create-ailk 0.24.0 → 0.25.1

package/templates/apps/mcp/src/tools/purchase.ts

@@ -1,205 +0,0 @@
-/**
- * AGENT TOOL — purchase (`start_purchase`)
- *
- * Starts a purchase for a named offering and returns a **Stripe-hosted
- * Checkout URL**. Nothing is charged here: the tool builds the payload the
- * HTTP twin `POST /v1/checkout/sessions` validates, and the buyer completes
- * payment on Stripe's own page. That hosted handoff is the money boundary
- * `.claude/rules/vocabulary.md` § Commerce requires — no card data reaches
- * us, and we are not a Stripe Connect platform.
- *
- * VISIBILITY — the commerce add-on claim (#5971, superseding S15a/#610).
- * This tool carries `addon: "commerce"` in the catalog, and since #5971 that
- * marker is its visibility gate: it reaches neither the discovery manifest
- * nor the running server's tool list unless the deployment positively holds
- * the `commerce` licence claim. Two gates enforce that, deliberately:
- *
- *   1. REGISTRATION — `shouldRegister()` in `../server.js` drops the entry.
- *   2. CALL TIME — the first statement below re-reads the claim.
- *
- * Gate 2 is not redundant. The HTTP transport's stateless mode builds a fresh
- * `McpServer` per request, so the gate must be re-read rather than captured;
- * `ailkPurchase` is an exported function a scaffold or a test can call
- * directly, bypassing registration entirely; and it gives "calling it by name
- * on a keyless site" a deterministic, asserted body rather than whatever the
- * SDK emits for an unregistered name. That body is `notFoundError("Not
- * found")` — the MCP twin of the checkout route's own
- * `commerceDisabledResponse()`, same code, same message, no hint that a
- * licence exists.
- *
- * REDIRECTS — never caller-supplied on this surface (#6001). An anonymous
- * caller has no way to prove it controls a redirect target, so
- * `successUrl` / `cancelUrl` are ALWAYS derived from `AILK_BASE_URL` below,
- * never accepted from the input, and `allowPromotionCodes` is never accepted
- * either. This function's own gate is `purchaseMcpInputSchema` — a
- * `.strict()` `.pick()` of the shared `purchaseInputSchema` exposing exactly
- * `productCode` + `quantity` — so a DIRECT call to `ailkPurchase` (the
- * surface this file's own tests exercise, per the note above) carrying any
- * of the three fails validation outright. A call through the registered SDK
- * transport has them stripped one layer earlier, by the SDK's own arg parse
- * against the registered shape, before this function ever runs — they are
- * simply not part of that shape. Either path is safe: the payload built
- * below can never carry a caller-supplied redirect. The shared
- * `purchaseInputSchema` (and the Server Action / API route that use it) is
- * unaffected: both keep accepting a caller-supplied redirect. The route's own
- * anonymous exposure is gated only when `OSS_API_INTERNAL_SECRET` is set
- * (`passesInternalAuthGate()` in `apps/api/src/routes/checkout/sessions.ts`);
- * unset — the OSS standalone default — the route accepts anonymous callers.
- *
- * The file stays in the BASE tree and is never added to
- * `MODULE_SLICES.commerce.ownedFiles`: `../server.js` statically imports
- * `ailkPurchase`, so a slice that deleted it from a keyless scaffold would
- * produce `ERR_MODULE_NOT_FOUND` inside the server bootstrap. A keyless
- * scaffold carries the file and registers nothing — exactly how it already
- * carries `apps/api/src/routes/checkout/sessions.ts`.
- *
- * Schemas live in `@working-theory/validation` per ADR 0013. Network calls go
- * through `@working-theory/api-client` per the architecture invariants (apps
- * may not import each other; the shared HTTP surface lives in packages/).
- *
- * THE KEY — the full Offerings lookup_key (#8935). `productCode` is a price's
- * full lookup_key (contract §3.7), the `lookupKey` `get_pricing` and
- * `get_offerings` return. After the claim and the strict schema, the one
- * §3.7 parser, `parseLookupKey`, refuses an ungrammatical key before any HTTP
- * call, with the same not-found body every route 404 maps to (A3, A5). The
- * workspace stays the server's (A1): the api-client attaches the
- * deployment's own spoke key, and the route alone decides whether the key is
- * shown and org-enabled. A spoke whose Organization has no Stripe connection
- * gets the route's same 404, never a session on the hub's own env key, so
- * this tool refuses it as the web buy route does (#9126).
- *
- * Spec: `docs/specs/5971-start-purchase-hosted-checkout-spec.md`,
- * `docs/specs/8935-start-purchase-sells-a-named-spec.md`.
- */
-
-import { checkout } from "@working-theory/api-client";
-import {
-  parseLookupKey,
-  purchaseMcpInputSchema,
-  type PurchaseMcpInput,
-  type PurchaseOutput,
-} from "@working-theory/validation";
-
-import { mcpCommerceClaim } from "../lib/commerce-claim.js";
-import {
-  notFoundError,
-  validationError,
-  type ErrorBody,
-} from "../lib/errors.js";
-
-/**
- * The module-disabled body. Identical to what a build without commerce
- * produces and to the checkout route's own `commerceDisabledResponse()` —
- * it must not leak that a licence gate is what answered.
- */
-function commerceDisabledBody(): ErrorBody {
-  return notFoundError("Not found");
-}
-
-/**
- * The one not-found body for an offering (#8935 D2, A5): an ungrammatical key
- * refused before the call and every route 404 answer this same value, and
- * neither echoes the caller's key.
- */
-function offeringNotFoundBody(): ErrorBody {
-  return notFoundError("No offering matches that product code.");
-}
-
-/**
- * Export name `ailkPurchase` satisfies the parity-test naming convention
- * (ailk<PascalVerb>) so the harness can discover it.
- *
- * Paired with `purchaseAction` Server Action in
- * apps/web/app/[locale]/dev/purchase/.
- *
- * Returns a typed error BODY rather than throwing on every failure an agent
- * can act on (FR-2) — MCP tools surface errors as their result body, the
- * pattern `lib/errors.ts`'s error bodies establish.
- */
-export async function ailkPurchase(
-  input: PurchaseMcpInput,
-): Promise<PurchaseOutput | ErrorBody> {
-  // Gate 2 — call time. Before validation, before any side effect.
-  if (mcpCommerceClaim() !== "claimed") {
-    return commerceDisabledBody();
-  }
-
-  // Validate input before any side effect (security requirement). Strict
-  // (#6001): a DIRECT call carrying successUrl, cancelUrl or
-  // allowPromotionCodes fails here — this function never accepts a
-  // caller-supplied redirect. (A call through the registered SDK transport
-  // never reaches this line with those fields present at all — see the
-  // REDIRECTS note above.) Every field this schema DOES accept mirrors the
-  // route's own validation (spec D5), so an input this accepts is an input
-  // the route accepts.
-  const parsed = purchaseMcpInputSchema.safeParse(input);
-  if (!parsed.success) {
-    return validationError("Invalid start_purchase input", {
-      issues: parsed.error.issues.map((issue) => ({
-        path: issue.path as (string | number)[],
-        message: issue.message,
-      })),
-    });
-  }
-
-  const baseUrl =
-    process.env.AILK_BASE_URL ||
-    process.env.NEXT_PUBLIC_BASE_URL ||
-    "http://localhost:3000";
-
-  const { productCode, quantity } = parsed.data;
-
-  // #8935 D2 — a key outside the §3.7 grammar can never sell, so it is
-  // refused here, before the route spends a rate-limit token on it.
-  if (parseLookupKey(productCode) === null) {
-    return offeringNotFoundBody();
-  }
-
-  // successUrl/cancelUrl are ALWAYS derived from baseUrl (#6001) — never
-  // accepted from the caller. allowPromotionCodes is never forwarded: it is
-  // not part of purchaseMcpInputSchema, so it can never be present here.
-  //
-  // #6084 D1 — `successUrl` carries Stripe's own `{CHECKOUT_SESSION_ID}`
-  // template token, substituted into the redirect at completion time. This
-  // is what lets `/purchase/success` read the session back (D1). `cancelUrl`
-  // deliberately carries NO template: that page reads nothing (D4), and
-  // Stripe's substitution contract is documented for `success_url` only.
-  const result = await checkout.createSession({
-    productCode,
-    ...(quantity !== undefined && { quantity }),
-    successUrl: `${baseUrl}/purchase/success?session_id={CHECKOUT_SESSION_ID}`,
-    cancelUrl: `${baseUrl}/purchase/cancel`,
-  });
-
-  if (!result.ok) {
-    // An unknown offering is the route's 404 `unknown-product-code`, and
-    // `packages/stripe-client` throws it BEFORE `stripe.checkout.sessions
-    // .create` — so no Checkout Session exists (FR-2).
-    if (result.status === 404) {
-      // Deliberately does NOT echo the caller's productCode. The HTTP twin
-      // states and tests that invariant ("Error responses never echo user
-      // input", apps/api/src/routes/checkout/sessions.ts), and parity means
-      // the pair answers alike.
-      return offeringNotFoundBody();
-    }
-    return validationError(
-      `checkout-unavailable: POST /v1/checkout/sessions returned ${result.status}`,
-      { status: result.status },
-    );
-  }
-
-  // Only `url` is surfaced. The route's `sessionId` is deliberately withheld:
-  // an anonymous agent has no use for it and it is the one field that
-  // identifies a specific buyer's session (spec D5).
-  return { url: result.body.url };
-}
-
-// Re-export schemas/types from @working-theory/validation for barrel consumers.
-export {
-  purchaseInputSchema,
-  purchaseMcpInputSchema,
-  purchaseOutputSchema,
-  type PurchaseInput,
-  type PurchaseMcpInput,
-  type PurchaseOutput,
-} from "@working-theory/validation";

package/templates/apps/mcp/src/tools/read_content.ts

@@ -1,81 +0,0 @@
-/**
- * read_content — returns a single page's document: its schema.org JSON-LD at
- * the root, its frontmatter under `page`, and the raw MDX body on request.
- *
- * Pure read: resolves its adapter through `getMcpContentAdapter()` — the one
- * resolver seam (#5805, ADR 0011), MDX by default — and answers through
- * `readContentDocument` (`@working-theory/content-adapters`), over the
- * deployment's `_site.mdx` (`lib/site-config.ts`). A missing page is the MCP
- * not-found body (`lib/errors.ts`), carrying the route's 404 message — never
- * a throw.
- *
- * HTTP twin (#7169): `GET /v1/content/:type/:slug` in `apps/api` parses the
- * same `contentPageParamsSchema` + `contentPageQuerySchema` and answers
- * through the same builder — the tool adopted the API, arguments and results:
- * `body` is served only with `include: "body"`, from ONE `getPageSource`
- * read (#5927). The builder's own capability check replaces the retired
- * MDX-narrowed resolver twin this tool used to call: every adapter the
- * resolver returns carries `getPageSource`, the fail-closed empty one
- * included (#5876 D5).
- *
- * Phase 3 S3: optional `locale` parameter. Validated against `readLocales()`
- * allowlist; invalid or unknown values silently fall back to the project's
- * default locale (AC-i18n-07). The adapter applies its own fallback chain.
- *
- * Input:  { type: SchemaOrgType, slug: string, locale?: string,
- *           include?: "body" } — `type` admits the full SchemaOrgType set
- *         (#6030 D1), mirrored in @working-theory/validation's
- *         MCP_SCHEMA_ORG_TYPES.
- * Output: { ...jsonLd, page, body? } | { error: "not_found", message }
- * Session/scope: none — read-only public content.
- */
-
-import { readContentDocument } from "@working-theory/content-adapters";
-import {
-  contentPageParamsSchema,
-  contentPageQuerySchema,
-  contentPageResultSchema,
-  type ContentPageResult,
-  type ReadContentInput,
-} from "@working-theory/validation";
-
-import {
-  getMcpContentAdapter,
-  mcpContentRoot,
-} from "../lib/content-adapter.js";
-import { notFoundError, type ErrorBody } from "../lib/errors.js";
-import { resolveLocale } from "../lib/resolve-locale.js";
-import { readSiteConfig } from "../lib/site-config.js";
-
-export {
-  contentPageParamsSchema,
-  contentPageQuerySchema,
-  contentPageResultSchema,
-};
-export type { ReadContentInput, ContentPageResult };
-
-/**
- * read_content handler.
- *
- * Accepts an optional `contentRoot` override for testing. When omitted,
- * resolves it through `mcpContentRoot()` (#8070 D3).
- */
-export async function ailkReadContent(
-  input: ReadContentInput,
-  contentRoot?: string,
-): Promise<ContentPageResult | ErrorBody> {
-  const { type, slug } = contentPageParamsSchema.parse(input);
-  const { include } = contentPageQuerySchema.parse(input);
-
-  // Default: the one content-root resolver (#8070 D3).
-  const root = contentRoot ?? mcpContentRoot();
-  const locale = resolveLocale(input.locale);
-  const adapter = getMcpContentAdapter({ contentRoot: root, locale });
-
-  const document = await readContentDocument(
-    adapter,
-    { type, slug, locale, include },
-    readSiteConfig(root),
-  );
-  return document ?? notFoundError("Page not found");
-}

package/templates/apps/mcp/src/tools/request_callback.ts

@@ -1,52 +0,0 @@
-/**
- * request_callback — request a callback: the body `POST /v1/leads/callback`
- * takes.
- *
- * The tool adopted the API, arguments and results (#7173 — the operator's
- * decision of 2026-10-19). Its input IS the route's `leadCallbackBodySchema`
- * (`{ name, phone, preferredTime?, payload? }`; the catalog registers the
- * same shape, so the SDK has already parsed the arguments against it — the
- * `safeParse` here keeps the stdio path and the `invalid_input` branch
- * honest), the parsed body is posted as the agent sent it — no `siteId`, no
- * stamped `payload: {}` — and the route's 201 body `{ id, persisted, email }`
- * comes back unchanged. No business logic — orchestration lives in apps/api.
- *
- * Session/scope: none — anonymous write, no auth required.
- */
-
-import { apiClient } from "@working-theory/api-client";
-import {
-  leadCallbackBodySchema,
-  type LeadCallbackBody,
-  type LeadWriteOutput,
-} from "@working-theory/validation";
-
-import { visitorForwardHeadersForThisCall } from "../request-context.js";
-
-export { leadCallbackBodySchema };
-export type { LeadCallbackBody };
-
-export async function ailkRequestCallback(
-  input: LeadCallbackBody,
-): Promise<LeadWriteOutput> {
-  const parsed = leadCallbackBodySchema.safeParse(input);
-  if (!parsed.success) {
-    return {
-      ok: false,
-      error: { kind: "invalid_input", issues: parsed.error.issues },
-    };
-  }
-
-  // #8073 — forward the address the transport trusted (never an identity
-  // argument on this tool's own schema) so the hub counts the write in that
-  // visitor's own rate-limit bucket rather than this MCP host's.
-  const headers = visitorForwardHeadersForThisCall();
-  const res = headers
-    ? await apiClient.leads.callback(parsed.data, { headers })
-    : await apiClient.leads.callback(parsed.data);
-  if (!res.ok) {
-    return { ok: false, error: { kind: "api_error", status: res.status } };
-  }
-
-  return res.body;
-}

package/templates/apps/mcp/src/tools/search_content.ts

@@ -1,63 +0,0 @@
-/**
- * search_content — full-text search across published content pages.
- *
- * Pure read: resolves its adapter through `getMcpContentAdapter()` — the one
- * resolver seam (#5805, ADR 0011), MDX by default — and answers through
- * `searchContentItemList` (`@working-theory/content-adapters`), which scores by
- * title/description/body match through `adapter.searchPages`.
- *
- * HTTP twin (#7167): `GET /v1/content/search` in `apps/api` parses the same
- * `contentSearchQuerySchema` and answers through the same builder — the tool
- * adopted the API, arguments and results. Limit defaults to 10; max 50. The
- * search string `q` is capped at 200 chars (enforced by Zod).
- *
- * Phase 3 S3: optional `locale` parameter. Search is locale-scoped — only the
- * requested locale's content directory is searched. Invalid or unknown values
- * silently fall back to the project's default locale (AC-i18n-07).
- *
- * #5831: optional `category` parameter — a leaf slug from the site-category
- * registry. Unlike `locale`, an unrecognised value is a validation error, not
- * a silent fallback: the registry is closed, so a bad slug is a caller mistake.
- *
- * Input:  { q: string, type?: SchemaOrgType, category?: CategorySlug,
- *           limit?: number, locale?: string }
- * Output: { "@context", "@type": "ItemList", query, items: Array<{ slug, type,
- *           title, snippet, score }>, totalItems }
- * Session/scope: none — read-only public content.
- */
-
-import { searchContentItemList } from "@working-theory/content-adapters";
-import {
-  contentSearchQuerySchema,
-  contentSearchResultSchema,
-  type ContentSearchResult,
-  type SearchContentInput,
-} from "@working-theory/validation";
-
-import {
-  getMcpContentAdapter,
-  mcpContentRoot,
-} from "../lib/content-adapter.js";
-import { resolveLocale } from "../lib/resolve-locale.js";
-
-export { contentSearchQuerySchema, contentSearchResultSchema };
-export type { SearchContentInput, ContentSearchResult };
-
-/**
- * search_content handler.
- *
- * Accepts an optional `contentRoot` override for testing. When omitted,
- * resolves it through `mcpContentRoot()` (#8070 D3).
- */
-export async function ailkSearchContent(
-  input: SearchContentInput,
-  contentRoot?: string,
-): Promise<ContentSearchResult> {
-  const { q, type, category, limit } = contentSearchQuerySchema.parse(input);
-
-  const root = contentRoot ?? mcpContentRoot();
-  const locale = resolveLocale(input.locale);
-  const adapter = getMcpContentAdapter({ contentRoot: root, locale });
-
-  return searchContentItemList(adapter, { q, type, category, limit, locale });
-}

package/templates/apps/mcp/src/tools/subscribe_newsletter.ts

@@ -1,54 +0,0 @@
-/**
- * subscribe_newsletter — add an email to the newsletter list: the body
- * `POST /v1/leads/subscribe` takes.
- *
- * The tool adopted the API, arguments and results (#7172 — the operator's
- * decision of 2026-10-19). Its input IS the route's `leadSubscribeBodySchema`
- * (`{ email, source }`; the catalog registers the same shape, so the SDK has
- * already parsed the arguments against it — the `safeParse` here keeps the
- * stdio path and the `invalid_input` branch honest), the parsed body is
- * posted as the agent sent it — no `siteId`, no stamped `source`, and no
- * `firstName`, which never reached the wire — and the route's 201 body
- * `{ id, persisted, email }` comes back unchanged. No spoke marker: a
- * Subscriber row has no payload to carry it. No business logic —
- * orchestration lives in apps/api.
- *
- * Session/scope: none — anonymous write, no auth required.
- */
-
-import { apiClient } from "@working-theory/api-client";
-import {
-  leadSubscribeBodySchema,
-  type LeadSubscribeBody,
-  type LeadWriteOutput,
-} from "@working-theory/validation";
-
-import { visitorForwardHeadersForThisCall } from "../request-context.js";
-
-export { leadSubscribeBodySchema };
-export type { LeadSubscribeBody };
-
-export async function ailkSubscribeNewsletter(
-  input: LeadSubscribeBody,
-): Promise<LeadWriteOutput> {
-  const parsed = leadSubscribeBodySchema.safeParse(input);
-  if (!parsed.success) {
-    return {
-      ok: false,
-      error: { kind: "invalid_input", issues: parsed.error.issues },
-    };
-  }
-
-  // #8073 — forward the address the transport trusted (never an identity
-  // argument on this tool's own schema) so the hub counts the write in that
-  // visitor's own rate-limit bucket rather than this MCP host's.
-  const headers = visitorForwardHeadersForThisCall();
-  const res = headers
-    ? await apiClient.leads.subscribe(parsed.data, { headers })
-    : await apiClient.leads.subscribe(parsed.data);
-  if (!res.ok) {
-    return { ok: false, error: { kind: "api_error", status: res.status } };
-  }
-
-  return res.body;
-}

package/templates/apps/mcp/src/workspace-server.ts

@@ -1,224 +0,0 @@
-/**
- * The signed-in workspace MCP server (#3591 D15, D16).
- *
- * Serves the catalog's `surface: "workspace"` tools — the agent's own context
- * and the inbox actions — at `/mcp/workspace` (`http-transport.ts`), one
- * fresh server per request. Each tool is the twin of one apps/api route: its
- * handler forwards the caller's agent key to that route through
- * `@working-theory/api-client` and returns the route's `data`.
- *
- * The key reaches a handler only as `extra.authInfo.token`, which the
- * transport sets from the request's `Authorization` header for that request
- * alone. Nothing here logs or serialises `extra`, `extra.authInfo` or
- * `extra.requestInfo` (the SDK puts the raw `authorization` header there,
- * SEC-3591-12), and no result carries the key: a refusal from the route is
- * an MCP tool error naming the route's `error.code` and HTTP status only.
- * apps/mcp checks nothing about the key beyond its shape; apps/api is the one
- * place it is checked.
- *
- * A tool registers exactly when its route does: when any module in its
- * catalog `modulesAnyOf` is enabled, the same disjunction the route's
- * `server.ts` gate in apps/api is. The anonymous server (`server.ts`) never
- * sees these entries — the catalog returns them only for
- * `surface: "workspace"`.
- */
-
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import {
-  getMcpToolRegistrations,
-  type McpToolRegistration,
-} from "@working-theory/metadata";
-
-import { isModuleEnabled } from "./config/modules.js";
-
-/** What a twin call answers — `@working-theory/api-client`'s `ApiResult`. */
-type ForwardResult =
-  | { ok: true; body: unknown }
-  | { ok: false; status: number; body: unknown };
-
-type WorkspaceToolHandler = (
-  key: string,
-  input: unknown,
-) => Promise<ForwardResult>;
-
-/**
- * Tool name → its handler's file and export. Every file is a paid slice the
- * OSS strip deletes, so — exactly as `server.ts`'s `MODULE_TOOL_ENTRIES` — the
- * specifier is read from this table, never written at an `import()` call
- * site, which `tsc` would resolve on the stripped tree.
- */
-const WORKSPACE_TOOL_ENTRIES: Record<
-  string,
-  { readonly specifier: string; readonly exportName: string }
-> = {
-  get_agent_context: {
-    specifier: "./tools/agent_context.js",
-    exportName: "ailkGetAgentContext",
-  },
-  list_inbox_messages: {
-    specifier: "./tools/inbox_messages.js",
-    exportName: "ailkListInboxMessages",
-  },
-  get_inbox_message: {
-    specifier: "./tools/inbox_messages.js",
-    exportName: "ailkGetInboxMessage",
-  },
-  mark_inbox_message_done: {
-    specifier: "./tools/inbox_messages.js",
-    exportName: "ailkMarkInboxMessageDone",
-  },
-  accept_inbox_message: {
-    specifier: "./tools/inbox_messages.js",
-    exportName: "ailkAcceptInboxMessage",
-  },
-  list_inbox_submissions: {
-    specifier: "./tools/inbox_submissions.js",
-    exportName: "ailkListInboxSubmissions",
-  },
-  get_inbox_submission: {
-    specifier: "./tools/inbox_submissions.js",
-    exportName: "ailkGetInboxSubmission",
-  },
-  mark_inbox_submission_done: {
-    specifier: "./tools/inbox_submissions.js",
-    exportName: "ailkMarkInboxSubmissionDone",
-  },
-  list_listing_applications: {
-    specifier: "./tools/inbox_applications.js",
-    exportName: "ailkListListingApplications",
-  },
-  get_listing_application: {
-    specifier: "./tools/inbox_applications.js",
-    exportName: "ailkGetListingApplication",
-  },
-  decide_listing_application: {
-    specifier: "./tools/inbox_applications.js",
-    exportName: "ailkDecideListingApplication",
-  },
-  // #9137 — the pre-rename names, deprecated aliases of the three above for
-  // one release: each export is the same function, so the same arguments and
-  // result.
-  list_inbox_applications: {
-    specifier: "./tools/inbox_applications.js",
-    exportName: "ailkListInboxApplications",
-  },
-  get_inbox_application: {
-    specifier: "./tools/inbox_applications.js",
-    exportName: "ailkGetInboxApplication",
-  },
-  decide_inbox_application: {
-    specifier: "./tools/inbox_applications.js",
-    exportName: "ailkDecideInboxApplication",
-  },
-  get_person_notes: {
-    specifier: "./tools/person_notes.js",
-    exportName: "ailkGetPersonNotes",
-  },
-  set_person_notes: {
-    specifier: "./tools/person_notes.js",
-    exportName: "ailkSetPersonNotes",
-  },
-  list_proposals: {
-    specifier: "./tools/proposals.js",
-    exportName: "ailkListProposals",
-  },
-  create_proposal: {
-    specifier: "./tools/proposals.js",
-    exportName: "ailkCreateProposal",
-  },
-};
-
-async function resolveWorkspaceHandler(
-  name: string,
-): Promise<WorkspaceToolHandler> {
-  const entry = WORKSPACE_TOOL_ENTRIES[name];
-  if (!entry) {
-    throw new Error(`MCP catalog drift: no handler for tool '${name}'`);
-  }
-  const mod = (await import(entry.specifier)) as Record<
-    string,
-    WorkspaceToolHandler | undefined
-  >;
-  const fn = mod[entry.exportName];
-  if (!fn) {
-    throw new Error(
-      `MCP slice drift: '${entry.specifier}' does not export '${entry.exportName}'`,
-    );
-  }
-  return fn;
-}
-
-/** Whether this build registers the tool: any of its modules is enabled. */
-function isWorkspaceToolEnabled(reg: McpToolRegistration): boolean {
-  return (reg.modulesAnyOf ?? []).some((name) => isModuleEnabled(name));
-}
-
-/** The names {@link createWorkspaceMcpServer} registers on this build. */
-export function listWorkspaceTools(): string[] {
-  return getMcpToolRegistrations({ surface: "workspace" })
-    .filter(isWorkspaceToolEnabled)
-    .map((reg) => reg.name);
-}
-
-/** The route's `error.code`, or a fixed code when the body carries none. */
-function errorCodeOf(body: unknown): string {
-  if (typeof body === "object" && body !== null) {
-    const error = (body as { error?: unknown }).error;
-    if (typeof error === "object" && error !== null) {
-      const code = (error as { code?: unknown }).code;
-      if (typeof code === "string") return code;
-    }
-  }
-  return "api_error";
-}
-
-function toolError(code: string, status: number) {
-  return {
-    isError: true,
-    content: [
-      {
-        type: "text" as const,
-        text: JSON.stringify({ ok: false, error: { code, status } }),
-      },
-    ],
-  };
-}
-
-/**
- * Creates the signed-in workspace server: every `surface: "workspace"` catalog
- * entry whose module is enabled, each forwarding the caller's key to its twin
- * route. Unconnected — the transport attaches one per request.
- */
-export function createWorkspaceMcpServer(): McpServer {
-  const server = new McpServer({ name: "ailk-workspace", version: "0.1.0" });
-
-  for (const reg of getMcpToolRegistrations({ surface: "workspace" })) {
-    if (!isWorkspaceToolEnabled(reg)) continue;
-    // Boot-time drift detection, as `server.ts` does it.
-    if (!WORKSPACE_TOOL_ENTRIES[reg.name]) {
-      throw new Error(`MCP catalog drift: no handler for tool '${reg.name}'`);
-    }
-    server.tool(
-      reg.name,
-      reg.description,
-      reg.inputShape,
-      async (input, extra) => {
-        const key = extra.authInfo?.token;
-        if (!key) return toolError("unauthorized", 401);
-        const handler = await resolveWorkspaceHandler(reg.name);
-        const res = await handler(key, input);
-        if (!res.ok) return toolError(errorCodeOf(res.body), res.status);
-        return {
-          content: [
-            {
-              type: "text" as const,
-              text: JSON.stringify({ ok: true, data: res.body }),
-            },
-          ],
-        };
-      },
-    );
-  }
-
-  return server;
-}