stitchkit 0.3.0 → 0.4.0

package/dist/tools/mcp-app.d.ts

@@ -0,0 +1,59 @@
+/**
+ * MIME type a host uses to recognise an MCP Apps UI resource — it renders the
+ * HTML as an interactive sandboxed iframe rather than displaying the source.
+ */
+export declare const RESOURCE_MIME_TYPE = "text/html;profile=mcp-app";
+/** Placeholder a widget HTML file carries where the ext-apps runtime is inlined. */
+export declare const EXT_APPS_BUNDLE_PLACEHOLDER = "/*__EXT_APPS_BUNDLE__*/";
+/**
+ * Content-Security-Policy allowlists a widget declares so the host's iframe can
+ * reach external origins (maps to the host's CSP directives). Default is
+ * block-all, so any external image / fetch origin must be listed.
+ */
+export interface McpAppCsp {
+    /** `connect-src` — fetch / XHR / WebSocket origins. */
+    connectDomains?: string[];
+    /** `img-src` / `script-src` / `style-src` / `font-src` / `media-src` origins. */
+    resourceDomains?: string[];
+    /** `frame-src` — nested iframe origins (currently restricted in some hosts). */
+    frameDomains?: string[];
+    /** `base-uri` origins. */
+    baseUriDomains?: string[];
+}
+/** UI metadata attached to a served resource's content (`_meta.ui`). */
+export interface McpAppResourceMeta {
+    csp?: McpAppCsp;
+    /** Drop the host's outer card border (mobile). */
+    prefersBorder?: boolean;
+    /** Stable origin for external-API CORS allowlists. */
+    domain?: string;
+}
+/**
+ * A UI resource served over MCP. `read` returns the widget HTML (already
+ * bundle-inlined). The default `mimeType` is the apps MIME type, so a plain
+ * widget needs only `uri`, `name` and `read`.
+ */
+export interface McpResourceDef {
+    /** `ui://…` uri — must match a tool's `ui.resourceUri`. */
+    uri: string;
+    /** Human-readable name (shown in `resources/list`). */
+    name: string;
+    /** MIME type — defaults to `RESOURCE_MIME_TYPE`. */
+    mimeType?: string;
+    /** Optional UI metadata (CSP, border, domain) applied to the content. */
+    ui?: McpAppResourceMeta;
+    /** Return the resource body — the widget HTML for an apps resource. */
+    read: () => string | Promise<string>;
+}
+/**
+ * Inline the `@modelcontextprotocol/ext-apps` browser runtime into a widget's
+ * HTML, replacing `EXT_APPS_BUNDLE_PLACEHOLDER`. The iframe CSP blocks CDN
+ * script fetches, so the runtime must be inlined at startup rather than
+ * imported. `ext-apps` is an optional peer — a clear error is thrown if the
+ * widget needs the bundle but the peer is not installed.
+ *
+ * The bundle's trailing `export{…}` is rewritten to `globalThis.ExtApps = {…}`
+ * so an inline `<script type="module">` can read `globalThis.ExtApps`.
+ */
+export declare function inlineMcpAppBundle(html: string): string;
+//# sourceMappingURL=mcp-app.d.ts.map

package/dist/tools/mcp-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-app.d.ts","sourceRoot":"","sources":["../../src/tools/mcp-app.ts"],"names":[],"mappings":"AAYA;;;GAGG;AACH,eAAO,MAAM,kBAAkB,8BAA8B,CAAC;AAE9D,oFAAoF;AACpF,eAAO,MAAM,2BAA2B,4BAA4B,CAAC;AAErE;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,uDAAuD;IACvD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,iFAAiF;IACjF,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,0BAA0B;IAC1B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,kDAAkD;IAClD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,2DAA2D;IAC3D,GAAG,EAAE,MAAM,CAAC;IACZ,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,EAAE,CAAC,EAAE,kBAAkB,CAAC;IACxB,uEAAuE;IACvE,IAAI,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACtC;AAID;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA4BvD"}

package/dist/tools/mcp-handler.d.ts

@@ -1,7 +1,25 @@
 import { type McpServerBuildConfig } from './mcp';
+import { type ProtectedResourceConfig } from './oauth-metadata';
 export interface McpHandlerConfig<TAuth> extends McpServerBuildConfig<TAuth> {
     /** Resolve an incoming request to an identity. Return `null` → 401. */
     auth: (req: Request) => TAuth | null | Promise<TAuth | null>;
+    /**
+     * OAuth 2.0 Protected Resource metadata (RFC 9728). When set, a `401` carries
+     * a `WWW-Authenticate: Bearer resource_metadata="…"` header so an MCP client
+     * can discover the authorization server. Serve the matching metadata document
+     * with `oauthProtectedResourceRoute(protectedResource)`.
+     */
+    protectedResource?: ProtectedResourceConfig;
+    /**
+     * Stateless mode (default `false`). Each request builds a fresh transport +
+     * server and is handled in isolation — no `Mcp-Session-Id`, no in-memory
+     * session store. A restart / deploy / scale-out therefore never invalidates a
+     * client (no `404 Session not found`), which is what most request/response
+     * tool servers want. The trade-off is no server-initiated messages
+     * (`notifications/progress`, standalone SSE) between requests — fine for
+     * synchronous tools. Leave `false` only when you need that server push.
+     */
+    stateless?: boolean;
 }
 /**
  * Build a Streamable-HTTP MCP request handler (`Request → Response`).

package/dist/tools/mcp-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-handler.d.ts","sourceRoot":"","sources":["../../src/tools/mcp-handler.ts"],"names":[],"mappings":"AASA,OAAO,EAAkB,KAAK,oBAAoB,EAAsB,MAAM,OAAO,CAAC;AAqEtF,MAAM,WAAW,gBAAgB,CAAC,KAAK,CAAE,SAAQ,oBAAoB,CAAC,KAAK,CAAC;IAC1E,uEAAuE;IACvE,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,KAAK,GAAG,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;CAC9D;AAYD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EACpC,MAAM,EAAE,gBAAgB,CAAC,KAAK,CAAC,GAC9B,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAuFrC"}
+{"version":3,"file":"mcp-handler.d.ts","sourceRoot":"","sources":["../../src/tools/mcp-handler.ts"],"names":[],"mappings":"AASA,OAAO,EAAkB,KAAK,oBAAoB,EAAsB,MAAM,OAAO,CAAC;AACtF,OAAO,EAAE,KAAK,uBAAuB,EAAyB,MAAM,kBAAkB,CAAC;AAqEvF,MAAM,WAAW,gBAAgB,CAAC,KAAK,CAAE,SAAQ,oBAAoB,CAAC,KAAK,CAAC;IAC1E,uEAAuE;IACvE,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,KAAK,GAAG,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAC7D;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;IAC5C;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAoBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EACpC,MAAM,EAAE,gBAAgB,CAAC,KAAK,CAAC,GAC9B,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAkHrC"}

package/dist/tools/mcp.d.ts

@@ -1,6 +1,7 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import type { ServiceDef, StitchLogger } from '../server/types';
 import { type ToolCallHooks, type ToolLifecycle } from './execute';
+import { type McpResourceDef } from './mcp-app';
 import { type ToolExtend } from './mount';
 /**
  * What to do when a tool's schema cannot be advertised on the MCP surface — a
@@ -74,6 +75,8 @@ export interface McpServerBuildConfig<TAuth> {
     /** Register native (non-contract) MCP tools — receives the `McpServer`
      *  directly. For tools returning multimodal content, e.g. `mountViewFile`. */
     nativeTools?: (server: McpServer) => void;
+    /** MCP Apps UI resources (`ui://…`) served for tools that declare `ui`. */
+    resources?: McpResourceDef[];
     /** Server instructions — a short (≤2KB) hint to the host on when and how to
      *  use these tools. Surfaced to MCP tool-search. */
     instructions?: string;
@@ -89,4 +92,10 @@ export interface McpServerBuildConfig<TAuth> {
  * Transport-agnostic — the shared core behind every MCP transport.
  */
 export declare function buildMcpServer<TAuth>(config: McpServerBuildConfig<TAuth>, auth: TAuth): McpServer;
+/**
+ * Register one MCP Apps UI resource on an `McpServer`. The `read` callback's
+ * HTML is served under the resource `uri` with the apps MIME type; any `ui`
+ * metadata (CSP, border, domain) is attached to the content's `_meta.ui`.
+ */
+export declare function mountMcpResource(server: McpServer, resource: McpResourceDef): void;
 //# sourceMappingURL=mcp.d.ts.map

package/dist/tools/mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/tools/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGpE,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,aAAa,EAGnB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAKL,KAAK,UAAU,EAChB,MAAM,SAAS,CAAC;AAEjB;;;;;;;;GAQG;AACH,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AA8JjE,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,qCAAqC;IACrC,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,gFAAgF;IAChF,oBAAoB,CAAC,EAAE,wBAAwB,CAAC;IAChD,8DAA8D;IAC9D,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,+EAA+E;IAC/E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,gEAAgE;IAChE,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACpE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,UAAU,EAAE,EACtB,oBAAoB,GAAE,wBAAkC,EACxD,MAAM,CAAC,EAAE,YAAY,GACpB,IAAI,CAWN;AAED,wBAAgB,QAAQ,CACtB,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,UAAU,GAAG,UAAU,EAAE,EACnC,MAAM,GAAE,cAAmB,GAC1B,IAAI,CAsDN;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB,CAAC,KAAK;IACzC,4CAA4C;IAC5C,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,2EAA2E;IAC3E,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,UAAU,EAAE,CAAC,CAAC;IACzD,uEAAuE;IACvE,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnD;+EAC2E;IAC3E,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB;;0CAEsC;IACtC,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,gFAAgF;IAChF,oBAAoB,CAAC,EAAE,wBAAwB,CAAC;IAChD,0EAA0E;IAC1E,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;kFAC8E;IAC9E,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,CAAC;IAC1C;wDACoD;IACpD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,gEAAgE;IAChE,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACpE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAClC,MAAM,EAAE,oBAAoB,CAAC,KAAK,CAAC,EACnC,IAAI,EAAE,KAAK,GACV,SAAS,CAoBX"}
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/tools/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIpE,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,aAAa,EAGnB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,KAAK,cAAc,EAAsB,MAAM,WAAW,CAAC;AACpE,OAAO,EAKL,KAAK,UAAU,EAChB,MAAM,SAAS,CAAC;AAEjB;;;;;;;;GAQG;AACH,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AA8JjE,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,qCAAqC;IACrC,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,gFAAgF;IAChF,oBAAoB,CAAC,EAAE,wBAAwB,CAAC;IAChD,8DAA8D;IAC9D,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,+EAA+E;IAC/E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,gEAAgE;IAChE,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACpE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,UAAU,EAAE,EACtB,oBAAoB,GAAE,wBAAkC,EACxD,MAAM,CAAC,EAAE,YAAY,GACpB,IAAI,CAWN;AAED,wBAAgB,QAAQ,CACtB,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,UAAU,GAAG,UAAU,EAAE,EACnC,MAAM,GAAE,cAAmB,GAC1B,IAAI,CAuEN;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB,CAAC,KAAK;IACzC,4CAA4C;IAC5C,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,2EAA2E;IAC3E,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,UAAU,EAAE,CAAC,CAAC;IACzD,uEAAuE;IACvE,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnD;+EAC2E;IAC3E,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB;;0CAEsC;IACtC,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,gFAAgF;IAChF,oBAAoB,CAAC,EAAE,wBAAwB,CAAC;IAChD,0EAA0E;IAC1E,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;kFAC8E;IAC9E,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,CAAC;IAC1C,2EAA2E;IAC3E,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAC7B;wDACoD;IACpD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,gEAAgE;IAChE,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACpE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAClC,MAAM,EAAE,oBAAoB,CAAC,KAAK,CAAC,EACnC,IAAI,EAAE,KAAK,GACV,SAAS,CAuBX;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,GAAG,IAAI,CAgBlF"}

package/dist/tools/mount-download.d.ts

@@ -0,0 +1,30 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { z } from 'zod';
+export interface DownloadToolConfig {
+    /** Tool name. Default `'download'`. */
+    name?: string;
+    description: string;
+    /** Tool input shape (e.g. `{ url: z.string().optional(), id: z.string().optional() }`). */
+    inputSchema: z.ZodRawShape;
+    /** Resolve the args to a media URL — `null` when there is nothing to download. */
+    resolveUrl: (args: Record<string, unknown>) => Promise<string | null> | string | null;
+    /** Directory to save into by default. */
+    defaultDir: string;
+    /** Read a per-call output directory from the args. */
+    dirFromArgs?: (args: Record<string, unknown>) => string | undefined;
+    /**
+     * Allow downloading from private / internal / loopback hosts. Default `false`
+     * — the SSRF guard, since the URL comes from model-controlled args. Enable
+     * only in a trusted network.
+     */
+    allowPrivateHosts?: boolean;
+    /** Max bytes to read before aborting (memory cap). Default 100 MB. */
+    maxBytes?: number;
+}
+/**
+ * Register a native "download" tool — resolves a URL from the args, fetches it
+ * and writes it to disk with a content-type / URL-derived extension. Returns
+ * the saved path / size / mime.
+ */
+export declare function mountDownload(server: McpServer, config: DownloadToolConfig): void;
+//# sourceMappingURL=mount-download.d.ts.map

package/dist/tools/mount-download.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount-download.d.ts","sourceRoot":"","sources":["../../src/tools/mount-download.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA0C7B,MAAM,WAAW,kBAAkB;IACjC,uCAAuC;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,2FAA2F;IAC3F,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC;IAC3B,kFAAkF;IAClF,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC;IACtF,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,GAAG,SAAS,CAAC;IACpE;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAkDjF"}

package/dist/tools/mount-upload.d.ts

@@ -0,0 +1,19 @@
+/**
+ * `mountUpload` — a generic native MCP tool that uploads a local file. The app
+ * injects how to read + send the file (`upload`); the tool wiring lives here.
+ * → ADR 0019.
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export interface UploadToolConfig {
+    /** Tool name. Default `'upload'`. */
+    name?: string;
+    description: string;
+    /** Read a local `path` and upload it, returning whatever the upload yields. */
+    upload: (path: string) => Promise<unknown>;
+}
+/**
+ * Register a native "upload" tool — takes a local `path`, hands it to
+ * `config.upload` (which reads + sends it) and returns the result.
+ */
+export declare function mountUpload(server: McpServer, config: UploadToolConfig): void;
+//# sourceMappingURL=mount-upload.d.ts.map

package/dist/tools/mount-upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount-upload.d.ts","sourceRoot":"","sources":["../../src/tools/mount-upload.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAKzE,MAAM,WAAW,gBAAgB;IAC/B,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5C;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAyB7E"}

package/dist/tools/mount-wait.d.ts

@@ -0,0 +1,36 @@
+/**
+ * `mountWait` — a generic native MCP tool that blocks until an async job
+ * reaches a terminal state. The poll loop is the shared `pollUntil`; the app
+ * injects only the domain bits (what to poll, when it's done). Owns the MCP
+ * wiring so the consumer never imports `@modelcontextprotocol/sdk`. → ADR 0019.
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { z } from 'zod';
+export interface WaitToolConfig {
+    /** Tool name. Default `'wait'`. */
+    name?: string;
+    description: string;
+    /** Tool input shape (e.g. `{ id: z.string() }`). */
+    inputSchema: z.ZodRawShape;
+    /** Fetch the current state for the call's args — one poll tick. */
+    poll: (args: Record<string, unknown>) => Promise<unknown>;
+    /** Terminal when this returns `true`. */
+    done: (state: unknown) => boolean;
+    /** Read a per-call timeout (seconds) from the args. */
+    timeoutFromArgs?: (args: Record<string, unknown>) => number | undefined;
+    /** Backoff schedule in seconds; the last entry repeats. */
+    backoff?: number[];
+    /** Default timeout in seconds. */
+    defaultTimeout?: number;
+    /** Render the final state. Default: pretty JSON, `isError` on timeout. */
+    render?: (state: unknown, timedOut: boolean) => {
+        text: string;
+        isError: boolean;
+    };
+}
+/**
+ * Register a native "wait" tool — polls `config.poll(args)` with backoff until
+ * `config.done` or the timeout, then returns the final state.
+ */
+export declare function mountWait(server: McpServer, config: WaitToolConfig): void;
+//# sourceMappingURL=mount-wait.d.ts.map

package/dist/tools/mount-wait.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount-wait.d.ts","sourceRoot":"","sources":["../../src/tools/mount-wait.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAK7B,MAAM,WAAW,cAAc;IAC7B,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC;IAC3B,mEAAmE;IACnE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,yCAAyC;IACzC,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IAClC,uDAAuD;IACvD,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,GAAG,SAAS,CAAC;IACxE,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;CACpF;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,GAAG,IAAI,CA2BzE"}

package/dist/tools/mount.d.ts

@@ -10,12 +10,16 @@ import { type ToolCallHooks, type ToolLifecycle, type ToolResult } from './execu
 /**
  * Extra arguments folded into a mounted tool's schema — the host supplies them,
  * `resolve` turns them into handler context. Shared by `mountMcp` / `mountAgent`.
+ *
+ * `TContext` is the typed handler context the extension contributes — left as
+ * `Record<string, unknown>` for the untyped mounts, pinned by `createToolkit`
+ * so `resolve` is checked against the app's context shape.
  */
-export interface ToolExtend {
+export interface ToolExtend<TContext extends Record<string, unknown> = Record<string, unknown>> {
     /** Extra Zod fields added to every (matching) tool's input schema. */
     schema: Record<string, z.ZodType>;
     /** Turn the extra arguments into context merged into the handler. */
-    resolve: (args: Record<string, unknown>) => Record<string, unknown> | Promise<Record<string, unknown>>;
+    resolve: (args: Record<string, unknown>) => Partial<TContext> | Promise<Partial<TContext>>;
     /** Limit the extension to specific methods — default: every method. */
     filter?: (service: ServiceDef, method: MethodDef) => boolean;
 }

package/dist/tools/mount.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mount.d.ts","sourceRoot":"","sources":["../../src/tools/mount.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAKnB;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAClC,qEAAqE;IACrE,OAAO,EAAE,CACP,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAChE,uEAAuE;IACvE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC;CAC9D;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B,2CAA2C;IAC3C,MAAM,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7C,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,sFAAsF;IACtF,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;IAClB,mDAAmD;IACnD,YAAY,EAAE,OAAO,CAAC;CACvB;AAkBD,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,uFAAuF;IACvF,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,SAAS,EACpB,MAAM,GAAE,kBAAuB,GAC9B,aAAa,EAAE,CAoBjB;AAED,kDAAkD;AAClD,MAAM,WAAW,gBAAgB;IAC/B,iDAAiD;IACjD,MAAM,EAAE,eAAe,CAAC;IACxB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,qCAAqC;IACrC,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,yEAAyE;IACzE,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,gEAAgE;IAChE,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACnE,+EAA+E;IAC/E,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,gBAAgB,GACvB,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,CAsBhF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAAC,EAC1C,QAAQ,CAAC,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GACjE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAazB"}
+{"version":3,"file":"mount.d.ts","sourceRoot":"","sources":["../../src/tools/mount.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAKnB;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU,CACzB,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAElE,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAClC,qEAAqE;IACrE,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3F,uEAAuE;IACvE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC;CAC9D;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B,2CAA2C;IAC3C,MAAM,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7C,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,sFAAsF;IACtF,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;IAClB,mDAAmD;IACnD,YAAY,EAAE,OAAO,CAAC;CACvB;AAkBD,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,uFAAuF;IACvF,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,SAAS,EACpB,MAAM,GAAE,kBAAuB,GAC9B,aAAa,EAAE,CA4BjB;AAED,kDAAkD;AAClD,MAAM,WAAW,gBAAgB;IAC/B,iDAAiD;IACjD,MAAM,EAAE,eAAe,CAAC;IACxB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,qCAAqC;IACrC,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,yEAAyE;IACzE,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,gEAAgE;IAChE,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACnE,+EAA+E;IAC/E,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,gBAAgB,GACvB,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,CAsBhF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAAC,EAC1C,QAAQ,CAAC,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GACjE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAazB"}

package/dist/tools/native-result.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The MCP text-content result shape shared by the native tools (`mountWait`,
+ * `mountDownload`, `mountUpload`) — one place so each tool file does not
+ * re-spell the `{ content: [{ type: 'text' }], isError }` envelope.
+ */
+export interface NativeTextResult {
+    content: Array<{
+        type: 'text';
+        text: string;
+    }>;
+    isError?: boolean;
+    /** MCP tool results carry an open `_meta` etc. — the SDK's result type is index-signed. */
+    [key: string]: unknown;
+}
+/** A single text block, optionally flagged as an error. */
+export declare function textResult(text: string, isError?: boolean): NativeTextResult;
+//# sourceMappingURL=native-result.d.ts.map

package/dist/tools/native-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-result.d.ts","sourceRoot":"","sources":["../../src/tools/native-result.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,2FAA2F;IAC3F,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,UAAQ,GAAG,gBAAgB,CAG1E"}

package/dist/tools/oauth-metadata.d.ts

@@ -0,0 +1,28 @@
+import type { RawRoute } from '../server/types';
+/**
+ * OAuth 2.0 Protected Resource Metadata (RFC 9728). An MCP server acting as a
+ * resource server publishes this so a client, after a `401`, can discover which
+ * authorization server(s) issue tokens for it.
+ */
+export interface ProtectedResourceConfig {
+    /** Canonical resource identifier — the MCP server URL (RFC 8707 audience). */
+    resource: string;
+    /** Issuer URL(s) of the authorization server(s) that mint tokens for it. */
+    authorizationServers: string[];
+    /** Scopes the resource understands — advertised, not enforced here. */
+    scopesSupported?: string[];
+}
+/** Well-known prefix for the protected-resource metadata document (RFC 9728). */
+export declare const PROTECTED_RESOURCE_PATH = "/.well-known/oauth-protected-resource";
+/** Absolute URL of the protected-resource metadata for a given resource. */
+export declare function protectedResourceMetadataUrl(resource: string): string;
+/** The `WWW-Authenticate` header value a protected `401` must carry (RFC 9728 §5.1). */
+export declare function wwwAuthenticateHeader(resource: string): string;
+/**
+ * A `RawRoute` serving the RFC 9728 protected-resource metadata at the path
+ * advertised by `protectedResourceMetadataUrl(config.resource)`. Mount it
+ * alongside the MCP handler; set the matching `protectedResource` on
+ * `createMcpHandler` so the `401` points here.
+ */
+export declare function oauthProtectedResourceRoute(config: ProtectedResourceConfig): RawRoute;
+//# sourceMappingURL=oauth-metadata.d.ts.map

package/dist/tools/oauth-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-metadata.d.ts","sourceRoot":"","sources":["../../src/tools/oauth-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,uEAAuE;IACvE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,0CAA0C,CAAC;AAa/E,4EAA4E;AAC5E,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,wFAAwF;AACxF,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE9D;AASD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,uBAAuB,GAAG,QAAQ,CAqBrF"}

package/dist/tools/oauth-provider.d.ts

@@ -0,0 +1,85 @@
+import type { RawRoute } from '../server/types';
+/** A client as registered via DCR. Public clients (PKCE) carry no secret. */
+export interface RegisteredClient {
+    clientId: string;
+    redirectUris: string[];
+    clientName?: string;
+}
+/** Metadata posted to `/register` (RFC 7591) before a client id is assigned. */
+export interface ClientMetadata {
+    redirectUris: string[];
+    clientName?: string;
+    tokenEndpointAuthMethod?: string;
+}
+/** State persisted between `/authorize` and `/token`, keyed by the auth code. */
+export interface AuthCodeData {
+    clientId: string;
+    redirectUri: string;
+    codeChallenge: string;
+    /** Always `S256` — `/authorize` rejects any other method (OAuth 2.1, public client). */
+    codeChallengeMethod: 'S256';
+    resource: string;
+    scope?: string;
+    userId: string;
+    expiresAt: number;
+}
+/** State persisted for a refresh token. */
+export interface RefreshData {
+    clientId: string;
+    resource: string;
+    scope?: string;
+    userId: string;
+}
+/** The parsed `/authorize` request handed to the domain login/consent step. */
+export interface AuthRequest {
+    clientId: string;
+    redirectUri: string;
+    scope?: string;
+    resource: string;
+    state?: string;
+}
+export interface OAuthProviderConfig {
+    /** Authorization-server issuer — its own origin, e.g. `https://api.example.com`. */
+    issuer: string;
+    /** HMAC secret used to sign access-token JWTs. */
+    signingSecret: string;
+    /** Canonical resource id (MCP URL) — the access-token `aud`. */
+    resource: string;
+    /** Access-token lifetime in seconds. Default `3600`. */
+    accessTokenTtlSec?: number;
+    /** Scopes advertised in server metadata. */
+    scopesSupported?: string[];
+    /** Path prefix for the OAuth endpoints. Default `/oauth`. */
+    basePath?: string;
+    /** Client registry (DCR). */
+    clients: {
+        register(metadata: ClientMetadata): Promise<RegisteredClient>;
+        get(clientId: string): Promise<RegisteredClient | null>;
+    };
+    /** Single-use authorization-code store. `take` must atomically read+delete. */
+    codes: {
+        save(code: string, data: AuthCodeData): Promise<void>;
+        take(code: string): Promise<AuthCodeData | null>;
+    };
+    /** Optional refresh-token store. Omit to disable the refresh grant. */
+    refreshTokens?: {
+        save(token: string, data: RefreshData): Promise<void>;
+        take(token: string): Promise<RefreshData | null>;
+    };
+    /**
+     * Authenticate the user and capture consent for an `/authorize` request.
+     * Return `{ userId }` to issue a code, or a `Response` (e.g. a redirect to a
+     * login page) to drive the browser through the domain's own login first.
+     */
+    authorizeUser(req: Request, authRequest: AuthRequest): Promise<{
+        userId: string;
+    } | Response>;
+}
+/**
+ * Build the OAuth 2.1 authorization-server routes for an MCP resource. Mount the
+ * returned routes in the server's `rawRoutes`, alongside
+ * `oauthProtectedResourceRoute` and an MCP handler whose `protectedResource`
+ * names this issuer.
+ */
+export declare function mountOAuthProvider(config: OAuthProviderConfig): RawRoute[];
+//# sourceMappingURL=oauth-provider.d.ts.map

package/dist/tools/oauth-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-provider.d.ts","sourceRoot":"","sources":["../../src/tools/oauth-provider.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAIhD,6EAA6E;AAC7E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,gFAAgF;AAChF,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,wFAAwF;IACxF,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,2CAA2C;AAC3C,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,oFAAoF;IACpF,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,aAAa,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,4CAA4C;IAC5C,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,6BAA6B;IAC7B,OAAO,EAAE;QACP,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC9D,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;KACzD,CAAC;IACF,+EAA+E;IAC/E,KAAK,EAAE;QACL,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;KAClD,CAAC;IACF,uEAAuE;IACvE,aAAa,CAAC,EAAE;QACd,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;KAClD,CAAC;IAEF;;;;OAIG;IACH,aAAa,CACX,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,QAAQ,CAAC,CAAC;CAC3C;AAoED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,GAAG,QAAQ,EAAE,CAkR1E"}

package/dist/tools/remote.d.ts

@@ -1,5 +1,5 @@
-import type { HttpClient } from '../browser/http';
-import type { ContractDef, EndpointDef } from '../contract';
+import { type HttpClient } from '../browser/http';
+import { type ContractDef, type EndpointDef } from '../contract';
 import type { ServiceDef } from '../server/types';
 export interface ImplementRemoteOptions {
     /**

package/dist/tools/remote.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote.d.ts","sourceRoot":"","sources":["../../src/tools/remote.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAkB,MAAM,aAAa,CAAC;AAE5E,OAAO,KAAK,EAAa,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAc7D,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,aAAa,CAAC,EAAE,CACd,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACjE;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EACnE,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,EAChC,IAAI,EAAE,UAAU,EAChB,OAAO,CAAC,EAAE,sBAAsB,GAC/B,UAAU,CAsCZ"}
+{"version":3,"file":"remote.d.ts","sourceRoot":"","sources":["../../src/tools/remote.ts"],"names":[],"mappings":"AACA,OAAO,EAAY,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,WAAW,EAEjB,MAAM,aAAa,CAAC;AAErB,OAAO,KAAK,EAAa,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAc7D,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,aAAa,CAAC,EAAE,CACd,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACjE;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EACnE,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,EAChC,IAAI,EAAE,UAAU,EAChB,OAAO,CAAC,EAAE,sBAAsB,GAC/B,UAAU,CA8DZ"}

package/dist/tools/toolkit.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Typed tool-path context — the tool-side mirror of `createImplement<TCtx>()`.
+ *
+ * A handler is already typed (`createImplement<AppContext>()` gives `ctx.user`
+ * its real type on every surface). What was untyped is the *wiring*: the
+ * `context` a tool transport injects, and a `ToolExtend.resolve` result, were
+ * `Record<string, unknown>` — TypeScript could not catch a missing or
+ * wrong-typed `user`. → ADR 0017.
+ *
+ * `createToolkit<AppContext>()` fixes the context shape once and returns the
+ * tool-mounting functions with `context` (and `extend.resolve`) checked against
+ * it — so the CLI, MCP and agent surfaces are born as type-safe as the handler.
+ * It is pure typing sugar: each method forwards verbatim to the underlying
+ * function, which still accepts the loose form for callers that do not opt in
+ * (ADR 0002 keeps the core context loose by default).
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { ToolSet } from 'ai';
+import type { ServiceDef } from '../server/types';
+import { type AgentMountConfig } from './agent';
+import { type CliConfig } from './cli';
+import { type McpMountConfig, type McpServerBuildConfig } from './mcp';
+import { type McpHandlerConfig } from './mcp-handler';
+import { type StdioMcpServerConfig } from './mcp-stdio';
+import type { ToolExtend } from './mount';
+/** Re-type a config's static `context` (and `extend`) to the toolkit's `TContext`. */
+type WithStaticContext<C, TContext extends Record<string, unknown>> = Omit<C, 'context' | 'extend'> & {
+    context?: TContext;
+    extend?: ToolExtend<TContext>;
+};
+/** Re-type a config's `(auth) => context` factory to the toolkit's `TContext`. */
+type WithAuthContext<C, TAuth, TContext extends Record<string, unknown>> = Omit<C, 'context'> & {
+    context?: (auth: TAuth) => TContext;
+};
+/** The context-pinned tool surface returned by `createToolkit`. */
+export interface Toolkit<TContext extends Record<string, unknown>> {
+    mountMcp(server: McpServer, services: ServiceDef | ServiceDef[], config?: WithStaticContext<McpMountConfig, TContext>): void;
+    mountAgent(services: ServiceDef | ServiceDef[], config?: WithStaticContext<AgentMountConfig, TContext>): ToolSet;
+    buildMcpServer<TAuth>(config: WithAuthContext<McpServerBuildConfig<TAuth>, TAuth, TContext>, auth: TAuth): McpServer;
+    createMcpHandler<TAuth>(config: WithAuthContext<McpHandlerConfig<TAuth>, TAuth, TContext>): (req: Request) => Promise<Response>;
+    createStdioMcpServer<TAuth>(config: WithAuthContext<StdioMcpServerConfig<TAuth>, TAuth, TContext>): Promise<McpServer>;
+    createCli<TAuth = unknown>(config: CliConfig<TAuth, TContext>): Promise<void>;
+}
+/**
+ * Fix the tool-handler context type once. `const tools =
+ * createToolkit<AppContext>()` — then `tools.createCli`, `tools.mountMcp`, … all
+ * type-check their injected `context` against `AppContext`.
+ */
+export declare function createToolkit<TContext extends Record<string, unknown>>(): Toolkit<TContext>;
+export {};
+//# sourceMappingURL=toolkit.d.ts.map

package/dist/tools/toolkit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolkit.d.ts","sourceRoot":"","sources":["../../src/tools/toolkit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,KAAK,gBAAgB,EAAc,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,KAAK,SAAS,EAAa,MAAM,OAAO,CAAC;AAClD,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,oBAAoB,EAE1B,MAAM,OAAO,CAAC;AACf,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,EAAwB,KAAK,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,sFAAsF;AACtF,KAAK,iBAAiB,CAAC,CAAC,EAAE,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,CACxE,CAAC,EACD,SAAS,GAAG,QAAQ,CACrB,GAAG;IACF,OAAO,CAAC,EAAE,QAAQ,CAAC;IACnB,MAAM,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;CAC/B,CAAC;AAEF,kFAAkF;AAClF,KAAK,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,CAC7E,CAAC,EACD,SAAS,CACV,GAAG;IACF,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC;CACrC,CAAC;AAEF,mEAAmE;AACnE,MAAM,WAAW,OAAO,CAAC,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC/D,QAAQ,CACN,MAAM,EAAE,SAAS,EACjB,QAAQ,EAAE,UAAU,GAAG,UAAU,EAAE,EACnC,MAAM,CAAC,EAAE,iBAAiB,CAAC,cAAc,EAAE,QAAQ,CAAC,GACnD,IAAI,CAAC;IACR,UAAU,CACR,QAAQ,EAAE,UAAU,GAAG,UAAU,EAAE,EACnC,MAAM,CAAC,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GACrD,OAAO,CAAC;IACX,cAAc,CAAC,KAAK,EAClB,MAAM,EAAE,eAAe,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,EACrE,IAAI,EAAE,KAAK,GACV,SAAS,CAAC;IACb,gBAAgB,CAAC,KAAK,EACpB,MAAM,EAAE,eAAe,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,GAChE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,oBAAoB,CAAC,KAAK,EACxB,MAAM,EAAE,eAAe,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,GACpE,OAAO,CAAC,SAAS,CAAC,CAAC;IACtB,SAAS,CAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/E;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,CAS3F"}

package/dist/tools/view-file.d.ts

@@ -13,6 +13,16 @@
  * sandboxed to a `baseDir`, and downloads are capped before they reach memory.
  */
 import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+/**
+ * Annotation telling the client who a content block is for. `audience` lists
+ * `'user'` (render for the human) and/or `'assistant'` (keep in model context);
+ * `priority` (0–1) hints how prominently. Same shape as the MCP resource/prompt
+ * annotation.
+ */
+export interface McpAnnotations {
+    audience?: ('user' | 'assistant')[];
+    priority?: number;
+}
 /** An MCP content block — text / image / audio (video cannot be inlined). */
 export type McpMediaContent = {
     type: 'text';
@@ -21,10 +31,12 @@ export type McpMediaContent = {
     type: 'image';
     data: string;
     mimeType: string;
+    annotations?: McpAnnotations;
 } | {
     type: 'audio';
     data: string;
     mimeType: string;
+    annotations?: McpAnnotations;
 };
 export interface ViewFileOptions {
     /**

package/dist/tools/view-file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"view-file.d.ts","sourceRoot":"","sources":["../../src/tools/view-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AA6BzE,6EAA6E;AAC7E,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtD,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AA0JD;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,eAAe,EAAE,CAAC,CA+B5B;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAE,eAAoB,GAAG,IAAI,CA4BpF"}
+{"version":3,"file":"view-file.d.ts","sourceRoot":"","sources":["../../src/tools/view-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAwBzE;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,6EAA6E;AAC7E,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,cAAc,CAAA;CAAE,GAC/E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,cAAc,CAAA;CAAE,CAAC;AAEpF,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AA4DD;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,eAAe,EAAE,CAAC,CA4C5B;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAE,eAAoB,GAAG,IAAI,CA+BpF"}

package/dist/tools/wait-core.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The shared poll-until-done loop — one backoff/timeout engine behind both the
+ * CLI `--wait` (`pollUntilDone`) and the native MCP `mountWait` tool, so the
+ * polling mechanics live in exactly one place. Domain-free (ADR 0002): the
+ * caller supplies how to fetch a state (`poll`) and when it is terminal (`done`).
+ */
+export interface PollUntilParams<T> {
+    /** Fetch the current state — called once per tick. */
+    poll: () => Promise<T>;
+    /** Stop when this returns `true` for a fetched state. */
+    done: (state: T) => boolean;
+    /** Backoff schedule in seconds; the last entry repeats. Default `[2,3,5,5,8,10]`. */
+    backoff?: number[];
+    /** Max seconds before giving up. Default `600`. */
+    timeoutSec?: number;
+    /** Injectable sleep for tests. */
+    sleepFn?: (ms: number) => Promise<void>;
+    /** Progress callback — `(attempt, elapsedSec)` after each non-terminal poll. */
+    onTick?: (attempt: number, elapsedSec: number) => void;
+}
+export interface PollUntilResult<T> {
+    /** The last fetched state. */
+    state: T;
+    /** `true` when the timeout was hit before `done`. */
+    timedOut: boolean;
+}
+/**
+ * Poll until `done` or the timeout. Polls first, then sleeps with backoff —
+ * returns the terminal state (`timedOut: false`) or the last state seen when
+ * the deadline passed (`timedOut: true`).
+ */
+export declare function pollUntil<T>(params: PollUntilParams<T>): Promise<PollUntilResult<T>>;
+//# sourceMappingURL=wait-core.d.ts.map

package/dist/tools/wait-core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wait-core.d.ts","sourceRoot":"","sources":["../../src/tools/wait-core.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,sDAAsD;IACtD,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IACvB,yDAAyD;IACzD,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,CAAC;IAC5B,qFAAqF;IACrF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,gFAAgF;IAChF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;CACxD;AAED,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,8BAA8B;IAC9B,KAAK,EAAE,CAAC,CAAC;IACT,qDAAqD;IACrD,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAkB1F"}

package/dist/tools.d.ts

@@ -1,12 +1,23 @@
+export type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 export { type AgentContext, type AgentMountConfig, mountAgent } from './tools/agent';
+export { type CliConfig, createCli } from './tools/cli';
+export type { ExitCodeMap } from './tools/cli-format';
+export type { CliWaitConfig } from './tools/cli-wait';
 export { coerceJsonArgs } from './tools/coerce';
 export type { ToolCallHooks, ToolLifecycle, ToolResult } from './tools/execute';
 export { flattenDiscriminatedUnion } from './tools/flatten';
 export { buildToolManifest, type ToolManifestEntry } from './tools/manifest';
-export { buildMcpServer, type IncompatibleSchemaPolicy, type McpMountConfig, type McpServerBuildConfig, mountMcp, validateMcpSchemas, } from './tools/mcp';
+export { buildMcpServer, type IncompatibleSchemaPolicy, type McpMountConfig, type McpServerBuildConfig, mountMcp, mountMcpResource, validateMcpSchemas, } from './tools/mcp';
+export { EXT_APPS_BUNDLE_PLACEHOLDER, inlineMcpAppBundle, type McpAppCsp, type McpAppResourceMeta, type McpResourceDef, RESOURCE_MIME_TYPE, } from './tools/mcp-app';
 export { createMcpHandler, type McpHandlerConfig } from './tools/mcp-handler';
 export { createStdioMcpServer, type StdioMcpServerConfig } from './tools/mcp-stdio';
 export { collectTools, type MountableTool, type ToolExtend } from './tools/mount';
+export { type DownloadToolConfig, mountDownload } from './tools/mount-download';
+export { mountUpload, type UploadToolConfig } from './tools/mount-upload';
+export { mountWait, type WaitToolConfig } from './tools/mount-wait';
+export { oauthProtectedResourceRoute, PROTECTED_RESOURCE_PATH, type ProtectedResourceConfig, protectedResourceMetadataUrl, wwwAuthenticateHeader, } from './tools/oauth-metadata';
+export { type AuthCodeData, type AuthRequest, type ClientMetadata, mountOAuthProvider, type OAuthProviderConfig, type RefreshData, type RegisteredClient, } from './tools/oauth-provider';
 export { type ImplementRemoteOptions, implementRemote } from './tools/remote';
+export { createToolkit, type Toolkit } from './tools/toolkit';
 export { type McpMediaContent, mountViewFile, resolveMedia } from './tools/view-file';
 //# sourceMappingURL=tools.d.ts.map

package/dist/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,gBAAgB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EACL,cAAc,EACd,KAAK,wBAAwB,EAC7B,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,QAAQ,EACR,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,KAAK,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAClF,OAAO,EAAE,KAAK,sBAAsB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAE,KAAK,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,gBAAgB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,EAAE,KAAK,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxD,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EACL,cAAc,EACd,KAAK,wBAAwB,EAC7B,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,QAAQ,EACR,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,KAAK,SAAS,EACd,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,KAAK,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAClF,OAAO,EAAE,KAAK,kBAAkB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,4BAA4B,EAC5B,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,KAAK,sBAAsB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,KAAK,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,KAAK,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC"}