implto-tos-axi 0.1.1

package/dist/src/config/credentials.js

@@ -0,0 +1,62 @@
+import { chmodSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir, platform } from "node:os";
+import { dirname, join } from "node:path";
+export function credentialsPath() {
+    if (platform() === "win32") {
+        const appData = process.env["APPDATA"] ?? join(homedir(), "AppData", "Roaming");
+        return join(appData, "implto-tos-axi", "credentials.json");
+    }
+    const base = process.env["XDG_CONFIG_HOME"] ?? join(homedir(), ".config");
+    return join(base, "implto-tos-axi", "credentials.json");
+}
+function readFile() {
+    try {
+        const parsed = JSON.parse(readFileSync(credentialsPath(), "utf8"));
+        if (parsed && typeof parsed === "object" && parsed.profiles)
+            return parsed;
+    }
+    catch {
+        // A missing or unreadable file is "not signed in", which every caller
+        // already handles. Failing here would make a corrupt file unrecoverable
+        // without knowing the path.
+    }
+    return { version: 1, profiles: {} };
+}
+function writeFile(file) {
+    const path = credentialsPath();
+    const dir = dirname(path);
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    writeFileSync(path, `${JSON.stringify(file, null, 2)}\n`, { mode: 0o600 });
+    if (platform() !== "win32") {
+        // mkdirSync's mode is masked by umask, so it is set again explicitly.
+        try {
+            chmodSync(dir, 0o700);
+            chmodSync(path, 0o600);
+        }
+        catch {
+            // A filesystem without POSIX modes is not a reason to refuse to work.
+        }
+    }
+}
+export function readCredential(profile) {
+    return readFile().profiles[profile] ?? null;
+}
+export function writeCredential(profile, credential) {
+    const file = readFile();
+    file.profiles[profile] = credential;
+    writeFile(file);
+}
+export function clearCredential(profile) {
+    const file = readFile();
+    if (!file.profiles[profile])
+        return false;
+    delete file.profiles[profile];
+    writeFile(file);
+    return true;
+}
+/** A token from the environment, which outranks anything on disk. */
+export function envToken() {
+    const token = process.env["TOS_TOKEN"]?.trim();
+    return token ? token : null;
+}
+//# sourceMappingURL=credentials.js.map

package/dist/src/config/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../../src/config/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAuC1C,MAAM,UAAU,eAAe;IAC7B,IAAI,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,QAAQ;IACf,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACnE,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ;YAAE,OAAO,MAAwB,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,wEAAwE;QACxE,4BAA4B;IAC9B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,SAAS,CAAC,IAAoB;IACrC,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,IAAI,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC3B,sEAAsE;QACtE,IAAI,CAAC;YACH,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACtB,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO,QAAQ,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,UAA6B;IAC5E,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,UAAU,CAAC;IACpC,SAAS,CAAC,IAAI,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9B,SAAS,CAAC,IAAI,CAAC,CAAC;IAChB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,QAAQ;IACtB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC;IAC/C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9B,CAAC"}

package/dist/src/config/profiles.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Where a deployment lives.
+ *
+ * One origin per profile, and every other address is derived from it - the MCP
+ * endpoint, the OAuth documents, the consent page. That is not a convenience:
+ * the origin *is* the OAuth issuer and the `resource` a token is minted for, so
+ * a client that talks to one address and authorizes against another has a
+ * credential that is valid for somebody else's server.
+ *
+ * The MCP path is the Hosting rewrite rather than the Cloud Run hostname behind
+ * it, for the same reason.
+ */
+export interface Profile {
+    readonly name: string;
+    readonly origin: string;
+    readonly mcpUrl: string;
+}
+export declare const PROFILE_NAMES: string[];
+export declare const DEFAULT_PROFILE = "prod";
+export declare function resolveProfile(input?: {
+    profile?: string | undefined;
+    url?: string | undefined;
+    mcpUrl?: string | undefined;
+}): Profile;

package/dist/src/config/profiles.js

@@ -0,0 +1,64 @@
+import { TosError } from "../errors.js";
+const MCP_PATH = "/mcp/transformation-os";
+const ORIGINS = {
+    prod: "https://implto-transformation-os.web.app",
+    dev: "https://digital-transformation-os-dev.web.app",
+    local: "http://localhost:4000",
+};
+export const PROFILE_NAMES = Object.keys(ORIGINS);
+export const DEFAULT_PROFILE = "prod";
+/**
+ * The headless equivalents of `--url` and `--mcp-url`.
+ *
+ * `TOS_TOKEN` alone is not enough for a machine pointed at anything but prod:
+ * without these it would have to repeat the address on every invocation, and
+ * the address is a property of the environment, not of the call. Flags still
+ * win, so a deliberate `--profile dev` is never overridden by a stale export.
+ */
+const envUrl = () => process.env["TOS_URL"]?.trim() || undefined;
+const envMcpUrl = () => process.env["TOS_MCP_URL"]?.trim() || undefined;
+export function resolveProfile(input) {
+    const url = input?.url ?? envUrl();
+    const mcpUrl = input?.mcpUrl ?? envMcpUrl();
+    const configured = input?.profile ? ORIGINS[input.profile] : undefined;
+    if (input?.profile && !configured && !url) {
+        throw new TosError(`Unknown profile "${input.profile}".`, "VALIDATION_ERROR", [
+            `Profiles: ${PROFILE_NAMES.join(", ")}`,
+            `Or point at a deployment directly: --url https://…`,
+        ]);
+    }
+    const origin = normalizeOrigin(url ?? configured ?? ORIGINS[DEFAULT_PROFILE] ?? "");
+    return {
+        // An address given without a profile is still named after the deployment
+        // it turns out to be, because the name is the key a credential is stored
+        // under: calling dev "prod" filed a dev token where the prod one belongs.
+        name: input?.profile ?? nameOf(origin),
+        origin,
+        // `--mcp-url` exists for the local case, where the MCP server runs as its
+        // own process on another port instead of behind the Hosting rewrite.
+        mcpUrl: mcpUrl ?? `${origin}${MCP_PATH}`,
+    };
+}
+/** The profile an origin belongs to, or its host when it is not one of ours. */
+function nameOf(origin) {
+    const known = Object.entries(ORIGINS).find(([, o]) => normalizeOrigin(o) === origin);
+    if (known)
+        return known[0];
+    try {
+        return new URL(origin).host;
+    }
+    catch {
+        return DEFAULT_PROFILE;
+    }
+}
+function normalizeOrigin(raw) {
+    try {
+        return new URL(raw).origin;
+    }
+    catch {
+        throw new TosError(`"${raw}" is not a URL.`, "VALIDATION_ERROR", [
+            "Pass an origin, e.g. --url https://transformation.example",
+        ]);
+    }
+}
+//# sourceMappingURL=profiles.js.map

package/dist/src/config/profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../../src/config/profiles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAoBxC,MAAM,QAAQ,GAAG,wBAAwB,CAAC;AAE1C,MAAM,OAAO,GAA2B;IACtC,IAAI,EAAE,0CAA0C;IAChD,GAAG,EAAE,+CAA+C;IACpD,KAAK,EAAE,uBAAuB;CAC/B,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAClD,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AAEtC;;;;;;;GAOG;AACH,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACjE,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AAExE,MAAM,UAAU,cAAc,CAAC,KAI9B;IACC,MAAM,GAAG,GAAG,KAAK,EAAE,GAAG,IAAI,MAAM,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,IAAI,SAAS,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEvE,IAAI,KAAK,EAAE,OAAO,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1C,MAAM,IAAI,QAAQ,CAAC,oBAAoB,KAAK,CAAC,OAAO,IAAI,EAAE,kBAAkB,EAAE;YAC5E,aAAa,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACvC,oDAAoD;SACrD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,IAAI,UAAU,IAAI,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,OAAO;QACL,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,EAAE,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC;QACtC,MAAM;QACN,0EAA0E;QAC1E,qEAAqE;QACrE,MAAM,EAAE,MAAM,IAAI,GAAG,MAAM,GAAG,QAAQ,EAAE;KACzC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,MAAM,CAAC,MAAc;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;IACrF,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAW,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,eAAe,CAAC;IACzB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,IAAI,GAAG,iBAAiB,EAAE,kBAAkB,EAAE;YAC/D,2DAA2D;SAC5D,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/src/errors.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The CLI's own error type. Zero dependencies, on purpose: `axi-sdk-js` is
+ * ESM-only with an import-only export map, so it stays behind the CLI boundary
+ * and everything else throws this. `cli.ts` converts it on the way out, and the
+ * structure matches what the SDK renders - a message, a machine-readable code
+ * and actionable suggestions - so nothing is lost.
+ *
+ * Every error names the fix. An agent that cannot see what to do next will
+ * either guess or give up, and both are worse than a sentence.
+ */
+export declare class TosError extends Error {
+    readonly code: string;
+    readonly suggestions: string[];
+    constructor(message: string, code: string, suggestions?: string[]);
+}
+export declare function isTosError(value: unknown): value is TosError;
+export declare const notSignedIn: (profile: string) => TosError;
+export declare const credentialRejected: (profile: string) => TosError;
+export declare const noBinding: () => TosError;
+export declare const noWorkspace: () => TosError;
+export declare const ambiguous: (what: string, candidates: string[]) => TosError;

package/dist/src/errors.js

@@ -0,0 +1,40 @@
+/**
+ * The CLI's own error type. Zero dependencies, on purpose: `axi-sdk-js` is
+ * ESM-only with an import-only export map, so it stays behind the CLI boundary
+ * and everything else throws this. `cli.ts` converts it on the way out, and the
+ * structure matches what the SDK renders - a message, a machine-readable code
+ * and actionable suggestions - so nothing is lost.
+ *
+ * Every error names the fix. An agent that cannot see what to do next will
+ * either guess or give up, and both are worse than a sentence.
+ */
+export class TosError extends Error {
+    code;
+    suggestions;
+    constructor(message, code, suggestions = []) {
+        super(message);
+        this.name = "TosError";
+        this.code = code;
+        this.suggestions = suggestions;
+    }
+}
+export function isTosError(value) {
+    return value instanceof TosError;
+}
+export const notSignedIn = (profile) => new TosError(`No credential for the "${profile}" profile.`, "AUTH_MISSING", [
+    `implto-tos-axi login --profile ${profile}`,
+    `Or set TOS_TOKEN to a personal key from Settings, Personal credentials.`,
+]);
+export const credentialRejected = (profile) => new TosError(`The credential for "${profile}" was refused. It may have been revoked, or it may have expired.`, "AUTH_INVALID", [`implto-tos-axi login --profile ${profile}`]);
+export const noBinding = () => new TosError("This directory is not bound to a Transformation OS project.", "NO_BINDING", [
+    "implto-tos-axi init --workspace <name> --project <key>",
+    "implto-tos-axi init   # run it bare to list what you can reach",
+]);
+export const noWorkspace = () => new TosError("No workspace: this directory is not bound, and --workspace was not given.", "NO_BINDING", [
+    'implto-tos-axi components list --workspace "<name>"',
+    "implto-tos-axi init --workspace <name> --project <key>   # to bind this directory",
+]);
+export const ambiguous = (what, candidates) => new TosError(`"${what}" matches more than one: ${candidates.join(", ")}.`, "AMBIGUOUS", [
+    "Name it exactly, or pass the id.",
+]);
+//# sourceMappingURL=errors.js.map

package/dist/src/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,IAAI,CAAS;IACb,WAAW,CAAW;IAE/B,YAAY,OAAe,EAAE,IAAY,EAAE,cAAwB,EAAE;QACnE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,KAAK,YAAY,QAAQ,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,EAAE,CAC7C,IAAI,QAAQ,CAAC,0BAA0B,OAAO,YAAY,EAAE,cAAc,EAAE;IAC1E,kCAAkC,OAAO,EAAE;IAC3C,yEAAyE;CAC1E,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAE,EAAE,CACpD,IAAI,QAAQ,CACV,uBAAuB,OAAO,kEAAkE,EAChG,cAAc,EACd,CAAC,kCAAkC,OAAO,EAAE,CAAC,CAC9C,CAAC;AAEJ,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,EAAE,CAC5B,IAAI,QAAQ,CAAC,6DAA6D,EAAE,YAAY,EAAE;IACxF,wDAAwD;IACxD,gEAAgE;CACjE,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,EAAE,CAC9B,IAAI,QAAQ,CACV,2EAA2E,EAC3E,YAAY,EACZ;IACE,qDAAqD;IACrD,mFAAmF;CACpF,CACF,CAAC;AAEJ,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,UAAoB,EAAE,EAAE,CAC9D,IAAI,QAAQ,CAAC,IAAI,IAAI,4BAA4B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE;IACtF,kCAAkC;CACnC,CAAC,CAAC"}

package/dist/src/flags.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Spec-driven flag parsing.
+ *
+ * The SDK owns the shape of the invocation (`<bin> <command> ...`) but not the
+ * flags inside a command, so this fills that gap with one rule: an unknown
+ * flag is a usage error, never a silently dropped argument. A dropped flag is
+ * worse than an error - the command appears to succeed while doing something
+ * the caller did not ask for - and an agent that cannot see the mistake will
+ * repeat it.
+ *
+ * Errors are self-correcting in one turn: they name the offending flag, the
+ * nearest real one when there is a plausible match, and the full list of what
+ * this command accepts, so nothing has to go and read `--help` to recover.
+ */
+export type FlagValue = string | number | boolean | string[];
+export interface FlagSpec {
+    readonly kind: "boolean" | "string" | "number";
+    readonly description: string;
+    /** Placeholder shown in help, e.g. `dir` renders as `--out <dir>`. */
+    readonly placeholder?: string;
+    /**
+     * A value that makes sense for this flag, shown when parsing fails.
+     *
+     * Every numeric flag used to be illustrated with `30`, which for a playback
+     * multiplier is not a typo away from right - it is thirty times speed, and
+     * reads as though the flag takes seconds.
+     */
+    readonly example?: string | number;
+    /** Bounds for a numeric flag. Outside them the value produces nothing usable. */
+    readonly min?: number;
+    readonly max?: number;
+    /** Collect every occurrence instead of keeping the last. String flags only. */
+    readonly repeat?: boolean;
+}
+export type FlagSpecs = Record<string, FlagSpec>;
+export interface ParsedArgs {
+    readonly positionals: readonly string[];
+    readonly flags: Readonly<Record<string, FlagValue>>;
+}
+/** The closest known flag to `input`, when one is close enough to mean it. */
+export declare function nearestFlag(input: string, known: readonly string[]): string | null;
+/**
+ * Parses `args` against `specs`.
+ *
+ * Supports `--flag value`, `--flag=value`, `--no-flag` for booleans, and `--`
+ * to stop flag parsing. Everything else is a positional.
+ */
+export declare function parseFlags(args: readonly string[], specs: FlagSpecs): ParsedArgs;
+/** Renders a command's flags for its `--help` block. */
+export declare function renderFlagHelp(specs: FlagSpecs): string[];

package/dist/src/flags.js

@@ -0,0 +1,143 @@
+import { TosError } from "./errors.js";
+/**
+ * Levenshtein distance, bounded by the shorter string. Used only to decide
+ * whether a typo is close enough to a real flag to be worth suggesting.
+ */
+function distance(a, b) {
+    const rows = a.length + 1;
+    const cols = b.length + 1;
+    let prev = Array.from({ length: cols }, (_, i) => i);
+    for (let i = 1; i < rows; i++) {
+        const curr = [i, ...Array(cols - 1).fill(0)];
+        for (let j = 1; j < cols; j++) {
+            const substitution = (prev[j - 1] ?? 0) + (a[i - 1] === b[j - 1] ? 0 : 1);
+            const deletion = (prev[j] ?? 0) + 1;
+            const insertion = (curr[j - 1] ?? 0) + 1;
+            curr[j] = Math.min(substitution, deletion, insertion);
+        }
+        prev = curr;
+    }
+    return prev[cols - 1] ?? Math.max(a.length, b.length);
+}
+/** The closest known flag to `input`, when one is close enough to mean it. */
+export function nearestFlag(input, known) {
+    let best = null;
+    let bestDistance = Infinity;
+    for (const candidate of known) {
+        const d = distance(input, candidate);
+        if (d < bestDistance) {
+            bestDistance = d;
+            best = candidate;
+        }
+    }
+    // Two edits on a short flag is already a different flag, not a typo.
+    return best !== null && bestDistance <= Math.max(2, Math.floor(input.length / 3)) ? best : null;
+}
+function usage(specs) {
+    const names = Object.keys(specs);
+    return names.length > 0 ? `Accepts: ${names.map((n) => `--${n}`).join(", ")}` : "";
+}
+function unknownFlag(name, specs) {
+    const known = Object.keys(specs);
+    const near = nearestFlag(name, known);
+    const help = [
+        ...(near ? [`Did you mean \`--${near}\`?`] : []),
+        ...(known.length > 0 ? [usage(specs)] : ["This command accepts no flags"]),
+    ];
+    throw new TosError(`Unknown flag: --${name}`, "VALIDATION_ERROR", help);
+}
+function numeric(name, raw, spec) {
+    const example = `Example: --${name} ${spec.example ?? 30}`;
+    const value = Number(raw);
+    if (!Number.isFinite(value)) {
+        throw new TosError(`--${name} expects a number, got \`${raw}\``, "VALIDATION_ERROR", [example]);
+    }
+    // Checked here rather than wherever the value lands, so a nonsensical one is
+    // refused before a browser opens. `--pace 0` used to record a zero-second
+    // clip and then advise re-cutting it slower.
+    const { min, max } = spec;
+    if ((min !== undefined && value < min) || (max !== undefined && value > max)) {
+        throw new TosError(`--${name} has to be ${describeRange(min, max)}, got ${value}`, "VALIDATION_ERROR", [example]);
+    }
+    return value;
+}
+function describeRange(min, max) {
+    if (min !== undefined && max !== undefined)
+        return `between ${min} and ${max}`;
+    if (min !== undefined)
+        return `at least ${min}`;
+    return `at most ${max}`;
+}
+/**
+ * Parses `args` against `specs`.
+ *
+ * Supports `--flag value`, `--flag=value`, `--no-flag` for booleans, and `--`
+ * to stop flag parsing. Everything else is a positional.
+ */
+export function parseFlags(args, specs) {
+    const positionals = [];
+    const flags = {};
+    let literal = false;
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (literal || !arg.startsWith("--")) {
+            positionals.push(arg);
+            continue;
+        }
+        if (arg === "--") {
+            literal = true;
+            continue;
+        }
+        const eq = arg.indexOf("=");
+        const name = (eq === -1 ? arg.slice(2) : arg.slice(2, eq)).trim();
+        const inlineValue = eq === -1 ? null : arg.slice(eq + 1);
+        // `--no-x` turns off a boolean `x`. Only meaningful for booleans, so an
+        // unknown `--no-y` still reports the flag the caller actually typed.
+        if (!specs[name] && name.startsWith("no-") && specs[name.slice(3)]?.kind === "boolean") {
+            flags[name.slice(3)] = false;
+            continue;
+        }
+        const spec = specs[name];
+        if (!spec)
+            unknownFlag(name, specs);
+        if (spec.kind === "boolean") {
+            if (inlineValue !== null && inlineValue !== "true" && inlineValue !== "false") {
+                throw new TosError(`--${name} is a switch and takes no value`, "VALIDATION_ERROR", [
+                    `Pass \`--${name}\` on its own, or \`--no-${name}\` to turn it off`,
+                ]);
+            }
+            flags[name] = inlineValue !== "false";
+            continue;
+        }
+        const raw = inlineValue ?? args[++i];
+        if (raw === undefined) {
+            throw new TosError(`--${name} expects a value`, "VALIDATION_ERROR", [
+                `Pass it as \`--${name} <${spec.placeholder ?? "value"}>\``,
+            ]);
+        }
+        if (spec.kind === "number") {
+            flags[name] = numeric(name, raw, spec);
+        }
+        else if (spec.repeat) {
+            const existing = flags[name];
+            flags[name] = Array.isArray(existing) ? [...existing, raw] : [raw];
+        }
+        else {
+            flags[name] = raw;
+        }
+    }
+    return { positionals, flags };
+}
+/** Renders a command's flags for its `--help` block. */
+export function renderFlagHelp(specs) {
+    const entries = Object.entries(specs);
+    if (entries.length === 0)
+        return [];
+    const rendered = entries.map(([name, spec]) => ({
+        left: spec.kind === "boolean" ? `--${name}` : `--${name} <${spec.placeholder ?? "value"}>`,
+        description: spec.description,
+    }));
+    const width = Math.max(...rendered.map((r) => r.left.length));
+    return rendered.map((r) => `  ${r.left.padEnd(width)}  ${r.description}`);
+}
+//# sourceMappingURL=flags.js.map

package/dist/src/flags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flags.js","sourceRoot":"","sources":["../../src/flags.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AA6CvC;;;GAGG;AACH,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1B,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,CAAS,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9B,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1E,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;AACxD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,KAAwB;IACjE,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,YAAY,GAAG,QAAQ,CAAC;IAC5B,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,YAAY,EAAE,CAAC;YACrB,YAAY,GAAG,CAAC,CAAC;YACjB,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,qEAAqE;IACrE,OAAO,IAAI,KAAK,IAAI,IAAI,YAAY,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAClG,CAAC;AAED,SAAS,KAAK,CAAC,KAAgB;IAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAgB;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG;QACX,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,oBAAoB,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC;KAC3E,CAAC;IACF,MAAM,IAAI,QAAQ,CAAC,mBAAmB,IAAI,EAAE,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,GAAW,EAAE,IAAc;IACxD,MAAM,OAAO,GAAG,cAAc,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,QAAQ,CAAC,KAAK,IAAI,4BAA4B,GAAG,IAAI,EAAE,kBAAkB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,6CAA6C;IAC7C,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,QAAQ,CAChB,KAAK,IAAI,cAAc,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,KAAK,EAAE,EAC9D,kBAAkB,EAClB,CAAC,OAAO,CAAC,CACV,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,GAAuB,EAAE,GAAuB;IACrE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,WAAW,GAAG,QAAQ,GAAG,EAAE,CAAC;IAC/E,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,YAAY,GAAG,EAAE,CAAC;IAChD,OAAO,WAAW,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAuB,EAAE,KAAgB;IAClE,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,KAAK,GAA8B,EAAE,CAAC;IAC5C,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QAE9B,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QAED,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClE,MAAM,WAAW,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAEzD,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YACvF,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;YAC7B,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI;YAAE,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAEpC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,MAAM,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;gBAC9E,MAAM,IAAI,QAAQ,CAAC,KAAK,IAAI,iCAAiC,EAAE,kBAAkB,EAAE;oBACjF,YAAY,IAAI,4BAA4B,IAAI,mBAAmB;iBACpE,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,KAAK,OAAO,CAAC;YACtC,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,WAAW,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,QAAQ,CAAC,KAAK,IAAI,kBAAkB,EAAE,kBAAkB,EAAE;gBAClE,kBAAkB,IAAI,KAAK,IAAI,CAAC,WAAW,IAAI,OAAO,KAAK;aAC5D,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,cAAc,CAAC,KAAgB;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,IAAI,CAAC,WAAW,IAAI,OAAO,GAAG;QAC1F,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAC,CAAC;IACJ,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAC5E,CAAC"}

package/dist/src/index.d.ts

@@ -0,0 +1,6 @@
+export { DESCRIPTION } from "./cli.js";
+export { VERSION } from "./version.js";
+export { TosError, isTosError } from "./errors.js";
+export { MCP_SCOPES } from "./scopes.js";
+export { BINDING_FILENAME, findBinding, type Binding } from "./config/binding.js";
+export { PROFILE_NAMES, DEFAULT_PROFILE, resolveProfile, type Profile } from "./config/profiles.js";

package/dist/src/index.js

@@ -0,0 +1,7 @@
+export { DESCRIPTION } from "./cli.js";
+export { VERSION } from "./version.js";
+export { TosError, isTosError } from "./errors.js";
+export { MCP_SCOPES } from "./scopes.js";
+export { BINDING_FILENAME, findBinding } from "./config/binding.js";
+export { PROFILE_NAMES, DEFAULT_PROFILE, resolveProfile } from "./config/profiles.js";
+//# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAgB,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAgB,MAAM,sBAAsB,CAAC"}

package/dist/src/mcp/client.d.ts

@@ -0,0 +1,85 @@
+import type { OAuthClientProvider } from "@modelcontextprotocol/sdk/client/auth.js";
+/**
+ * One exchange with the MCP server.
+ *
+ * The server is stateless, so every invocation does its own `initialize` and
+ * then one request. Two round trips per command is the cost of not holding a
+ * session between processes, and it is the right trade for a CLI that an agent
+ * shells out to.
+ *
+ * No tool is described here. The point of reaching the server this way rather
+ * than mounting it is that no tool schema ever enters a model's prompt: the
+ * catalog is fetched on demand by `tools list` and `tools show`, for the one
+ * tool a task turns out to need.
+ */
+export interface CallOptions {
+    mcpUrl: string;
+    /** A bearer token, for a pasted key or `TOS_TOKEN`. */
+    token?: string | undefined;
+    /** An OAuth provider, which renews on its own. Mutually exclusive with token. */
+    authProvider?: OAuthClientProvider | undefined;
+    profile: string;
+}
+/** A JSON Schema property, in the shapes this server actually emits. */
+export interface SchemaProperty {
+    type?: string | string[];
+    description?: string;
+    enum?: readonly (string | number)[];
+    nullable?: boolean;
+    items?: {
+        type?: string;
+    };
+}
+export interface ToolSchema {
+    type?: string;
+    properties?: Record<string, SchemaProperty>;
+    required?: readonly string[];
+}
+export interface McpTool {
+    name: string;
+    description?: string;
+    inputSchema?: ToolSchema;
+    /**
+     * No `domain` here, although the server sends one: the SDK drops annotation
+     * keys it does not know. Areas come from the catalog - see `grouping()`.
+     */
+    annotations?: {
+        title?: string;
+    };
+}
+export interface DomainEntry {
+    id: string;
+    title: string;
+    description: string;
+    keywords?: string[];
+    instructions?: string;
+    toolCount?: number;
+    tools?: string[];
+}
+export interface DomainCatalog {
+    version?: number;
+    domains: DomainEntry[];
+}
+/**
+ * Where the server publishes its domain catalog. A constant rather than a
+ * lookup through `resources/list`: one name, and a server that does not serve
+ * it answers with an error we turn into `null`.
+ */
+export declare const TOOL_DOMAINS_URI = "transformation-os://tool-domains";
+export declare function callTool(options: CallOptions, name: string, args?: Record<string, unknown>): Promise<unknown>;
+/**
+ * The tools this credential may call.
+ *
+ * Already narrowed by the server to the domains the credential was granted, so
+ * what comes back is what will actually run - not a catalog with holes in it
+ * that only show up as a refusal.
+ */
+export declare function listTools(options: CallOptions): Promise<McpTool[]>;
+/**
+ * The domain catalog, or null when this server does not group its tools.
+ *
+ * Unlike `tools/list` the catalog is not narrowed by the grant, which is what
+ * lets `tools domains` say "this exists and you do not have it" rather than
+ * leaving a credential's holder wondering where an area went.
+ */
+export declare function readDomains(options: CallOptions): Promise<DomainCatalog | null>;