@runa-cmd/mcp 0.2.0-beta.0 → 0.2.0-beta.2

package/README.md

@@ -7,7 +7,7 @@ Every command becomes an MCP tool. Zod schemas pass directly to the MCP SDK —
 ## Install
 
 ```bash
-pnpm add @runa-cmd/mcp
+pnpm add @runa-cmd/mcp@beta
 ```
 
 > Peer dependencies: `@runa-cmd/core` and `zod ^4.0.0`.
@@ -52,15 +52,18 @@ $ my-tool --mcp
 
 When `--mcp` is passed, the CLI starts a stdio-based MCP server instead of normal execution. AI agents can then discover and call your commands as tools.
 
+For a CLI made of one command, use `runCLI(deploy, { plugins: [mcpPlugin()] })`.
+
 ## How It Works
 
 1. The plugin adds a `--mcp` global boolean flag
 2. On `onGlobalFlags` hook, if `--mcp` is true:
-   - Introspects the CLI schema via `getSchema()`
-   - Gets the live command tree via `getCommands()`
    - Maps each leaf command to an MCP tool
-   - Starts an MCP server over stdio transport
-   - Short-circuits normal CLI execution
+   - Checks that it can run itself
+   - Serves over stdio until the client disconnects
+3. Each tool call runs your CLI again, as a child process
+
+A tool is the same command a person runs: env vars, config files, global options, hooks and middleware all apply, and a `process.exit` only ends that call. To tell tool calls apart in a hook, read `ctx.invocation.surface`. Each call is a new process, so nothing is shared between calls.
 
 ### Command → Tool Mapping
 
@@ -79,7 +82,7 @@ CLI: deploy <service> --env staging
 MCP: { "service": "api", "env": "staging" }
 ```
 
-The plugin tracks which keys are args vs options internally, so it can reconstruct the proper `RunContext` when executing the command.
+Each key goes to its arg or option by name, so arrays, objects and numbers arrive as they are, and a value can never select another command.
 
 ### Output Handling
 
@@ -88,8 +91,89 @@ The plugin tracks which keys are args vs options internally, so it can reconstru
 | Command has `output` schema | `structuredContent` with typed data |
 | Command returns a string (no output schema) | `text` content |
 | Command returns an object (no output schema) | `text` content (JSON stringified) |
-| Command returns void | `text: "ok"` |
-| Command throws | `isError: true` with error message |
+| Command returns nothing | `text` with what it printed, or `Command '<name>' executed successfully.` |
+| Command fails | `isError: true`, with the reason and what happened to its effects in the text, plus `_meta['runa/error']` |
+
+A returned value wins over what the command printed.
+
+### Errors and Retries
+
+A failed call says whether repeating it can repeat its effects. The text says it for the model, and `_meta['runa/error']` for the client, as `{ class, effect, safeToRetry }`:
+
+| `effect` | Meaning | `safeToRetry` |
+|---|---|---|
+| `none` | `run()` never started | `true` |
+| `unknown` | `run()` started and did not return | `false` |
+| `completed` | `run()` returned, and something failed after it, like an invalid `output` | `false` |
+
+`safeToRetry` is about the command: a middleware or hook may have acted before `run()` started.
+
+### Cancellation
+
+Cancelling a call, or closing the server, aborts `ctx.signal` in the command and runs `cleanup`. A command that ignores it stops being waited for after 2 seconds, and its whole process tree ends after 5. Pass `signal` to whatever the command starts:
+
+```ts
+async run({ signal }) {
+  await fetch(url, { signal });
+}
+```
+
+### Output Limit
+
+A tool answers with up to 100 KiB, or what `maxOutput` says. Longer output keeps its start and its end, with a notice in between. A returned value isn't cut: a broken JSON helps nobody, so the call fails with `output_too_large` and reports that the command already ran.
+
+## What You Expose
+
+Every command is a tool by default. Choose what an agent gets, and how it reads about it:
+
+```ts
+mcpPlugin({
+  exclude: ['internal', 'config_reset'],
+  tools: {
+    status: { annotations: { readOnlyHint: true } },
+    deploy: {
+      description: 'Deploy to production. Ask before running it.',
+      annotations: { destructiveHint: true },
+    },
+  },
+});
+```
+
+- **`exclude`** removes the tool: it isn't listed and can't be called. This is the only real boundary.
+- **`annotations`** go to the client as the [MCP specification](https://modelcontextprotocol.io/specification/2025-06-18/schema#toolannotations) defines them. **They are hints, not access control:** a client decides what to do with them, and may ignore them. Without them, clients assume a tool can be destructive.
+- **`description`** replaces what the model reads, without changing your CLI's help.
+
+An unknown name in `exclude`, an excluded tool with settings, or a tool both read-only and destructive stop the server at startup.
+
+## What the Operator Decides
+
+Whoever starts the server beats the model. An option that declares `env`, or has a value in the config file, stays out of the tool's schema, and if a model sends it anyway, it's dropped. This holds even if the env var isn't set: a missing required value fails the call, so a model can't ask anyone for it.
+
+```ts
+mcpPlugin({
+  tools: {
+    deploy: {
+      expose: ['region'],    // The model can choose it, even if env gives it a value
+      serverOnly: ['token'], // Without a value, the server won't start
+    },
+  },
+});
+```
+
+Fixed values of 8 characters or more, and the global options the server started with, are redacted from the stdout and stderr returned to the model. What `run()` returns is left as it is, so don't return secrets.
+
+**Secrets belong in `env`.** Redaction is a safety net, not a barrier: it matches exact text, so it won't catch a value that was transformed, as with base64, and a command can always leak what it receives. Don't expose a command an agent shouldn't run.
+
+## Current Limitations
+
+These matter when you expose a real CLI to an agent:
+
+- **A new command becomes a tool unless you exclude it.** Review `exclude` when you add one.
+- **Ending processes is best-effort.** One that created its own process group or session escapes.
+- **Only a direct Node `selfCommand` gets the stop notice.** A compiled binary or a wrapper like `npx` is ended by the deadline, and not at all if the server is killed with `SIGKILL`.
+- **stdio is the only transport.**
+
+The [backlog](https://github.com/jrodrigopuca/runa-cmd/blob/main/docs/backlog.md) tracks the fixes.
 
 ## API
 
@@ -104,6 +188,7 @@ mcpPlugin({
   name: 'my-server',          // MCP server name (defaults to CLI name)
   version: '2.0.0',           // MCP server version (defaults to CLI version)
   instructions: 'Use deploy before running tests', // Cross-tool workflow hints for AI
+  selfCommand: ['/usr/local/bin/my-tool'], // How to run the CLI again, if the startup check fails
 });
 ```
 
@@ -114,6 +199,18 @@ interface McpPluginOptions {
   name?: string;          // Server name override
   version?: string;       // Server version override
   instructions?: string;  // Workflow instructions for AI agents
+  selfCommand?: string[]; // Executable and arguments to run this CLI again
+  exclude?: string[];     // Tools that won't exist for an agent
+  maxOutput?: number;     // Most bytes a tool can answer with. Default: 100 KiB
+  tools?: Record<string, ToolOptions>; // Per-tool settings, by tool name
+}
+
+interface ToolOptions {
+  description?: string;  // What the model reads, instead of the command's description
+  annotations?: ToolAnnotations; // Hints for the client, as MCP defines them
+  expose?: string[];     // Options the model can set, even if they declare env
+  serverOnly?: string[]; // Options that must come from env or config
+  maxOutput?: number;    // This tool's limit, instead of the plugin's
 }
 ```
 

package/dist/index.d.ts

@@ -4,5 +4,5 @@
  * Barrel re-exports for the MCP plugin package.
  */
 export { mcpPlugin } from './plugin.js';
-export type { McpPluginOptions } from './types.js';
+export type { McpPluginOptions, ToolOptions } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/dist/operator.d.ts

@@ -0,0 +1,15 @@
+import type { ToolRegistration } from './schema.js';
+import type { McpPluginOptions } from './types.js';
+export interface OperatorValues {
+    configValues?: Record<string, unknown>;
+    env: Record<string, string | undefined>;
+    /** Global options the server started with */
+    globals: Record<string, unknown>;
+}
+type ExposureOptions = Pick<McpPluginOptions, 'exclude' | 'tools' | 'maxOutput'>;
+/** The tools as the model will see them. Fails at startup on an invalid setup. */
+export declare function applyOperatorValues(registrations: ToolRegistration[], options: ExposureOptions, values: OperatorValues): ToolRegistration[];
+/** Hide fixed values from text a command wrote without meaning to expose them. */
+export declare function redact(text: string, values: string[]): string;
+export {};
+//# sourceMappingURL=operator.d.ts.map

package/dist/operator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.d.ts","sourceRoot":"","sources":["../src/operator.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,gBAAgB,EAAe,MAAM,YAAY,CAAC;AAOhE,MAAM,WAAW,cAAc;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,KAAK,eAAe,GAAG,IAAI,CAAC,gBAAgB,EAAE,SAAS,GAAG,OAAO,GAAG,WAAW,CAAC,CAAC;AA4GjF,kFAAkF;AAClF,wBAAgB,mBAAmB,CAClC,aAAa,EAAE,gBAAgB,EAAE,EACjC,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,cAAc,GACpB,gBAAgB,EAAE,CAUpB;AAED,kFAAkF;AAClF,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAE7D"}

package/dist/operator.js

@@ -0,0 +1,110 @@
+/**
+ * @runa-cmd/mcp — What the operator of the server decides, not the model
+ *
+ * At the CLI, a flag beats env because the same person sets both. With a tool,
+ * whoever starts the server and whoever calls the tool are different: an option
+ * that declares env, or that has a value, stays out of the model's reach. The
+ * rule doesn't depend on the value being set, or a forgotten API_TOKEN would
+ * turn into a parameter the model can ask a person for.
+ */
+import { RunaError } from '@runa-cmd/core';
+import { longFlag } from '@runa-cmd/core/internal';
+const REDACTION = '[redacted]';
+/** Shorter values could be any word, and replacing them would mangle the text. */
+const MIN_REDACTED_LENGTH = 8;
+function invalidTools(message) {
+    return new RunaError(`mcpPlugin: ${message}`, { code: 'MCP_INVALID_TOOLS' });
+}
+function assertValidLimit(limit, owner) {
+    if (limit === undefined || (Number.isInteger(limit) && limit > 0))
+        return;
+    throw invalidTools(`maxOutput of ${owner} must be a positive number of bytes.`);
+}
+function assertValidExclude({ exclude = [], tools = {} }, registrations) {
+    for (const name of exclude) {
+        if (!registrations.some((reg) => reg.name === name)) {
+            throw invalidTools(`no tool named '${name}' to exclude.`);
+        }
+        if (name in tools)
+            throw invalidTools(`tool '${name}' is excluded, so it can't have settings.`);
+    }
+}
+function assertValidTools(tools, registrations) {
+    for (const [name, options] of Object.entries(tools)) {
+        const reg = registrations.find((candidate) => candidate.name === name);
+        if (!reg)
+            throw invalidTools(`no tool named '${name}'.`);
+        assertValidLimit(options.maxOutput, `tool '${name}'`);
+        if (options.annotations?.readOnlyHint && options.annotations.destructiveHint) {
+            throw invalidTools(`tool '${name}' can't be read-only and destructive.`);
+        }
+        for (const key of [...(options.expose ?? []), ...(options.serverOnly ?? [])]) {
+            if (!reg.optionKeys.has(key)) {
+                throw invalidTools(`tool '${name}' has no option '${key}'.`);
+            }
+            if (options.expose?.includes(key) && options.serverOnly?.includes(key)) {
+                throw invalidTools(`option '${key}' of tool '${name}' can't be exposed and server-only.`);
+            }
+        }
+    }
+}
+function envNameOf(key, reg) {
+    const optionMeta = reg.command.meta.options;
+    return optionMeta?.[key]?.env;
+}
+function fixedValue(key, reg, values) {
+    const envName = envNameOf(key, reg);
+    const fromEnv = envName === undefined ? undefined : values.env[envName];
+    return fromEnv ?? values.configValues?.[key];
+}
+function redactable(values) {
+    return values
+        .filter((value) => typeof value === 'string' && value.length >= MIN_REDACTED_LENGTH)
+        .sort((a, b) => b.length - a.length);
+}
+function applyToTool(reg, options, maxOutput, values) {
+    const inputShape = { ...reg.inputShape };
+    const fixed = new Set();
+    const fixedValues = [];
+    for (const key of reg.optionKeys) {
+        if (options.expose?.includes(key))
+            continue;
+        const value = fixedValue(key, reg, values);
+        const isServerOnly = options.serverOnly?.includes(key) ?? false;
+        if (value === undefined && isServerOnly) {
+            throw invalidTools(`option ${longFlag(key)} of tool '${reg.name}' is server-only and has no value. ` +
+                'Set it through its env var or the config file.');
+        }
+        const belongsToOperator = value !== undefined || envNameOf(key, reg) !== undefined;
+        if (!belongsToOperator)
+            continue;
+        delete inputShape[key];
+        fixed.add(key);
+        if (value !== undefined)
+            fixedValues.push(value);
+    }
+    return {
+        ...reg,
+        description: options.description ?? reg.description,
+        annotations: options.annotations,
+        inputShape,
+        fixed,
+        redactions: redactable([...fixedValues, ...Object.values(values.globals)]),
+        maxOutput: options.maxOutput ?? maxOutput ?? reg.maxOutput,
+    };
+}
+/** The tools as the model will see them. Fails at startup on an invalid setup. */
+export function applyOperatorValues(registrations, options, values) {
+    const { exclude = [], tools = {}, maxOutput } = options;
+    assertValidLimit(maxOutput, 'mcpPlugin');
+    assertValidExclude(options, registrations);
+    assertValidTools(tools, registrations);
+    return registrations
+        .filter((reg) => !exclude.includes(reg.name))
+        .map((reg) => applyToTool(reg, tools[reg.name] ?? {}, maxOutput, values));
+}
+/** Hide fixed values from text a command wrote without meaning to expose them. */
+export function redact(text, values) {
+    return values.reduce((result, value) => result.replaceAll(value, REDACTION), text);
+}
+//# sourceMappingURL=operator.js.map

package/dist/operator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.js","sourceRoot":"","sources":["../src/operator.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAmB,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAInD,MAAM,SAAS,GAAG,YAAY,CAAC;AAE/B,kFAAkF;AAClF,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAW9B,SAAS,YAAY,CAAC,OAAe;IACpC,OAAO,IAAI,SAAS,CAAC,cAAc,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB,EAAE,KAAa;IACjE,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QAAE,OAAO;IAC1E,MAAM,YAAY,CAAC,gBAAgB,KAAK,sCAAsC,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,kBAAkB,CAC1B,EAAE,OAAO,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,EAAmB,EAC7C,aAAiC;IAEjC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,YAAY,CAAC,kBAAkB,IAAI,eAAe,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,IAAI,IAAI,KAAK;YAAE,MAAM,YAAY,CAAC,SAAS,IAAI,2CAA2C,CAAC,CAAC;IACjG,CAAC;AACF,CAAC;AAED,SAAS,gBAAgB,CACxB,KAA6C,EAC7C,aAAiC;IAEjC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACvE,IAAI,CAAC,GAAG;YAAE,MAAM,YAAY,CAAC,kBAAkB,IAAI,IAAI,CAAC,CAAC;QACzD,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,IAAI,GAAG,CAAC,CAAC;QAEtD,IAAI,OAAO,CAAC,WAAW,EAAE,YAAY,IAAI,OAAO,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC;YAC9E,MAAM,YAAY,CAAC,SAAS,IAAI,uCAAuC,CAAC,CAAC;QAC1E,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YAC9E,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,YAAY,CAAC,SAAS,IAAI,oBAAoB,GAAG,IAAI,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxE,MAAM,YAAY,CAAC,WAAW,GAAG,cAAc,IAAI,qCAAqC,CAAC,CAAC;YAC3F,CAAC;QACF,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,GAAqB;IACpD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAiD,CAAC;IACtF,OAAO,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC;AAC/B,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,GAAqB,EAAE,MAAsB;IAC7E,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxE,OAAO,OAAO,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,UAAU,CAAC,MAAiB;IACpC,OAAO,MAAM;SACX,MAAM,CACN,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,mBAAmB,CAC5F;SACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,WAAW,CACnB,GAAqB,EACrB,OAAoB,EACpB,SAA6B,EAC7B,MAAsB;IAEtB,MAAM,UAAU,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,WAAW,GAAc,EAAE,CAAC;IAElC,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAE5C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC;QAEhE,IAAI,KAAK,KAAK,SAAS,IAAI,YAAY,EAAE,CAAC;YACzC,MAAM,YAAY,CACjB,UAAU,QAAQ,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,qCAAqC;gBAChF,gDAAgD,CACjD,CAAC;QACH,CAAC;QAED,MAAM,iBAAiB,GAAG,KAAK,KAAK,SAAS,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,SAAS,CAAC;QACnF,IAAI,CAAC,iBAAiB;YAAE,SAAS;QAEjC,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;QACvB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACf,IAAI,KAAK,KAAK,SAAS;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IAED,OAAO;QACN,GAAG,GAAG;QACN,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW;QACnD,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU;QACV,KAAK;QACL,UAAU,EAAE,UAAU,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1E,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS,IAAI,GAAG,CAAC,SAAS;KAC1D,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAClC,aAAiC,EACjC,OAAwB,EACxB,MAAsB;IAEtB,MAAM,EAAE,OAAO,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAExD,gBAAgB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACzC,kBAAkB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC3C,gBAAgB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAEvC,OAAO,aAAa;SAClB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,MAAgB;IACpD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;AACpF,CAAC"}

package/dist/plugin.d.ts

@@ -1,17 +1,16 @@
 /**
  * @runa-cmd/mcp — mcpPlugin()
  *
- * A Runa plugin that exposes CLI commands as MCP tools.
- * When `--mcp` is passed, the plugin short-circuits normal CLI execution,
- * starts an MCP server on stdio transport, and registers every CLI
- * command as an MCP tool.
+ * Exposes CLI commands as MCP tools. With `--mcp`, the CLI becomes a server
+ * over stdio, and each tool call runs the CLI again as a child process, so a
+ * tool is the same command a person runs (ADR-0030).
  */
 import type { PluginConfig } from '@runa-cmd/core';
 import type { McpPluginOptions } from './types.js';
 /**
  * Create an MCP plugin that exposes CLI commands as MCP tools.
  *
- * @param opts - Optional server name, version, or instructions override
+ * @param opts - Optional server name, version, instructions or selfCommand
  */
 export declare function mcpPlugin(opts?: McpPluginOptions): PluginConfig;
 //# sourceMappingURL=plugin.d.ts.map

package/dist/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAe,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAKhE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,IAAI,GAAE,gBAAqB,GAAG,YAAY,CAuCnE"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAe,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAMhE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAOnD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,IAAI,GAAE,gBAAqB,GAAG,YAAY,CA6CnE"}

package/dist/plugin.js

@@ -1,17 +1,21 @@
 import { definePlugin } from '@runa-cmd/core';
 import { z } from 'zod';
+import { applyOperatorValues } from './operator.js';
+import { defaultSelfCommand } from './runner.js';
 import { buildToolRegistrations } from './schema.js';
-import { createMcpServer, registerTools, startServer } from './server.js';
+/** What a child repeats from the server's own start: everything but `--mcp`. */
+function startupArgv() {
+    return process.argv.slice(2).filter((token) => token !== '--mcp' && !token.startsWith('--mcp='));
+}
 /**
  * Create an MCP plugin that exposes CLI commands as MCP tools.
  *
- * @param opts - Optional server name, version, or instructions override
+ * @param opts - Optional server name, version, instructions or selfCommand
  */
 export function mcpPlugin(opts = {}) {
     return definePlugin({
         meta: {
             name: '@runa-cmd/mcp',
-            version: '0.1.0',
             description: 'MCP server generation from CLI commands',
         },
         capabilities: { addGlobalOptions: true },
@@ -23,17 +27,21 @@ export function mcpPlugin(opts = {}) {
                 if (!ctx.globalOptions?.mcp)
                     return;
                 const schema = api.getSchema();
-                const commands = api.getCommands();
-                const registrations = buildToolRegistrations(commands, schema);
-                const server = createMcpServer({
+                const registrations = applyOperatorValues(buildToolRegistrations(api.getCommands(), schema), opts, {
+                    configValues: await api.getConfigValues(),
+                    env: process.env,
+                    globals: ctx.globalOptions,
+                });
+                // Loaded here so a plain CLI run doesn't pay for the MCP SDK
+                const { serve } = await import('./server.js');
+                await serve(registrations, {
                     name: opts.name ?? schema.meta.name,
                     version: opts.version ?? schema.meta.version ?? '0.0.0',
                     instructions: opts.instructions,
+                    selfCommand: opts.selfCommand ?? defaultSelfCommand(),
+                    argv: startupArgv(),
                 });
-                registerTools(server, registrations);
-                await startServer(server);
-                // Short-circuit — MCP server now running, don't execute CLI command
-                // NOTE: Do NOT call process.exit() — server must stay alive for tool invocations
+                // The server closed: there is no command to run
                 ctx.shortCircuit?.();
             });
         },

package/dist/plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1E;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,OAAyB,EAAE;IACpD,OAAO,YAAY,CAAC;QACnB,IAAI,EAAE;YACL,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,yCAAyC;SACtD;QACD,YAAY,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE;QACxC,KAAK,CAAC,GAAG;YACR,uCAAuC;YACvC,GAAG,CAAC,eAAe,CAClB,KAAK,EACL,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAClE,CAAC;YAEF,mCAAmC;YACnC,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,GAAgB,EAAE,EAAE;gBACpD,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG;oBAAE,OAAO;gBAEpC,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;gBAEnC,MAAM,aAAa,GAAG,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAE/D,MAAM,MAAM,GAAG,eAAe,CAAC;oBAC9B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI;oBACnC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO;oBACvD,YAAY,EAAE,IAAI,CAAC,YAAY;iBAC/B,CAAC,CAAC;gBAEH,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;gBACrC,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;gBAE1B,oEAAoE;gBACpE,iFAAiF;gBACjF,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC;YACtB,CAAC,CAAC,CAAC;QACJ,CAAC;KACD,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAGrD,gFAAgF;AAChF,SAAS,WAAW;IACnB,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AAClG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,OAAyB,EAAE;IACpD,OAAO,YAAY,CAAC;QACnB,IAAI,EAAE;YACL,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,yCAAyC;SACtD;QACD,YAAY,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE;QACxC,KAAK,CAAC,GAAG;YACR,uCAAuC;YACvC,GAAG,CAAC,eAAe,CAClB,KAAK,EACL,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAClE,CAAC;YAEF,mCAAmC;YACnC,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,GAAgB,EAAE,EAAE;gBACpD,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG;oBAAE,OAAO;gBAEpC,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;gBAC/B,MAAM,aAAa,GAAG,mBAAmB,CACxC,sBAAsB,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,EACjD,IAAI,EACJ;oBACC,YAAY,EAAE,MAAM,GAAG,CAAC,eAAe,EAAE;oBACzC,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,OAAO,EAAE,GAAG,CAAC,aAAa;iBAC1B,CACD,CAAC;gBAEF,6DAA6D;gBAC7D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;gBAE9C,MAAM,KAAK,CAAC,aAAa,EAAE;oBAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI;oBACnC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO;oBACvD,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,kBAAkB,EAAE;oBACrD,IAAI,EAAE,WAAW,EAAE;iBACnB,CAAC,CAAC;gBAEH,gDAAgD;gBAChD,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC;YACtB,CAAC,CAAC,CAAC;QACJ,CAAC;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/runner.d.ts

@@ -0,0 +1,28 @@
+import { type ToolReport, type ToolRequest } from '@runa-cmd/core/internal';
+/** About 25,000 tokens, more than what a model can use from one call. */
+export declare const DEFAULT_MAX_OUTPUT: number;
+export interface RunOptions {
+    /** How to start this CLI: executable and arguments */
+    selfCommand: string[];
+    /** Startup arguments every child receives, like global options */
+    argv: string[];
+    signal?: AbortSignal;
+    /** Most bytes kept from stdout, and from stderr */
+    maxOutput?: number;
+    /** Values to hide from what the command prints */
+    redactions?: string[];
+}
+export interface ChildOutcome {
+    status: number | null;
+    stdout: string;
+    stderr: string;
+    reports: ToolReport[];
+    /** It ended because it was told to stop */
+    cancelled?: boolean;
+}
+/** Resolves once every child ended, for a server that is closing. */
+export declare function childrenFinished(): Promise<void>;
+/** How this process was started, which is how to start it again. */
+export declare function defaultSelfCommand(): string[];
+export declare function runChild(request: ToolRequest, options: RunOptions): Promise<ChildOutcome>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAWA,OAAO,EAMN,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,MAAM,yBAAyB,CAAC;AAQjC,yEAAyE;AACzE,eAAO,MAAM,kBAAkB,QAAa,CAAC;AAE7C,MAAM,WAAW,UAAU;IAC1B,sDAAsD;IACtD,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,kEAAkE;IAClE,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC5B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,2CAA2C;IAC3C,SAAS,CAAC,EAAE,OAAO,CAAC;CACpB;AAID,qEAAqE;AACrE,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAEtD;AAaD,oEAAoE;AACpE,wBAAgB,kBAAkB,IAAI,MAAM,EAAE,CAE7C;AA8CD,wBAAgB,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAgEzF"}

package/dist/runner.js

@@ -0,0 +1,142 @@
+/**
+ * @runa-cmd/mcp — Runs the CLI itself as a child process (ADR-0030)
+ *
+ * The request and the reports travel over their own channels, so whatever the
+ * command does with stdout, stderr or process.exit stays inside the child.
+ * Each child leads its own process group and holds an IPC channel with this
+ * process: cutting it tells the child to stop, and so does this process dying,
+ * however it dies (ADR-0033).
+ */
+import { spawn } from 'node:child_process';
+import { killProcessTree, STOP_DEADLINE_MS, TOOL_CALL_ENV, TOOL_INPUT_FD, TOOL_REPORT_FD, } from '@runa-cmd/core/internal';
+import { redact } from './operator.js';
+const IPC_CHANNEL = 'ipc';
+/** Enough for what the child wrote to reach us; a process it left holding stdio can't delay more. */
+const DRAIN_MS = 250;
+/** About 25,000 tokens, more than what a model can use from one call. */
+export const DEFAULT_MAX_OUTPUT = 100 * 1024;
+const running = new Map();
+/** Resolves once every child ended, for a server that is closing. */
+export async function childrenFinished() {
+    await Promise.all(running.values());
+}
+let endsChildrenOnExit = false;
+/** The last net for an exit that didn't go through closing the server. */
+function endChildrenOnExit() {
+    if (endsChildrenOnExit)
+        return;
+    endsChildrenOnExit = true;
+    process.on('exit', () => {
+        for (const pid of running.keys())
+            killProcessTree(pid);
+    });
+}
+/** How this process was started, which is how to start it again. */
+export function defaultSelfCommand() {
+    return [process.execPath, ...process.execArgv, process.argv[1] ?? ''];
+}
+function parseReports(raw) {
+    return raw
+        .split('\n')
+        .filter(Boolean)
+        .map((line) => JSON.parse(line));
+}
+function collect(stream) {
+    const chunks = [];
+    stream.on('data', (chunk) => chunks.push(chunk));
+    return () => Buffer.concat(chunks).toString('utf8');
+}
+/**
+ * Keep the start and the end of a stream, whatever its size. Both ends hold
+ * extra bytes, dropped after redacting: a value cut in half can't be found, so
+ * the cut must never fall on something still visible.
+ */
+function collectEnds(stream, limit, redactions) {
+    const margin = Math.max(0, ...redactions.map((value) => Buffer.byteLength(value)));
+    const keep = Math.ceil(limit / 2) + margin;
+    let head = Buffer.alloc(0);
+    let tail = Buffer.alloc(0);
+    let seen = 0;
+    stream.on('data', (chunk) => {
+        seen += chunk.length;
+        const room = keep - head.length;
+        if (room > 0)
+            head = Buffer.concat([head, chunk.subarray(0, room)]);
+        const rest = chunk.subarray(Math.max(room, 0));
+        if (rest.length > 0)
+            tail = Buffer.concat([tail, rest]).subarray(-keep);
+    });
+    return () => {
+        if (head.length + tail.length === seen) {
+            return redact(Buffer.concat([head, tail]).toString('utf8'), redactions);
+        }
+        const start = redact(head.toString('utf8'), redactions);
+        const end = redact(tail.toString('utf8'), redactions);
+        const notice = `[Output truncated: ${seen - limit} bytes omitted]`;
+        return `${start.slice(0, start.length - margin)}\n\n${notice}\n\n${end.slice(margin)}`;
+    };
+}
+export function runChild(request, options) {
+    const [executable = '', ...selfArgs] = options.selfCommand;
+    const { maxOutput = DEFAULT_MAX_OUTPUT, redactions = [], signal } = options;
+    endChildrenOnExit();
+    const child = spawn(executable, [...selfArgs, ...options.argv], {
+        stdio: ['ignore', 'pipe', 'pipe', 'pipe', 'pipe', IPC_CHANNEL],
+        env: { ...process.env, [TOOL_CALL_ENV]: '1' },
+        // Also on Windows: otherwise a job object kills the child with this process,
+        // and it never gets to run its cleanup.
+        detached: true,
+        windowsHide: true,
+    });
+    const finished = new Promise((resolve) => {
+        const stdout = collectEnds(child.stdout, maxOutput, redactions);
+        const stderr = collectEnds(child.stderr, maxOutput, redactions);
+        const reports = collect(child.stdio[TOOL_REPORT_FD]);
+        const input = child.stdio[TOOL_INPUT_FD];
+        input.on('error', () => { }); // A child that dies early closes this pipe: its exit tells why
+        input.end(JSON.stringify(request));
+        let force;
+        const cancel = () => {
+            if (child.connected)
+                child.disconnect();
+            force = setTimeout(() => {
+                if (child.pid !== undefined)
+                    killProcessTree(child.pid);
+            }, STOP_DEADLINE_MS);
+        };
+        if (signal?.aborted)
+            cancel();
+        else
+            signal?.addEventListener('abort', cancel, { once: true });
+        let spawnError = '';
+        let settled = false;
+        const settle = (status) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(force);
+            signal?.removeEventListener('abort', cancel);
+            if (child.pid !== undefined)
+                running.delete(child.pid);
+            for (const stream of child.stdio)
+                stream?.destroy();
+            resolve({
+                status,
+                stdout: stdout(),
+                stderr: stderr() || spawnError,
+                reports: parseReports(reports()),
+                cancelled: signal?.aborted,
+            });
+        };
+        child.on('error', (error) => {
+            spawnError = error.message;
+        });
+        child.on('close', settle);
+        // A process the command left behind can hold stdio long after this one is gone
+        child.on('exit', (status) => setTimeout(() => settle(status), DRAIN_MS).unref());
+    });
+    if (child.pid !== undefined)
+        running.set(child.pid, finished);
+    return finished;
+}
+//# sourceMappingURL=runner.js.map

package/dist/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EACN,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,cAAc,GAGd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEvC,MAAM,WAAW,GAAG,KAAK,CAAC;AAE1B,qGAAqG;AACrG,MAAM,QAAQ,GAAG,GAAG,CAAC;AAErB,yEAAyE;AACzE,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,CAAC;AAuB7C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAC;AAEzD,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACrC,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAE/B,0EAA0E;AAC1E,SAAS,iBAAiB;IACzB,IAAI,kBAAkB;QAAE,OAAO;IAC/B,kBAAkB,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QACvB,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE;YAAE,eAAe,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,kBAAkB;IACjC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAChC,OAAO,GAAG;SACR,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,OAAO,CAAC,MAAgB;IAChC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,MAAgB,EAAE,KAAa,EAAE,UAAoB;IACzE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC;IAC3C,IAAI,IAAI,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,GAAG,CAAC,CAAC;IAEb,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACnC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;QAChC,IAAI,IAAI,GAAG,CAAC;YAAE,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,EAAE;QACX,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,sBAAsB,IAAI,GAAG,KAAK,iBAAiB,CAAC;QACnE,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IACxF,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAoB,EAAE,OAAmB;IACjE,MAAM,CAAC,UAAU,GAAG,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;IAC3D,MAAM,EAAE,SAAS,GAAG,kBAAkB,EAAE,UAAU,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAE5E,iBAAiB,EAAE,CAAC;IAEpB,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE;QAC/D,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC;QAC9D,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE;QAC7C,6EAA6E;QAC7E,wCAAwC;QACxC,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAI;KACjB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAe,CAAC,OAAO,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAkB,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAkB,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAa,CAAC,CAAC;QAEjE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,CAAa,CAAC;QACrD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,+DAA+D;QAC5F,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAEnC,IAAI,KAAiC,CAAC;QACtC,MAAM,MAAM,GAAG,GAAG,EAAE;YACnB,IAAI,KAAK,CAAC,SAAS;gBAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YACxC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBACvB,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;oBAAE,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzD,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,EAAE,CAAC;;YACzB,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/D,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAE,EAAE;YACxC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7C,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,KAAK;gBAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAEpD,OAAO,CAAC;gBACP,MAAM;gBACN,MAAM,EAAE,MAAM,EAAE;gBAChB,MAAM,EAAE,MAAM,EAAE,IAAI,UAAU;gBAC9B,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC;gBAChC,SAAS,EAAE,MAAM,EAAE,OAAO;aAC1B,CAAC,CAAC;QACJ,CAAC,CAAC;QAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,+EAA+E;QAC/E,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9D,OAAO,QAAQ,CAAC;AACjB,CAAC"}

package/dist/schema.d.ts

@@ -4,6 +4,7 @@
  * Walks the CommandTree and builds ToolRegistration objects
  * that map each command to an MCP tool with merged input schema.
  */
+import type { ToolAnnotations } from '@modelcontextprotocol/sdk/types.js';
 import type { CLISchema, Command, CommandTree } from '@runa-cmd/core';
 import type { ZodType } from 'zod';
 /**
@@ -12,6 +13,8 @@ import type { ZodType } from 'zod';
 export interface ToolRegistration {
     /** MCP tool name (e.g., 'config_set') */
     name: string;
+    /** Command path in the tree (e.g., ['config', 'set']) */
+    path: string[];
     /** Tool description from command metadata */
     description: string;
     /** Merged args + options as a Zod shape (Record<string, ZodType>) */
@@ -24,6 +27,14 @@ export interface ToolRegistration {
     argKeys: Set<string>;
     /** Keys that belong to options */
     optionKeys: Set<string>;
+    /** Options the operator fixed: out of the schema, and dropped from any call */
+    fixed: Set<string>;
+    /** Text to hide from what the command writes */
+    redactions: string[];
+    /** Most bytes of output this tool can answer with */
+    maxOutput: number;
+    /** Hints for the client, only if the author declared them */
+    annotations?: ToolAnnotations;
 }
 /**
  * Build MCP tool registrations from a CommandTree and CLISchema.

package/dist/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAiB,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACrF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAInC;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,uCAAuC;IACvC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,mDAAmD;IACnD,OAAO,EAAE,OAAO,CAAC;IACjB,wEAAwE;IACxE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACrB,kCAAkC;IAClC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACxB;AAyFD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACrC,QAAQ,EAAE,WAAW,EACrB,MAAM,EAAE,SAAS,GACf,gBAAgB,EAAE,CAEpB"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAiB,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACrF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAKnC;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,6CAA6C;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,uCAAuC;IACvC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,mDAAmD;IACnD,OAAO,EAAE,OAAO,CAAC;IACjB,wEAAwE;IACxE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACrB,kCAAkC;IAClC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,+EAA+E;IAC/E,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACnB,gDAAgD;IAChD,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,eAAe,CAAC;CAC9B;AA6FD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACrC,QAAQ,EAAE,WAAW,EACrB,MAAM,EAAE,SAAS,GACf,gBAAgB,EAAE,CAEpB"}

package/dist/schema.js

@@ -1,3 +1,4 @@
+import { DEFAULT_MAX_OUTPUT } from './runner.js';
 // ─── Helpers ────────────────────────────────────────────────
 function isCommand(value) {
     return '_type' in value && value._type === 'runa:command';
@@ -52,12 +53,16 @@ function walkTree(tree, parentPath, cliSchema) {
             }
             registrations.push({
                 name: toolName,
+                path: fullPath,
                 description: cmdSchema?.description ?? entry.meta.description,
                 inputShape,
                 outputSchema: entry.output,
                 command: entry,
                 argKeys,
                 optionKeys,
+                fixed: new Set(),
+                redactions: [],
+                maxOutput: DEFAULT_MAX_OUTPUT,
             });
         }
         else {

package/dist/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AA+BA,+DAA+D;AAE/D,SAAS,SAAS,CAAC,KAA4B;IAC9C,OAAO,OAAO,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CACzB,OAAwB,EACxB,QAAkB;IAElB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC;YAAE,OAAO,MAAM,CAAC;QACzD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC9D,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QACzB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,CAAW,EAAE,CAAW;IAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,+DAA+D;AAE/D;;;GAGG;AACH,SAAS,QAAQ,CAChB,IAAiB,EACjB,UAAoB,EACpB,SAAoB;IAEpB,MAAM,aAAa,GAAuB,EAAE,CAAC;IAE7C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,CAAC,GAAG,UAAU,EAAE,IAAI,CAAC,CAAC;QAEvC,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,SAAS,GAAG,iBAAiB,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAElE,iDAAiD;YACjD,MAAM,UAAU,GAA4B,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;YAClC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;YAErC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBAChB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxD,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;oBACzB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAClB,CAAC;YACF,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC3D,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;oBACzB,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACrB,CAAC;YACF,CAAC;YAED,aAAa,CAAC,IAAI,CAAC;gBAClB,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,SAAS,EAAE,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW;gBAC7D,UAAU;gBACV,YAAY,EAAE,KAAK,CAAC,MAAM;gBAC1B,OAAO,EAAE,KAAK;gBACd,OAAO;gBACP,UAAU;aACV,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACP,2BAA2B;YAC3B,aAAa,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7D,CAAC;IACF,CAAC;IAED,OAAO,aAAa,CAAC;AACtB,CAAC;AAED,+DAA+D;AAE/D;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACrC,QAAqB,EACrB,MAAiB;IAEjB,OAAO,QAAQ,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAkCjD,+DAA+D;AAE/D,SAAS,SAAS,CAAC,KAA4B;IAC9C,OAAO,OAAO,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CACzB,OAAwB,EACxB,QAAkB;IAElB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC;YAAE,OAAO,MAAM,CAAC;QACzD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC9D,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QACzB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,CAAW,EAAE,CAAW;IAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,+DAA+D;AAE/D;;;GAGG;AACH,SAAS,QAAQ,CAChB,IAAiB,EACjB,UAAoB,EACpB,SAAoB;IAEpB,MAAM,aAAa,GAAuB,EAAE,CAAC;IAE7C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,CAAC,GAAG,UAAU,EAAE,IAAI,CAAC,CAAC;QAEvC,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,SAAS,GAAG,iBAAiB,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAElE,iDAAiD;YACjD,MAAM,UAAU,GAA4B,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;YAClC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;YAErC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBAChB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxD,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;oBACzB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAClB,CAAC;YACF,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC3D,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;oBACzB,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACrB,CAAC;YACF,CAAC;YAED,aAAa,CAAC,IAAI,CAAC;gBAClB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,SAAS,EAAE,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW;gBAC7D,UAAU;gBACV,YAAY,EAAE,KAAK,CAAC,MAAM;gBAC1B,OAAO,EAAE,KAAK;gBACd,OAAO;gBACP,UAAU;gBACV,KAAK,EAAE,IAAI,GAAG,EAAE;gBAChB,UAAU,EAAE,EAAE;gBACd,SAAS,EAAE,kBAAkB;aAC7B,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACP,2BAA2B;YAC3B,aAAa,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7D,CAAC;IACF,CAAC;IAED,OAAO,aAAa,CAAC;AACtB,CAAC;AAED,+DAA+D;AAE/D;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACrC,QAAqB,EACrB,MAAiB;IAEjB,OAAO,QAAQ,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC"}

package/dist/server.d.ts

@@ -1,36 +1,29 @@
 /**
- * @runa-cmd/mcp — MCP server creation and tool registration
+ * @runa-cmd/mcp — MCP server over a CLI run as subprocesses
  *
- * Creates an MCP server, registers tools from ToolRegistrations,
- * and manages the server lifecycle (stdio transport, signal handlers).
+ * Uses the SDK's low-level Server: schemas are only described here, because
+ * validating in the server would apply transforms and defaults that the child
+ * applies again. The child owns validation, as in any run of the CLI.
  */
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { type CallToolResult, type Tool } from '@modelcontextprotocol/sdk/types.js';
+import type { ChildOutcome, RunOptions } from './runner.js';
 import type { ToolRegistration } from './schema.js';
+export declare function toolDefinition(reg: ToolRegistration): Tool;
 /**
- * Create an MCP server with the given metadata.
+ * Exit code 0 is not enough: a middleware can skip the command and a command
+ * can exit on its own. Only the reports say how far it got.
  */
-export declare function createMcpServer(opts: {
+export declare function toToolResult(reg: ToolRegistration, outcome: ChildOutcome): CallToolResult;
+export interface ServeOptions extends RunOptions {
     name: string;
     version: string;
     instructions?: string;
-}): McpServer;
+}
+export declare function createMcpServer(registrations: ToolRegistration[], options: ServeOptions): Server;
 /**
- * Register MCP tools on the server from ToolRegistration objects.
- *
- * Each tool's handler:
- * 1. Splits the input back into args/options using stored key sets
- * 2. Calls command.run() with a constructed RunContext
- * 3. Returns structured content if outputSchema exists, text otherwise
- * 4. Catches errors and returns isError: true
- */
-export declare function registerTools(server: McpServer, registrations: ToolRegistration[]): void;
-/**
- * Start the MCP server on stdio transport.
- * Registers signal handlers for graceful shutdown.
- *
- * Returns a close function for cleanup.
+ * Serve until the client disconnects or the process is told to stop, so the
+ * lifecycle of the CLI, cleanup included, ends when the server does.
  */
-export declare function startServer(server: McpServer): Promise<{
-    close: () => Promise<void>;
-}>;
+export declare function serve(registrations: ToolRegistration[], options: ServeOptions): Promise<void>;
 //# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAIpD;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,SAAS,CAKZ;AAID;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAE,GAAG,IAAI,CA6BxF;AAoED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAiB5F"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAEnE,OAAO,EAEN,KAAK,cAAc,EAEnB,KAAK,IAAI,EACT,MAAM,oCAAoC,CAAC;AAI5C,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAgBpD,wBAAgB,cAAc,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAS1D;AAyFD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,GAAG,cAAc,CAiBzF;AAID,MAAM,WAAW,YAAa,SAAQ,UAAU;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAiBD,wBAAgB,eAAe,CAAC,aAAa,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,YAAY,GAAG,MAAM,CAkChG;AAED;;;GAGG;AACH,wBAAsB,KAAK,CAC1B,aAAa,EAAE,gBAAgB,EAAE,EACjC,OAAO,EAAE,YAAY,GACnB,OAAO,CAAC,IAAI,CAAC,CAuBf"}

package/dist/server.js

@@ -1,126 +1,169 @@
 /**
- * @runa-cmd/mcp — MCP server creation and tool registration
+ * @runa-cmd/mcp — MCP server over a CLI run as subprocesses
  *
- * Creates an MCP server, registers tools from ToolRegistrations,
- * and manages the server lifecycle (stdio transport, signal handlers).
+ * Uses the SDK's low-level Server: schemas are only described here, because
+ * validating in the server would apply transforms and defaults that the child
+ * applies again. The child owns validation, as in any run of the CLI.
  */
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { setImmediate } from 'node:timers/promises';
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-// ─── Server Creation ────────────────────────────────────────
-/**
- * Create an MCP server with the given metadata.
- */
-export function createMcpServer(opts) {
-    return new McpServer({ name: opts.name, version: opts.version }, { instructions: opts.instructions });
+import { CallToolRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
+import { RunaError } from '@runa-cmd/core';
+import { z } from 'zod';
+import { childrenFinished, runChild } from './runner.js';
+const SELF_CHECK_TIMEOUT_MS = 10_000;
+// ─── Tool definitions ───────────────────────────────────────
+function toJsonSchema(schema) {
+    return z.toJSONSchema(schema, { io: 'input', unrepresentable: 'any' });
 }
-// ─── Tool Registration ──────────────────────────────────────
+/** MCP only allows objects as structured output. */
+function structuredOutput(reg) {
+    if (!reg.outputSchema)
+        return undefined;
+    return toJsonSchema(reg.outputSchema).type === 'object' ? reg.outputSchema : undefined;
+}
+export function toolDefinition(reg) {
+    const output = structuredOutput(reg);
+    return {
+        name: reg.name,
+        description: reg.description,
+        inputSchema: toJsonSchema(z.object(reg.inputShape)),
+        ...(output ? { outputSchema: toJsonSchema(output) } : {}),
+        ...(reg.annotations ? { annotations: reg.annotations } : {}),
+    };
+}
+// ─── Results ────────────────────────────────────────────────
+const success = (text) => ({ content: [{ type: 'text', text }] });
+const EFFECT_TEXT = {
+    none: 'The command did not run, so it is safe to retry.',
+    completed: 'The command already ran. Do not retry it.',
+    unknown: 'The command started, so it may have taken effect. Check before retrying.',
+};
 /**
- * Register MCP tools on the server from ToolRegistration objects.
- *
- * Each tool's handler:
- * 1. Splits the input back into args/options using stored key sets
- * 2. Calls command.run() with a constructed RunContext
- * 3. Returns structured content if outputSchema exists, text otherwise
- * 4. Catches errors and returns isError: true
+ * The reports say how far the command got, which is what decides whether a
+ * retry can repeat its effects. Without one, a command may have done anything:
+ * the safe reading of the unknown is never that nothing happened.
  */
-export function registerTools(server, registrations) {
-    for (const reg of registrations) {
-        const hasInput = Object.keys(reg.inputShape).length > 0;
-        if (hasInput) {
-            server.registerTool(reg.name, {
-                description: reg.description,
-                inputSchema: reg.inputShape,
-                ...(reg.outputSchema ? { outputSchema: reg.outputSchema } : {}),
-            }, async (input) => {
-                return executeToolHandler(reg, input);
-            });
-        }
-        else {
-            server.registerTool(reg.name, {
-                description: reg.description,
-                ...(reg.outputSchema ? { outputSchema: reg.outputSchema } : {}),
-            }, async () => {
-                return executeToolHandler(reg, {});
-            });
-        }
+function findFailure({ reports, status, cancelled }) {
+    const reached = (kind) => reports.some((report) => report.kind === kind);
+    const failed = reports.find((report) => report.kind === 'failed');
+    if (cancelled)
+        return { class: 'cancelled', effect: 'unknown' };
+    if (reached('oversized'))
+        return { class: 'output_too_large', effect: 'completed' };
+    if (reached('result')) {
+        if (!failed && status === 0)
+            return undefined;
+        return { class: 'after_run_failed', effect: 'completed' };
+    }
+    if (reached('ran')) {
+        const invalid = failed?.reason === 'output';
+        return { class: invalid ? 'invalid_output' : 'after_run_failed', effect: 'completed' };
+    }
+    if (reached('running')) {
+        return { class: failed ? 'command_failed' : 'crashed', effect: 'unknown' };
+    }
+    if (failed) {
+        return { class: failed.reason === 'input' ? 'invalid_input' : 'rejected', effect: 'none' };
+    }
+    return { class: status === 0 ? 'not_run' : 'crashed', effect: 'none' };
+}
+/** Anything the model has to read goes in the text: `_meta` is for the client. */
+const failure = (reason, found) => ({
+    isError: true,
+    content: [{ type: 'text', text: `${reason}\n\n${EFFECT_TEXT[found.effect]}` }],
+    _meta: { 'runa/error': { ...found, safeToRetry: found.effect === 'none' } },
+});
+function failedChild(reg, outcome, found) {
+    const oversized = outcome.reports.find((report) => report.kind === 'oversized');
+    if (oversized) {
+        return failure(`Command '${reg.name}' returned ${oversized.bytes} bytes, over the limit of ${reg.maxOutput}.`, found);
     }
+    const written = outcome.stderr.trim();
+    const printed = outcome.stdout.trim();
+    return failure(written || printed || silentFailure(reg, outcome, found), found);
+}
+function silentFailure(reg, outcome, found) {
+    if (found.class === 'cancelled')
+        return `Command '${reg.name}' was cancelled.`;
+    if (outcome.status !== 0)
+        return `Command '${reg.name}' exited with code ${outcome.status}.`;
+    return `Command '${reg.name}' did not ${found.effect === 'none' ? 'run' : 'finish'}.`;
 }
 /**
- * Execute a tool handler — splits input into args/options, runs the command,
- * and returns the appropriate MCP result.
+ * Exit code 0 is not enough: a middleware can skip the command and a command
+ * can exit on its own. Only the reports say how far it got.
  */
-async function executeToolHandler(reg, input) {
-    // Split input back into args and options
-    const runArgs = {};
-    const runOptions = {};
-    for (const [key, value] of Object.entries(input)) {
-        if (reg.argKeys.has(key)) {
-            runArgs[key] = value;
-        }
-        else {
-            runOptions[key] = value;
-        }
+export function toToolResult(reg, outcome) {
+    const found = findFailure(outcome);
+    if (found)
+        return failedChild(reg, outcome, found);
+    const finished = outcome.reports.find((report) => report.kind === 'result');
+    const stdout = outcome.stdout.trim();
+    // What run() returned is the author's choice, so it goes as it is.
+    const value = finished?.value;
+    if (value === undefined || value === null) {
+        return success(stdout || `Command '${reg.name}' executed successfully.`);
     }
-    try {
-        const result = await reg.command.run({
-            args: runArgs,
-            options: runOptions,
-            globalOptions: {},
-            command: reg.command.meta,
-            rawArgs: [],
-            rest: [],
-        });
-        // Command has output schema — return structured content
-        if (reg.outputSchema) {
-            reg.outputSchema.parse(result);
-            return {
-                content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],
-                structuredContent: result,
-            };
-        }
-        // Command returned something (but no output schema)
-        if (result !== undefined && result !== null) {
-            const text = typeof result === 'string' ? result : JSON.stringify(result, null, 2);
-            return {
-                content: [{ type: 'text', text }],
-            };
+    const text = typeof value === 'string' ? value : JSON.stringify(value, null, 2);
+    return structuredOutput(reg)
+        ? { ...success(text), structuredContent: value }
+        : success(text);
+}
+/** Fails at startup, with a way out, instead of on the first tool call. */
+async function assertCanRunItself(options) {
+    const { reports } = await runChild({ kind: 'ping' }, { ...options, signal: AbortSignal.timeout(SELF_CHECK_TIMEOUT_MS) });
+    if (reports.some((report) => report.kind === 'pong'))
+        return;
+    throw new RunaError(`Cannot run this CLI as a subprocess with: ${options.selfCommand.join(' ')}. ` +
+        'If it is a compiled binary, set mcpPlugin({ selfCommand }).', { code: 'MCP_SELF_CHECK_FAILED' });
+}
+export function createMcpServer(registrations, options) {
+    const server = new Server({ name: options.name, version: options.version }, { capabilities: { tools: {} }, instructions: options.instructions });
+    server.setRequestHandler(ListToolsRequestSchema, () => ({
+        tools: registrations.map(toolDefinition),
+    }));
+    server.setRequestHandler(CallToolRequestSchema, async ({ params }, extra) => {
+        const reg = registrations.find((candidate) => candidate.name === params.name);
+        if (!reg) {
+            return failure(`Unknown tool: ${params.name}`, { class: 'unknown_tool', effect: 'none' });
         }
-        // Void command — success message
-        return {
-            content: [{ type: 'text', text: `Command '${reg.name}' executed successfully.` }],
-        };
-    }
-    catch (err) {
-        return {
-            isError: true,
-            content: [
-                {
-                    type: 'text',
-                    text: err instanceof Error ? err.message : String(err),
-                },
-            ],
-        };
-    }
+        // A fixed option stays what the operator set, whatever the call says
+        const input = Object.fromEntries(Object.entries(params.arguments ?? {}).filter(([key]) => !reg.fixed.has(key)));
+        const outcome = await runChild({ kind: 'call', path: reg.path, input, maxResultBytes: reg.maxOutput }, {
+            ...options,
+            signal: options.signal ? AbortSignal.any([extra.signal, options.signal]) : extra.signal,
+            maxOutput: reg.maxOutput,
+            redactions: reg.redactions,
+        });
+        return toToolResult(reg, outcome);
+    });
+    return server;
 }
-// ─── Server Lifecycle ───────────────────────────────────────
 /**
- * Start the MCP server on stdio transport.
- * Registers signal handlers for graceful shutdown.
- *
- * Returns a close function for cleanup.
+ * Serve until the client disconnects or the process is told to stop, so the
+ * lifecycle of the CLI, cleanup included, ends when the server does.
  */
-export async function startServer(server) {
-    const transport = new StdioServerTransport();
-    await server.connect(transport);
+export async function serve(registrations, options) {
+    await assertCanRunItself(options);
+    const stopping = new AbortController();
+    const server = createMcpServer(registrations, { ...options, signal: stopping.signal });
+    const closed = new Promise((resolve) => {
+        server.onclose = resolve;
+    });
+    // Calls in flight end first: closing would leave their answers with no way out
     const close = async () => {
+        stopping.abort();
+        await childrenFinished();
+        await setImmediate(); // Each answer is a few promises away from the child's end
         await server.close();
     };
-    const handleShutdown = async () => {
-        await close();
-        process.exit(0);
-    };
-    process.on('SIGINT', handleShutdown);
-    process.on('SIGTERM', handleShutdown);
-    return { close };
+    process.once('SIGINT', close);
+    process.once('SIGTERM', close);
+    process.stdin.once('end', close);
+    process.stdout.on('error', () => { }); // A client that left can't be answered, and that's fine
+    await server.connect(new StdioServerTransport());
+    await closed;
 }
 //# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAIjF,+DAA+D;AAE/D;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAI/B;IACA,OAAO,IAAI,SAAS,CACnB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAC1C,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CACnC,CAAC;AACH,CAAC;AAED,+DAA+D;AAE/D;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,MAAiB,EAAE,aAAiC;IACjF,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAExD,IAAI,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,YAAY,CAClB,GAAG,CAAC,IAAI,EACR;gBACC,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,WAAW,EAAE,GAAG,CAAC,UAAU;gBAC3B,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D,EACD,KAAK,EAAE,KAA8B,EAAE,EAAE;gBACxC,OAAO,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvC,CAAC,CACD,CAAC;QACH,CAAC;aAAM,CAAC;YACP,MAAM,CAAC,YAAY,CAClB,GAAG,CAAC,IAAI,EACR;gBACC,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D,EACD,KAAK,IAAI,EAAE;gBACV,OAAO,kBAAkB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACpC,CAAC,CACD,CAAC;QACH,CAAC;IACF,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,kBAAkB,CAChC,GAAqB,EACrB,KAA8B;IAE9B,yCAAyC;IACzC,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,UAAU,GAA4B,EAAE,CAAC;IAE/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;aAAM,CAAC;YACP,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;IACF,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;YACpC,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,UAAU;YACnB,aAAa,EAAE,EAAE;YACjB,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI;YACzB,OAAO,EAAE,EAAE;YACX,IAAI,EAAE,EAAE;SACR,CAAC,CAAC;QAEH,wDAAwD;QACxD,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACtB,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/B,OAAO;gBACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC3E,iBAAiB,EAAE,MAAiC;aACpD,CAAC;QACH,CAAC;QAED,oDAAoD;QACpD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACnF,OAAO;gBACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC;aAC1C,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,OAAO;YACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,YAAY,GAAG,CAAC,IAAI,0BAA0B,EAAE,CAAC;SAC1F,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO;YACN,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACtD;aACD;SACD,CAAC;IACH,CAAC;AACF,CAAC;AAED,+DAA+D;AAE/D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAiB;IAClD,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACxB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;QACjC,MAAM,KAAK,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACrC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAEtC,OAAO,EAAE,KAAK,EAAE,CAAC;AAClB,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACN,qBAAqB,EAErB,sBAAsB,GAEtB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EAAgB,CAAC,EAAE,MAAM,KAAK,CAAC;AAEtC,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGzD,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC,+DAA+D;AAE/D,SAAS,YAAY,CAAC,MAAe;IACpC,OAAO,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,oDAAoD;AACpD,SAAS,gBAAgB,CAAC,GAAqB;IAC9C,IAAI,CAAC,GAAG,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAqB;IACnD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO;QACN,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAwB;QAC1E,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,MAAM,CAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;AACH,CAAC;AAED,+DAA+D;AAE/D,MAAM,OAAO,GAAG,CAAC,IAAY,EAAkB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;AAoB1F,MAAM,WAAW,GAA2B;IAC3C,IAAI,EAAE,kDAAkD;IACxD,SAAS,EAAE,2CAA2C;IACtD,OAAO,EAAE,0EAA0E;CACnF,CAAC;AAEF;;;;GAIG;AACH,SAAS,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAgB;IAChE,MAAM,OAAO,GAAG,CAAC,IAAwB,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAElE,IAAI,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAChE,IAAI,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACpF,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9C,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,MAAM,EAAE,MAAM,KAAK,QAAQ,CAAC;QAC5C,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,kBAAkB,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC5E,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5F,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACxE,CAAC;AAED,kFAAkF;AAClF,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,KAAkB,EAAkB,EAAE,CAAC,CAAC;IACxE,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;IAC9E,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,EAAE;CAC3E,CAAC,CAAC;AAEH,SAAS,WAAW,CACnB,GAAqB,EACrB,OAAqB,EACrB,KAAkB;IAElB,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IAChF,IAAI,SAAS,EAAE,CAAC;QACf,OAAO,OAAO,CACb,YAAY,GAAG,CAAC,IAAI,cAAc,SAAS,CAAC,KAAK,6BAA6B,GAAG,CAAC,SAAS,GAAG,EAC9F,KAAK,CACL,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACtC,OAAO,OAAO,CAAC,OAAO,IAAI,OAAO,IAAI,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,aAAa,CAAC,GAAqB,EAAE,OAAqB,EAAE,KAAkB;IACtF,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW;QAAE,OAAO,YAAY,GAAG,CAAC,IAAI,kBAAkB,CAAC;IAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,YAAY,GAAG,CAAC,IAAI,sBAAsB,OAAO,CAAC,MAAM,GAAG,CAAC;IAC7F,OAAO,YAAY,GAAG,CAAC,IAAI,aAAa,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC;AACvF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAqB,EAAE,OAAqB;IACxE,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK;QAAE,OAAO,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAEnD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAErC,mEAAmE;IACnE,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;IAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3C,OAAO,OAAO,CAAC,MAAM,IAAI,YAAY,GAAG,CAAC,IAAI,0BAA0B,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAChF,OAAO,gBAAgB,CAAC,GAAG,CAAC;QAC3B,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,KAAgC,EAAE;QAC3E,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAClB,CAAC;AAUD,2EAA2E;AAC3E,KAAK,UAAU,kBAAkB,CAAC,OAAmB;IACpD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CACjC,EAAE,IAAI,EAAE,MAAM,EAAE,EAChB,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAClE,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC;QAAE,OAAO;IAE7D,MAAM,IAAI,SAAS,CAClB,6CAA6C,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;QAC7E,6DAA6D,EAC9D,EAAE,IAAI,EAAE,uBAAuB,EAAE,CACjC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,aAAiC,EAAE,OAAqB;IACvF,MAAM,MAAM,GAAG,IAAI,MAAM,CACxB,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAChD,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CACnE,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;QACvD,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC;KACxC,CAAC,CAAC,CAAC;IAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE;QAC3E,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9E,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,OAAO,OAAO,CAAC,iBAAiB,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,qEAAqE;QACrE,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAC/B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAC7E,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC7B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,CAAC,SAAS,EAAE,EACtE;YACC,GAAG,OAAO;YACV,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;YACvF,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,UAAU,EAAE,GAAG,CAAC,UAAU;SAC1B,CACD,CAAC;QACF,OAAO,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAC1B,aAAiC,EACjC,OAAqB;IAErB,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAElC,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,eAAe,CAAC,aAAa,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC5C,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACxB,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,gBAAgB,EAAE,CAAC;QACzB,MAAM,YAAY,EAAE,CAAC,CAAC,0DAA0D;QAChF,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC/B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,wDAAwD;IAE9F,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;IACjD,MAAM,MAAM,CAAC;AACd,CAAC"}

package/dist/types.d.ts

@@ -3,6 +3,23 @@
  *
  * Plugin options for mcpPlugin().
  */
+import type { ToolAnnotations } from '@modelcontextprotocol/sdk/types.js';
+/** What the model can do with one tool, and how it is told about it. */
+export interface ToolOptions {
+    /** What the model reads about this tool, instead of the command's description */
+    description?: string;
+    /**
+     * Hints for the client, as MCP defines them, e.g. `{ destructiveHint: true }`.
+     * They are not access control: to keep a command from an agent, use `exclude`.
+     */
+    annotations?: ToolAnnotations;
+    /** Options the model can set, even if they declare env or have a config value */
+    expose?: string[];
+    /** Options that must come from env or config: without a value, the server won't start */
+    serverOnly?: string[];
+    /** Most bytes of output for this tool, instead of the plugin's `maxOutput` */
+    maxOutput?: number;
+}
 /**
  * Options for mcpPlugin().
  */
@@ -13,5 +30,22 @@ export interface McpPluginOptions {
     version?: string;
     /** Server instructions for cross-tool workflows */
     instructions?: string;
+    /**
+     * How to start this CLI again: executable and arguments. Each tool call runs
+     * it as a child process. The default repeats how this process was started,
+     * and the server checks it before accepting calls. Set it if that check fails,
+     * e.g. `[process.execPath]` for a binary.
+     */
+    selfCommand?: string[];
+    /** Tools that won't exist for an agent, e.g. `['deploy', 'config_reset']` */
+    exclude?: string[];
+    /**
+     * Most bytes a tool can answer with. Longer output keeps its start and end,
+     * with a notice. A returned value isn't cut: over this limit, the call fails.
+     * Default: 100 KiB.
+     */
+    maxOutput?: number;
+    /** Per-tool settings, by tool name, e.g. `{ deploy: { serverOnly: ['token'] } }` */
+    tools?: Record<string, ToolOptions>;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAE1E,wEAAwE;AACxE,MAAM,WAAW,WAAW;IAC3B,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,iFAAiF;IACjF,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,yFAAyF;IACzF,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CACpC"}

package/dist/types.js

@@ -1,7 +1,2 @@
-/**
- * @runa-cmd/mcp — Type definitions
- *
- * Plugin options for mcpPlugin().
- */
 export {};
 //# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runa-cmd/mcp",
-  "version": "0.2.0-beta.0",
+  "version": "0.2.0-beta.2",
   "description": "MCP (Model Context Protocol) server mode for Runa CLIs. Turn commands into AI-callable tools.",
   "license": "MIT",
   "type": "module",
@@ -25,7 +25,7 @@
     "@modelcontextprotocol/sdk": "^1.29.0"
   },
   "peerDependencies": {
-    "@runa-cmd/core": "^0.2.0-beta.0",
+    "@runa-cmd/core": "^0.2.0-beta.1",
     "zod": "^4.0.0"
   },
   "engines": {
@@ -51,7 +51,7 @@
     "@types/node": "^25.6.0",
     "typescript": "^6.0.2",
     "zod": "^4.3.6",
-    "@runa-cmd/core": "0.2.0-beta.0"
+    "@runa-cmd/core": "0.2.0-beta.2"
   },
   "scripts": {
     "build": "tsc",