mcp-google-multi 6.0.0-beta.2 → 6.0.0-beta.3

package/dist/tools/slides.js

@@ -1,13 +1,17 @@
 import { z } from 'zod';
 import { slides as slidesClient } from '@googleapis/slides';
-import { accountAliasSchema } from '../accounts.js';
+import { accountArgLive } from '../accounts.js';
 import { getClient } from '../client.js';
 import { handleGoogleApiError } from './_errors.js';
 import { coerceArray, coerceBoolean, coerceJson } from './_coerce.js';
 import { sliceClean } from '../trim.js';
-const accountEnum = accountAliasSchema.optional();
 const SLIDE_TEXT_DIGEST_CHARS = 200;
-export function registerSlidesTools(server) {
+export function registerSlidesTools(server, deps = {}) {
+    // Per-registry, LIVE account enum + injectable client (S1.10): the
+    // schema follows the registry's account view at parse time, and the
+    // custody path is the context's, not the process global.
+    const accountEnum = accountArgLive(() => server.accountAliases()).optional();
+    const getClientFn = deps.getClientFn ?? getClient;
     server.registerTool('slides_create', {
         description: 'Create a new Google Slides presentation (starts with one blank slide)',
         inputSchema: {
@@ -16,7 +20,7 @@ export function registerSlidesTools(server) {
         },
     }, async ({ account, title }) => {
         try {
-            const auth = await getClient(account);
+            const auth = await getClientFn(account);
             const slides = slidesClient({ version: 'v1', auth });
             const res = await slides.presentations.create({ requestBody: { title } });
             return {
@@ -41,7 +45,7 @@ export function registerSlidesTools(server) {
         },
     }, async ({ account, presentationId, full }) => {
         try {
-            const auth = await getClient(account);
+            const auth = await getClientFn(account);
             const slides = slidesClient({ version: 'v1', auth });
             const res = await slides.presentations.get({ presentationId });
             const payload = full ? res.data : summarizePresentation(res.data);
@@ -62,7 +66,7 @@ export function registerSlidesTools(server) {
         },
     }, async ({ account, presentationId, pageObjectId }) => {
         try {
-            const auth = await getClient(account);
+            const auth = await getClientFn(account);
             const slides = slidesClient({ version: 'v1', auth });
             const res = await slides.presentations.pages.get({ presentationId, pageObjectId });
             return {
@@ -85,7 +89,7 @@ export function registerSlidesTools(server) {
         },
     }, async ({ account, presentationId, pageObjectId, mimeType, thumbnailSize }) => {
         try {
-            const auth = await getClient(account);
+            const auth = await getClientFn(account);
             const slides = slidesClient({ version: 'v1', auth });
             const res = await slides.presentations.pages.getThumbnail({
                 presentationId,
@@ -116,7 +120,7 @@ export function registerSlidesTools(server) {
         },
     }, async ({ account, presentationId, requests, writeControl }) => {
         try {
-            const auth = await getClient(account);
+            const auth = await getClientFn(account);
             const slides = slidesClient({ version: 'v1', auth });
             const res = await slides.presentations.batchUpdate({
                 presentationId,
@@ -180,6 +184,9 @@ export function summarizePresentation(p) {
         hint: 'Pass full:true for the raw Presentation JSON, or slides_page_get for one slide.',
     };
 }
-function handleSlidesError(error, account) {
-    return handleGoogleApiError(error, account, "Slides tools require the optional \"slides\" scope bundle. Add GOOGLE_OPTIONAL_SCOPES=slides (or include \"slides\" in the list) and re-auth.");
+export function handleSlidesError(error, account) {
+    return handleGoogleApiError(error, account, {
+        scope: "Slides tools require the optional \"slides\" scope bundle. Add GOOGLE_OPTIONAL_SCOPES=slides (or include \"slides\" in the list) and re-auth.",
+        bundle: 'slides',
+    });
 }

package/dist/tools/tasks.d.ts

@@ -1,2 +1,3 @@
 import type { ToolRegistry } from '../registry.js';
-export declare function registerTasksTools(server: ToolRegistry): void;
+import { type CuratedToolDeps } from '../client.js';
+export declare function registerTasksTools(server: ToolRegistry, deps?: CuratedToolDeps): void;

package/dist/tools/tasks.js

@@ -1,11 +1,15 @@
 import { z } from 'zod';
 import { coerceBoolean } from './_coerce.js';
 import { tasks as tasksClient } from '@googleapis/tasks';
-import { accountAliasSchema } from '../accounts.js';
+import { accountArgLive } from '../accounts.js';
 import { getClient } from '../client.js';
 import { handleGoogleApiError, invalidParams } from './_errors.js';
-const accountEnum = accountAliasSchema.optional();
-export function registerTasksTools(server) {
+export function registerTasksTools(server, deps = {}) {
+    // Per-registry, LIVE account enum + injectable client (S1.10): the
+    // schema follows the registry's account view at parse time, and the
+    // custody path is the context's, not the process global.
+    const accountEnum = accountArgLive(() => server.accountAliases()).optional();
+    const getClientFn = deps.getClientFn ?? getClient;
     // ─── Tasklists ─────────────────────────────────────────────────────────
     server.registerTool('tasks_lists_list', {
         description: 'List all tasklists (the user\'s top-level task containers)',
@@ -16,7 +20,7 @@ export function registerTasksTools(server) {
         },
     }, async ({ account, maxResults, pageToken }) => {
         try {
-            const auth = await getClient(account);
+            const auth = await getClientFn(account);
             const tasks = tasksClient({ version: 'v1', auth });
             const res = await tasks.tasklists.list({
                 maxResults: maxResults ?? 100,
@@ -38,7 +42,7 @@ export function registerTasksTools(server) {
         },
     }, async ({ account, tasklistId }) => {
         try {
-            const auth = await getClient(account);
+            const auth = await getClientFn(account);
             const tasks = tasksClient({ version: 'v1', auth });
             const res = await tasks.tasklists.get({ tasklist: tasklistId });
             return {
@@ -57,7 +61,7 @@ export function registerTasksTools(server) {
         },
     }, async ({ account, title }) => {
         try {
-            const auth = await getClient(account);
+            const auth = await getClientFn(account);
             const tasks = tasksClient({ version: 'v1', auth });
             const res = await tasks.tasklists.insert({
                 requestBody: { title },
@@ -79,7 +83,7 @@ export function registerTasksTools(server) {
         },
     }, async ({ account, tasklistId, title }) => {
         try {
-            const auth = await getClient(account);
+            const auth = await getClientFn(account);
             const tasks = tasksClient({ version: 'v1', auth });
             const res = await tasks.tasklists.patch({
                 tasklist: tasklistId,
@@ -101,7 +105,7 @@ export function registerTasksTools(server) {
         },
     }, async ({ account, tasklistId }) => {
         try {
-            const auth = await getClient(account);
+            const auth = await getClientFn(account);
             const tasks = tasksClient({ version: 'v1', auth });
             await tasks.tasklists.delete({ tasklist: tasklistId });
             return {
@@ -132,7 +136,7 @@ export function registerTasksTools(server) {
         },
     }, async ({ account, tasklistId, ...params }) => {
         try {
-            const auth = await getClient(account);
+            const auth = await getClientFn(account);
             const tasks = tasksClient({ version: 'v1', auth });
             const res = await tasks.tasks.list({
                 tasklist: tasklistId,
@@ -155,7 +159,7 @@ export function registerTasksTools(server) {
         },
     }, async ({ account, tasklistId, taskId }) => {
         try {
-            const auth = await getClient(account);
+            const auth = await getClientFn(account);
             const tasks = tasksClient({ version: 'v1', auth });
             const res = await tasks.tasks.get({ tasklist: tasklistId, task: taskId });
             return {
@@ -180,7 +184,7 @@ export function registerTasksTools(server) {
         },
     }, async ({ account, tasklistId, title, notes, due, status, parent, previous }) => {
         try {
-            const auth = await getClient(account);
+            const auth = await getClientFn(account);
             const tasks = tasksClient({ version: 'v1', auth });
             const requestBody = { title };
             if (notes !== undefined)
@@ -216,7 +220,7 @@ export function registerTasksTools(server) {
         },
     }, async ({ account, tasklistId, taskId, title, notes, due, status }) => {
         try {
-            const auth = await getClient(account);
+            const auth = await getClientFn(account);
             const tasks = tasksClient({ version: 'v1', auth });
             const requestBody = {};
             if (title !== undefined)
@@ -252,7 +256,7 @@ export function registerTasksTools(server) {
         },
     }, async ({ account, tasklistId, taskId }) => {
         try {
-            const auth = await getClient(account);
+            const auth = await getClientFn(account);
             const tasks = tasksClient({ version: 'v1', auth });
             await tasks.tasks.delete({ tasklist: tasklistId, task: taskId });
             return {
@@ -275,7 +279,7 @@ export function registerTasksTools(server) {
         },
     }, async ({ account, tasklistId, taskId, parent, previous, destinationTasklist }) => {
         try {
-            const auth = await getClient(account);
+            const auth = await getClientFn(account);
             const tasks = tasksClient({ version: 'v1', auth });
             const res = await tasks.tasks.move({
                 tasklist: tasklistId,
@@ -300,7 +304,7 @@ export function registerTasksTools(server) {
         },
     }, async ({ account, tasklistId }) => {
         try {
-            const auth = await getClient(account);
+            const auth = await getClientFn(account);
             const tasks = tasksClient({ version: 'v1', auth });
             await tasks.tasks.clear({ tasklist: tasklistId });
             return {

package/dist/trim.d.ts

@@ -6,6 +6,11 @@ export interface CappedText {
 }
 export declare function capText(text: string, maxChars: number, offset?: number): CappedText;
 export declare function sliceClean(text: string, max: number): string;
+/** An untrusted value made fit for one log line: never throws, at most `max`
+ * characters of it (then `...(len=N)`), each unsafe character as a literal
+ * `\uXXXX`. Backslash stays as is, so a value already through here comes back
+ * unchanged and a clean short value keeps its exact text. */
+export declare function logSafe(value: unknown, max: number): string;
 /** Largest prefix whose JSON encoding (the wrapping quotes included) fits
  * `maxEncoded`. Slicing raw characters overshoots whenever the text contains
  * quotes or backslashes, which JSON.stringify doubles: the escape hatch's

package/dist/trim.js

@@ -11,6 +11,26 @@ export function sliceClean(text, max) {
     const sliced = text.slice(0, max);
     return /[\uD800-\uDBFF]$/.test(sliced) ? sliced.slice(0, -1) : sliced;
 }
+// C0, DEL and C1 (NEL, 8-bit CSI and OSC) can end a line or drive a terminal;
+// the line and paragraph separators end a line for many readers; the bidi and
+// invisible format controls make a line read differently from its bytes.
+const LOG_UNSAFE = /[\p{Cc}\u061c\u200e\u200f\u202a-\u202e\u2028\u2029\u2066-\u2069]/gu;
+/** An untrusted value made fit for one log line: never throws, at most `max`
+ * characters of it (then `...(len=N)`), each unsafe character as a literal
+ * `\uXXXX`. Backslash stays as is, so a value already through here comes back
+ * unchanged and a clean short value keeps its exact text. */
+export function logSafe(value, max) {
+    let text;
+    try {
+        text = String(value);
+    }
+    catch {
+        return '<unprintable>';
+    }
+    const cut = text.length > max ? sliceClean(text, max) : text;
+    const escaped = cut.replace(LOG_UNSAFE, (c) => `\\u${c.charCodeAt(0).toString(16).padStart(4, '0')}`);
+    return cut === text ? escaped : `${escaped}...(len=${text.length})`;
+}
 /** Largest prefix whose JSON encoding (the wrapping quotes included) fits
  * `maxEncoded`. Slicing raw characters overshoots whenever the text contains
  * quotes or backslashes, which JSON.stringify doubles: the escape hatch's

package/dist/usage-metrics.d.ts

@@ -86,6 +86,26 @@ export interface InitOptions {
     now?: () => number;
     monotonic?: () => number;
     log?: (line: string) => void;
+    /** Default true. Three chains correlate CONSECUTIVE calls, which is only
+     * meaningful when one caller owns the whole process: the retry and bigram
+     * chains, and pendingMid (the escape hatch's resolved methodId, attached to
+     * the next google_api_call event's `mid`). A host serving several callers
+     * sets false so none of the three ever cross-link a call between tenants.
+     * DayAgg shape is unchanged (retries/bigrams stay empty maps);
+     * escape.methods still counts every resolved call either way. */
+    sequencingEnabled?: boolean;
+    /** Default true. When false, no events.jsonl / events.1.jsonl is ever
+     * created or appended to; only agg/ exists. A host serving several callers
+     * sets false: each event line carries a minute timestamp, the boot id and a
+     * per-process sequence number, which can be joined against a per-caller log
+     * such as an audit trail; the day aggregate keeps the same counters without
+     * order. */
+    eventLog?: boolean;
+    /** Default none. A host's own closed slug set, unioned with
+     * KNOWN_ERROR_SLUGS for this instance only; each entry must match
+     * /^[A-Za-z][A-Za-z0-9_]{0,63}$/ or it is dropped silently. Absent,
+     * behavior is byte-identical to today. */
+    extraErrorSlugs?: readonly string[];
 }
 /** Deep-add b into a for the DayAgg shape (numbers add, maps union). */
 export declare function mergeDay(a: DayAgg, b: DayAgg): DayAgg;
@@ -108,6 +128,9 @@ export declare class Metrics {
     private dirty;
     private failures;
     private disabled;
+    private readonly sequencing;
+    private readonly eventLog;
+    private readonly errorSlugs;
     constructor(opts: InitOptions);
     private day;
     private initStorage;

package/dist/usage-metrics.js

@@ -33,10 +33,11 @@ const TOOL_NAME_RE = /^[a-z][a-z0-9_]{0,63}$/;
 // Declared argument keys are camelCase identifiers, some dotted
 // (groupKey.id, debugOptions.enableDebugging).
 const ARG_KEY_RE = /^[A-Za-z][A-Za-z0-9_.]{0,63}$/;
+const EXTRA_ERROR_SLUG_RE = /^[A-Za-z][A-Za-z0-9_]{0,63}$/;
 /** Union of every `error:` slug literal emitted anywhere in src/ (kept honest
  * by a set-equality grep test). Anything outside buckets to `other`. */
 export const KNOWN_ERROR_SLUGS = new Set([
-    'E_ALIAS_EXISTS', 'E_CIMD_INVALID', 'E_ENV_ACCOUNTS_MODE', 'E_MCP_TOKEN_INVALID',
+    'E_ALIAS_EXISTS', 'E_CIMD_INVALID', 'E_CIMD_SSRF_BLOCKED', 'E_ENV_ACCOUNTS_MODE', 'E_MCP_TOKEN_INVALID',
     'E_NO_DEFAULT_ACCOUNT', 'E_UNKNOWN_BUNDLE', 'E_VALIDATION', 'ambiguous',
     'api_not_enabled', 'auth_required', 'bad_request', 'binary', 'binary_unsupported',
     'confirmation_declined', 'diagnose_failed', 'discovery_unavailable', 'dispatch_timeout',
@@ -44,7 +45,7 @@ export const KNOWN_ERROR_SLUGS = new Set([
     'insufficient_scope', 'internal', 'invalid_client', 'invalid_client_metadata',
     'invalid_grant', 'invalid_params', 'invalid_query', 'invalid_request',
     'invalid_scope', 'network_error', 'not_found', 'rate_limited',
-    'reauth_required', 'recipient_not_allowed', 'too_large', 'toolset_disabled', 'unknown_api',
+    'reauth_required', 'recipient_not_allowed', 'temporarily_unavailable', 'tenant_not_found', 'too_large', 'toolset_disabled', 'unknown_api',
     'unknown_argument', 'unknown_method', 'unsupported_grant_type', 'unsupported_type',
     'untrusted_host', 'upstream_error', 'validation_error', 'write_disabled',
 ]);
@@ -221,7 +222,14 @@ export class Metrics {
     dirty = false;
     failures = 0;
     disabled = false;
+    sequencing;
+    eventLog;
+    errorSlugs;
     constructor(opts) {
+        this.sequencing = opts.sequencingEnabled !== false;
+        this.eventLog = opts.eventLog !== false;
+        const extras = (opts.extraErrorSlugs ?? []).filter((s) => EXTRA_ERROR_SLUG_RE.test(s));
+        this.errorSlugs = extras.length ? new Set([...KNOWN_ERROR_SLUGS, ...extras]) : KNOWN_ERROR_SLUGS;
         this.dir = opts.dir ?? path.join(stateDir(opts.env), METRICS_DIR_NAME);
         this.aggDir = path.join(this.dir, 'agg');
         this.eventsFile = path.join(this.dir, 'events.jsonl');
@@ -250,7 +258,8 @@ export class Metrics {
                 }
             }
             this.pruneAggs();
-            this.pruneEventAge(this.eventsFile);
+            if (this.eventLog)
+                this.pruneEventAge(this.eventsFile);
         }
         catch (e) {
             this.log(`local usage metrics: init failed (${e.message}); disabled for this process\n`);
@@ -318,7 +327,7 @@ export class Metrics {
                 if (typeof first === 'string' && first.length < 65_536) {
                     const env = JSON.parse(first);
                     if (typeof env.error === 'string')
-                        slug = KNOWN_ERROR_SLUGS.has(env.error) ? env.error : 'other';
+                        slug = this.errorSlugs.has(env.error) ? env.error : 'other';
                     hinted = typeof env.hint === 'string' && env.hint.length > 0;
                 }
             }
@@ -357,45 +366,51 @@ export class Metrics {
             f.calls += 1;
             addInto(f, fan);
         }
-        // retry self-correction chain (spec section 1): in-memory only.
+        // retry self-correction chain (spec section 1): in-memory only. Both
+        // chains link consecutive calls, so they only run when one caller owns
+        // the process (sequencingEnabled).
         const nowM = this.mono();
-        const prev = this.lastError.get(entry.name);
-        if (prev && nowM - prev.at <= RETRY_WINDOW_MS) {
-            const rr = (this.deltas.retries[prev.slug] ??= { hintedOk: 0, hintedFail: 0, unhintedOk: 0, unhintedFail: 0 });
-            const key = `${prev.hinted ? 'hinted' : 'unhinted'}${ok ? 'Ok' : 'Fail'}`;
-            rr[key] += 1;
-            this.lastError.delete(entry.name);
-        }
-        if (!ok && slug)
-            this.lastError.set(entry.name, { slug, hinted: hinted === true, at: nowM });
-        // bigrams: ordered pairs within the process, 5-minute gap breaks the chain.
-        if (this.lastTool && nowM - this.lastTool.at <= BIGRAM_GAP_MS) {
-            addInto(this.deltas.bigrams, `${this.lastTool.name}>${entry.name}`);
+        if (this.sequencing) {
+            const prev = this.lastError.get(entry.name);
+            if (prev && nowM - prev.at <= RETRY_WINDOW_MS) {
+                const rr = (this.deltas.retries[prev.slug] ??= { hintedOk: 0, hintedFail: 0, unhintedOk: 0, unhintedFail: 0 });
+                const key = `${prev.hinted ? 'hinted' : 'unhinted'}${ok ? 'Ok' : 'Fail'}`;
+                rr[key] += 1;
+                this.lastError.delete(entry.name);
+            }
+            if (!ok && slug)
+                this.lastError.set(entry.name, { slug, hinted: hinted === true, at: nowM });
+            // bigrams: ordered pairs within the process, 5-minute gap breaks the chain.
+            if (this.lastTool && nowM - this.lastTool.at <= BIGRAM_GAP_MS) {
+                addInto(this.deltas.bigrams, `${this.lastTool.name}>${entry.name}`);
+            }
+            this.lastTool = { name: entry.name, at: nowM };
         }
-        this.lastTool = { name: entry.name, at: nowM };
-        const event = {
-            ts: new Date(this.now()).toISOString().slice(0, 16) + ':00Z',
-            boot: this.bootId,
-            seq: this.seq++,
-            tool: entry.name,
-            ok,
-            ms: Math.round(ms),
-            chars: charsBucket(chars),
-            src: 'handler',
-        };
-        if (slug)
-            event.err = slug;
-        if (hinted !== undefined)
-            event.hint = hinted;
-        if (fan)
-            event.fan = fan;
-        // mid: set mid-dispatch by recordEscapeMethod, attached to the escape
-        // call's own event line (per-event field, never a synthetic event).
-        if (entry.name === 'google_api_call' && this.pendingMid) {
-            event.mid = this.pendingMid;
-            this.pendingMid = undefined;
+        if (this.eventLog) {
+            const event = {
+                ts: new Date(this.now()).toISOString().slice(0, 16) + ':00Z',
+                boot: this.bootId,
+                seq: this.seq++,
+                tool: entry.name,
+                ok,
+                ms: Math.round(ms),
+                chars: charsBucket(chars),
+                src: 'handler',
+            };
+            if (slug)
+                event.err = slug;
+            if (hinted !== undefined)
+                event.hint = hinted;
+            if (fan)
+                event.fan = fan;
+            // mid: set mid-dispatch by recordEscapeMethod, attached to the escape
+            // call's own event line (per-event field, never a synthetic event).
+            if (this.sequencing && entry.name === 'google_api_call' && this.pendingMid) {
+                event.mid = this.pendingMid;
+                this.pendingMid = undefined;
+            }
+            this.events.push(JSON.stringify(event));
         }
-        this.events.push(JSON.stringify(event));
         this.dirty = true;
     }
     /** Escape hatch: only the RESOLVED methodId (double-gated) or a miss. */
@@ -407,7 +422,8 @@ export class Metrics {
             }
             else if (idOrNull.length <= METHOD_ID_MAX && METHOD_ID_RE.test(idOrNull)) {
                 addInto(this.deltas.escape.methods, idOrNull);
-                this.pendingMid = idOrNull;
+                if (this.sequencing)
+                    this.pendingMid = idOrNull;
             }
             this.dirty = true;
         }
@@ -475,12 +491,14 @@ export class Metrics {
             else {
                 addInto(this.deltas.rpc, RPC_CODES.has(kind) ? `rpc_error_${kind}` : 'rpc_error_other');
             }
-            this.events.push(JSON.stringify({
-                ts: new Date(this.now()).toISOString().slice(0, 16) + ':00Z',
-                boot: this.bootId, seq: this.seq++,
-                tool: tool && TOOL_NAME_RE.test(tool) ? tool : 'other',
-                ok: false, ms: 0, chars: 'le64', src: 'rpc',
-            }));
+            if (this.eventLog) {
+                this.events.push(JSON.stringify({
+                    ts: new Date(this.now()).toISOString().slice(0, 16) + ':00Z',
+                    boot: this.bootId, seq: this.seq++,
+                    tool: tool && TOOL_NAME_RE.test(tool) ? tool : 'other',
+                    ok: false, ms: 0, chars: 'le64', src: 'rpc',
+                }));
+            }
             this.dirty = true;
         }
         catch { /* never throws outward */ }

package/dist/write-control.js

@@ -1,3 +1,4 @@
+import { hints } from './hint-provider.js';
 const PROFILES = ['read-only', 'safe-writes', 'full-writes'];
 /** The irreversible set (frozen, cc-write-control): real sends leave the
  * user's (or org's) identity unrecallably; permanent deletes bypass Trash.
@@ -155,10 +156,17 @@ export function writeDisabledResult(tool, policy, account) {
     // Recomputed rather than passed in: every call site has already run
     // isAllowed, and a hint that disagrees with the verdict is worse than none.
     const reason = denyReason(tool, policy) ?? { rule: 'profile', profile: policy.profile };
+    const rendered = hints()?.render({
+        kind: 'write_denied',
+        tool: { name: tool.name, service: tool.service, cud: tool.cud },
+        reason,
+        policy,
+    });
     const envelope = {
         error: 'write_disabled',
-        message: `"${tool.name}" (${tool.cud}) is disabled by the current write-control policy (profile: ${policy.profile}${policy.readOnly ? ', GOOGLE_READ_ONLY=true' : ''}).`,
-        hint: denyHint(tool, reason),
+        message: rendered?.message ??
+            `"${tool.name}" (${tool.cud}) is disabled by the current write-control policy (profile: ${policy.profile}${policy.readOnly ? ', GOOGLE_READ_ONLY=true' : ''}).`,
+        hint: rendered?.hint ?? denyHint(tool, reason),
         retriable: false,
         ...(account ? { account } : {}),
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-google-multi",
-  "version": "6.0.0-beta.2",
+  "version": "6.0.0-beta.3",
   "mcpName": "io.github.bakissation/mcp-google-multi",
   "description": "Local MCP server for Google Workspace (Gmail, Drive, Calendar, Sheets, Docs, Contacts, Tasks, Meet, Search Console, +Forms/Chat/Admin) across multiple accounts — OAuth-only, encrypted token storage, deny-by-default writes.",
   "type": "module",
@@ -9,6 +9,32 @@
     "mcp-google-multi": "dist/index.js"
   },
   "main": "dist/index.js",
+  "exports": {
+    ".": "./dist/index.js",
+    "./identity": "./dist/identity.js",
+    "./compose": "./dist/compose.js",
+    "./registry": "./dist/registry.js",
+    "./oauth-as": "./dist/oauth-as.js",
+    "./accounts": "./dist/accounts.js",
+    "./token-store": "./dist/token-store.js",
+    "./http-transport": "./dist/http-transport.js",
+    "./http-config": "./dist/http-config.js",
+    "./client": "./dist/client.js",
+    "./config-file": "./dist/config-file.js",
+    "./fs-atomic": "./dist/fs-atomic.js",
+    "./master-key": "./dist/master-key.js",
+    "./mcp-token": "./dist/mcp-token.js",
+    "./boot-gates": "./dist/boot-gates.js",
+    "./tenant-purge": "./dist/tenant-purge.js",
+    "./doctor": "./dist/doctor.js",
+    "./write-control": "./dist/write-control.js",
+    "./scope-catalog": "./dist/scope-catalog.js",
+    "./auth": "./dist/auth.js",
+    "./usage-metrics": "./dist/usage-metrics.js",
+    "./metrics-tap": "./dist/metrics-tap.js",
+    "./hint-provider": "./dist/hint-provider.js",
+    "./package.json": "./package.json"
+  },
   "files": [
     "dist"
   ],