@toolgrain/mcp 0.1.1 → 0.1.3

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # @toolgrain/mcp
 
+## 0.1.3
+
+### Patch Changes
+
+- @toolgrain/protocol@0.1.3
+
+## 0.1.2
+
+### Patch Changes
+
+- da94c47: Document the public API with JSDoc for exported types, members, options, and functions. Preserve field documentation in auth accessor return types and protocol constant hovers.
+- f199707: Point package homepages and README documentation links to the live Toolgrain documentation site.
+- d0c10ac: Use matching stable Toolgrain packages in installation instructions instead of
+  embedding outdated release pins.
+- Updated dependencies [da94c47]
+- Updated dependencies [f199707]
+- Updated dependencies [d0c10ac]
+  - @toolgrain/protocol@0.1.2
+
 ## 0.1.1
 
 ### Patch Changes

package/README.md

@@ -13,16 +13,17 @@
 Reusable tools, inferred Zod inputs and outputs, rich results, and request context
 from one TypeScript authoring API.
 
-[Documentation](https://github.com/keshavkatwe/toolgrain/blob/main/docs/tools.md) ·
-[Examples](https://github.com/keshavkatwe/toolgrain/blob/main/apps/README.md) ·
+[Documentation](https://toolgrain.mintlify.site/tools/overview) ·
+[Examples](https://toolgrain.mintlify.site/examples) ·
 [npm](https://www.npmjs.com/package/@toolgrain/mcp)
 
 ## Installation
 
-Install the same `0.1.0` version across Toolgrain libraries.
+Install matching stable versions across Toolgrain libraries. These commands
+resolve npm's `latest` tag.
 
 ```sh
-npm install @toolgrain/mcp@0.1.0 @toolgrain/node@0.1.0 zod@^4.6.6
+npm install @toolgrain/mcp @toolgrain/node zod@^4.6.6
 npm install --save-dev typescript @types/node
 ```
 
@@ -71,7 +72,7 @@ calls, which bypass server validation and result conversion. Unexpected server
 execution failures return generic errors and reach the optional `onError`
 callback. Request-cached dependencies use `createContext()` and inferred
 accessors; see the
-[context guide](https://github.com/keshavkatwe/toolgrain/blob/main/docs/context.md).
+[context guide](https://toolgrain.mintlify.site/guides/context).
 
 ## Transports and compatibility
 
@@ -82,7 +83,7 @@ or mount a Web handler from
 Both MCP `2026-07-28` and initialization-based `2025-06-18` are supported through
 the same tool API. Current HTTP support uses independent POST requests and JSON
 responses. See the
-[client compatibility notes](https://github.com/keshavkatwe/toolgrain/blob/main/docs/compatibility.md)
+[client compatibility notes](https://toolgrain.mintlify.site/compatibility/protocol)
 for tested clients and limitations.
 
 ## Requirements
@@ -90,8 +91,8 @@ for tested clients and limitations.
 ESM only. Node.js `^24.20.0` or Bun `>=1.4.4 <2`; Zod `^4.6.6`; TypeScript 5.5.4
 or later with `strict` enabled. Node stack traces can use the included source
 maps with `node --enable-source-maps server.mjs`. See the
-[support policy](https://github.com/keshavkatwe/toolgrain/blob/main/docs/support-policy.md)
-and [full API guide](https://github.com/keshavkatwe/toolgrain/blob/main/docs/tools.md).
+[support policy](https://toolgrain.mintlify.site/project/support-policy)
+and [full API guide](https://toolgrain.mintlify.site/tools/overview).
 
 ## License
 

package/dist/auth/audience.d.ts

@@ -1,3 +1,11 @@
-/** Validate the audience of an already verified token without disclosing its claims. */
+/**
+ * Require an already verified token's audience to contain the exact MCP resource URL.
+ * This checks only audience membership, not signatures, issuers, expiry, or revocation.
+ *
+ * @param audience - Verified `aud` claim: a string or array of strings.
+ * @param resource - Expected resource URL to match exactly.
+ * @throws `AuthError` with `invalid_token` for missing, malformed, or mismatched audiences.
+ * Missing and mismatched claims include public guidance without disclosing received claims.
+ */
 export declare function validateTokenAudience(audience: unknown, resource: string): void;
 //# sourceMappingURL=audience.d.ts.map

package/dist/auth/audience.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audience.d.ts","sourceRoot":"","sources":["../../src/auth/audience.ts"],"names":[],"mappings":"AAEA,wFAAwF;AACxF,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,MAAM,GACf,IAAI,CAeN"}
+{"version":3,"file":"audience.d.ts","sourceRoot":"","sources":["../../src/auth/audience.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,MAAM,GACf,IAAI,CAeN"}

package/dist/auth/audience.js

@@ -1,5 +1,13 @@
 import { AuthError } from "./errors.js";
-/** Validate the audience of an already verified token without disclosing its claims. */
+/**
+ * Require an already verified token's audience to contain the exact MCP resource URL.
+ * This checks only audience membership, not signatures, issuers, expiry, or revocation.
+ *
+ * @param audience - Verified `aud` claim: a string or array of strings.
+ * @param resource - Expected resource URL to match exactly.
+ * @throws `AuthError` with `invalid_token` for missing, malformed, or mismatched audiences.
+ * Missing and mismatched claims include public guidance without disclosing received claims.
+ */
 export function validateTokenAudience(audience, resource) {
     if (audience === undefined)
         throw new AuthError("invalid_token", {

package/dist/auth/audience.js.map

@@ -1 +1 @@
-{"version":3,"file":"audience.js","sourceRoot":"","sources":["../../src/auth/audience.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,wFAAwF;AACxF,MAAM,UAAU,qBAAqB,CACnC,QAAiB,EACjB,QAAgB;IAEhB,IAAI,QAAQ,KAAK,SAAS;QACxB,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE;YACnC,WAAW,EAAE,0IAA0I,QAAQ,GAAG;SACnK,CAAC,CAAC;IACL,MAAM,SAAS,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACvE,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QACzB,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAEpD,MAAM,IAAI,SAAS,CAAC,eAAe,CAAC,CAAC;IACvC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC/B,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE;YACnC,WAAW,EAAE,+DAA+D,QAAQ,2CAA2C;SAChI,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"audience.js","sourceRoot":"","sources":["../../src/auth/audience.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAiB,EACjB,QAAgB;IAEhB,IAAI,QAAQ,KAAK,SAAS;QACxB,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE;YACnC,WAAW,EAAE,0IAA0I,QAAQ,GAAG;SACnK,CAAC,CAAC;IACL,MAAM,SAAS,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACvE,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QACzB,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAEpD,MAAM,IAAI,SAAS,CAAC,eAAe,CAAC,CAAC;IACvC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC/B,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE;YACnC,WAAW,EAAE,+DAA+D,QAAQ,2CAA2C;SAChI,CAAC,CAAC;AACP,CAAC"}

package/dist/auth/context.d.ts

@@ -1,6 +1,14 @@
 import type { ToolContext } from "../tools/context.js";
 import type { AuthIdentity, AuthReadonly } from "./types.js";
-/** Typed integrations bind their accessor to a stable, registered provider symbol. */
+/**
+ * Create a synchronous accessor for a provider's already verified identity snapshot.
+ * Reading the identity performs no verification, network request, or lazy resolution.
+ *
+ * @typeParam Identity - Plain identity data returned by the matching provider.
+ * @param type - The provider's identity symbol; use `Symbol.for()` across package copies.
+ * @returns An accessor accepting a tool context and returning its deeply frozen identity.
+ * The accessor throws if that context has no identity for this provider.
+ */
 export declare function createAuthAccessor<Identity extends object>(type: symbol): (ctx: ToolContext) => AuthReadonly<Identity>;
 export declare function attachAuth(ctx: ToolContext, auth?: AuthIdentity): ToolContext;
 /** Auth identities are plain data: copy them before exposing them to handlers. */

package/dist/auth/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/auth/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAI7D,sFAAsF;AACtF,wBAAgB,kBAAkB,CAAC,QAAQ,SAAS,MAAM,EAAE,IAAI,EAAE,MAAM,SACzD,WAAW,KAAG,YAAY,CAAC,QAAQ,CAAC,CAQlD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,WAAW,CAG7E;AAED,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAmBtD"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/auth/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAI7D;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,SAAS,MAAM,EAAE,IAAI,EAAE,MAAM,SACzD,WAAW,KAAG,YAAY,CAAC,QAAQ,CAAC,CAQlD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,WAAW,CAG7E;AAED,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAmBtD"}

package/dist/auth/context.js

@@ -1,5 +1,13 @@
 const key = Symbol.for("@toolgrain/mcp/auth-context/v1");
-/** Typed integrations bind their accessor to a stable, registered provider symbol. */
+/**
+ * Create a synchronous accessor for a provider's already verified identity snapshot.
+ * Reading the identity performs no verification, network request, or lazy resolution.
+ *
+ * @typeParam Identity - Plain identity data returned by the matching provider.
+ * @param type - The provider's identity symbol; use `Symbol.for()` across package copies.
+ * @returns An accessor accepting a tool context and returning its deeply frozen identity.
+ * The accessor throws if that context has no identity for this provider.
+ */
 export function createAuthAccessor(type) {
     return (ctx) => {
         const auth = Object.getOwnPropertyDescriptor(ctx, key)?.value;

package/dist/auth/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/auth/context.ts"],"names":[],"mappings":"AAGA,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;AAEzD,sFAAsF;AACtF,MAAM,UAAU,kBAAkB,CAA0B,IAAY;IACtE,OAAO,CAAC,GAAgB,EAA0B,EAAE;QAClD,MAAM,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,KAE3C,CAAC;QACd,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;YAC7B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,KAA+B,CAAC;IAC9C,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAgB,EAAE,IAAmB;IAC9D,IAAI,IAAI;QAAE,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC7C,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,CAAC,IAAa,EAAE,OAAoB,EAAE,EAAE;QACrD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAC3E,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9C,IACE,SAAS,KAAK,MAAM,CAAC,SAAS;YAC9B,SAAS,KAAK,KAAK,CAAC,SAAS;YAC7B,SAAS,KAAK,IAAI;YAElB,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC;IACF,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/auth/context.ts"],"names":[],"mappings":"AAGA,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;AAEzD;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAA0B,IAAY;IACtE,OAAO,CAAC,GAAgB,EAA0B,EAAE;QAClD,MAAM,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,KAE3C,CAAC;QACd,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;YAC7B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,KAA+B,CAAC;IAC9C,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAgB,EAAE,IAAmB;IAC9D,IAAI,IAAI;QAAE,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC7C,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,CAAC,IAAa,EAAE,OAAoB,EAAE,EAAE;QACrD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAC3E,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9C,IACE,SAAS,KAAK,MAAM,CAAC,SAAS;YAC9B,SAAS,KAAK,KAAK,CAAC,SAAS;YAC7B,SAAS,KAAK,IAAI;YAElB,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC;IACF,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/auth/errors.d.ts

@@ -1,14 +1,32 @@
+/** Public authorization failure categories mapped by HTTP adapters to 400, 401, 403, or 503. */
 export type AuthErrorCode = "invalid_request" | "invalid_token" | "access_denied" | "temporarily_unavailable";
 declare const brand: unique symbol;
 /** Only an explicitly public description is exposed; provider causes stay private. */
 export declare class AuthError extends Error {
+    /** Failure category; determines the default message and HTTP status. */
     readonly code: AuthErrorCode;
     readonly [brand] = true;
+    /** Explicitly client-visible guidance; omitted descriptions keep HTTP responses generic. */
     readonly description?: string | undefined;
-    constructor(code: AuthErrorCode, options?: ErrorOptions & {
+    /**
+     * Create an authorization failure with optional public guidance and a private cause.
+     *
+     * @param code - Authorization failure category used by HTTP adapters.
+     * @param options - Optional public description and private standard `Error` options.
+     */
+    constructor(
+    /** Failure category; determines the default message and HTTP status. */
+    code: AuthErrorCode, options?: ErrorOptions & {
+        /** Public message included in HTTP error bodies and challenges; never include secrets. */
         description?: string;
     });
 }
+/**
+ * Recognize branded authorization errors, including those from compatible package copies.
+ *
+ * @param value - Any thrown or returned value to inspect.
+ * @returns Whether the value is an `Error` with Toolgrain's authorization-error brand.
+ */
 export declare function isAuthError(value: unknown): value is AuthError;
 export {};
 //# sourceMappingURL=errors.d.ts.map

package/dist/auth/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/auth/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GACrB,iBAAiB,GACjB,eAAe,GACf,eAAe,GACf,yBAAyB,CAAC;AAE9B,QAAA,MAAM,KAAK,eAA4C,CAAC;AAExD,sFAAsF;AACtF,qBAAa,SAAU,SAAQ,KAAK;IAKhC,QAAQ,CAAC,IAAI,EAAE,aAAa;IAJ9B,QAAQ,CAAC,CAAC,KAAK,CAAC,QAAQ;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE1C,YACW,IAAI,EAAE,aAAa,EAC5B,OAAO,CAAC,EAAE,YAAY,GAAG;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAclD;CACF;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAE9D"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/auth/errors.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,MAAM,MAAM,aAAa,GACrB,iBAAiB,GACjB,eAAe,GACf,eAAe,GACf,yBAAyB,CAAC;AAE9B,QAAA,MAAM,KAAK,eAA4C,CAAC;AAExD,sFAAsF;AACtF,qBAAa,SAAU,SAAQ,KAAK;IAYhC,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,aAAa;IAZ9B,QAAQ,CAAC,CAAC,KAAK,CAAC,QAAQ;IACxB,4FAA4F;IAC5F,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE1C;;;;;OAKG;IACH;IACE,wEAAwE;IAC/D,IAAI,EAAE,aAAa,EAC5B,OAAO,CAAC,EAAE,YAAY,GAAG;QACvB,0FAA0F;QAC1F,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,EAcF;CACF;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAE9D"}

package/dist/auth/errors.js

@@ -3,8 +3,17 @@ const brand = Symbol.for("@toolgrain/mcp/AuthError/v1");
 export class AuthError extends Error {
     code;
     [brand] = true;
+    /** Explicitly client-visible guidance; omitted descriptions keep HTTP responses generic. */
     description;
-    constructor(code, options) {
+    /**
+     * Create an authorization failure with optional public guidance and a private cause.
+     *
+     * @param code - Authorization failure category used by HTTP adapters.
+     * @param options - Optional public description and private standard `Error` options.
+     */
+    constructor(
+    /** Failure category; determines the default message and HTTP status. */
+    code, options) {
         super(options?.description ??
             {
                 invalid_request: "Invalid authorization request",
@@ -17,6 +26,12 @@ export class AuthError extends Error {
         this.description = options?.description;
     }
 }
+/**
+ * Recognize branded authorization errors, including those from compatible package copies.
+ *
+ * @param value - Any thrown or returned value to inspect.
+ * @returns Whether the value is an `Error` with Toolgrain's authorization-error brand.
+ */
 export function isAuthError(value) {
     return value instanceof Error && Reflect.get(value, brand) === true;
 }

package/dist/auth/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/auth/errors.ts"],"names":[],"mappings":"AAMA,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAExD,sFAAsF;AACtF,MAAM,OAAO,SAAU,SAAQ,KAAK;IAKvB,IAAI;IAJN,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IACf,WAAW,CAAsB;IAE1C,YACW,IAAmB,EAC5B,OAAiD;QAEjD,KAAK,CACH,OAAO,EAAE,WAAW;YAClB;gBACE,eAAe,EAAE,+BAA+B;gBAChD,aAAa,EAAE,sBAAsB;gBACrC,aAAa,EAAE,eAAe;gBAC9B,uBAAuB,EAAE,mCAAmC;aAC7D,CAAC,IAAI,CAAC,EACT,OAAO,CACR,CAAC;oBAZO,IAAI;QAab,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,OAAO,EAAE,WAAW,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,KAAK,YAAY,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;AACtE,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/auth/errors.ts"],"names":[],"mappings":"AAOA,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAExD,sFAAsF;AACtF,MAAM,OAAO,SAAU,SAAQ,KAAK;IAavB,IAAI;IAZN,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IACxB,4FAA4F;IACnF,WAAW,CAAsB;IAE1C;;;;;OAKG;IACH;IACE,wEAAwE;IAC/D,IAAmB,EAC5B,OAGC;QAED,KAAK,CACH,OAAO,EAAE,WAAW;YAClB;gBACE,eAAe,EAAE,+BAA+B;gBAChD,aAAa,EAAE,sBAAsB;gBACrC,aAAa,EAAE,eAAe;gBAC9B,uBAAuB,EAAE,mCAAmC;aAC7D,CAAC,IAAI,CAAC,EACT,OAAO,CACR,CAAC;oBAfO,IAAI;QAgBb,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,OAAO,EAAE,WAAW,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,KAAK,YAAY,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;AACtE,CAAC"}

package/dist/auth/types.d.ts

@@ -1,23 +1,44 @@
 /** Implemented by integrations; the HTTP adapter supplies the resolved resource. */
 export interface AuthProvider<Identity extends object = object> {
+    /** Stable provider identity used by `createAuthAccessor()`; use `Symbol.for()` across copies. */
     readonly type: symbol;
+    /** Canonical public MCP resource URL; omission lets the HTTP adapter infer it per request. */
     readonly resource?: string;
+    /** Nonempty list of trusted authorization-server URLs advertised in public metadata. */
     readonly authorizationServers: readonly string[];
+    /**
+     * Verify token authenticity, validity, and resource audience before returning plain identity data.
+     * The server copies and deeply freezes the identity before exposing it to handlers.
+     *
+     * @param accessToken - Raw bearer token without its scheme prefix.
+     * @param options - Resolved resource and request cancellation signal.
+     * @returns Verified plain data; credentials and SDK methods should not be included.
+     * @throws `AuthError` for expected rejections; unexpected failures remain private diagnostics.
+     */
     verify(accessToken: string, options: AuthVerifyOptions): Promise<Identity>;
 }
+/** Resource and cancellation information supplied to an authorization provider. */
 export interface AuthVerifyOptions {
+    /** Shared cancellation for verification, body reading, execution, and server shutdown. */
     readonly signal: AbortSignal;
+    /** Expected token audience, after applying any provider resource override. */
     readonly resource: string;
 }
+/** Public authorization configuration copied by `Server.getAuthMetadata()`. */
 export interface AuthMetadata {
+    /** Canonical public resource URL, or absent when inferred from the current HTTP request. */
     readonly resource?: string;
+    /** Trusted authorization-server URLs advertised by protected-resource metadata. */
     readonly authorizationServers: readonly string[];
 }
 /** An opaque, single-use authorization for one server invocation. Always dispose it. */
 export interface AuthScope {
+    /** Cancellation signal spanning verification and the authorized invocation. */
     readonly signal: AbortSignal;
+    /** Release request bookkeeping and prevent future use; safe to call more than once. */
     dispose(): void;
 }
+/** Recursively readonly view of the plain identity snapshot exposed by auth accessors. */
 export type AuthReadonly<T> = T extends readonly (infer Item)[] ? readonly AuthReadonly<Item>[] : T extends object ? {
     readonly [Key in keyof T]: AuthReadonly<T[Key]>;
 } : T;

package/dist/auth/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,MAAM,WAAW,YAAY,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC5E;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;CAClD;AAED,wFAAwF;AACxF,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI,CAAC,SAAS,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,GAC3D,SAAS,YAAY,CAAC,IAAI,CAAC,EAAE,GAC7B,CAAC,SAAS,MAAM,GACd;IAAE,QAAQ,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;CAAE,GACnD,CAAC,CAAC;AAER,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,MAAM,WAAW,YAAY,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM;IAC5D,iGAAiG;IACjG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8FAA8F;IAC9F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,wFAAwF;IACxF,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD;;;;;;;;OAQG;IACH,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC5E;AAED,mFAAmF;AACnF,MAAM,WAAW,iBAAiB;IAChC,0FAA0F;IAC1F,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B,4FAA4F;IAC5F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,mFAAmF;IACnF,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;CAClD;AAED,wFAAwF;AACxF,MAAM,WAAW,SAAS;IACxB,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,uFAAuF;IACvF,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,0FAA0F;AAC1F,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI,CAAC,SAAS,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,GAC3D,SAAS,YAAY,CAAC,IAAI,CAAC,EAAE,GAC7B,CAAC,SAAS,MAAM,GACd;IAAE,QAAQ,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;CAAE,GACnD,CAAC,CAAC;AAER,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB"}

package/dist/auth/url.d.ts

@@ -1,3 +1,11 @@
-/** Canonical external URL; HTTP is permitted only for local development. */
+/**
+ * Validate an auth configuration URL, returning the original string unchanged.
+ * Requires HTTPS, except HTTP on `localhost`, `127.0.0.1`, or `[::1]` for development.
+ * Credentials, whitespace, control characters, queries, and fragments are rejected.
+ *
+ * @param value - Authorization-server, signing-key, or canonical resource URL.
+ * @returns The supplied URL after validation; no normalization is applied.
+ * @throws `TypeError` for an invalid or disallowed URL.
+ */
 export declare function authUrl(value: string): string;
 //# sourceMappingURL=url.d.ts.map

package/dist/auth/url.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../src/auth/url.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAoB7C"}
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../src/auth/url.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAoB7C"}

package/dist/auth/url.js

@@ -1,4 +1,12 @@
-/** Canonical external URL; HTTP is permitted only for local development. */
+/**
+ * Validate an auth configuration URL, returning the original string unchanged.
+ * Requires HTTPS, except HTTP on `localhost`, `127.0.0.1`, or `[::1]` for development.
+ * Credentials, whitespace, control characters, queries, and fragments are rejected.
+ *
+ * @param value - Authorization-server, signing-key, or canonical resource URL.
+ * @returns The supplied URL after validation; no normalization is applied.
+ * @throws `TypeError` for an invalid or disallowed URL.
+ */
 export function authUrl(value) {
     const url = new URL(value);
     if (

package/dist/auth/url.js.map

@@ -1 +1 @@
-{"version":3,"file":"url.js","sourceRoot":"","sources":["../../src/auth/url.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B;IACE,6HAA6H;IAC7H,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC;QACnC,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ;YACxB,CAAC,CACC,GAAG,CAAC,QAAQ,KAAK,OAAO;gBACxB,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAC3D,CAAC;QACJ,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,QAAQ;QACZ,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAEnB,MAAM,IAAI,SAAS,CACjB,6FAA6F,CAC9F,CAAC;IACJ,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"url.js","sourceRoot":"","sources":["../../src/auth/url.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B;IACE,6HAA6H;IAC7H,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC;QACnC,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ;YACxB,CAAC,CACC,GAAG,CAAC,QAAQ,KAAK,OAAO;gBACxB,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAC3D,CAAC;QACJ,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,QAAQ;QACZ,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAEnB,MAAM,IAAI,SAAS,CACjB,6FAA6F,CAC9F,CAAC;IACJ,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/context/definition.d.ts

@@ -6,18 +6,45 @@ export interface ContextBinding {
 }
 /** Erase values for heterogeneous registrations without exposing unsafe overrides. */
 export declare abstract class RegisteredContextProvider {
+    /** Nonempty diagnostic label; distinct providers may share a name without sharing identity. */
     abstract readonly name: string;
     abstract readonly use: (ctx: ToolContext) => Promise<unknown>;
     "~toolgrain"(): "context@1";
 }
 /** An opaque, invariant value contract; use createContext() and provide() for bindings. */
 export declare abstract class ContextProvider<Value> extends RegisteredContextProvider {
+    /**
+     * Read the context's lazy value, sharing one promise across concurrent readers.
+     * Always returns a promise, even for synchronous resolvers. Values remain unchanged
+     * and application-owned. Missing bindings, cycles, cancellation, and resolver failures reject.
+     *
+     * @param ctx - Context supplied by Toolgrain to a handler/resolver or made with `toolContext()`.
+     * @returns This context's cached value or failure for the provider identity.
+     */
     abstract readonly use: (ctx: ToolContext) => Promise<Value>;
+    /**
+     * Create an override with the same identity and inferred value contract.
+     * Register the override instead of the original; existing accessors find it automatically.
+     *
+     * @param resolve - Replacement factory, invoked only on first access in each context.
+     * @returns A frozen provider binding without changing this provider or other registrations.
+     */
     abstract readonly provide: (resolve: (ctx: ToolContext) => Value | PromiseLike<Value>) => ContextProvider<Value>;
 }
-/** Infer the resolved value type, including asynchronous factories. */
+/**
+ * Define a lazy provider with an inferred value type, including asynchronous factories.
+ * Register it in a server or `toolContext()` before calling its `use` accessor.
+ * Identity belongs to the definition, not its name. Resources remain application-owned;
+ * Toolgrain does not copy, freeze, or automatically dispose the resolved value.
+ *
+ * @param options - Diagnostic name and factory for the value.
+ * @returns A frozen provider with a typed async accessor and override factory.
+ * @throws `TypeError` if the name is empty or the resolver is not a function.
+ */
 export declare function createContext<Value>(options: {
+    /** Nonempty diagnostic label, used in missing-provider and dependency-cycle errors. */
     name: string;
+    /** Lazy factory; may await other registered providers and should pass `ctx.signal` to work. */
     resolve: (ctx: ToolContext) => Value;
 }): ContextProvider<Awaited<Value>>;
 export declare function contextBinding(provider: unknown): ContextBinding;

package/dist/context/definition.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"definition.d.ts","sourceRoot":"","sources":["../../src/context/definition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAMvD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC;CACjD;AAED,sFAAsF;AACtF,8BAAsB,yBAAyB;IAC7C,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAG9D,YAAY,IAAI,WAAW,CAE1B;CACF;AAKD,2FAA2F;AAC3F,8BAAsB,eAAe,CAAC,KAAK,CAAE,SAAQ,yBAAyB;IAC5E,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;IAE5D,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,CACzB,OAAO,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KACtD,eAAe,CAAC,KAAK,CAAC,CAAC;CAC7B;AA6BD,uEAAuE;AACvE,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,KAAK,CAAC;CACtC,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAelC;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,GAAG,cAAc,CAgBhE"}
+{"version":3,"file":"definition.d.ts","sourceRoot":"","sources":["../../src/context/definition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAMvD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC;CACjD;AAED,sFAAsF;AACtF,8BAAsB,yBAAyB;IAC7C,+FAA+F;IAC/F,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAG9D,YAAY,IAAI,WAAW,CAE1B;CACF;AAKD,2FAA2F;AAC3F,8BAAsB,eAAe,CAAC,KAAK,CAAE,SAAQ,yBAAyB;IAC5E;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;IAE5D;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,CACzB,OAAO,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KACtD,eAAe,CAAC,KAAK,CAAC,CAAC;CAC7B;AA6BD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE;IAC5C,uFAAuF;IACvF,IAAI,EAAE,MAAM,CAAC;IACb,+FAA+F;IAC/F,OAAO,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,KAAK,CAAC;CACtC,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAelC;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,GAAG,cAAc,CAgBhE"}

package/dist/context/definition.js

@@ -30,7 +30,16 @@ class Provider extends ContextProvider {
         return new Provider({ ...contextBinding(this), resolve }, this.use);
     };
 }
-/** Infer the resolved value type, including asynchronous factories. */
+/**
+ * Define a lazy provider with an inferred value type, including asynchronous factories.
+ * Register it in a server or `toolContext()` before calling its `use` accessor.
+ * Identity belongs to the definition, not its name. Resources remain application-owned;
+ * Toolgrain does not copy, freeze, or automatically dispose the resolved value.
+ *
+ * @param options - Diagnostic name and factory for the value.
+ * @returns A frozen provider with a typed async accessor and override factory.
+ * @throws `TypeError` if the name is empty or the resolver is not a function.
+ */
 export function createContext(options) {
     if (!options ||
         typeof options.name !== "string" ||

package/dist/context/definition.js.map

@@ -1 +1 @@
-{"version":3,"file":"definition.js","sourceRoot":"","sources":["../../src/context/definition.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;AAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;AAQnE,sFAAsF;AACtF,MAAM,OAAgB,yBAAyB;IAI7C,qEAAqE;IACrE,YAAY;QACV,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AACD,MAAM,CAAC,cAAc,CAAC,yBAAyB,CAAC,SAAS,EAAE,KAAK,EAAE;IAChE,KAAK,EAAE,IAAI;CACZ,CAAC,CAAC;AAEH,2FAA2F;AAC3F,MAAM,OAAgB,eAAuB,SAAQ,yBAAyB;CAM7E;AAED,MAAM,QAAgB,SAAQ,eAAsB;IACzC,IAAI,CAAS;IACb,GAAG,CAAuC;IAEnD,YACE,OAAuB,EACvB,GAAG,GAAG,CAAC,GAAgB,EAAE,EAAE,CACzB,WAAW,CAAQ,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC;QAEzD,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAEQ,OAAO,GAAG,CACjB,OAAyD,EACjC,EAAE;QAC1B,IAAI,OAAO,OAAO,KAAK,UAAU;YAC/B,MAAM,IAAI,SAAS,CACjB,wDAAwD,CACzD,CAAC;QACJ,OAAO,IAAI,QAAQ,CAAQ,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7E,CAAC,CAAC;CACH;AAED,uEAAuE;AACvE,MAAM,UAAU,aAAa,CAAQ,OAGpC;IACC,IACE,CAAC,OAAO;QACR,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAChC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;QACpB,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU;QAErC,MAAM,IAAI,SAAS,CACjB,mEAAmE,CACpE,CAAC;IACJ,OAAO,IAAI,QAAQ,CAAiB;QAClC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QAC9B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAiB;IAC9C,IACE,OAAO,QAAQ,KAAK,QAAQ;QAC5B,QAAQ,KAAK,IAAI;QAChB,QAAkC,CAAC,KAAK,CAAC,KAAK,IAAI;QAEnD,MAAM,IAAI,SAAS,CACjB,wDAAwD,CACzD,CAAC;IACJ,MAAM,OAAO,GAAG,MAAM,CAAC,wBAAwB,CAAC,QAAQ,EAAE,UAAU,CAAC;QACnE,EAAE,KAAmC,CAAC;IACxC,IAAI,CAAC,OAAO;QACV,MAAM,IAAI,SAAS,CACjB,wDAAwD,CACzD,CAAC;IACJ,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"definition.js","sourceRoot":"","sources":["../../src/context/definition.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;AAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;AAQnE,sFAAsF;AACtF,MAAM,OAAgB,yBAAyB;IAK7C,qEAAqE;IACrE,YAAY;QACV,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AACD,MAAM,CAAC,cAAc,CAAC,yBAAyB,CAAC,SAAS,EAAE,KAAK,EAAE;IAChE,KAAK,EAAE,IAAI;CACZ,CAAC,CAAC;AAEH,2FAA2F;AAC3F,MAAM,OAAgB,eAAuB,SAAQ,yBAAyB;CAqB7E;AAED,MAAM,QAAgB,SAAQ,eAAsB;IACzC,IAAI,CAAS;IACb,GAAG,CAAuC;IAEnD,YACE,OAAuB,EACvB,GAAG,GAAG,CAAC,GAAgB,EAAE,EAAE,CACzB,WAAW,CAAQ,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC;QAEzD,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAEQ,OAAO,GAAG,CACjB,OAAyD,EACjC,EAAE;QAC1B,IAAI,OAAO,OAAO,KAAK,UAAU;YAC/B,MAAM,IAAI,SAAS,CACjB,wDAAwD,CACzD,CAAC;QACJ,OAAO,IAAI,QAAQ,CAAQ,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7E,CAAC,CAAC;CACH;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAQ,OAKpC;IACC,IACE,CAAC,OAAO;QACR,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAChC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;QACpB,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU;QAErC,MAAM,IAAI,SAAS,CACjB,mEAAmE,CACpE,CAAC;IACJ,OAAO,IAAI,QAAQ,CAAiB;QAClC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QAC9B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAiB;IAC9C,IACE,OAAO,QAAQ,KAAK,QAAQ;QAC5B,QAAQ,KAAK,IAAI;QAChB,QAAkC,CAAC,KAAK,CAAC,KAAK,IAAI;QAEnD,MAAM,IAAI,SAAS,CACjB,wDAAwD,CACzD,CAAC;IACJ,MAAM,OAAO,GAAG,MAAM,CAAC,wBAAwB,CAAC,QAAQ,EAAE,UAAU,CAAC;QACnE,EAAE,KAAmC,CAAC;IACxC,IAAI,CAAC,OAAO;QACV,MAAM,IAAI,SAAS,CACjB,wDAAwD,CACzD,CAAC;IACJ,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/diagnostics.d.ts

@@ -1,7 +1,9 @@
 import type { ToolRequest } from "./tools/context.js";
 /** Private diagnostics for an unexpected tool failure; no arguments or auth data are added. */
 export interface ToolErrorDetails {
+    /** Exposed registration name of the tool whose execution failed. */
     readonly toolName: string;
+    /** Frozen request metadata; arguments and authorization credentials are not added. */
     readonly request: ToolRequest;
 }
 export type ErrorHandler = (error: unknown, details?: ToolErrorDetails) => void;

package/dist/diagnostics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../src/diagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,+FAA+F;AAC/F,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,gBAAgB,KAAK,IAAI,CAAC;AAEhF,8FAA8F;AAC9F,wBAAgB,WAAW,CACzB,OAAO,EAAE,YAAY,GAAG,SAAS,EACjC,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,gBAAgB,GACzB,IAAI,CASN"}
+{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../src/diagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,+FAA+F;AAC/F,MAAM,WAAW,gBAAgB;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,sFAAsF;IACtF,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,gBAAgB,KAAK,IAAI,CAAC;AAEhF,8FAA8F;AAC9F,wBAAgB,WAAW,CACzB,OAAO,EAAE,YAAY,GAAG,SAAS,EACjC,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,gBAAgB,GACzB,IAAI,CASN"}

package/dist/diagnostics.js.map

@@ -1 +1 @@
-{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../src/diagnostics.ts"],"names":[],"mappings":"AAUA,8FAA8F;AAC9F,MAAM,UAAU,WAAW,CACzB,OAAiC,EACjC,KAAc,EACd,OAA0B;IAE1B,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,IAAI,CAAC;QACH,MAAM,MAAM,GACV,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACnE,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;AACH,CAAC"}
+{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../src/diagnostics.ts"],"names":[],"mappings":"AAYA,8FAA8F;AAC9F,MAAM,UAAU,WAAW,CACzB,OAAiC,EACjC,KAAc,EACd,OAA0B;IAE1B,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,IAAI,CAAC;QACH,MAAM,MAAM,GACV,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACnE,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;AACH,CAAC"}

package/dist/server.d.ts

@@ -4,32 +4,89 @@ import type { RegisteredContextProvider } from "./context/definition.js";
 import { type ErrorHandler } from "./diagnostics.js";
 import type { ToolMap } from "./tools/registry.js";
 import { type RequestTransport, type Transport } from "./transport.js";
+/** Tool registrations, identity, and shared configuration for an MCP server. */
 export interface ServerOptions<Tools extends ToolMap = ToolMap> {
+    /** Server implementation name advertised to clients. */
     name: string;
+    /** Application version advertised to clients; independent of the protocol revision. */
     version: string;
+    /** Tools made with `tool()`; each registration key becomes its exposed tool name. */
     tools: Tools;
+    /** Optional usage instructions advertised to clients during discovery or initialization. */
     instructions?: string;
-    /** Tool failures include frozen tool/request details; other diagnostics omit them. */
+    /**
+     * Receives original unexpected failures for private diagnostics. Tool failures
+     * include frozen tool/request details; auth and transport failures pass only
+     * the error. Throws and rejected promises from this callback are ignored.
+     */
     onError?: ErrorHandler;
+    /** Eager endpoint authorization; requires a request transport rather than stdio. */
     auth?: AuthProvider;
+    /** Lazy providers or typed overrides available to handlers; registration order is irrelevant. */
     context?: readonly RegisteredContextProvider[];
 }
+/** Request-local settings for direct protocol dispatch through `Server.handle()`. */
 export interface HandleOptions {
+    /** Cooperative cancellation signal; handlers must observe it, and late responses are suppressed. */
     signal?: AbortSignal;
+    /**
+     * Protocol revision selected by the adapter. If omitted, dispatch is modern except
+     * for legacy initialization requests without explicit protocol-version metadata.
+     */
     protocolVersion?: SupportedProtocolVersion;
+    /** Single-use scope issued by this server's `authorize()`; dispose it in `finally`. */
     auth?: AuthScope;
 }
+/** An MCP dispatcher with one optional transport attachment and terminal shutdown. */
 export interface Server {
+    /**
+     * Dispatch a decoded JSON value, including tool validation and MCP result conversion.
+     * This independent request path does not retain initialization or session state.
+     *
+     * @param message - Untrusted, already JSON-decoded protocol message.
+     * @param options - Cancellation, protocol selection, and any required authorization scope.
+     * @returns A protocol response, or `undefined` for ignored or cancelled messages.
+     * @throws If the server is closed or its required authorization scope is invalid.
+     */
     handle(message: unknown, options?: HandleOptions): Promise<ProtocolResponse | undefined>;
+    /** Return copied wire descriptions using registration keys as tool names. */
     getToolDefinitions(): ProtocolTool[];
+    /** Return copied public auth configuration, or `undefined` for an unprotected server. */
     getAuthMetadata(): AuthMetadata | undefined;
+    /**
+     * Verify a bearer token before reading a request body or invoking tools.
+     * The identity is copied and deeply frozen before a server-bound scope is issued.
+     *
+     * @param accessToken - Raw bearer token, without the `Bearer ` prefix.
+     * @param options - Resource audience and cancellation settings for this request.
+     * @returns A single-use scope; the caller must dispose it in `finally`.
+     * @throws For rejected credentials, provider failures, cancellation, or a closed server.
+     */
     authorize(accessToken: string, options: {
+        /** Public MCP resource URL; a configured provider resource takes precedence. */
         resource: string;
+        /** Cancels verification and remains active while the returned scope is in use. */
         signal?: AbortSignal;
     }): Promise<AuthScope>;
+    /**
+     * Attach and start one single-use transport, resolving when startup completes.
+     * Auth-configured servers require a request transport. A closed server cannot restart.
+     *
+     * @param transport - An unused transport, including one from a compatible package copy.
+     * @throws If attachment or startup fails, or the transport is already owned.
+     */
     listen(transport: Transport | RequestTransport): Promise<void>;
+    /** Abort active work and close the attached transport; repeated or nested calls are safe. */
     close(): Promise<void>;
 }
-/** Compose the tool adapter, MCP dispatcher, and transport connection. */
+/**
+ * Create a server from reusable tools, optional auth, and lazy context providers.
+ * Registration validates tool names, metadata, and exposable schemas immediately.
+ * Creating the server does not start a transport or resolve context providers.
+ *
+ * @param options - Server identity and application-owned tool/provider registrations.
+ * @returns An independent server ready for direct dispatch or `listen()`.
+ * @throws For invalid registrations, tool schemas, or authorization configuration.
+ */
 export declare function createServer<const Tools extends ToolMap>(options: ServerOptions<Tools>): Server;
 //# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,IAAI,IAAI,YAAY,EACpB,wBAAwB,EACzB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE7E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEzE,OAAO,EAAE,KAAK,YAAY,EAAe,MAAM,kBAAkB,CAAC;AAKlE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACf,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,aAAa,CAAC,KAAK,SAAS,OAAO,GAAG,OAAO;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,KAAK,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,OAAO,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,eAAe,CAAC,EAAE,wBAAwB,CAAC;IAC3C,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB;AAED,MAAM,WAAW,MAAM;IACrB,MAAM,CACJ,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IACzC,kBAAkB,IAAI,YAAY,EAAE,CAAC;IACrC,eAAe,IAAI,YAAY,GAAG,SAAS,CAAC;IAC5C,SAAS,CACP,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAClD,OAAO,CAAC,SAAS,CAAC,CAAC;IACtB,MAAM,CAAC,SAAS,EAAE,SAAS,GAAG,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,0EAA0E;AAC1E,wBAAgB,YAAY,CAAC,KAAK,CAAC,KAAK,SAAS,OAAO,EACtD,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,GAC5B,MAAM,CAyGR"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,IAAI,IAAI,YAAY,EACpB,wBAAwB,EACzB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE7E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEzE,OAAO,EAAE,KAAK,YAAY,EAAe,MAAM,kBAAkB,CAAC;AAKlE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACf,MAAM,gBAAgB,CAAC;AAExB,gFAAgF;AAChF,MAAM,WAAW,aAAa,CAAC,KAAK,SAAS,OAAO,GAAG,OAAO;IAC5D,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,OAAO,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,KAAK,EAAE,KAAK,CAAC;IACb,4FAA4F;IAC5F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,oFAAoF;IACpF,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,iGAAiG;IACjG,OAAO,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAC;CAChD;AAED,qFAAqF;AACrF,MAAM,WAAW,aAAa;IAC5B,oGAAoG;IACpG,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;OAGG;IACH,eAAe,CAAC,EAAE,wBAAwB,CAAC;IAC3C,uFAAuF;IACvF,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB;AAED,sFAAsF;AACtF,MAAM,WAAW,MAAM;IACrB;;;;;;;;OAQG;IACH,MAAM,CACJ,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IACzC,6EAA6E;IAC7E,kBAAkB,IAAI,YAAY,EAAE,CAAC;IACrC,yFAAyF;IACzF,eAAe,IAAI,YAAY,GAAG,SAAS,CAAC;IAC5C;;;;;;;;OAQG;IACH,SAAS,CACP,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE;QACP,gFAAgF;QAChF,QAAQ,EAAE,MAAM,CAAC;QACjB,kFAAkF;QAClF,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,GACA,OAAO,CAAC,SAAS,CAAC,CAAC;IACtB;;;;;;OAMG;IACH,MAAM,CAAC,SAAS,EAAE,SAAS,GAAG,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,6FAA6F;IAC7F,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,KAAK,CAAC,KAAK,SAAS,OAAO,EACtD,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,GAC5B,MAAM,CAyGR"}

package/dist/server.js

@@ -8,7 +8,15 @@ import { executeRequest } from "./execute-request.js";
 import { decode } from "./protocol/decode.js";
 import { createToolAdapter } from "./tools/adapter.js";
 import { isRequestTransport, } from "./transport.js";
-/** Compose the tool adapter, MCP dispatcher, and transport connection. */
+/**
+ * Create a server from reusable tools, optional auth, and lazy context providers.
+ * Registration validates tool names, metadata, and exposable schemas immediately.
+ * Creating the server does not start a transport or resolve context providers.
+ *
+ * @param options - Server identity and application-owned tool/provider registrations.
+ * @returns An independent server ready for direct dispatch or `listen()`.
+ * @throws For invalid registrations, tool schemas, or authorization configuration.
+ */
 export function createServer(options) {
     const authorization = createAuthorization(options.auth);
     const tools = createToolAdapter(options.tools, options.onError);

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAqB,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EACL,kBAAkB,GAGnB,MAAM,gBAAgB,CAAC;AAkCxB,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAC1B,OAA6B;IAE7B,MAAM,aAAa,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,KAAK,EACL,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAChD,OAAO,CAAC,YAAY,EACpB,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CACvC,CAAC;IACF,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC3C,MAAM,gBAAgB,GAAG,GAAG,EAAE;QAC5B,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,KAAK,MAAM,UAAU,IAAI,OAAO;YAC9B,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,gBAAgB,CACjC,QAAQ,EACR,OAAO,CAAC,OAAO,EACf,gBAAgB,CACjB,CAAC;IACF,MAAM,iBAAiB,GAAG,CAAC,MAAoB,EAAE,EAAE;QACjD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,MAAM,EAAE,OAAO;YAAE,KAAK,EAAE,CAAC;;YACxB,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxB,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,MAAM;gBACJ,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC5C,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC7B,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,MAAM,GAAW;QACrB,KAAK,CAAC,MAAM,CAAC,SAAS;YACpB,IAAI,kBAAkB,CAAC,SAAS,CAAC;gBAC/B,OAAO,UAAU,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACtD,IAAI,aAAa,CAAC,QAAQ,EAAE;gBAC1B,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;YACJ,OAAO,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtC,CAAC;QACD,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE;QACtC,eAAe,EAAE,aAAa,CAAC,QAAQ;QACvC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;YAC/C,IAAI,MAAM;gBAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,CAAC;gBACH,OAAO,MAAM,aAAa,CAAC,SAAS,CAClC,WAAW,EACX,QAAQ,EACR,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,MAAM,CACf,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjB,IACE,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO;oBACvB,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB,CAAC;oBAEjE,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CACV,OAAO,EACP,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,GAAkB,EAAE;YAErD,IAAI,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,IAAI,EAAE,MAAM,CAAC,OAAO;gBAAE,OAAO;YACjC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;YACjD,IAAI,CAAC,MAAM,EAAE;gBAAE,OAAO;YACtB,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;gBAC3B,OAAO,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YACjE,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO;YACxC,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC1C,sEAAsE;YACtE,MAAM,QAAQ,GAAG,IAAI;gBACnB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBAChD,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;YACnB,IAAI,CAAC;gBACH,OAAO,MAAM,cAAc,CACzB,QAAQ,EACR,QAAQ,CAAC,OAAO,EAChB,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAC7D,OAAO,CAAC,OAAO,EACf,eAAe,CAChB,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,CAAC;QACH,CAAC;QACD,KAAK;YACH,gBAAgB,EAAE,CAAC;YACnB,OAAO,UAAU,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAqB,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EACL,kBAAkB,GAGnB,MAAM,gBAAgB,CAAC;AAsFxB;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAC1B,OAA6B;IAE7B,MAAM,aAAa,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,KAAK,EACL,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAChD,OAAO,CAAC,YAAY,EACpB,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CACvC,CAAC;IACF,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC3C,MAAM,gBAAgB,GAAG,GAAG,EAAE;QAC5B,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,KAAK,MAAM,UAAU,IAAI,OAAO;YAC9B,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,gBAAgB,CACjC,QAAQ,EACR,OAAO,CAAC,OAAO,EACf,gBAAgB,CACjB,CAAC;IACF,MAAM,iBAAiB,GAAG,CAAC,MAAoB,EAAE,EAAE;QACjD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,MAAM,EAAE,OAAO;YAAE,KAAK,EAAE,CAAC;;YACxB,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxB,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,MAAM;gBACJ,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC5C,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC7B,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,MAAM,GAAW;QACrB,KAAK,CAAC,MAAM,CAAC,SAAS;YACpB,IAAI,kBAAkB,CAAC,SAAS,CAAC;gBAC/B,OAAO,UAAU,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACtD,IAAI,aAAa,CAAC,QAAQ,EAAE;gBAC1B,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;YACJ,OAAO,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtC,CAAC;QACD,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE;QACtC,eAAe,EAAE,aAAa,CAAC,QAAQ;QACvC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;YAC/C,IAAI,MAAM;gBAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,CAAC;gBACH,OAAO,MAAM,aAAa,CAAC,SAAS,CAClC,WAAW,EACX,QAAQ,EACR,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,MAAM,CACf,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjB,IACE,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO;oBACvB,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB,CAAC;oBAEjE,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CACV,OAAO,EACP,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,GAAkB,EAAE;YAErD,IAAI,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,IAAI,EAAE,MAAM,CAAC,OAAO;gBAAE,OAAO;YACjC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;YACjD,IAAI,CAAC,MAAM,EAAE;gBAAE,OAAO;YACtB,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;gBAC3B,OAAO,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YACjE,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO;YACxC,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC1C,sEAAsE;YACtE,MAAM,QAAQ,GAAG,IAAI;gBACnB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBAChD,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;YACnB,IAAI,CAAC;gBACH,OAAO,MAAM,cAAc,CACzB,QAAQ,EACR,QAAQ,CAAC,OAAO,EAChB,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAC7D,OAAO,CAAC,OAAO,EACf,eAAe,CAChB,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,CAAC;QACH,CAAC;QACD,KAAK;YACH,gBAAgB,EAAE,CAAC;YACnB,OAAO,UAAU,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC"}