export interface ProbeQuoteResult {
+    estimate_credits?: number | null;
+    currency: 'credits';
+    exact: boolean;
+    basis?: string | null;
+    detail?: Record<string, unknown> | null;
+}
+export interface ProbeUnknownResult {
+    verdict: 'unknown';
+    reason: string;
+}
+export interface ProbeResponse {
+    schema?: ProbeSchemaResult;
+    quote?: ProbeQuoteResult;
+    coverage?: ProbeUnknownResult;
+    sample?: ProbeUnknownResult;
+}
 export interface ApiEnvelope<T> {
     status: string;
     message?: string;
@@ -436,7 +501,7 @@ export interface QverisClientConfig {
 /**
  * Error response from the Qveris API.
  */
-export type ApiOperation = 'discover' | 'inspect' | 'call' | 'credits' | 'usage_history' | 'credits_ledger';
+export type ApiOperation = 'discover' | 'inspect' | 'probe' | 'call' | 'credits' | 'usage_history' | 'credits_ledger';
 export type ApiErrorType = 'http_error' | 'invalid_json' | 'timeout' | 'network_error';
 export interface ApiObservability {
     source: 'qveris_api';