@withpica/mcp-server 2.33.0 → 2.39.0

package/dist/tools/signup.js

@@ -0,0 +1,265 @@
+// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+/**
+ * Signup Tools — `pica_signup_start` (ADR-211 Phase 1).
+ *
+ * The single MCP-discoverable signup verb. Available unauthenticated on
+ * BOTH transports (stdio binary's lobby + HTTP `/api/mcp` anonymous mode)
+ * per ADR-211 § Primitive A (amended 2026-04-30 to expose alongside
+ * `pica_sign_in` / `pica_sign_out` rather than replace them in Phase 1).
+ *
+ * Mints nothing locally — every invocation calls the public backend
+ * endpoint `POST /api/public/onboarding/signup-start`. The signing secret
+ * (`ONBOARDING_TOKEN_SECRET`) lives only on the backend; customer-
+ * distributed `npx @withpica/mcp-server` binaries can never see it. Same
+ * pattern that `pica_sign_in` (auth.ts) uses to call the public
+ * `/api/public/mcp-auth/authorize` magic-link endpoint.
+ *
+ * Returns the JWT-bound URL via:
+ *   - `resource_link` (universal floor — every MCP client can render this)
+ *   - capability-gated `elicitation/create url` (mode: "url"; for clients
+ *     advertising `capabilities.elicitation.url`, server-issued consent
+ *     prompt to open the link in-line). See ADR-200 + `pica_upload`.
+ *
+ * Construction takes the API base URL + transport + optional DCR
+ * client_id. The stdio binary stamps `transport: "stdio"`; the HTTP
+ * carve-out in `app/api/mcp/route.ts` stamps `transport: "http"` and
+ * passes `client_id` from the OAuth-protected-resource discovery context
+ * when one is present.
+ */
+import { randomUUID } from "node:crypto";
+import { clientSupportsUrlElicitation } from "@withpica/mcp-utils";
+const EMAIL_REGEX = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+export class SignupTools {
+    apiUrl;
+    transport;
+    clientId;
+    constructor(config) {
+        if (!config.apiUrl) {
+            throw new Error("SignupTools requires apiUrl");
+        }
+        if (config.transport !== "stdio" && config.transport !== "http") {
+            throw new Error(`SignupTools.transport must be "stdio" or "http" (got: ${config.transport})`);
+        }
+        if (config.transport === "stdio" && config.clientId) {
+            // stdio has no DCR client identifier. Constructor enforces the
+            // invariant locally so the public endpoint never sees a confused
+            // pairing in the first place.
+            throw new Error("clientId must be null for stdio transport");
+        }
+        this.apiUrl = config.apiUrl.replace(/\/+$/, "");
+        this.transport = config.transport;
+        this.clientId = config.clientId ?? null;
+    }
+    getTools() {
+        return [
+            {
+                definition: {
+                    name: "pica_signup_start",
+                    description: "Sign up for withPICA from inside the agent, without leaving the chat. " +
+                        "Use this when the user wants to create a new withPICA account / catalog " +
+                        "and you're talking to them through an unauthenticated MCP connection " +
+                        "(stdio without an API key, or HTTP without a Bearer token). The tool " +
+                        "mints a single-use signup link valid for 15 minutes — surface the URL " +
+                        "to the user as a clickable resource_link. The link opens a page that " +
+                        "verifies their email by magic-link, creates their organisation, starts " +
+                        "the 14-day free trial, and (for stdio) shows a connection key to paste " +
+                        "into Claude Desktop's MCP config or (for HTTP) resumes the OAuth flow. " +
+                        "ADR-211 Phase 1. For existing users, prefer pica_sign_in.",
+                    inputSchema: {
+                        type: "object",
+                        properties: {
+                            email: {
+                                type: "string",
+                                description: "The user's email address. The signup link is sent to this " +
+                                    "inbox; the user clicks it to verify ownership before any " +
+                                    "account is created. Required.",
+                            },
+                            org_name: {
+                                type: "string",
+                                description: "Optional human name for the user's catalog/organisation. " +
+                                    "Defaults to '<email-localpart>'s catalog' if omitted. " +
+                                    "Editable later in settings.",
+                            },
+                            purpose: {
+                                type: "string",
+                                description: "Optional free-text — what the user is trying to do with " +
+                                    "PICA, captured for product analytics (e.g. 'managing my " +
+                                    "first album credits', 'exporting royalty statements'). " +
+                                    "Not surfaced to the user.",
+                            },
+                        },
+                        required: ["email"],
+                    },
+                },
+                executor: this.signupStart.bind(this),
+            },
+        ];
+    }
+    async signupStart(args, ctx) {
+        const email = typeof args.email === "string" ? args.email.trim().toLowerCase() : "";
+        if (!email || !EMAIL_REGEX.test(email)) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: "that doesn't look like an email address — please ask the user to confirm and try again.",
+                    },
+                ],
+                isError: true,
+            };
+        }
+        const orgName = typeof args.org_name === "string" && args.org_name.trim().length > 0
+            ? args.org_name.trim()
+            : undefined;
+        const purpose = typeof args.purpose === "string" && args.purpose.trim().length > 0
+            ? args.purpose.trim()
+            : undefined;
+        // The public endpoint is unauthenticated — same fetch shape as
+        // pica_sign_in's call to /api/public/mcp-auth/authorize.
+        const endpoint = `${this.apiUrl}/public/onboarding/signup-start`;
+        let response;
+        try {
+            response = await fetch(endpoint, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({
+                    email,
+                    ...(orgName ? { org_name: orgName } : {}),
+                    ...(purpose ? { purpose } : {}),
+                    transport: this.transport,
+                    ...(this.clientId ? { client_id: this.clientId } : {}),
+                }),
+            });
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "network error";
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `couldn't reach withPICA to mint your signup link (${message}). check your internet connection and try again.`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        if (response.status === 429) {
+            const retryAfter = response.headers.get("Retry-After") ?? "a few minutes";
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `too many signup attempts — please wait ${retryAfter} seconds before trying again. if the user just requested a link, ask them to check their inbox first.`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        if (!response.ok) {
+            let detail = "unknown error";
+            try {
+                const body = (await response.json());
+                if (typeof body.error === "string")
+                    detail = body.error;
+            }
+            catch {
+                // body wasn't JSON — fall back to status text
+                detail = response.statusText || detail;
+            }
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `couldn't mint your signup link: ${detail}. please try again or report this if it keeps happening.`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        let body;
+        try {
+            body = (await response.json());
+        }
+        catch {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: "the signup endpoint returned a malformed response. please try again.",
+                    },
+                ],
+                isError: true,
+            };
+        }
+        if (!body.url || !body.expires_at) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: "the signup endpoint returned an incomplete response. please try again.",
+                    },
+                ],
+                isError: true,
+            };
+        }
+        const url = body.url;
+        const expiresAt = body.expires_at;
+        const textSummary = `signup link minted for ${email}. surface this URL to the user — they should click it to verify ownership of the email, ` +
+            `pick an organisation name, and start their 14-day trial. the link expires at ${expiresAt} (15 minutes from now). ` +
+            (this.transport === "stdio"
+                ? "after they finish signup the page will show a connection key to paste into Claude Desktop's MCP config; they'll then need to reconnect the PICA MCP server."
+                : "after they finish signup the OAuth flow resumes automatically.");
+        const resourceLink = {
+            type: "resource_link",
+            uri: url,
+            name: "Sign up for withPICA",
+            description: "Open this link to verify your email, create your catalog, and start a 14-day trial.",
+            mimeType: "text/html",
+        };
+        const baseContent = [
+            {
+                type: "text",
+                text: JSON.stringify({
+                    text_summary: textSummary,
+                    signup_url: url,
+                    expires_at: expiresAt,
+                    surface: body.surface ?? "onboarding",
+                }),
+            },
+            resourceLink,
+        ];
+        // Capability-gated `elicitation/create url` — clients advertising
+        // `capabilities.elicitation.url` get a server-issued consent prompt
+        // to open the link in-line. Without the gate, calling elicitInput
+        // against a non-supporter throws synchronously per
+        // `feedback_mcp_sdk_capability_gates_elicitation.md`.
+        if (clientSupportsUrlElicitation(ctx?.server)) {
+            try {
+                await ctx.server.elicitInput({
+                    mode: "url",
+                    url,
+                    elicitationId: `pica-signup-${randomUUID()}`,
+                    message: `Open this URL to finish signing up for withPICA. Expires at ${expiresAt}.`,
+                }, { timeout: 60_000 });
+            }
+            catch {
+                // user declined / cancelled / timed out — `resource_link` remains
+                // usable so we degrade silently rather than fail the tool.
+            }
+        }
+        return {
+            content: baseContent,
+            structuredContent: {
+                kind: "pica.card.signup_start",
+                version: 1,
+                data: {
+                    signup_url: url,
+                    expires_at: expiresAt,
+                    email,
+                    transport: this.transport,
+                },
+            },
+        };
+    }
+}
+//# sourceMappingURL=signup.js.map

package/dist/tools/signup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signup.js","sourceRoot":"","sources":["../../src/tools/signup.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAE7D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AAwBnE,MAAM,WAAW,GAAG,4BAA4B,CAAC;AAEjD,MAAM,OAAO,WAAW;IACL,MAAM,CAAS;IACf,SAAS,CAAkB;IAC3B,QAAQ,CAAgB;IAEzC,YAAY,MAAyB;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CACb,yDAAyD,MAAM,CAAC,SAAS,GAAG,CAC7E,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpD,+DAA+D;YAC/D,iEAAiE;YACjE,8BAA8B;YAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED,QAAQ;QACN,OAAO;YACL;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE,mBAAmB;oBACzB,WAAW,EACT,wEAAwE;wBACxE,0EAA0E;wBAC1E,uEAAuE;wBACvE,uEAAuE;wBACvE,wEAAwE;wBACxE,uEAAuE;wBACvE,yEAAyE;wBACzE,yEAAyE;wBACzE,yEAAyE;wBACzE,2DAA2D;oBAC7D,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,4DAA4D;oCAC5D,2DAA2D;oCAC3D,+BAA+B;6BAClC;4BACD,QAAQ,EAAE;gCACR,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,2DAA2D;oCAC3D,wDAAwD;oCACxD,6BAA6B;6BAChC;4BACD,OAAO,EAAE;gCACP,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,0DAA0D;oCAC1D,0DAA0D;oCAC1D,yDAAyD;oCACzD,2BAA2B;6BAC9B;yBACF;wBACD,QAAQ,EAAE,CAAC,OAAO,CAAC;qBACpB;iBACF;gBACD,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;aACtC;SACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,IAA6B,EAC7B,GAAyB;QAEzB,MAAM,KAAK,GACT,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,yFAAyF;qBAChG;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAClE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;YACtB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAChE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YACrB,CAAC,CAAC,SAAS,CAAC;QAEhB,+DAA+D;QAC/D,yDAAyD;QACzD,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,MAAM,iCAAiC,CAAC;QACjE,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;gBAC/B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK;oBACL,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACvD,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACrE,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,qDAAqD,OAAO,kDAAkD;qBACrH;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,eAAe,CAAC;YAC1E,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,0CAA0C,UAAU,uGAAuG;qBAClK;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,MAAM,GAAG,eAAe,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;gBAC5D,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;oBAAE,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;gBAC9C,MAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,MAAM,CAAC;YACzC,CAAC;YACD,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,mCAAmC,MAAM,0DAA0D;qBAC1G;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,IAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,sEAAsE;qBAC7E;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,wEAAwE;qBAC/E;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,MAAM,WAAW,GACf,0BAA0B,KAAK,0FAA0F;YACzH,gFAAgF,SAAS,0BAA0B;YACnH,CAAC,IAAI,CAAC,SAAS,KAAK,OAAO;gBACzB,CAAC,CAAC,6JAA6J;gBAC/J,CAAC,CAAC,gEAAgE,CAAC,CAAC;QAExE,MAAM,YAAY,GAAG;YACnB,IAAI,EAAE,eAAwB;YAC9B,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,sBAAsB;YAC5B,WAAW,EACT,qFAAqF;YACvF,QAAQ,EAAE,WAAW;SACtB,CAAC;QAEF,MAAM,WAAW,GAAG;YAClB;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,YAAY,EAAE,WAAW;oBACzB,UAAU,EAAE,GAAG;oBACf,UAAU,EAAE,SAAS;oBACrB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,YAAY;iBACtC,CAAC;aACH;YACD,YAAY;SACb,CAAC;QAEF,kEAAkE;QAClE,oEAAoE;QACpE,kEAAkE;QAClE,mDAAmD;QACnD,sDAAsD;QACtD,IAAI,4BAA4B,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,GAAI,CAAC,MAAO,CAAC,WAAW,CAC5B;oBACE,IAAI,EAAE,KAAc;oBACpB,GAAG;oBACH,aAAa,EAAE,eAAe,UAAU,EAAE,EAAE;oBAC5C,OAAO,EAAE,+DAA+D,SAAS,GAAG;iBACrF,EACD,EAAE,OAAO,EAAE,MAAM,EAAE,CACpB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;gBAClE,2DAA2D;YAC7D,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,WAAW;YACpB,iBAAiB,EAAE;gBACjB,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,CAAC;gBACV,IAAI,EAAE;oBACJ,UAAU,EAAE,GAAG;oBACf,UAAU,EAAE,SAAS;oBACrB,KAAK;oBACL,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B;aACF;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/tools/subscription.d.ts

@@ -0,0 +1,60 @@
+import { PicaClient, type BillingTier, type SubscriptionStatusResponse } from "@withpica/mcp-sdk";
+import { ToolDefinition, ToolExecutor } from "./index.js";
+interface SubscriptionStatusFlat {
+    billing_state: "trial" | "active" | "hibernated";
+    trial_days_remaining: number | null;
+    trial_ends_at: string | null;
+    current_tier: BillingTier | null;
+    capacity_used: number;
+    capacity_limit: number | null;
+    capacity_pct: number;
+    recommended_tier: BillingTier | null;
+    summary: string;
+}
+/**
+ * Compose the flat 9-field response from the existing GET admin route's
+ * shape. Mirrors `getOrgBillingSlice`'s "no meaningful cap" rule for
+ * `capacity_pct` (0 whenever current_tier is null OR enterprise) and
+ * carries through `overflow.recommendedTier` (already
+ * `inferTierFromCount`-derived) per Stage 1 Q2.
+ *
+ * Exported for unit tests.
+ */
+export declare function flattenStatus(status: SubscriptionStatusResponse): SubscriptionStatusFlat;
+/**
+ * Server-side template per Stage 1 Q1 option A. Predictable wording,
+ * less variance across connectors. Phase 2.5 may add agent
+ * paraphrasing if telemetry shows demand.
+ *
+ * Exported for unit tests.
+ */
+export declare function composeSummary(fields: {
+    billing_state: "trial" | "active" | "hibernated";
+    trial_days_remaining: number | null;
+    current_tier: BillingTier | null;
+    capacity_used: number;
+    capacity_limit: number | null;
+    recommended_tier: BillingTier | null;
+}): string;
+export declare class SubscriptionTools {
+    private pica;
+    constructor(pica: PicaClient);
+    getTools(): Array<{
+        definition: ToolDefinition;
+        executor: ToolExecutor;
+    }>;
+    private status;
+    private manage;
+    /**
+     * Universal-floor return per ADR-200 Phase 1: every successful manage
+     * response carries a `resource_link` so any compliant MCP client can
+     * render or open the URL. Clients that advertise
+     * `capabilities.elicitation.url` additionally receive a server-issued
+     * elicitation/create request — the gate is mandatory because
+     * `elicitInput` with `mode: "url"` throws synchronously against
+     * non-supporters (`feedback_mcp_sdk_capability_gates_elicitation.md`).
+     */
+    private buildLinkResult;
+}
+export {};
+//# sourceMappingURL=subscription.d.ts.map

package/dist/tools/subscription.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscription.d.ts","sourceRoot":"","sources":["../../src/tools/subscription.ts"],"names":[],"mappings":"AA8BA,OAAO,EACL,UAAU,EACV,KAAK,WAAW,EAChB,KAAK,0BAA0B,EAChC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,cAAc,EACd,YAAY,EAGb,MAAM,YAAY,CAAC;AAoBpB,UAAU,sBAAsB;IAC9B,aAAa,EAAE,OAAO,GAAG,QAAQ,GAAG,YAAY,CAAC;IACjD,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,WAAW,GAAG,IAAI,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,0BAA0B,GACjC,sBAAsB,CA+CxB;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE;IACrC,aAAa,EAAE,OAAO,GAAG,QAAQ,GAAG,YAAY,CAAC;IACjD,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,YAAY,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,WAAW,GAAG,IAAI,CAAC;CACtC,GAAG,MAAM,CA6CT;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,IAAI,CAAa;gBAEb,IAAI,EAAE,UAAU;IAI5B,QAAQ,IAAI,KAAK,CAAC;QAAE,UAAU,EAAE,cAAc,CAAC;QAAC,QAAQ,EAAE,YAAY,CAAA;KAAE,CAAC;YAmF3D,MAAM;YAkCN,MAAM;IA4JpB;;;;;;;;OAQG;YACW,eAAe;CA2D9B"}