@withpica/mcp-server 1.3.0

package/dist/tools/settings.js

@@ -0,0 +1,365 @@
+// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+import { formatAsText, formatSuccess, MY_IDENTITY_WRITE_PROPERTIES, ORG_PROFILE_WRITE_PROPERTIES, } from "@withpica/mcp-utils";
+export class SettingsTools {
+    pica;
+    constructor(pica) {
+        this.pica = pica;
+    }
+    getTools() {
+        // NOTE: `pica_credits_history` was removed from the MCP surface 2026-04-22
+        // (see docs/MCP_REFINEMENT_LOG.md entry B-001). withPICA is subscription-only;
+        // surfacing a credit-transaction-history tool was billing-model drift.
+        // The SDK method `settings.creditsHistory()` is still available for internal
+        // telemetry.
+        return [
+            {
+                definition: {
+                    name: "pica_storage_status",
+                    description: "Check storage configuration and connection health — which cloud " +
+                        "provider is active (PICA default, your own S3, GCS, Azure, R2, or " +
+                        "Backblaze), bucket names, region, and the last-test result so the " +
+                        "agent can say 'your S3 bucket failed its last health check' without " +
+                        "re-running a probe. Never returns credentials. Pair with " +
+                        "pica_storage_configure_start to set up BYOC, or pica_storage_disconnect " +
+                        "to revert to PICA default.",
+                    workflows: "infrastructure",
+                    inputSchema: {
+                        type: "object",
+                        properties: {},
+                    },
+                    annotations: {
+                        readOnlyHint: true,
+                        idempotentHint: true,
+                    },
+                },
+                executor: this.storageStatus.bind(this),
+            },
+            {
+                definition: {
+                    name: "pica_organisation_profile",
+                    description: "Get your account profile — display name, tagline, IPI number, " +
+                        "default currency, social links, and carbon tracking status.",
+                    workflows: "infrastructure",
+                    inputSchema: {
+                        type: "object",
+                        properties: {},
+                    },
+                },
+                executor: this.orgProfile.bind(this),
+            },
+            {
+                definition: {
+                    name: "pica_user_profile",
+                    description: "Get your user profile — name, email, role, creative types, " +
+                        "AI disclosure defaults, and onboarding status.",
+                    workflows: "infrastructure",
+                    inputSchema: {
+                        type: "object",
+                        properties: {},
+                    },
+                },
+                executor: this.userProfile.bind(this),
+            },
+            {
+                definition: {
+                    name: "pica_update_privacy_settings",
+                    description: "Update your marketing / privacy preferences. Use this to unsubscribe " +
+                        "from product emails — set receive_news_announcements=false and/or " +
+                        "receive_monthly_digest=false. Writes the same fields the settings " +
+                        "UI does; both flags default to true for new accounts. " +
+                        "Subject is always the authenticated user (no user_id parameter " +
+                        "accepted).",
+                    workflows: "infrastructure",
+                    inputSchema: {
+                        type: "object",
+                        properties: {
+                            receive_news_announcements: {
+                                type: "boolean",
+                                description: "Product announcements, drip sequences, weekly roundups, " +
+                                    "and all other non-transactional marketing email. " +
+                                    "Set to false to unsubscribe from everything.",
+                            },
+                            receive_monthly_digest: {
+                                type: "boolean",
+                                description: "Monthly catalog digest — a separate opt-out from the " +
+                                    "news/announcements flag. Set to false to stop receiving it.",
+                            },
+                        },
+                    },
+                },
+                executor: this.updatePrivacySettings.bind(this),
+            },
+            {
+                definition: {
+                    name: "pica_get_privacy_settings",
+                    description: "Read your marketing / privacy preferences. Returns the same flags " +
+                        "the settings UI shows: receive_news_announcements and " +
+                        "receive_monthly_digest. Use this to check current opt-in state " +
+                        "before calling pica_update_privacy_settings. Subject is always " +
+                        "the authenticated user (no user_id parameter accepted).",
+                    workflows: "infrastructure",
+                    inputSchema: {
+                        type: "object",
+                        properties: {},
+                    },
+                    annotations: {
+                        readOnlyHint: true,
+                        idempotentHint: true,
+                    },
+                },
+                executor: this.getPrivacySettings.bind(this),
+            },
+            {
+                definition: {
+                    name: "pica_delete_my_account",
+                    description: "Request deletion of your PICA account. Creates a soft-delete " +
+                        "request with a 30-day reversal window (same semantics as the " +
+                        "settings UI). Your catalog data is retained per legal-compliance " +
+                        "rules; personal data (name, bio, credentials, chat history) is " +
+                        "erased on the scheduled cutover. Subject is always the " +
+                        "authenticated user; no user_id parameter accepted. The agent " +
+                        "is responsible for confirming with the user before invoking " +
+                        "this tool.",
+                    workflows: "infrastructure",
+                    inputSchema: {
+                        type: "object",
+                        properties: {
+                            reason: {
+                                type: "string",
+                                description: "Optional free-text reason for leaving. Surfaced to the " +
+                                    "PICA team for product feedback; never shared externally.",
+                            },
+                        },
+                    },
+                    annotations: {
+                        destructiveHint: true,
+                        idempotentHint: false,
+                    },
+                },
+                executor: this.deleteMyAccount.bind(this),
+            },
+            {
+                definition: {
+                    name: "pica_update_my_identity",
+                    description: "Capture or update your own identity — full_name (your account name), " +
+                        "stage_name, IPI, ISNI, IPN, PRO. " +
+                        "Lazy-creates your person record if needed. After the write, we re-run " +
+                        "cross-org discovery with your new identifiers and return the count of " +
+                        "newly-visible credits / ownership claims / artist links so the agent " +
+                        "can say 'found N more — claim them?' in the same turn. " +
+                        "Subject is always the authenticated user; no user_id parameter " +
+                        "accepted.",
+                    workflows: "infrastructure",
+                    inputSchema: {
+                        type: "object",
+                        properties: MY_IDENTITY_WRITE_PROPERTIES,
+                    },
+                    annotations: {
+                        idempotentHint: true,
+                    },
+                },
+                executor: this.updateMyIdentity.bind(this),
+            },
+            {
+                definition: {
+                    name: "pica_update_organisation_profile",
+                    description: "Update your account profile — name, org_type, display_name, tagline, " +
+                        "ipi_number. Use 'name' to fix typos from signup (e.g., rename a placeholder " +
+                        "like 'My Organization' to your real org name). Scope is bounded to the " +
+                        "authenticated caller's org; the org id is derived from the auth context, " +
+                        "never accepted as a parameter.",
+                    workflows: "infrastructure",
+                    inputSchema: {
+                        type: "object",
+                        properties: ORG_PROFILE_WRITE_PROPERTIES,
+                    },
+                    annotations: {
+                        idempotentHint: true,
+                    },
+                },
+                executor: this.updateOrganisationProfile.bind(this),
+            },
+            {
+                definition: {
+                    name: "pica_export_my_data",
+                    description: "Request a GDPR Article 15 / 20 data export. Queues a background " +
+                        "job and returns a job_id immediately; a signed download link is " +
+                        "emailed to your PICA account address when the export completes. " +
+                        "Format is JSON by default (v1). Subject is always the " +
+                        "authenticated user; no user_id parameter accepted.",
+                    workflows: "infrastructure",
+                    inputSchema: {
+                        type: "object",
+                        properties: {},
+                    },
+                    annotations: {
+                        idempotentHint: false,
+                    },
+                },
+                executor: this.exportMyData.bind(this),
+            },
+        ];
+    }
+    async storageStatus(_args) {
+        const result = await this.pica.settings.storageConfig();
+        const config = result?.data || result;
+        // ADR-217 — surface the enhanced shape to the agent. Never include
+        // credentials. The GET endpoint already masks secret fields and only
+        // returns the un-masked region; we read just the structured non-secret
+        // fields so a future credential leak in `config.credentials` cannot
+        // accidentally appear in tool output.
+        const provider = config?.provider || "pica_s3";
+        const isByoc = typeof config?.is_byoc === "boolean"
+            ? config.is_byoc
+            : provider !== "pica_s3";
+        const lastTestStatus = config?.last_test_status ?? "untested";
+        const lastTestedAt = config?.last_tested_at ?? null;
+        const lastTestError = config?.last_test_error ?? null;
+        const region = config?.region ?? null;
+        const buckets = config?.buckets || { audio: "", media: "", documents: "" };
+        const summary = isByoc
+            ? `Storage provider: ${provider} (your own bucket). Last test: ${lastTestStatus}` +
+                (lastTestStatus === "failed" && lastTestError
+                    ? ` — ${lastTestError}`
+                    : "")
+            : `Storage provider: pica_s3 (PICA default — always available).`;
+        return formatSuccess(summary, {
+            provider,
+            is_byoc: isByoc,
+            buckets: {
+                audio: buckets.audio || "",
+                media: buckets.media || "",
+                documents: buckets.documents || "",
+            },
+            region,
+            last_tested_at: lastTestedAt,
+            last_test_status: lastTestStatus,
+            last_test_error: lastTestError,
+        });
+    }
+    async orgProfile(_args) {
+        const result = await this.pica.settings.orgProfile();
+        const org = result?.data || result;
+        return formatSuccess(`Organisation: ${org?.display_name || "unnamed"}`, org);
+    }
+    async userProfile(_args) {
+        const result = await this.pica.settings.userProfile();
+        const profile = result?.data || result;
+        return formatSuccess(`User: ${profile?.full_name || profile?.email || "unknown"}`, profile);
+    }
+    async updatePrivacySettings(args) {
+        // Only forward the two flags we expose — silently drops any other
+        // key the agent might pass so we don't accidentally PATCH
+        // unrelated profile fields through this tool.
+        const payload = {};
+        if (typeof args.receive_news_announcements === "boolean") {
+            payload.receive_news_announcements = args.receive_news_announcements;
+        }
+        if (typeof args.receive_monthly_digest === "boolean") {
+            payload.receive_monthly_digest = args.receive_monthly_digest;
+        }
+        if (Object.keys(payload).length === 0) {
+            return formatAsText("No change — pass receive_news_announcements and/or receive_monthly_digest.");
+        }
+        const result = await this.pica.settings.updatePrivacySettings(payload);
+        const updated = result?.data || result;
+        const flags = [
+            `receive_news_announcements: ${updated?.receive_news_announcements ?? "unchanged"}`,
+            `receive_monthly_digest: ${updated?.receive_monthly_digest ?? "unchanged"}`,
+        ].join(", ");
+        return formatSuccess(`Privacy settings updated — ${flags}`, updated);
+    }
+    async getPrivacySettings(_args) {
+        const result = await this.pica.settings.getPrivacySettings();
+        const profile = result?.data || result;
+        // Only surface the flags the paired update tool writes. Keeps the
+        // get/update pair symmetric and prevents this tool from leaking
+        // unrelated profile fields (full_name, role, bio, etc.) to the agent.
+        const flags = {
+            receive_news_announcements: profile?.receive_news_announcements ?? null,
+            receive_monthly_digest: profile?.receive_monthly_digest ?? null,
+        };
+        const summary = [
+            `receive_news_announcements: ${flags.receive_news_announcements ?? "unset"}`,
+            `receive_monthly_digest: ${flags.receive_monthly_digest ?? "unset"}`,
+        ].join(", ");
+        return formatSuccess(`Privacy settings — ${summary}`, flags);
+    }
+    async deleteMyAccount(args) {
+        // Defensively reject any caller-supplied user_id. ADR-184 rule 2 —
+        // the subject is always the authenticated user; accepting a user_id
+        // is a prompt-injection vector. The schema doesn't advertise it, but
+        // agents sometimes send speculative keys; ignore anything other than
+        // the documented `reason`.
+        const payload = {};
+        if (typeof args.reason === "string" && args.reason.trim()) {
+            payload.reason = args.reason.trim();
+        }
+        const result = await this.pica.gdpr.deleteMyAccount(payload);
+        const data = result?.data || result;
+        return formatSuccess(`Account deletion requested. 30-day reversal window begins now. ` +
+            `A pre-deletion data export will be prepared automatically.`, data);
+    }
+    async exportMyData(_args) {
+        const result = await this.pica.gdpr.exportMyData();
+        const data = result?.data || result;
+        return formatSuccess(`Data export queued (job_id: ${data?.job_id ?? "unknown"}). ` +
+            `A signed download link will be emailed to your PICA account address ` +
+            `when the job completes.`, data);
+    }
+    async updateMyIdentity(args) {
+        // ADR-184 rule 2 — silently drop any caller-supplied user_id. Only
+        // forward the documented identity fields so a speculative agent key
+        // can't leak data through this tool.
+        const payload = {};
+        for (const key of Object.keys(MY_IDENTITY_WRITE_PROPERTIES)) {
+            const value = args[key];
+            if (value === undefined)
+                continue;
+            if (value === null || typeof value === "string") {
+                payload[key] = value;
+            }
+        }
+        if (Object.keys(payload).length === 0) {
+            return formatAsText("No change — pass at least one of: full_name, stage_name, cae_ipi_number, isni, ipn, pro_name, pro_member_number.");
+        }
+        const result = await this.pica.settings.updateMyIdentity(payload);
+        const data = result?.data || result;
+        const updated = Array.isArray(data?.updated) ? data.updated : [];
+        const disc = data?.discoveries_added || {
+            credits: 0,
+            custody: 0,
+            artists: 0,
+        };
+        const fieldsLine = updated.length > 0
+            ? `Updated: ${updated.join(", ")}.`
+            : "No fields changed.";
+        const discTotal = disc.credits + disc.custody + disc.artists;
+        const discLine = discTotal > 0
+            ? `Found ${disc.credits} new credits, ${disc.custody} ownership claims, ${disc.artists} artist links — call pica_discoveries_query to review.`
+            : "No new discoveries from this update.";
+        return formatSuccess(`${fieldsLine} ${discLine}`, data);
+    }
+    async updateOrganisationProfile(args) {
+        const payload = {};
+        for (const key of Object.keys(ORG_PROFILE_WRITE_PROPERTIES)) {
+            const value = args[key];
+            if (value === undefined)
+                continue;
+            if (value === null || typeof value === "string") {
+                payload[key] = value;
+            }
+        }
+        if (Object.keys(payload).length === 0) {
+            return formatAsText("No change — pass at least one of: org_type, display_name, tagline, ipi_number.");
+        }
+        const result = await this.pica.settings.updateOrganisationProfile(payload);
+        const data = result?.data || result;
+        const updated = Array.isArray(data?.updated) ? data.updated : [];
+        const msg = updated.length > 0
+            ? `Organisation profile updated — ${updated.join(", ")}.`
+            : "No fields changed.";
+        return formatSuccess(msg, data);
+    }
+}
+//# sourceMappingURL=settings.js.map

package/dist/tools/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/tools/settings.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAQ7D,OAAO,EACL,YAAY,EACZ,aAAa,EAEb,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,OAAO,aAAa;IAChB,IAAI,CAAa;IAEzB,YAAY,IAAgB;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,QAAQ;QACN,2EAA2E;QAC3E,+EAA+E;QAC/E,uEAAuE;QACvE,6EAA6E;QAC7E,aAAa;QACb,OAAO;YACL;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE,qBAAqB;oBAC3B,WAAW,EACT,kEAAkE;wBAClE,oEAAoE;wBACpE,oEAAoE;wBACpE,sEAAsE;wBACtE,2DAA2D;wBAC3D,0EAA0E;wBAC1E,4BAA4B;oBAC9B,SAAS,EAAE,gBAAgB;oBAC3B,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE,EAAE;qBACf;oBACD,WAAW,EAAE;wBACX,YAAY,EAAE,IAAI;wBAClB,cAAc,EAAE,IAAI;qBACrB;iBACF;gBACD,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;aACxC;YACD;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE,2BAA2B;oBACjC,WAAW,EACT,gEAAgE;wBAChE,6DAA6D;oBAC/D,SAAS,EAAE,gBAAgB;oBAC3B,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE,EAAE;qBACf;iBACF;gBACD,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;aACrC;YACD;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE,mBAAmB;oBACzB,WAAW,EACT,6DAA6D;wBAC7D,gDAAgD;oBAClD,SAAS,EAAE,gBAAgB;oBAC3B,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE,EAAE;qBACf;iBACF;gBACD,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;aACtC;YACD;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE,8BAA8B;oBACpC,WAAW,EACT,uEAAuE;wBACvE,oEAAoE;wBACpE,oEAAoE;wBACpE,wDAAwD;wBACxD,iEAAiE;wBACjE,YAAY;oBACd,SAAS,EAAE,gBAAgB;oBAC3B,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,0BAA0B,EAAE;gCAC1B,IAAI,EAAE,SAAS;gCACf,WAAW,EACT,0DAA0D;oCAC1D,mDAAmD;oCACnD,8CAA8C;6BACjD;4BACD,sBAAsB,EAAE;gCACtB,IAAI,EAAE,SAAS;gCACf,WAAW,EACT,uDAAuD;oCACvD,6DAA6D;6BAChE;yBACF;qBACF;iBACF;gBACD,QAAQ,EAAE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;aAChD;YACD;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE,2BAA2B;oBACjC,WAAW,EACT,oEAAoE;wBACpE,wDAAwD;wBACxD,iEAAiE;wBACjE,iEAAiE;wBACjE,yDAAyD;oBAC3D,SAAS,EAAE,gBAAgB;oBAC3B,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE,EAAE;qBACf;oBACD,WAAW,EAAE;wBACX,YAAY,EAAE,IAAI;wBAClB,cAAc,EAAE,IAAI;qBACrB;iBACF;gBACD,QAAQ,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;aAC7C;YACD;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE,wBAAwB;oBAC9B,WAAW,EACT,+DAA+D;wBAC/D,+DAA+D;wBAC/D,mEAAmE;wBACnE,iEAAiE;wBACjE,yDAAyD;wBACzD,+DAA+D;wBAC/D,8DAA8D;wBAC9D,YAAY;oBACd,SAAS,EAAE,gBAAgB;oBAC3B,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,yDAAyD;oCACzD,0DAA0D;6BAC7D;yBACF;qBACF;oBACD,WAAW,EAAE;wBACX,eAAe,EAAE,IAAI;wBACrB,cAAc,EAAE,KAAK;qBACtB;iBACF;gBACD,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;aAC1C;YACD;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE,yBAAyB;oBAC/B,WAAW,EACT,uEAAuE;wBACvE,mCAAmC;wBACnC,wEAAwE;wBACxE,wEAAwE;wBACxE,uEAAuE;wBACvE,yDAAyD;wBACzD,iEAAiE;wBACjE,WAAW;oBACb,SAAS,EAAE,gBAAgB;oBAC3B,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE,4BAA4B;qBACzC;oBACD,WAAW,EAAE;wBACX,cAAc,EAAE,IAAI;qBACrB;iBACF;gBACD,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;aAC3C;YACD;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE,kCAAkC;oBACxC,WAAW,EACT,uEAAuE;wBACvE,8EAA8E;wBAC9E,yEAAyE;wBACzE,2EAA2E;wBAC3E,gCAAgC;oBAClC,SAAS,EAAE,gBAAgB;oBAC3B,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE,4BAA4B;qBACzC;oBACD,WAAW,EAAE;wBACX,cAAc,EAAE,IAAI;qBACrB;iBACF;gBACD,QAAQ,EAAE,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;aACpD;YACD;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE,qBAAqB;oBAC3B,WAAW,EACT,kEAAkE;wBAClE,kEAAkE;wBAClE,kEAAkE;wBAClE,wDAAwD;wBACxD,oDAAoD;oBACtD,SAAS,EAAE,gBAAgB;oBAC3B,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE,EAAE;qBACf;oBACD,WAAW,EAAE;wBACX,cAAc,EAAE,KAAK;qBACtB;iBACF;gBACD,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;aACvC;SACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,KAA0B;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC;QACtC,mEAAmE;QACnE,qEAAqE;QACrE,uEAAuE;QACvE,oEAAoE;QACpE,sCAAsC;QACtC,MAAM,QAAQ,GAAI,MAAM,EAAE,QAA+B,IAAI,SAAS,CAAC;QACvE,MAAM,MAAM,GACV,OAAO,MAAM,EAAE,OAAO,KAAK,SAAS;YAClC,CAAC,CAAC,MAAM,CAAC,OAAO;YAChB,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC;QAC7B,MAAM,cAAc,GACjB,MAAM,EAAE,gBAAuC,IAAI,UAAU,CAAC;QACjE,MAAM,YAAY,GACf,MAAM,EAAE,cAA4C,IAAI,IAAI,CAAC;QAChE,MAAM,aAAa,GAChB,MAAM,EAAE,eAA6C,IAAI,IAAI,CAAC;QACjE,MAAM,MAAM,GAAI,MAAM,EAAE,MAAoC,IAAI,IAAI,CAAC;QACrE,MAAM,OAAO,GAAI,MAAM,EAAE,OAEX,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAE1D,MAAM,OAAO,GAAG,MAAM;YACpB,CAAC,CAAC,qBAAqB,QAAQ,kCAAkC,cAAc,EAAE;gBAC/E,CAAC,cAAc,KAAK,QAAQ,IAAI,aAAa;oBAC3C,CAAC,CAAC,MAAM,aAAa,EAAE;oBACvB,CAAC,CAAC,EAAE,CAAC;YACT,CAAC,CAAC,8DAA8D,CAAC;QAEnE,OAAO,aAAa,CAAC,OAAO,EAAE;YAC5B,QAAQ;YACR,OAAO,EAAE,MAAM;YACf,OAAO,EAAE;gBACP,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;gBAC1B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;gBAC1B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;aACnC;YACD,MAAM;YACN,cAAc,EAAE,YAAY;YAC5B,gBAAgB,EAAE,cAAc;YAChC,eAAe,EAAE,aAAa;SAC/B,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,KAA0B;QACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC;QACnC,OAAO,aAAa,CAClB,iBAAiB,GAAG,EAAE,YAAY,IAAI,SAAS,EAAE,EACjD,GAAG,CACJ,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAA0B;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC;QACvC,OAAO,aAAa,CAClB,SAAS,OAAO,EAAE,SAAS,IAAI,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,EAC5D,OAAO,CACR,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,IAAyB;QAEzB,kEAAkE;QAClE,0DAA0D;QAC1D,8CAA8C;QAC9C,MAAM,OAAO,GAGT,EAAE,CAAC;QACP,IAAI,OAAO,IAAI,CAAC,0BAA0B,KAAK,SAAS,EAAE,CAAC;YACzD,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,0BAA0B,CAAC;QACvE,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;YACrD,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,sBAAsB,CAAC;QAC/D,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,YAAY,CACjB,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC;QACvC,MAAM,KAAK,GAAG;YACZ,+BAA+B,OAAO,EAAE,0BAA0B,IAAI,WAAW,EAAE;YACnF,2BAA2B,OAAO,EAAE,sBAAsB,IAAI,WAAW,EAAE;SAC5E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,OAAO,aAAa,CAAC,8BAA8B,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,KAA0B;QAE1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC;QACvC,kEAAkE;QAClE,gEAAgE;QAChE,sEAAsE;QACtE,MAAM,KAAK,GAAG;YACZ,0BAA0B,EAAE,OAAO,EAAE,0BAA0B,IAAI,IAAI;YACvE,sBAAsB,EAAE,OAAO,EAAE,sBAAsB,IAAI,IAAI;SAChE,CAAC;QACF,MAAM,OAAO,GAAG;YACd,+BAA+B,KAAK,CAAC,0BAA0B,IAAI,OAAO,EAAE;YAC5E,2BAA2B,KAAK,CAAC,sBAAsB,IAAI,OAAO,EAAE;SACrE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,OAAO,aAAa,CAAC,sBAAsB,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IAC/D,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,IAAyB;QAEzB,mEAAmE;QACnE,oEAAoE;QACpE,qEAAqE;QACrE,qEAAqE;QACrE,2BAA2B;QAC3B,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1D,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC;QACpC,OAAO,aAAa,CAClB,iEAAiE;YAC/D,4DAA4D,EAC9D,IAAI,CACL,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,KAA0B;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC;QACpC,OAAO,aAAa,CAClB,+BAA+B,IAAI,EAAE,MAAM,IAAI,SAAS,KAAK;YAC3D,sEAAsE;YACtE,yBAAyB,EAC3B,IAAI,CACL,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,IAAyB;QAEzB,mEAAmE;QACnE,oEAAoE;QACpE,qCAAqC;QACrC,MAAM,OAAO,GAQT,EAAE,CAAC;QACP,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YACxB,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC/C,OAAyC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,YAAY,CACjB,kHAAkH,CACnH,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,EAAE,iBAAiB,IAAI;YACtC,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;SACX,CAAC;QAEF,MAAM,UAAU,GACd,OAAO,CAAC,MAAM,GAAG,CAAC;YAChB,CAAC,CAAC,YAAY,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACnC,CAAC,CAAC,oBAAoB,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7D,MAAM,QAAQ,GACZ,SAAS,GAAG,CAAC;YACX,CAAC,CAAC,SAAS,IAAI,CAAC,OAAO,iBAAiB,IAAI,CAAC,OAAO,sBAAsB,IAAI,CAAC,OAAO,wDAAwD;YAC9I,CAAC,CAAC,sCAAsC,CAAC;QAE7C,OAAO,aAAa,CAAC,GAAG,UAAU,IAAI,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,IAAyB;QAEzB,MAAM,OAAO,GAKT,EAAE,CAAC;QACP,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YACxB,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC/C,OAAyC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,YAAY,CACjB,gFAAgF,CACjF,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,GAAG,GACP,OAAO,CAAC,MAAM,GAAG,CAAC;YAChB,CAAC,CAAC,kCAAkC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACzD,CAAC,CAAC,oBAAoB,CAAC;QAC3B,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;CACF"}

package/dist/tools/share-links.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Share Links MCP Tools — ADR-139 Step 3
+ *
+ * "Share my song with Tony" or "Send a link to Mark to upload stems"
+ * — conversational actions that need MCP tools.
+ */
+import { PicaClient } from "@withpica/mcp-sdk";
+import type { ToolDefinition, ToolExecutor } from "./index.js";
+export declare class ShareLinksTools {
+    private pica;
+    constructor(pica: PicaClient);
+    getTools(): Array<{
+        definition: ToolDefinition;
+        executor: ToolExecutor;
+    }>;
+    private listShareLinks;
+    private createShareLink;
+    private inspectShareLink;
+    private updateShareLink;
+    private deleteShareLink;
+}
+//# sourceMappingURL=share-links.d.ts.map

package/dist/tools/share-links.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"share-links.d.ts","sourceRoot":"","sources":["../../src/tools/share-links.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAc,MAAM,YAAY,CAAC;AAS3E,qBAAa,eAAe;IAC1B,OAAO,CAAC,IAAI,CAAa;gBAEb,IAAI,EAAE,UAAU;IAI5B,QAAQ,IAAI,KAAK,CAAC;QAAE,UAAU,EAAE,cAAc,CAAC;QAAC,QAAQ,EAAE,YAAY,CAAA;KAAE,CAAC;YAyH3D,cAAc;YAoBd,eAAe;YAkCf,gBAAgB;YAOhB,eAAe;YAiBf,eAAe;CAM9B"}

package/dist/tools/share-links.js

@@ -0,0 +1,188 @@
+// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+import { formatSuccess, SHARE_LINKS_WRITE_PROPERTIES, SHARE_LINKS_CREATE_REQUIRED, SHARE_LINKS_UPDATE_PROPERTIES, } from "@withpica/mcp-utils";
+export class ShareLinksTools {
+    pica;
+    constructor(pica) {
+        this.pica = pica;
+    }
+    getTools() {
+        return [
+            {
+                definition: {
+                    name: "pica_share_links_list",
+                    description: "List existing share links, optionally filtered by work. " +
+                        "Shows active links with view/download counts and expiry status.",
+                    workflows: "infrastructure",
+                    inputSchema: {
+                        type: "object",
+                        properties: {
+                            work_id: {
+                                type: "string",
+                                description: "Filter share links for a specific work (UUID)",
+                            },
+                        },
+                    },
+                },
+                executor: this.listShareLinks.bind(this),
+            },
+            {
+                definition: {
+                    name: "pica_share_links_create",
+                    description: "Create a share link for a work, playlist, or release. " +
+                        "Supports password protection, view-count limits, expiry, access-type scoping " +
+                        "(allowed_person_ids for known people, sent_to_emails for external recipients), " +
+                        "granular view controls (collaborators, financials, comments), notify-on-access, " +
+                        "and audio watermarking. Returns a URL the recipient can use to access the content.",
+                    workflows: "infrastructure",
+                    inputSchema: {
+                        type: "object",
+                        properties: SHARE_LINKS_WRITE_PROPERTIES,
+                        required: [...SHARE_LINKS_CREATE_REQUIRED],
+                    },
+                },
+                executor: this.createShareLink.bind(this),
+            },
+            {
+                definition: {
+                    name: "pica_share_links_inspect",
+                    description: "Get full details for a single share link by id — name, description, " +
+                        "expiry, view counts, access controls, password-protected flag, and " +
+                        "the linked work's title + primary artist. Use after pica_share_links_list " +
+                        "to drill into a specific link, or after pica_share_links_create to verify.",
+                    workflows: "infrastructure",
+                    inputSchema: {
+                        type: "object",
+                        properties: {
+                            id: {
+                                type: "string",
+                                description: "Share link ID (UUID).",
+                            },
+                        },
+                        required: ["id"],
+                    },
+                    annotations: {
+                        readOnlyHint: true,
+                        idempotentHint: true,
+                    },
+                },
+                executor: this.inspectShareLink.bind(this),
+            },
+            {
+                definition: {
+                    name: "pica_share_links_update",
+                    description: "Update a narrow set of share-link fields — name, description, " +
+                        "personal_message, expires_at, max_views, is_active, password. " +
+                        "Permission-bearing fields (access_type, allow_*, allowed_person_ids, " +
+                        "watermark_audio, sent_to_emails) are NOT updatable post-create — " +
+                        "revoke and recreate to change permissions. Set is_active=false to " +
+                        "deactivate without deleting; set password=null to remove the password.",
+                    workflows: "infrastructure",
+                    inputSchema: {
+                        type: "object",
+                        properties: {
+                            id: {
+                                type: "string",
+                                description: "Share link ID (UUID).",
+                            },
+                            ...SHARE_LINKS_UPDATE_PROPERTIES,
+                        },
+                        required: ["id"],
+                    },
+                    annotations: {
+                        idempotentHint: true,
+                    },
+                },
+                executor: this.updateShareLink.bind(this),
+            },
+            {
+                definition: {
+                    name: "pica_share_links_delete",
+                    description: "Hard-delete a share link by id. The link becomes inaccessible " +
+                        "immediately. To deactivate without losing the audit trail, prefer " +
+                        "pica_share_links_update with is_active=false.",
+                    workflows: "infrastructure",
+                    inputSchema: {
+                        type: "object",
+                        properties: {
+                            id: {
+                                type: "string",
+                                description: "Share link ID (UUID).",
+                            },
+                        },
+                        required: ["id"],
+                    },
+                    annotations: {
+                        destructiveHint: true,
+                        idempotentHint: false,
+                    },
+                },
+                executor: this.deleteShareLink.bind(this),
+            },
+        ];
+    }
+    async listShareLinks(args) {
+        const data = await this.pica.shareLinks.list({
+            work_id: args.work_id,
+        });
+        const links = Array.isArray(data) ? data : [];
+        const hints = [];
+        if (!links.length && args.work_id) {
+            hints.push({
+                gap: "no_share_links",
+                suggestion: "Create a share link for this work (pica_share_links_create)",
+                severity: "nice_to_have",
+            });
+        }
+        return formatSuccess(`Found ${links.length} share link(s)`, links, hints);
+    }
+    async createShareLink(args) {
+        if (!args.work_id && !args.work_ids?.length && !args.release_id) {
+            return formatSuccess("Please provide a work_id, work_ids (array), or release_id to create a share link", null);
+        }
+        // Pass through every property the shared schema advertises. The admin
+        // route's allow-list (lib/services/share-links-write-constants.ts —
+        // ADR-174 Phase 2 item 20 slice 1) rejects anything outside the
+        // contract; column defaults apply when a field is omitted.
+        const payload = {};
+        for (const key of Object.keys(args)) {
+            if (args[key] !== undefined)
+                payload[key] = args[key];
+        }
+        if (payload.allow_download === undefined)
+            payload.allow_download = false;
+        const data = await this.pica.shareLinks.create(payload);
+        const hints = [];
+        if (data?.token) {
+            hints.push({
+                gap: "share_link_created",
+                suggestion: `Share link created — send the URL to the recipient`,
+                severity: "nice_to_have",
+            });
+        }
+        return formatSuccess("Share link created", data, hints);
+    }
+    async inspectShareLink(args) {
+        const data = await this.pica.shareLinks.get(args.id);
+        return formatSuccess("Share link details", data);
+    }
+    async updateShareLink(args) {
+        const { id, ...updates } = args;
+        // Forward only the keys explicitly passed — preserves the route's
+        // "narrow allow-list" semantics (any unknown key 400s with a
+        // helpful redirect message). Empty payload also 400s server-side
+        // so agents get a clear "nothing to update" response instead of a
+        // silent no-op.
+        const payload = {};
+        for (const key of Object.keys(updates)) {
+            if (updates[key] !== undefined)
+                payload[key] = updates[key];
+        }
+        const data = await this.pica.shareLinks.update(id, payload);
+        return formatSuccess("Share link updated", data);
+    }
+    async deleteShareLink(args) {
+        await this.pica.shareLinks.delete(args.id);
+        return formatSuccess(`Share link ${args.id} deleted`);
+    }
+}
+//# sourceMappingURL=share-links.js.map

package/dist/tools/share-links.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"share-links.js","sourceRoot":"","sources":["../../src/tools/share-links.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAW7D,OAAO,EACL,aAAa,EAEb,4BAA4B,EAC5B,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,OAAO,eAAe;IAClB,IAAI,CAAa;IAEzB,YAAY,IAAgB;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,QAAQ;QACN,OAAO;YACL;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE,uBAAuB;oBAC7B,WAAW,EACT,0DAA0D;wBAC1D,iEAAiE;oBACnE,SAAS,EAAE,gBAAgB;oBAC3B,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,OAAO,EAAE;gCACP,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,+CAA+C;6BAC7D;yBACF;qBACF;iBACF;gBACD,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;aACzC;YACD;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE,yBAAyB;oBAC/B,WAAW,EACT,wDAAwD;wBACxD,+EAA+E;wBAC/E,iFAAiF;wBACjF,kFAAkF;wBAClF,oFAAoF;oBACtF,SAAS,EAAE,gBAAgB;oBAC3B,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE,4BAA4B;wBACxC,QAAQ,EAAE,CAAC,GAAG,2BAA2B,CAAC;qBAC3C;iBACF;gBACD,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;aAC1C;YACD;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE,0BAA0B;oBAChC,WAAW,EACT,sEAAsE;wBACtE,qEAAqE;wBACrE,4EAA4E;wBAC5E,4EAA4E;oBAC9E,SAAS,EAAE,gBAAgB;oBAC3B,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,EAAE,EAAE;gCACF,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,uBAAuB;6BACrC;yBACF;wBACD,QAAQ,EAAE,CAAC,IAAI,CAAC;qBACjB;oBACD,WAAW,EAAE;wBACX,YAAY,EAAE,IAAI;wBAClB,cAAc,EAAE,IAAI;qBACrB;iBACF;gBACD,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;aAC3C;YACD;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE,yBAAyB;oBAC/B,WAAW,EACT,gEAAgE;wBAChE,gEAAgE;wBAChE,uEAAuE;wBACvE,mEAAmE;wBACnE,oEAAoE;wBACpE,wEAAwE;oBAC1E,SAAS,EAAE,gBAAgB;oBAC3B,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,EAAE,EAAE;gCACF,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,uBAAuB;6BACrC;4BACD,GAAG,6BAA6B;yBACjC;wBACD,QAAQ,EAAE,CAAC,IAAI,CAAC;qBACjB;oBACD,WAAW,EAAE;wBACX,cAAc,EAAE,IAAI;qBACrB;iBACF;gBACD,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;aAC1C;YACD;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE,yBAAyB;oBAC/B,WAAW,EACT,gEAAgE;wBAChE,oEAAoE;wBACpE,+CAA+C;oBACjD,SAAS,EAAE,gBAAgB;oBAC3B,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,EAAE,EAAE;gCACF,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,uBAAuB;6BACrC;yBACF;wBACD,QAAQ,EAAE,CAAC,IAAI,CAAC;qBACjB;oBACD,WAAW,EAAE;wBACX,eAAe,EAAE,IAAI;wBACrB,cAAc,EAAE,KAAK;qBACtB;iBACF;gBACD,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;aAC1C;SACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAAyB;QACpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAE9C,MAAM,KAAK,GAAqB,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC;gBACT,GAAG,EAAE,gBAAgB;gBACrB,UAAU,EACR,6DAA6D;gBAC/D,QAAQ,EAAE,cAAc;aACzB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,aAAa,CAAC,SAAS,KAAK,CAAC,MAAM,gBAAgB,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5E,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,IAAyB;QAEzB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChE,OAAO,aAAa,CAClB,kFAAkF,EAClF,IAAI,CACL,CAAC;QACJ,CAAC;QAED,sEAAsE;QACtE,oEAAoE;QACpE,gEAAgE;QAChE,2DAA2D;QAC3D,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,GAAG,KAAK,CAAC;QAEzE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAExD,MAAM,KAAK,GAAqB,EAAE,CAAC;QACnC,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC;gBACT,GAAG,EAAE,oBAAoB;gBACzB,UAAU,EAAE,oDAAoD;gBAChE,QAAQ,EAAE,cAAc;aACzB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,aAAa,CAAC,oBAAoB,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,IAAyB;QAEzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrD,OAAO,aAAa,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,IAAyB;QAEzB,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC;QAChC,kEAAkE;QAClE,6DAA6D;QAC7D,iEAAiE;QACjE,kEAAkE;QAClE,gBAAgB;QAChB,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC5D,OAAO,aAAa,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,IAAyB;QAEzB,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,OAAO,aAAa,CAAC,cAAc,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC;CACF"}

package/dist/tools/signup.d.ts

@@ -0,0 +1,26 @@
+import { ToolDefinition, ToolExecutor } from "./index.js";
+export type SignupTransport = "stdio" | "http";
+export interface SignupToolsConfig {
+    /** Base PICA API URL (e.g. `https://withpica.com/api`). Trailing slash tolerated. */
+    apiUrl: string;
+    /** Stamped into the JWT body so the page knows which credential issuance branch to take. */
+    transport: SignupTransport;
+    /**
+     * HTTP only — DCR client identifier from the OAuth discovery context
+     * so the connector flow can be resumed after onboarding completes.
+     * MUST be null for stdio (the route enforces this server-side too).
+     */
+    clientId?: string | null;
+}
+export declare class SignupTools {
+    private readonly apiUrl;
+    private readonly transport;
+    private readonly clientId;
+    constructor(config: SignupToolsConfig);
+    getTools(): Array<{
+        definition: ToolDefinition;
+        executor: ToolExecutor;
+    }>;
+    private signupStart;
+}
+//# sourceMappingURL=signup.d.ts.map

package/dist/tools/signup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signup.d.ts","sourceRoot":"","sources":["../../src/tools/signup.ts"],"names":[],"mappings":"AA+BA,OAAO,EACL,cAAc,EACd,YAAY,EAGb,MAAM,YAAY,CAAC;AAGpB,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,CAAC;AAE/C,MAAM,WAAW,iBAAiB;IAChC,qFAAqF;IACrF,MAAM,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,SAAS,EAAE,eAAe,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAWD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgB;gBAE7B,MAAM,EAAE,iBAAiB;IAoBrC,QAAQ,IAAI,KAAK,CAAC;QAAE,UAAU,EAAE,cAAc,CAAC;QAAC,QAAQ,EAAE,YAAY,CAAA;KAAE,CAAC;YAmD3D,WAAW;CAuL1B"}