@tinycloud/mcp 0.1.0-beta.2

package/README.md

@@ -0,0 +1,23 @@
+# @tinycloud/mcp
+
+Experimental local stdio MCP projection for the canonical TinyCloud operations
+package. It starts in `delegate-session` posture and pins one profile at
+startup. Owner-profile data execution requires an explicit profile selection
+and `--allow-owner-profile`; there is no silent owner fallback.
+
+The tools expose generated operation schemas and canonical structured
+envelopes. An agent can inspect account spaces and applications, then request
+exact delegated access to list or read KV data in a selected non-secrets
+space. Permission requests contain only exact capabilities and redacted
+context. Secret values are not written to TinyCloud logs, errors,
+stderr, request/delegation files, audit records, generated artifacts, or the
+MCP text content channel. MCP hosts may retain structured results in their own
+transcripts, which is outside this package’s control.
+
+The package is published as a beta and requires Node.js 20 or newer.
+
+A new `delegate-session` profile has a key but no TinyCloud session. Bootstrap
+it once with the CLI by creating an exact `tc auth request --cap ...` artifact,
+having the owner grant that request, and importing the result with
+`tc auth import`. Start MCP after that import; subsequent exact requests and
+imports can use the MCP tools.

package/bin/tinycloud-mcp

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+import("../dist/cli.js");

package/dist/cli.cjs

@@ -0,0 +1,417 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/cli.ts
+var cli_exports = {};
+__export(cli_exports, {
+  main: () => main,
+  parseCliOptions: () => parseCliOptions
+});
+module.exports = __toCommonJS(cli_exports);
+var import_node_path2 = require("path");
+var import_profile = require("@tinycloud/operations/profile");
+
+// src/server.ts
+var import_server2 = require("@modelcontextprotocol/server");
+var import_stdio = require("@modelcontextprotocol/server/stdio");
+
+// src/tools.ts
+var import_node_module = require("module");
+var import_node_path = require("path");
+var import_server = require("@modelcontextprotocol/server");
+var import_ajv = require("@modelcontextprotocol/server/validators/ajv");
+var import_operations = require("@tinycloud/operations");
+
+// src/results.ts
+function toMcpToolResult(result) {
+  const canonical = isCanonicalOperationResult(result) ? result : {
+    status: "error",
+    operation: {},
+    context: {},
+    error: { code: "INTERNAL_ERROR" }
+  };
+  return {
+    content: [{ type: "text", text: resultSummary(canonical.status) }],
+    structuredContent: canonical
+  };
+}
+function isCanonicalOperationResult(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
+  const status = value.status;
+  return status === "ok" || status === "authority_required" || status === "setup_required" || status === "error";
+}
+function resultSummary(status) {
+  switch (status) {
+    case "ok":
+      return "TinyCloud operation completed; use the structured result.";
+    case "authority_required":
+      return "TinyCloud authority is required; use the structured request and approval action.";
+    case "setup_required":
+      return "TinyCloud setup is required; use the structured setup action.";
+    case "error":
+      return "TinyCloud operation failed; use the structured error.";
+  }
+}
+
+// src/tools.ts
+var import_meta = {};
+function invocationTargetForMcp(selection) {
+  return {
+    profile: selection.profile,
+    ...selection.explicitProfile && selection.allowOwnerProfile ? { allowOwnerProfile: true } : {}
+  };
+}
+var packageRequire = (0, import_node_module.createRequire)(
+  typeof __dirname === "string" ? (0, import_node_path.join)(__dirname, "tools.cjs") : import_meta.url
+);
+var generatedCatalog = packageRequire(
+  "@tinycloud/operations/operations.json"
+);
+var TOOL_BINDINGS = [
+  {
+    name: "tinycloud_status",
+    operationId: "tinycloud.status.get",
+    operationVersion: 1,
+    readOnlyHint: true,
+    idempotentHint: true,
+    openWorldHint: false
+  },
+  {
+    name: "tinycloud_auth_status",
+    operationId: "tinycloud.auth.status",
+    operationVersion: 1,
+    readOnlyHint: true,
+    idempotentHint: true,
+    openWorldHint: false
+  },
+  {
+    name: "tinycloud_auth_capabilities",
+    operationId: "tinycloud.auth.capabilities",
+    operationVersion: 1,
+    readOnlyHint: true,
+    idempotentHint: true,
+    openWorldHint: false
+  },
+  {
+    name: "tinycloud_auth_request",
+    operationId: "tinycloud.auth.request",
+    operationVersion: 1,
+    readOnlyHint: false,
+    idempotentHint: true,
+    openWorldHint: false
+  },
+  {
+    name: "tinycloud_auth_import",
+    operationId: "tinycloud.auth.import",
+    operationVersion: 1,
+    readOnlyHint: false,
+    idempotentHint: true,
+    openWorldHint: false
+  },
+  {
+    name: "tinycloud_account_spaces_list",
+    operationId: "tinycloud.account.spaces.list",
+    operationVersion: 1,
+    readOnlyHint: true,
+    idempotentHint: true,
+    openWorldHint: true
+  },
+  {
+    name: "tinycloud_account_applications_list",
+    operationId: "tinycloud.account.applications.list",
+    operationVersion: 1,
+    readOnlyHint: true,
+    idempotentHint: true,
+    openWorldHint: true
+  },
+  {
+    name: "tinycloud_kv_list",
+    operationId: "tinycloud.kv.list",
+    operationVersion: 1,
+    readOnlyHint: true,
+    idempotentHint: true,
+    openWorldHint: true
+  },
+  {
+    name: "tinycloud_kv_get",
+    operationId: "tinycloud.kv.get",
+    operationVersion: 1,
+    readOnlyHint: true,
+    idempotentHint: true,
+    openWorldHint: true
+  },
+  {
+    name: "tinycloud_secrets_get",
+    operationId: "tinycloud.secrets.get",
+    operationVersion: 1,
+    readOnlyHint: false,
+    idempotentHint: true,
+    openWorldHint: true
+  }
+];
+function createJsonSchemaValidator() {
+  const ajv = new import_ajv.Ajv({ strict: false });
+  (0, import_ajv.addFormats)(ajv);
+  return new import_ajv.AjvJsonSchemaValidator(ajv);
+}
+function registerTinyCloudTools(server, selection, validator) {
+  const definitions = new Map(
+    generatedCatalog.operations.map((operation) => [
+      `${operation.id}@${operation.version}`,
+      operation
+    ])
+  );
+  for (const binding of TOOL_BINDINGS) {
+    const operation = definitions.get(`${binding.operationId}@${binding.operationVersion}`);
+    if (operation === void 0) {
+      throw new Error(`Generated operations catalog is missing ${binding.operationId}@${binding.operationVersion}.`);
+    }
+    const inputSchema = (0, import_server.fromJsonSchema)(
+      operation.input,
+      validator
+    );
+    const outputSchema = (0, import_server.fromJsonSchema)(
+      operation.result,
+      validator
+    );
+    const annotations = {
+      readOnlyHint: binding.readOnlyHint,
+      idempotentHint: binding.idempotentHint,
+      destructiveHint: false,
+      openWorldHint: binding.openWorldHint
+    };
+    server.registerTool(
+      binding.name,
+      {
+        title: operation.title,
+        description: operation.description,
+        inputSchema,
+        outputSchema,
+        annotations
+      },
+      async (input) => {
+        const result = await (0, import_operations.invokeOperation)(
+          binding.operationId,
+          binding.operationVersion,
+          invocationTargetForMcp(selection),
+          input
+        );
+        return toMcpToolResult(result);
+      }
+    );
+  }
+}
+
+// package.json
+var package_default = {
+  name: "@tinycloud/mcp",
+  version: "0.1.0-beta.2",
+  description: "TinyCloud delegated operations MCP server",
+  author: "TinyCloud, Inc.",
+  license: "EGPL",
+  type: "module",
+  main: "dist/index.cjs",
+  module: "dist/index.js",
+  types: "dist/index.d.ts",
+  bin: {
+    "tinycloud-mcp": "./bin/tinycloud-mcp"
+  },
+  exports: {
+    ".": {
+      types: "./dist/index.d.ts",
+      import: "./dist/index.js",
+      require: "./dist/index.cjs"
+    },
+    "./server": {
+      types: "./dist/server.d.ts",
+      import: "./dist/server.js",
+      require: "./dist/server.cjs"
+    },
+    "./tools": {
+      types: "./dist/tools.d.ts",
+      import: "./dist/tools.js",
+      require: "./dist/tools.cjs"
+    },
+    "./results": {
+      types: "./dist/results.d.ts",
+      import: "./dist/results.js",
+      require: "./dist/results.cjs"
+    }
+  },
+  files: [
+    "dist",
+    "bin",
+    "generated",
+    "skills"
+  ],
+  engines: {
+    node: ">=20"
+  },
+  scripts: {
+    build: "tsup",
+    clean: "rm -rf dist",
+    test: "bun run build && bun scripts/test.ts && bun run check:generated",
+    "test:stdio": "bun run build && bun test src/stdio.test.ts",
+    typecheck: "tsc -p tsconfig.json",
+    generate: "bun scripts/generate.ts",
+    "check:generated": "bun scripts/generate.ts --check"
+  },
+  dependencies: {
+    "@modelcontextprotocol/server": "2.0.0-beta.4",
+    "@tinycloud/operations": "0.1.0-beta.2"
+  },
+  devDependencies: {
+    "@modelcontextprotocol/client": "2.0.0-beta.4",
+    "@types/node": "^20",
+    tsup: "^8.0.0",
+    typescript: "^5.9.3"
+  },
+  repository: {
+    type: "git",
+    url: "https://github.com/tinycloudlabs/web-sdk"
+  }
+};
+
+// src/version.ts
+var MCP_VERSION = package_default.version;
+
+// src/server.ts
+var MCP_SERVER_NAME = "tinycloud-mcp";
+function createTinyCloudMcpServer(selection) {
+  const validator = createJsonSchemaValidator();
+  const server = new import_server2.McpServer(
+    { name: MCP_SERVER_NAME, version: MCP_VERSION },
+    { jsonSchemaValidator: validator }
+  );
+  registerTinyCloudTools(server, selection, validator);
+  return server;
+}
+function serveTinyCloudMcp(selection) {
+  return (0, import_stdio.serveStdio)(
+    () => createTinyCloudMcpServer(selection),
+    { onerror: () => writeBoundedDiagnostic("MCP transport error") }
+  );
+}
+function writeBoundedDiagnostic(message) {
+  process.stderr.write(`[tinycloud-mcp] ${message}
+`);
+}
+
+// src/cli.ts
+var HELP = `TinyCloud delegated operations MCP server
+
+Usage: tinycloud-mcp [options]
+
+Options:
+  --profile <name>       Pin the TinyCloud profile for this process
+  --allow-owner-profile  Allow data execution for an explicitly selected owner profile
+  --help                 Show this help
+  --version              Show the package version
+`;
+function parseCliOptions(arguments_) {
+  let profile;
+  let explicitProfile = false;
+  let allowOwnerProfile = false;
+  let help = false;
+  let version = false;
+  for (let index = 0; index < arguments_.length; index += 1) {
+    const argument = arguments_[index];
+    if (argument === "--help" || argument === "-h") {
+      help = true;
+      continue;
+    }
+    if (argument === "--version" || argument === "-v") {
+      version = true;
+      continue;
+    }
+    if (argument === "--allow-owner-profile") {
+      allowOwnerProfile = true;
+      continue;
+    }
+    if (argument === "--profile") {
+      const value = arguments_[index + 1];
+      if (value === void 0 || value.startsWith("-") || value.trim().length === 0) {
+        throw new Error("--profile requires a non-empty profile name.");
+      }
+      profile = value;
+      explicitProfile = true;
+      index += 1;
+      continue;
+    }
+    if (argument?.startsWith("--profile=")) {
+      const value = argument.slice("--profile=".length);
+      if (value.trim().length === 0) throw new Error("--profile requires a non-empty profile name.");
+      profile = value;
+      explicitProfile = true;
+      continue;
+    }
+    throw new Error(`Unknown option: ${argument}`);
+  }
+  return { profile, explicitProfile, allowOwnerProfile, help, version };
+}
+async function main(arguments_ = process.argv.slice(2)) {
+  let options;
+  try {
+    options = parseCliOptions(arguments_);
+  } catch (error) {
+    process.stderr.write("[tinycloud-mcp] Invalid command line.\n");
+    return 2;
+  }
+  if (options.help) {
+    process.stdout.write(HELP);
+    return 0;
+  }
+  if (options.version) {
+    process.stdout.write(`${MCP_VERSION}
+`);
+    return 0;
+  }
+  let profile;
+  try {
+    profile = await (0, import_profile.resolveInvocationProfileName)(options.profile);
+  } catch {
+    process.stderr.write("[tinycloud-mcp] Could not select a profile.\n");
+    return 2;
+  }
+  serveTinyCloudMcp({
+    profile,
+    explicitProfile: options.explicitProfile,
+    allowOwnerProfile: options.allowOwnerProfile
+  });
+  return 0;
+}
+function isDirectInvocation() {
+  const argv = process.argv[1];
+  if (argv === void 0) return false;
+  return (0, import_node_path2.basename)(argv) === "cli.js" || (0, import_node_path2.basename)(argv) === "cli.cjs" || (0, import_node_path2.basename)(argv) === "tinycloud-mcp";
+}
+if (isDirectInvocation()) {
+  void main().then((code) => {
+    if (code !== 0) process.exitCode = code;
+  }).catch(() => {
+    process.stderr.write("[tinycloud-mcp] Startup failed.\n");
+    process.exitCode = 1;
+  });
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  main,
+  parseCliOptions
+});
+//# sourceMappingURL=cli.cjs.map

package/dist/cli.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli.ts","../src/server.ts","../src/tools.ts","../src/results.ts","../package.json","../src/version.ts"],"sourcesContent":["import { basename } from \"node:path\";\n\nimport { resolveInvocationProfileName } from \"@tinycloud/operations/profile\";\n\nimport { serveTinyCloudMcp, MCP_VERSION } from \"./server.js\";\n\nexport interface ParsedCliOptions {\n  readonly profile?: string;\n  readonly explicitProfile: boolean;\n  readonly allowOwnerProfile: boolean;\n  readonly help: boolean;\n  readonly version: boolean;\n}\n\nconst HELP = `TinyCloud delegated operations MCP server\n\nUsage: tinycloud-mcp [options]\n\nOptions:\n  --profile <name>       Pin the TinyCloud profile for this process\n  --allow-owner-profile  Allow data execution for an explicitly selected owner profile\n  --help                 Show this help\n  --version              Show the package version\n`;\n\nexport function parseCliOptions(arguments_: readonly string[]): ParsedCliOptions {\n  let profile: string | undefined;\n  let explicitProfile = false;\n  let allowOwnerProfile = false;\n  let help = false;\n  let version = false;\n\n  for (let index = 0; index < arguments_.length; index += 1) {\n    const argument = arguments_[index];\n    if (argument === \"--help\" || argument === \"-h\") {\n      help = true;\n      continue;\n    }\n    if (argument === \"--version\" || argument === \"-v\") {\n      version = true;\n      continue;\n    }\n    if (argument === \"--allow-owner-profile\") {\n      allowOwnerProfile = true;\n      continue;\n    }\n    if (argument === \"--profile\") {\n      const value = arguments_[index + 1];\n      if (value === undefined || value.startsWith(\"-\") || value.trim().length === 0) {\n        throw new Error(\"--profile requires a non-empty profile name.\");\n      }\n      profile = value;\n      explicitProfile = true;\n      index += 1;\n      continue;\n    }\n    if (argument?.startsWith(\"--profile=\")) {\n      const value = argument.slice(\"--profile=\".length);\n      if (value.trim().length === 0) throw new Error(\"--profile requires a non-empty profile name.\");\n      profile = value;\n      explicitProfile = true;\n      continue;\n    }\n    throw new Error(`Unknown option: ${argument}`);\n  }\n\n  return { profile, explicitProfile, allowOwnerProfile, help, version };\n}\n\nexport async function main(arguments_: readonly string[] = process.argv.slice(2)): Promise<number> {\n  let options: ParsedCliOptions;\n  try {\n    options = parseCliOptions(arguments_);\n  } catch (error) {\n    process.stderr.write(\"[tinycloud-mcp] Invalid command line.\\n\");\n    return 2;\n  }\n\n  if (options.help) {\n    process.stdout.write(HELP);\n    return 0;\n  }\n  if (options.version) {\n    process.stdout.write(`${MCP_VERSION}\\n`);\n    return 0;\n  }\n\n  let profile: string;\n  try {\n    profile = await resolveInvocationProfileName(options.profile);\n  } catch {\n    process.stderr.write(\"[tinycloud-mcp] Could not select a profile.\\n\");\n    return 2;\n  }\n\n  // The selected profile is now a value captured by the server closure. Every\n  // operation receives it explicitly and cannot re-read TC_PROFILE/config.\n  serveTinyCloudMcp({\n    profile,\n    explicitProfile: options.explicitProfile,\n    allowOwnerProfile: options.allowOwnerProfile,\n  });\n  return 0;\n}\n\nfunction isDirectInvocation(): boolean {\n  const argv = process.argv[1];\n  if (argv === undefined) return false;\n  return basename(argv) === \"cli.js\" || basename(argv) === \"cli.cjs\" || basename(argv) === \"tinycloud-mcp\";\n}\n\nif (isDirectInvocation()) {\n  void main().then((code) => {\n    if (code !== 0) process.exitCode = code;\n  }).catch(() => {\n    process.stderr.write(\"[tinycloud-mcp] Startup failed.\\n\");\n    process.exitCode = 1;\n  });\n}\n","import { McpServer } from \"@modelcontextprotocol/server\";\nimport { serveStdio, type StdioServerHandle } from \"@modelcontextprotocol/server/stdio\";\n\nimport { createJsonSchemaValidator, registerTinyCloudTools, type McpStartupSelection } from \"./tools.js\";\nimport { MCP_VERSION } from \"./version.js\";\n\nexport const MCP_SERVER_NAME = \"tinycloud-mcp\";\nexport { MCP_VERSION } from \"./version.js\";\nexport function createTinyCloudMcpServer(selection: McpStartupSelection): McpServer {\n  const validator = createJsonSchemaValidator();\n  const server = new McpServer(\n    { name: MCP_SERVER_NAME, version: MCP_VERSION },\n    { jsonSchemaValidator: validator },\n  );\n  registerTinyCloudTools(server, selection, validator);\n  return server;\n}\n\n/** Start the only supported MCP transport: local stdio. */\nexport function serveTinyCloudMcp(selection: McpStartupSelection): StdioServerHandle {\n  return serveStdio(\n    () => createTinyCloudMcpServer(selection),\n    { onerror: () => writeBoundedDiagnostic(\"MCP transport error\") },\n  );\n}\n\nfunction writeBoundedDiagnostic(message: string): void {\n  process.stderr.write(`[tinycloud-mcp] ${message}\\n`);\n}\n","import { createRequire } from \"node:module\";\nimport { join } from \"node:path\";\n\nimport { fromJsonSchema, type McpServer, type ToolAnnotations } from \"@modelcontextprotocol/server\";\nimport { addFormats, Ajv, AjvJsonSchemaValidator } from \"@modelcontextprotocol/server/validators/ajv\";\nimport { invokeOperation } from \"@tinycloud/operations\";\n\nimport { toMcpToolResult, type McpToolResult } from \"./results.js\";\n\nexport const TOOL_NAMES = [\n  \"tinycloud_status\",\n  \"tinycloud_auth_status\",\n  \"tinycloud_auth_capabilities\",\n  \"tinycloud_auth_request\",\n  \"tinycloud_auth_import\",\n  \"tinycloud_account_spaces_list\",\n  \"tinycloud_account_applications_list\",\n  \"tinycloud_kv_list\",\n  \"tinycloud_kv_get\",\n  \"tinycloud_secrets_get\",\n] as const;\n\nexport type ToolName = (typeof TOOL_NAMES)[number];\n\nexport interface McpStartupSelection {\n  readonly profile: string;\n  readonly explicitProfile: boolean;\n  readonly allowOwnerProfile: boolean;\n}\n\nexport interface McpInvocationTarget {\n  readonly profile: string;\n  readonly allowOwnerProfile?: true;\n}\n\n/** Project one startup selection into the only owner-sensitive target shape. */\nexport function invocationTargetForMcp(\n  selection: McpStartupSelection,\n): McpInvocationTarget {\n  return {\n    profile: selection.profile,\n    ...(selection.explicitProfile && selection.allowOwnerProfile\n      ? { allowOwnerProfile: true }\n      : {}),\n  };\n}\n\ninterface CatalogOperation {\n  readonly id: string;\n  readonly version: number;\n  readonly title: string;\n  readonly description: string;\n  readonly input: Record<string, unknown>;\n  readonly result: Record<string, unknown>;\n}\n\ninterface OperationsCatalog {\n  readonly operations: readonly CatalogOperation[];\n}\n\n// The require anchor is this module, never the consumer entrypoint. In ESM\n// tsup preserves import.meta.url; in CJS it rewrites the same module-relative\n// anchor to the generated __filename, so both formats stay in MCP's package\n// dependency boundary.\nconst packageRequire = createRequire(\n  typeof __dirname === \"string\" ? join(__dirname, \"tools.cjs\") : import.meta.url,\n);\nconst generatedCatalog = packageRequire(\n  \"@tinycloud/operations/operations.json\",\n) as OperationsCatalog;\n\ninterface ToolBinding {\n  readonly name: ToolName;\n  readonly operationId: string;\n  readonly operationVersion: number;\n  readonly readOnlyHint: boolean;\n  readonly idempotentHint: boolean;\n  readonly openWorldHint: boolean;\n}\n\nconst TOOL_BINDINGS: readonly ToolBinding[] = [\n  {\n    name: \"tinycloud_status\",\n    operationId: \"tinycloud.status.get\",\n    operationVersion: 1,\n    readOnlyHint: true,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  {\n    name: \"tinycloud_auth_status\",\n    operationId: \"tinycloud.auth.status\",\n    operationVersion: 1,\n    readOnlyHint: true,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  {\n    name: \"tinycloud_auth_capabilities\",\n    operationId: \"tinycloud.auth.capabilities\",\n    operationVersion: 1,\n    readOnlyHint: true,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  {\n    name: \"tinycloud_auth_request\",\n    operationId: \"tinycloud.auth.request\",\n    operationVersion: 1,\n    readOnlyHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  {\n    name: \"tinycloud_auth_import\",\n    operationId: \"tinycloud.auth.import\",\n    operationVersion: 1,\n    readOnlyHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  {\n    name: \"tinycloud_account_spaces_list\",\n    operationId: \"tinycloud.account.spaces.list\",\n    operationVersion: 1,\n    readOnlyHint: true,\n    idempotentHint: true,\n    openWorldHint: true,\n  },\n  {\n    name: \"tinycloud_account_applications_list\",\n    operationId: \"tinycloud.account.applications.list\",\n    operationVersion: 1,\n    readOnlyHint: true,\n    idempotentHint: true,\n    openWorldHint: true,\n  },\n  {\n    name: \"tinycloud_kv_list\",\n    operationId: \"tinycloud.kv.list\",\n    operationVersion: 1,\n    readOnlyHint: true,\n    idempotentHint: true,\n    openWorldHint: true,\n  },\n  {\n    name: \"tinycloud_kv_get\",\n    operationId: \"tinycloud.kv.get\",\n    operationVersion: 1,\n    readOnlyHint: true,\n    idempotentHint: true,\n    openWorldHint: true,\n  },\n  {\n    name: \"tinycloud_secrets_get\",\n    operationId: \"tinycloud.secrets.get\",\n    operationVersion: 1,\n    readOnlyHint: false,\n    idempotentHint: true,\n    openWorldHint: true,\n  },\n] as const;\n\nexport function createJsonSchemaValidator(): AjvJsonSchemaValidator {\n  const ajv = new Ajv({ strict: false });\n  addFormats(ajv);\n  return new AjvJsonSchemaValidator(ajv);\n}\n\nexport function registerTinyCloudTools(\n  server: McpServer,\n  selection: McpStartupSelection,\n  validator: AjvJsonSchemaValidator,\n): void {\n  const definitions = new Map(\n    generatedCatalog.operations.map((operation) => [\n      `${operation.id}@${operation.version}`,\n      operation,\n    ]),\n  );\n\n  for (const binding of TOOL_BINDINGS) {\n    const operation = definitions.get(`${binding.operationId}@${binding.operationVersion}`);\n    if (operation === undefined) {\n      throw new Error(`Generated operations catalog is missing ${binding.operationId}@${binding.operationVersion}.`);\n    }\n\n    const inputSchema = fromJsonSchema(\n      operation.input as Parameters<typeof fromJsonSchema>[0],\n      validator,\n    );\n    const outputSchema = fromJsonSchema(\n      operation.result as unknown as Parameters<typeof fromJsonSchema>[0],\n      validator,\n    );\n    const annotations: ToolAnnotations = {\n      readOnlyHint: binding.readOnlyHint,\n      idempotentHint: binding.idempotentHint,\n      destructiveHint: false,\n      openWorldHint: binding.openWorldHint,\n    };\n\n    server.registerTool(\n      binding.name,\n      {\n        title: operation.title,\n        description: operation.description,\n        inputSchema,\n        outputSchema,\n        annotations,\n      },\n      async (input: unknown): Promise<McpToolResult> => {\n        const result = await invokeOperation(\n          binding.operationId,\n          binding.operationVersion,\n          invocationTargetForMcp(selection),\n          input,\n        );\n        return toMcpToolResult(result);\n      },\n    );\n  }\n}\n\nexport function toolBindingsForTest(): readonly ToolBinding[] {\n  return TOOL_BINDINGS;\n}\n","/**\n * MCP has one structured result channel for a TinyCloud operation. Text is a\n * fixed, non-sensitive status line; it never serializes the operation result.\n */\nexport interface CanonicalOperationResult {\n  readonly status: \"ok\" | \"authority_required\" | \"setup_required\" | \"error\";\n  readonly [key: string]: unknown;\n}\n\nexport interface McpToolResult extends CallToolResult {\n  readonly content: [{ readonly type: \"text\"; readonly text: string }];\n  readonly structuredContent: CanonicalOperationResult;\n}\n\nexport function toMcpToolResult(result: unknown): McpToolResult {\n  const canonical: CanonicalOperationResult = isCanonicalOperationResult(result)\n    ? result\n    : {\n      status: \"error\",\n      operation: {},\n      context: {},\n      error: { code: \"INTERNAL_ERROR\" },\n    };\n\n  return {\n    content: [{ type: \"text\", text: resultSummary(canonical.status) }],\n    structuredContent: canonical,\n  };\n}\n\n/** The canonical envelope immediately before MCP protocol serialization. */\nexport function canonicalMcpAdapterResult(result: unknown): CanonicalOperationResult {\n  return toMcpToolResult(result).structuredContent;\n}\n\nfunction isCanonicalOperationResult(value: unknown): value is CanonicalOperationResult {\n  if (value === null || typeof value !== \"object\" || Array.isArray(value)) return false;\n  const status = (value as { status?: unknown }).status;\n  return status === \"ok\" ||\n    status === \"authority_required\" ||\n    status === \"setup_required\" ||\n    status === \"error\";\n}\n\nfunction resultSummary(status: CanonicalOperationResult[\"status\"]): string {\n  switch (status) {\n    case \"ok\":\n      return \"TinyCloud operation completed; use the structured result.\";\n    case \"authority_required\":\n      return \"TinyCloud authority is required; use the structured request and approval action.\";\n    case \"setup_required\":\n      return \"TinyCloud setup is required; use the structured setup action.\";\n    case \"error\":\n      return \"TinyCloud operation failed; use the structured error.\";\n  }\n}\nimport type { CallToolResult } from \"@modelcontextprotocol/server\";\n","{\n  \"name\": \"@tinycloud/mcp\",\n  \"version\": \"0.1.0-beta.2\",\n  \"description\": \"TinyCloud delegated operations MCP server\",\n  \"author\": \"TinyCloud, Inc.\",\n  \"license\": \"EGPL\",\n  \"type\": \"module\",\n  \"main\": \"dist/index.cjs\",\n  \"module\": \"dist/index.js\",\n  \"types\": \"dist/index.d.ts\",\n  \"bin\": {\n    \"tinycloud-mcp\": \"./bin/tinycloud-mcp\"\n  },\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"import\": \"./dist/index.js\",\n      \"require\": \"./dist/index.cjs\"\n    },\n    \"./server\": {\n      \"types\": \"./dist/server.d.ts\",\n      \"import\": \"./dist/server.js\",\n      \"require\": \"./dist/server.cjs\"\n    },\n    \"./tools\": {\n      \"types\": \"./dist/tools.d.ts\",\n      \"import\": \"./dist/tools.js\",\n      \"require\": \"./dist/tools.cjs\"\n    },\n    \"./results\": {\n      \"types\": \"./dist/results.d.ts\",\n      \"import\": \"./dist/results.js\",\n      \"require\": \"./dist/results.cjs\"\n    }\n  },\n  \"files\": [\n    \"dist\",\n    \"bin\",\n    \"generated\",\n    \"skills\"\n  ],\n  \"engines\": {\n    \"node\": \">=20\"\n  },\n  \"scripts\": {\n    \"build\": \"tsup\",\n    \"clean\": \"rm -rf dist\",\n    \"test\": \"bun run build && bun scripts/test.ts && bun run check:generated\",\n    \"test:stdio\": \"bun run build && bun test src/stdio.test.ts\",\n    \"typecheck\": \"tsc -p tsconfig.json\",\n    \"generate\": \"bun scripts/generate.ts\",\n    \"check:generated\": \"bun scripts/generate.ts --check\"\n  },\n  \"dependencies\": {\n    \"@modelcontextprotocol/server\": \"2.0.0-beta.4\",\n    \"@tinycloud/operations\": \"0.1.0-beta.2\"\n  },\n  \"devDependencies\": {\n    \"@modelcontextprotocol/client\": \"2.0.0-beta.4\",\n    \"@types/node\": \"^20\",\n    \"tsup\": \"^8.0.0\",\n    \"typescript\": \"^5.9.3\"\n  },\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"https://github.com/tinycloudlabs/web-sdk\"\n  }\n}\n","import packageMetadata from \"../package.json\";\n\nexport const MCP_VERSION = packageMetadata.version;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAAA,oBAAyB;AAEzB,qBAA6C;;;ACF7C,IAAAC,iBAA0B;AAC1B,mBAAmD;;;ACDnD,yBAA8B;AAC9B,uBAAqB;AAErB,oBAAqE;AACrE,iBAAwD;AACxD,wBAAgC;;;ACSzB,SAAS,gBAAgB,QAAgC;AAC9D,QAAM,YAAsC,2BAA2B,MAAM,IACzE,SACA;AAAA,IACA,QAAQ;AAAA,IACR,WAAW,CAAC;AAAA,IACZ,SAAS,CAAC;AAAA,IACV,OAAO,EAAE,MAAM,iBAAiB;AAAA,EAClC;AAEF,SAAO;AAAA,IACL,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,cAAc,UAAU,MAAM,EAAE,CAAC;AAAA,IACjE,mBAAmB;AAAA,EACrB;AACF;AAOA,SAAS,2BAA2B,OAAmD;AACrF,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,QAAM,SAAU,MAA+B;AAC/C,SAAO,WAAW,QAChB,WAAW,wBACX,WAAW,oBACX,WAAW;AACf;AAEA,SAAS,cAAc,QAAoD;AACzE,UAAQ,QAAQ;AAAA,IACd,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,EACX;AACF;;;ADvDA;AAoCO,SAAS,uBACd,WACqB;AACrB,SAAO;AAAA,IACL,SAAS,UAAU;AAAA,IACnB,GAAI,UAAU,mBAAmB,UAAU,oBACvC,EAAE,mBAAmB,KAAK,IAC1B,CAAC;AAAA,EACP;AACF;AAmBA,IAAM,qBAAiB;AAAA,EACrB,OAAO,cAAc,eAAW,uBAAK,WAAW,WAAW,IAAI,YAAY;AAC7E;AACA,IAAM,mBAAmB;AAAA,EACvB;AACF;AAWA,IAAM,gBAAwC;AAAA,EAC5C;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,eAAe;AAAA,EACjB;AACF;AAEO,SAAS,4BAAoD;AAClE,QAAM,MAAM,IAAI,eAAI,EAAE,QAAQ,MAAM,CAAC;AACrC,6BAAW,GAAG;AACd,SAAO,IAAI,kCAAuB,GAAG;AACvC;AAEO,SAAS,uBACd,QACA,WACA,WACM;AACN,QAAM,cAAc,IAAI;AAAA,IACtB,iBAAiB,WAAW,IAAI,CAAC,cAAc;AAAA,MAC7C,GAAG,UAAU,EAAE,IAAI,UAAU,OAAO;AAAA,MACpC;AAAA,IACF,CAAC;AAAA,EACH;AAEA,aAAW,WAAW,eAAe;AACnC,UAAM,YAAY,YAAY,IAAI,GAAG,QAAQ,WAAW,IAAI,QAAQ,gBAAgB,EAAE;AACtF,QAAI,cAAc,QAAW;AAC3B,YAAM,IAAI,MAAM,2CAA2C,QAAQ,WAAW,IAAI,QAAQ,gBAAgB,GAAG;AAAA,IAC/G;AAEA,UAAM,kBAAc;AAAA,MAClB,UAAU;AAAA,MACV;AAAA,IACF;AACA,UAAM,mBAAe;AAAA,MACnB,UAAU;AAAA,MACV;AAAA,IACF;AACA,UAAM,cAA+B;AAAA,MACnC,cAAc,QAAQ;AAAA,MACtB,gBAAgB,QAAQ;AAAA,MACxB,iBAAiB;AAAA,MACjB,eAAe,QAAQ;AAAA,IACzB;AAEA,WAAO;AAAA,MACL,QAAQ;AAAA,MACR;AAAA,QACE,OAAO,UAAU;AAAA,QACjB,aAAa,UAAU;AAAA,QACvB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,OAAO,UAA2C;AAChD,cAAM,SAAS,UAAM;AAAA,UACnB,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,uBAAuB,SAAS;AAAA,UAChC;AAAA,QACF;AACA,eAAO,gBAAgB,MAAM;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AACF;;;AE9NA;AAAA,EACE,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,aAAe;AAAA,EACf,QAAU;AAAA,EACV,SAAW;AAAA,EACX,MAAQ;AAAA,EACR,MAAQ;AAAA,EACR,QAAU;AAAA,EACV,OAAS;AAAA,EACT,KAAO;AAAA,IACL,iBAAiB;AAAA,EACnB;AAAA,EACA,SAAW;AAAA,IACT,KAAK;AAAA,MACH,OAAS;AAAA,MACT,QAAU;AAAA,MACV,SAAW;AAAA,IACb;AAAA,IACA,YAAY;AAAA,MACV,OAAS;AAAA,MACT,QAAU;AAAA,MACV,SAAW;AAAA,IACb;AAAA,IACA,WAAW;AAAA,MACT,OAAS;AAAA,MACT,QAAU;AAAA,MACV,SAAW;AAAA,IACb;AAAA,IACA,aAAa;AAAA,MACX,OAAS;AAAA,MACT,QAAU;AAAA,MACV,SAAW;AAAA,IACb;AAAA,EACF;AAAA,EACA,OAAS;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,SAAW;AAAA,IACT,MAAQ;AAAA,EACV;AAAA,EACA,SAAW;AAAA,IACT,OAAS;AAAA,IACT,OAAS;AAAA,IACT,MAAQ;AAAA,IACR,cAAc;AAAA,IACd,WAAa;AAAA,IACb,UAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AAAA,EACA,cAAgB;AAAA,IACd,gCAAgC;AAAA,IAChC,yBAAyB;AAAA,EAC3B;AAAA,EACA,iBAAmB;AAAA,IACjB,gCAAgC;AAAA,IAChC,eAAe;AAAA,IACf,MAAQ;AAAA,IACR,YAAc;AAAA,EAChB;AAAA,EACA,YAAc;AAAA,IACZ,MAAQ;AAAA,IACR,KAAO;AAAA,EACT;AACF;;;ACjEO,IAAM,cAAc,gBAAgB;;;AJIpC,IAAM,kBAAkB;AAExB,SAAS,yBAAyB,WAA2C;AAClF,QAAM,YAAY,0BAA0B;AAC5C,QAAM,SAAS,IAAI;AAAA,IACjB,EAAE,MAAM,iBAAiB,SAAS,YAAY;AAAA,IAC9C,EAAE,qBAAqB,UAAU;AAAA,EACnC;AACA,yBAAuB,QAAQ,WAAW,SAAS;AACnD,SAAO;AACT;AAGO,SAAS,kBAAkB,WAAmD;AACnF,aAAO;AAAA,IACL,MAAM,yBAAyB,SAAS;AAAA,IACxC,EAAE,SAAS,MAAM,uBAAuB,qBAAqB,EAAE;AAAA,EACjE;AACF;AAEA,SAAS,uBAAuB,SAAuB;AACrD,UAAQ,OAAO,MAAM,mBAAmB,OAAO;AAAA,CAAI;AACrD;;;ADdA,IAAM,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWN,SAAS,gBAAgB,YAAiD;AAC/E,MAAI;AACJ,MAAI,kBAAkB;AACtB,MAAI,oBAAoB;AACxB,MAAI,OAAO;AACX,MAAI,UAAU;AAEd,WAAS,QAAQ,GAAG,QAAQ,WAAW,QAAQ,SAAS,GAAG;AACzD,UAAM,WAAW,WAAW,KAAK;AACjC,QAAI,aAAa,YAAY,aAAa,MAAM;AAC9C,aAAO;AACP;AAAA,IACF;AACA,QAAI,aAAa,eAAe,aAAa,MAAM;AACjD,gBAAU;AACV;AAAA,IACF;AACA,QAAI,aAAa,yBAAyB;AACxC,0BAAoB;AACpB;AAAA,IACF;AACA,QAAI,aAAa,aAAa;AAC5B,YAAM,QAAQ,WAAW,QAAQ,CAAC;AAClC,UAAI,UAAU,UAAa,MAAM,WAAW,GAAG,KAAK,MAAM,KAAK,EAAE,WAAW,GAAG;AAC7E,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AACA,gBAAU;AACV,wBAAkB;AAClB,eAAS;AACT;AAAA,IACF;AACA,QAAI,UAAU,WAAW,YAAY,GAAG;AACtC,YAAM,QAAQ,SAAS,MAAM,aAAa,MAAM;AAChD,UAAI,MAAM,KAAK,EAAE,WAAW,EAAG,OAAM,IAAI,MAAM,8CAA8C;AAC7F,gBAAU;AACV,wBAAkB;AAClB;AAAA,IACF;AACA,UAAM,IAAI,MAAM,mBAAmB,QAAQ,EAAE;AAAA,EAC/C;AAEA,SAAO,EAAE,SAAS,iBAAiB,mBAAmB,MAAM,QAAQ;AACtE;AAEA,eAAsB,KAAK,aAAgC,QAAQ,KAAK,MAAM,CAAC,GAAoB;AACjG,MAAI;AACJ,MAAI;AACF,cAAU,gBAAgB,UAAU;AAAA,EACtC,SAAS,OAAO;AACd,YAAQ,OAAO,MAAM,yCAAyC;AAC9D,WAAO;AAAA,EACT;AAEA,MAAI,QAAQ,MAAM;AAChB,YAAQ,OAAO,MAAM,IAAI;AACzB,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,SAAS;AACnB,YAAQ,OAAO,MAAM,GAAG,WAAW;AAAA,CAAI;AACvC,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI;AACF,cAAU,UAAM,6CAA6B,QAAQ,OAAO;AAAA,EAC9D,QAAQ;AACN,YAAQ,OAAO,MAAM,+CAA+C;AACpE,WAAO;AAAA,EACT;AAIA,oBAAkB;AAAA,IAChB;AAAA,IACA,iBAAiB,QAAQ;AAAA,IACzB,mBAAmB,QAAQ;AAAA,EAC7B,CAAC;AACD,SAAO;AACT;AAEA,SAAS,qBAA8B;AACrC,QAAM,OAAO,QAAQ,KAAK,CAAC;AAC3B,MAAI,SAAS,OAAW,QAAO;AAC/B,aAAO,4BAAS,IAAI,MAAM,gBAAY,4BAAS,IAAI,MAAM,iBAAa,4BAAS,IAAI,MAAM;AAC3F;AAEA,IAAI,mBAAmB,GAAG;AACxB,OAAK,KAAK,EAAE,KAAK,CAAC,SAAS;AACzB,QAAI,SAAS,EAAG,SAAQ,WAAW;AAAA,EACrC,CAAC,EAAE,MAAM,MAAM;AACb,YAAQ,OAAO,MAAM,mCAAmC;AACxD,YAAQ,WAAW;AAAA,EACrB,CAAC;AACH;","names":["import_node_path","import_server"]}

package/dist/cli.d.cts

@@ -0,0 +1,11 @@
+interface ParsedCliOptions {
+    readonly profile?: string;
+    readonly explicitProfile: boolean;
+    readonly allowOwnerProfile: boolean;
+    readonly help: boolean;
+    readonly version: boolean;
+}
+declare function parseCliOptions(arguments_: readonly string[]): ParsedCliOptions;
+declare function main(arguments_?: readonly string[]): Promise<number>;
+
+export { type ParsedCliOptions, main, parseCliOptions };

package/dist/cli.d.ts

@@ -0,0 +1,11 @@
+interface ParsedCliOptions {
+    readonly profile?: string;
+    readonly explicitProfile: boolean;
+    readonly allowOwnerProfile: boolean;
+    readonly help: boolean;
+    readonly version: boolean;
+}
+declare function parseCliOptions(arguments_: readonly string[]): ParsedCliOptions;
+declare function main(arguments_?: readonly string[]): Promise<number>;
+
+export { type ParsedCliOptions, main, parseCliOptions };