@aotter/mantle-cloudflare 0.1.0-alpha.9 → 0.1.2-alpha.2

package/dist/worker/createMantleWorker.js

@@ -1,12 +1,12 @@
 import { Hono, } from "hono";
+import { mountMantleOAuth } from "@aotter/mantle-admin";
 import { conventionalMcpResource, createConventionalAuth, setupIncompleteAuthResponse, } from "../auth/conventionalAuth.js";
 import { createConventionalBindings, } from "../bindings/conventionalBindings.js";
 import { createMantleRuntimeRef, } from "../mount/bootRuntimeOnce.js";
 import { createMcpApiHandler } from "../mount/mountMcp.js";
 import { mountAdmin } from "../mount/mountAdmin.js";
 import { mountRuntimeEndpoints } from "../mount/mountRuntimeEndpoints.js";
-import { mountAuthorize } from "../oauth/mountOAuth.js";
-import { applyCachePolicy, PUBLIC_CACHE_TAG } from "../oauth/cachePolicy.js";
+import { applyCachePolicy, normalizeCacheScope, scopedPublicCacheTag, } from "../oauth/cachePolicy.js";
 /** Fixed namespaces owned by Mantle's standard Worker surfaces. */
 export const MANTLE_RESERVED_PATH_PREFIXES = [
     "/admin",
@@ -26,7 +26,9 @@ export function createMantleWorker(options) {
     const assemble = (env) => {
         if (assembled)
             return assembled;
-        const conventional = createConventionalBindings(env);
+        const cacheScope = normalizeCacheScope(resolve(options.cacheScope, env));
+        const publicCacheTag = scopedPublicCacheTag(cacheScope);
+        const conventional = createConventionalBindings(env, cacheScope);
         const bindings = options.bindings?.(env, conventional) ?? conventional;
         const auth = options.auth?.(env) ?? createConventionalAuth(env);
         let ref = null;
@@ -35,10 +37,12 @@ export function createMantleWorker(options) {
             : Promise.reject(new Error("Mantle runtime is unavailable until `extend` returns."));
         const bootstrap = { env, auth, bindings, getRuntime };
         const extension = options.extend?.(bootstrap) ?? {};
+        const sharedPublicCacheTag = extension.credentialResolver ? undefined : publicCacheTag;
         ref = createMantleRuntimeRef({
             plan: options.plan,
             handlers: mergeHandlers(options.handlers, extension.handlers),
             siteDefaults: resolve(options.siteDefaults, env),
+            cacheScope: sharedPublicCacheTag ? cacheScope : undefined,
             templates: options.templates,
             publicPathResolver: options.publicPathResolver,
             reservedHttpPathPrefixes: [
@@ -51,13 +55,33 @@ export function createMantleWorker(options) {
             auth,
             credentialResolver: extension.credentialResolver,
             jwtBearer: extension.jwtBearer,
-            onPublicChange: purgePublicCache,
+            onPublicChange: () => purgePublicCache(sharedPublicCacheTag),
         });
         const app = new Hono();
+        // Preserve Hono HTTP responses; redact unexpected failures at the facade.
+        app.onError((error, c) => {
+            if ("getResponse" in error) {
+                const response = error.getResponse();
+                return c.newResponse(response.body, response);
+            }
+            throw error;
+        });
+        // Schema readiness belongs to database consumers, not static dispatch.
+        app.use("*", async (c, next) => {
+            const path = c.req.path;
+            if (hasOwnedPrefix(path, auth.basePath)
+                || hasOwnedPrefix(path, "/oauth")
+                || hasOwnedPrefix(path, "/mcp")
+                || hasOwnedPrefix(path, "/admin/api")
+                || path.startsWith(MANTLE_RESERVED_WELL_KNOWN_PREFIX)) {
+                await getRuntime();
+            }
+            await next();
+        });
         mountRuntimeEndpoints(app, ref);
         if (bindings.adminAssets)
             mountAdmin(app, ref, bindings.adminAssets);
-        mountAuthorize(app, { auth });
+        mountMantleOAuth(app, { auth, assets: bindings.adminAssets });
         const mcpResource = auth.mcpResource ?? conventionalMcpResource(env);
         const publicMcp = createMcpApiHandler({
             ref,
@@ -78,48 +102,63 @@ export function createMantleWorker(options) {
             ref,
         });
         assertExtensionRoutes(app, standardRouteCount, auth.basePath);
+        // A convention, not a reserved namespace: an existing host route wins.
+        app.get("/favicon.ico", async (c) => {
+            const icons = (await (await ref.get()).siteConfig.load()).icons;
+            const icon = icons.find((candidate) => candidate.mimeType === "image/png" && !candidate.theme)
+                ?? icons.find((candidate) => !candidate.theme)
+                ?? icons[0];
+            if (!icon)
+                return c.notFound();
+            const target = new URL(icon.src, c.req.url);
+            if (target.origin === new URL(c.req.url).origin && target.pathname === "/favicon.ico") {
+                return await bindings.adminAssets?.fetch(new Request(target)) ?? c.notFound();
+            }
+            return c.redirect(icon.src);
+        });
         const next = {
             auth,
             getRuntime,
-            fetch: async (request, workerEnv, ctx) => applyCachePolicy(request, await app.fetch(request, workerEnv, ctx)),
+            fetch: async (request, workerEnv, ctx) => applyCachePolicy(request, await app.fetch(request, workerEnv, ctx), sharedPublicCacheTag ?? null),
         };
         assembled = next;
+        void auth.ready?.catch(() => {
+            if (assembled === next)
+                assembled = null;
+        });
         return next;
     };
     return {
-        getRuntime(env) {
-            return assemble(env).getRuntime();
+        async getRuntime(env) {
+            const worker = assemble(env);
+            const [runtime] = await Promise.all([worker.getRuntime(), worker.auth.ready]);
+            return runtime;
         },
         async fetch(request, env, ctx) {
             return runMantleWorkerRequest(async () => {
                 const worker = assemble(env);
+                if (worker.auth.ready)
+                    ctx.waitUntil(worker.auth.ready);
                 const setupIncomplete = await setupIncompleteAuthResponse(request, worker.auth);
                 if (setupIncomplete)
                     return setupIncomplete;
-                if (!isRuntimeIndependentOAuthRequest(request))
-                    await worker.getRuntime();
                 return worker.fetch(request, env, ctx);
             });
         },
     };
 }
-async function purgePublicCache() {
+async function purgePublicCache(publicCacheTag) {
+    if (!publicCacheTag)
+        return;
     const { cache } = await import("cloudflare:workers");
     // Miniflare does not simulate entrypoint caching or its purge API.
     if (typeof cache.purge !== "function")
         return;
-    const result = await cache.purge({ tags: [PUBLIC_CACHE_TAG] });
+    const result = await cache.purge({ tags: [publicCacheTag] });
     if (!result.success) {
         console.error("Mantle public cache purge failed", result.errors);
     }
 }
-function isRuntimeIndependentOAuthRequest(request) {
-    const pathname = new URL(request.url).pathname;
-    if (pathname.startsWith(MANTLE_RESERVED_WELL_KNOWN_PREFIX))
-        return true;
-    return (pathname === "/mcp" || pathname.startsWith("/mcp/")) &&
-        !request.headers.has("authorization");
-}
 /** Redacted fail-closed boundary for facade and low-level Worker assembly failures. */
 export async function runMantleWorkerRequest(run) {
     try {

package/dist/worker/createMantleWorker.js.map

@@ -1 +1 @@
-{"version":3,"file":"createMantleWorker.js","sourceRoot":"","sources":["../../src/worker/createMantleWorker.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,GAIL,MAAM,MAAM,CAAC;AAOd,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,2BAA2B,GAE5B,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,0BAA0B,GAE3B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,sBAAsB,GAGvB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAE1E,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE7E,mEAAmE;AACnE,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ;IACR,UAAU;IACV,WAAW;IACX,YAAY;IACZ,QAAQ;IACR,MAAM;CACE,CAAC;AAEX,wEAAwE;AACxE,MAAM,CAAC,MAAM,iCAAiC,GAAG,oBAA6B,CAAC;AAE/E,oDAAoD;AACpD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,IAAI,CAAU,CAAC;AAsHhE,8DAA8D;AAC9D,MAAM,UAAU,kBAAkB,CAChC,OAAuC;IAEvC,IAAI,SAAS,GAAgC,IAAI,CAAC;IAElD,MAAM,QAAQ,GAAG,CAAC,GAAQ,EAAwB,EAAE;QAClD,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;QAEhC,MAAM,YAAY,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,YAAY,CAAC;QACvE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAChE,IAAI,GAAG,GAA4B,IAAI,CAAC;QACxC,MAAM,UAAU,GAAG,GAAqC,EAAE,CAAC,GAAG;YAC5D,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YACX,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC,CAAC;QACvF,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;QACtD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAEpD,GAAG,GAAG,sBAAsB,CAAC;YAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC;YAC7D,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC;YAChD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,wBAAwB,EAAE;gBACxB,GAAG,6BAA6B;gBAChC,iCAAiC;gBACjC,IAAI,CAAC,QAAQ;aACd;YACD,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;YAClD,QAAQ;YACR,IAAI;YACJ,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;YAChD,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,cAAc,EAAE,gBAAgB;SACjC,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAsB,CAAC;QAC3C,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChC,IAAI,QAAQ,CAAC,WAAW;YAAE,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QACrE,cAAc,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,uBAAuB,CAAC,GAAG,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,mBAAmB,CAAM;YACzC,GAAG;YACH,OAAO,EAAE,QAAQ;YACjB,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,mBAAmB,CAAM;YACxC,GAAG;YACH,OAAO,EAAE,OAAO;YAChB,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,KAAM,CACrC,CAAC,CAAC,GAAG,CAAC,GAAyD,EAC/D,CAAC,CAAC,GAAG,EACL,CAAC,CAAC,YAAkE,CACrE,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAM,CAC1C,CAAC,CAAC,GAAG,CAAC,GAAwD,EAC9D,CAAC,CAAC,GAAG,EACL,CAAC,CAAC,YAAiE,CACpE,CAAC,CAAC;QACH,MAAM,kBAAkB,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7C,SAAS,CAAC,KAAK,EAAE,CAAC;YAChB,GAAG,SAAS;YACZ,GAAG,EAAE,GAAyC;YAC9C,GAAG;SACJ,CAAC,CAAC;QACH,qBAAqB,CAAC,GAAG,EAAE,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE9D,MAAM,IAAI,GAAyB;YACjC,IAAI;YACJ,UAAU;YACV,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CACvC,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;SACtE,CAAC;QACF,SAAS,GAAG,IAAI,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,OAAO;QACL,UAAU,CAAC,GAAG;YACZ,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG;YAC3B,OAAO,sBAAsB,CAAC,KAAK,IAAI,EAAE;gBACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC7B,MAAM,eAAe,GAAG,MAAM,2BAA2B,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBAChF,IAAI,eAAe;oBAAE,OAAO,eAAe,CAAC;gBAC5C,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC;oBAAE,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC1E,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACrD,mEAAmE;IACnE,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO;IAC9C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,SAAS,gCAAgC,CAAC,OAAgB;IACxD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC/C,IAAI,QAAQ,CAAC,UAAU,CAAC,iCAAiC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,OAAO,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;AAC1C,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAuC;IAEvC,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;QACvD,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,EACtC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,mBAAmB,EAAE,EAAE,CACnE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAA6B,EAC7B,kBAA0B,EAC1B,YAAoB;IAEpB,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACzD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACzD,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,IAAI,wBAAwB,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAC7B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CACnF,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,4BAA4B,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,YAAoB;IACxD,OAAO,2BAA2B,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC;WAC7D,6BAA6B,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;WAC1E,IAAI,CAAC,UAAU,CAAC,iCAAiC,CAAC;WAClD,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,MAAc;IAClD,OAAO,IAAI,KAAK,MAAM;WACjB,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;WAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;WAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa;IACjD,OAAO,IAAI,KAAK,KAAK,IAAI,KAAK,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC;AAC7D,CAAC;AAED,SAAS,aAAa,CACpB,IAAsD,EACtD,KAAuD;IAEvD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,wBAAwB,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,OAAO,CACd,KAAgD,EAChD,GAAQ;IAER,OAAO,OAAO,KAAK,KAAK,UAAU;QAChC,CAAC,CAAE,KAA+B,CAAC,GAAG,CAAC;QACvC,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC"}
+{"version":3,"file":"createMantleWorker.js","sourceRoot":"","sources":["../../src/worker/createMantleWorker.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,GAIL,MAAM,MAAM,CAAC;AAOd,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,2BAA2B,GAE5B,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,0BAA0B,GAE3B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,sBAAsB,GAGvB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAE1E,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AAEjC,mEAAmE;AACnE,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ;IACR,UAAU;IACV,WAAW;IACX,YAAY;IACZ,QAAQ;IACR,MAAM;CACE,CAAC;AAEX,wEAAwE;AACxE,MAAM,CAAC,MAAM,iCAAiC,GAAG,oBAA6B,CAAC;AAE/E,oDAAoD;AACpD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,IAAI,CAAU,CAAC;AA2HhE,8DAA8D;AAC9D,MAAM,UAAU,kBAAkB,CAChC,OAAuC;IAEvC,IAAI,SAAS,GAAgC,IAAI,CAAC;IAElD,MAAM,QAAQ,GAAG,CAAC,GAAQ,EAAwB,EAAE;QAClD,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;QAEhC,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;QACzE,MAAM,cAAc,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;QACxD,MAAM,YAAY,GAAG,0BAA0B,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,YAAY,CAAC;QACvE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAChE,IAAI,GAAG,GAA4B,IAAI,CAAC;QACxC,MAAM,UAAU,GAAG,GAAqC,EAAE,CAAC,GAAG;YAC5D,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YACX,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC,CAAC;QACvF,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;QACtD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACpD,MAAM,oBAAoB,GAAG,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC;QAEvF,GAAG,GAAG,sBAAsB,CAAC;YAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC;YAC7D,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC;YAChD,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YACzD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,wBAAwB,EAAE;gBACxB,GAAG,6BAA6B;gBAChC,iCAAiC;gBACjC,IAAI,CAAC,QAAQ;aACd;YACD,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;YAClD,QAAQ;YACR,IAAI;YACJ,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;YAChD,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,cAAc,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;SAC7D,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAsB,CAAC;QAC3C,0EAA0E;QAC1E,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YACvB,IAAI,aAAa,IAAI,KAAK,EAAE,CAAC;gBAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;gBACrC,OAAO,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,uEAAuE;QACvE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YACxB,IAAI,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC;mBAClC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC;mBAC9B,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC;mBAC5B,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC;mBAClC,IAAI,CAAC,UAAU,CAAC,iCAAiC,CAAC,EAAE,CAAC;gBACxD,MAAM,UAAU,EAAE,CAAC;YACrB,CAAC;YACD,MAAM,IAAI,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;QACH,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChC,IAAI,QAAQ,CAAC,WAAW;YAAE,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QACrE,gBAAgB,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,uBAAuB,CAAC,GAAG,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,mBAAmB,CAAM;YACzC,GAAG;YACH,OAAO,EAAE,QAAQ;YACjB,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,mBAAmB,CAAM;YACxC,GAAG;YACH,OAAO,EAAE,OAAO;YAChB,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,KAAM,CACrC,CAAC,CAAC,GAAG,CAAC,GAAyD,EAC/D,CAAC,CAAC,GAAG,EACL,CAAC,CAAC,YAAkE,CACrE,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAM,CAC1C,CAAC,CAAC,GAAG,CAAC,GAAwD,EAC9D,CAAC,CAAC,GAAG,EACL,CAAC,CAAC,YAAiE,CACpE,CAAC,CAAC;QACH,MAAM,kBAAkB,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7C,SAAS,CAAC,KAAK,EAAE,CAAC;YAChB,GAAG,SAAS;YACZ,GAAG,EAAE,GAAyC;YAC9C,GAAG;SACJ,CAAC,CAAC;QACH,qBAAqB,CAAC,GAAG,EAAE,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE9D,uEAAuE;QACvE,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAClC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,GAAI,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;YACjE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;mBACzF,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC;mBAC3C,KAAK,CAAC,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;gBACtF,OAAO,MAAM,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YAChF,CAAC;YACD,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAyB;YACjC,IAAI;YACJ,UAAU;YACV,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CACvC,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,oBAAoB,IAAI,IAAI,CAAC;SACpG,CAAC;QACF,SAAS,GAAG,IAAI,CAAC;QACjB,KAAK,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE;YAC1B,IAAI,SAAS,KAAK,IAAI;gBAAE,SAAS,GAAG,IAAI,CAAC;QAC3C,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,UAAU,CAAC,GAAG;YAClB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9E,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG;YAC3B,OAAO,sBAAsB,CAAC,KAAK,IAAI,EAAE;gBACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC7B,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK;oBAAE,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACxD,MAAM,eAAe,GAAG,MAAM,2BAA2B,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBAChF,IAAI,eAAe;oBAAE,OAAO,eAAe,CAAC;gBAC5C,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,cAAkC;IAChE,IAAI,CAAC,cAAc;QAAE,OAAO;IAC5B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACrD,mEAAmE;IACnE,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO;IAC9C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAuC;IAEvC,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;QACvD,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,EACtC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,mBAAmB,EAAE,EAAE,CACnE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAA6B,EAC7B,kBAA0B,EAC1B,YAAoB;IAEpB,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACzD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACzD,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,IAAI,wBAAwB,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAC7B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CACnF,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,4BAA4B,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,YAAoB;IACxD,OAAO,2BAA2B,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC;WAC7D,6BAA6B,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;WAC1E,IAAI,CAAC,UAAU,CAAC,iCAAiC,CAAC;WAClD,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,MAAc;IAClD,OAAO,IAAI,KAAK,MAAM;WACjB,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;WAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;WAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa;IACjD,OAAO,IAAI,KAAK,KAAK,IAAI,KAAK,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC;AAC7D,CAAC;AAED,SAAS,aAAa,CACpB,IAAsD,EACtD,KAAuD;IAEvD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,wBAAwB,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,OAAO,CACd,KAAgD,EAChD,GAAQ;IAER,OAAO,OAAO,KAAK,KAAK,UAAU;QAChC,CAAC,CAAE,KAA+B,CAAC,GAAG,CAAC;QACvC,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aotter/mantle-cloudflare",
-  "version": "0.1.0-alpha.9",
+  "version": "0.1.2-alpha.2",
   "description": "Cloudflare Workers adapter for Mantle runtime, Admin, MCP, and public Web mounts.",
   "license": "Apache-2.0",
   "homepage": "https://mantle.tools/",
@@ -22,6 +22,10 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./testing": {
+      "types": "./dist/testing.d.ts",
+      "import": "./dist/testing.js"
     }
   },
   "files": [
@@ -29,30 +33,32 @@
     "README.md"
   ],
   "dependencies": {
-    "@better-auth/cimd": "^1.7.1",
-    "@better-auth/mcp": "^1.7.1",
-    "@better-auth/oauth-provider": "^1.7.1",
-    "@aotter/mantle-admin": "0.1.0-alpha.9",
-    "@aotter/mantle-runtime": "0.1.0-alpha.9",
-    "@aotter/mantle-spec": "0.1.0-alpha.9",
-    "@aotter/mantle-web": "0.1.0-alpha.9"
+    "@better-auth/cimd": "1.7.2",
+    "@better-auth/mcp": "1.7.2",
+    "@better-auth/oauth-provider": "1.7.2",
+    "@aotter/mantle-admin": "0.1.2-alpha.2",
+    "@aotter/mantle-runtime": "0.1.2-alpha.2",
+    "@aotter/mantle-spec": "0.1.2-alpha.2",
+    "@aotter/mantle-web": "0.1.2-alpha.2"
   },
   "peerDependencies": {
     "aws4fetch": "^1.0.20",
-    "better-auth": "^1.7.1",
+    "better-auth": "1.7.2",
     "hono": "^4.12.0",
-    "zod": "^4.0.0"
+    "zod": "^4.5.0"
   },
   "devDependencies": {
-    "@cloudflare/workers-types": "^5.20260729.1",
+    "@better-auth/core": "1.7.2",
+    "@better-auth/utils": "0.4.2",
+    "@cloudflare/workers-types": "^5.20260826.1",
     "@types/node": "^26",
     "aws4fetch": "^1.0.20",
-    "better-auth": "^1.7.1",
-    "hono": "^4.12.34",
+    "better-auth": "1.7.2",
+    "hono": "^4.13.3",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.10",
-    "wrangler": "^4.115.0",
-    "zod": "^4.4.3"
+    "vitest": "^4.1.11",
+    "wrangler": "^4.126.0",
+    "zod": "^4.5.4"
   },
   "scripts": {
     "prebuild": "rm -rf dist .tsbuildinfo",
@@ -61,6 +67,7 @@
     "test": "pnpm test:facade-types && vitest run",
     "test:facade-types": "tsc --ignoreConfig --noEmit --strict --target ES2022 --module NodeNext --moduleResolution NodeNext --skipLibCheck --types @cloudflare/workers-types,node test/createMantleWorker.typecheck.ts",
     "bench:http-dispatch": "vitest bench --run test/http-dispatch.bench.ts",
-    "bench:wrangler": "pnpm --filter @aotter/mantle-spec build && pnpm --filter @aotter/mantle-runtime build && node ../../../scripts/run-wrangler-performance.mjs"
+    "bench:wrangler": "pnpm --filter '@aotter/mantle-cloudflare^...' build && node ../../../scripts/run-wrangler-performance.mjs && node test/performance/generate-parity-plan.mjs && BENCH_QUICK=1 BENCH_ROUNDS=10 node ../../../scripts/run-wrangler-parity.mjs",
+    "bench:parity": "pnpm --filter '@aotter/mantle-cloudflare^...' build && node test/performance/generate-parity-plan.mjs && node ../../../scripts/run-wrangler-parity.mjs"
   }
 }

package/dist/auth/rejectCrossOriginMutation.d.ts

@@ -1,2 +0,0 @@
-export declare function rejectCrossOriginMutation(request: Request): Response | null;
-//# sourceMappingURL=rejectCrossOriginMutation.d.ts.map

package/dist/auth/rejectCrossOriginMutation.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rejectCrossOriginMutation.d.ts","sourceRoot":"","sources":["../../src/auth/rejectCrossOriginMutation.ts"],"names":[],"mappings":"AAAA,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,CAa3E"}

package/dist/auth/rejectCrossOriginMutation.js

@@ -1,15 +0,0 @@
-export function rejectCrossOriginMutation(request) {
-    if (request.method === "GET" || request.method === "HEAD" || request.method === "OPTIONS") {
-        return null;
-    }
-    const site = request.headers.get("sec-fetch-site");
-    if (site && site !== "same-origin" && site !== "none") {
-        return new Response("cross-origin session mutation rejected", { status: 403 });
-    }
-    const origin = request.headers.get("origin");
-    if (origin && origin !== new URL(request.url).origin) {
-        return new Response("origin mismatch", { status: 403 });
-    }
-    return null;
-}
-//# sourceMappingURL=rejectCrossOriginMutation.js.map

package/dist/auth/rejectCrossOriginMutation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rejectCrossOriginMutation.js","sourceRoot":"","sources":["../../src/auth/rejectCrossOriginMutation.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACxD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACnD,IAAI,IAAI,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACtD,OAAO,IAAI,QAAQ,CAAC,wCAAwC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,MAAM,IAAI,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACrD,OAAO,IAAI,QAAQ,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/oauth/consentHtml.d.ts

@@ -1,15 +0,0 @@
-/**
- * OAuth consent UI renderer. Self-contained HTML — no external assets,
- * no framework and no Admin UI dependency.
- * Supports zh-TW and en locales.
- */
-export interface ConsentModel {
-    readonly clientName: string;
-    readonly redirectUri: string;
-    readonly scopes: readonly string[];
-    readonly oauthQuery: string;
-}
-/** Detect consent UI locale from Accept-Language header. */
-export declare function detectConsentLocale(acceptLanguage: string | null): "zh-TW" | "en";
-export declare function renderConsentHtml(locale: "zh-TW" | "en", model: ConsentModel | null): string;
-//# sourceMappingURL=consentHtml.d.ts.map

package/dist/oauth/consentHtml.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"consentHtml.d.ts","sourceRoot":"","sources":["../../src/oauth/consentHtml.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,4DAA4D;AAC5D,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,GAAG,IAAI,CAKjF;AA0DD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,GAAG,MAAM,CA4B5F"}

package/dist/oauth/consentHtml.js

@@ -1,91 +0,0 @@
-/**
- * OAuth consent UI renderer. Self-contained HTML — no external assets,
- * no framework and no Admin UI dependency.
- * Supports zh-TW and en locales.
- */
-/** Detect consent UI locale from Accept-Language header. */
-export function detectConsentLocale(acceptLanguage) {
-    if (!acceptLanguage)
-        return "en";
-    const lower = acceptLanguage.toLowerCase();
-    if (lower.includes("zh-tw") || lower.includes("zh_tw"))
-        return "zh-TW";
-    return "en";
-}
-const STRINGS = {
-    en: {
-        title: "Authorize · mantle",
-        eyebrow: "Authorize MCP access",
-        heading: (client) => `Allow ${client} to access your CMS?`,
-        redirectLabel: "Will redirect to",
-        scopesLabel: "Requested scopes",
-        approve: "Approve",
-        deny: "Deny",
-        invalidTitle: "Invalid authorization request",
-        invalidBody: "Missing or malformed consent payload. Return to your MCP client and try again.",
-    },
-    "zh-TW": {
-        title: "授權 · mantle",
-        eyebrow: "授權 MCP 存取",
-        heading: (client) => `允許 ${client} 存取您的 CMS？`,
-        redirectLabel: "將重新導向至",
-        scopesLabel: "請求的授權範圍",
-        approve: "同意",
-        deny: "拒絕",
-        invalidTitle: "無效的授權請求",
-        invalidBody: "缺少或格式錯誤的授權資訊，請返回 MCP 客戶端重試。",
-    },
-};
-function escapeHtml(s) {
-    return s
-        .replace(/&/g, "&")
-        .replace(/</g, "&lt;")
-        .replace(/>/g, "&gt;")
-        .replace(/"/g, "&quot;")
-        .replace(/'/g, "&#39;");
-}
-const CSS = `
-  :root{--mantle-blue-deep:#1a3062;--app-background:#f6f8fc;--foreground:#172033;--card:#fff;--card-foreground:#172033;--border:#d7dce7;--muted:#f1f3f8;--muted-foreground:#596579;--primary:#1a3062;--primary-foreground:#fff;--secondary:#edf1fa;--secondary-foreground:#1a3062;--accent:#e2e8f5;--ring:#4d6aac;--radius:.625rem}
-  *{box-sizing:border-box}
-  body{margin:0;min-height:100svh;display:flex;align-items:center;justify-content:center;padding:1rem;font-family:ui-sans-serif,system-ui,sans-serif;color:var(--foreground);background:var(--app-background)}
-  .card{max-width:32rem;width:100%;padding:2rem;border-radius:calc(var(--radius) + .125rem);color:var(--card-foreground);background:var(--card);border:1px solid var(--border);box-shadow:0 12px 36px color-mix(in srgb,var(--mantle-blue-deep) 8%,transparent);backdrop-filter:blur(48px) saturate(135%)}
-  .eyebrow{font-size:.7rem;text-transform:uppercase;letter-spacing:.18em;font-weight:500;color:var(--muted-foreground);margin:0 0 .5rem}
-  h1{font-size:1.5rem;line-height:1.3;font-weight:500;margin:0 0 .75rem;letter-spacing:-.02em}
-  p{margin:0 0 1rem;font-size:.95rem;line-height:1.55}
-  .muted{color:var(--muted-foreground);font-size:.875rem}
-  code{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:.8rem;padding:.125rem .4rem;border-radius:.25rem;background:var(--muted);overflow-wrap:anywhere}
-  .scopes{margin:0 0 1.5rem;display:flex;flex-wrap:wrap;gap:.375rem}
-  .scope{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:.75rem;padding:.25rem .5rem;border-radius:.25rem;background:var(--muted)}
-  form{display:flex;gap:.75rem}
-  button{flex:1;padding:.625rem 1rem;border:0;border-radius:.5rem;font:inherit;font-weight:500;cursor:pointer;transition:opacity .15s,background .15s}
-  button:focus-visible{outline:2px solid var(--ring);outline-offset:2px}
-  button[value="approve"]{background:var(--primary);color:var(--primary-foreground)}
-  button[value="approve"]:hover{opacity:.9}
-  button[value="deny"]{background:var(--secondary);color:var(--secondary-foreground)}
-  button[value="deny"]:hover{background:var(--accent)}
-  @media(max-width:30rem){form{flex-direction:column}}
-`.trim();
-export function renderConsentHtml(locale, model) {
-    const t = STRINGS[locale];
-    const lang = locale === "zh-TW" ? "zh-Hant-TW" : "en";
-    const head = `<!doctype html><html lang="${lang}"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><title>${t.title}</title><style>${CSS}</style></head><body><main class="card">`;
-    const tail = `</main></body></html>`;
-    if (!model) {
-        return `${head}<p class="eyebrow">${t.eyebrow}</p><h1>${t.invalidTitle}</h1><p class="muted">${t.invalidBody}</p>${tail}`;
-    }
-    const scopesBlock = model.scopes.length > 0
-        ? `<p class="eyebrow">${t.scopesLabel}</p><div class="scopes">${model.scopes.map((s) => `<span class="scope">${escapeHtml(s)}</span>`).join("")}</div>`
-        : "";
-    return (`${head}` +
-        `<p class="eyebrow">${t.eyebrow}</p>` +
-        `<h1>${t.heading(escapeHtml(model.clientName))}</h1>` +
-        `<p class="muted">${t.redirectLabel} <code>${escapeHtml(model.redirectUri)}</code></p>` +
-        `${scopesBlock}` +
-        `<form method="post" action="/oauth/consent">` +
-        `<input type="hidden" name="oauth_query" value="${escapeHtml(model.oauthQuery)}"/>` +
-        `<button type="submit" name="decision" value="approve">${t.approve}</button>` +
-        `<button type="submit" name="decision" value="deny">${t.deny}</button>` +
-        `</form>` +
-        `${tail}`);
-}
-//# sourceMappingURL=consentHtml.js.map

package/dist/oauth/consentHtml.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"consentHtml.js","sourceRoot":"","sources":["../../src/oauth/consentHtml.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH,4DAA4D;AAC5D,MAAM,UAAU,mBAAmB,CAAC,cAA6B;IAC/D,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG,cAAc,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACvE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,OAAO,GAAG;IACd,EAAE,EAAE;QACF,KAAK,EAAE,oBAAoB;QAC3B,OAAO,EAAE,sBAAsB;QAC/B,OAAO,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,SAAS,MAAM,sBAAsB;QAClE,aAAa,EAAE,kBAAkB;QACjC,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,MAAM;QACZ,YAAY,EAAE,+BAA+B;QAC7C,WAAW,EAAE,gFAAgF;KAC9F;IACD,OAAO,EAAE;QACP,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,WAAW;QACpB,OAAO,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,MAAM,MAAM,YAAY;QACrD,aAAa,EAAE,QAAQ;QACvB,WAAW,EAAE,SAAS;QACtB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,YAAY,EAAE,SAAS;QACvB,WAAW,EAAE,6BAA6B;KAC3C;CACO,CAAC;AAEX,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC;SACL,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,GAAG,GAAG;;;;;;;;;;;;;;;;;;;;CAoBX,CAAC,IAAI,EAAE,CAAC;AAET,MAAM,UAAU,iBAAiB,CAAC,MAAsB,EAAE,KAA0B;IAClF,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,MAAM,IAAI,GAAG,8BAA8B,IAAI,6GAA6G,CAAC,CAAC,KAAK,kBAAkB,GAAG,0CAA0C,CAAC;IACnO,MAAM,IAAI,GAAG,uBAAuB,CAAC;IAErC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,GAAG,IAAI,sBAAsB,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,YAAY,yBAAyB,CAAC,CAAC,WAAW,OAAO,IAAI,EAAE,CAAC;IAC5H,CAAC;IAED,MAAM,WAAW,GACf,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACrB,CAAC,CAAC,sBAAsB,CAAC,CAAC,WAAW,2BAA2B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ;QACvJ,CAAC,CAAC,EAAE,CAAC;IAET,OAAO,CACL,GAAG,IAAI,EAAE;QACT,sBAAsB,CAAC,CAAC,OAAO,MAAM;QACrC,OAAO,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO;QACrD,oBAAoB,CAAC,CAAC,aAAa,UAAU,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa;QACvF,GAAG,WAAW,EAAE;QAChB,8CAA8C;QAC9C,kDAAkD,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK;QACnF,yDAAyD,CAAC,CAAC,OAAO,WAAW;QAC7E,sDAAsD,CAAC,CAAC,IAAI,WAAW;QACvE,SAAS;QACT,GAAG,IAAI,EAAE,CACV,CAAC;AACJ,CAAC"}

package/dist/oauth/mountOAuth.d.ts

@@ -1,9 +0,0 @@
-import type { Env, Hono } from "hono";
-import type { Auth } from "../auth/createAuth.js";
-export interface MountAuthorizeOptions {
-    readonly auth: Auth;
-}
-/** Mount Mantle's small server-rendered consent page. Better Auth owns the
- * signed authorization query, client lookup, decision, and redirect. */
-export declare function mountAuthorize<E extends Env>(app: Hono<E>, options: MountAuthorizeOptions): void;
-//# sourceMappingURL=mountOAuth.d.ts.map

package/dist/oauth/mountOAuth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mountOAuth.d.ts","sourceRoot":"","sources":["../../src/oauth/mountOAuth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACtC,OAAO,KAAK,EAAE,IAAI,EAAuB,MAAM,uBAAuB,CAAC;AAOvE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;CACrB;AAED;wEACwE;AACxE,wBAAgB,cAAc,CAAC,CAAC,SAAS,GAAG,EAC1C,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,EACZ,OAAO,EAAE,qBAAqB,GAC7B,IAAI,CAiCN"}

package/dist/oauth/mountOAuth.js

@@ -1,37 +0,0 @@
-import { rejectCrossOriginMutation } from "../auth/rejectCrossOriginMutation.js";
-import { detectConsentLocale, renderConsentHtml, } from "./consentHtml.js";
-/** Mount Mantle's small server-rendered consent page. Better Auth owns the
- * signed authorization query, client lookup, decision, and redirect. */
-export function mountAuthorize(app, options) {
-    const { auth } = options;
-    app.get("/oauth/consent", async (c) => {
-        const locale = detectConsentLocale(c.req.header("accept-language") ?? null);
-        let model = null;
-        try {
-            model = await auth.getOAuthConsentRequest(c.req.raw);
-        }
-        catch {
-            // Invalid, expired, or unauthenticated signed queries render the same
-            // non-sensitive failure page.
-        }
-        return c.html(renderConsentHtml(locale, model), model ? 200 : 400);
-    });
-    app.post("/oauth/consent", async (c) => {
-        const rejected = rejectCrossOriginMutation(c.req.raw);
-        if (rejected)
-            return rejected;
-        const body = await c.req.text();
-        const decision = new URLSearchParams(body).get("decision");
-        if (decision !== "approve" && decision !== "deny") {
-            return new Response("invalid consent decision", { status: 400 });
-        }
-        try {
-            const redirect = await auth.completeOAuthConsent(new Request(c.req.raw, { body }), decision === "approve");
-            return c.redirect(redirect, 302);
-        }
-        catch {
-            return new Response("invalid authorization request", { status: 400 });
-        }
-    });
-}
-//# sourceMappingURL=mountOAuth.js.map

package/dist/oauth/mountOAuth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mountOAuth.js","sourceRoot":"","sources":["../../src/oauth/mountOAuth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAM1B;wEACwE;AACxE,MAAM,UAAU,cAAc,CAC5B,GAAY,EACZ,OAA8B;IAE9B,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAEzB,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,CAAC;QAC5E,IAAI,KAAK,GAA+B,IAAI,CAAC;QAC7C,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,8BAA8B;QAChC,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YAClD,OAAO,IAAI,QAAQ,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAC9C,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,EAChC,QAAQ,KAAK,SAAS,CACvB,CAAC;YACF,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,QAAQ,CAAC,+BAA+B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}