dineway 0.2.1 → 0.2.2

package/dist/astro/routes/api/mcp.mjs

@@ -1,352 +1,260 @@
 import "../../../dialect-helpers-fk43GbDb.mjs";
 import "../../../base64-F8-DUraK.mjs";
-import "../../../types-ChxYDRvx.mjs";
-import "../../../loader-aWkkc1_o.mjs";
+import "../../../types-Bshd_6wQ.mjs";
+import "../../../loader-WHf22FwU.mjs";
 import "../../../object-cache-D51qOseS.mjs";
-import "../../../content-DJcAYFhz.mjs";
-import "../../../media-CVMOoywq.mjs";
+import "../../../content-Cbl8HbIR.mjs";
+import "../../../media-B4m-cnmj.mjs";
 import "../../../options-DQPTH5n0.mjs";
-import "../../../site-activity-h8smOlYI.mjs";
-import { t as ReviewRequestRepository } from "../../../review-requests-CTWGnWUt.mjs";
-import { a as HITL_REQUEST_STATUSES, i as HITL_REQUEST_PRIORITIES, o as HitlRequestRepository, r as ReleasePayloadBuilder, t as PublicationAuthorizationError } from "../../../publication-authorization-RKiHXKtq.mjs";
-import { C as ASSIGNMENT_STATUSES, S as ASSIGNMENT_PRIORITIES, _ as toPublicContextDiff, a as EntityResolver, b as HitlRequestService, d as SettingsHitlPayloadBuilder, g as RiskPolicyEvaluator, h as SchemaHitlPayloadBuilder, i as ActorExpertiseService, n as AssignmentService, r as HandoffSnapshotStore, t as WorkflowHitlCoordinator, v as toPublicContextEntry, x as ASSIGNMENT_ACTOR_TYPES, y as toPublicContextEntryPage } from "../../../site-context-B8T1kpUP.mjs";
+import "../../../site-activity-BVK40wCy.mjs";
+import { t as ReviewRequestRepository } from "../../../review-requests-CObSuTYU.mjs";
+import { a as HITL_REQUEST_STATUSES, i as HITL_REQUEST_PRIORITIES, o as HitlRequestRepository, r as ReleasePayloadBuilder, t as PublicationAuthorizationError } from "../../../publication-authorization-BVQ5rCAF.mjs";
+import { C as ASSIGNMENT_STATUSES, S as ASSIGNMENT_PRIORITIES, _ as toPublicContextDiff, a as EntityResolver, b as HitlRequestService, d as SettingsHitlPayloadBuilder, g as RiskPolicyEvaluator, h as SchemaHitlPayloadBuilder, i as ActorExpertiseService, n as AssignmentService, r as HandoffSnapshotStore, t as WorkflowHitlCoordinator, v as toPublicContextEntry, x as ASSIGNMENT_ACTOR_TYPES, y as toPublicContextEntryPage } from "../../../site-context-CzaEGizi.mjs";
 import "../../../request-cache-CBFjCwSt.mjs";
-import { a as ContextRepository, i as parseSiteBriefingScope, r as formatSiteBriefingText, t as SiteBriefingAssembler } from "../../../briefing-0rf-su3-.mjs";
+import { a as ContextRepository, i as parseSiteBriefingScope, r as formatSiteBriefingText, t as SiteBriefingAssembler } from "../../../briefing-GFhLTLJo.mjs";
 import { t as SITE_CONTEXT_TYPES } from "../../../context-types-eBuMDAg-.mjs";
-import "../../../content-refresh-B4ZCmxgd.mjs";
-import "../../../fts-manager-ewTGohf4.mjs";
-import "../../../registry-BYYyb2tF.mjs";
-import { a as getSiteSettingsWithDb } from "../../../settings-BECcAIRH.mjs";
+import "../../../content-refresh-BmkilU5M.mjs";
+import "../../../fts-manager-Zo9uhGel.mjs";
+import "../../../registry-SEJqFliS.mjs";
+import { a as getSiteSettingsWithDb } from "../../../settings-SVDAB7_W.mjs";
 import { t as ReviewPayloadBuilder } from "../../../review-payload-BysRWpxS.mjs";
-import { n as VERSION } from "../../../version-C3iVRuaF.mjs";
-import "../../../query-C2U5u5_p.mjs";
-import "../../../zod-generator-C7AsLpSB.mjs";
-import "../../../schema-DUtnZxjZ.mjs";
-import { t as apiError } from "../../../error-CSVaQNZy.mjs";
-import { Cn as contentBylineInputSchema, P as settingsUpdateBody, _n as bylineCreateBody, cn as contentSeoInput, xn as bylineUpdateBody } from "../../../redirects-Bhpm8bRe.mjs";
-import "../../../byline-fields-WN7RQT4q.mjs";
-import "../../../status-NqWOSFAD.mjs";
+import { n as VERSION } from "../../../version-DEAV9k58.mjs";
+import "../../../query-DNczixZr.mjs";
+import "../../../zod-generator-Cr3SiHsc.mjs";
+import "../../../schema-Dk_N31V4.mjs";
+import { t as DinewaySecretsError } from "../../../secrets-CpGpyGcO.mjs";
+import { t as IntegrationCredentialStore } from "../../../store-CCfMD6nw.mjs";
+import { t as apiError } from "../../../error-BW9f_ynq.mjs";
+import { Cn as contentBylineInputSchema, P as settingsUpdateBody, _n as bylineCreateBody, cn as contentSeoInput, xn as bylineUpdateBody } from "../../../redirects-E_B6hvuz.mjs";
+import "../../../byline-fields-yT4herdN.mjs";
+import "../../../status-BN40hMpr.mjs";
 import "../../../api/schemas/index.mjs";
-import { i as hasScope } from "../../../api-tokens-Ypaly90d.mjs";
-import { r as registerPluginMcpRegistry, t as createReviewedPluginMcpCommandExecutor } from "../../../mcp-reviewed-executor-Dn52L_yY.mjs";
-import { n as resolveActorIdentity } from "../../../actor-0QJ1Gbtf.mjs";
-import "../../../activity-DUaz_w7p.mjs";
-import { d as logSchemaActivity, o as logContentActivity, p as logSiteActivitySafely, r as contentMcpToolSource, t as activityChangedKeys, x as schemaMcpToolSource } from "../../../activity-events-CJDvE2uc.mjs";
-import "../../../utils-D1SrKGtP.mjs";
-import "../../../search-DUKgZUlm.mjs";
-import { n as SeoProviderEvidenceService, t as ForgewaySeoGatewayClient } from "../../../forgeway-seo-client-G5ddhVHd.mjs";
+import { i as hasScope } from "../../../api-tokens-D4tcY8R6.mjs";
+import { r as registerPluginMcpRegistry, t as createReviewedPluginMcpCommandExecutor } from "../../../mcp-reviewed-executor-DnlF7mIL.mjs";
+import { n as resolveActorIdentity } from "../../../actor-DA7yL9Yp.mjs";
+import "../../../activity-BDMlkpYY.mjs";
+import { d as logSchemaActivity, o as logContentActivity, p as logSiteActivitySafely, r as contentMcpToolSource, t as activityChangedKeys, x as schemaMcpToolSource } from "../../../activity-events-DEYmJhWd.mjs";
+import "../../../utils-B7gemXz5.mjs";
+import "../../../search-BXEQepxL.mjs";
 import { n as convertDataForWrite, t as convertDataForRead } from "../../../portable-text-BASHceim.mjs";
+import { f as readStoredForgewayAccount, n as DinewayToolsService, p as refreshForgewayAccountCredentials, s as createForgewayAccountClient, t as DinewayToolsError, u as normalizeForgewayApiUrl } from "../../../service-CY0aH6eI.mjs";
 import { z } from "zod";
 import { Role, canActOnOwn, hasPermission } from "@dineway-ai/auth";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { ErrorCode, McpError } from "@modelcontextprotocol/sdk/types.js";
+import { ForgewayClient } from "@forgeway/sdk";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
 
-//#region src/mcp/seo-provider-tools.ts
-const annotations = {
+//#region src/dineway-tools/runtime.ts
+async function createDinewayToolsRuntimeService(options = {}) {
+	const platformApiUrl = normalizeForgewayApiUrl(options.platformApiUrl ?? readEnv("DINEWAY_API_BASE_URL", "DINEWAY_FORGEWAY_API_URL", "FORGEWAY_API_URL"));
+	const accessToken = options.accessToken ?? readEnv("DINEWAY_FORGEWAY_ACCESS_TOKEN");
+	if (accessToken) return new DinewayToolsService(createForgewayAccountClient(platformApiUrl, accessToken).integration);
+	const apiKey = options.apiKey ?? readEnv("DINEWAY_API_KEY", "FORGEWAY_API_KEY");
+	if (apiKey) return new DinewayToolsService(new ForgewayClient({
+		baseUrl: platformApiUrl,
+		isServerMode: true,
+		headers: { "X-API-Key": apiKey },
+		auth: { detectOAuthCallback: false }
+	}).integration);
+	const stored = await readStoredForgewayAccount({ platformApiUrl });
+	if (!stored) throw new DinewayToolsError("Dineway Tools requires a Forgeway account or DINEWAY_API_KEY in this runtime.", "FORGEWAY_ACCOUNT_REQUIRED");
+	const refreshed = await refreshForgewayAccountCredentials(stored);
+	return new DinewayToolsService(createForgewayAccountClient(refreshed.platformApiUrl, refreshed.accessToken).integration);
+}
+function readEnv(...names) {
+	const meta = import.meta.env ?? {};
+	const proc = typeof process !== "undefined" && process.env ? process.env : {};
+	for (const name of names) {
+		const value = meta[name] ?? proc[name];
+		if (value) return value;
+	}
+}
+
+//#endregion
+//#region src/mcp/dineway-tools.ts
+const readAnnotations = {
 	readOnlyHint: true,
 	destructiveHint: false,
+	idempotentHint: true,
+	openWorldHint: true
+};
+const runAnnotations = {
+	readOnlyHint: false,
+	destructiveHint: true,
 	idempotentHint: false,
 	openWorldHint: true
 };
-const forceRefreshInput = { force_refresh: z.boolean().optional().describe("Bypass the managed provider cache") };
-const dataForSeoCommonInput = {
-	location_code: z.number().int().min(1).max(1e7).optional(),
-	language_code: z.string().trim().min(1).max(20).optional(),
-	device: z.enum(["desktop", "mobile"]).optional(),
-	...forceRefreshInput
+const stopAnnotations = {
+	readOnlyHint: false,
+	destructiveHint: true,
+	idempotentHint: true,
+	openWorldHint: true
 };
-function serviceOrThrow(service) {
-	if (!service) throw new Error("Dineway hosted SEO provider evidence is unavailable in this runtime.");
+const billingModeSchema = z.enum(["site_byok", "hosted"]).default("site_byok").describe("Billing mode. Defaults to site_byok; hosted credits are used only when explicitly selected.");
+const jsonValueSchema = z.json();
+const jsonObjectSchema = z.record(z.string(), jsonValueSchema);
+const endpointInputSchema = z.object({
+	body: jsonValueSchema.optional(),
+	query_params: jsonObjectSchema.optional(),
+	path_params: jsonObjectSchema.optional(),
+	header_params: jsonObjectSchema.optional(),
+	body_type: z.string().trim().min(1).optional()
+}).strict();
+async function serviceOrThrow(options) {
+	const service = options.service ?? await options.resolveService?.();
+	if (!service) throw new DinewayToolsError("Dineway Tools is unavailable in this runtime.", "TOOLS_UNAVAILABLE");
 	return service;
 }
-function jsonResult$1(data) {
-	return { content: [{
-		type: "text",
-		text: JSON.stringify(data, null, 2)
-	}] };
+function result(data) {
+	const structuredContent = isRecord(data) ? data : { result: data };
+	return {
+		content: [{
+			type: "text",
+			text: JSON.stringify(data, null, 2)
+		}],
+		structuredContent
+	};
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function errorResult$1(error) {
 	return {
 		content: [{
 			type: "text",
-			text: error instanceof Error ? error.message : "SEO provider evidence request failed."
+			text: error instanceof DinewayToolsError || error instanceof DinewaySecretsError ? error.message : "Dineway Tools request failed. Check the endpoint input and try again."
 		}],
 		isError: true
 	};
 }
-function registerSeoProviderTools(server, options) {
-	server.registerTool("seo_firecrawl_scrape", {
-		title: "Scrape URL with Firecrawl",
-		description: "Fetch bounded managed-provider evidence for one HTTP(S) URL. Returns raw evidence without interpretation or persistence.",
-		inputSchema: z.object({
-			url: z.string().trim().min(1).max(2048),
-			formats: z.array(z.string().trim().min(1).max(50)).min(1).max(10).optional(),
-			only_main_content: z.boolean().optional(),
-			timeout_ms: z.number().int().min(1e3).max(12e4).optional(),
-			...forceRefreshInput
-		}),
-		annotations
-	}, async (args, extra) => {
-		options.authorize(extra);
-		try {
-			return jsonResult$1(await serviceOrThrow(options.service).firecrawlScrape({
-				url: args.url,
-				formats: args.formats,
-				onlyMainContent: args.only_main_content,
-				timeoutMs: args.timeout_ms,
-				forceRefresh: args.force_refresh
-			}));
-		} catch (error) {
-			return errorResult$1(error);
-		}
-	});
-	server.registerTool("seo_firecrawl_map", {
-		title: "Map URLs with Firecrawl",
-		description: "Discover a bounded URL map for one HTTP(S) origin through the managed provider bridge.",
-		inputSchema: z.object({
-			url: z.string().trim().min(1).max(2048),
-			search: z.string().trim().min(1).max(500).optional(),
-			sitemap: z.enum([
-				"skip",
-				"include",
-				"only"
-			]).optional(),
-			limit: z.number().int().min(1).max(1e3).optional(),
-			include_subdomains: z.boolean().optional(),
-			ignore_query_parameters: z.boolean().optional(),
-			...forceRefreshInput
-		}),
-		annotations
-	}, async (args, extra) => {
-		options.authorize(extra);
-		try {
-			return jsonResult$1(await serviceOrThrow(options.service).firecrawlMap({
-				url: args.url,
-				search: args.search,
-				sitemap: args.sitemap,
-				limit: args.limit,
-				includeSubdomains: args.include_subdomains,
-				ignoreQueryParameters: args.ignore_query_parameters,
-				forceRefresh: args.force_refresh
-			}));
-		} catch (error) {
-			return errorResult$1(error);
-		}
-	});
-	server.registerTool("seo_firecrawl_crawl_start", {
-		title: "Start Firecrawl Crawl",
-		description: "Start one bounded managed crawl and return the raw provider task payload. Does not create a Dineway workflow task.",
-		inputSchema: z.object({
-			url: z.string().trim().min(1).max(2048),
-			limit: z.number().int().min(1).max(1e3).optional(),
-			max_discovery_depth: z.number().int().min(0).max(20).optional(),
-			allow_external_links: z.boolean().optional(),
-			allow_subdomains: z.boolean().optional(),
-			scrape_formats: z.array(z.string().trim().min(1).max(50)).min(1).max(10).optional(),
-			...forceRefreshInput
-		}),
-		annotations
-	}, async (args, extra) => {
-		options.authorize(extra);
-		try {
-			return jsonResult$1(await serviceOrThrow(options.service).firecrawlCrawlStart({
-				url: args.url,
-				limit: args.limit,
-				maxDiscoveryDepth: args.max_discovery_depth,
-				allowExternalLinks: args.allow_external_links,
-				allowSubdomains: args.allow_subdomains,
-				scrapeFormats: args.scrape_formats,
-				forceRefresh: args.force_refresh
-			}));
-		} catch (error) {
-			return errorResult$1(error);
-		}
-	});
-	server.registerTool("seo_firecrawl_crawl_status", {
-		title: "Get Firecrawl Crawl Status",
-		description: "Read the raw status of one managed crawl by its provider crawl ID.",
-		inputSchema: z.object({ id: z.string().trim().min(1).max(500) }),
-		annotations
-	}, async (args, extra) => {
-		options.authorize(extra);
-		try {
-			return jsonResult$1(await serviceOrThrow(options.service).firecrawlCrawlStatus({ id: args.id }));
-		} catch (error) {
-			return errorResult$1(error);
-		}
-	});
-	server.registerTool("seo_firecrawl_search", {
-		title: "Search with Firecrawl",
-		description: "Return bounded raw web-search evidence through the managed provider bridge.",
-		inputSchema: z.object({
-			query: z.string().trim().min(1).max(1e3),
-			limit: z.number().int().min(1).max(1e3).optional(),
-			scrape: z.boolean().optional(),
-			...forceRefreshInput
+async function credentialFor(provider, billingMode, extra, options) {
+	if (billingMode === "hosted") return void 0;
+	const credential = await options.resolveCredential(provider, options.getContext(extra));
+	if (!credential) throw new DinewayToolsError(`No site BYOK credential is configured for provider ${provider}. Configure it in Settings > Integrations or explicitly select hosted billing.`, "SITE_BYOK_CREDENTIAL_MISSING");
+	return credential;
+}
+function mapInput(input) {
+	if (!input) return {};
+	return {
+		body: input.body,
+		queryParams: input.query_params,
+		pathParams: input.path_params,
+		headerParams: input.header_params,
+		bodyType: input.body_type
+	};
+}
+function registerDinewayTools(server, options) {
+	server.registerTool("tools_discover", {
+		title: "Discover Dineway Tools",
+		description: "Search hundreds of Forgeway integration endpoints using natural language. Use inspect before run.",
+		inputSchema: z.object({
+			query: z.string().trim().min(1).max(500),
+			limit: z.number().int().min(1).max(100).default(10),
+			min_score: z.number().min(0).max(1).optional()
 		}),
-		annotations
+		annotations: readAnnotations
 	}, async (args, extra) => {
-		options.authorize(extra);
+		options.authorizeRead(extra);
 		try {
-			return jsonResult$1(await serviceOrThrow(options.service).firecrawlSearch({
+			return result(await (await serviceOrThrow(options)).discover({
 				query: args.query,
 				limit: args.limit,
-				scrape: args.scrape,
-				forceRefresh: args.force_refresh
+				minScore: args.min_score
 			}));
 		} catch (error) {
 			return errorResult$1(error);
 		}
 	});
-	server.registerTool("seo_dataforseo_serp", {
-		title: "Get Organic SERP Evidence",
-		description: "Return bounded raw Google organic SERP evidence for one keyword.",
+	server.registerTool("tools_inspect", {
+		title: "Inspect a Dineway Tool",
+		description: "Inspect one integration endpoint's input schema, output shape, risk policy, and credit price before running it.",
 		inputSchema: z.object({
-			keyword: z.string().trim().min(1).max(1e3),
-			depth: z.number().int().min(1).max(100).optional(),
-			...dataForSeoCommonInput
+			provider: z.string().trim().min(1).max(100),
+			endpoint: z.string().trim().min(1).max(500)
 		}),
-		annotations
+		annotations: readAnnotations
 	}, async (args, extra) => {
-		options.authorize(extra);
+		options.authorizeRead(extra);
 		try {
-			return jsonResult$1(await serviceOrThrow(options.service).dataForSeoSerp({
-				keyword: args.keyword,
-				depth: args.depth,
-				locationCode: args.location_code,
-				languageCode: args.language_code,
-				device: args.device,
-				forceRefresh: args.force_refresh
-			}));
+			return result(await (await serviceOrThrow(options)).inspect(args));
 		} catch (error) {
 			return errorResult$1(error);
 		}
 	});
-	server.registerTool("seo_dataforseo_maps", {
-		title: "Get Maps SERP Evidence",
-		description: "Return bounded raw Google Maps SERP evidence for one keyword.",
+	server.registerTool("tools_run", {
+		title: "Run a Dineway Tool",
+		description: "Start one inspected integration endpoint. Site BYOK is the safe default; hosted credits require explicit selection.",
 		inputSchema: z.object({
-			keyword: z.string().trim().min(1).max(1e3),
-			depth: z.number().int().min(1).max(100).optional(),
-			...dataForSeoCommonInput
+			provider: z.string().trim().min(1).max(100),
+			endpoint: z.string().trim().min(1).max(500),
+			input: endpointInputSchema.optional(),
+			billing_mode: billingModeSchema,
+			force_refresh: z.boolean().default(false),
+			confirm_side_effect: z.boolean().default(false),
+			idempotency_key: z.string().trim().min(1).max(500).optional()
 		}),
-		annotations
+		annotations: runAnnotations
 	}, async (args, extra) => {
-		options.authorize(extra);
+		options.authorizeRun(extra);
 		try {
-			return jsonResult$1(await serviceOrThrow(options.service).dataForSeoMaps({
-				keyword: args.keyword,
-				depth: args.depth,
-				locationCode: args.location_code,
-				languageCode: args.language_code,
-				device: args.device,
-				forceRefresh: args.force_refresh
-			}));
+			if (args.confirm_side_effect && !args.idempotency_key) throw new DinewayToolsError("An idempotency key is required when confirming an endpoint with side effects.", "IDEMPOTENCY_KEY_REQUIRED");
+			const credential = await credentialFor(args.provider, args.billing_mode, extra, options);
+			return result(await (await serviceOrThrow(options)).run({
+				provider: args.provider,
+				endpoint: args.endpoint,
+				input: mapInput(args.input),
+				credential,
+				forceRefresh: args.force_refresh,
+				confirmSideEffect: args.confirm_side_effect
+			}, { idempotencyKey: args.idempotency_key }));
 		} catch (error) {
 			return errorResult$1(error);
 		}
 	});
-	server.registerTool("seo_dataforseo_keywords", {
-		title: "Get Keyword Evidence",
-		description: "Return bounded raw keyword suggestions for one seed keyword.",
-		inputSchema: z.object({
-			keyword: z.string().trim().min(1).max(1e3),
-			limit: z.number().int().min(1).max(1e3).optional(),
-			...dataForSeoCommonInput
-		}),
-		annotations
+	server.registerTool("tools_get_run", {
+		title: "Get a Dineway Tools Run",
+		description: "Read the current state and result of one integration run.",
+		inputSchema: z.object({ run_id: z.string().uuid() }),
+		annotations: readAnnotations
 	}, async (args, extra) => {
-		options.authorize(extra);
+		options.authorizeRead(extra);
 		try {
-			return jsonResult$1(await serviceOrThrow(options.service).dataForSeoKeywords({
-				keyword: args.keyword,
-				limit: args.limit,
-				locationCode: args.location_code,
-				languageCode: args.language_code,
-				device: args.device,
-				forceRefresh: args.force_refresh
-			}));
-		} catch (error) {
-			return errorResult$1(error);
-		}
-	});
-	server.registerTool("seo_dataforseo_competitors", {
-		title: "Get Competitor Domain Evidence",
-		description: "Return bounded raw competitor-domain evidence for one target domain.",
-		inputSchema: z.object({
-			domain: z.string().trim().min(1).max(253),
-			limit: z.number().int().min(1).max(1e3).optional(),
-			...dataForSeoCommonInput
-		}),
-		annotations
-	}, async (args, extra) => {
-		options.authorize(extra);
-		try {
-			return jsonResult$1(await serviceOrThrow(options.service).dataForSeoCompetitors({
-				domain: args.domain,
-				limit: args.limit,
-				locationCode: args.location_code,
-				languageCode: args.language_code,
-				device: args.device,
-				forceRefresh: args.force_refresh
-			}));
+			return result(await (await serviceOrThrow(options)).getRun(args.run_id));
 		} catch (error) {
 			return errorResult$1(error);
 		}
 	});
-	server.registerTool("seo_dataforseo_ai_scrape", {
-		title: "Get Managed AI Result Evidence",
-		description: "Return raw managed AI-result evidence for one keyword. This does not replace direct user-account observations.",
+	server.registerTool("tools_list_runs", {
+		title: "List Dineway Tools Runs",
+		description: "List recent integration runs with cursor pagination.",
 		inputSchema: z.object({
-			keyword: z.string().trim().min(1).max(1e3),
-			platform: z.enum([
-				"chat_gpt",
-				"gemini",
-				"perplexity"
-			]).optional(),
-			...dataForSeoCommonInput
+			limit: z.number().int().min(1).max(100).default(20),
+			cursor: z.string().trim().min(1).optional()
 		}),
-		annotations
+		annotations: readAnnotations
 	}, async (args, extra) => {
-		options.authorize(extra);
+		options.authorizeRead(extra);
 		try {
-			return jsonResult$1(await serviceOrThrow(options.service).dataForSeoAiScrape({
-				keyword: args.keyword,
-				platform: args.platform,
-				locationCode: args.location_code,
-				languageCode: args.language_code,
-				device: args.device,
-				forceRefresh: args.force_refresh
-			}));
+			return result(await (await serviceOrThrow(options)).listRuns(args));
 		} catch (error) {
 			return errorResult$1(error);
 		}
 	});
-	server.registerTool("seo_dataforseo_ai_mentions", {
-		title: "Get Managed AI Mention Evidence",
-		description: "Return bounded raw managed mention evidence for a domain, keyword, or both. This does not generate visibility conclusions.",
+	server.registerTool("tools_stop_run", {
+		title: "Stop a Dineway Tools Run",
+		description: "Stop one cancellable integration run. Site BYOK is the safe default; hosted credits require explicit selection.",
 		inputSchema: z.object({
-			domain: z.string().trim().min(1).max(253).optional(),
-			keyword: z.string().trim().min(1).max(1e3).optional(),
-			platform: z.enum(["google", "chat_gpt"]).optional(),
-			limit: z.number().int().min(1).max(1e3).optional(),
-			...dataForSeoCommonInput
+			run_id: z.string().uuid(),
+			billing_mode: billingModeSchema
 		}),
-		annotations
+		annotations: stopAnnotations
 	}, async (args, extra) => {
-		options.authorize(extra);
+		options.authorizeRun(extra);
 		try {
-			return jsonResult$1(await serviceOrThrow(options.service).dataForSeoAiMentions({
-				domain: args.domain,
-				keyword: args.keyword,
-				platform: args.platform,
-				limit: args.limit,
-				locationCode: args.location_code,
-				languageCode: args.language_code,
-				device: args.device,
-				forceRefresh: args.force_refresh
-			}));
+			const service = await serviceOrThrow(options);
+			const credential = await credentialFor((await service.getRun(args.run_id)).provider, args.billing_mode, extra, options);
+			return result(await service.stopRun(args.run_id, { credential }));
 		} catch (error) {
 			return errorResult$1(error);
 		}
@@ -424,7 +332,7 @@ function getDineway(extra) {
 }
 async function getCollectionFields(dineway, collection) {
 	try {
-		const { SchemaRegistry } = await import("../../../schema-DUtnZxjZ.mjs").then((n) => n.t);
+		const { SchemaRegistry } = await import("../../../schema-Dk_N31V4.mjs").then((n) => n.t);
 		return (await new SchemaRegistry(dineway.db).getCollectionWithFields(collection))?.fields ?? null;
 	} catch {
 		return null;
@@ -441,7 +349,7 @@ async function applyReadMarkdown(dineway, collection, items) {
 	for (const item of items) if (item.data && typeof item.data === "object") item.data = convertDataForRead(item.data, fields, false);
 }
 async function invalidateBylines() {
-	const { invalidateBylineCache } = await import("../../../bylines-CmZFCMr0.mjs").then((n) => n.t);
+	const { invalidateBylineCache } = await import("../../../bylines-kixFoaRV.mjs").then((n) => n.t);
 	invalidateBylineCache();
 }
 function canReadDrafts(extra) {
@@ -831,12 +739,19 @@ function createMcpServer(options = {}) {
 		name: "dineway",
 		version: VERSION
 	}, { capabilities: { logging: {} } });
-	registerSeoProviderTools(server, {
-		service: options.seoProviderService,
-		authorize: (extra) => {
-			requireScope(extra, "seo:read");
+	registerDinewayTools(server, {
+		service: options.dinewayToolsService,
+		resolveService: options.resolveDinewayToolsService,
+		authorizeRead: (extra) => {
+			requireScope(extra, "tools:read");
 			requireRole(extra, Role.AUTHOR);
-		}
+		},
+		authorizeRun: (extra) => {
+			requireScope(extra, "tools:run");
+			requireRole(extra, Role.AUTHOR);
+		},
+		getContext: (extra) => getDineway(extra),
+		resolveCredential: async (provider, dineway) => await options.resolveDinewayToolsCredential?.(provider, dineway) ?? null
 	});
 	server.registerTool("site_briefing_get", {
 		title: "Get Site Briefing",
@@ -2451,7 +2366,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-DUtnZxjZ.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-Dk_N31V4.mjs").then((n) => n.t);
 			return jsonResult({ items: await new SchemaRegistry(ec.db).listCollections() });
 		} catch (error) {
 			return errorResult(error);
@@ -2467,7 +2382,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-DUtnZxjZ.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-Dk_N31V4.mjs").then((n) => n.t);
 			const collection = await new SchemaRegistry(ec.db).getCollectionWithFields(args.slug);
 			if (!collection) return errorResult(`Collection '${args.slug}' not found`);
 			return jsonResult(collection);
@@ -2497,7 +2412,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getDineway(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-DUtnZxjZ.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-Dk_N31V4.mjs").then((n) => n.t);
 			const collection = await new SchemaRegistry(ec.db).createCollection({
 				slug: args.slug,
 				label: args.label,
@@ -2561,7 +2476,7 @@ function createMcpServer(options = {}) {
 					request
 				});
 			}
-			const { SchemaRegistry } = await import("../../../schema-DUtnZxjZ.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-Dk_N31V4.mjs").then((n) => n.t);
 			await new SchemaRegistry(ec.db).deleteCollection(args.slug, { force: args.force });
 			ec.invalidateManifest();
 			await logSchemaActivity(ec.db, locals, {
@@ -2625,7 +2540,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getDineway(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-DUtnZxjZ.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-Dk_N31V4.mjs").then((n) => n.t);
 			const field = await new SchemaRegistry(ec.db).createField(args.collection, {
 				slug: args.slug,
 				label: args.label,
@@ -2694,7 +2609,7 @@ function createMcpServer(options = {}) {
 					request
 				});
 			}
-			const { SchemaRegistry } = await import("../../../schema-DUtnZxjZ.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-Dk_N31V4.mjs").then((n) => n.t);
 			await new SchemaRegistry(ec.db).deleteField(args.collection, args.fieldSlug);
 			ec.invalidateManifest();
 			await logSchemaActivity(ec.db, locals, {
@@ -2827,7 +2742,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { searchWithDb } = await import("../../../search-DUKgZUlm.mjs").then((n) => n.t);
+			const { searchWithDb } = await import("../../../search-BXEQepxL.mjs").then((n) => n.t);
 			return jsonResult(await searchWithDb(ec.db, args.query, {
 				collections: args.collections,
 				locale: args.locale,
@@ -2853,7 +2768,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { BylineRepository } = await import("../../../byline-7xR185Ly.mjs").then((n) => n.n);
+			const { BylineRepository } = await import("../../../byline-BJa1MyKB.mjs").then((n) => n.n);
 			return jsonResult(await new BylineRepository(ec.db).findMany({
 				search: args.search,
 				isGuest: args.isGuest,
@@ -2875,7 +2790,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { BylineRepository } = await import("../../../byline-7xR185Ly.mjs").then((n) => n.n);
+			const { BylineRepository } = await import("../../../byline-BJa1MyKB.mjs").then((n) => n.n);
 			const byline = await new BylineRepository(ec.db).findById(args.id);
 			if (!byline) return errorResult(`Byline '${args.id}' not found`);
 			return jsonResult(byline);
@@ -2893,7 +2808,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleBylineCreate } = await import("../../../bylines-C-EL6dh3.mjs").then((n) => n.t);
+			const { handleBylineCreate } = await import("../../../bylines-B53Saxdb.mjs").then((n) => n.t);
 			const result = await handleBylineCreate(ec.db, args);
 			if (result.success) await invalidateBylines();
 			return unwrap(result);
@@ -2913,7 +2828,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleBylineUpdate } = await import("../../../bylines-C-EL6dh3.mjs").then((n) => n.t);
+			const { handleBylineUpdate } = await import("../../../bylines-B53Saxdb.mjs").then((n) => n.t);
 			const { id, ...input } = args;
 			const result = await handleBylineUpdate(ec.db, id, input);
 			if (result.success) await invalidateBylines();
@@ -2932,7 +2847,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { BylineRepository } = await import("../../../byline-7xR185Ly.mjs").then((n) => n.n);
+			const { BylineRepository } = await import("../../../byline-BJa1MyKB.mjs").then((n) => n.n);
 			if (!await new BylineRepository(ec.db).delete(args.id)) return errorResult(`Byline '${args.id}' not found`);
 			await invalidateBylines();
 			return jsonResult({ deleted: args.id });
@@ -2949,7 +2864,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleBylineTranslations } = await import("../../../bylines-C-EL6dh3.mjs").then((n) => n.t);
+			const { handleBylineTranslations } = await import("../../../bylines-B53Saxdb.mjs").then((n) => n.t);
 			return unwrap(await handleBylineTranslations(ec.db, args.id));
 		} catch (error) {
 			return errorResult(error);
@@ -2964,7 +2879,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleTaxonomyList } = await import("../../../taxonomies-BiM9NtgW.mjs").then((n) => n.l);
+			const { handleTaxonomyList } = await import("../../../taxonomies-DuhGjBa8.mjs").then((n) => n.l);
 			return unwrap(await handleTaxonomyList(ec.db, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -2984,12 +2899,12 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleTaxonomyList } = await import("../../../taxonomies-BiM9NtgW.mjs").then((n) => n.l);
+			const { handleTaxonomyList } = await import("../../../taxonomies-DuhGjBa8.mjs").then((n) => n.l);
 			const listResult = await handleTaxonomyList(ec.db, { locale: args.locale });
 			if (!listResult.success) return unwrap(listResult);
 			if (!listResult.data.taxonomies.find((t) => t.name === args.taxonomy)) return errorResult(`Taxonomy '${args.taxonomy}' not found`);
-			const { TaxonomyRepository } = await import("../../../taxonomy-0k_vRVsD.mjs").then((n) => n.n);
-			const { decodeCursor, encodeCursor } = await import("../../../types-ChxYDRvx.mjs").then((n) => n.a);
+			const { TaxonomyRepository } = await import("../../../taxonomy-CCo2plmV.mjs").then((n) => n.n);
+			const { decodeCursor, encodeCursor } = await import("../../../types-Bshd_6wQ.mjs").then((n) => n.a);
 			const repo = new TaxonomyRepository(ec.db);
 			const limit = Math.min(args.limit ?? 50, 100);
 			const terms = await repo.findByName(args.taxonomy, { locale: args.locale });
@@ -3038,7 +2953,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleTermCreate } = await import("../../../taxonomies-BiM9NtgW.mjs").then((n) => n.l);
+			const { handleTermCreate } = await import("../../../taxonomies-DuhGjBa8.mjs").then((n) => n.l);
 			return unwrap(await handleTermCreate(ec.db, args.taxonomy, {
 				slug: args.slug,
 				label: args.label,
@@ -3068,7 +2983,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleTermUpdate } = await import("../../../taxonomies-BiM9NtgW.mjs").then((n) => n.l);
+			const { handleTermUpdate } = await import("../../../taxonomies-DuhGjBa8.mjs").then((n) => n.l);
 			return unwrap(await handleTermUpdate(ec.db, args.taxonomy, args.termSlug, {
 				slug: args.slug,
 				label: args.label,
@@ -3093,7 +3008,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleTermDelete } = await import("../../../taxonomies-BiM9NtgW.mjs").then((n) => n.l);
+			const { handleTermDelete } = await import("../../../taxonomies-DuhGjBa8.mjs").then((n) => n.l);
 			return unwrap(await handleTermDelete(ec.db, args.taxonomy, args.termSlug, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -3108,7 +3023,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleTermTranslations } = await import("../../../taxonomies-BiM9NtgW.mjs").then((n) => n.l);
+			const { handleTermTranslations } = await import("../../../taxonomies-DuhGjBa8.mjs").then((n) => n.l);
 			return unwrap(await handleTermTranslations(ec.db, args.id));
 		} catch (error) {
 			return errorResult(error);
@@ -3123,7 +3038,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuList } = await import("../../../menus-CmyIkRG5.mjs").then((n) => n.d);
+			const { handleMenuList } = await import("../../../menus-LYALU2Mf.mjs").then((n) => n.d);
 			return unwrap(await handleMenuList(ec.db, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -3141,7 +3056,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuGet } = await import("../../../menus-CmyIkRG5.mjs").then((n) => n.d);
+			const { handleMenuGet } = await import("../../../menus-LYALU2Mf.mjs").then((n) => n.d);
 			return unwrap(await handleMenuGet(ec.db, args.name, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -3156,7 +3071,7 @@ function createMcpServer(options = {}) {
 		requireScope(extra, "content:read");
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuTranslations } = await import("../../../menus-CmyIkRG5.mjs").then((n) => n.d);
+			const { handleMenuTranslations } = await import("../../../menus-LYALU2Mf.mjs").then((n) => n.d);
 			return unwrap(await handleMenuTranslations(ec.db, args.id));
 		} catch (error) {
 			return errorResult(error);
@@ -3176,7 +3091,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuCreate } = await import("../../../menus-CmyIkRG5.mjs").then((n) => n.d);
+			const { handleMenuCreate } = await import("../../../menus-LYALU2Mf.mjs").then((n) => n.d);
 			return unwrap(await handleMenuCreate(ec.db, {
 				name: args.name,
 				label: args.label,
@@ -3200,7 +3115,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuUpdate } = await import("../../../menus-CmyIkRG5.mjs").then((n) => n.d);
+			const { handleMenuUpdate } = await import("../../../menus-LYALU2Mf.mjs").then((n) => n.d);
 			return unwrap(await handleMenuUpdate(ec.db, args.name, {
 				label: args.label,
 				locale: args.locale
@@ -3222,7 +3137,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuDelete } = await import("../../../menus-CmyIkRG5.mjs").then((n) => n.d);
+			const { handleMenuDelete } = await import("../../../menus-LYALU2Mf.mjs").then((n) => n.d);
 			return unwrap(await handleMenuDelete(ec.db, args.name, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -3257,7 +3172,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getDineway(extra);
 		try {
-			const { handleMenuSetItems } = await import("../../../menus-CmyIkRG5.mjs").then((n) => n.d);
+			const { handleMenuSetItems } = await import("../../../menus-LYALU2Mf.mjs").then((n) => n.d);
 			return unwrap(await handleMenuSetItems(ec.db, args.name, args.items, { locale: args.locale }));
 		} catch (error) {
 			return errorResult(error);
@@ -3304,7 +3219,7 @@ function createMcpServer(options = {}) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getDineway(extra);
 		try {
-			const { handleSettingsGet } = await import("../../../settings-EzADu-dd.mjs").then((n) => n.r);
+			const { handleSettingsGet } = await import("../../../settings-Dje-PHXo.mjs").then((n) => n.r);
 			return unwrap(await handleSettingsGet(ec.db, ec.storage));
 		} catch (error) {
 			return errorResult(error);
@@ -3341,7 +3256,7 @@ function createMcpServer(options = {}) {
 					request
 				});
 			}
-			const { handleSettingsUpdate } = await import("../../../settings-EzADu-dd.mjs").then((n) => n.r);
+			const { handleSettingsUpdate } = await import("../../../settings-Dje-PHXo.mjs").then((n) => n.r);
 			const result = await handleSettingsUpdate(ec.db, ec.storage, settingsInput);
 			if (!result.success) return unwrap(result);
 			await logSiteActivitySafely(ec.db, locals, {
@@ -3413,8 +3328,13 @@ const POST = async ({ request, locals }) => {
 	const { dineway, user } = locals;
 	if (!dineway) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
 	if (!user) return apiError("UNAUTHORIZED", "Authentication required", 401);
+	let toolsService;
 	const server = createMcpServer({
-		seoProviderService: new SeoProviderEvidenceService(new ForgewaySeoGatewayClient()),
+		resolveDinewayToolsService: () => {
+			toolsService ??= createDinewayToolsRuntimeService();
+			return toolsService;
+		},
+		resolveDinewayToolsCredential: (provider, handlers) => new IntegrationCredentialStore(handlers.db).resolveForRuntime(provider),
 		pluginMcpRegistry: dineway.getPluginMcpRegistry(),
 		executePluginMcpCommand: createReviewedPluginMcpCommandExecutor()
 	});