@1mcp/agent 0.39.8 → 0.40.0-beta.1

package/build/transport/http/routes/projectRoutes.js

@@ -0,0 +1,159 @@
+import path from 'node:path';
+import { setTimeout } from 'node:timers/promises';
+import { revalidatePreparationAuthentication } from '../../../application/backendPreparationAdmission.js';
+import { peekBackendPreparationCoordinator, persistedProjectPreparationBlockers, } from '../../../application/backendPreparationCoordinator.js';
+import { canonicalLifecyclePath, getProjectLifecycle, getVerifiedProjectOwner, projectPaths, } from '../../../application/projectLifecycle.js';
+import { ConfigManager } from '../../../config/configManager.js';
+import { AgentConfigManager } from '../../../core/server/agentConfig.js';
+import { requireProjectTarget } from '../../../domains/project-selection/projectSelection.js';
+import { getAuthInfo, revalidateAuthInfo } from '../middlewares/scopeAuthMiddleware.js';
+import { CONTEXT_HEADERS, extractTemplateContextRequest } from '../utils/contextExtractor.js';
+import { authorizeRequestTemplateContext } from '../utils/templateContextAuthority.js';
+import { z } from 'zod';
+export const projectRequestSchema = z
+    .object({
+    action: z.enum(['status', 'release', 'drain', 'resume']),
+    waitMs: z.number().int().min(0).max(60_000).optional(),
+    _meta: z.object({ context: z.unknown(), contextProof: z.unknown() }).strict(),
+})
+    .strict()
+    .superRefine((request, context) => {
+    if (request.waitMs !== undefined && request.action !== 'drain')
+        context.addIssue({ code: 'custom', path: ['waitMs'], message: 'waitMs is only accepted for drain' });
+});
+/** Static backends may be shared outside the checkout: report them rather than close them. */
+function staticProjectBlockers(serverManager, checkout) {
+    const clients = serverManager.getClients?.();
+    if (!clients)
+        return [];
+    const canonical = canonicalLifecyclePath(checkout);
+    return Object.entries(ConfigManager.getInstance().loadDeclaredServerConfigs().staticServers)
+        .filter(([name, config]) => {
+        if (!clients.has(name) || config.type !== 'stdio')
+            return false;
+        const relative = path.relative(canonical, canonicalLifecyclePath(config.cwd ?? process.cwd()));
+        return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));
+    })
+        .map(([name]) => ({ kind: 'shared-static-backend', id: name }));
+}
+export function createProjectHandler(serverManager) {
+    return async (req, res) => {
+        const parsed = projectRequestSchema.safeParse(req.body);
+        if (!parsed.success) {
+            res.status(400).json({ error: 'Invalid project lifecycle request', issues: parsed.error.issues });
+            return;
+        }
+        try {
+            const extracted = extractTemplateContextRequest(req);
+            const header = req.headers[CONTEXT_HEADERS.SESSION_ID];
+            const transportSessionId = Array.isArray(header) ? header[0] : header;
+            const authorize = () => extracted ? authorizeRequestTemplateContext({ ...extracted, transportSessionId }) : undefined;
+            const authorization = authorize();
+            if (authorization?.status !== 'trusted' || authorization.provenance !== 'verified-local') {
+                res.status(403).json({ error: 'Project lifecycle requires a verified local checkout context' });
+                return;
+            }
+            const owner = getVerifiedProjectOwner(authorization.context);
+            if (!owner) {
+                res.status(403).json({ error: 'A verified Project Owner credential is required' });
+                return;
+            }
+            const { action } = parsed.data;
+            if ((action === 'drain' || action === 'resume') && owner.role !== 'operator') {
+                res.status(403).json({ error: 'Checkout drain and resume require operator authority' });
+                return;
+            }
+            requireProjectTarget(authorization.context, action === 'drain' || action === 'resume' ? 'single' : 'native-set');
+            const checkouts = projectPaths(authorization.context);
+            const auth = getAuthInfo(res);
+            const validate = async () => {
+                if (!(await revalidatePreparationAuthentication(auth, () => revalidateAuthInfo(auth))))
+                    return false;
+                const current = authorize();
+                return (current?.status === 'trusted' &&
+                    current.provenance === 'verified-local' &&
+                    current.contextHash === authorization.contextHash &&
+                    (Boolean(auth) || !AgentConfigManager.getInstance().isAuthEnabled()) &&
+                    Boolean(getVerifiedProjectOwner(current.context)));
+            };
+            if (!(await validate())) {
+                res.status(401).json({ error: 'Authorization is no longer valid' });
+                return;
+            }
+            const lifecycle = getProjectLifecycle();
+            if (!lifecycle) {
+                res.status(503).json({ error: 'Runtime lifecycle persistence is unavailable' });
+                return;
+            }
+            const manager = serverManager.getTemplateServerManager();
+            if (action === 'drain')
+                lifecycle.drain(checkouts[0]);
+            if (action === 'resume')
+                lifecycle.resume(checkouts[0]);
+            const inspect = async () => {
+                const results = [];
+                for (const checkout of checkouts) {
+                    const jobs = [
+                        ...(peekBackendPreparationCoordinator(serverManager)?.getProjectBlockers(checkout) ?? []),
+                        ...persistedProjectPreparationBlockers(checkout),
+                    ];
+                    const cleanup = [];
+                    try {
+                        if (action === 'release' && !jobs.length)
+                            await manager.releaseProjectOwner(checkout, owner.ownerId, checkouts, (member) => Boolean(peekBackendPreparationCoordinator(serverManager)?.getProjectBlockers(member).length ||
+                                persistedProjectPreparationBlockers(member).length));
+                        if (action === 'drain' && !jobs.length)
+                            await manager.closeUnusedProjectInstances(checkout);
+                    }
+                    catch {
+                        cleanup.push({ kind: 'cleanup-failed', id: checkout });
+                    }
+                    const status = lifecycle.status(checkout, [
+                        ...manager.getProjectBlockers(checkout),
+                        ...staticProjectBlockers(serverManager, checkout),
+                        ...jobs,
+                        ...cleanup,
+                    ]);
+                    if (action === 'release') {
+                        // Other owners/shared resources can outlive this caller; unknown blockers retain its retry authority.
+                        const ownerReleased = status.blockers.every((blocker) => {
+                            if (blocker.kind === 'owner')
+                                return blocker.id !== owner.ownerId;
+                            return [
+                                'shared-binding',
+                                'requests-or-subscriptions',
+                                'shared-backend',
+                                'shared-static-backend',
+                            ].includes(blocker.kind);
+                        });
+                        results.push({ ...status, ...{ ownerReleased } });
+                    }
+                    else {
+                        results.push(status);
+                    }
+                }
+                return results;
+            };
+            let results = await inspect();
+            const deadline = Date.now() + (parsed.data.waitMs ?? 0);
+            while (results.some((result) => !result.complete) && Date.now() < deadline && !req.aborted && !res.destroyed) {
+                await setTimeout(Math.min(50, deadline - Date.now()));
+                if (!(await validate())) {
+                    res.status(401).json({ error: 'Authorization is no longer valid' });
+                    return;
+                }
+                results = await inspect();
+            }
+            res.json({ results });
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Project lifecycle failed';
+            if (message.startsWith('Project Selection') || message.startsWith('This backend accepts one')) {
+                res.status(400).json({ error: message });
+                return;
+            }
+            res.status(503).json({ error: 'Project lifecycle unavailable; inspect runtime persistence and cleanup' });
+        }
+    };
+}
+//# sourceMappingURL=projectRoutes.js.map

package/build/transport/http/routes/projectRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectRoutes.js","sourceRoot":"","sources":["../../../../src/transport/http/routes/projectRoutes.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,OAAO,EAAE,mCAAmC,EAAE,MAAM,iDAAiD,CAAC;AACtG,OAAO,EACL,iCAAiC,EACjC,mCAAmC,GACpC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,EAEvB,YAAY,GACb,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oDAAoD,CAAC;AAC1F,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,wDAAwD,CAAC;AACzG,OAAO,EAAE,eAAe,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC/G,OAAO,EAAE,+BAA+B,EAAE,MAAM,uDAAuD,CAAC;AAGxG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IACtD,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;CAC9E,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;IAChC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO;QAC5D,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;AACzG,CAAC,CAAC,CAAC;AAEL,8FAA8F;AAC9F,SAAS,qBAAqB,CAAC,aAA4B,EAAE,QAAgB;IAC3E,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,EAAE,EAAE,CAAC;IAC7C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,SAAS,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,yBAAyB,EAAE,CAAC,aAAa,CAAC;SACzF,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;QACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/F,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvF,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,aAA4B;IAC/D,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAiB,EAAE;QACvC,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAClG,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YACvD,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACtE,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,SAAS,CAAC,CAAC,CAAC,+BAA+B,CAAC,EAAE,GAAG,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,MAAM,aAAa,GAAG,SAAS,EAAE,CAAC;YAClC,IAAI,aAAa,EAAE,MAAM,KAAK,SAAS,IAAI,aAAa,CAAC,UAAU,KAAK,gBAAgB,EAAE,CAAC;gBACzF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8DAA8D,EAAE,CAAC,CAAC;gBAChG,OAAO;YACT,CAAC;YACD,MAAM,KAAK,GAAG,uBAAuB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC,CAAC;gBACnF,OAAO;YACT,CAAC;YACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;YAC/B,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC7E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sDAAsD,EAAE,CAAC,CAAC;gBACxF,OAAO;YACT,CAAC;YACD,oBAAoB,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YACjH,MAAM,SAAS,GAAG,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACtD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;gBAC1B,IAAI,CAAC,CAAC,MAAM,mCAAmC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACrG,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;gBAC5B,OAAO,CACL,OAAO,EAAE,MAAM,KAAK,SAAS;oBAC7B,OAAO,CAAC,UAAU,KAAK,gBAAgB;oBACvC,OAAO,CAAC,WAAW,KAAK,aAAa,CAAC,WAAW;oBACjD,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,CAAC,aAAa,EAAE,CAAC;oBACpE,OAAO,CAAC,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAClD,CAAC;YACJ,CAAC,CAAC;YACF,IAAI,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,EAAE,CAAC;gBACxB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;YACxC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC,CAAC;gBAChF,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,aAAa,CAAC,wBAAwB,EAAE,CAAC;YACzD,IAAI,MAAM,KAAK,OAAO;gBAAE,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,IAAI,MAAM,KAAK,QAAQ;gBAAE,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,MAAM,OAAO,GAAG,KAAK,IAAuC,EAAE;gBAC5D,MAAM,OAAO,GAA6B,EAAE,CAAC;gBAC7C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;oBACjC,MAAM,IAAI,GAAG;wBACX,GAAG,CAAC,iCAAiC,CAAC,aAAa,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;wBACzF,GAAG,mCAAmC,CAAC,QAAQ,CAAC;qBACjD,CAAC;oBACF,MAAM,OAAO,GAAmC,EAAE,CAAC;oBACnD,IAAI,CAAC;wBACH,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM;4BACtC,MAAM,OAAO,CAAC,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/E,OAAO,CACL,iCAAiC,CAAC,aAAa,CAAC,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,MAAM;gCACnF,mCAAmC,CAAC,MAAM,CAAC,CAAC,MAAM,CACnD,CACF,CAAC;wBACJ,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM;4BAAE,MAAM,OAAO,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC;oBAC9F,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;oBACzD,CAAC;oBACD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE;wBACxC,GAAG,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC;wBACvC,GAAG,qBAAqB,CAAC,aAAa,EAAE,QAAQ,CAAC;wBACjD,GAAG,IAAI;wBACP,GAAG,OAAO;qBACX,CAAC,CAAC;oBACH,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;wBACzB,sGAAsG;wBACtG,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE;4BACtD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;gCAAE,OAAO,OAAO,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,CAAC;4BAClE,OAAO;gCACL,gBAAgB;gCAChB,2BAA2B;gCAC3B,gBAAgB;gCAChB,uBAAuB;6BACxB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBAC3B,CAAC,CAAC,CAAC;wBACH,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;oBACpD,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACvB,CAAC;gBACH,CAAC;gBACD,OAAO,OAAO,CAAC;YACjB,CAAC,CAAC;YACF,IAAI,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;YACxD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBAC7G,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACtD,IAAI,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,EAAE,CAAC;oBACxB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;oBACpE,OAAO;gBACT,CAAC;gBACD,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;YAC5B,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC;YACpF,IAAI,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,0BAA0B,CAAC,EAAE,CAAC;gBAC9F,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;gBACzC,OAAO;YACT,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wEAAwE,EAAE,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/build/transport/http/routes/streamableHttpRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"streamableHttpRoutes.d.ts","sourceRoot":"","sources":["../../../../src/transport/http/routes/streamableHttpRoutes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAUlE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4DAA4D,CAAC;AAEzG,OAAO,EAAE,0BAA0B,EAA2B,MAAM,mDAAmD,CAAC;AAMxH,OAAO,EAAW,cAAc,EAAY,MAAM,EAAE,MAAM,SAAS,CAAC;AA8IpE,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,aAAa,EAC5B,iBAAiB,EAAE,2BAA2B,EAC9C,cAAc,EAAE,cAAc,EAC9B,sBAAsB,CAAC,EAAE,cAAc,EACvC,iBAAiB,CAAC,EAAE,wBAAwB,EAC5C,cAAc,CAAC,EAAE,MAAM,EACvB,iBAAiB,CAAC,EAAE,0BAA0B,GAC7C,IAAI,CA6KN"}
+{"version":3,"file":"streamableHttpRoutes.d.ts","sourceRoot":"","sources":["../../../../src/transport/http/routes/streamableHttpRoutes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAYlE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4DAA4D,CAAC;AAEzG,OAAO,EAAE,0BAA0B,EAA2B,MAAM,mDAAmD,CAAC;AASxH,OAAO,EAAW,cAAc,EAAY,MAAM,EAAE,MAAM,SAAS,CAAC;AAgJpE,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,aAAa,EAC5B,iBAAiB,EAAE,2BAA2B,EAC9C,cAAc,EAAE,cAAc,EAC9B,sBAAsB,CAAC,EAAE,cAAc,EACvC,iBAAiB,CAAC,EAAE,wBAAwB,EAC5C,cAAc,CAAC,EAAE,MAAM,EACvB,iBAAiB,CAAC,EAAE,0BAA0B,GAC7C,IAAI,CAiMN"}

package/build/transport/http/routes/streamableHttpRoutes.js

@@ -1,13 +1,16 @@
 import { MCP_SERVER_NAME, MCP_SERVER_VERSION, STREAMABLE_HTTP_ENDPOINT } from '../../../constants.js';
+import { withProjectBinding } from '../../../domains/project-selection/projectBindingScope.js';
 import logger from '../../../logger/logger.js';
+import { withHttpProjectAdmission } from '../middlewares/projectAdmission.js';
 import { getPresetName, getTagExpression, getTagFilterMode, getTagQuery, getValidatedTags, } from '../middlewares/scopeAuthMiddleware.js';
 import tagsExtractor from '../middlewares/tagsExtractor.js';
 import { getRequestSessionBinding } from '../streamableSessionAuthorization.js';
 import { StreamableSessionLifecycle, StreamableSessionStatus } from '../streamableSessionLifecycle.js';
-import { extractTemplateContextRequest } from '../utils/contextExtractor.js';
+import { extractTemplateContextRequest, hasExplicitTemplateContextProof, } from '../utils/contextExtractor.js';
 import { sendBadRequest, sendInternalError, sendNotFound } from '../utils/httpErrorHandler.js';
 import { authorizeRequestTemplateContext } from '../utils/templateContextAuthority.js';
 import { logError, logWarn } from '../utils/unifiedLogger.js';
+import { prepareHttpRequestContext } from './inspectRequestContext.js';
 /**
  * Type guard to check if a request body is an initialize request.
  */
@@ -131,7 +134,7 @@ export function setupStreamableHttpRoutes(router, serverManager, sessionReposito
         middlewares.push(availabilityMiddleware);
     }
     const lifecycle = injectedLifecycle || new StreamableSessionLifecycle(serverManager, sessionRepository, asyncOrchestrator);
-    const handleAdmittedProjectPost = async (req, res) => {
+    const handleAdmittedProjectPost = withHttpProjectAdmission(serverManager, async (req, res) => {
         try {
             const headerSessionId = req.headers['mcp-session-id'];
             const isInitialize = isInitializeRequest(req.body);
@@ -140,6 +143,10 @@ export function setupStreamableHttpRoutes(router, serverManager, sessionReposito
             const authorization = extractedContext
                 ? authorizeRequestTemplateContext({ ...extractedContext, transportSessionId: sessionId })
                 : undefined;
+            if (hasExplicitTemplateContextProof(req) && authorization?.status !== 'trusted') {
+                sendBadRequest(res, 'Request context proof rejected');
+                return;
+            }
             const result = await lifecycle.resolvePostSession({
                 sessionId,
                 authorizationBinding: getRequestSessionBinding(req),
@@ -177,7 +184,20 @@ export function setupStreamableHttpRoutes(router, serverManager, sessionReposito
                     method: req.body?.method,
                 });
             }
-            await transport.handleRequest(req, wrappedRes, req.body);
+            if (!isInitialize && authorization?.status === 'trusted') {
+                const preparedContext = await prepareHttpRequestContext(serverManager, req, res, buildConfigFromRequest(res, req, customTemplate));
+                if (!('bindingId' in preparedContext)) {
+                    throw new Error('Project binding is no longer available');
+                }
+                const bindingId = preparedContext.bindingId;
+                const bindingContext = serverManager.getTemplateServerManager().getBindingContext(bindingId);
+                if (!bindingContext)
+                    throw new Error('Project binding is no longer available');
+                await withProjectBinding(bindingId, bindingContext, () => transport.handleRequest(req, wrappedRes, req.body));
+            }
+            else {
+                await transport.handleRequest(req, wrappedRes, req.body);
+            }
             if (isInitialize && protocolVersion) {
                 try {
                     lifecycle.storeInitializeResponse(actualSessionId, {
@@ -200,7 +220,7 @@ export function setupStreamableHttpRoutes(router, serverManager, sessionReposito
                 phase: 'handleRequest',
             });
         }
-    };
+    });
     const handleProjectPost = async (req, res, next) => {
         try {
             const binding = getRequestSessionBinding(req);

package/build/transport/http/routes/streamableHttpRoutes.js.map

@@ -1 +1 @@
-{"version":3,"file":"streamableHttpRoutes.js","sourceRoot":"","sources":["../../../../src/transport/http/routes/streamableHttpRoutes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAGlG,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAC3C,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,gBAAgB,GACjB,MAAM,wDAAwD,CAAC;AAChE,OAAO,aAAa,MAAM,kDAAkD,CAAC;AAE7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACjG,OAAO,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,MAAM,mDAAmD,CAAC;AACxH,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,+CAA+C,CAAC;AAChH,OAAO,EAAE,+BAA+B,EAAE,MAAM,uDAAuD,CAAC;AACxG,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,4CAA4C,CAAC;AAI/E;;GAEG;AACH,SAAS,mBAAmB,CAAC,IAAa;IACxC,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,QAAQ,IAAI,IAAI;QAChB,IAAI,CAAC,MAAM,KAAK,YAAY;QAC5B,SAAS,IAAI,IAAI;QACjB,IAAI,CAAC,OAAO,KAAK,KAAK,CACvB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAAC,IAAa;IAC3C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAIf,CAAC;QAEF,IAAI,OAAO,EAAE,MAAM,EAAE,eAAe,IAAI,OAAO,OAAO,CAAC,MAAM,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;YAC3F,OAAO,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;QACxC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,oFAAoF,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAAC,GAAY,EAAE,GAAa,EAAE,SAA6B;IACxF,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,MAAM,WAAW,GAAG,CAAC,aAAuB,EAAE,EAAE;QAC9C,IAAI,MAAM,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG;YAAE,OAAO;QAC3C,MAAM,GAAG,IAAI,CAAC;QAEd,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACvD,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;QACrD,KAAK,CAAC,qBAAqB,EAAE;YAC3B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS;YACT,UAAU,EAAE,GAAG,CAAC,UAAU;SAC3B,CAAC,CAAC;QACH,kEAAkE;QAClE,MAAM,CAAC,KAAK,CAAC,iDAAiD,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC;IAEF,4DAA4D;IAC5D,GAAG,CAAC,MAAM,GAAG,UAAU,IAAY;QACjC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;YAChB,WAAW,EAAE,CAAC;QAChB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,kEAAkE;IAClE,GAAG,CAAC,IAAI,GAAG,UAAU,IAAa;QAChC,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;YAC1B,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC;IAEF,6DAA6D;IAC7D,8FAA8F;IAC9F,MAAM,aAAa,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAiC,CAAC;IAC9E,GAAG,CAAC,SAAS,GAAG,UAAU,UAAkB,EAAE,GAAG,IAAW;QAC1D,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;YACtB,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;YAC5B,WAAW,EAAE,CAAC;QAChB,CAAC;QACD,OAAO,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,6FAA6F;IAE7F,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAAC,GAAa,EAAE,GAAY,EAAE,cAAuB;IAClF,OAAO;QACL,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC;QAC3B,aAAa,EAAE,gBAAgB,CAAC,GAAG,CAAC;QACpC,aAAa,EAAE,gBAAgB,CAAC,GAAG,CAAC;QACpC,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC;QAC1B,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC;QAC9B,gBAAgB,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,MAAM;QACjD,cAAc;KACf,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAC/B,GAAY,EACZ,GAAa,EACb,SAAiB,EACjB,SAAqC;IAErC,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,gDAAgD;IAChD,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACpB,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,GAAG,EAAE;QAC5B,IAAI,CAAC,cAAc,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YAC1C,MAAM,CAAC,KAAK,CAAC,qFAAqF,CAAC,CAAC;YACpG,KAAK,SAAS,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;QACrD,CAAC;IACH,CAAC,CAAC;IAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAClC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAAc,EACd,aAA4B,EAC5B,iBAA8C,EAC9C,cAA8B,EAC9B,sBAAuC,EACvC,iBAA4C,EAC5C,cAAuB,EACvB,iBAA8C;IAE9C,MAAM,WAAW,GAAG,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IAEpD,0CAA0C;IAC1C,IAAI,sBAAsB,EAAE,CAAC;QAC3B,WAAW,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,SAAS,GACb,iBAAiB,IAAI,IAAI,0BAA0B,CAAC,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IAE3G,MAAM,yBAAyB,GAAmB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACnE,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;YAC5E,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,gBAAgB,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAC;YAC5D,MAAM,SAAS,GAAG,eAAe,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACrG,MAAM,aAAa,GAAG,gBAAgB;gBACpC,CAAC,CAAC,+BAA+B,CAAC,EAAE,GAAG,gBAAgB,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC;gBACzF,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,kBAAkB,CAAC;gBAChD,SAAS;gBACT,oBAAoB,EAAE,wBAAwB,CAAC,GAAG,CAAC;gBACnD,mBAAmB,EAAE,YAAY;gBACjC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC;oBACxB,MAAM,EAAE,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC;oBACxD,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;oBAChF,YAAY,EACV,aAAa,EAAE,MAAM,KAAK,SAAS,IAAI,aAAa,CAAC,UAAU,KAAK,gBAAgB;wBAClF,CAAC,CAAC,gBAAgB,EAAE,KAAK;wBACzB,CAAC,CAAC,SAAS;iBAChB,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,CAAC,OAAO,EAAE,CAAC;gBACtD,yEAAyE;gBACzE,wDAAwD;gBACxD,IAAI,CAAC,eAAe,IAAI,CAAC,YAAY,EAAE,CAAC;oBACtC,cAAc,CAAC,GAAG,EAAE,gDAAgD,CAAC,CAAC;oBACtE,OAAO;gBACT,CAAC;gBACD,YAAY,CAAC,GAAG,EAAE,8EAA8E,EAAE;oBAChG,SAAS,EAAE,MAAM,CAAC,SAAS;iBAC5B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,WAAW,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC/C,MAAM,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;YACzF,CAAC;YAED,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC;YACzC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YACnC,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;YACrE,MAAM,eAAe,GAAG,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAE/E,IAAI,YAAY,IAAI,SAAS,IAAI,OAAO,SAAS,CAAC,UAAU,KAAK,UAAU,IAAI,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC;gBACtG,MAAM,CAAC,KAAK,CAAC,qEAAqE,EAAE;oBAClF,SAAS,EAAE,eAAe;oBAC1B,MAAM,EAAG,GAAG,CAAC,IAA4B,EAAE,MAAM;iBAClD,CAAC,CAAC;YACL,CAAC;YAED,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAEzD,IAAI,YAAY,IAAI,eAAe,EAAE,CAAC;gBACpC,IAAI,CAAC;oBACH,SAAS,CAAC,uBAAuB,CAAC,eAAe,EAAE;wBACjD,eAAe;wBACf,YAAY,EAAE,EAAE;wBAChB,UAAU,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,kBAAkB,EAAE;qBACnE,CAAC,CAAC;oBACH,MAAM,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;gBACvF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,CAAC,uEAAuE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBACvG,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE;gBAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB;gBAC9D,KAAK,EAAE,eAAe;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IACF,MAAM,iBAAiB,GAAmB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACjE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAC;gBACrD,MAAM,SAAS,GACZ,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAwB;oBACrD,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC5E,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;oBACpE,IAAI,aAAa,GAAG,KAAK,CAAC;oBAC1B,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;wBAClC,aAAa,GAAG,SAAS,CAAC,0BAA0B,CAClD,SAAS,EACT,OAAO,EACP,SAAS,EAAE,OAAO,EAClB,SAAS,EAAE,KAAK,CACjB,CAAC;oBACJ,CAAC;oBACD,IAAI,CAAC,aAAa,EAAE,CAAC;wBACnB,YAAY,CAAC,GAAG,EAAE,8EAA8E,CAAC,CAAC;wBAClG,OAAO;oBACT,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM,yBAAyB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACvG,CAAC;IACH,CAAC,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAEzE,MAAM,CAAC,GAAG,CAAC,wBAAwB,EAAE,GAAG,WAAW,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACzF,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;YACtE,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,cAAc,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,sBAAsB,CAAC,SAAS,EAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;YAEhG,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,CAAC,OAAO,EAAE,CAAC;gBACtD,YAAY,CAAC,GAAG,EAAE,oEAAoE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBACvG,OAAO;YACT,CAAC;YAED,wBAAwB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAEzD,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YAC/D,MAAM,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE;gBAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB;gBAC9D,KAAK,EAAE,eAAe;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,wBAAwB,EAAE,GAAG,WAAW,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5F,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;YACtE,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,cAAc,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,sBAAsB,CAAC,SAAS,EAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;YAEhG,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,CAAC,OAAO,EAAE,CAAC;gBACtD,YAAY,CAAC,GAAG,EAAE,oEAAoE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBACvG,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YAC/D,MAAM,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YACtD,MAAM,SAAS,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE;gBAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB;gBAC9D,KAAK,EAAE,eAAe;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"streamableHttpRoutes.js","sourceRoot":"","sources":["../../../../src/transport/http/routes/streamableHttpRoutes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAGlG,OAAO,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAC3F,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,qDAAqD,CAAC;AAC/F,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,gBAAgB,GACjB,MAAM,wDAAwD,CAAC;AAChE,OAAO,aAAa,MAAM,kDAAkD,CAAC;AAE7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACjG,OAAO,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,MAAM,mDAAmD,CAAC;AACxH,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,GAChC,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,+CAA+C,CAAC;AAChH,OAAO,EAAE,+BAA+B,EAAE,MAAM,uDAAuD,CAAC;AACxG,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,4CAA4C,CAAC;AAI/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAEvE;;GAEG;AACH,SAAS,mBAAmB,CAAC,IAAa;IACxC,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,QAAQ,IAAI,IAAI;QAChB,IAAI,CAAC,MAAM,KAAK,YAAY;QAC5B,SAAS,IAAI,IAAI;QACjB,IAAI,CAAC,OAAO,KAAK,KAAK,CACvB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAAC,IAAa;IAC3C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAIf,CAAC;QAEF,IAAI,OAAO,EAAE,MAAM,EAAE,eAAe,IAAI,OAAO,OAAO,CAAC,MAAM,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;YAC3F,OAAO,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;QACxC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,oFAAoF,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAAC,GAAY,EAAE,GAAa,EAAE,SAA6B;IACxF,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,MAAM,WAAW,GAAG,CAAC,aAAuB,EAAE,EAAE;QAC9C,IAAI,MAAM,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG;YAAE,OAAO;QAC3C,MAAM,GAAG,IAAI,CAAC;QAEd,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACvD,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;QACrD,KAAK,CAAC,qBAAqB,EAAE;YAC3B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS;YACT,UAAU,EAAE,GAAG,CAAC,UAAU;SAC3B,CAAC,CAAC;QACH,kEAAkE;QAClE,MAAM,CAAC,KAAK,CAAC,iDAAiD,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC;IAEF,4DAA4D;IAC5D,GAAG,CAAC,MAAM,GAAG,UAAU,IAAY;QACjC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;YAChB,WAAW,EAAE,CAAC;QAChB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,kEAAkE;IAClE,GAAG,CAAC,IAAI,GAAG,UAAU,IAAa;QAChC,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;YAC1B,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC;IAEF,6DAA6D;IAC7D,8FAA8F;IAC9F,MAAM,aAAa,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAiC,CAAC;IAC9E,GAAG,CAAC,SAAS,GAAG,UAAU,UAAkB,EAAE,GAAG,IAAW;QAC1D,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;YACtB,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;YAC5B,WAAW,EAAE,CAAC;QAChB,CAAC;QACD,OAAO,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,6FAA6F;IAE7F,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAAC,GAAa,EAAE,GAAY,EAAE,cAAuB;IAClF,OAAO;QACL,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC;QAC3B,aAAa,EAAE,gBAAgB,CAAC,GAAG,CAAC;QACpC,aAAa,EAAE,gBAAgB,CAAC,GAAG,CAAC;QACpC,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC;QAC1B,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC;QAC9B,gBAAgB,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,MAAM;QACjD,cAAc;KACf,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAC/B,GAAY,EACZ,GAAa,EACb,SAAiB,EACjB,SAAqC;IAErC,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,gDAAgD;IAChD,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACpB,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,GAAG,EAAE;QAC5B,IAAI,CAAC,cAAc,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YAC1C,MAAM,CAAC,KAAK,CAAC,qFAAqF,CAAC,CAAC;YACpG,KAAK,SAAS,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;QACrD,CAAC;IACH,CAAC,CAAC;IAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAClC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAAc,EACd,aAA4B,EAC5B,iBAA8C,EAC9C,cAA8B,EAC9B,sBAAuC,EACvC,iBAA4C,EAC5C,cAAuB,EACvB,iBAA8C;IAE9C,MAAM,WAAW,GAAG,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IAEpD,0CAA0C;IAC1C,IAAI,sBAAsB,EAAE,CAAC;QAC3B,WAAW,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,SAAS,GACb,iBAAiB,IAAI,IAAI,0BAA0B,CAAC,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IAE3G,MAAM,yBAAyB,GAAG,wBAAwB,CAAC,aAAa,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC9G,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;YAC5E,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,gBAAgB,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAC;YAC5D,MAAM,SAAS,GAAG,eAAe,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACrG,MAAM,aAAa,GAAG,gBAAgB;gBACpC,CAAC,CAAC,+BAA+B,CAAC,EAAE,GAAG,gBAAgB,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC;gBACzF,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,+BAA+B,CAAC,GAAG,CAAC,IAAI,aAAa,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChF,cAAc,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,kBAAkB,CAAC;gBAChD,SAAS;gBACT,oBAAoB,EAAE,wBAAwB,CAAC,GAAG,CAAC;gBACnD,mBAAmB,EAAE,YAAY;gBACjC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC;oBACxB,MAAM,EAAE,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC;oBACxD,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;oBAChF,YAAY,EACV,aAAa,EAAE,MAAM,KAAK,SAAS,IAAI,aAAa,CAAC,UAAU,KAAK,gBAAgB;wBAClF,CAAC,CAAC,gBAAgB,EAAE,KAAK;wBACzB,CAAC,CAAC,SAAS;iBAChB,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,CAAC,OAAO,EAAE,CAAC;gBACtD,yEAAyE;gBACzE,wDAAwD;gBACxD,IAAI,CAAC,eAAe,IAAI,CAAC,YAAY,EAAE,CAAC;oBACtC,cAAc,CAAC,GAAG,EAAE,gDAAgD,CAAC,CAAC;oBACtE,OAAO;gBACT,CAAC;gBACD,YAAY,CAAC,GAAG,EAAE,8EAA8E,EAAE;oBAChG,SAAS,EAAE,MAAM,CAAC,SAAS;iBAC5B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,WAAW,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC/C,MAAM,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;YACzF,CAAC;YAED,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC;YACzC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YACnC,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;YACrE,MAAM,eAAe,GAAG,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAE/E,IAAI,YAAY,IAAI,SAAS,IAAI,OAAO,SAAS,CAAC,UAAU,KAAK,UAAU,IAAI,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC;gBACtG,MAAM,CAAC,KAAK,CAAC,qEAAqE,EAAE;oBAClF,SAAS,EAAE,eAAe;oBAC1B,MAAM,EAAG,GAAG,CAAC,IAA4B,EAAE,MAAM;iBAClD,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,YAAY,IAAI,aAAa,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzD,MAAM,eAAe,GAAG,MAAM,yBAAyB,CACrD,aAAa,EACb,GAAG,EACH,GAAG,EACH,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC,CACjD,CAAC;gBACF,IAAI,CAAC,CAAC,WAAW,IAAI,eAAe,CAAC,EAAE,CAAC;oBACtC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBAC5D,CAAC;gBACD,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC;gBAC5C,MAAM,cAAc,GAAG,aAAa,CAAC,wBAAwB,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;gBAC7F,IAAI,CAAC,cAAc;oBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBAC/E,MAAM,kBAAkB,CAAC,SAAS,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAChH,CAAC;iBAAM,CAAC;gBACN,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3D,CAAC;YAED,IAAI,YAAY,IAAI,eAAe,EAAE,CAAC;gBACpC,IAAI,CAAC;oBACH,SAAS,CAAC,uBAAuB,CAAC,eAAe,EAAE;wBACjD,eAAe;wBACf,YAAY,EAAE,EAAE;wBAChB,UAAU,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,kBAAkB,EAAE;qBACnE,CAAC,CAAC;oBACH,MAAM,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;gBACvF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,CAAC,uEAAuE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBACvG,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE;gBAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB;gBAC9D,KAAK,EAAE,eAAe;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAmB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACjE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAC;gBACrD,MAAM,SAAS,GACZ,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAwB;oBACrD,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC5E,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;oBACpE,IAAI,aAAa,GAAG,KAAK,CAAC;oBAC1B,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;wBAClC,aAAa,GAAG,SAAS,CAAC,0BAA0B,CAClD,SAAS,EACT,OAAO,EACP,SAAS,EAAE,OAAO,EAClB,SAAS,EAAE,KAAK,CACjB,CAAC;oBACJ,CAAC;oBACD,IAAI,CAAC,aAAa,EAAE,CAAC;wBACnB,YAAY,CAAC,GAAG,EAAE,8EAA8E,CAAC,CAAC;wBAClG,OAAO;oBACT,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM,yBAAyB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACvG,CAAC;IACH,CAAC,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAEzE,MAAM,CAAC,GAAG,CAAC,wBAAwB,EAAE,GAAG,WAAW,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACzF,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;YACtE,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,cAAc,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,sBAAsB,CAAC,SAAS,EAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;YAEhG,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,CAAC,OAAO,EAAE,CAAC;gBACtD,YAAY,CAAC,GAAG,EAAE,oEAAoE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBACvG,OAAO;YACT,CAAC;YAED,wBAAwB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAEzD,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YAC/D,MAAM,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE;gBAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB;gBAC9D,KAAK,EAAE,eAAe;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,wBAAwB,EAAE,GAAG,WAAW,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5F,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;YACtE,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,cAAc,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,sBAAsB,CAAC,SAAS,EAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;YAEhG,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,CAAC,OAAO,EAAE,CAAC;gBACtD,YAAY,CAAC,GAAG,EAAE,oEAAoE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBACvG,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YAC/D,MAAM,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YACtD,MAAM,SAAS,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE;gBAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB;gBAC9D,KAAK,EAAE,eAAe;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/build/transport/http/routes/toolRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"toolRoutes.d.ts","sourceRoot":"","sources":["../../../../src/transport/http/routes/toolRoutes.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAYlE,OAAO,EAAW,cAAc,EAAY,MAAM,SAAS,CAAC;AA8I5D,wBAAgB,kBAAkB,CAAC,aAAa,EAAE,aAAa,GAAG,cAAc,CAkG/E;AAOD,wBAAgB,4BAA4B,CAAC,aAAa,EAAE,aAAa,GAAG,cAAc,CA8NzF"}
+{"version":3,"file":"toolRoutes.d.ts","sourceRoot":"","sources":["../../../../src/transport/http/routes/toolRoutes.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAoBlE,OAAO,EAAW,cAAc,EAAY,MAAM,SAAS,CAAC;AAwJ5D,wBAAgB,kBAAkB,CAAC,aAAa,EAAE,aAAa,GAAG,cAAc,CAkG/E;AAOD,wBAAgB,4BAA4B,CAAC,aAAa,EAAE,aAAa,GAAG,cAAc,CAsXzF"}

package/build/transport/http/routes/toolRoutes.js

@@ -1,5 +1,7 @@
+import { admitBackendPreparationTool, revalidatePreparationAuthentication, } from '../../../application/backendPreparationAdmission.js';
 import { getConfiguredServerTargets } from '../../../config/configuredServerTargets.js';
 import { CapabilityCatalog } from '../../../core/capabilities/capabilityCatalog.js';
+import { CapabilityCursorCapacityError } from '../../../core/capabilities/capabilityPagination.js';
 import { createCapabilityVisibility, getCapabilityVisibleServerNames, } from '../../../core/capabilities/capabilityVisibility.js';
 import { acquireRuntimeCapabilityCatalog } from '../../../core/capabilities/runtimeCapabilityCatalog.js';
 import { ToolRegistry } from '../../../core/capabilities/toolRegistry.js';
@@ -12,8 +14,12 @@ import { runtimeAdmission, RuntimeDrainingError } from '../../../core/server/run
 import { ClientStatus } from '../../../core/types/client.js';
 import { SchemaBoundaryError } from '../../../core/validation/schemaPolicy.js';
 import { schemaInputErrorResult } from '../../../core/validation/toolSchemaBoundary.js';
+import { isProjectBackendVisible } from '../../../domains/project-selection/projectPolicy.js';
+import { requireProjectTarget } from '../../../domains/project-selection/projectSelection.js';
 import { createGatewayFailure, gatewayFailureFromUnknown, gatewayFailureToProblem, } from '../../../gateway/contracts/gatewayFailure.js';
 import logger from '../../../logger/logger.js';
+import { withHttpProjectAdmission } from '../middlewares/projectAdmission.js';
+import { getAuthInfo, getTagFilterMode, revalidateAuthInfo, } from '../middlewares/scopeAuthMiddleware.js';
 import { CONTEXT_HEADERS } from '../utils/contextExtractor.js';
 import { z } from 'zod';
 import { buildFilterConfig, ensureRequestContextInitialized, parseTarget, resolveConnectionByServerName, } from './inspectRoutes.js';
@@ -35,10 +41,18 @@ function getCapabilityVisibilityFromRequest(serverManager, res, sessionId) {
     const filteredConnections = hasFilterSelection
         ? FilteringService.getFilteredConnections(sessionScoped, filterConfig)
         : sessionScoped;
-    return createCapabilityVisibility(Array.from(filteredConnections.entries(), ([connectionKey, connection]) => {
-        const publicServerName = connection.name || connectionKey.split(':')[0];
-        return [connectionKey, publicServerName];
-    }), sessionId);
+    const manager = serverManager.getTemplateServerManager?.();
+    const projectContext = sessionId ? manager?.getBindingContext?.(sessionId) : undefined;
+    const policies = sessionId ? (manager?.getBindingPolicies?.(sessionId) ?? []) : [];
+    return {
+        ...createCapabilityVisibility(Array.from(filteredConnections.entries())
+            .filter(([, connection]) => isProjectBackendVisible(getServerConfigs()[connection.name], projectContext, policies))
+            .map(([connectionKey, connection]) => {
+            const publicServerName = connection.name || connectionKey.split(':')[0];
+            return [connectionKey, publicServerName];
+        }), sessionId),
+        ...(projectContext ? { projectContext } : {}),
+    };
 }
 function getTemplateHashProvider(serverManager) {
     return serverManager.getTemplateServerManager?.();
@@ -194,7 +208,9 @@ const toolInvocationBodySchema = z.object({
 export function createToolInvocationsHandler(serverManager) {
     return async (req, res) => {
         try {
-            return await runtimeAdmission.run(() => invoke(req, res));
+            return await runtimeAdmission.run(async () => {
+                await withHttpProjectAdmission(serverManager, invoke)(req, res, () => { });
+            });
         }
         catch (error) {
             if (!(error instanceof RuntimeDrainingError))
@@ -218,19 +234,82 @@ export function createToolInvocationsHandler(serverManager) {
                 return;
             }
             const { tool: toolRef, args: toolArgs = {} } = parsed.data;
-            const requestSessionId = await initializeRequestContextForApi(serverManager, req, res);
             const target = parseTarget(toolRef);
             if (!target || target.kind !== 'tool') {
                 res.status(400).json({ error: 'Invalid tool reference. Use "server/tool" format.' });
                 return;
             }
+            const requestSessionId = await initializeRequestContextForApi(serverManager, req, res, target.serverName);
+            const projectContext = requestSessionId
+                ? serverManager.getTemplateServerManager?.().getBindingContext?.(requestSessionId)
+                : undefined;
+            let bindingCurrent;
+            if (projectContext && requestSessionId) {
+                const bindingId = requestSessionId;
+                bindingCurrent = () => Boolean(serverManager.getTemplateServerManager?.().getBindingContext?.(bindingId));
+            }
+            const targetConfig = getServerConfigs()[target.serverName];
+            if (projectContext) {
+                try {
+                    requireProjectTarget(projectContext, targetConfig?.projectTarget?.mode ??
+                        (isTemplateTarget(serverManager, target.serverName) ? 'single' : 'independent'));
+                }
+                catch (error) {
+                    res.status(400).json({ error: error instanceof Error ? error.message : String(error) });
+                    return;
+                }
+            }
             const visibility = getCapabilityVisibilityFromRequest(serverManager, res, requestSessionId);
             const visibleServerNames = visibility ? getCapabilityVisibleServerNames(visibility) : undefined;
             const filterConfig = buildFilterConfig(res);
             const hasFilterSelection = filterConfig.tagFilterMode !== 'none' || (filterConfig.tags !== undefined && filterConfig.tags.length > 0);
             const lazyOrchestrator = serverManager.getLazyLoadingOrchestrator();
+            if (visibleServerNames &&
+                !visibleServerNames.has(target.serverName) &&
+                (!lazyOrchestrator || hasFilterSelection)) {
+                res.status(404).json({ error: `Server not found: ${target.serverName}` });
+                return;
+            }
+            const earlyDisabledToolError = getDisabledToolInvocationError(target.serverName, target.toolName);
+            if (earlyDisabledToolError) {
+                res.status(404).json({ error: earlyDisabledToolError });
+                return;
+            }
+            const auth = getAuthInfo(res);
+            const rawOwner = req.headers?.[CONTEXT_HEADERS.SESSION_ID];
+            const ownerSessionId = Array.isArray(rawOwner) ? rawOwner[0] : rawOwner;
+            let preparation;
+            try {
+                preparation = await admitBackendPreparationTool({
+                    serverManager,
+                    bindingId: requestSessionId,
+                    ownerSessionId,
+                    filterConfig: { ...filterConfig, projectFilterMode: getTagFilterMode(res) },
+                    authentication: auth
+                        ? [auth.clientId, auth.token, [...auth.grantedScopes].sort(), [...auth.grantedTags].sort()]
+                        : undefined,
+                    revalidateAuth: () => revalidatePreparationAuthentication(auth, () => revalidateAuthInfo(auth)),
+                    request: { name: target.qualifiedName, arguments: toolArgs },
+                    signal: controller.signal,
+                });
+            }
+            catch (error) {
+                if (error instanceof SchemaBoundaryError && error.code === 'schema_input_invalid') {
+                    res.json({ result: schemaInputErrorResult(), server: target.serverName, tool: target.toolName });
+                    return;
+                }
+                throw error;
+            }
+            if (preparation.kind === 'blocked') {
+                res.json({ result: preparation.result.structuredContent, server: target.serverName, tool: target.toolName });
+                return;
+            }
+            if (preparation.kind === 'ready' && !(await preparation.revalidate())) {
+                res.status(401).json({ error: 'Preparation authorization changed' });
+                return;
+            }
             if (!lazyOrchestrator) {
-                if (hasFilterSelection && visibleServerNames && !visibleServerNames.has(target.serverName)) {
+                if (visibleServerNames && !visibleServerNames.has(target.serverName)) {
                     res.status(404).json({ error: `Server not found: ${target.serverName}` });
                     return;
                 }
@@ -257,9 +336,12 @@ export function createToolInvocationsHandler(serverManager) {
                     const catalogConnections = Array.from(allConnections.values()).includes(connection)
                         ? allConnections
                         : new Map([[`\0app.1mcp/resolved/${target.serverName}`, connection]]);
-                    const snapshot = await acquireRuntimeCapabilityCatalog(catalogConnections, createCapabilityVisibility(Array.from(catalogConnections)
-                        .filter(([, candidate]) => candidate === connection)
-                        .map(([key]) => [key, target.serverName]), requestSessionId), { serverConfigs: getServerConfigs(), signal: controller.signal });
+                    const snapshot = await acquireRuntimeCapabilityCatalog(catalogConnections, {
+                        ...createCapabilityVisibility(Array.from(catalogConnections)
+                            .filter(([, candidate]) => candidate === connection)
+                            .map(([key]) => [key, target.serverName]), requestSessionId),
+                        ...(projectContext ? { projectContext } : {}),
+                    }, { serverConfigs: getServerConfigs(), signal: controller.signal });
                     const resolved = snapshot.resolve('tools', target.qualifiedName);
                     if (!resolved?.connection) {
                         res.status(404).json({ error: `Tool not found: ${toolRef}` });
@@ -275,9 +357,25 @@ export function createToolInvocationsHandler(serverManager) {
                         return;
                     }
                     validateOutput.assertCurrent();
+                    if (preparation.kind === 'ready') {
+                        const decision = await preparation.beforeDispatch();
+                        if (decision === false)
+                            throw new SchemaBoundaryError('schema_evaluation_unavailable', true);
+                        if (typeof decision === 'object' && 'result' in decision) {
+                            res.json({ result: decision.result, server: target.serverName, tool: target.toolName });
+                            return;
+                        }
+                        if (typeof decision === 'object' && 'assertCurrent' in decision && !decision.assertCurrent())
+                            throw new SchemaBoundaryError('schema_evaluation_unavailable', true);
+                    }
+                    validateOutput.assertCurrent();
+                    if (resolved.connection.adapter !== adapter || !snapshot.isCurrent() || controller.signal.aborted)
+                        throw new SchemaBoundaryError('schema_evaluation_unavailable', true);
+                    if (bindingCurrent && !bindingCurrent())
+                        throw new SchemaBoundaryError('schema_evaluation_unavailable', true);
                     const upstreamResult = await requestLegacyAdapter(adapter, 'tools/call', {
                         name: resolved.entry.route.upstreamIdentity,
-                        arguments: toolArgs,
+                        arguments: validateOutput.targetArguments,
                     }, { signal: controller.signal, timeoutMs: resolved.connection.requestTimeoutMs });
                     await validateOutput(upstreamResult);
                     res.json({ result: upstreamResult, server: target.serverName, tool: target.toolName });
@@ -312,14 +410,56 @@ export function createToolInvocationsHandler(serverManager) {
                 }
             }
             if (hasCatalogAccess(lazyOrchestrator)) {
+                const connections = serverManager.getClients();
+                const candidates = visibility?.serverCandidates ??
+                    new Map(Array.from(createConnectionResolver(connections, getTemplateHashProvider(serverManager)).filterForSession(requestSessionId), ([key, connection]) => [key, connection.name]));
+                const selectedVisibility = {
+                    ...visibility,
+                    ...createCapabilityVisibility(Array.from(candidates).filter(([, name]) => name === target.serverName), requestSessionId, visibility?.filterSelection),
+                };
+                let snapshot;
+                try {
+                    snapshot = await acquireRuntimeCapabilityCatalog(connections, selectedVisibility, {
+                        serverConfigs: getServerConfigs(),
+                        signal: controller.signal,
+                    });
+                }
+                catch (error) {
+                    if (error instanceof CapabilityCursorCapacityError) {
+                        res.status(503).json({ error: error.message, code: 'gateway_overloaded' });
+                        return;
+                    }
+                    throw error;
+                }
+                if (snapshot.hasFailedSources('tools')) {
+                    res.status(503).json({ error: `Tool inventory not available: ${target.serverName}` });
+                    return;
+                }
+                if (selectedVisibility.serverCandidates.size > 0) {
+                    const connected = Array.from(selectedVisibility.serverCandidates.keys()).some((key) => connections.get(key)?.status === ClientStatus.Connected);
+                    if (!connected) {
+                        res.status(503).json({ error: `Server not connected: ${target.serverName}` });
+                        return;
+                    }
+                }
+                const toolRegistry = ToolRegistry.fromCapabilitySnapshot(snapshot);
                 const catalog = new CapabilityCatalog({
-                    getToolRegistry: () => lazyOrchestrator.getToolRegistry(),
+                    getToolRegistry: () => toolRegistry,
                     schemaCache: lazyOrchestrator.getSchemaCache(),
                     outboundConnections: serverManager.getClients(),
                     getServerConfigs,
                     templateHashProvider: getTemplateHashProvider(serverManager),
                 });
-                const catalogResult = await catalog.invokeVisibleTool({ server: target.serverName, toolName: target.toolName, args: toolArgs }, visibility, { signal: controller.signal });
+                let beforeDispatch = preparation.kind === 'ready' ? preparation.beforeDispatch : undefined;
+                if (!beforeDispatch && bindingCurrent) {
+                    const assertCurrent = bindingCurrent;
+                    beforeDispatch = async () => ({ assertCurrent });
+                }
+                const catalogResult = await catalog.invokeVisibleTool({ server: target.serverName, toolName: target.toolName, args: toolArgs }, selectedVisibility, {
+                    toolRegistry,
+                    signal: controller.signal,
+                    beforeDispatch,
+                });
                 if (!catalogResult.error) {
                     res.json({ result: catalogResult.result, server: catalogResult.server, tool: catalogResult.tool });
                     return;
@@ -346,11 +486,14 @@ export function createToolInvocationsHandler(serverManager) {
                 res.status(status).json({ ...problem, status });
                 return;
             }
-            const result = (await lazyOrchestrator.callMetaTool('tool_invoke', {
-                server: target.serverName,
-                toolName: target.toolName,
-                args: toolArgs,
-            }, visibility, controller.signal));
+            const metaArguments = { server: target.serverName, toolName: target.toolName, args: toolArgs };
+            let result;
+            if (preparation.kind === 'ready') {
+                result = (await lazyOrchestrator.callMetaTool('tool_invoke', metaArguments, visibility, controller.signal, undefined, preparation.beforeDispatch));
+            }
+            else {
+                result = (await lazyOrchestrator.callMetaTool('tool_invoke', metaArguments, visibility, controller.signal));
+            }
             if (result.error) {
                 let status;
                 if (result.error.message.startsWith('schema_')) {
@@ -386,9 +529,9 @@ export function createToolInvocationsHandler(serverManager) {
         }
     }
 }
-async function initializeRequestContextForApi(serverManager, req, res) {
+async function initializeRequestContextForApi(serverManager, req, res, serverName) {
     const filterConfig = buildFilterConfig(res);
-    const result = await ensureRequestContextInitialized(serverManager, req, res, filterConfig);
+    const result = await ensureRequestContextInitialized(serverManager, req, res, filterConfig, serverName);
     if (result) {
         return result;
     }