feat: add support for 'tools' permission

specification/draft/apps.mdx

@@ -193,6 +193,12 @@ interface UIResourceMeta {
      * Maps to Permission Policy `clipboard-write` feature
      */
     clipboardWrite?: {},
+    /**
+     * Request WebMCP tools access
+     *
+     * Maps to Permission Policy `tools` feature
+     */
+    tools?: {},
   },
   /**
    * Dedicated origin for view
@@ -251,6 +257,7 @@ The resource content is returned via `resources/read`:
           microphone?: {};       // Request microphone access
           geolocation?: {};      // Request geolocation access
           clipboardWrite?: {};   // Request clipboard write access
+          tools?: {};            // Request WebMCP tools access
         };
         domain?: string;
         prefersBorder?: boolean;
@@ -694,6 +701,7 @@ interface HostCapabilities {
       microphone?: {};
       geolocation?: {};
       clipboardWrite?: {};
+      tools?: {};
     };
     /** CSP domains approved by the host. */
     csp?: {
@@ -1480,6 +1488,7 @@ These messages are reserved for web-based hosts that implement the recommended d
       microphone?: {},
       geolocation?: {},
       clipboardWrite?: {},
+      tools?: {},
     }
   }
 }

src/app-bridge.test.ts

@@ -2817,6 +2817,10 @@ describe("buildAllowAttribute", () => {
         "clipboard-write",
       );
     });
+
+    it("when only tools is set", () => {
+      expect(buildAllowAttribute({ tools: {} })).toBe("tools");
+    });
   });
 
   describe("returns multiple directives joined with '; '", () => {
@@ -2833,8 +2837,9 @@ describe("buildAllowAttribute", () => {
           microphone: {},
           geolocation: {},
           clipboardWrite: {},
+          tools: {},
         }),
-      ).toBe("camera; microphone; geolocation; clipboard-write");
+      ).toBe("camera; microphone; geolocation; clipboard-write; tools");
     });
   });
 });

src/app-bridge.ts

@@ -194,6 +194,7 @@ export function buildAllowAttribute(
   if (permissions.microphone) allowList.push("microphone");
   if (permissions.geolocation) allowList.push("geolocation");
   if (permissions.clipboardWrite) allowList.push("clipboard-write");
+  if (permissions.tools) allowList.push("tools");
 
   return allowList.join("; ");
 }

src/spec.types.ts

@@ -686,6 +686,12 @@ export interface McpUiResourcePermissions {
    * Maps to Permission Policy `clipboard-write` feature.
    */
   clipboardWrite?: {};
+  /**
+   * @description Request WebMCP tools access.
+   *
+   * Maps to Permission Policy `tools` feature.
+   */
+  tools?: {};
 }
 
 /**