@sync.so/mcp-server 0.1.3 → 0.2.0

package/dist/session-registry.d.ts

@@ -0,0 +1,54 @@
+import type { AuthInfo } from '@modelcontextprotocol/server';
+export type SessionOwner = Readonly<{
+    sub: string;
+    clientId: string;
+    organizationId: string | null;
+}>;
+export declare function sessionOwner(auth: AuthInfo | undefined): SessionOwner | undefined;
+type ClosableTransport = {
+    close: () => Promise<void>;
+};
+type SessionRemovalReason = 'closed' | 'expired' | 'evicted' | 'shutdown' | 'initialization_failed';
+type SessionRegistryOptions = {
+    idleTtlMs: number;
+    maxSessions: number;
+    canAdmit?: () => boolean;
+    now?: () => number;
+    onCloseError?: (error: unknown) => void;
+    onRemove?: (sessionId: string, reason: SessionRemovalReason) => void;
+};
+type SessionLease<T extends ClosableTransport> = {
+    transport: T;
+    release: () => void;
+};
+type SessionStats = {
+    active: number;
+    pending: number;
+    inFlight: number;
+    created: number;
+    expired: number;
+    closed: number;
+    rejected: number;
+    rejectedCapacity: number;
+    rejectedMemory: number;
+    evicted: number;
+    limit: number;
+};
+export declare class SessionRegistry<T extends ClosableTransport> {
+    #private;
+    constructor(options: SessionRegistryOptions);
+    get size(): number;
+    stopAccepting(): void;
+    reserve(): {
+        commit: (sessionId: string, transport: T, owner: SessionOwner) => SessionLease<T>;
+        release: () => void;
+    } | undefined;
+    acquire(sessionId: string, owner: SessionOwner): SessionLease<T> | undefined;
+    remove(sessionId: string, reason: SessionRemovalReason, closeTransport?: boolean): Promise<boolean>;
+    sweep(): Promise<number>;
+    closeAll(): Promise<void>;
+    recordRejection(reason: 'capacity' | 'memory'): void;
+    stats(): SessionStats;
+}
+export {};
+//# sourceMappingURL=session-registry.d.ts.map

package/dist/session-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-registry.d.ts","sourceRoot":"","sources":["../src/session-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAE7D,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B,CAAC,CAAC;AAGH,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,CAajF;AAED,KAAK,iBAAiB,GAAG;IACvB,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B,CAAC;AASF,KAAK,oBAAoB,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,uBAAuB,CAAC;AAEpG,KAAK,sBAAsB,GAAG;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACxC,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,KAAK,IAAI,CAAC;CACtE,CAAC;AAEF,KAAK,YAAY,CAAC,CAAC,SAAS,iBAAiB,IAAI;IAC/C,SAAS,EAAE,CAAC,CAAC;IACb,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB,CAAC;AAEF,KAAK,YAAY,GAAG;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,qBAAa,eAAe,CAAC,CAAC,SAAS,iBAAiB;;IAkBtD,YAAY,OAAO,EAAE,sBAAsB,EAO1C;IAED,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,aAAa,IAAI,IAAI,CAEpB;IAED,OAAO,IACH;QACE,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC;QAClF,OAAO,EAAE,MAAM,IAAI,CAAC;KACrB,GACD,SAAS,CAwDZ;IAED,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,SAAS,CAe3E;IAkBK,MAAM,CACV,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,oBAAoB,EAC5B,cAAc,UAAO,GACpB,OAAO,CAAC,OAAO,CAAC,CAsBlB;IAUK,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAQ7B;IAEK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAI9B;IAED,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,IAAI,CAInD;IAED,KAAK,IAAI,YAAY,CAcpB;CACF"}

package/dist/session-registry.js

@@ -0,0 +1,202 @@
+// Only verified userinfo claims participate; token rotation does not change ownership.
+export function sessionOwner(auth) {
+    const sub = auth?.extra?.sub;
+    const clientId = auth?.clientId;
+    const organizationId = auth?.extra?.organizationId;
+    const nonempty = (value) => typeof value === 'string' && value.trim().length > 0;
+    if (!nonempty(sub) ||
+        !nonempty(clientId) ||
+        (organizationId !== undefined && !nonempty(organizationId)))
+        return undefined;
+    return { sub, clientId, organizationId: organizationId ?? null };
+}
+export class SessionRegistry {
+    #entries = new Map();
+    #idleTtlMs;
+    #maxSessions;
+    #canAdmit;
+    #now;
+    #onCloseError;
+    #onRemove;
+    #pending = 0;
+    #accepting = true;
+    #created = 0;
+    #expired = 0;
+    #closed = 0;
+    #rejected = 0;
+    #rejectedCapacity = 0;
+    #rejectedMemory = 0;
+    #evicted = 0;
+    constructor(options) {
+        this.#idleTtlMs = options.idleTtlMs;
+        this.#maxSessions = options.maxSessions;
+        this.#canAdmit = options.canAdmit ?? (() => true);
+        this.#now = options.now ?? Date.now;
+        this.#onCloseError = options.onCloseError ?? (() => undefined);
+        this.#onRemove = options.onRemove ?? (() => undefined);
+    }
+    get size() {
+        return this.#entries.size;
+    }
+    stopAccepting() {
+        this.#accepting = false;
+    }
+    reserve() {
+        if (!this.#accepting)
+            return undefined;
+        // Remove expired entries before admission, even between scheduled sweeps.
+        // remove() deletes synchronously; transport shutdown completes independently.
+        const now = this.#now();
+        for (const [id, entry] of this.#entries) {
+            if (entry.inFlight === 0 && now - entry.lastSeenAt > this.#idleTtlMs)
+                void this.remove(id, 'expired');
+        }
+        if (this.#entries.size + this.#pending >= this.#maxSessions) {
+            let oldest;
+            for (const candidate of this.#entries) {
+                const entry = candidate[1];
+                // Leave time for initialize/initialized/tool handshakes and brief pauses.
+                if (entry.inFlight > 0 || now - entry.lastSeenAt < 30_000)
+                    continue;
+                if (!oldest || entry.lastSeenAt < oldest[1].lastSeenAt)
+                    oldest = candidate;
+            }
+            if (oldest)
+                void this.remove(oldest[0], 'evicted');
+        }
+        if (this.#entries.size + this.#pending >= this.#maxSessions) {
+            this.recordRejection('capacity');
+            return undefined;
+        }
+        if (!this.#canAdmit()) {
+            this.recordRejection('memory');
+            return undefined;
+        }
+        this.#pending += 1;
+        let active = true;
+        const release = () => {
+            if (!active)
+                return;
+            active = false;
+            this.#pending -= 1;
+        };
+        return {
+            commit: (sessionId, transport, owner) => {
+                if (!active)
+                    throw new Error('Session reservation has already been released');
+                if (!this.#accepting) {
+                    release();
+                    throw new Error('Session registry is shutting down');
+                }
+                release();
+                const entry = {
+                    transport,
+                    owner: { ...owner },
+                    lastSeenAt: this.#now(),
+                    inFlight: 0,
+                };
+                this.#entries.set(sessionId, entry);
+                this.#created += 1;
+                return this.#createLease(entry);
+            },
+            release,
+        };
+    }
+    acquire(sessionId, owner) {
+        const entry = this.#entries.get(sessionId);
+        // Deny before touching activity or handing the transport to HTTP dispatch.
+        if (!entry ||
+            entry.owner.sub !== owner.sub ||
+            entry.owner.clientId !== owner.clientId ||
+            entry.owner.organizationId !== owner.organizationId)
+            return undefined;
+        if (entry.inFlight === 0 && this.#now() - entry.lastSeenAt > this.#idleTtlMs) {
+            void this.remove(sessionId, 'expired');
+            return undefined;
+        }
+        return this.#createLease(entry);
+    }
+    #createLease(entry) {
+        entry.inFlight += 1;
+        entry.lastSeenAt = this.#now();
+        let active = true;
+        return {
+            transport: entry.transport,
+            release: () => {
+                if (!active)
+                    return;
+                active = false;
+                entry.inFlight -= 1;
+                entry.lastSeenAt = this.#now();
+            },
+        };
+    }
+    async remove(sessionId, reason, closeTransport = true) {
+        const entry = this.#entries.get(sessionId);
+        if (!entry)
+            return false;
+        this.#entries.delete(sessionId);
+        if (reason === 'expired')
+            this.#expired += 1;
+        if (reason === 'closed')
+            this.#closed += 1;
+        if (reason === 'evicted')
+            this.#evicted += 1;
+        try {
+            this.#onRemove(sessionId, reason);
+        }
+        catch (error) {
+            this.#reportError(error);
+        }
+        if (closeTransport) {
+            try {
+                await entry.transport.close();
+            }
+            catch (error) {
+                this.#reportError(error);
+            }
+        }
+        return true;
+    }
+    #reportError(error) {
+        try {
+            this.#onCloseError(error);
+        }
+        catch {
+            // Observer failures must never interrupt session cleanup.
+        }
+    }
+    async sweep() {
+        const now = this.#now();
+        const expiredIds = [...this.#entries.entries()]
+            .filter(([, entry]) => entry.inFlight === 0 && now - entry.lastSeenAt > this.#idleTtlMs)
+            .map(([sessionId]) => sessionId);
+        await Promise.all(expiredIds.map((sessionId) => this.remove(sessionId, 'expired')));
+        return expiredIds.length;
+    }
+    async closeAll() {
+        await Promise.all([...this.#entries.keys()].map((sessionId) => this.remove(sessionId, 'shutdown')));
+    }
+    recordRejection(reason) {
+        this.#rejected += 1;
+        if (reason === 'capacity')
+            this.#rejectedCapacity += 1;
+        else
+            this.#rejectedMemory += 1;
+    }
+    stats() {
+        return {
+            active: this.#entries.size,
+            pending: this.#pending,
+            inFlight: [...this.#entries.values()].reduce((sum, entry) => sum + entry.inFlight, 0),
+            created: this.#created,
+            expired: this.#expired,
+            closed: this.#closed,
+            rejected: this.#rejected,
+            rejectedCapacity: this.#rejectedCapacity,
+            rejectedMemory: this.#rejectedMemory,
+            evicted: this.#evicted,
+            limit: this.#maxSessions,
+        };
+    }
+}

package/dist/session-telemetry.d.ts

@@ -0,0 +1,13 @@
+/** Process-local pseudonyms: never emit bearer/session IDs, user IDs or arguments. */
+export declare class SessionTelemetry {
+    #private;
+    private readonly emit;
+    private readonly now;
+    constructor(emit: (event: string, data: Record<string, unknown>) => void, now?: () => number);
+    reference(id: string): string;
+    start(id: string, name: string | undefined, protocol: unknown): void;
+    request(id: string, method: string | readonly string[] | undefined): Record<string, unknown>;
+    protocol(id: string, version: string): void;
+    close(id: string, reason: string): void;
+}
+//# sourceMappingURL=session-telemetry.d.ts.map

package/dist/session-telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-telemetry.d.ts","sourceRoot":"","sources":["../src/session-telemetry.ts"],"names":[],"mappings":"AAkBA,sFAAsF;AACtF,qBAAa,gBAAgB;;IAgBzB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAFtB,YACmB,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,EAC5D,GAAG,eAAW,EAC7B;IACJ,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE5B;IACD,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI,CAanE;IACD,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiB3F;IACD,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAG1C;IACD,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAgBtC;CACF"}

package/dist/session-telemetry.js

@@ -0,0 +1,87 @@
+import { createHmac, randomBytes } from 'node:crypto';
+import { resolveClientProfile } from './client-profile.js';
+const CLIENTS = new Set([
+    'chatgpt',
+    'openai',
+    'openai-chatgpt',
+    'openai-mcp',
+    'openai-mcp (codex)',
+    'claude',
+    'claude-ai',
+    'claude-code',
+    'anthropic/claudeai',
+    'hermes-agent',
+    'mcp',
+]);
+const PROTOCOL = /^\d{4}-\d{2}-\d{2}$/;
+/** Process-local pseudonyms: never emit bearer/session IDs, user IDs or arguments. */
+export class SessionTelemetry {
+    emit;
+    now;
+    #key = randomBytes(32);
+    #entries = new Map();
+    constructor(emit, now = Date.now) {
+        this.emit = emit;
+        this.now = now;
+    }
+    reference(id) {
+        return createHmac('sha256', this.#key).update(id).digest('hex').slice(0, 24);
+    }
+    start(id, name, protocol) {
+        const client = name?.toLowerCase();
+        this.#entries.set(id, {
+            started: this.now(),
+            lastRequest: this.now(),
+            requests: 0,
+            toolCalls: 0,
+            discoveries: 0,
+            client: client && CLIENTS.has(client) ? client : 'other',
+            profile: resolveClientProfile(name).name,
+            protocol: typeof protocol === 'string' && PROTOCOL.test(protocol) ? protocol : 'unknown',
+        });
+        this.request(id, 'initialize');
+    }
+    request(id, method) {
+        const entry = this.#entries.get(id);
+        if (!entry)
+            return { sessionRef: this.reference(id) };
+        entry.requests += 1;
+        entry.lastRequest = this.now();
+        for (const item of typeof method === 'string' ? [method] : (method ?? [])) {
+            if (item === 'tools/call')
+                entry.toolCalls += 1;
+            if (['tools/list', 'resources/list', 'server/discover'].includes(item))
+                entry.discoveries += 1;
+        }
+        return {
+            sessionRef: this.reference(id),
+            sessionRequest: entry.requests,
+            clientName: entry.client,
+            clientProfile: entry.profile,
+            protocol: entry.protocol,
+        };
+    }
+    protocol(id, version) {
+        const entry = this.#entries.get(id);
+        if (entry && PROTOCOL.test(version))
+            entry.protocol = version;
+    }
+    close(id, reason) {
+        const entry = this.#entries.get(id);
+        this.#entries.delete(id);
+        if (!entry)
+            return;
+        this.emit('mcp_session_closed', {
+            sessionRef: this.reference(id),
+            reason,
+            clientName: entry.client,
+            clientProfile: entry.profile,
+            protocol: entry.protocol,
+            requests: entry.requests,
+            toolCalls: entry.toolCalls,
+            discoveries: entry.discoveries,
+            lifetimeMs: this.now() - entry.started,
+            idleMs: this.now() - entry.lastRequest,
+        });
+    }
+}

package/dist/spend-confirmation.d.ts

@@ -0,0 +1,21 @@
+import type { McpToolDefinition } from './tools/generator.js';
+/**
+ * Unattended mode: an operator who runs the server for automation (a scheduled agent,
+ * a pipeline) has already approved spending, so prose telling the agent to quote costs
+ * and wait for a human's confirmation only stalls the run. The operator turns it off with
+ * SYNC_MCP_SPEND_CONFIRMATION=off or --no-spend-confirmation; agents cannot.
+ *
+ * Each edit replaces one exact sentence. spend-confirmation.test.ts fails when a sentence
+ * below no longer appears in its source, so wording changes cannot silently undo this.
+ */
+type Edit = readonly [from: string, to: string];
+export declare const UNATTENDED_INSTRUCTIONS_PREFIX = "This connection runs unattended automation, and its operator has already approved spending. Do not quote prices, estimate costs or ask anyone to confirm a paid action unless the request is about cost; create once, then poll the returned job. ";
+export declare const DESCRIPTION_EDITS: readonly Edit[];
+export declare const INSTRUCTION_EDITS: readonly Edit[];
+export declare const TOOL_DESCRIPTION_EDITS: Readonly<Record<string, readonly Edit[]>>;
+export declare function applyEdits(text: string, edits: readonly Edit[]): string;
+export declare function withoutSpendConfirmation(tool: McpToolDefinition): McpToolDefinition;
+/** SYNC_MCP_SPEND_CONFIRMATION accepts off/false/0 (unattended) and on/true/1 (default). */
+export declare function parseSpendConfirmation(value: string | undefined): boolean | undefined;
+export {};
+//# sourceMappingURL=spend-confirmation.d.ts.map

package/dist/spend-confirmation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spend-confirmation.d.ts","sourceRoot":"","sources":["../src/spend-confirmation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D;;;;;;;;GAQG;AACH,KAAK,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AAEhD,eAAO,MAAM,8BAA8B,uPAC2M,CAAC;AAEvP,eAAO,MAAM,iBAAiB,EAAE,SAAS,IAAI,EAK5C,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,SAAS,IAAI,EAuB5C,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC,CAuD5E,CAAC;AAEF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,IAAI,EAAE,GAAG,MAAM,CAEvE;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,iBAAiB,GAAG,iBAAiB,CAGnF;AAED,4FAA4F;AAC5F,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAMrF"}

package/dist/spend-confirmation.js

@@ -0,0 +1,105 @@
+export const UNATTENDED_INSTRUCTIONS_PREFIX = 'This connection runs unattended automation, and its operator has already approved spending. Do not quote prices, estimate costs or ask anyone to confirm a paid action unless the request is about cost; create once, then poll the returned job. ';
+export const DESCRIPTION_EDITS = [
+    [
+        'Check available workflows and estimated generation costs before creating a video.',
+        'Check available workflows before creating a video.',
+    ],
+];
+export const INSTRUCTION_EDITS = [
+    [
+        'Once ready, estimate and confirm the paid translation before calling dubbing_create when available with the returned asset id as videoAssetId. ',
+        'Once ready, call dubbing_create when available with the returned asset id as videoAssetId. ',
+    ],
+    [
+        'Before confirming the paid action, use generations_estimate-cost with workflow=translate-and-dub if its schema supports that option. Show the combined Sync estimate and disclose excluded external provider charges. Without that option or the returned breakdown, the estimate covers lip-sync only; do not present it as the full workflow cost. Confirm the target language and configuration. ',
+        '',
+    ],
+    ['Confirm the source audio, language and quote before translation-previews_create. ', ''],
+    [
+        'After a translated audio preview is saved, estimate and confirm a separate lipsync_create-from-assets using that audio;',
+        'After a translated audio preview is saved, lipsync with that audio in a separate lipsync_create-from-assets or lipsync_create-timeline;',
+    ],
+    ['Confirm script, voice and estimated cost. ', ''],
+    [
+        'then re-quote the saved asset. Preparation is separate from paid generation. ',
+        'then use the saved asset. ',
+    ],
+    [
+        'Before quoting script-driven lipsync, call generations_estimate-cost with the actual replacement script when its schema supports script; use measured audioDuration if the replacement audio already exists. Explain the returned durationEstimate and label script-based pricing approximate until synthesis determines the actual length. Never substitute the full source video duration for replacement speech. Disclose speech synthesis separately. If those inputs are unavailable, estimate spoken duration from the script and label it approximate; do not present a source-video quote as the replacement-script price. Re-estimate after script, audio, model or sync-mode changes. ',
+        '',
+    ],
+];
+export const TOOL_DESCRIPTION_EDITS = {
+    assets_create: [
+        [' Import first, then estimate and confirm translation.', ' Import first, then translate.'],
+    ],
+    lipsync_create: [
+        [
+            'Before confirming, estimate using the replacement script or measured audio duration, not the source video length. Script-based quotes are approximate and exclude speech synthesis. ',
+            '',
+        ],
+    ],
+    'lipsync_create-timeline': [['Estimate and confirm before creating; this starts', 'This starts']],
+    batches_create: [
+        [
+            'This is a paid action: every item is billed as its own generation. Before creating, estimate a representative item with generations_estimate-cost, tell the user the item count and the estimated total, and wait for their confirmation. ',
+            'Every item is billed as its own generation. ',
+        ],
+    ],
+    dubbing_create: [
+        [' before estimating or calling this tool', ' before calling this tool'],
+        [
+            'This is a paid action: confirm the requested language, configuration and estimated cost with the user before calling. Use generations_estimate-cost with workflow=translate-and-dub when that input is supported, and disclose any excluded external provider charges. Without the combined breakdown, lip-sync pricing is not the full workflow cost. ',
+            '',
+        ],
+    ],
+    'translation-previews_create': [
+        [
+            'Create one paid translated-audio preview from a saved audio asset. Confirm language and displayed cost first. ',
+            'Create one translated-audio preview from a saved audio asset. ',
+        ],
+        [
+            'Final video generation is a separate, explicitly approved lip-sync operation',
+            'Final video generation is a separate lip-sync operation',
+        ],
+    ],
+    // Permission to reuse a voice is consent, not spend, so it stays.
+    'dialogue-previews_create': [
+        [
+            'May clone the source speaker voice and incur synthesis charges; confirm the edits and permission to use that voice before creating.',
+            'May clone the source speaker voice; confirm permission to use that voice before creating.',
+        ],
+    ],
+    'dialogue-videos_create': [
+        [
+            "This is a paid action that starts a generation job and consumes Sync credits. First use dialogue-videos_estimate with the same source, preview and model, then obtain the user's approval of the preview, configuration and estimated cost. ",
+            'This starts a generation job. ',
+        ],
+    ],
+    'speech-previews_create': [[' This is a potentially paid action.', '']],
+    'audio-trims_create': [
+        ['Explain and confirm the partial duration first. ', ''],
+        [
+            'use its assetId and actual duration for a fresh quote.',
+            'use its assetId and actual duration.',
+        ],
+    ],
+};
+export function applyEdits(text, edits) {
+    return edits.reduce((result, [from, to]) => result.replace(from, to), text);
+}
+export function withoutSpendConfirmation(tool) {
+    const edits = TOOL_DESCRIPTION_EDITS[tool.name];
+    return edits ? { ...tool, description: applyEdits(tool.description, edits) } : tool;
+}
+/** SYNC_MCP_SPEND_CONFIRMATION accepts off/false/0 (unattended) and on/true/1 (default). */
+export function parseSpendConfirmation(value) {
+    if (value === undefined || value.trim() === '')
+        return undefined;
+    const normalized = value.trim().toLowerCase();
+    if (['off', 'false', '0', 'no'].includes(normalized))
+        return false;
+    if (['on', 'true', '1', 'yes'].includes(normalized))
+        return true;
+    throw new Error(`SYNC_MCP_SPEND_CONFIRMATION must be on or off, not "${value}"`);
+}

package/dist/tool-analytics-context.d.ts

@@ -0,0 +1,11 @@
+/** Who started the current tool call, forwarded with its API requests. */
+export type ToolAttribution = {
+    version: 1;
+    invocation_source: 'model' | 'ui' | 'background' | 'unknown';
+    journey_id?: string;
+    action_id?: string;
+    conversation_id?: string;
+};
+export declare function getToolAnalytics(): ToolAttribution | undefined;
+export declare function runWithToolAnalytics<T>(attribution: ToolAttribution, run: () => T): T;
+//# sourceMappingURL=tool-analytics-context.d.ts.map

package/dist/tool-analytics-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-analytics-context.d.ts","sourceRoot":"","sources":["../src/tool-analytics-context.ts"],"names":[],"mappings":"AAEA,0EAA0E;AAC1E,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,iBAAiB,EAAE,OAAO,GAAG,IAAI,GAAG,YAAY,GAAG,SAAS,CAAC;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAIF,wBAAgB,gBAAgB,IAAI,eAAe,GAAG,SAAS,CAE9D;AAED,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAErF"}

package/dist/tool-analytics-context.js

@@ -0,0 +1,8 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+const context = new AsyncLocalStorage();
+export function getToolAnalytics() {
+    return context.getStore();
+}
+export function runWithToolAnalytics(attribution, run) {
+    return context.run(attribution, run);
+}

package/dist/tool-names.d.ts

@@ -0,0 +1,35 @@
+import type { Tool } from '@modelcontextprotocol/server';
+/**
+ * Tool names follow one `<noun>_<verb>` scheme (CRAFT-7786). This is the permanent record
+ * of every rename, old → new: operationIdToToolName names generated tools through it,
+ * nameTakenByRenamedTool reserves its new names, and analytics report the old names.
+ * Never delete entries; ending the old names' deprecation is OLD_NAME_ALIASES below.
+ */
+export declare const RENAMED_TOOLS: Readonly<Record<string, string>>;
+/** The current name for a name derived from an operationId or used before the rename. */
+export declare function currentToolName(name: string): string;
+/**
+ * True when a generated tool's derived name is already a renamed tool's new name, such as
+ * StudioViewsController_get → studio-views_get. The hand-written tool owns that name, so
+ * the raw operation is never exposed under it.
+ */
+export declare function nameTakenByRenamedTool(derived: string): boolean;
+/** The name a tool had before the rename, if it changed. Permanent; see oldNameAlias. */
+export declare function previousToolName(name: string): string | undefined;
+/**
+ * Temporary: the old names that stay callable, as unlisted aliases that add a notice
+ * naming the new tool, and that app profiles list as app-only tools because retained
+ * Studio bundles and widget templates call them. Remove names here (eventually all of
+ * them) to end the deprecation; RENAMED_TOOLS and generated tool names stay as they are.
+ */
+export declare const OLD_NAME_ALIASES: ReadonlySet<string>;
+/** The old name still callable for this tool during the deprecation, if any. */
+export declare function oldNameAlias(name: string, aliases?: ReadonlySet<string>): string | undefined;
+export declare function renamedToolNotice(legacy: string, name: string): string;
+/**
+ * Widgets cannot call a tool that is not listed, and ChatGPT keeps earlier Studio bundles
+ * and widget templates that call tools by their old names. On app profiles, list those
+ * old names as app-only tools (the model does not see them) for the deprecation period.
+ */
+export declare function withLegacyAppDescriptors(descriptors: Tool[]): Tool[];
+//# sourceMappingURL=tool-names.d.ts.map

package/dist/tool-names.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-names.d.ts","sourceRoot":"","sources":["../src/tool-names.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AAEzD;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAmE1D,CAAC;AAMF,yFAAyF;AACzF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AAID;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,yFAAyF;AACzF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEjE;AAED;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAuC,CAAC;AAEzF,gFAAgF;AAChF,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,WAAW,CAAC,MAAM,CAAoB,GAC9C,MAAM,GAAG,SAAS,CAGpB;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAoBpE"}