@typelets/mcp 0.3.0 → 0.5.0

package/README.md

@@ -28,12 +28,13 @@ Why not session cookies: cookies are scoped to a browser and expire on the platf
 
 The PAT issuance flow is the only prerequisite work on the Typelets side. Everything else in this repo just wraps existing endpoints.
 
-## Two profiles
+## Profiles
 
-The server ships two profiles:
+The server ships three profiles:
 
 - **`interviewer`** (default): has access to rubric content, hidden tests, scores, and the full library.
-- **`candidate`** (strict): hides rubric / hidden tests / scores even if the user's role would otherwise allow it. Useful when the user wants to point an AI assistant at their own in-progress interview without leaking the answer key into the LLM's context.
+- **`general`**: for using Typelets as a hosted dev/workspace product rather than for interviews. Full authoring — workspace lifecycle (create/delete), file/folder CRUD, and reads — but none of the interview tooling (no problem authoring, no recording analysis or rubric scoring). Any problem content it reads is stripped of rubric / criteria / hidden tests / solution.
+- **`candidate`** (strict): hides rubric / hidden tests / scores even if the user's role would otherwise allow it, and additionally withholds workspace lifecycle + problem tooling. Useful when the user wants to point an AI assistant at their own in-progress interview without leaking the answer key into the LLM's context.
 
 The profile is set at start-up, not per-tool:
 
@@ -41,7 +42,7 @@ The profile is set at start-up, not per-tool:
 TYPELETS_PROFILE=candidate npx @typelets/mcp
 ```
 
-Default is `interviewer`. The server refuses to switch profiles at runtime. If you want both, run two server instances on different ports.
+Default is `interviewer`. The server refuses to switch profiles at runtime. If you want more than one, run a server instance per profile.
 
 ## Install
 
@@ -71,11 +72,12 @@ Get your token at https://typelets.com: User Settings → Tokens → New token.
 
 Profiles:
 - `interviewer` (default): full surface, including rubric and hidden tests.
-- `candidate`: the same tools but rubric, criteria, hidden tests, and solution are stripped before they reach the LLM. Use this when you want an AI assistant helping you on a problem you're solving.
+- `general`: workspace lifecycle + file/folder CRUD + reads; no interview tooling. Use this when you're using Typelets as a hosted dev/workspace product.
+- `candidate`: file CRUD + reads only; rubric, criteria, hidden tests, and solution are stripped before they reach the LLM. Use this when you want an AI assistant helping you on a problem you're solving.
 
 ## Tool surface
 
-16 tools total. In `candidate` profile, the 5 interviewer-only tools are not registered; the candidate's host LLM does not see them in `listTools`.
+In `general` profile the interview-authoring + session-intelligence tools are not registered; in `candidate` profile those plus workspace lifecycle (create/delete) are withheld. In each case the host LLM does not see the withheld tools in `listTools`.
 
 ### Reads (8 tools, both profiles)
 
@@ -95,9 +97,12 @@ Profiles:
 | Tool | Writes | `destructive` |
 | --- | --- | --- |
 | `create_file` | `POST /workspaces/:id/files` | |
+| `upload_file` | `POST /workspaces/:id/files/binary` | |
 | `update_file` | `PUT /workspaces/:id/files/:fileId/content` | ✓ |
 | `delete_file` | `DELETE /workspaces/:id/files/:fileId` | ✓ |
 
+`upload_file` stores a base64-encoded **binary** file (image, font, PDF, asset) in object storage rather than the Yjs text doc — the path for assets a persistent workspace serves at its preview URL / custom domain. `create_file`/`update_file` remain for UTF-8 text. Available in all profiles. Max 25 MiB.
+
 ### Writes: authoring (5 tools, interviewer profile only)
 
 | Tool | Writes | `destructive` |
@@ -120,6 +125,19 @@ Tools marked `destructive` carry the MCP `destructiveHint: true` annotation so h
 
 Each tool returns a structured timeline (per-file content checkpoints sampled across the session + chronological Run-button events) so the host LLM can write the prose summary, score, or follow-up questions itself. `score_against_rubric` also attaches the workspace's inline rubric + criteria; calls against a workspace with no applied problem return a friendly error pointing the user to `apply_problem_to_workspace`. `suggest_followup_questions` operates on the workspace's currently-active recording (last 5 minutes), and surfaces a clear error if no recording is in progress.
 
+### Completeness: file/folder + lifecycle (6 tools)
+
+| Tool | Writes | Profile | `destructive` |
+| --- | --- | --- | --- |
+| `move_path` | `POST /workspaces/:id/move` | both | |
+| `create_folder` | `POST /workspaces/:id/folders` | both | |
+| `delete_folder` | `DELETE /workspaces/:id/folders/:folderId` | both | ✓ |
+| `append_to_file` | `PATCH /workspaces/:id/files/:fileId/append` | both | |
+| `delete_workspace` | `DELETE /workspaces/:id` | interviewer only | ✓ |
+| `whoami` | `GET /auth/me` | both | |
+
+`move_path` renames or moves any node (file or folder) to a full destination path, creating intermediate folders as needed; it rejects moving a folder into its own subtree. `create_folder` makes an empty folder (idempotent). `delete_folder` removes a folder and everything under it. `append_to_file` adds to the end of a file without re-sending its content. `delete_workspace` is interviewer-only and owner-gated by the API. `whoami` reports the identity + profile the server is running as.
+
 ## Layout
 
 ```

package/dist/client.d.ts

@@ -19,5 +19,9 @@ export interface TypeletsClient {
     put<T>(path: string, body?: unknown): Promise<T>;
     patch<T>(path: string, body?: unknown): Promise<T>;
     delete<T>(path: string): Promise<T>;
+    /** Upload raw bytes (binary file) as an octet-stream body. Separate from
+     *  the JSON helpers above because the body is not JSON and the mime type
+     *  rides an extra header. */
+    uploadBinary<T>(workspaceId: string, filePath: string, bytes: Uint8Array, mimeType: string): Promise<T>;
 }
 export declare function createClient(env: Env): TypeletsClient;

package/dist/client.js

@@ -47,12 +47,46 @@ export function createClient(env) {
         }
         return json;
     }
+    async function uploadBinary(workspaceId, filePath, bytes, mimeType) {
+        const url = `${env.apiUrl}/workspaces/${encodeURIComponent(workspaceId)}/files/binary` +
+            `?path=${encodeURIComponent(filePath)}`;
+        const res = await fetch(url, {
+            method: 'POST',
+            headers: {
+                accept: 'application/json',
+                authorization: `Bearer ${env.token}`,
+                'content-type': 'application/octet-stream',
+                'x-file-mime': mimeType,
+            },
+            body: bytes,
+        });
+        if (res.status === 204)
+            return undefined;
+        const text = await res.text();
+        let json = null;
+        if (text.length > 0) {
+            try {
+                json = JSON.parse(text);
+            }
+            catch {
+                json = text;
+            }
+        }
+        if (!res.ok) {
+            const message = json !== null && typeof json === 'object' && 'error' in json && typeof json.error === 'string'
+                ? json.error
+                : `Typelets API POST /workspaces/${workspaceId}/files/binary failed with ${res.status}`;
+            throw new TypeletsApiError(res.status, message, json);
+        }
+        return json;
+    }
     return {
         get: (path) => request('GET', path),
         post: (path, body) => request('POST', path, body),
         put: (path, body) => request('PUT', path, body),
         patch: (path, body) => request('PATCH', path, body),
         delete: (path) => request('DELETE', path),
+        uploadBinary: (workspaceId, filePath, bytes, mimeType) => uploadBinary(workspaceId, filePath, bytes, mimeType),
     };
 }
 //# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAWA,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAEvB;IAEA;IAHlB,YACkB,MAAc,EAC9B,OAAe,EACC,IAAc;QAE9B,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,WAAM,GAAN,MAAM,CAAQ;QAEd,SAAI,GAAJ,IAAI,CAAU;QAG9B,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAUD,MAAM,UAAU,YAAY,CAAC,GAAQ;IACnC,KAAK,UAAU,OAAO,CACpB,MAAmD,EACnD,IAAY,EACZ,IAAc;QAEd,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACnC,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,kBAAkB;YAC1B,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE;SACrC,CAAC;QACF,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAErE,oEAAoE;QACpE,kEAAkE;QAClE,qBAAqB;QACrB,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC9C,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAEnC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAE9C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,GAAY,IAAI,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;gBAC9D,8DAA8D;gBAC9D,gEAAgE;gBAChE,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,OAAO,GACX,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC;gBAC9F,CAAC,CAAC,IAAI,CAAC,KAAK;gBACZ,CAAC,CAAC,gBAAgB,MAAM,IAAI,IAAI,gBAAgB,GAAG,CAAC,MAAM,EAAE,CAAC;YACjE,MAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,IAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;QACnC,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;QACjD,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;QAC/C,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;QACnD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;KAC1C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAWA,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAEvB;IAEA;IAHlB,YACkB,MAAc,EAC9B,OAAe,EACC,IAAc;QAE9B,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,WAAM,GAAN,MAAM,CAAQ;QAEd,SAAI,GAAJ,IAAI,CAAU;QAG9B,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAmBD,MAAM,UAAU,YAAY,CAAC,GAAQ;IACnC,KAAK,UAAU,OAAO,CACpB,MAAmD,EACnD,IAAY,EACZ,IAAc;QAEd,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACnC,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,kBAAkB;YAC1B,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE;SACrC,CAAC;QACF,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAErE,oEAAoE;QACpE,kEAAkE;QAClE,qBAAqB;QACrB,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC9C,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAEnC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAE9C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,GAAY,IAAI,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;gBAC9D,8DAA8D;gBAC9D,gEAAgE;gBAChE,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,OAAO,GACX,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC;gBAC9F,CAAC,CAAC,IAAI,CAAC,KAAK;gBACZ,CAAC,CAAC,gBAAgB,MAAM,IAAI,IAAI,gBAAgB,GAAG,CAAC,MAAM,EAAE,CAAC;YACjE,MAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,IAAS,CAAC;IACnB,CAAC;IAED,KAAK,UAAU,YAAY,CACzB,WAAmB,EACnB,QAAgB,EAChB,KAAiB,EACjB,QAAgB;QAEhB,MAAM,GAAG,GACP,GAAG,GAAG,CAAC,MAAM,eAAe,kBAAkB,CAAC,WAAW,CAAC,eAAe;YAC1E,SAAS,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE;gBACpC,cAAc,EAAE,0BAA0B;gBAC1C,aAAa,EAAE,QAAQ;aACxB;YACD,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,GAAY,IAAI,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,OAAO,GACX,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;gBAC5F,CAAC,CAAC,IAAI,CAAC,KAAK;gBACZ,CAAC,CAAC,iCAAiC,WAAW,6BAA6B,GAAG,CAAC,MAAM,EAAE,CAAC;YAC5F,MAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;QACnC,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;QACjD,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;QAC/C,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;QACnD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;QACzC,YAAY,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CACvD,YAAY,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC;KACvD,CAAC;AACJ,CAAC"}

package/dist/env.d.ts

@@ -1,6 +1,6 @@
 export interface Env {
     token: string;
     apiUrl: string;
-    profile: 'interviewer' | 'candidate';
+    profile: 'interviewer' | 'candidate' | 'general';
 }
 export declare function readEnv(): Env;

package/dist/env.js

@@ -21,12 +21,19 @@ const apiUrlSchema = z
     .url()
     .default('https://api.typelets.com');
 /**
- * Which tool surface to expose. `interviewer` (default) sees rubric +
- * hidden test content. `candidate` strips it out so an AI assistant
- * helping a candidate can not be fed the answer key. The profile is
- * fixed at start-up; the server refuses to switch it at runtime.
+ * Which tool surface to expose:
+ *  - `interviewer` (default): full surface; sees rubric + hidden test content.
+ *  - `candidate`: strips answer-key content and withholds workspace lifecycle
+ *    + interview-authoring tools, so an AI assistant helping a candidate can
+ *    not be fed the answer key or reshape the interview.
+ *  - `general`: for using Typelets as a hosted dev/workspace product rather
+ *    than for interviews — full authoring (workspace lifecycle + file/folder
+ *    CRUD + reads) but none of the interview machinery.
+ * The profile is fixed at start-up; the server refuses to switch it at runtime.
  */
-const profileSchema = z.enum(['interviewer', 'candidate']).default('interviewer');
+const profileSchema = z
+    .enum(['interviewer', 'candidate', 'general'])
+    .default('interviewer');
 export function readEnv() {
     const token = tokenSchema.parse(process.env.TYPELETS_TOKEN);
     const apiUrl = apiUrlSchema.parse(process.env.TYPELETS_API_URL);

package/dist/env.js.map

@@ -1 +1 @@
-{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,kDAAkD,CAAC,CAAC;AAE3F;;;GAGG;AACH,MAAM,YAAY,GAAG,CAAC;KACnB,MAAM,EAAE;KACR,GAAG,EAAE;KACL,OAAO,CAAC,0BAA0B,CAAC,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AAQlF,MAAM,UAAU,OAAO;IACrB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAClE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC"}
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,kDAAkD,CAAC,CAAC;AAE3F;;;GAGG;AACH,MAAM,YAAY,GAAG,CAAC;KACnB,MAAM,EAAE;KACR,GAAG,EAAE;KACL,OAAO,CAAC,0BAA0B,CAAC,CAAC;AAEvC;;;;;;;;;;GAUG;AACH,MAAM,aAAa,GAAG,CAAC;KACpB,IAAI,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;KAC7C,OAAO,CAAC,aAAa,CAAC,CAAC;AAQ1B,MAAM,UAAU,OAAO;IACrB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAClE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC"}

package/dist/index.js

@@ -26,6 +26,7 @@ import { registerGetProblem } from './tools/get_problem.js';
 import { registerListRecordings } from './tools/list_recordings.js';
 import { registerListPendingInvites } from './tools/list_pending_invites.js';
 import { registerCreateFile } from './tools/create_file.js';
+import { registerUploadFile } from './tools/upload_file.js';
 import { registerUpdateFile } from './tools/update_file.js';
 import { registerDeleteFile } from './tools/delete_file.js';
 import { registerCreateWorkspace } from './tools/create_workspace.js';
@@ -36,6 +37,12 @@ import { registerDeleteProblem } from './tools/delete_problem.js';
 import { registerSummarizeRecording } from './tools/summarize_recording.js';
 import { registerScoreAgainstRubric } from './tools/score_against_rubric.js';
 import { registerSuggestFollowupQuestions } from './tools/suggest_followup_questions.js';
+import { registerMovePath } from './tools/move_path.js';
+import { registerCreateFolder } from './tools/create_folder.js';
+import { registerDeleteFolder } from './tools/delete_folder.js';
+import { registerAppendToFile } from './tools/append_to_file.js';
+import { registerDeleteWorkspace } from './tools/delete_workspace.js';
+import { registerWhoami } from './tools/whoami.js';
 async function main() {
     const env = readEnv();
     const client = createClient(env);
@@ -60,6 +67,7 @@ async function main() {
     registerListPendingInvites(server, client, env);
     // Phase 2 write tools (profile-gated inside each register function).
     registerCreateFile(server, client, env);
+    registerUploadFile(server, client, env);
     registerUpdateFile(server, client, env);
     registerDeleteFile(server, client, env);
     registerCreateWorkspace(server, client, env);
@@ -71,6 +79,13 @@ async function main() {
     registerSummarizeRecording(server, client, env);
     registerScoreAgainstRubric(server, client, env);
     registerSuggestFollowupQuestions(server, client, env);
+    // Phase 2.2 completeness tools (delete_workspace is interviewer-only).
+    registerMovePath(server, client, env);
+    registerCreateFolder(server, client, env);
+    registerDeleteFolder(server, client, env);
+    registerAppendToFile(server, client, env);
+    registerDeleteWorkspace(server, client, env);
+    registerWhoami(server, client, env);
     const transport = new StdioServerTransport();
     await server.connect(transport);
     // Log to stderr (stdout is the MCP transport). Surfaces in the client's

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,+BAA+B,EAAE,MAAM,uCAAuC,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,gCAAgC,EAAE,MAAM,uCAAuC,CAAC;AAEzF,KAAK,UAAU,IAAI;IACjB,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAEjC,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,OAAO;KACjB,EACD;QACE,YAAY,EAAE;YACZ,KAAK,EAAE,EAAE;SACV;KACF,CACF,CAAC;IAEF,kEAAkE;IAClE,qEAAqE;IACrE,uDAAuD;IACvD,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5C,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1C,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAChD,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/C,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1C,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5C,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAEhD,qEAAqE;IACrE,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7C,+BAA+B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAClD,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACzC,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAE3C,yDAAyD;IACzD,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAChD,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAChD,gCAAgC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAEtD,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,wEAAwE;IACxE,kEAAkE;IAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,GAAG,CAAC,OAAO,QAAQ,GAAG,CAAC,MAAM,IAAI,CACnE,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CACtF,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,+BAA+B,EAAE,MAAM,uCAAuC,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,gCAAgC,EAAE,MAAM,uCAAuC,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,KAAK,UAAU,IAAI;IACjB,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAEjC,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,OAAO;KACjB,EACD;QACE,YAAY,EAAE;YACZ,KAAK,EAAE,EAAE;SACV;KACF,CACF,CAAC;IAEF,kEAAkE;IAClE,qEAAqE;IACrE,uDAAuD;IACvD,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5C,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1C,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAChD,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/C,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1C,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5C,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAEhD,qEAAqE;IACrE,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7C,+BAA+B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAClD,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACzC,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAE3C,yDAAyD;IACzD,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAChD,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAChD,gCAAgC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAEtD,uEAAuE;IACvE,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACtC,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1C,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1C,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1C,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7C,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAEpC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,wEAAwE;IACxE,kEAAkE;IAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,GAAG,CAAC,OAAO,QAAQ,GAAG,CAAC,MAAM,IAAI,CACnE,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CACtF,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/profile.d.ts

@@ -36,14 +36,17 @@ export interface ProblemDetailLike {
     solution?: Record<string, unknown>;
 }
 /**
- * Names of tools that the candidate profile MUST NOT register. The
+ * Names of tools the candidate profile MUST NOT register: every
+ * interview-authoring/intelligence tool plus workspace lifecycle. The
  * server skips registration for these when `env.profile === 'candidate'`,
- * so the candidate's host LLM never sees them in `listTools` and cannot
- * try to invoke them.
+ * so the candidate's host LLM never sees them in `listTools`.
+ *
+ * Kept as a named export for the existing gating tests and any callers that
+ * relied on it; it is the union of the two sets above.
  *
  * Per-file CRUD (create_file, update_file, delete_file) is allowed for
- * candidates: they have editor role inside their own interview
- * workspace and need to be able to modify their files.
+ * candidates: they have editor role inside their own interview workspace
+ * and need to be able to modify their files.
  */
 export declare const INTERVIEWER_ONLY_TOOLS: ReadonlySet<string>;
 export declare function toolAllowedForProfile(toolName: string, profile: Env['profile']): boolean;

package/dist/profile.js

@@ -1,15 +1,15 @@
 /**
- * Names of tools that the candidate profile MUST NOT register. The
- * server skips registration for these when `env.profile === 'candidate'`,
- * so the candidate's host LLM never sees them in `listTools` and cannot
- * try to invoke them.
+ * Interview-specific tools: authoring problems, plus the session-intelligence
+ * tools that read a recorded interview (summaries, rubric scoring, follow-up
+ * suggestions). These only make sense for an interviewer running a hiring
+ * loop, so both the `candidate` and `general` profiles skip registering them.
  *
- * Per-file CRUD (create_file, update_file, delete_file) is allowed for
- * candidates: they have editor role inside their own interview
- * workspace and need to be able to modify their files.
+ * `general` is the profile for someone using Typelets as a hosted
+ * dev/workspace product rather than for interviews: they get full authoring
+ * (workspace lifecycle + file/folder CRUD + reads) but none of the
+ * interview machinery.
  */
-export const INTERVIEWER_ONLY_TOOLS = new Set([
-    'create_workspace',
+const INTERVIEW_TOOLS = new Set([
     'apply_problem_to_workspace',
     'save_problem_to_library',
     'edit_problem',
@@ -18,9 +18,41 @@ export const INTERVIEWER_ONLY_TOOLS = new Set([
     'score_against_rubric',
     'suggest_followup_questions',
 ]);
+/**
+ * Workspace lifecycle tools. An interviewer or a general (product) user can
+ * create and delete their own workspaces; a candidate works only inside the
+ * interview workspace they were invited to, so these are withheld from the
+ * candidate profile.
+ */
+const WORKSPACE_LIFECYCLE_TOOLS = new Set([
+    'create_workspace',
+    'delete_workspace',
+]);
+/**
+ * Names of tools the candidate profile MUST NOT register: every
+ * interview-authoring/intelligence tool plus workspace lifecycle. The
+ * server skips registration for these when `env.profile === 'candidate'`,
+ * so the candidate's host LLM never sees them in `listTools`.
+ *
+ * Kept as a named export for the existing gating tests and any callers that
+ * relied on it; it is the union of the two sets above.
+ *
+ * Per-file CRUD (create_file, update_file, delete_file) is allowed for
+ * candidates: they have editor role inside their own interview workspace
+ * and need to be able to modify their files.
+ */
+export const INTERVIEWER_ONLY_TOOLS = new Set([
+    ...WORKSPACE_LIFECYCLE_TOOLS,
+    ...INTERVIEW_TOOLS,
+]);
 export function toolAllowedForProfile(toolName, profile) {
     if (profile === 'interviewer')
         return true;
+    // general: full authoring (workspace lifecycle + file CRUD + reads) but no
+    // interview tooling.
+    if (profile === 'general')
+        return !INTERVIEW_TOOLS.has(toolName);
+    // candidate: no interview tooling and no workspace lifecycle.
     return !INTERVIEWER_ONLY_TOOLS.has(toolName);
 }
 export function filterProblemForProfile(problem, env) {

package/dist/profile.js.map

@@ -1 +1 @@
-{"version":3,"file":"profile.js","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AAgCA;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IACjE,kBAAkB;IAClB,4BAA4B;IAC5B,yBAAyB;IACzB,cAAc;IACd,gBAAgB;IAChB,qBAAqB;IACrB,sBAAsB;IACtB,4BAA4B;CAC7B,CAAC,CAAC;AAEH,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,OAAuB;IAC7E,IAAI,OAAO,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,CAAC,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAU,EACV,GAAQ;IAER,IAAI,GAAG,CAAC,OAAO,KAAK,aAAa;QAAE,OAAO,OAAO,CAAC;IAClD,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAC5B,OAAO,IAAI,CAAC,MAAM,CAAC;IACnB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACrB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACrB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AAgCA;;;;;;;;;;GAUG;AACH,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,4BAA4B;IAC5B,yBAAyB;IACzB,cAAc;IACd,gBAAgB;IAChB,qBAAqB;IACrB,sBAAsB;IACtB,4BAA4B;CAC7B,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IAC7D,kBAAkB;IAClB,kBAAkB;CACnB,CAAC,CAAC;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IACjE,GAAG,yBAAyB;IAC5B,GAAG,eAAe;CACnB,CAAC,CAAC;AAEH,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,OAAuB;IAC7E,IAAI,OAAO,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAC3C,2EAA2E;IAC3E,qBAAqB;IACrB,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjE,8DAA8D;IAC9D,OAAO,CAAC,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAU,EACV,GAAQ;IAER,IAAI,GAAG,CAAC,OAAO,KAAK,aAAa;QAAE,OAAO,OAAO,CAAC;IAClD,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAC5B,OAAO,IAAI,CAAC,MAAM,CAAC;IACnB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACrB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACrB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/tools/append_to_file.d.ts

@@ -0,0 +1,8 @@
+/**
+ * append_to_file: append text to the end of a file without re-sending the
+ * whole content. Both profiles.
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { TypeletsClient } from '../client.js';
+import type { Env } from '../env.js';
+export declare function registerAppendToFile(server: McpServer, client: TypeletsClient, env: Env): void;

package/dist/tools/append_to_file.js

@@ -0,0 +1,26 @@
+import { z } from 'zod';
+import { toolAllowedForProfile } from '../profile.js';
+import { ok, fail } from './_shared.js';
+export function registerAppendToFile(server, client, env) {
+    if (!toolAllowedForProfile('append_to_file', env.profile))
+        return;
+    server.registerTool('append_to_file', {
+        title: 'Append to a file',
+        description: 'Append text to the end of an existing file without re-sending its full content. Get fileId from list_workspace_files. The file must already exist (use create_file otherwise).',
+        inputSchema: {
+            workspaceId: z.string().min(1).describe('The workspace id.'),
+            fileId: z.string().min(1).describe('The file id from list_workspace_files.'),
+            text: z.string().min(1).describe('Text to append at the end of the file.'),
+        },
+        annotations: { destructiveHint: false },
+    }, async ({ workspaceId, fileId, text }) => {
+        try {
+            const out = await client.patch(`/workspaces/${encodeURIComponent(workspaceId)}/files/${encodeURIComponent(fileId)}/append`, { text });
+            return ok(`Appended to file (${out.bytes} bytes total).`, out);
+        }
+        catch (err) {
+            return fail(err);
+        }
+    });
+}
+//# sourceMappingURL=append_to_file.js.map

package/dist/tools/append_to_file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"append_to_file.js","sourceRoot":"","sources":["../../src/tools/append_to_file.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAOxC,MAAM,UAAU,oBAAoB,CAAC,MAAiB,EAAE,MAAsB,EAAE,GAAQ;IACtF,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IAElE,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,kBAAkB;QACzB,WAAW,EACT,gLAAgL;QAClL,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;YAC5E,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;SAC3E;QACD,WAAW,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE;KACxC,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QACtC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,eAAe,kBAAkB,CAAC,WAAW,CAAC,UAAU,kBAAkB,CAAC,MAAM,CAAC,SAAS,EAC3F,EAAE,IAAI,EAAE,CACT,CAAC;YACF,OAAO,EAAE,CAAC,qBAAqB,GAAG,CAAC,KAAK,gBAAgB,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/create_folder.d.ts

@@ -0,0 +1,8 @@
+/**
+ * create_folder: create an empty folder (with intermediate folders) at a path.
+ * Idempotent if the folder already exists. Both profiles.
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { TypeletsClient } from '../client.js';
+import type { Env } from '../env.js';
+export declare function registerCreateFolder(server: McpServer, client: TypeletsClient, env: Env): void;

package/dist/tools/create_folder.js

@@ -0,0 +1,25 @@
+import { z } from 'zod';
+import { toolAllowedForProfile } from '../profile.js';
+import { ok, fail } from './_shared.js';
+export function registerCreateFolder(server, client, env) {
+    if (!toolAllowedForProfile('create_folder', env.profile))
+        return;
+    server.registerTool('create_folder', {
+        title: 'Create a folder',
+        description: 'Create an empty folder at a slash-separated path; intermediate folders are created as needed. Idempotent if the folder already exists. Errors if a file occupies the path.',
+        inputSchema: {
+            workspaceId: z.string().min(1).describe('The workspace id.'),
+            path: z.string().min(1).describe('Folder path, e.g. "src/lib".'),
+        },
+        annotations: { destructiveHint: false },
+    }, async ({ workspaceId, path }) => {
+        try {
+            const out = await client.post(`/workspaces/${encodeURIComponent(workspaceId)}/folders`, { path });
+            return ok(`Created folder ${out.path}.`, out);
+        }
+        catch (err) {
+            return fail(err);
+        }
+    });
+}
+//# sourceMappingURL=create_folder.js.map

package/dist/tools/create_folder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create_folder.js","sourceRoot":"","sources":["../../src/tools/create_folder.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AASxC,MAAM,UAAU,oBAAoB,CAAC,MAAiB,EAAE,MAAsB,EAAE,GAAQ;IACtF,IAAI,CAAC,qBAAqB,CAAC,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IAEjE,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,iBAAiB;QACxB,WAAW,EACT,4KAA4K;QAC9K,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAC5D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;SACjE;QACD,WAAW,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE;KACxC,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAC3B,eAAe,kBAAkB,CAAC,WAAW,CAAC,UAAU,EACxD,EAAE,IAAI,EAAE,CACT,CAAC;YACF,OAAO,EAAE,CAAC,kBAAkB,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/delete_folder.d.ts

@@ -0,0 +1,8 @@
+/**
+ * delete_folder: recursively delete a folder and everything under it.
+ * Destructive. Both profiles (editors manage their own tree).
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { TypeletsClient } from '../client.js';
+import type { Env } from '../env.js';
+export declare function registerDeleteFolder(server: McpServer, client: TypeletsClient, env: Env): void;

package/dist/tools/delete_folder.js

@@ -0,0 +1,28 @@
+import { z } from 'zod';
+import { toolAllowedForProfile } from '../profile.js';
+import { ok, fail } from './_shared.js';
+export function registerDeleteFolder(server, client, env) {
+    if (!toolAllowedForProfile('delete_folder', env.profile))
+        return;
+    server.registerTool('delete_folder', {
+        title: 'Delete a folder (recursive)',
+        description: 'Permanently delete a folder and ALL files and subfolders inside it. Get folderId from list_workspace_files with includeFolders=true. This cannot be undone.',
+        inputSchema: {
+            workspaceId: z.string().min(1).describe('The workspace id.'),
+            folderId: z
+                .string()
+                .min(1)
+                .describe('The folder id from list_workspace_files (includeFolders=true).'),
+        },
+        annotations: { destructiveHint: true },
+    }, async ({ workspaceId, folderId }) => {
+        try {
+            const out = await client.delete(`/workspaces/${encodeURIComponent(workspaceId)}/folders/${encodeURIComponent(folderId)}`);
+            return ok(`Deleted folder and ${out.deleted} item(s).`, out);
+        }
+        catch (err) {
+            return fail(err);
+        }
+    });
+}
+//# sourceMappingURL=delete_folder.js.map

package/dist/tools/delete_folder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete_folder.js","sourceRoot":"","sources":["../../src/tools/delete_folder.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAMxC,MAAM,UAAU,oBAAoB,CAAC,MAAiB,EAAE,MAAsB,EAAE,GAAQ;IACtF,IAAI,CAAC,qBAAqB,CAAC,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IAEjE,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,6BAA6B;QACpC,WAAW,EACT,6JAA6J;QAC/J,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAC5D,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,CAAC,gEAAgE,CAAC;SAC9E;QACD,WAAW,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;KACvC,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,eAAe,kBAAkB,CAAC,WAAW,CAAC,YAAY,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CACzF,CAAC;YACF,OAAO,EAAE,CAAC,sBAAsB,GAAG,CAAC,OAAO,WAAW,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/delete_workspace.d.ts

@@ -0,0 +1,9 @@
+/**
+ * delete_workspace: permanently delete a workspace. Interviewer-only and
+ * destructive. Wraps the existing owner-gated DELETE /workspaces/:id (the api
+ * returns 403 if the caller is not the owner).
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { TypeletsClient } from '../client.js';
+import type { Env } from '../env.js';
+export declare function registerDeleteWorkspace(server: McpServer, client: TypeletsClient, env: Env): void;

package/dist/tools/delete_workspace.js

@@ -0,0 +1,24 @@
+import { z } from 'zod';
+import { toolAllowedForProfile } from '../profile.js';
+import { ok, fail } from './_shared.js';
+export function registerDeleteWorkspace(server, client, env) {
+    if (!toolAllowedForProfile('delete_workspace', env.profile))
+        return;
+    server.registerTool('delete_workspace', {
+        title: 'Delete a workspace',
+        description: 'Permanently delete a workspace and all its files, recordings, and members. Only the workspace owner can do this. This cannot be undone.',
+        inputSchema: {
+            workspaceId: z.string().min(1).describe('The workspace id to permanently delete.'),
+        },
+        annotations: { destructiveHint: true },
+    }, async ({ workspaceId }) => {
+        try {
+            await client.delete(`/workspaces/${encodeURIComponent(workspaceId)}`);
+            return ok('Workspace deleted.', { workspaceId, deleted: true });
+        }
+        catch (err) {
+            return fail(err);
+        }
+    });
+}
+//# sourceMappingURL=delete_workspace.js.map

package/dist/tools/delete_workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete_workspace.js","sourceRoot":"","sources":["../../src/tools/delete_workspace.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAExC,MAAM,UAAU,uBAAuB,CACrC,MAAiB,EACjB,MAAsB,EACtB,GAAQ;IAER,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,EAAE,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IAEpE,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EACT,yIAAyI;QAC3I,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;SACnF;QACD,WAAW,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;KACvC,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,CAAO,eAAe,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAC5E,OAAO,EAAE,CAAC,oBAAoB,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/move_path.d.ts

@@ -0,0 +1,9 @@
+/**
+ * move_path: rename or move a file/folder to a new path. The destination's
+ * parent folders are created as needed. Works on files and folders alike.
+ * Available to both profiles (editors manage their own tree).
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { TypeletsClient } from '../client.js';
+import type { Env } from '../env.js';
+export declare function registerMovePath(server: McpServer, client: TypeletsClient, env: Env): void;

package/dist/tools/move_path.js

@@ -0,0 +1,29 @@
+import { z } from 'zod';
+import { toolAllowedForProfile } from '../profile.js';
+import { ok, fail } from './_shared.js';
+export function registerMovePath(server, client, env) {
+    if (!toolAllowedForProfile('move_path', env.profile))
+        return;
+    server.registerTool('move_path', {
+        title: 'Move or rename a file or folder',
+        description: 'Move or rename a node (file OR folder) to a new full path. Parent folders are created as needed. Get nodeId from list_workspace_files (use includeFolders for folders). Moving a folder into its own subtree is rejected.',
+        inputSchema: {
+            workspaceId: z.string().min(1).describe('The workspace id.'),
+            nodeId: z.string().min(1).describe('The file or folder id from list_workspace_files.'),
+            destinationPath: z
+                .string()
+                .min(1)
+                .describe('Full destination path, e.g. "src/lib/auth.ts".'),
+        },
+        annotations: { destructiveHint: false },
+    }, async ({ workspaceId, nodeId, destinationPath }) => {
+        try {
+            const out = await client.post(`/workspaces/${encodeURIComponent(workspaceId)}/files/move`, { nodeId, destinationPath });
+            return ok(`Moved to ${out.path}.`, out);
+        }
+        catch (err) {
+            return fail(err);
+        }
+    });
+}
+//# sourceMappingURL=move_path.js.map

package/dist/tools/move_path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"move_path.js","sourceRoot":"","sources":["../../src/tools/move_path.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AASxC,MAAM,UAAU,gBAAgB,CAAC,MAAiB,EAAE,MAAsB,EAAE,GAAQ;IAClF,IAAI,CAAC,qBAAqB,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IAE7D,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;QACE,KAAK,EAAE,iCAAiC;QACxC,WAAW,EACT,2NAA2N;QAC7N,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kDAAkD,CAAC;YACtF,eAAe,EAAE,CAAC;iBACf,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,CAAC,gDAAgD,CAAC;SAC9D;QACD,WAAW,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE;KACxC,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,EAAE;QACjD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAC3B,eAAe,kBAAkB,CAAC,WAAW,CAAC,aAAa,EAC3D,EAAE,MAAM,EAAE,eAAe,EAAE,CAC5B,CAAC;YACF,OAAO,EAAE,CAAC,YAAY,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/upload_file.d.ts

@@ -0,0 +1,17 @@
+/**
+ * upload_file: upload a binary file (image/asset) into a workspace.
+ *
+ * MCP is a text transport, so the bytes arrive base64-encoded and are decoded
+ * here before being POSTed to the binary endpoint. Unlike create_file (which
+ * stores UTF-8 text in the Yjs doc), this stores raw bytes in object storage,
+ * which is how a persistent general workspace hosts images/assets served at
+ * its preview URL or custom domain.
+ *
+ * Available to every profile, same as the other file-CRUD tools: the API
+ * enforces workspace membership + role. It is not interview tooling, so it is
+ * not withheld from the candidate or general profiles.
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { TypeletsClient } from '../client.js';
+import type { Env } from '../env.js';
+export declare function registerUploadFile(server: McpServer, client: TypeletsClient, env: Env): void;

package/dist/tools/upload_file.js

@@ -0,0 +1,72 @@
+import { z } from 'zod';
+import { toolAllowedForProfile } from '../profile.js';
+import { ok, fail } from './_shared.js';
+/** Best-effort mime type from a path extension; the server re-validates. */
+const EXT_MIME = {
+    png: 'image/png',
+    jpg: 'image/jpeg',
+    jpeg: 'image/jpeg',
+    gif: 'image/gif',
+    webp: 'image/webp',
+    avif: 'image/avif',
+    svg: 'image/svg+xml',
+    bmp: 'image/bmp',
+    ico: 'image/x-icon',
+    pdf: 'application/pdf',
+    woff: 'font/woff',
+    woff2: 'font/woff2',
+    ttf: 'font/ttf',
+    otf: 'font/otf',
+    mp3: 'audio/mpeg',
+    wav: 'audio/wav',
+    mp4: 'video/mp4',
+    webm: 'video/webm',
+    zip: 'application/zip',
+    wasm: 'application/wasm',
+};
+function mimeFor(path, explicit) {
+    if (typeof explicit === 'string' && explicit.length > 0)
+        return explicit;
+    const ext = path.split('.').pop()?.toLowerCase() ?? '';
+    return EXT_MIME[ext] ?? 'application/octet-stream';
+}
+export function registerUploadFile(server, client, env) {
+    // Profile gate: keep the string in sync with profile.ts.
+    if (!toolAllowedForProfile('upload_file', env.profile))
+        return;
+    server.registerTool('upload_file', {
+        title: 'Upload a binary file to a workspace',
+        description: 'Upload a binary file (image, font, PDF, or other asset) to a slash-separated path in a workspace. The content must be base64-encoded; intermediate folders are created as needed. Use create_file for UTF-8 text. On a persistent workspace the uploaded asset is served at its preview URL / custom domain. Errors: 409 if a file already exists at the path; 413 if the file exceeds 25 MiB.',
+        inputSchema: {
+            workspaceId: z.string().min(1).describe('The workspace id from list_workspaces.'),
+            path: z
+                .string()
+                .min(1)
+                .describe('Slash-separated path from the workspace root (e.g. "assets/logo.png"). Cannot contain ".." segments.'),
+            contentBase64: z.string().min(1).describe('The file bytes, base64-encoded.'),
+            mimeType: z
+                .string()
+                .optional()
+                .describe('MIME type, e.g. "image/png". Inferred from the path extension when omitted.'),
+        },
+    }, async ({ workspaceId, path, contentBase64, mimeType }) => {
+        let bytes;
+        try {
+            bytes = new Uint8Array(Buffer.from(contentBase64, 'base64'));
+        }
+        catch {
+            return fail(new Error('contentBase64 is not valid base64.'));
+        }
+        if (bytes.length === 0) {
+            return fail(new Error('Decoded content is empty.'));
+        }
+        try {
+            const result = await client.uploadBinary(workspaceId, path, bytes, mimeFor(path, mimeType));
+            return ok(`Uploaded ${result.path} (id=${result.id}, ${result.mimeType}, ${result.sizeBytes} bytes).`, { file: result });
+        }
+        catch (err) {
+            return fail(err);
+        }
+    });
+}
+//# sourceMappingURL=upload_file.js.map

package/dist/tools/upload_file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload_file.js","sourceRoot":"","sources":["../../src/tools/upload_file.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAYxC,4EAA4E;AAC5E,MAAM,QAAQ,GAA2B;IACvC,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,iBAAiB;IACtB,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,YAAY;IACnB,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,iBAAiB;IACtB,IAAI,EAAE,kBAAkB;CACzB,CAAC;AAEF,SAAS,OAAO,CAAC,IAAY,EAAE,QAAiB;IAC9C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACvD,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,MAAiB,EACjB,MAAsB,EACtB,GAAQ;IAER,yDAAyD;IACzD,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IAE/D,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,qCAAqC;QAC5C,WAAW,EACT,gYAAgY;QAClY,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;YACjF,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,CAAC,sGAAsG,CAAC;YACnH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;YAC5E,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,6EAA6E,CAAC;SAC3F;KACF,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE;QACvD,IAAI,KAAiB,CAAC;QACtB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CACtC,WAAW,EACX,IAAI,EACJ,KAAK,EACL,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CACxB,CAAC;YACF,OAAO,EAAE,CACP,YAAY,MAAM,CAAC,IAAI,QAAQ,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,SAAS,UAAU,EAC3F,EAAE,IAAI,EAAE,MAAM,EAAE,CACjB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/whoami.d.ts

@@ -0,0 +1,9 @@
+/**
+ * whoami: return the authenticated caller's identity. Wraps GET /auth/me so
+ * the host LLM can confirm which account + profile it's operating as. Both
+ * profiles.
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { TypeletsClient } from '../client.js';
+import type { Env } from '../env.js';
+export declare function registerWhoami(server: McpServer, client: TypeletsClient, env: Env): void;

package/dist/tools/whoami.js

@@ -0,0 +1,25 @@
+import { toolAllowedForProfile } from '../profile.js';
+import { ok, fail } from './_shared.js';
+export function registerWhoami(server, client, env) {
+    if (!toolAllowedForProfile('whoami', env.profile))
+        return;
+    server.registerTool('whoami', {
+        title: 'Who am I',
+        description: 'Return the authenticated caller identity (id, email, display name) for the PAT this server is using, plus the active profile. Use to confirm which account you are operating as.',
+        inputSchema: {},
+        annotations: { destructiveHint: false },
+    }, async () => {
+        try {
+            const me = await client.get('/auth/me');
+            const who = me.displayName ?? me.email ?? me.id;
+            return ok(`Authenticated as ${who} (profile: ${env.profile}).`, {
+                ...me,
+                profile: env.profile,
+            });
+        }
+        catch (err) {
+            return fail(err);
+        }
+    });
+}
+//# sourceMappingURL=whoami.js.map

package/dist/tools/whoami.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.js","sourceRoot":"","sources":["../../src/tools/whoami.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AASxC,MAAM,UAAU,cAAc,CAAC,MAAiB,EAAE,MAAsB,EAAE,GAAQ;IAChF,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IAE1D,MAAM,CAAC,YAAY,CACjB,QAAQ,EACR;QACE,KAAK,EAAE,UAAU;QACjB,WAAW,EACT,kLAAkL;QACpL,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE;KACxC,EACD,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,GAAG,CAAa,UAAU,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;YAChD,OAAO,EAAE,CAAC,oBAAoB,GAAG,cAAc,GAAG,CAAC,OAAO,IAAI,EAAE;gBAC9D,GAAG,EAAE;gBACL,OAAO,EAAE,GAAG,CAAC,OAAO;aACrB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@typelets/mcp",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "Model Context Protocol server for Typelets. Wraps the Typelets API as tools an MCP-capable LLM client can call.",
   "type": "module",
   "bin": {