stitchkit 0.93.0 → 0.94.1

package/dist/tools/define-download-tool.d.ts

@@ -1,18 +0,0 @@
-import type { ZodObject, z } from 'zod';
-import { ManagedFileRefSchema } from '../contract/index.js';
-import type { ManagedFileBoundary } from '../files/boundary.js';
-import { type ManagedNativeToolConfig } from './native-definition.js';
-import { type RuntimeToolDefinitionWithOutput, type RuntimeToolHandlerContext, type RuntimeToolPresenters } from './runtime-tool.js';
-export interface DefineDownloadToolConfig<TInput extends ZodObject> extends ManagedNativeToolConfig {
-    input: TInput;
-    resolveUrl: (input: z.output<TInput>, context: RuntimeToolHandlerContext<TInput>) => string | null | Promise<string | null>;
-    files: ManagedFileBoundary;
-    pathFromInput?: (input: z.output<TInput>) => string | undefined;
-    allowPrivateHosts?: boolean;
-    maxBytes?: number;
-    timeoutMs?: number;
-    present?: RuntimeToolPresenters<z.output<typeof ManagedFileRefSchema>>;
-}
-/** Define one guarded managed download operation. */
-export declare function defineDownloadTool<TInput extends ZodObject>(config: DefineDownloadToolConfig<TInput>): RuntimeToolDefinitionWithOutput<TInput, typeof ManagedFileRefSchema>;
-//# sourceMappingURL=define-download-tool.d.ts.map

package/dist/tools/define-download-tool.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"define-download-tool.d.ts","sourceRoot":"","sources":["../../src/tools/define-download-tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxC,OAAO,EAAY,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAG7D,OAAO,EAAE,KAAK,uBAAuB,EAAyB,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EAEL,KAAK,+BAA+B,EACpC,KAAK,yBAAyB,EAC9B,KAAK,qBAAqB,EAC3B,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,wBAAwB,CAAC,MAAM,SAAS,SAAS,CAChE,SAAQ,uBAAuB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,CACV,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EACvB,OAAO,EAAE,yBAAyB,CAAC,MAAM,CAAC,KACvC,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5C,KAAK,EAAE,mBAAmB,CAAC;IAC3B,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,GAAG,SAAS,CAAC;IAChE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC;CACxE;AAED,qDAAqD;AACrD,wBAAgB,kBAAkB,CAAC,MAAM,SAAS,SAAS,EACzD,MAAM,EAAE,wBAAwB,CAAC,MAAM,CAAC,GACvC,+BAA+B,CAAC,MAAM,EAAE,OAAO,oBAAoB,CAAC,CAmCtE"}

package/dist/tools/define-upload-tool.d.ts

@@ -1,16 +0,0 @@
-import { type ZodType, z } from 'zod';
-import type { ManagedFileBoundary, ManagedFileSource } from '../files/boundary.js';
-import { type ManagedNativeToolConfig } from './native-definition.js';
-import { type RuntimeToolDefinitionWithOutput, type RuntimeToolHandlerContext, type RuntimeToolPresenters } from './runtime-tool.js';
-export declare const UploadToolInputSchema: z.ZodObject<{
-    path: z.ZodString;
-}, z.core.$strip>;
-export interface DefineUploadToolConfig<TOutput extends ZodType> extends ManagedNativeToolConfig {
-    output: TOutput;
-    files: ManagedFileBoundary;
-    upload: (source: ManagedFileSource, context: RuntimeToolHandlerContext<typeof UploadToolInputSchema>) => z.output<TOutput> | Promise<z.output<TOutput>>;
-    present?: RuntimeToolPresenters<z.output<TOutput>>;
-}
-/** Define one managed local-file upload operation. */
-export declare function defineUploadTool<TOutput extends ZodType>(config: DefineUploadToolConfig<TOutput>): RuntimeToolDefinitionWithOutput<typeof UploadToolInputSchema, TOutput>;
-//# sourceMappingURL=define-upload-tool.d.ts.map

package/dist/tools/define-upload-tool.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"define-upload-tool.d.ts","sourceRoot":"","sources":["../../src/tools/define-upload-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAEtC,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEhF,OAAO,EAAE,KAAK,uBAAuB,EAAyB,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EAEL,KAAK,+BAA+B,EACpC,KAAK,yBAAyB,EAC9B,KAAK,qBAAqB,EAC3B,MAAM,gBAAgB,CAAC;AAGxB,eAAO,MAAM,qBAAqB;;iBAEhC,CAAC;AAEH,MAAM,WAAW,sBAAsB,CAAC,OAAO,SAAS,OAAO,CAC7D,SAAQ,uBAAuB;IAC/B,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,mBAAmB,CAAC;IAC3B,MAAM,EAAE,CACN,MAAM,EAAE,iBAAiB,EACzB,OAAO,EAAE,yBAAyB,CAAC,OAAO,qBAAqB,CAAC,KAC7D,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;CACpD;AAED,sDAAsD;AACtD,wBAAgB,gBAAgB,CAAC,OAAO,SAAS,OAAO,EACtD,MAAM,EAAE,sBAAsB,CAAC,OAAO,CAAC,GACtC,+BAA+B,CAAC,OAAO,qBAAqB,EAAE,OAAO,CAAC,CAyBxE"}

package/dist/tools/define-view-file-tool.d.ts

@@ -1,10 +0,0 @@
-import type { z } from 'zod';
-import { type ManagedNativeToolConfig } from './native-definition.js';
-import { type RuntimeToolDefinitionWithOutput, type RuntimeToolPresenters } from './runtime-tool.js';
-import { ViewFileInputSchema, type ViewFileOptions, ViewFileOutputSchema } from './view-file.js';
-export interface DefineViewFileToolConfig extends ManagedNativeToolConfig, ViewFileOptions {
-    present?: RuntimeToolPresenters<z.output<typeof ViewFileOutputSchema>>;
-}
-/** Define one protected managed multimodal media-inspection operation. */
-export declare function defineViewFileTool(config: DefineViewFileToolConfig): RuntimeToolDefinitionWithOutput<typeof ViewFileInputSchema, typeof ViewFileOutputSchema>;
-//# sourceMappingURL=define-view-file-tool.d.ts.map

package/dist/tools/define-view-file-tool.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"define-view-file-tool.d.ts","sourceRoot":"","sources":["../../src/tools/define-view-file-tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EAAE,KAAK,uBAAuB,EAAyB,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EAIL,KAAK,+BAA+B,EACpC,KAAK,qBAAqB,EAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAEL,mBAAmB,EACnB,KAAK,eAAe,EACpB,oBAAoB,EACrB,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,wBAAyB,SAAQ,uBAAuB,EAAE,eAAe;IACxF,OAAO,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC;CACxE;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,wBAAwB,GAC/B,+BAA+B,CAAC,OAAO,mBAAmB,EAAE,OAAO,oBAAoB,CAAC,CAwC1F"}

package/dist/tools/define-wait-tool.d.ts

@@ -1,22 +0,0 @@
-import type { ZodObject, ZodType, z } from 'zod';
-import { type ManagedNativeToolConfig } from './native-definition.js';
-import { type RuntimeToolDefinitionWithOutput, type RuntimeToolHandlerContext, type RuntimeToolPresenters } from './runtime-tool.js';
-export interface ManagedWaitRender {
-    text: string;
-    isError: boolean;
-}
-export interface DefineWaitToolConfig<TInput extends ZodObject, TState extends ZodType> extends ManagedNativeToolConfig {
-    input: TInput;
-    state: TState;
-    poll: (input: z.output<TInput>, context: RuntimeToolHandlerContext<TInput>) => unknown | Promise<unknown>;
-    done: (state: z.output<TState>) => boolean;
-    timeoutFromInput?: (input: z.output<TInput>) => number | undefined;
-    backoff?: number[];
-    defaultTimeout?: number;
-    /** Optional pure MCP renderer; `isError` also classifies terminal domain failure. */
-    render?: (state: z.output<TState>, timedOut: boolean) => ManagedWaitRender;
-    present?: RuntimeToolPresenters<z.output<TState>>;
-}
-/** Define one managed wait operation for `runtimeTools` and/or Agent tools. */
-export declare function defineWaitTool<TInput extends ZodObject, TState extends ZodType>(config: DefineWaitToolConfig<TInput, TState>): RuntimeToolDefinitionWithOutput<TInput, TState>;
-//# sourceMappingURL=define-wait-tool.d.ts.map

package/dist/tools/define-wait-tool.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"define-wait-tool.d.ts","sourceRoot":"","sources":["../../src/tools/define-wait-tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAEjD,OAAO,EAAE,KAAK,uBAAuB,EAAyB,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EAGL,KAAK,+BAA+B,EACpC,KAAK,yBAAyB,EAC9B,KAAK,qBAAqB,EAC3B,MAAM,gBAAgB,CAAC;AAGxB,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB,CAAC,MAAM,SAAS,SAAS,EAAE,MAAM,SAAS,OAAO,CACpF,SAAQ,uBAAuB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,CACJ,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EACvB,OAAO,EAAE,yBAAyB,CAAC,MAAM,CAAC,KACvC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC;IAC3C,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,GAAG,SAAS,CAAC;IACnE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qFAAqF;IACrF,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,KAAK,iBAAiB,CAAC;IAC3E,OAAO,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;CACnD;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,MAAM,SAAS,SAAS,EAAE,MAAM,SAAS,OAAO,EAC7E,MAAM,EAAE,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3C,+BAA+B,CAAC,MAAM,EAAE,MAAM,CAAC,CA4DjD"}

package/dist/tools/download-core.d.ts

@@ -1,20 +0,0 @@
-import type { ManagedFileRef } from '../contract/file-ref.js';
-import type { ManagedFileBoundary } from '../files/boundary.js';
-/** Expected, caller-safe download failure; unexpected runtime errors still throw raw. */
-export declare class DownloadOperationError extends Error {
-    readonly code: 'DOWNLOAD_HTTP_ERROR' | 'DOWNLOAD_TOO_LARGE';
-    readonly status: number;
-    constructor(code: 'DOWNLOAD_HTTP_ERROR' | 'DOWNLOAD_TOO_LARGE', message: string, status: number);
-}
-export interface DownloadOperationConfig {
-    url: string;
-    files: ManagedFileBoundary;
-    path?: string;
-    allowPrivateHosts?: boolean;
-    maxBytes?: number;
-    timeoutMs?: number;
-    signal?: AbortSignal;
-}
-/** Fetch and persist one URL without owning tool registration or presentation. */
-export declare function runDownloadOperation(config: DownloadOperationConfig): Promise<ManagedFileRef>;
-//# sourceMappingURL=download-core.d.ts.map

package/dist/tools/download-core.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"download-core.d.ts","sourceRoot":"","sources":["../../src/tools/download-core.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAmB7D,yFAAyF;AACzF,qBAAa,sBAAuB,SAAQ,KAAK;aAE7B,IAAI,EAAE,qBAAqB,GAAG,oBAAoB;aAElD,MAAM,EAAE,MAAM;IAHhC,YACkB,IAAI,EAAE,qBAAqB,GAAG,oBAAoB,EAClE,OAAO,EAAE,MAAM,EACC,MAAM,EAAE,MAAM,EAI/B;CACF;AAwBD,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,mBAAmB,CAAC;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,kFAAkF;AAClF,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,cAAc,CAAC,CA4BzB"}

package/dist/tools/flatten-join.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"flatten-join.d.ts","sourceRoot":"","sources":["../../src/tools/flatten-join.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAExD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,sBAAsB,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACnB;AA+ED,oFAAoF;AACpF,wBAAgB,YAAY,CAAC,MAAM,EAAE,sBAAsB,GAAG,MAAM,EAAE,GAAG,IAAI,CAK5E;AA+HD,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,eAAe,EAAE,GAAG,sBAAsB,CAuB1F"}

package/dist/tools/flatten.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"flatten.d.ts","sourceRoot":"","sources":["../../src/tools/flatten.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAsJ7D;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,sBAAsB,GAAG,sBAAsB,CAG5F;AAED,0EAA0E;AAC1E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,sBAAsB,GAAG,sBAAsB,CAG3F"}

package/dist/tools/json-schema-dialect.d.ts

@@ -1,17 +0,0 @@
-/** True when a document says, in its own `$schema`, that it is draft-07. */
-export declare function declaresDraft07(dialect: unknown): boolean;
-/**
- * Move a document's top-level `definitions` to `$defs`, carrying its pointers.
- *
- * A JSON Schema document that names one dialect and uses another's keyword is
- * not a style question: a reader registers reusable subschemas from the keyword
- * the dialect declares and then cannot resolve `#/definitions/x` at all. Both
- * halves of this framework met that document — the MCP SDK stamps 2020-12 onto
- * the metadata it is handed, and our own MCP client obeyed the stamp.
- *
- * Only the top level moves. A `definitions` deeper in the document may be a
- * property literally called "definitions", and guessing which is worse than
- * leaving it where the author put it.
- */
-export declare function withDefsDialect(schema: Record<string, unknown>): Record<string, unknown>;
-//# sourceMappingURL=json-schema-dialect.d.ts.map

package/dist/tools/json-schema-dialect.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"json-schema-dialect.d.ts","sourceRoot":"","sources":["../../src/tools/json-schema-dialect.ts"],"names":[],"mappings":"AAQA,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAEzD;AAeD;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAUxF"}

package/dist/tools/json-schema.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"json-schema.d.ts","sourceRoot":"","sources":["../../src/tools/json-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,+EAA+E;AAC/E,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE9C;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,CAAC,CAAC,OAAO,EACjB,EAAE,EAAE,YAAY,EAChB,eAAe,GAAE,OAAO,GAAG,KAAe,EAC1C,MAAM,GAAE,UAAU,GAAG,eAAiC,GACrD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAOzB;AAED,uDAAuD;AACvD,MAAM,WAAW,eAAe;IAC9B,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,+DAA+D;IAC/D,QAAQ,EAAE,OAAO,CAAC;IAClB,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAOD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe,EAAE,CA+CvF"}

package/dist/tools/managed-file-error.d.ts

@@ -1,6 +0,0 @@
-import { AppError } from '../contract/index.js';
-/** Convert only caller-safe managed failures; unexpected IO retains its raw identity. */
-export declare function managedFileAppError(error: unknown): AppError | null;
-/** Partial/raw tool paths have no throwing runner, so normalize and log unknown failures here. */
-export declare function normalizeFileToolError(error: unknown): AppError;
-//# sourceMappingURL=managed-file-error.d.ts.map

package/dist/tools/managed-file-error.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"managed-file-error.d.ts","sourceRoot":"","sources":["../../src/tools/managed-file-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAuB,MAAM,aAAa,CAAC;AAgB5D,yFAAyF;AACzF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,CAkBnE;AAED,kGAAkG;AAClG,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAE/D"}

package/dist/tools/mcp-app.d.ts

@@ -1,62 +0,0 @@
-import type { CacheHint } from '@modelcontextprotocol/server';
-/**
- * MIME type a host uses to recognise an MCP Apps UI resource — it renders the
- * HTML as an interactive sandboxed iframe rather than displaying the source.
- */
-export declare const RESOURCE_MIME_TYPE = "text/html;profile=mcp-app";
-/** Placeholder a widget HTML file carries where the ext-apps runtime is inlined. */
-export declare const EXT_APPS_BUNDLE_PLACEHOLDER = "/*__EXT_APPS_BUNDLE__*/";
-/**
- * Content-Security-Policy allowlists a widget declares so the host's iframe can
- * reach external origins (maps to the host's CSP directives). Default is
- * block-all, so any external image / fetch origin must be listed.
- */
-export interface McpAppCsp {
-    /** `connect-src` — fetch / XHR / WebSocket origins. */
-    connectDomains?: string[];
-    /** `img-src` / `script-src` / `style-src` / `font-src` / `media-src` origins. */
-    resourceDomains?: string[];
-    /** `frame-src` — nested iframe origins (currently restricted in some hosts). */
-    frameDomains?: string[];
-    /** `base-uri` origins. */
-    baseUriDomains?: string[];
-}
-/** UI metadata attached to a served resource's content (`_meta.ui`). */
-export interface McpAppResourceMeta {
-    csp?: McpAppCsp;
-    /** Drop the host's outer card border (mobile). */
-    prefersBorder?: boolean;
-    /** Stable origin for external-API CORS allowlists. */
-    domain?: string;
-}
-/**
- * A UI resource served over MCP. `read` returns the widget HTML (already
- * bundle-inlined). The default `mimeType` is the apps MIME type, so a plain
- * widget needs only `uri`, `name` and `read`.
- */
-export interface McpResourceDef {
-    /** `ui://…` uri — must match a tool's `ui.resourceUri`. */
-    uri: string;
-    /** Human-readable name (shown in `resources/list`). */
-    name: string;
-    /** MIME type — defaults to `RESOURCE_MIME_TYPE`. */
-    mimeType?: string;
-    /** Modern MCP freshness for this resource; absent means zero/private. */
-    cacheHint?: CacheHint;
-    /** Optional UI metadata (CSP, border, domain) applied to the content. */
-    ui?: McpAppResourceMeta;
-    /** Return the resource body — the widget HTML for an apps resource. */
-    read: () => string | Promise<string>;
-}
-/**
- * Inline the `@modelcontextprotocol/ext-apps` browser runtime into a widget's
- * HTML, replacing `EXT_APPS_BUNDLE_PLACEHOLDER`. The iframe CSP blocks CDN
- * script fetches, so the runtime must be inlined at startup rather than
- * imported. `ext-apps` is an optional peer — a clear error is thrown if the
- * widget needs the bundle but the peer is not installed.
- *
- * The bundle's trailing `export{…}` is rewritten to `globalThis.ExtApps = {…}`
- * so an inline `<script type="module">` can read `globalThis.ExtApps`.
- */
-export declare function inlineMcpAppBundle(html: string): string;
-//# sourceMappingURL=mcp-app.d.ts.map

package/dist/tools/mcp-app.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-app.d.ts","sourceRoot":"","sources":["../../src/tools/mcp-app.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,kBAAkB,8BAA8B,CAAC;AAE9D,oFAAoF;AACpF,eAAO,MAAM,2BAA2B,4BAA4B,CAAC;AAErE;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,uDAAuD;IACvD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,iFAAiF;IACjF,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,0BAA0B;IAC1B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,kDAAkD;IAClD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,2DAA2D;IAC3D,GAAG,EAAE,MAAM,CAAC;IACZ,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,yEAAyE;IACzE,EAAE,CAAC,EAAE,kBAAkB,CAAC;IACxB,uEAAuE;IACvE,IAAI,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACtC;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkCvD"}

package/dist/tools/mcp-catalog.d.ts

@@ -1,68 +0,0 @@
-import type { PreparedMcpServerSurface } from './mcp-prepare.js';
-/**
- * The `_meta` key carrying the catalog stamp, on every advertised tool and on
- * every tool result.
- *
- * Namespaced, because `_meta` is shared ground: a host, the official SDK and
- * the application all write into it, and a bare `catalog` would eventually mean
- * two things at once.
- */
-export declare const MCP_CATALOG_META_KEY = "stitchkit/catalog";
-/**
- * What the server says its advertised catalog currently is.
- *
- * `digest` changes whenever any advertised tool's name, description, input
- * schema, output schema or annotations change — and only then. `tools` is the
- * count, carried because it makes a mismatch legible without a second lookup
- * ("they advertise 41, I hold 39").
- */
-export interface McpCatalogStamp {
-    digest: string;
-    tools: number;
-}
-/**
- * Fingerprint one advertised MCP catalog.
- *
- * The problem this answers is not a broken server — it is a **consumer holding
- * an old idea of the contract and unable to find out**. A long-lived session
- * lists the tools once; the server is redeployed with a renamed field; every
- * later call is refused, and the refusal looks to the consumer like a fault in
- * the source, because a stale catalog is invisible from inside. The fix has to
- * ride on responses the consumer is already receiving, so it can compare what
- * it holds against what is live without asking anything extra.
- *
- * `notifications/tools/list_changed` is the push-shaped answer, and this
- * framework's MCP HTTP handler cannot send it: it is stateless by construction
- * (`createMcpHandler` builds a fresh server per request and keeps no session),
- * so there is no retained stream to notify. The stamp works precisely because
- * it needs no session.
- */
-export declare function mcpCatalogStamp(surface: PreparedMcpServerSurface): McpCatalogStamp;
-/** The `_meta` fragment a stamped tool or result carries. */
-export declare function mcpCatalogMeta(stamp: McpCatalogStamp): Record<string, unknown>;
-/**
- * Read a catalog stamp out of a peer's `_meta`, or `null` when there is none.
- *
- * Parsed, not trusted: this arrives over the wire from another process, and the
- * fact that it describes a catalog does not exempt it from being validated.
- */
-export declare function readMcpCatalogStamp(meta: unknown): McpCatalogStamp | null;
-/**
- * Attach the stamp to a tool registration, so `tools/list` carries the catalog
- * the listing came from — the value a consumer stores alongside the tools.
- */
-export declare function stampToolRegistration<TConfig extends {
-    _meta?: Record<string, unknown>;
-}>(config: TConfig, stamp: McpCatalogStamp | undefined): TConfig;
-/**
- * Attach the stamp to a tool result.
- *
- * This is the half that matters. A consumer compares it against the stamp it
- * stored at listing time, on a response it was going to receive anyway, and so
- * learns its catalog is stale WITHOUT asking — including on the refusal that a
- * stale catalog causes, which is exactly when the question gets asked.
- */
-export declare function stampToolResult<TResult extends {
-    _meta?: Record<string, unknown>;
-}>(result: TResult, stamp: McpCatalogStamp | undefined): TResult;
-//# sourceMappingURL=mcp-catalog.d.ts.map

package/dist/tools/mcp-catalog.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-catalog.d.ts","sourceRoot":"","sources":["../../src/tools/mcp-catalog.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAmB,MAAM,eAAe,CAAC;AAE/E;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AAExD;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAwBD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,wBAAwB,GAAG,eAAe,CAclF;AAED,6DAA6D;AAC7D,wBAAgB,cAAc,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE9E;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAQzE;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,SAAS;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EACvF,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,eAAe,GAAG,SAAS,GACjC,OAAO,CAGT;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,SAAS;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EACjF,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,eAAe,GAAG,SAAS,GACjC,OAAO,CAGT"}

package/dist/tools/mcp-handler.d.ts

@@ -1,46 +0,0 @@
-import type { RawRoute } from '../server/types.js';
-import { type McpServerBuildConfig } from './mcp.js';
-import { type McpSurfaceRegistry } from './mcp-prepare.js';
-import { type ProtectedResourceConfig } from './oauth-metadata.js';
-/** Compatibility posture for protocol revisions predating 2026-07-28. */
-export type McpLegacyPolicy = 'serve' | 'reject';
-/** DNS-rebinding policy applied before authentication and SDK dispatch. */
-export interface McpHttpSecurityConfig {
-    /** Allowed `Host` header hostnames. Defaults to loopback hostnames only. */
-    allowedHosts?: readonly string[];
-    /** Allowed browser `Origin` hostnames. Defaults to loopback hostnames only. */
-    allowedOrigins?: readonly string[];
-}
-export interface McpHttpConfig<TAuth> {
-    /** Resolve an incoming request to an identity. Return `null` → 401. */
-    auth: (req: Request) => TAuth | null | Promise<TAuth | null>;
-    /** OAuth 2.0 Protected Resource metadata used by the 401 challenge. */
-    protectedResource?: ProtectedResourceConfig;
-    /** Serve legacy stateless requests or reject them. Default: `serve`. */
-    legacy?: McpLegacyPolicy;
-    /** Optional Fetch-boundary Host and Origin policy. */
-    security?: McpHttpSecurityConfig;
-    /** Observe a protocol/security rejection without entering lifecycle or tool hooks. */
-    onTransportRejected?: (event: {
-        request: Request;
-        response: Response;
-    }) => void | Promise<void>;
-}
-export type McpHandlerConfig<TAuth, TSurfaces extends McpSurfaceRegistry = McpSurfaceRegistry> = McpServerBuildConfig<TAuth, TSurfaces> & McpHttpConfig<TAuth>;
-/** Framework-owned Fetch face for one stateless dual-era MCP endpoint. */
-export interface McpHttpHandler {
-    fetch(request: Request): Promise<Response>;
-    close(): Promise<void>;
-}
-/**
- * Build a stateless MCP HTTP handler on the official SDK v2 request factory.
- * Every request gets a fresh SDK server and a fresh Stitchkit tool context;
- * no protocol session, event store or `Mcp-Session-Id` exists in this layer.
- */
-export declare function createMcpHandler<TAuth, const TSurfaces extends McpSurfaceRegistry = McpSurfaceRegistry>(config: McpHandlerConfig<TAuth, TSurfaces>): McpHttpHandler;
-/** Mount an MCP handler as an ordinary framework-owned raw HTTP route. */
-export declare function createMcpHttpRoute(config: {
-    path: string;
-    handler: McpHttpHandler;
-}): RawRoute;
-//# sourceMappingURL=mcp-handler.d.ts.map

package/dist/tools/mcp-handler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-handler.d.ts","sourceRoot":"","sources":["../../src/tools/mcp-handler.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAA8C,KAAK,oBAAoB,EAAE,MAAM,OAAO,CAAC;AAC9F,OAAO,EACL,KAAK,kBAAkB,EAGxB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,KAAK,uBAAuB,EAAyB,MAAM,kBAAkB,CAAC;AAEvF,yEAAyE;AACzE,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEjD,2EAA2E;AAC3E,MAAM,WAAW,qBAAqB;IACpC,4EAA4E;IAC5E,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,+EAA+E;IAC/E,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,aAAa,CAAC,KAAK;IAClC,uEAAuE;IACvE,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,KAAK,GAAG,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAC7D,uEAAuE;IACvE,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;IAC5C,wEAAwE;IACxE,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,sDAAsD;IACtD,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,sFAAsF;IACtF,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE;QAC5B,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,QAAQ,CAAC;KACpB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,MAAM,MAAM,gBAAgB,CAC1B,KAAK,EACL,SAAS,SAAS,kBAAkB,GAAG,kBAAkB,IACvD,oBAAoB,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;AAElE,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAgFD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EACL,KAAK,CAAC,SAAS,SAAS,kBAAkB,GAAG,kBAAkB,EAC/D,MAAM,EAAE,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,cAAc,CAkF5D;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,cAAc,CAAC;CACzB,GAAG,QAAQ,CAMX"}

package/dist/tools/mcp-prepare.d.ts

@@ -1,75 +0,0 @@
-import type { CallToolResult } from '@modelcontextprotocol/server';
-import type { z } from 'zod';
-import type { ServiceDef, StitchLogger } from '../server/types.js';
-import type { ErrorHintFn, ToolResult } from './execute.js';
-import type { ToolPresentationSchema } from './flatten.js';
-import { type McpProjectionPreparationConfig, type McpSchemaValidationConfig } from './internal/surface-projector.js';
-import { type MountableTool, type ToolExtend } from './mount.js';
-import type { RuntimeToolDefinition } from './runtime-tool.js';
-import { type ToolSurfaceDefinition } from './surface.js';
-/**
- * What to do when a tool's schema cannot be advertised on the MCP surface — a
- * union / discriminated-union input (MCP needs an object), or a construct
- * JSON Schema cannot represent (`z.date()`, `z.map()`, …):
- * - `throw` (default) — fail the build loudly, listing every bad tool. Better
- *   a failed deploy than a tool that silently vanishes from the MCP surface.
- * - `warn` — log and drop the tool.
- * - `skip` — drop the tool silently.
- */
-/** One schema policy shared by validation, mounting and every MCP transport. */
-export type { IncompatibleSchemaPolicy, McpSchemaValidationConfig, } from './internal/surface-projector.js';
-/** Standalone schema-validation input, including the exact surface-shaping options. */
-export interface ValidateMcpSchemasConfig extends McpSchemaValidationConfig {
-    services: ServiceDef[];
-    logger?: StitchLogger;
-    extend?: ToolExtend;
-    flattenUnionInput?: boolean;
-}
-/** How a tool's result maps to MCP `structuredContent`. */
-export type StructuredMode = 'none' | 'direct';
-/**
- * Shape a `ToolResult` into an MCP tool response. Always emits a text `content`
- * block for declared output (the model reads it). Emits `structuredContent`
- * in the exact validated JSON shape whenever the tool declared an
- * `outputSchema`. The official SDK owns any protocol-era wire adaptation.
- */
-export declare function formatMcpResult(result: ToolResult, mode: StructuredMode, toolName?: string, errorHint?: ErrorHintFn): CallToolResult;
-/** One immutable descriptor cleared to register on any fresh MCP server. */
-export interface PreparedMcpTool {
-    mountable: MountableTool;
-    inputSchema: ToolPresentationSchema;
-    outputSchema?: z.ZodType;
-    outputMode: StructuredMode;
-}
-export type PreparedMcpSurface = readonly PreparedMcpTool[];
-export interface McpSurfacePreparationConfig extends McpProjectionPreparationConfig {
-    extend?: ToolExtend;
-    logger?: StitchLogger;
-}
-/**
- * Prepare the deterministic MCP surface once. No auth, context, hooks,
- * lifecycle closures, server or transport enters this value.
- */
-export declare function prepareMcpSurface(services: ServiceDef | ServiceDef[], config?: McpSurfacePreparationConfig): PreparedMcpSurface;
-/** One immutable, framework-managed MCP surface selected as a unit. */
-export interface McpSurfaceDefinition extends ToolSurfaceDefinition {
-    services: ServiceDef[];
-}
-/** A finite set of surfaces known when the server/handler is constructed. */
-export type McpSurfaceRegistry = Record<string, McpSurfaceDefinition>;
-/** A runtime definition paired with its already validated MCP descriptor. */
-export interface PreparedRuntimeMcpTool {
-    definition: RuntimeToolDefinition;
-    descriptor: PreparedMcpTool;
-}
-/** Complete immutable tool descriptors for one fresh MCP server runtime. */
-export interface PreparedMcpServerSurface {
-    contractTools: PreparedMcpSurface;
-    runtimeTools: readonly PreparedRuntimeMcpTool[];
-}
-/**
- * Prepare contracts and framework runtime tools as one collision-checked unit.
- * No auth, request context, lifecycle, hooks, SDK server or transport is stored.
- */
-export declare function prepareMcpServerSurface(surface: McpSurfaceDefinition, config?: McpSurfacePreparationConfig): PreparedMcpServerSurface;
-//# sourceMappingURL=mcp-prepare.d.ts.map

package/dist/tools/mcp-prepare.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-prepare.d.ts","sourceRoot":"","sources":["../../src/tools/mcp-prepare.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EACL,KAAK,8BAA8B,EACnC,KAAK,yBAAyB,EAE/B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAiC,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAsB,KAAK,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAE3E;;;;;;;;GAQG;AACH,gFAAgF;AAChF,YAAY,EACV,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AAEtC,uFAAuF;AACvF,MAAM,WAAW,wBAAyB,SAAQ,yBAAyB;IACzE,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAOD,2DAA2D;AAC3D,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE/C;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,cAAc,EACpB,QAAQ,CAAC,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,WAAW,GACtB,cAAc,CAyBhB;AAED,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,aAAa,CAAC;IACzB,WAAW,EAAE,sBAAsB,CAAC;IACpC,YAAY,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IACzB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,MAAM,MAAM,kBAAkB,GAAG,SAAS,eAAe,EAAE,CAAC;AAE5D,MAAM,WAAW,2BAA4B,SAAQ,8BAA8B;IACjF,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,UAAU,GAAG,UAAU,EAAE,EACnC,MAAM,GAAE,2BAAgC,GACvC,kBAAkB,CAIpB;AAoCD,uEAAuE;AACvE,MAAM,WAAW,oBAAqB,SAAQ,qBAAqB;IACjE,QAAQ,EAAE,UAAU,EAAE,CAAC;CACxB;AAED,6EAA6E;AAC7E,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;AAEtE,6EAA6E;AAC7E,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,qBAAqB,CAAC;IAClC,UAAU,EAAE,eAAe,CAAC;CAC7B;AAED,4EAA4E;AAC5E,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,kBAAkB,CAAC;IAClC,YAAY,EAAE,SAAS,sBAAsB,EAAE,CAAC;CACjD;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,oBAAoB,EAC7B,MAAM,GAAE,2BAAgC,GACvC,wBAAwB,CAoC1B"}

package/dist/tools/mcp-progress.d.ts

@@ -1,46 +0,0 @@
-/**
- * Progress for a call that is still running.
- *
- * A tool that takes ten minutes tells a text host nothing today: the call is
- * made, and the next thing the host sees is the answer. The protocol has the
- * channel for this — the host sends a `progressToken` in the request's `_meta`
- * and the server relates `notifications/progress` to that request — and the
- * framework simply never read the token.
- *
- * Both places that can report live here, so there is one implementation of
- * "what a progress update is": the contract-tool path (`mcp-round.ts`, which
- * hands `reportProgress` to the handler) and the native wait tool
- * (`mount-wait.ts`, which reports its own poll ticks).
- */
-import type { ServerContext } from '@modelcontextprotocol/server';
-import type { McpReportProgress } from '../contract/index.js';
-/**
- * The host's progress token, or `undefined` when it asked for none.
- *
- * It rides in the request's own `_meta`, beside the trace keys, and survives
- * the SDK's envelope lift because it is not an envelope key. `_meta` itself can
- * be absent entirely — the SDK drops it when the lift empties it — so "no
- * `_meta`" and "`_meta` without a token" have to mean the same thing here.
- */
-export declare function mcpProgressToken(context: ServerContext): string | number | undefined;
-/**
- * Build the reporter for one call.
- *
- * Without a token it is a no-op, so nothing upstream has to ask whether the
- * host is listening. With one, every update is a `notifications/progress`
- * related to this request.
- *
- * `progress` is required by the protocol and is often the one thing a handler
- * does not know — it has a stage to name and no scale to name it on. An
- * omitted one becomes the ordinal of this update, which is a fact about what
- * happened; a synthesised percentage would be a claim nobody measured. `total`
- * stays absent in that case, so a host renders an unbounded counter rather
- * than a bar stuck at 3%.
- *
- * Nothing here can fail the call. A transport that refuses the notification
- * leaves the host without progress, which is exactly the state of every host
- * that never asked for it — and a message about work must not be able to kill
- * the work it describes.
- */
-export declare function createMcpProgressReporter(context: ServerContext): McpReportProgress;
-//# sourceMappingURL=mcp-progress.d.ts.map

package/dist/tools/mcp-progress.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-progress.d.ts","sourceRoot":"","sources":["../../src/tools/mcp-progress.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAqB,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAExE;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAGpF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,aAAa,GAAG,iBAAiB,CA4BnF"}

package/dist/tools/mcp-round-policy.d.ts

@@ -1,33 +0,0 @@
-import type { EndpointMcpInputRequired, EndpointMcpPolicy } from '../contract/index.js';
-/**
- * The declared rounds, when the declaration is a fixed list.
- *
- * A resolver has nothing to read at declaration time — that is the whole point
- * of it — so everything that inspects a policy statically (surface projection,
- * the surface fingerprint, mount-time validation) asks this first and treats
- * `undefined` as "known only per call".
- */
-export declare function staticInputRounds(policy: EndpointMcpPolicy): readonly EndpointMcpInputRequired[] | undefined;
-/** Validate declarative multi-round policy without importing the optional MCP SDK. */
-export declare function validateMcpRoundPolicy(tool: {
-    name: string;
-}, policy: EndpointMcpPolicy, runtime?: {
-    stateConfigured: boolean;
-    maxRounds: number;
-}): void;
-/**
- * Validate what a resolver actually returned, on the call that returned it.
- *
- * The same two rules the static list is held to — unique keys, no more rounds
- * than the runtime allows — because a resolver can break both, and a policy
- * that is only checked when it happens to be written down is not checked.
- *
- * An empty list is legal here and only here: for a resolver it means "this call
- * needs nothing", which is the answer the feature exists to allow. Declaring
- * zero rounds statically still means the author wrote a policy that can never
- * ask anything, and that stays an error.
- */
-export declare function validateResolvedInputRounds(tool: {
-    name: string;
-}, resolved: readonly EndpointMcpInputRequired[], maxRounds: number): void;
-//# sourceMappingURL=mcp-round-policy.d.ts.map

package/dist/tools/mcp-round-policy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-round-policy.d.ts","sourceRoot":"","sources":["../../src/tools/mcp-round-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAE/E;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,iBAAiB,GACxB,SAAS,wBAAwB,EAAE,GAAG,SAAS,CAEjD;AAED,sFAAsF;AACtF,wBAAgB,sBAAsB,CACpC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EACtB,MAAM,EAAE,iBAAiB,EACzB,OAAO,CAAC,EAAE;IAAE,eAAe,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACxD,IAAI,CAqBN;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EACtB,QAAQ,EAAE,SAAS,wBAAwB,EAAE,EAC7C,SAAS,EAAE,MAAM,GAChB,IAAI,CAEN"}

package/dist/tools/mcp-round.d.ts

@@ -1,61 +0,0 @@
-import { type CallToolResult, type InputRequiredResult, type RequestStateCodec, type ServerContext } from '@modelcontextprotocol/server';
-import { type EndpointMcpPolicy } from '../contract/index.js';
-import { type ToolResult } from './execute.js';
-import type { MountableTool } from './mount.js';
-interface RoundOperationIdentity {
-    toolName: string;
-    serviceName: string;
-    action: string;
-    method: string;
-    scope?: string;
-}
-/** Signed continuation payload. It is authenticated, not encrypted. */
-export interface McpRoundState {
-    identity: RoundOperationIdentity;
-    argumentsDigest: string;
-    round: number;
-    accepted: Record<string, unknown>;
-    /**
-     * Fingerprint of the question plan this conversation started with.
-     *
-     * `argumentsDigest` proves the ARGUMENTS did not change; it says nothing
-     * about the questions, and those are now allowed to be computed. Between two
-     * rounds there is a full round trip to the host, and a resolver that reads
-     * anything outside its arguments — which is exactly the case this feature
-     * exists for — can answer differently the second time. Every other check
-     * would still pass: same principal, same operation, same digest, `round`
-     * still in range. Round 2's question would be asked under round 1's key, the
-     * answer would be accepted if the schemas happened to be compatible, and the
-     * handler would receive an answer to a question nobody asked.
-     *
-     * So the plan is fingerprinted when it is minted and re-checked on every
-     * round. A plan that moved is a refusal, not a different question.
-     */
-    planDigest: string;
-}
-export interface McpRoundRuntime {
-    codec: RequestStateCodec<McpRoundState>;
-    maxRounds: number;
-}
-type ToolRunner = (tool: MountableTool, rawArgs: Record<string, unknown>, context?: Record<string, unknown>) => Promise<ToolResult>;
-export type McpRoundResolution = {
-    kind: 'continue';
-    context?: Record<string, unknown>;
-} | {
-    kind: 'response';
-    response: CallToolResult | InputRequiredResult;
-};
-/** Resolve an ordered opt-in MRTR sequence before the canonical handler executes. */
-export declare function resolveMcpRound(options: {
-    tool: MountableTool;
-    rawArgs: Record<string, unknown>;
-    context: ServerContext;
-    policy?: EndpointMcpPolicy;
-    runtime?: McpRoundRuntime;
-    runTool: ToolRunner;
-    formatFailure: (result: ToolResult) => CallToolResult;
-    /** The mount's JSON-coercion setting, so the resolver parses as the call does. */
-    coerceJsonArgs?: boolean;
-}): Promise<McpRoundResolution>;
-export {};
-//# sourceMappingURL=mcp-round.d.ts.map

package/dist/tools/mcp-round.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-round.d.ts","sourceRoot":"","sources":["../../src/tools/mcp-round.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,cAAc,EAEnB,KAAK,mBAAmB,EAIxB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EACnB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAGL,KAAK,iBAAiB,EAKvB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAA0B,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAOpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,UAAU,sBAAsB;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uEAAuE;AACvE,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,sBAAsB,CAAC;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC;;;;;;;;;;;;;;;OAeG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,iBAAiB,CAAC,aAAa,CAAC,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,KAAK,UAAU,GAAG,CAChB,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC9B,OAAO,CAAC,UAAU,CAAC,CAAC;AAEzB,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,cAAc,GAAG,mBAAmB,CAAA;CAAE,CAAC;AAmMzE,qFAAqF;AACrF,wBAAsB,eAAe,CAAC,OAAO,EAAE;IAC7C,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,OAAO,EAAE,UAAU,CAAC;IACpB,aAAa,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,cAAc,CAAC;IACtD,kFAAkF;IAClF,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAuO9B"}