@aotter/mantle-cloudflare 0.1.0-alpha.16 → 0.1.0-alpha.17

package/dist/bindings/KvSiteConfigRepository.d.ts

@@ -0,0 +1,44 @@
+import { type MediaPurposePolicy, type SiteConfig, type SiteDefaults } from "@aotter/mantle-spec";
+import type { SiteConfigRepository, UpdateEditableSiteConfigArgs } from "@aotter/mantle-runtime";
+export type McpCatalogSiteConfig = Pick<SiteConfig, "origin" | "brand" | "description" | "icons" | "media">;
+export interface McpCatalogKvBinding {
+    readonly namespace: KVNamespace;
+    /** Stable deployment-owned scope. Never derive this from a request. */
+    readonly scope: string;
+}
+export interface McpCatalogSiteConfigReader {
+    /** Resolve caller-independent catalog data after the transport auth gate. */
+    loadCatalogSite(runtime: object): Promise<McpCatalogSiteConfig>;
+}
+/**
+ * Cloudflare-owned write-through decorator for MCP catalog configuration.
+ * The delegate remains canonical: ordinary repository reads always hit D1,
+ * while only the caller-independent MCP projection is stored in KV.
+ */
+export declare class KvSiteConfigRepository implements SiteConfigRepository, McpCatalogSiteConfigReader {
+    private readonly canonical;
+    private readonly binding;
+    readonly key: string;
+    private readonly inFlight;
+    private generation;
+    private lastKnownSnapshot;
+    private operationTail;
+    private putFailureCount;
+    private putBackoffUntil;
+    private readonly diagnosticCounts;
+    constructor(canonical: SiteConfigRepository, binding: McpCatalogKvBinding);
+    load(): Promise<SiteConfig>;
+    readLocales(): Promise<readonly string[]>;
+    readMediaPurposes(): Promise<readonly MediaPurposePolicy[]>;
+    seed(defaults: SiteDefaults | undefined): Promise<void>;
+    updateEditable(values: UpdateEditableSiteConfigArgs): Promise<void>;
+    loadCatalogSite(runtime: object): Promise<McpCatalogSiteConfig>;
+    private readCatalogSite;
+    private repairCatalogSite;
+    private publishAfterCommittedWrite;
+    private loadCanonicalSnapshot;
+    private putSnapshot;
+    private exclusive;
+    private diagnostic;
+}
+//# sourceMappingURL=KvSiteConfigRepository.d.ts.map

package/dist/bindings/KvSiteConfigRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"KvSiteConfigRepository.d.ts","sourceRoot":"","sources":["../../src/bindings/KvSiteConfigRepository.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,YAAY,EAElB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EACV,oBAAoB,EACpB,4BAA4B,EAC7B,MAAM,wBAAwB,CAAC;AAWhC,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,UAAU,EACV,QAAQ,GAAG,OAAO,GAAG,aAAa,GAAG,OAAO,GAAG,OAAO,CACvD,CAAC;AAEF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;IAChC,uEAAuE;IACvE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,6EAA6E;IAC7E,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACjE;AA2CD;;;;GAIG;AACH,qBAAa,sBACX,YAAW,oBAAoB,EAAE,0BAA0B;IAWzD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAX1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8C;IACvE,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,iBAAiB,CAAgC;IACzD,OAAO,CAAC,aAAa,CAAoC;IACzD,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;gBAG3C,SAAS,EAAE,oBAAoB,EAC/B,OAAO,EAAE,mBAAmB;IAU/C,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC;IAI3B,WAAW,IAAI,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC;IAIzC,iBAAiB,IAAI,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC;IAIrD,IAAI,CAAC,QAAQ,EAAE,YAAY,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAWvD,cAAc,CAAC,MAAM,EAAE,4BAA4B,GAAG,OAAO,CAAC,IAAI,CAAC;IAYzE,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;YAuBjD,eAAe;IAqB7B,OAAO,CAAC,iBAAiB;YAWX,0BAA0B;YAa1B,qBAAqB;YAerB,WAAW;IAiCzB,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,UAAU;CAgBnB"}

package/dist/bindings/KvSiteConfigRepository.js

@@ -0,0 +1,286 @@
+import { assertSiteDefaultsCanonical, } from "@aotter/mantle-spec";
+import { z } from "zod";
+import { requestDiagnosticContext } from "../requestDiagnostics.js";
+const SNAPSHOT_VERSION = 1;
+const MAX_SNAPSHOT_AGE_MS = 3_600_000;
+const MAX_FUTURE_SKEW_MS = 60_000;
+const MAX_ENVELOPE_BYTES = 64 * 1024;
+const MAX_PUT_BACKOFF_MS = 60_000;
+const SCOPE_PATTERN = /^[A-Za-z0-9_-]{1,64}$/u;
+const snapshotSchema = z.strictObject({
+    version: z.literal(SNAPSHOT_VERSION),
+    scope: z.string(),
+    observedAt: z.number().int().nonnegative(),
+    repairAfter: z.number().int().nonnegative(),
+    contentHash: z.string().regex(/^[a-f0-9]{64}$/u),
+    site: z.strictObject({
+        origin: z.string(),
+        brand: z.string(),
+        description: z.string(),
+        icons: z.array(z.strictObject({
+            src: z.string(),
+            mimeType: z.enum(["image/png", "image/jpeg", "image/svg+xml", "image/webp"]).optional(),
+            sizes: z.array(z.string()).optional(),
+            theme: z.enum(["light", "dark"]).optional(),
+        })),
+        media: z.strictObject({
+            purposes: z.array(z.strictObject({
+                name: z.string(),
+                required: z.array(z.string()),
+                maxBytes: z.record(z.string(), z.number().positive()),
+            })),
+        }),
+    }),
+});
+/**
+ * Cloudflare-owned write-through decorator for MCP catalog configuration.
+ * The delegate remains canonical: ordinary repository reads always hit D1,
+ * while only the caller-independent MCP projection is stored in KV.
+ */
+export class KvSiteConfigRepository {
+    canonical;
+    binding;
+    key;
+    inFlight = new WeakMap();
+    generation = 0;
+    lastKnownSnapshot;
+    operationTail = Promise.resolve();
+    putFailureCount = 0;
+    putBackoffUntil = 0;
+    diagnosticCounts = new Map();
+    constructor(canonical, binding) {
+        this.canonical = canonical;
+        this.binding = binding;
+        if (!SCOPE_PATTERN.test(binding.scope)) {
+            throw new Error("Mantle MCP catalog KV scope must contain 1-64 ASCII letters, digits, '_' or '-'.");
+        }
+        this.key = `mantle:site-config:v1:${binding.scope}:mcp`;
+    }
+    load() {
+        return this.canonical.load();
+    }
+    readLocales() {
+        return this.canonical.readLocales();
+    }
+    readMediaPurposes() {
+        return this.canonical.readMediaPurposes();
+    }
+    async seed(defaults) {
+        // Invalidate pre-mutation reads now, and reads started during the write
+        // again after commit. Neither may repopulate the local snapshot later.
+        this.generation += 1;
+        await this.exclusive(async () => {
+            await this.canonical.seed(defaults);
+            this.generation += 1;
+            await this.publishAfterCommittedWrite("seed");
+        });
+    }
+    async updateEditable(values) {
+        if (!this.canonical.updateEditable) {
+            throw new Error("SiteConfigRepository.updateEditable is unavailable");
+        }
+        this.generation += 1;
+        await this.exclusive(async () => {
+            await this.canonical.updateEditable(values);
+            this.generation += 1;
+            await this.publishAfterCommittedWrite("update");
+        });
+    }
+    loadCatalogSite(runtime) {
+        const generation = this.generation;
+        let flight = this.inFlight.get(runtime);
+        const record = requestDiagnosticContext.getStore();
+        const sharedWait = flight?.generation === generation;
+        const started = record && sharedWait ? performance.now() : null;
+        if (!sharedWait) {
+            const observation = { source: "not-reached" };
+            const pending = this.readCatalogSite(generation, observation).finally(() => {
+                if (this.inFlight.get(runtime)?.promise === pending)
+                    this.inFlight.delete(runtime);
+            });
+            flight = { generation, observation, promise: pending };
+            this.inFlight.set(runtime, flight);
+        }
+        const selected = flight;
+        if (!record)
+            return selected.promise;
+        return selected.promise.finally(() => {
+            record.catalog.source = selected.observation.source;
+            record.catalog.sharedWait ||= sharedWait;
+            if (started !== null)
+                record.catalog.waitMs = (record.catalog.waitMs ?? 0) + performance.now() - started;
+        });
+    }
+    async readCatalogSite(generation, observation) {
+        let raw = null;
+        let kvFailed = false;
+        try {
+            raw = await this.binding.namespace.get(this.key, "text");
+        }
+        catch (error) {
+            kvFailed = true;
+            this.diagnostic("get-failed", error);
+        }
+        if (raw !== null) {
+            const snapshot = await parseSnapshot(raw, this.binding.scope, Date.now());
+            if (snapshot && generation === this.generation) {
+                this.lastKnownSnapshot = snapshot;
+                observation.source = "kv-hit";
+                return snapshot.site;
+            }
+        }
+        observation.source = kvFailed ? "d1-kv-error" : raw === null ? "d1-miss" : "d1-repair";
+        return this.repairCatalogSite();
+    }
+    repairCatalogSite() {
+        // Serialize miss fill with local setting mutations. Every publication
+        // reloads canonical state inside the same critical section, so an older
+        // local miss cannot overwrite a newer local write-through publication.
+        return this.exclusive(async () => {
+            const snapshot = await this.loadCanonicalSnapshot();
+            await this.putSnapshot(snapshot, true);
+            return snapshot.site;
+        });
+    }
+    async publishAfterCommittedWrite(reason) {
+        const record = requestDiagnosticContext.getStore();
+        if (reason === "seed" && record)
+            record.catalog.bootPublications++;
+        try {
+            const snapshot = await this.loadCanonicalSnapshot();
+            await this.putSnapshot(snapshot);
+        }
+        catch (error) {
+            // D1 already committed. Derived-cache repair must never turn a saved
+            // setting into a misleading failure or suppress the public-cache purge.
+            this.diagnostic(`${reason}-publication-failed`, error);
+        }
+    }
+    async loadCanonicalSnapshot() {
+        // Anchor freshness before the canonical read. A delayed load cannot gain
+        // a fresh lifetime merely because serialization or KV put completed later.
+        const observedAt = Date.now();
+        const site = normalizeCatalogSite(await this.canonical.load());
+        return {
+            version: SNAPSHOT_VERSION,
+            scope: this.binding.scope,
+            observedAt,
+            repairAfter: observedAt + MAX_SNAPSHOT_AGE_MS,
+            contentHash: await contentHash(site),
+            site,
+        };
+    }
+    async putSnapshot(snapshot, force = false) {
+        const now = Date.now();
+        // KV requires at least 60 seconds of remaining lifetime. Do not extend
+        // an old observation just to satisfy the platform's expiration minimum.
+        if (snapshot.repairAfter < now + 60_000 || now < this.putBackoffUntil)
+            return;
+        if (!force
+            && this.lastKnownSnapshot?.contentHash === snapshot.contentHash
+            && isSnapshotFresh(this.lastKnownSnapshot, now))
+            return;
+        const value = JSON.stringify(snapshot);
+        const bytes = utf8Bytes(value);
+        if (bytes > MAX_ENVELOPE_BYTES) {
+            this.diagnostic("oversized", { bytes, limit: MAX_ENVELOPE_BYTES });
+            return;
+        }
+        try {
+            await this.binding.namespace.put(this.key, value, {
+                expiration: Math.ceil(snapshot.repairAfter / 1000),
+            });
+            this.lastKnownSnapshot = snapshot;
+            this.putFailureCount = 0;
+            this.putBackoffUntil = 0;
+        }
+        catch (error) {
+            this.putFailureCount += 1;
+            this.putBackoffUntil = now + Math.min(MAX_PUT_BACKOFF_MS, 1_000 * (2 ** Math.min(this.putFailureCount - 1, 6)));
+            this.diagnostic("put-failed", error);
+        }
+    }
+    exclusive(operation) {
+        const result = this.operationTail.then(operation, operation);
+        this.operationTail = result.then(() => undefined, () => undefined);
+        return result;
+    }
+    diagnostic(kind, detail) {
+        const count = (this.diagnosticCounts.get(kind) ?? 0) + 1;
+        this.diagnosticCounts.set(kind, count);
+        // Bound repeated outage logs to the first occurrence and powers of two.
+        if (count !== 1 && (count & (count - 1)) !== 0)
+            return;
+        const safeDetail = isRecord(detail) && typeof detail["bytes"] === "number"
+            ? { bytes: detail["bytes"], limit: detail["limit"] }
+            : detail instanceof Error
+                ? { name: detail.name }
+                : undefined;
+        console.warn("[mantle] MCP catalog KV diagnostic", {
+            kind,
+            count,
+            ...(safeDetail ? { detail: safeDetail } : {}),
+        });
+    }
+}
+function normalizeCatalogSite(site) {
+    return {
+        origin: site.origin,
+        brand: site.brand,
+        description: site.description,
+        icons: site.icons.map(normalizeIcon),
+        media: {
+            purposes: site.media.purposes.map((purpose) => ({
+                name: purpose.name,
+                required: [...purpose.required],
+                maxBytes: Object.fromEntries(Object.entries(purpose.maxBytes).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)),
+            })),
+        },
+    };
+}
+function normalizeIcon(icon) {
+    return {
+        src: icon.src,
+        ...(icon.mimeType ? { mimeType: icon.mimeType } : {}),
+        ...(icon.sizes ? { sizes: [...icon.sizes] } : {}),
+        ...(icon.theme ? { theme: icon.theme } : {}),
+    };
+}
+async function parseSnapshot(raw, scope, now) {
+    if (utf8Bytes(raw) > MAX_ENVELOPE_BYTES)
+        return null;
+    let snapshot;
+    try {
+        const parsed = snapshotSchema.safeParse(JSON.parse(raw));
+        if (!parsed.success)
+            return null;
+        snapshot = parsed.data;
+        assertSiteDefaultsCanonical(snapshot.site);
+    }
+    catch {
+        return null;
+    }
+    if (snapshot.scope !== scope || !isSnapshotFresh(snapshot, now))
+        return null;
+    const site = normalizeCatalogSite(snapshot.site);
+    if (await contentHash(site) !== snapshot.contentHash)
+        return null;
+    return { ...snapshot, site };
+}
+function isSnapshotFresh(value, now) {
+    return value.observedAt <= now + MAX_FUTURE_SKEW_MS
+        && value.repairAfter > value.observedAt
+        && value.repairAfter - value.observedAt <= MAX_SNAPSHOT_AGE_MS
+        && value.repairAfter > now;
+}
+async function contentHash(site) {
+    const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(JSON.stringify(site)));
+    return [...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+function utf8Bytes(value) {
+    return new TextEncoder().encode(value).byteLength;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=KvSiteConfigRepository.js.map

package/dist/bindings/KvSiteConfigRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KvSiteConfigRepository.js","sourceRoot":"","sources":["../../src/bindings/KvSiteConfigRepository.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,GAK5B,MAAM,qBAAqB,CAAC;AAK7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAsB,MAAM,0BAA0B,CAAC;AAExF,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,mBAAmB,GAAG,SAAS,CAAC;AACtC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,aAAa,GAAG,wBAAwB,CAAC;AA2B/C,MAAM,cAAc,GAAG,CAAC,CAAC,YAAY,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC;QACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;YAC5B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;YACf,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;YACvF,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACrC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;SAC5C,CAAC,CAAC;QACH,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC;YACpB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;gBAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;gBAChB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;aACtD,CAAC,CAAC;SACJ,CAAC;KACH,CAAC;CACH,CAAC,CAAC;AAQH;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IAYd;IACA;IAXV,GAAG,CAAS;IACJ,QAAQ,GAAG,IAAI,OAAO,EAA+B,CAAC;IAC/D,UAAU,GAAG,CAAC,CAAC;IACf,iBAAiB,CAAgC;IACjD,aAAa,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IACjD,eAAe,GAAG,CAAC,CAAC;IACpB,eAAe,GAAG,CAAC,CAAC;IACX,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE9D,YACmB,SAA+B,EAC/B,OAA4B;QAD5B,cAAS,GAAT,SAAS,CAAsB;QAC/B,YAAO,GAAP,OAAO,CAAqB;QAE7C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,yBAAyB,OAAO,CAAC,KAAK,MAAM,CAAC;IAC1D,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAED,iBAAiB;QACf,OAAO,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAkC;QAC3C,wEAAwE;QACxE,uEAAuE;QACvE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QACrB,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC9B,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YACrB,MAAM,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAoC;QACvD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QACrB,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC9B,MAAM,IAAI,CAAC,SAAS,CAAC,cAAe,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YACrB,MAAM,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,eAAe,CAAC,OAAe;QAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,IAAI,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,KAAK,UAAU,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,IAAI,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAChE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,WAAW,GAA8B,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;YACzE,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;gBACzE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,OAAO;oBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrF,CAAC,CAAC,CAAC;YACH,MAAM,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YACvD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAO,CAAC;QACzB,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,CAAC,OAAO,CAAC;QACrC,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;YACnC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC;YACpD,MAAM,CAAC,OAAO,CAAC,UAAU,KAAK,UAAU,CAAC;YACzC,IAAI,OAAO,KAAK,IAAI;gBAAE,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QAC3G,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,UAAkB,EAAE,WAAsC;QACtF,IAAI,GAAG,GAAkB,IAAI,CAAC;QAC9B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC1E,IAAI,QAAQ,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC/C,IAAI,CAAC,iBAAiB,GAAG,QAAQ,CAAC;gBAClC,WAAW,CAAC,MAAM,GAAG,QAAQ,CAAC;gBAC9B,OAAO,QAAQ,CAAC,IAAI,CAAC;YACvB,CAAC;QACH,CAAC;QACD,WAAW,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;QACvF,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAClC,CAAC;IAEO,iBAAiB;QACvB,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACpD,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACvC,OAAO,QAAQ,CAAC,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,0BAA0B,CAAC,MAAyB;QAChE,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,CAAC;QACnD,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM;YAAE,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACpD,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,wEAAwE;YACxE,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,qBAAqB,EAAE,KAAK,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,qBAAqB;QACjC,yEAAyE;QACzE,2EAA2E;QAC3E,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,OAAO;YACL,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACzB,UAAU;YACV,WAAW,EAAE,UAAU,GAAG,mBAAmB;YAC7C,WAAW,EAAE,MAAM,WAAW,CAAC,IAAI,CAAC;YACpC,IAAI;SACL,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,QAA2B,EAAE,KAAK,GAAG,KAAK;QAClE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,uEAAuE;QACvE,wEAAwE;QACxE,IAAI,QAAQ,CAAC,WAAW,GAAG,GAAG,GAAG,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,eAAe;YAAE,OAAO;QAC9E,IACE,CAAC,KAAK;eACH,IAAI,CAAC,iBAAiB,EAAE,WAAW,KAAK,QAAQ,CAAC,WAAW;eAC5D,eAAe,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC;YAC/C,OAAO;QACT,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;YAC/B,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE;gBAChD,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,GAAG,IAAI,CAAC;aACnD,CAAC,CAAC;YACH,IAAI,CAAC,iBAAiB,GAAG,QAAQ,CAAC;YAClC,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;YACzB,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC;YAC1B,IAAI,CAAC,eAAe,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,CACnC,kBAAkB,EAClB,KAAK,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CACrD,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAEO,SAAS,CAAI,SAA2B;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnE,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,UAAU,CAAC,IAAY,EAAE,MAAe;QAC9C,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvC,wEAAwE;QACxE,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO;QACvD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ;YACxE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;YACpD,CAAC,CAAC,MAAM,YAAY,KAAK;gBACvB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;gBACvB,CAAC,CAAC,SAAS,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,oCAAoC,EAAE;YACjD,IAAI;YACJ,KAAK;YACL,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,oBAAoB,CAAC,IAA0B;IACtD,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC;QACpC,KAAK,EAAE;YACL,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC9C,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;gBAC/B,QAAQ,EAAE,MAAM,CAAC,WAAW,CAC1B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAChF;aACF,CAAC,CAAC;SACJ;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAc;IACnC,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,GAAW,EACX,KAAa,EACb,GAAW;IAEX,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,QAA2B,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACjC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;QACvB,2BAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAClE,OAAO,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,eAAe,CACtB,KAA4D,EAC5D,GAAW;IAEX,OAAO,KAAK,CAAC,UAAU,IAAI,GAAG,GAAG,kBAAkB;WAC9C,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU;WACpC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,IAAI,mBAAmB;WAC3D,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAA0B;IACnD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC;AACpD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/bindings/R2MediaStorage.d.ts

@@ -28,15 +28,14 @@ import { type CommitUploadArgs, type CreateUploadArgs, type CreateUploadResult,
  * # Multi-variant (#272)
  *
  * `createUpload` produces one presigned PUT URL per declared variant;
- * `commitUpload` HEAD-verifies every one. Storage keys are scoped
+ * `commitUpload` verifies and streams every object through a metadata rewrite. Storage keys are scoped
  * under a shared `<uploadGroupId>/` prefix so operators can eyeball
  * the variant set in R2 dashboards, and the orphan sweeper (#254)
  * can identify partially-committed groups by listing the prefix.
  *
  * Optimization runs agent-side in the MCP client's runtime. The
  * Worker never decodes / re-encodes bytes — it only verifies content-
- * type + size on the metadata returned by R2's HEAD-equivalent path
- * (`bucket.get` + `httpMetadata`).
+ * type + size from `bucket.get` before streaming the metadata-rewrite PUT.
  *
  * # Future: private bucket adapter
  *

package/dist/bindings/R2MediaStorage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"R2MediaStorage.d.ts","sourceRoot":"","sources":["../../src/bindings/R2MediaStorage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAGL,KAAK,gBAAgB,EAErB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EAEvB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,YAAY,EAGlB,MAAM,wBAAwB,CAAC;AAEhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,qBAAa,cAAe,YAAW,YAAY;IAE/C,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB;;mDAE+C;IAC/C,OAAO,CAAC,QAAQ,CAAC,UAAU;IAK3B;;;;;;sEAMkE;IAClE,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAjBL,MAAM,EAAE,QAAQ,EAChB,EAAE,EAAE,SAAS;IAC9B;;mDAE+C;IAC9B,UAAU,EAAE,MAAM;IACnC;;6CAEyC;IACzC,UAAU,EAAE,MAAM;IAClB;;;;;;sEAMkE;IACjD,KAAK,GAAE,WAAiC;IAgB3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAE9B,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAwCjE,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAoDzD,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAIrD,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;YAK3C,sBAAsB;IAiDpC;;;;;;;;2CAQuC;IACvC,OAAO,CAAC,sBAAsB;CAY/B"}
+{"version":3,"file":"R2MediaStorage.d.ts","sourceRoot":"","sources":["../../src/bindings/R2MediaStorage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAGL,KAAK,gBAAgB,EAErB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EAEvB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,YAAY,EAGlB,MAAM,wBAAwB,CAAC;AAEhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,qBAAa,cAAe,YAAW,YAAY;IAE/C,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB;;mDAE+C;IAC/C,OAAO,CAAC,QAAQ,CAAC,UAAU;IAK3B;;;;;;sEAMkE;IAClE,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAjBL,MAAM,EAAE,QAAQ,EAChB,EAAE,EAAE,SAAS;IAC9B;;mDAE+C;IAC9B,UAAU,EAAE,MAAM;IACnC;;6CAEyC;IACzC,UAAU,EAAE,MAAM;IAClB;;;;;;sEAMkE;IACjD,KAAK,GAAE,WAAiC;IAgB3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAE9B,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAwCjE,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IA2DzD,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAIrD,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;YAK3C,sBAAsB;IAyDpC;;;;;;;;2CAQuC;IACvC,OAAO,CAAC,sBAAsB;CAY/B"}

package/dist/bindings/R2MediaStorage.js

@@ -28,15 +28,14 @@ import { RandomUuidGenerator, extensionForMime, } from "@aotter/mantle-runtime";
  * # Multi-variant (#272)
  *
  * `createUpload` produces one presigned PUT URL per declared variant;
- * `commitUpload` HEAD-verifies every one. Storage keys are scoped
+ * `commitUpload` verifies and streams every object through a metadata rewrite. Storage keys are scoped
  * under a shared `<uploadGroupId>/` prefix so operators can eyeball
  * the variant set in R2 dashboards, and the orphan sweeper (#254)
  * can identify partially-committed groups by listing the prefix.
  *
  * Optimization runs agent-side in the MCP client's runtime. The
  * Worker never decodes / re-encodes bytes — it only verifies content-
- * type + size on the metadata returned by R2's HEAD-equivalent path
- * (`bucket.get` + `httpMetadata`).
+ * type + size from `bucket.get` before streaming the metadata-rewrite PUT.
  *
  * # Future: private bucket adapter
  *
@@ -123,16 +122,12 @@ export class R2MediaStorage {
         };
     }
     async commitUpload(args) {
-        const variants = [];
-        for (const spec of args.variants) {
-            variants.push(await this.verifyAndCommitVariant(args, spec));
-        }
         // Enforce the asset-shape invariant the renderer depends on. The
         // use case already validated this at create time; this is a
         // belt-and-suspenders check at the adapter-side commit path.
         // Exactly one primary, no duplicated (mime, role) pair (the latter
         // would have already collided on storage key in createUpload).
-        const primaries = variants.filter((v) => v.role === "primary");
+        const primaries = args.variants.filter((v) => v.role === "primary");
         if (primaries.length !== 1) {
             throw new DiagnosticError(makeDiagnostic({
                 code: "MEDIA_VARIANTS_INCOMPLETE",
@@ -140,11 +135,11 @@ export class R2MediaStorage {
                 severity: "error",
                 path: "adapter/R2MediaStorage/commitUpload",
                 expected: "exactly one variant with role='primary'",
-                value: variants.map((v) => v.role).join(","),
+                value: args.variants.map((v) => v.role).join(","),
             }));
         }
         const seenKey = new Set();
-        for (const v of variants) {
+        for (const v of args.variants) {
             const key = `${v.mimeType}/${v.role}`;
             if (seenKey.has(key)) {
                 throw new DiagnosticError(makeDiagnostic({
@@ -158,6 +153,18 @@ export class R2MediaStorage {
             }
             seenKey.add(key);
         }
+        const variants = [];
+        // At most three GET streams and three corresponding PUTs per invocation.
+        // Settle the whole batch before returning an error or starting another.
+        for (let offset = 0; offset < args.variants.length; offset += 3) {
+            const results = await Promise.allSettled(args.variants.slice(offset, offset + 3)
+                .map((spec) => this.verifyAndCommitVariant(args, spec)));
+            for (const result of results) {
+                if (result.status === "rejected")
+                    throw result.reason;
+                variants.push(result.value);
+            }
+        }
         return {
             id: args.uploadGroupId,
             variants,
@@ -181,41 +188,51 @@ export class R2MediaStorage {
         const existing = await this.bucket.get(spec.storageKey);
         if (!existing)
             throw mediaDiagnostic("MEDIA_OBJECT_NOT_FOUND", { value: args.uploadGroupId });
-        const actualMime = existing.httpMetadata?.contentType ?? "application/octet-stream";
-        if (actualMime !== spec.mimeType) {
-            throw mediaDiagnostic("MEDIA_MIME_REJECTED", {
-                value: actualMime,
-                expected: spec.mimeType,
+        try {
+            const actualMime = existing.httpMetadata?.contentType ?? "application/octet-stream";
+            if (actualMime !== spec.mimeType) {
+                throw mediaDiagnostic("MEDIA_MIME_REJECTED", {
+                    value: actualMime,
+                    expected: spec.mimeType,
+                });
+            }
+            if (existing.size > spec.maxBytes) {
+                throw mediaDiagnostic("MEDIA_VARIANT_SIZE_EXCEEDED", {
+                    value: { mimeType: spec.mimeType, byteSize: existing.size },
+                    expected: `${spec.mimeType} byteSize <= ${spec.maxBytes}`,
+                });
+            }
+            const customMetadata = {
+                ...existing.customMetadata,
+                committedAt: String(args.now),
+                role: spec.role,
+                uploadGroupId: args.uploadGroupId,
+                filename: args.filename,
+            };
+            if (args.alt)
+                customMetadata["alt"] = args.alt;
+            if (args.caption)
+                customMetadata["caption"] = args.caption;
+            const committed = await this.bucket.put(spec.storageKey, existing.body, {
+                httpMetadata: { contentType: actualMime },
+                customMetadata,
             });
+            if (!committed)
+                throw new Error("R2 metadata commit did not store the object.");
+            return {
+                mimeType: actualMime,
+                publicUrl: `${this.publicBase}/${spec.storageKey}`,
+                storageKey: spec.storageKey,
+                byteSize: existing.size,
+                role: spec.role,
+            };
         }
-        if (existing.size > spec.maxBytes) {
-            throw mediaDiagnostic("MEDIA_VARIANT_SIZE_EXCEEDED", {
-                value: { mimeType: spec.mimeType, byteSize: existing.size },
-                expected: `${spec.mimeType} byteSize <= ${spec.maxBytes}`,
-            });
+        catch (error) {
+            // Validation may reject before PUT takes ownership of the GET stream.
+            // A failed PUT may already have consumed/errored it; preserve the cause.
+            await existing.body.cancel().catch(() => { });
+            throw error;
         }
-        const customMetadata = {
-            ...existing.customMetadata,
-            committedAt: String(args.now),
-            role: spec.role,
-            uploadGroupId: args.uploadGroupId,
-            filename: args.filename,
-        };
-        if (args.alt)
-            customMetadata["alt"] = args.alt;
-        if (args.caption)
-            customMetadata["caption"] = args.caption;
-        await this.bucket.put(spec.storageKey, existing.body, {
-            httpMetadata: { contentType: actualMime },
-            customMetadata,
-        });
-        return {
-            mimeType: actualMime,
-            publicUrl: `${this.publicBase}/${spec.storageKey}`,
-            storageKey: spec.storageKey,
-            byteSize: existing.size,
-            role: spec.role,
-        };
     }
     /** Object keys are server-generated. Layout:
      *

package/dist/bindings/R2MediaStorage.js.map

@@ -1 +1 @@
-{"version":3,"file":"R2MediaStorage.js","sourceRoot":"","sources":["../../src/bindings/R2MediaStorage.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EACL,mBAAmB,EACnB,gBAAgB,GAajB,MAAM,wBAAwB,CAAC;AAEhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,MAAM,OAAO,cAAc;IAEN;IACA;IAIA;IAYA;IAlBnB,YACmB,MAAgB,EAChB,EAAa;IAC9B;;mDAE+C;IAC9B,UAAkB;IACnC;;6CAEyC;IACzC,UAAkB;IAClB;;;;;;sEAMkE;IACjD,QAAqB,mBAAmB;QAjBxC,WAAM,GAAN,MAAM,CAAU;QAChB,OAAE,GAAF,EAAE,CAAW;QAIb,eAAU,GAAV,UAAU,CAAQ;QAYlB,UAAK,GAAL,KAAK,CAAmC;QAEzD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,eAAe,CACvB,cAAc,CAAC;gBACb,IAAI,EAAE,sBAAsB;gBAC5B,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,wBAAwB;gBAC9B,QAAQ,EAAE,4CAA4C;aACvD,CAAC,CACH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;IAEgB,UAAU,CAAS;IAEpC,KAAK,CAAC,YAAY,CAAC,IAAsB;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QAChF,MAAM,YAAY,GAAuB,EAAE,CAAC;QAC5C,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,UAAU,GAAG,IAAI,CAAC,sBAAsB,CAC5C,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,OAAO,EACZ,OAAO,CACR,CAAC;YACF,+DAA+D;YAC/D,6DAA6D;YAC7D,8DAA8D;YAC9D,kEAAkE;YAClE,yDAAyD;YACzD,2DAA2D;YAC3D,yDAAyD;YACzD,gCAAgC;YAChC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC;YAC/E,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE;gBACnD,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;aACxC,CAAC,CAAC;YACH,YAAY,CAAC,IAAI,CAAC;gBAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,MAAM,CAAC,GAAG;gBACrB,UAAU;gBACV,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,IAAI,UAAU,EAAE;gBAC7C,eAAe,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,QAAQ,EAAE;aACtD,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,YAAY;YACZ,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAsB;QACvC,MAAM,QAAQ,GAAmB,EAAE,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/D,CAAC;QAED,iEAAiE;QACjE,4DAA4D;QAC5D,6DAA6D;QAC7D,mEAAmE;QACnE,+DAA+D;QAC/D,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAC/D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,eAAe,CACvB,cAAc,CAAC;gBACb,IAAI,EAAE,2BAA2B;gBACjC,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,qCAAqC;gBAC3C,QAAQ,EAAE,yCAAyC;gBACnD,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;aAC7C,CAAC,CACH,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,eAAe,CACvB,cAAc,CAAC;oBACb,IAAI,EAAE,2BAA2B;oBACjC,KAAK,EAAE,SAAS;oBAChB,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,qCAAqC;oBAC3C,QAAQ,EAAE,qCAAqC;oBAC/C,KAAK,EAAE,GAAG;iBACX,CAAC,CACH,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QAED,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,aAAa;YACtB,QAAQ;YACR,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG;YACnB,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAsB;QACvC,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAsB;QACvC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IAGO,KAAK,CAAC,sBAAsB,CAClC,IAAsB,EACtB,IAA6B;QAE7B,iEAAiE;QACjE,+DAA+D;QAC/D,0DAA0D;QAC1D,wCAAwC;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ;YAAE,MAAM,eAAe,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAE9F,MAAM,UAAU,GAAG,QAAQ,CAAC,YAAY,EAAE,WAAW,IAAI,0BAA0B,CAAC;QACpF,IAAI,UAAU,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,eAAe,CAAC,qBAAqB,EAAE;gBAC3C,KAAK,EAAE,UAAU;gBACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,eAAe,CAAC,6BAA6B,EAAE;gBACnD,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;gBAC3D,QAAQ,EAAE,GAAG,IAAI,CAAC,QAAQ,gBAAgB,IAAI,CAAC,QAAQ,EAAE;aAC1D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,cAAc,GAA2B;YAC7C,GAAG,QAAQ,CAAC,cAAc;YAC1B,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC;QACF,IAAI,IAAI,CAAC,GAAG;YAAE,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;QAC/C,IAAI,IAAI,CAAC,OAAO;YAAE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QAE3D,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE;YACpD,YAAY,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE;YACzC,cAAc;SACf,CAAC,CAAC;QAEH,OAAO;YACL,QAAQ,EAAE,UAAU;YACpB,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,EAAE;YAClD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;IACJ,CAAC;IAED;;;;;;;;2CAQuC;IAC/B,sBAAsB,CAC5B,aAAqB,EACrB,OAAe,EACf,OAAgC;QAEhC,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC;YACzD,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/C,OAAO,GAAG,aAAa,GAAG,YAAY,IAAI,OAAO,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;IAClE,CAAC;CACF;AAED,SAAS,eAAe,CACtB,IAGiC,EACjC,MAA6C;IAE7C,OAAO,IAAI,eAAe,CACxB,cAAc,CAAC;QACb,IAAI;QACJ,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,qCAAqC;QAC3C,GAAG,MAAM;KACV,CAAC,CACH,CAAC;AACJ,CAAC"}
+{"version":3,"file":"R2MediaStorage.js","sourceRoot":"","sources":["../../src/bindings/R2MediaStorage.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EACL,mBAAmB,EACnB,gBAAgB,GAajB,MAAM,wBAAwB,CAAC;AAEhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,MAAM,OAAO,cAAc;IAEN;IACA;IAIA;IAYA;IAlBnB,YACmB,MAAgB,EAChB,EAAa;IAC9B;;mDAE+C;IAC9B,UAAkB;IACnC;;6CAEyC;IACzC,UAAkB;IAClB;;;;;;sEAMkE;IACjD,QAAqB,mBAAmB;QAjBxC,WAAM,GAAN,MAAM,CAAU;QAChB,OAAE,GAAF,EAAE,CAAW;QAIb,eAAU,GAAV,UAAU,CAAQ;QAYlB,UAAK,GAAL,KAAK,CAAmC;QAEzD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,eAAe,CACvB,cAAc,CAAC;gBACb,IAAI,EAAE,sBAAsB;gBAC5B,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,wBAAwB;gBAC9B,QAAQ,EAAE,4CAA4C;aACvD,CAAC,CACH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;IAEgB,UAAU,CAAS;IAEpC,KAAK,CAAC,YAAY,CAAC,IAAsB;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QAChF,MAAM,YAAY,GAAuB,EAAE,CAAC;QAC5C,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,UAAU,GAAG,IAAI,CAAC,sBAAsB,CAC5C,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,OAAO,EACZ,OAAO,CACR,CAAC;YACF,+DAA+D;YAC/D,6DAA6D;YAC7D,8DAA8D;YAC9D,kEAAkE;YAClE,yDAAyD;YACzD,2DAA2D;YAC3D,yDAAyD;YACzD,gCAAgC;YAChC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC;YAC/E,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE;gBACnD,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;aACxC,CAAC,CAAC;YACH,YAAY,CAAC,IAAI,CAAC;gBAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,MAAM,CAAC,GAAG;gBACrB,UAAU;gBACV,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,IAAI,UAAU,EAAE;gBAC7C,eAAe,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,QAAQ,EAAE;aACtD,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,YAAY;YACZ,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAsB;QACvC,iEAAiE;QACjE,4DAA4D;QAC5D,6DAA6D;QAC7D,mEAAmE;QACnE,+DAA+D;QAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QACpE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,eAAe,CACvB,cAAc,CAAC;gBACb,IAAI,EAAE,2BAA2B;gBACjC,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,qCAAqC;gBAC3C,QAAQ,EAAE,yCAAyC;gBACnD,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;aAClD,CAAC,CACH,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,eAAe,CACvB,cAAc,CAAC;oBACb,IAAI,EAAE,2BAA2B;oBACjC,KAAK,EAAE,SAAS;oBAChB,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,qCAAqC;oBAC3C,QAAQ,EAAE,qCAAqC;oBAC/C,KAAK,EAAE,GAAG;iBACX,CAAC,CACH,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QAED,MAAM,QAAQ,GAAmB,EAAE,CAAC;QACpC,yEAAyE;QACzE,wEAAwE;QACxE,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC;iBAC7E,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;oBAAE,MAAM,MAAM,CAAC,MAAM,CAAC;gBACtD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,aAAa;YACtB,QAAQ;YACR,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG;YACnB,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAsB;QACvC,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAsB;QACvC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IAGO,KAAK,CAAC,sBAAsB,CAClC,IAAsB,EACtB,IAA6B;QAE7B,iEAAiE;QACjE,+DAA+D;QAC/D,0DAA0D;QAC1D,wCAAwC;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ;YAAE,MAAM,eAAe,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAE9F,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,QAAQ,CAAC,YAAY,EAAE,WAAW,IAAI,0BAA0B,CAAC;YACpF,IAAI,UAAU,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACjC,MAAM,eAAe,CAAC,qBAAqB,EAAE;oBAC3C,KAAK,EAAE,UAAU;oBACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACxB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClC,MAAM,eAAe,CAAC,6BAA6B,EAAE;oBACnD,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;oBAC3D,QAAQ,EAAE,GAAG,IAAI,CAAC,QAAQ,gBAAgB,IAAI,CAAC,QAAQ,EAAE;iBAC1D,CAAC,CAAC;YACL,CAAC;YAED,MAAM,cAAc,GAA2B;gBAC7C,GAAG,QAAQ,CAAC,cAAc;gBAC1B,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC;YACF,IAAI,IAAI,CAAC,GAAG;gBAAE,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;YAC/C,IAAI,IAAI,CAAC,OAAO;gBAAE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;YAE3D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE;gBACtE,YAAY,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE;gBACzC,cAAc;aACf,CAAC,CAAC;YACH,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAEhF,OAAO;gBACL,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,EAAE;gBAClD,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sEAAsE;YACtE,yEAAyE;YACzE,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC7C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;2CAQuC;IAC/B,sBAAsB,CAC5B,aAAqB,EACrB,OAAe,EACf,OAAgC;QAEhC,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC;YACzD,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/C,OAAO,GAAG,aAAa,GAAG,YAAY,IAAI,OAAO,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;IAClE,CAAC;CACF;AAED,SAAS,eAAe,CACtB,IAGiC,EACjC,MAA6C;IAE7C,OAAO,IAAI,eAAe,CACxB,cAAc,CAAC;QACb,IAAI;QACJ,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,qCAAqC;QAC3C,GAAG,MAAM;KACV,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/bindings/conventionalBindings.d.ts

@@ -2,6 +2,8 @@ import type { MantleCloudflareConfig } from "../mount/cmsConfig.js";
 export interface ConventionalBindingsEnv {
     readonly DB?: D1Database;
     readonly ASSETS?: Fetcher;
+    /** Optional app/environment-owned KV namespace for MCP catalog settings. */
+    readonly MANTLE_KV?: KVNamespace;
 }
 export type MantleWorkerBindings = MantleCloudflareConfig["bindings"];
 /** Bind the conventional Cloudflare names to Mantle's existing runtime adapters. */

package/dist/bindings/conventionalBindings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"conventionalBindings.d.ts","sourceRoot":"","sources":["../../src/bindings/conventionalBindings.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAQpE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,MAAM,oBAAoB,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;AAEtE,oFAAoF;AACpF,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,uBAAuB,GAC3B,oBAAoB,CAMtB"}
+{"version":3,"file":"conventionalBindings.d.ts","sourceRoot":"","sources":["../../src/bindings/conventionalBindings.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAQpE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC;CAClC;AAED,MAAM,MAAM,oBAAoB,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;AAEtE,oFAAoF;AACpF,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,uBAAuB,GAC3B,oBAAoB,CAStB"}

package/dist/bindings/conventionalBindings.js

@@ -10,6 +10,9 @@ export function createConventionalBindings(env) {
     return {
         db: new D1DatabaseDriver(env.DB),
         adminAssets: env.ASSETS ? new AssetsAssetServer(env.ASSETS) : NO_ASSETS,
+        ...(env.MANTLE_KV
+            ? { mcpCatalogKv: { namespace: env.MANTLE_KV, scope: "default" } }
+            : {}),
     };
 }
 //# sourceMappingURL=conventionalBindings.js.map

package/dist/bindings/conventionalBindings.js.map

@@ -1 +1 @@
-{"version":3,"file":"conventionalBindings.js","sourceRoot":"","sources":["../../src/bindings/conventionalBindings.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,yEAAyE;AACzE,kEAAkE;AAClE,MAAM,SAAS,GAAqB,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;AAShE,oFAAoF;AACpF,MAAM,UAAU,0BAA0B,CACxC,GAA4B;IAE5B,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAC7E,OAAO;QACL,EAAE,EAAE,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;KACxE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"conventionalBindings.js","sourceRoot":"","sources":["../../src/bindings/conventionalBindings.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,yEAAyE;AACzE,kEAAkE;AAClE,MAAM,SAAS,GAAqB,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;AAWhE,oFAAoF;AACpF,MAAM,UAAU,0BAA0B,CACxC,GAA4B;IAE5B,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAC7E,OAAO;QACL,EAAE,EAAE,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACvE,GAAG,CAAC,GAAG,CAAC,SAAS;YACf,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YAClE,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}

package/dist/bindings/index.d.ts

@@ -2,5 +2,6 @@ export { D1DatabaseDriver, type D1QueryMetric, type D1QueryObserver, } from "./D
 export { AssetsAssetServer } from "./AssetsAssetServer.js";
 export { createConventionalBindings, type ConventionalBindingsEnv, type MantleWorkerBindings, } from "./conventionalBindings.js";
 export { R2MediaStorage } from "./R2MediaStorage.js";
+export { KvSiteConfigRepository, type McpCatalogKvBinding, type McpCatalogSiteConfig, type McpCatalogSiteConfigReader, } from "./KvSiteConfigRepository.js";
 export { WorkersQueueHookDispatcher, createQueueHandler, } from "./WorkersQueueHookDispatcher.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/bindings/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/bindings/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,KAAK,aAAa,EAClB,KAAK,eAAe,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EACL,0BAA0B,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,iCAAiC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/bindings/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,KAAK,aAAa,EAClB,KAAK,eAAe,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EACL,0BAA0B,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,sBAAsB,EACtB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,GAChC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,iCAAiC,CAAC"}

package/dist/bindings/index.js

@@ -2,5 +2,6 @@ export { D1DatabaseDriver, } from "./D1DatabaseDriver.js";
 export { AssetsAssetServer } from "./AssetsAssetServer.js";
 export { createConventionalBindings, } from "./conventionalBindings.js";
 export { R2MediaStorage } from "./R2MediaStorage.js";
+export { KvSiteConfigRepository, } from "./KvSiteConfigRepository.js";
 export { WorkersQueueHookDispatcher, createQueueHandler, } from "./WorkersQueueHookDispatcher.js";
 //# sourceMappingURL=index.js.map

package/dist/bindings/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/bindings/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,GAGjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EACL,0BAA0B,GAG3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,iCAAiC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/bindings/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,GAGjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EACL,0BAA0B,GAG3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,sBAAsB,GAIvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,iCAAiC,CAAC"}