@sync.so/mcp-server 0.1.3 → 0.2.0

package/dist/http-session.d.ts

@@ -0,0 +1,18 @@
+import type { McpServer } from '@modelcontextprotocol/server';
+import type { Request, Response } from 'express';
+import { OrganizationSession } from './organization-selection.js';
+export declare function isSessionControlRequest(body: unknown): boolean;
+/** Only handshake metadata survives between requests; SDK graphs never do. */
+export declare class HttpSession {
+    #private;
+    readonly clientName: string;
+    private readonly createServer;
+    private readonly reportProtocol;
+    private readonly reportError;
+    /** The organization chosen in this MCP session; per-request servers read it from context. */
+    readonly organization: OrganizationSession;
+    constructor(clientName: string, createServer: (clientName?: string, handshakeClientName?: string) => McpServer, reportProtocol: (version: string) => void, reportError?: (details: Record<string, unknown>) => void);
+    handleRequest(req: Request, res: Response, initialize?: boolean): Promise<void>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=http-session.d.ts.map

package/dist/http-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-session.d.ts","sourceRoot":"","sources":["../src/http-session.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAA4B,MAAM,6BAA6B,CAAC;AAE5F,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAW9D;AAED,8EAA8E;AAC9E,qBAAa,WAAW;;IAWpB,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAN9B,6FAA6F;IAC7F,QAAQ,CAAC,YAAY,sBAA6B;IAClD,YACW,UAAU,EAAE,MAAM,EACV,YAAY,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,mBAAmB,CAAC,EAAE,MAAM,KAAK,SAAS,EAC9E,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,EACzC,WAAW,GAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAe,EACjF;IAEE,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,UAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAgJlF;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAQ3B;CACF"}

package/dist/http-session.js

@@ -0,0 +1,189 @@
+import { CancelledNotificationSchema, InitializedNotificationSchema, JSONRPCMessageSchema, JSONRPCNotificationSchema, } from '@modelcontextprotocol/core';
+import { NodeStreamableHTTPServerTransport } from '@modelcontextprotocol/node';
+import { SUPPORTED_PROTOCOL_VERSIONS } from '@modelcontextprotocol/server';
+import { OrganizationSession, runInOrganizationSession } from './organization-selection.js';
+export function isSessionControlRequest(body) {
+    const messages = Array.isArray(body) ? body : [body];
+    return (messages.length > 0 &&
+        messages.every((message) => JSONRPCNotificationSchema.safeParse(message).success &&
+            (InitializedNotificationSchema.safeParse(message).success ||
+                CancelledNotificationSchema.safeParse(message).success)));
+}
+/** Only handshake metadata survives between requests; SDK graphs never do. */
+export class HttpSession {
+    clientName;
+    createServer;
+    reportProtocol;
+    reportError;
+    #active = new Map();
+    #running = new Map();
+    #initialized = false;
+    #closed = false;
+    /** The organization chosen in this MCP session; per-request servers read it from context. */
+    organization = new OrganizationSession();
+    constructor(clientName, createServer, reportProtocol, reportError = () => { }) {
+        this.clientName = clientName;
+        this.createServer = createServer;
+        this.reportProtocol = reportProtocol;
+        this.reportError = reportError;
+    }
+    async handleRequest(req, res, initialize = false) {
+        if (this.#closed) {
+            res.status(404).json({ error: 'Session not found' });
+            return;
+        }
+        const body = req.body;
+        if (req.method !== 'POST') {
+            res.setHeader('Allow', 'POST, DELETE');
+            res.status(405).end();
+            return;
+        }
+        const protocol = req.headers['mcp-protocol-version'];
+        if (protocol !== undefined &&
+            (typeof protocol !== 'string' || !SUPPORTED_PROTOCOL_VERSIONS.includes(protocol))) {
+            res.status(400).json({ error: 'Unsupported protocol version' });
+            return;
+        }
+        const accept = req.headers.accept;
+        if (!accept?.includes('application/json') || !accept.includes('text/event-stream')) {
+            res.status(406).end();
+            return;
+        }
+        const notification = JSONRPCNotificationSchema.safeParse(body).success;
+        // No per-request server is needed for these lifecycle notifications.
+        if (notification && InitializedNotificationSchema.safeParse(body).success) {
+            this.#initialized = true;
+            res.status(202).end();
+            return;
+        }
+        const cancelled = CancelledNotificationSchema.safeParse(body);
+        if (notification && cancelled.success && cancelled.data.params.requestId !== undefined) {
+            const target = this.#active.get(cancelled.data.params.requestId);
+            await target?.cancel(body);
+            res.status(202).end();
+            return;
+        }
+        const messages = Array.isArray(body) ? body : [body];
+        const parsed = messages.map((value) => JSONRPCMessageSchema.safeParse(value));
+        if (parsed.some((result) => !result.success)) {
+            res.status(400).json({ error: 'Invalid JSON-RPC message' });
+            return;
+        }
+        for (const result of parsed) {
+            if (!result.success)
+                continue;
+            const batchNotification = JSONRPCNotificationSchema.safeParse(result.data);
+            if (!batchNotification.success)
+                continue;
+            if (InitializedNotificationSchema.safeParse(batchNotification.data).success)
+                this.#initialized = true;
+            const batchCancelled = CancelledNotificationSchema.safeParse(batchNotification.data);
+            if (batchCancelled.success && batchCancelled.data.params.requestId !== undefined)
+                await this.#active
+                    .get(batchCancelled.data.params.requestId)
+                    ?.cancel(batchNotification.data);
+        }
+        if (isSessionControlRequest(body)) {
+            res.status(202).end();
+            return;
+        }
+        if (!initialize && !this.#initialized) {
+            res.status(400).json({ error: 'Complete MCP initialization before sending requests' });
+            return;
+        }
+        const ids = [];
+        for (const result of parsed) {
+            if (!result.success || !('method' in result.data))
+                continue;
+            if (!initialize && result.data.method === 'initialize') {
+                res.status(400).json({ error: 'Session is already initialized' });
+                return;
+            }
+            if ('id' in result.data)
+                ids.push(result.data.id);
+        }
+        if (new Set(ids).size !== ids.length || ids.some((id) => this.#active.has(id))) {
+            res.status(400).json({ error: 'Request ID is already in flight in this session' });
+            return;
+        }
+        const server = this.createServer(initialize ? undefined : this.clientName, this.clientName);
+        const transport = new NodeStreamableHTTPServerTransport({
+            sessionIdGenerator: undefined,
+            enableJsonResponse: true,
+        });
+        const completed = new Set();
+        const send = transport.send.bind(transport);
+        transport.send = async (reply, options) => {
+            if ('id' in reply && reply.id !== undefined && ('result' in reply || 'error' in reply))
+                completed.add(reply.id);
+            if ('error' in reply || ('result' in reply && reply.result.isError === true)) {
+                this.reportError({
+                    requestId: res.locals.requestId,
+                    category: 'error' in reply ? 'protocol' : 'tool',
+                    ...('error' in reply ? { code: reply.error.code } : {}),
+                });
+            }
+            if (initialize && 'result' in reply && typeof reply.result.protocolVersion === 'string')
+                this.reportProtocol(reply.result.protocolVersion);
+            return send(reply, options);
+        };
+        this.#running.set(server, res);
+        if (!initialize)
+            for (const id of ids)
+                this.#active.set(id, {
+                    cancel: async (cancelNotification) => {
+                        if (completed.has(id))
+                            return;
+                        const cancelMessage = JSONRPCNotificationSchema.parse(cancelNotification);
+                        transport.onmessage?.(cancelMessage);
+                        if (ids.length === 1) {
+                            res.destroy();
+                            await server.close();
+                        }
+                        else {
+                            // Legacy JSON batches need a terminal slot to deliver unrelated results.
+                            await transport.send({
+                                jsonrpc: '2.0',
+                                id,
+                                error: { code: -32800, message: 'Request cancelled' },
+                            });
+                        }
+                    },
+                });
+        let disconnected;
+        const closedResponse = new Promise((resolve) => {
+            disconnected = resolve;
+        });
+        const onClose = () => {
+            if (!res.writableFinished)
+                disconnected();
+        };
+        res.once('close', onClose);
+        try {
+            await server.connect(transport);
+            if (req.aborted || res.destroyed)
+                return;
+            // A disconnected client must release the SDK graph and abort its handlers,
+            // even when no JSON response can finish.
+            await Promise.race([
+                runInOrganizationSession(this.organization, () => transport.handleRequest(req, res, req.body)),
+                closedResponse,
+            ]);
+        }
+        finally {
+            res.off('close', onClose);
+            if (!initialize)
+                for (const id of ids)
+                    this.#active.delete(id);
+            this.#running.delete(server);
+            await server.close();
+        }
+    }
+    async close() {
+        this.#closed = true;
+        await Promise.allSettled([...this.#running].map(async ([server, response]) => {
+            response.destroy();
+            await server.close();
+        }));
+    }
+}

package/dist/index.d.ts

@@ -1,12 +1,13 @@
 export type { ApiKeyAuth, DeviceAuthToken } from './auth/index.js';
-export { clearToken, createApiKeyAuth, loadToken, performDeviceAuth, saveToken, } from './auth/index.js';
+export { clearToken, createApiKeyAuth, createOAuthProvider, getAuthToken, loadToken, performDeviceAuth, runWithAuth, saveToken, } from './auth/index.js';
 export type { SyncMcpConfig } from './config.js';
 export { resolveConfig } from './config.js';
 export type { HttpClient } from './http-client.js';
 export { createHttpClient } from './http-client.js';
-export type { JsonSchema, OpenApiSpec, ParsedOperation, ParsedParameter, } from './openapi/index.js';
+export { startHttpServer } from './http-server.js';
+export type { JsonSchema, OpenApiSpec, ParsedOperation, ParsedParameter } from './openapi/index.js';
 export { fetchSpec, loadSpecFromFile, parseSpec } from './openapi/index.js';
-export { createSyncMcpServer } from './server.js';
+export { createMcpServerFactory, createSyncMcpServer } from './server.js';
 export type { McpToolDefinition, ToolRegistry } from './tools/index.js';
 export { createToolRegistry, generateTools, getOverride, operationIdToToolName, } from './tools/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,SAAS,EACT,iBAAiB,EACjB,SAAS,GACV,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,YAAY,EACV,UAAU,EACV,WAAW,EACX,eAAe,EACf,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,qBAAqB,GACtB,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,mBAAmB,EACnB,YAAY,EACZ,SAAS,EACT,iBAAiB,EACjB,WAAW,EACX,SAAS,GACV,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAEpG,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC1E,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,qBAAqB,GACtB,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -1,6 +1,7 @@
-export { clearToken, createApiKeyAuth, loadToken, performDeviceAuth, saveToken, } from './auth/index.js';
+export { clearToken, createApiKeyAuth, createOAuthProvider, getAuthToken, loadToken, performDeviceAuth, runWithAuth, saveToken, } from './auth/index.js';
 export { resolveConfig } from './config.js';
 export { createHttpClient } from './http-client.js';
+export { startHttpServer } from './http-server.js';
 export { fetchSpec, loadSpecFromFile, parseSpec } from './openapi/index.js';
-export { createSyncMcpServer } from './server.js';
+export { createMcpServerFactory, createSyncMcpServer } from './server.js';
 export { createToolRegistry, generateTools, getOverride, operationIdToToolName, } from './tools/index.js';

package/dist/oauth-response.d.ts

@@ -0,0 +1,3 @@
+/** Cancel the body reader explicitly, including when fetch's abort does not settle it. */
+export declare function readOAuthResponseText(response: Response, signal: AbortSignal): Promise<string>;
+//# sourceMappingURL=oauth-response.d.ts.map

package/dist/oauth-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-response.d.ts","sourceRoot":"","sources":["../src/oauth-response.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,MAAM,CAAC,CAyBjB"}

package/dist/oauth-response.js

@@ -0,0 +1,30 @@
+/** Cancel the body reader explicitly, including when fetch's abort does not settle it. */
+export async function readOAuthResponseText(response, signal) {
+    if (!response.body) {
+        signal.throwIfAborted();
+        return '';
+    }
+    const reader = response.body.getReader();
+    const cancel = () => {
+        void reader.cancel(signal.reason).catch(() => { });
+    };
+    signal.addEventListener('abort', cancel, { once: true });
+    if (signal.aborted)
+        cancel();
+    const decoder = new TextDecoder();
+    let text = '';
+    try {
+        while (true) {
+            signal.throwIfAborted();
+            const { done, value } = await reader.read();
+            signal.throwIfAborted();
+            if (done)
+                return text + decoder.decode();
+            text += decoder.decode(value, { stream: true });
+        }
+    }
+    finally {
+        signal.removeEventListener('abort', cancel);
+        reader.releaseLock();
+    }
+}

package/dist/openapi/index.d.ts

@@ -1,4 +1,4 @@
 export { fetchSpec, loadSpecFromFile } from './fetcher.js';
-export { parseSpec, resolveRef, resolveSchemaRefs } from './parser.js';
-export type { JsonSchema, OpenApiSpec, ParsedOperation, ParsedParameter, } from './types.js';
+export { parseSpec } from './parser.js';
+export type { JsonSchema, OpenApiSpec, ParsedOperation, ParsedParameter } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/openapi/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/openapi/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACvE,YAAY,EACV,UAAU,EACV,WAAW,EACX,eAAe,EACf,eAAe,GAChB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/openapi/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC"}

package/dist/openapi/index.js

@@ -1,2 +1,2 @@
 export { fetchSpec, loadSpecFromFile } from './fetcher.js';
-export { parseSpec, resolveRef, resolveSchemaRefs } from './parser.js';
+export { parseSpec } from './parser.js';

package/dist/openapi/parser.d.ts

@@ -2,4 +2,6 @@ import type { JsonSchema, OpenApiSpec, ParsedOperation } from './types.js';
 export declare function parseSpec(spec: OpenApiSpec): ParsedOperation[];
 export declare function resolveRef(spec: OpenApiSpec, ref: string): JsonSchema;
 export declare function resolveSchemaRefs(schema: JsonSchema, spec: OpenApiSpec): JsonSchema;
+/** Read a property through the DTO wrappers emitted by the API. */
+export declare function schemaProperty(schema: JsonSchema | undefined, name: string): JsonSchema | undefined;
 //# sourceMappingURL=parser.d.ts.map

package/dist/openapi/parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../src/openapi/parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAmB,MAAM,YAAY,CAAC;AAI5F,wBAAgB,SAAS,CAAC,IAAI,EAAE,WAAW,GAAG,eAAe,EAAE,CAiC9D;AAgDD,wBAAgB,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAUrE;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,CA2BnF"}
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../src/openapi/parser.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAmB,MAAM,YAAY,CAAC;AAqB5F,wBAAgB,SAAS,CAAC,IAAI,EAAE,WAAW,GAAG,eAAe,EAAE,CAiD9D;AAgDD,wBAAgB,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAUrE;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,CA2BnF;AAED,mEAAmE;AACnE,wBAAgB,cAAc,CAC5B,MAAM,EAAE,UAAU,GAAG,SAAS,EAC9B,IAAI,EAAE,MAAM,GACX,UAAU,GAAG,SAAS,CAQxB"}

package/dist/openapi/parser.js

@@ -1,4 +1,21 @@
+import { FEEDBACK_OPERATION_ID } from '../tools/feedback.js';
 const HTTP_METHODS = ['get', 'post', 'put', 'patch', 'delete'];
+/** Only these tags produce MCP tools — everything else is filtered out. */
+const ALLOWED_TAGS = new Set([
+    'generate',
+    'generations',
+    'models',
+    'assets',
+    'projects',
+    'voices',
+    'text-to-speech',
+    'transcriptions',
+    'dialogue edits',
+    'dubbing',
+    'audio trims',
+    // Read by the curated batches_* tools; createTools generates none from it.
+    'batch',
+]);
 export function parseSpec(spec) {
     const operations = [];
     for (const [path, pathItem] of Object.entries(spec.paths)) {
@@ -7,7 +24,15 @@ export function parseSpec(spec) {
             if (!operation)
                 continue;
             const tags = operation.tags ?? [];
-            if (tags.includes('internal'))
+            const isChatgptCollector = path === '/v2/analytics/chatgpt-events' &&
+                method === 'post' &&
+                operation.operationId === 'analytics_captureChatgptEvent';
+            const isFeedbackCollector = path === '/v2/feedback' &&
+                method === 'post' &&
+                operation.operationId === FEEDBACK_OPERATION_ID;
+            if (!isChatgptCollector &&
+                !isFeedbackCollector &&
+                !tags.some((t) => ALLOWED_TAGS.has(t.toLowerCase())))
                 continue;
             const operationId = operation.operationId;
             if (!operationId)
@@ -25,6 +50,9 @@ export function parseSpec(spec) {
                 parameters,
                 requestBody,
                 isMultipart,
+                ...(operation['x-sync-studio-drafts'] === 1 ? { studioDraftVersion: 1 } : {}),
+                ...(operation['x-sync-studio-views'] === 1 ? { studioViewVersion: 1 } : {}),
+                ...(operation['x-sync-saved-asset-dubbing'] === 1 ? { savedAssetDubbingVersion: 1 } : {}),
             });
         }
     }
@@ -99,3 +127,15 @@ export function resolveSchemaRefs(schema, spec) {
     }
     return result;
 }
+/** Read a property through the DTO wrappers emitted by the API. */
+export function schemaProperty(schema, name) {
+    const properties = schema?.properties;
+    if (properties?.[name])
+        return properties[name];
+    for (const member of schema?.allOf ?? []) {
+        const found = schemaProperty(member, name);
+        if (found)
+            return found;
+    }
+    return undefined;
+}

package/dist/openapi/types.d.ts

@@ -18,6 +18,9 @@ export type ParsedOperation = {
         contentType: string;
     };
     isMultipart: boolean;
+    savedAssetDubbingVersion?: number;
+    studioDraftVersion?: number;
+    studioViewVersion?: number;
 };
 export type JsonSchema = Record<string, unknown>;
 export type OpenApiSpec = {

package/dist/openapi/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/openapi/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IAChC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,UAAU,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,WAAW,CAAC,EAAE;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEjD,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACxD,UAAU,CAAC,EAAE;QACX,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAChC,WAAW,CAAC,EAAE;QACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,MAAM,EAAE,UAAU,CAAA;SAAE,CAAC,CAAC;QAChD,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IAChC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,UAAU,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/openapi/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IAChC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,UAAU,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,WAAW,CAAC,EAAE;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,WAAW,EAAE,OAAO,CAAC;IACrB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEjD,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACxD,UAAU,CAAC,EAAE;QACX,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAChC,WAAW,CAAC,EAAE;QACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,MAAM,EAAE,UAAU,CAAA;SAAE,CAAC,CAAC;QAChD,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IAChC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,UAAU,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC"}

package/dist/organization-selection.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Per-request organization choice for session and OAuth credentials (sync-api-v2,
+ * CRAFT-7789). API keys are bound to their organization and never send it.
+ */
+export declare const ORGANIZATION_HEADER = "x-sync-organization-id";
+export type OrganizationSummary = {
+    id: string;
+    name: string | null;
+};
+/** Where a call ran: a named organization, or null for the credential's own, sent without a header. */
+export type RanIn = OrganizationSummary | null;
+/** Taken before an account read starts; recordFeatures refuses its answer after a switch. */
+export type FeatureStamp = Readonly<{
+    generation: number;
+}>;
+/**
+ * One MCP session's organization: the stdio process, or one hosted session. Nothing here
+ * grants access; the API checks membership on every request that names an organization.
+ */
+export declare class OrganizationSession {
+    #private;
+    /** Chosen with organizations_select; every later call in this session sends it. */
+    get selected(): OrganizationSummary | undefined;
+    /** Switches the session, with the features read for `organization` (undefined: unknown). */
+    select(organization: OrganizationSummary, features: readonly string[] | undefined): void;
+    featureStamp(): FeatureStamp;
+    /** The organization calls in this session run in, when known: the selection, else the default. */
+    activeOrganizationId(): string | undefined;
+    /**
+     * Keeps features GET /v2/account answered for `organizationId`, unless the session switched
+     * since `stamp` was taken or the answer is for another organization than the active one.
+     * Undefined features clear what was kept. Returns whether the write was kept.
+     */
+    recordFeatures(features: readonly string[] | undefined, stamp: FeatureStamp, organizationId: string | undefined): boolean;
+    /**
+     * The active organization's features, when they were read for it in the current selection;
+     * undefined means unknown, so read them again.
+     */
+    activeFeatures(): readonly string[] | undefined;
+    /** The credential's own organization, as last read without a selection. */
+    defaultOrganization(): OrganizationSummary | undefined;
+    rememberDefault(organization: OrganizationSummary): void;
+    /** Whether calls in this session now run where `organization` is. */
+    isCurrent(organization: RanIn): boolean;
+    /** The credential's own organization id, if it was ever read. */
+    defaultId(): string | undefined;
+    /** Records ids returned by a call that ran in `organization`. */
+    rememberIds(ids: string[], organization: RanIn): void;
+    /** Where a remembered id in these arguments was created; undefined when none is. */
+    organizationFor(args: Record<string, unknown>): RanIn | undefined;
+}
+export declare function runInOrganizationSession<T>(session: OrganizationSession, fn: () => T): T;
+export declare function currentOrganizationSession(): OrganizationSession | undefined;
+/**
+ * Runs `fn` in `organization`, or in the credential's default when undefined, whatever the
+ * session selects meanwhile. The session's selection is not changed.
+ */
+export declare function runInOrganization<T>(organization: OrganizationSummary | undefined, fn: () => T): T;
+/** The organization this call runs in when one was chosen: the call's pin, else the session. */
+export declare function chosenOrganization(): OrganizationSummary | undefined;
+//# sourceMappingURL=organization-selection.d.ts.map

package/dist/organization-selection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-selection.d.ts","sourceRoot":"","sources":["../src/organization-selection.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,eAAO,MAAM,mBAAmB,2BAA2B,CAAC;AAE5D,MAAM,MAAM,mBAAmB,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAEtE,uGAAuG;AACvG,MAAM,MAAM,KAAK,GAAG,mBAAmB,GAAG,IAAI,CAAC;AAM/C,6FAA6F;AAC7F,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE5D;;;GAGG;AACH,qBAAa,mBAAmB;;IAW9B,mFAAmF;IACnF,IAAI,QAAQ,IAAI,mBAAmB,GAAG,SAAS,CAE9C;IAED,4FAA4F;IAC5F,MAAM,CAAC,YAAY,EAAE,mBAAmB,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,IAAI,CAMvF;IAED,YAAY,IAAI,YAAY,CAE3B;IAED,kGAAkG;IAClG,oBAAoB,IAAI,MAAM,GAAG,SAAS,CAEzC;IAED;;;;OAIG;IACH,cAAc,CACZ,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EACvC,KAAK,EAAE,YAAY,EACnB,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,OAAO,CAYT;IAED;;;OAGG;IACH,cAAc,IAAI,SAAS,MAAM,EAAE,GAAG,SAAS,CAM9C;IAED,2EAA2E;IAC3E,mBAAmB,IAAI,mBAAmB,GAAG,SAAS,CAIrD;IAED,eAAe,CAAC,YAAY,EAAE,mBAAmB,GAAG,IAAI,CAGvD;IAED,qEAAqE;IACrE,SAAS,CAAC,YAAY,EAAE,KAAK,GAAG,OAAO,CAMtC;IAED,iEAAiE;IACjE,SAAS,IAAI,MAAM,GAAG,SAAS,CAE9B;IAED,iEAAiE;IACjE,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,KAAK,GAAG,IAAI,CAUpD;IAED,oFAAoF;IACpF,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,KAAK,GAAG,SAAS,CAOhE;CACF;AAMD,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAExF;AAED,wBAAgB,0BAA0B,IAAI,mBAAmB,GAAG,SAAS,CAE5E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EACjC,YAAY,EAAE,mBAAmB,GAAG,SAAS,EAC7C,EAAE,EAAE,MAAM,CAAC,GACV,CAAC,CAEH;AAED,gGAAgG;AAChG,wBAAgB,kBAAkB,IAAI,mBAAmB,GAAG,SAAS,CAGpE"}

package/dist/organization-selection.js

@@ -0,0 +1,142 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+/**
+ * Per-request organization choice for session and OAuth credentials (sync-api-v2,
+ * CRAFT-7789). API keys are bound to their organization and never send it.
+ */
+export const ORGANIZATION_HEADER = 'x-sync-organization-id';
+// Ids a call in another organization returned, so its follow-up reads stay there.
+const REMEMBERED_IDS_LIMIT = 500;
+const DEFAULT_ORGANIZATION_TTL_MS = 60_000;
+/**
+ * One MCP session's organization: the stdio process, or one hosted session. Nothing here
+ * grants access; the API checks membership on every request that names an organization.
+ */
+export class OrganizationSession {
+    #selected;
+    // Bumped by every select(), so an account read that began before a switch can't write after it.
+    #generation = 0;
+    // Feature flags from GET /v2/account, stamped with the organization and selection they belong to.
+    #features;
+    #default;
+    // Kept after the cache expires: tells the credential's own organization from others.
+    #defaultId;
+    #organizationById = new Map();
+    /** Chosen with organizations_select; every later call in this session sends it. */
+    get selected() {
+        return this.#selected;
+    }
+    /** Switches the session, with the features read for `organization` (undefined: unknown). */
+    select(organization, features) {
+        this.#selected = organization;
+        this.#generation += 1;
+        this.#features = features
+            ? { organizationId: organization.id, generation: this.#generation, names: [...features] }
+            : undefined;
+    }
+    featureStamp() {
+        return { generation: this.#generation };
+    }
+    /** The organization calls in this session run in, when known: the selection, else the default. */
+    activeOrganizationId() {
+        return this.#selected?.id ?? this.#defaultId;
+    }
+    /**
+     * Keeps features GET /v2/account answered for `organizationId`, unless the session switched
+     * since `stamp` was taken or the answer is for another organization than the active one.
+     * Undefined features clear what was kept. Returns whether the write was kept.
+     */
+    recordFeatures(features, stamp, organizationId) {
+        if (stamp.generation !== this.#generation)
+            return false;
+        const active = this.activeOrganizationId();
+        if (organizationId && active && organizationId !== active)
+            return false;
+        this.#features = features
+            ? {
+                organizationId: organizationId ?? active,
+                generation: this.#generation,
+                names: [...features],
+            }
+            : undefined;
+        return true;
+    }
+    /**
+     * The active organization's features, when they were read for it in the current selection;
+     * undefined means unknown, so read them again.
+     */
+    activeFeatures() {
+        const kept = this.#features;
+        if (!kept || kept.generation !== this.#generation)
+            return undefined;
+        const active = this.activeOrganizationId();
+        if (kept.organizationId && active && kept.organizationId !== active)
+            return undefined;
+        return kept.names;
+    }
+    /** The credential's own organization, as last read without a selection. */
+    defaultOrganization() {
+        return this.#default && this.#default.expiresAt > Date.now()
+            ? this.#default.organization
+            : undefined;
+    }
+    rememberDefault(organization) {
+        this.#default = { organization, expiresAt: Date.now() + DEFAULT_ORGANIZATION_TTL_MS };
+        this.#defaultId = organization.id;
+    }
+    /** Whether calls in this session now run where `organization` is. */
+    isCurrent(organization) {
+        // Compare by id where one is known: selecting the default organization is no switch.
+        const current = this.selected?.id ?? this.#defaultId;
+        if (organization === null)
+            return this.selected === undefined || this.selected.id === this.#defaultId;
+        return current === organization.id;
+    }
+    /** The credential's own organization id, if it was ever read. */
+    defaultId() {
+        return this.#defaultId;
+    }
+    /** Records ids returned by a call that ran in `organization`. */
+    rememberIds(ids, organization) {
+        for (const id of ids) {
+            this.#organizationById.delete(id);
+            this.#organizationById.set(id, organization);
+        }
+        while (this.#organizationById.size > REMEMBERED_IDS_LIMIT) {
+            const oldest = this.#organizationById.keys().next().value;
+            if (oldest === undefined)
+                break;
+            this.#organizationById.delete(oldest);
+        }
+    }
+    /** Where a remembered id in these arguments was created; undefined when none is. */
+    organizationFor(args) {
+        if (this.#organizationById.size === 0)
+            return undefined;
+        for (const value of Object.values(args)) {
+            if (typeof value === 'string' && this.#organizationById.has(value))
+                return this.#organizationById.get(value);
+        }
+        return undefined;
+    }
+}
+const sessionStore = new AsyncLocalStorage();
+// A call's organization, fixed when it starts; undefined pins the credential's default.
+const callStore = new AsyncLocalStorage();
+export function runInOrganizationSession(session, fn) {
+    return sessionStore.run(session, fn);
+}
+export function currentOrganizationSession() {
+    return sessionStore.getStore();
+}
+/**
+ * Runs `fn` in `organization`, or in the credential's default when undefined, whatever the
+ * session selects meanwhile. The session's selection is not changed.
+ */
+export function runInOrganization(organization, fn) {
+    return callStore.run({ organization }, fn);
+}
+/** The organization this call runs in when one was chosen: the call's pin, else the session. */
+export function chosenOrganization() {
+    const pinned = callStore.getStore();
+    return pinned ? pinned.organization : sessionStore.getStore()?.selected;
+}

package/dist/rate-limits.d.ts

@@ -0,0 +1,13 @@
+/** Before bearer authentication: rejected credentials per address. */
+export declare function createMcpRejectedCredentialLimit(): import("express-rate-limit").RateLimitRequestHandler;
+/** After bearer authentication: requests per verified user, OAuth client and organization. */
+export declare function createMcpUserLimit(): import("express-rate-limit").RateLimitRequestHandler;
+/** Token and revocation requests the API rejected, per address. */
+export declare function createOAuthRejectedRequestLimit(): import("express-rate-limit").RateLimitRequestHandler;
+/**
+ * Accepted token and revocation requests per OAuth client. Client IDs are not secret,
+ * so requests the API rejects never spend a client's allowance; they count against
+ * the sender's address instead.
+ */
+export declare function createOAuthClientLimit(): import("express-rate-limit").RateLimitRequestHandler;
+//# sourceMappingURL=rate-limits.d.ts.map

package/dist/rate-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limits.d.ts","sourceRoot":"","sources":["../src/rate-limits.ts"],"names":[],"mappings":"AA4BA,sEAAsE;AACtE,wBAAgB,gCAAgC,yDAE/C;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,yDAWjC;AAED,mEAAmE;AACnE,wBAAgB,+BAA+B,yDAE9C;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,yDAmBrC"}