stitchkit 0.2.0 → 0.4.0

package/dist/tools/oauth-provider.d.ts

@@ -0,0 +1,85 @@
+import type { RawRoute } from '../server/types';
+/** A client as registered via DCR. Public clients (PKCE) carry no secret. */
+export interface RegisteredClient {
+    clientId: string;
+    redirectUris: string[];
+    clientName?: string;
+}
+/** Metadata posted to `/register` (RFC 7591) before a client id is assigned. */
+export interface ClientMetadata {
+    redirectUris: string[];
+    clientName?: string;
+    tokenEndpointAuthMethod?: string;
+}
+/** State persisted between `/authorize` and `/token`, keyed by the auth code. */
+export interface AuthCodeData {
+    clientId: string;
+    redirectUri: string;
+    codeChallenge: string;
+    /** Always `S256` — `/authorize` rejects any other method (OAuth 2.1, public client). */
+    codeChallengeMethod: 'S256';
+    resource: string;
+    scope?: string;
+    userId: string;
+    expiresAt: number;
+}
+/** State persisted for a refresh token. */
+export interface RefreshData {
+    clientId: string;
+    resource: string;
+    scope?: string;
+    userId: string;
+}
+/** The parsed `/authorize` request handed to the domain login/consent step. */
+export interface AuthRequest {
+    clientId: string;
+    redirectUri: string;
+    scope?: string;
+    resource: string;
+    state?: string;
+}
+export interface OAuthProviderConfig {
+    /** Authorization-server issuer — its own origin, e.g. `https://api.example.com`. */
+    issuer: string;
+    /** HMAC secret used to sign access-token JWTs. */
+    signingSecret: string;
+    /** Canonical resource id (MCP URL) — the access-token `aud`. */
+    resource: string;
+    /** Access-token lifetime in seconds. Default `3600`. */
+    accessTokenTtlSec?: number;
+    /** Scopes advertised in server metadata. */
+    scopesSupported?: string[];
+    /** Path prefix for the OAuth endpoints. Default `/oauth`. */
+    basePath?: string;
+    /** Client registry (DCR). */
+    clients: {
+        register(metadata: ClientMetadata): Promise<RegisteredClient>;
+        get(clientId: string): Promise<RegisteredClient | null>;
+    };
+    /** Single-use authorization-code store. `take` must atomically read+delete. */
+    codes: {
+        save(code: string, data: AuthCodeData): Promise<void>;
+        take(code: string): Promise<AuthCodeData | null>;
+    };
+    /** Optional refresh-token store. Omit to disable the refresh grant. */
+    refreshTokens?: {
+        save(token: string, data: RefreshData): Promise<void>;
+        take(token: string): Promise<RefreshData | null>;
+    };
+    /**
+     * Authenticate the user and capture consent for an `/authorize` request.
+     * Return `{ userId }` to issue a code, or a `Response` (e.g. a redirect to a
+     * login page) to drive the browser through the domain's own login first.
+     */
+    authorizeUser(req: Request, authRequest: AuthRequest): Promise<{
+        userId: string;
+    } | Response>;
+}
+/**
+ * Build the OAuth 2.1 authorization-server routes for an MCP resource. Mount the
+ * returned routes in the server's `rawRoutes`, alongside
+ * `oauthProtectedResourceRoute` and an MCP handler whose `protectedResource`
+ * names this issuer.
+ */
+export declare function mountOAuthProvider(config: OAuthProviderConfig): RawRoute[];
+//# sourceMappingURL=oauth-provider.d.ts.map

package/dist/tools/oauth-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-provider.d.ts","sourceRoot":"","sources":["../../src/tools/oauth-provider.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAIhD,6EAA6E;AAC7E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,gFAAgF;AAChF,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,wFAAwF;IACxF,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,2CAA2C;AAC3C,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,oFAAoF;IACpF,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,aAAa,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,4CAA4C;IAC5C,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,6BAA6B;IAC7B,OAAO,EAAE;QACP,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC9D,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;KACzD,CAAC;IACF,+EAA+E;IAC/E,KAAK,EAAE;QACL,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;KAClD,CAAC;IACF,uEAAuE;IACvE,aAAa,CAAC,EAAE;QACd,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;KAClD,CAAC;IAEF;;;;OAIG;IACH,aAAa,CACX,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,QAAQ,CAAC,CAAC;CAC3C;AAoED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,GAAG,QAAQ,EAAE,CAkR1E"}

package/dist/tools/remote.d.ts

@@ -1,5 +1,5 @@
-import type { HttpClient } from '../browser/http';
-import type { ContractDef, EndpointDef } from '../contract';
+import { type HttpClient } from '../browser/http';
+import { type ContractDef, type EndpointDef } from '../contract';
 import type { ServiceDef } from '../server/types';
 export interface ImplementRemoteOptions {
     /**

package/dist/tools/remote.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote.d.ts","sourceRoot":"","sources":["../../src/tools/remote.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAkB,MAAM,aAAa,CAAC;AAE5E,OAAO,KAAK,EAAa,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAc7D,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,aAAa,CAAC,EAAE,CACd,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACjE;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EACnE,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,EAChC,IAAI,EAAE,UAAU,EAChB,OAAO,CAAC,EAAE,sBAAsB,GAC/B,UAAU,CAsCZ"}
+{"version":3,"file":"remote.d.ts","sourceRoot":"","sources":["../../src/tools/remote.ts"],"names":[],"mappings":"AACA,OAAO,EAAY,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,WAAW,EAEjB,MAAM,aAAa,CAAC;AAErB,OAAO,KAAK,EAAa,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAc7D,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,aAAa,CAAC,EAAE,CACd,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACjE;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EACnE,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,EAChC,IAAI,EAAE,UAAU,EAChB,OAAO,CAAC,EAAE,sBAAsB,GAC/B,UAAU,CA8DZ"}

package/dist/tools/toolkit.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Typed tool-path context — the tool-side mirror of `createImplement<TCtx>()`.
+ *
+ * A handler is already typed (`createImplement<AppContext>()` gives `ctx.user`
+ * its real type on every surface). What was untyped is the *wiring*: the
+ * `context` a tool transport injects, and a `ToolExtend.resolve` result, were
+ * `Record<string, unknown>` — TypeScript could not catch a missing or
+ * wrong-typed `user`. → ADR 0017.
+ *
+ * `createToolkit<AppContext>()` fixes the context shape once and returns the
+ * tool-mounting functions with `context` (and `extend.resolve`) checked against
+ * it — so the CLI, MCP and agent surfaces are born as type-safe as the handler.
+ * It is pure typing sugar: each method forwards verbatim to the underlying
+ * function, which still accepts the loose form for callers that do not opt in
+ * (ADR 0002 keeps the core context loose by default).
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { ToolSet } from 'ai';
+import type { ServiceDef } from '../server/types';
+import { type AgentMountConfig } from './agent';
+import { type CliConfig } from './cli';
+import { type McpMountConfig, type McpServerBuildConfig } from './mcp';
+import { type McpHandlerConfig } from './mcp-handler';
+import { type StdioMcpServerConfig } from './mcp-stdio';
+import type { ToolExtend } from './mount';
+/** Re-type a config's static `context` (and `extend`) to the toolkit's `TContext`. */
+type WithStaticContext<C, TContext extends Record<string, unknown>> = Omit<C, 'context' | 'extend'> & {
+    context?: TContext;
+    extend?: ToolExtend<TContext>;
+};
+/** Re-type a config's `(auth) => context` factory to the toolkit's `TContext`. */
+type WithAuthContext<C, TAuth, TContext extends Record<string, unknown>> = Omit<C, 'context'> & {
+    context?: (auth: TAuth) => TContext;
+};
+/** The context-pinned tool surface returned by `createToolkit`. */
+export interface Toolkit<TContext extends Record<string, unknown>> {
+    mountMcp(server: McpServer, services: ServiceDef | ServiceDef[], config?: WithStaticContext<McpMountConfig, TContext>): void;
+    mountAgent(services: ServiceDef | ServiceDef[], config?: WithStaticContext<AgentMountConfig, TContext>): ToolSet;
+    buildMcpServer<TAuth>(config: WithAuthContext<McpServerBuildConfig<TAuth>, TAuth, TContext>, auth: TAuth): McpServer;
+    createMcpHandler<TAuth>(config: WithAuthContext<McpHandlerConfig<TAuth>, TAuth, TContext>): (req: Request) => Promise<Response>;
+    createStdioMcpServer<TAuth>(config: WithAuthContext<StdioMcpServerConfig<TAuth>, TAuth, TContext>): Promise<McpServer>;
+    createCli<TAuth = unknown>(config: CliConfig<TAuth, TContext>): Promise<void>;
+}
+/**
+ * Fix the tool-handler context type once. `const tools =
+ * createToolkit<AppContext>()` — then `tools.createCli`, `tools.mountMcp`, … all
+ * type-check their injected `context` against `AppContext`.
+ */
+export declare function createToolkit<TContext extends Record<string, unknown>>(): Toolkit<TContext>;
+export {};
+//# sourceMappingURL=toolkit.d.ts.map

package/dist/tools/toolkit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolkit.d.ts","sourceRoot":"","sources":["../../src/tools/toolkit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,KAAK,gBAAgB,EAAc,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,KAAK,SAAS,EAAa,MAAM,OAAO,CAAC;AAClD,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,oBAAoB,EAE1B,MAAM,OAAO,CAAC;AACf,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,EAAwB,KAAK,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,sFAAsF;AACtF,KAAK,iBAAiB,CAAC,CAAC,EAAE,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,CACxE,CAAC,EACD,SAAS,GAAG,QAAQ,CACrB,GAAG;IACF,OAAO,CAAC,EAAE,QAAQ,CAAC;IACnB,MAAM,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;CAC/B,CAAC;AAEF,kFAAkF;AAClF,KAAK,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,CAC7E,CAAC,EACD,SAAS,CACV,GAAG;IACF,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC;CACrC,CAAC;AAEF,mEAAmE;AACnE,MAAM,WAAW,OAAO,CAAC,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC/D,QAAQ,CACN,MAAM,EAAE,SAAS,EACjB,QAAQ,EAAE,UAAU,GAAG,UAAU,EAAE,EACnC,MAAM,CAAC,EAAE,iBAAiB,CAAC,cAAc,EAAE,QAAQ,CAAC,GACnD,IAAI,CAAC;IACR,UAAU,CACR,QAAQ,EAAE,UAAU,GAAG,UAAU,EAAE,EACnC,MAAM,CAAC,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GACrD,OAAO,CAAC;IACX,cAAc,CAAC,KAAK,EAClB,MAAM,EAAE,eAAe,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,EACrE,IAAI,EAAE,KAAK,GACV,SAAS,CAAC;IACb,gBAAgB,CAAC,KAAK,EACpB,MAAM,EAAE,eAAe,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,GAChE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,oBAAoB,CAAC,KAAK,EACxB,MAAM,EAAE,eAAe,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,GACpE,OAAO,CAAC,SAAS,CAAC,CAAC;IACtB,SAAS,CAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/E;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,CAS3F"}

package/dist/tools/view-file.d.ts

@@ -13,6 +13,16 @@
  * sandboxed to a `baseDir`, and downloads are capped before they reach memory.
  */
 import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+/**
+ * Annotation telling the client who a content block is for. `audience` lists
+ * `'user'` (render for the human) and/or `'assistant'` (keep in model context);
+ * `priority` (0–1) hints how prominently. Same shape as the MCP resource/prompt
+ * annotation.
+ */
+export interface McpAnnotations {
+    audience?: ('user' | 'assistant')[];
+    priority?: number;
+}
 /** An MCP content block — text / image / audio (video cannot be inlined). */
 export type McpMediaContent = {
     type: 'text';
@@ -21,10 +31,12 @@ export type McpMediaContent = {
     type: 'image';
     data: string;
     mimeType: string;
+    annotations?: McpAnnotations;
 } | {
     type: 'audio';
     data: string;
     mimeType: string;
+    annotations?: McpAnnotations;
 };
 export interface ViewFileOptions {
     /**

package/dist/tools/view-file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"view-file.d.ts","sourceRoot":"","sources":["../../src/tools/view-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAsBzE,6EAA6E;AAC7E,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtD,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AA6HD;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,eAAe,EAAE,CAAC,CA+B5B;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAE,eAAoB,GAAG,IAAI,CA4BpF"}
+{"version":3,"file":"view-file.d.ts","sourceRoot":"","sources":["../../src/tools/view-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAwBzE;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,6EAA6E;AAC7E,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,cAAc,CAAA;CAAE,GAC/E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,cAAc,CAAA;CAAE,CAAC;AAEpF,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AA4DD;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,eAAe,EAAE,CAAC,CA4C5B;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAE,eAAoB,GAAG,IAAI,CA+BpF"}

package/dist/tools/wait-core.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The shared poll-until-done loop — one backoff/timeout engine behind both the
+ * CLI `--wait` (`pollUntilDone`) and the native MCP `mountWait` tool, so the
+ * polling mechanics live in exactly one place. Domain-free (ADR 0002): the
+ * caller supplies how to fetch a state (`poll`) and when it is terminal (`done`).
+ */
+export interface PollUntilParams<T> {
+    /** Fetch the current state — called once per tick. */
+    poll: () => Promise<T>;
+    /** Stop when this returns `true` for a fetched state. */
+    done: (state: T) => boolean;
+    /** Backoff schedule in seconds; the last entry repeats. Default `[2,3,5,5,8,10]`. */
+    backoff?: number[];
+    /** Max seconds before giving up. Default `600`. */
+    timeoutSec?: number;
+    /** Injectable sleep for tests. */
+    sleepFn?: (ms: number) => Promise<void>;
+    /** Progress callback — `(attempt, elapsedSec)` after each non-terminal poll. */
+    onTick?: (attempt: number, elapsedSec: number) => void;
+}
+export interface PollUntilResult<T> {
+    /** The last fetched state. */
+    state: T;
+    /** `true` when the timeout was hit before `done`. */
+    timedOut: boolean;
+}
+/**
+ * Poll until `done` or the timeout. Polls first, then sleeps with backoff —
+ * returns the terminal state (`timedOut: false`) or the last state seen when
+ * the deadline passed (`timedOut: true`).
+ */
+export declare function pollUntil<T>(params: PollUntilParams<T>): Promise<PollUntilResult<T>>;
+//# sourceMappingURL=wait-core.d.ts.map

package/dist/tools/wait-core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wait-core.d.ts","sourceRoot":"","sources":["../../src/tools/wait-core.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,sDAAsD;IACtD,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IACvB,yDAAyD;IACzD,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,CAAC;IAC5B,qFAAqF;IACrF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,gFAAgF;IAChF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;CACxD;AAED,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,8BAA8B;IAC9B,KAAK,EAAE,CAAC,CAAC;IACT,qDAAqD;IACrD,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAkB1F"}

package/dist/tools.d.ts

@@ -1,12 +1,23 @@
+export type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 export { type AgentContext, type AgentMountConfig, mountAgent } from './tools/agent';
-export { withJsonCoercion } from './tools/coerce';
+export { type CliConfig, createCli } from './tools/cli';
+export type { ExitCodeMap } from './tools/cli-format';
+export type { CliWaitConfig } from './tools/cli-wait';
+export { coerceJsonArgs } from './tools/coerce';
 export type { ToolCallHooks, ToolLifecycle, ToolResult } from './tools/execute';
 export { flattenDiscriminatedUnion } from './tools/flatten';
 export { buildToolManifest, type ToolManifestEntry } from './tools/manifest';
-export { buildMcpServer, type IncompatibleSchemaPolicy, type McpMountConfig, type McpServerBuildConfig, mountMcp, validateMcpSchemas, } from './tools/mcp';
+export { buildMcpServer, type IncompatibleSchemaPolicy, type McpMountConfig, type McpServerBuildConfig, mountMcp, mountMcpResource, validateMcpSchemas, } from './tools/mcp';
+export { EXT_APPS_BUNDLE_PLACEHOLDER, inlineMcpAppBundle, type McpAppCsp, type McpAppResourceMeta, type McpResourceDef, RESOURCE_MIME_TYPE, } from './tools/mcp-app';
 export { createMcpHandler, type McpHandlerConfig } from './tools/mcp-handler';
 export { createStdioMcpServer, type StdioMcpServerConfig } from './tools/mcp-stdio';
 export { collectTools, type MountableTool, type ToolExtend } from './tools/mount';
+export { type DownloadToolConfig, mountDownload } from './tools/mount-download';
+export { mountUpload, type UploadToolConfig } from './tools/mount-upload';
+export { mountWait, type WaitToolConfig } from './tools/mount-wait';
+export { oauthProtectedResourceRoute, PROTECTED_RESOURCE_PATH, type ProtectedResourceConfig, protectedResourceMetadataUrl, wwwAuthenticateHeader, } from './tools/oauth-metadata';
+export { type AuthCodeData, type AuthRequest, type ClientMetadata, mountOAuthProvider, type OAuthProviderConfig, type RefreshData, type RegisteredClient, } from './tools/oauth-provider';
 export { type ImplementRemoteOptions, implementRemote } from './tools/remote';
+export { createToolkit, type Toolkit } from './tools/toolkit';
 export { type McpMediaContent, mountViewFile, resolveMedia } from './tools/view-file';
 //# sourceMappingURL=tools.d.ts.map

package/dist/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,gBAAgB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EACL,cAAc,EACd,KAAK,wBAAwB,EAC7B,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,QAAQ,EACR,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,KAAK,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAClF,OAAO,EAAE,KAAK,sBAAsB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAE,KAAK,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,gBAAgB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,EAAE,KAAK,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxD,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EACL,cAAc,EACd,KAAK,wBAAwB,EAC7B,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,QAAQ,EACR,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,KAAK,SAAS,EACd,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,KAAK,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAClF,OAAO,EAAE,KAAK,kBAAkB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,4BAA4B,EAC5B,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,KAAK,sBAAsB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,KAAK,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,KAAK,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC"}