@blen/fedreg-mcp-server 2.0.0

package/dist/sdk/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/sdk/runtime.ts"],"names":[],"mappings":"AAmBA,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAqB,EAAE,GAAe;IACnE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC,KAAK,iBAAiB,EAAE,EAAE,CAAC;QACvH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,GAAG,CAAC,OAAO,GAAG,EAAE,EAAE,CAAC;IACzG,CAAC;IACD,IAAI,CAAC;QACH,IAAI,GAAG,GAAY,MAAM,CAAC;QAC1B,IAAI,MAAM,GAAY,MAAM,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;YACrH,CAAC;YACD,MAAM,GAAG,GAAG,CAAC;YACb,GAAG,GAAI,GAA+B,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;YAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,EAAE,CAAC;QACxH,CAAC;QACD,MAAM,KAAK,GAAG,MAAO,GAAoC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAClF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAA2D,CAAC;QACtE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAChH,CAAC;AACH,CAAC"}

package/dist/sdk/sources/corpus-loader.d.ts

@@ -0,0 +1,6 @@
+import type { CorpusEntry } from '../../search/corpus.js';
+export declare function loadSourceCorpus(name: string): {
+    endpoints: CorpusEntry[];
+    fields: CorpusEntry[];
+};
+//# sourceMappingURL=corpus-loader.d.ts.map

package/dist/sdk/sources/corpus-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"corpus-loader.d.ts","sourceRoot":"","sources":["../../../src/sdk/sources/corpus-loader.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAI1D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAA;CAAE,CAGlG"}

package/dist/sdk/sources/corpus-loader.js

@@ -0,0 +1,9 @@
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { dirname, resolve } from 'node:path';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+export function loadSourceCorpus(name) {
+    const path = resolve(__dirname, `../../../schema/${name}.json`);
+    return JSON.parse(readFileSync(path, 'utf8'));
+}
+//# sourceMappingURL=corpus-loader.js.map

package/dist/sdk/sources/corpus-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"corpus-loader.js","sourceRoot":"","sources":["../../../src/sdk/sources/corpus-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAG7C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,EAAE,mBAAmB,IAAI,OAAO,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAwD,CAAC;AACvG,CAAC"}

package/dist/sdk/sources/ecfr.d.ts

@@ -0,0 +1,3 @@
+import type { Source, SourceConfig } from './source.js';
+export declare function createEcfrSource(cfg: SourceConfig): Source;
+//# sourceMappingURL=ecfr.d.ts.map

package/dist/sdk/sources/ecfr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecfr.d.ts","sourceRoot":"","sources":["../../../src/sdk/sources/ecfr.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAExD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,CAO1D"}

package/dist/sdk/sources/ecfr.js

@@ -0,0 +1,12 @@
+import { HttpClient } from '../../util/httpClient.js';
+import { EcfrClient } from '../ecfr-client.js';
+import { loadSourceCorpus } from './corpus-loader.js';
+export function createEcfrSource(cfg) {
+    const http = new HttpClient({
+        baseUrl: cfg.ecfrBaseUrl, userAgent: cfg.userAgent, timeoutMs: cfg.timeoutMs,
+        retries: cfg.retries, cacheTtlMs: cfg.cacheTtlMs, cacheMaxItems: cfg.cacheMaxItems,
+        ...(cfg.dispatcher ? { dispatcher: cfg.dispatcher } : {}),
+    });
+    return { name: 'ecfr', label: 'eCFR', enabled: true, client: new EcfrClient(http), corpus: loadSourceCorpus('ecfr') };
+}
+//# sourceMappingURL=ecfr.js.map

package/dist/sdk/sources/ecfr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecfr.js","sourceRoot":"","sources":["../../../src/sdk/sources/ecfr.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,MAAM,UAAU,gBAAgB,CAAC,GAAiB;IAChD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC;QAC1B,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS;QAC5E,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa;QAClF,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;AACxH,CAAC"}

package/dist/sdk/sources/fr.d.ts

@@ -0,0 +1,3 @@
+import type { Source, SourceConfig } from './source.js';
+export declare function createFrSource(cfg: SourceConfig): Source;
+//# sourceMappingURL=fr.d.ts.map

package/dist/sdk/sources/fr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fr.d.ts","sourceRoot":"","sources":["../../../src/sdk/sources/fr.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAExD,wBAAgB,cAAc,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,CAOxD"}

package/dist/sdk/sources/fr.js

@@ -0,0 +1,12 @@
+import { HttpClient } from '../../util/httpClient.js';
+import { FederalRegisterClient } from '../fr-client.js';
+import { loadSourceCorpus } from './corpus-loader.js';
+export function createFrSource(cfg) {
+    const http = new HttpClient({
+        baseUrl: cfg.frBaseUrl, userAgent: cfg.userAgent, timeoutMs: cfg.timeoutMs,
+        retries: cfg.retries, cacheTtlMs: cfg.cacheTtlMs, cacheMaxItems: cfg.cacheMaxItems,
+        ...(cfg.dispatcher ? { dispatcher: cfg.dispatcher } : {}),
+    });
+    return { name: 'fr', label: 'Federal Register', enabled: true, client: new FederalRegisterClient(http), corpus: loadSourceCorpus('fr') };
+}
+//# sourceMappingURL=fr.js.map

package/dist/sdk/sources/fr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fr.js","sourceRoot":"","sources":["../../../src/sdk/sources/fr.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,MAAM,UAAU,cAAc,CAAC,GAAiB;IAC9C,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC;QAC1B,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS;QAC1E,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa;QAClF,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3I,CAAC"}

package/dist/sdk/sources/index.d.ts

@@ -0,0 +1,7 @@
+import type { Source, SourceConfig } from './source.js';
+export type { Source, SourceMeta, SourceConfig } from './source.js';
+export declare function validateSourceNames(sources: {
+    name: string;
+}[]): void;
+export declare function getSources(cfg: SourceConfig): Source[];
+//# sourceMappingURL=index.d.ts.map

package/dist/sdk/sources/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/sdk/sources/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAExD,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAMpE,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,IAAI,CAQrE;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,EAAE,CAItD"}

package/dist/sdk/sources/index.js

@@ -0,0 +1,25 @@
+import { BANNED_GLOBALS } from '../../sandbox/policy.js';
+import { createFrSource } from './fr.js';
+import { createEcfrSource } from './ecfr.js';
+import { createRegsSource } from './regs.js';
+const IDENTIFIER = /^[A-Za-z_$][A-Za-z0-9_$]*$/;
+// `global`/`globalThis` are already in BANNED_GLOBALS; `console` is the only extra collision.
+const NAME_DENYLIST = new Set([...BANNED_GLOBALS, 'console']);
+export function validateSourceNames(sources) {
+    const seen = new Set();
+    for (const s of sources) {
+        if (!IDENTIFIER.test(s.name))
+            throw new Error(`Invalid source name '${s.name}': must be a JS identifier`);
+        if (NAME_DENYLIST.has(s.name))
+            throw new Error(`Source name '${s.name}' is not allowed (collides with a sandbox global)`);
+        if (seen.has(s.name))
+            throw new Error(`Duplicate source name '${s.name}'`);
+        seen.add(s.name);
+    }
+}
+export function getSources(cfg) {
+    const sources = [createFrSource(cfg), createEcfrSource(cfg), createRegsSource(cfg)];
+    validateSourceNames(sources);
+    return sources;
+}
+//# sourceMappingURL=index.js.map

package/dist/sdk/sources/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/sdk/sources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAK7C,MAAM,UAAU,GAAG,4BAA4B,CAAC;AAChD,8FAA8F;AAC9F,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;AAEtE,MAAM,UAAU,mBAAmB,CAAC,OAA2B;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,IAAI,4BAA4B,CAAC,CAAC;QAC1G,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI,mDAAmD,CAAC,CAAC;QAC1H,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QAC3E,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAiB;IAC1C,MAAM,OAAO,GAAa,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9F,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/sdk/sources/regs.d.ts

@@ -0,0 +1,3 @@
+import type { Source, SourceConfig } from './source.js';
+export declare function createRegsSource(cfg: SourceConfig): Source;
+//# sourceMappingURL=regs.d.ts.map

package/dist/sdk/sources/regs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"regs.d.ts","sourceRoot":"","sources":["../../../src/sdk/sources/regs.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAExD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,CAmB1D"}

package/dist/sdk/sources/regs.js

@@ -0,0 +1,24 @@
+import { HttpClient } from '../../util/httpClient.js';
+import { RegulationsClient } from '../regs-client.js';
+import { loadSourceCorpus } from './corpus-loader.js';
+export function createRegsSource(cfg) {
+    const key = cfg.regsApiKey?.trim();
+    const enabled = Boolean(key);
+    const http = new HttpClient({
+        baseUrl: cfg.regsBaseUrl, userAgent: cfg.userAgent, timeoutMs: cfg.timeoutMs,
+        retries: cfg.retries, cacheTtlMs: cfg.cacheTtlMs, cacheMaxItems: cfg.cacheMaxItems,
+        retry429: false,
+        ...(enabled ? { defaultHeaders: { 'X-Api-Key': key } } : {}),
+        ...(cfg.regsPreflightLimiter ? { preflightLimiter: cfg.regsPreflightLimiter } : {}),
+        ...(cfg.dispatcher ? { dispatcher: cfg.dispatcher } : {}),
+    });
+    return {
+        name: 'regs',
+        label: 'Regulations.gov',
+        enabled,
+        disabledReason: enabled ? undefined : 'regulations.gov requires an API key. Set FEDREG_REGS_API_KEY (free at https://open.gsa.gov/api/regulationsgov/).',
+        client: new RegulationsClient(http),
+        corpus: loadSourceCorpus('regs'),
+    };
+}
+//# sourceMappingURL=regs.js.map

package/dist/sdk/sources/regs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"regs.js","sourceRoot":"","sources":["../../../src/sdk/sources/regs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,MAAM,UAAU,gBAAgB,CAAC,GAAiB;IAChD,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC;QAC1B,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS;QAC5E,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa;QAClF,QAAQ,EAAE,KAAK;QACf,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,WAAW,EAAE,GAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC,CAAC;IACH,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,iBAAiB;QACxB,OAAO;QACP,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kHAAkH;QACxJ,MAAM,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC;QACnC,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC;KACjC,CAAC;AACJ,CAAC"}

package/dist/sdk/sources/source.d.ts

@@ -0,0 +1,32 @@
+import type { Dispatcher } from 'undici';
+import type { CorpusEntry } from '../../search/corpus.js';
+export interface SourceMeta {
+    name: string;
+    label: string;
+    enabled: boolean;
+    disabledReason?: string;
+}
+export interface Source extends SourceMeta {
+    client: object;
+    corpus: {
+        endpoints: CorpusEntry[];
+        fields: CorpusEntry[];
+    };
+}
+export interface SourceConfig {
+    frBaseUrl: string;
+    ecfrBaseUrl: string;
+    regsBaseUrl: string;
+    regsApiKey?: string;
+    userAgent: string;
+    timeoutMs: number;
+    retries: number;
+    cacheTtlMs: number;
+    cacheMaxItems: number;
+    dispatcher?: Dispatcher;
+    regsPreflightLimiter?: {
+        tryTake(): boolean;
+        secondsUntilNext?(): number;
+    };
+}
+//# sourceMappingURL=source.d.ts.map

package/dist/sdk/sources/source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.d.ts","sourceRoot":"","sources":["../../../src/sdk/sources/source.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE1D,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,MAAO,SAAQ,UAAU;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QAAE,SAAS,EAAE,WAAW,EAAE,CAAC;QAAC,MAAM,EAAE,WAAW,EAAE,CAAA;KAAE,CAAC;CAC7D;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,oBAAoB,CAAC,EAAE;QAAE,OAAO,IAAI,OAAO,CAAC;QAAC,gBAAgB,CAAC,IAAI,MAAM,CAAA;KAAE,CAAC;CAC5E"}

package/dist/sdk/sources/source.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=source.js.map

package/dist/sdk/sources/source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.js","sourceRoot":"","sources":["../../../src/sdk/sources/source.ts"],"names":[],"mappings":""}

package/dist/search/bm25.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Tiny BM25 implementation. No external deps.
+ */
+export interface Doc {
+    id: string;
+    text: string;
+}
+export interface ScoredDoc {
+    id: string;
+    score: number;
+}
+export declare function tokenize(s: string): string[];
+export declare class Bm25Index {
+    private readonly docs;
+    private readonly tokens;
+    private readonly df;
+    private avgdl;
+    private N;
+    private k1;
+    private b;
+    add(doc: Doc): void;
+    search(query: string, k?: number): ScoredDoc[];
+    get(id: string): Doc | undefined;
+}
+//# sourceMappingURL=bm25.d.ts.map

package/dist/search/bm25.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bm25.d.ts","sourceRoot":"","sources":["../../src/search/bm25.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf;AAOD,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAM5C;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA+B;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAC3D,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAkC;IACrD,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,CAAC,CAAK;IACd,OAAO,CAAC,EAAE,CAAO;IACjB,OAAO,CAAC,CAAC,CAAQ;IAEjB,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI;IAgBnB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,SAAK,GAAG,SAAS,EAAE;IAuB1C,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,GAAG,GAAG,SAAS;CAGjC"}

package/dist/search/bm25.js

@@ -0,0 +1,67 @@
+const STOP = new Set([
+    'a', 'an', 'and', 'are', 'as', 'at', 'be', 'by', 'for', 'from', 'has', 'have', 'i', 'in', 'is', 'it', 'its', 'of', 'on', 'or', 'that',
+    'the', 'to', 'was', 'were', 'will', 'with', 'this', 'these', 'those', 'if', 'then', 'than', 'so', 'do', 'does', 'can', 'should'
+]);
+export function tokenize(s) {
+    return s
+        .toLowerCase()
+        .replace(/[^a-z0-9_\s-]/g, ' ')
+        .split(/\s+/)
+        .filter(t => t && t.length > 1 && !STOP.has(t));
+}
+export class Bm25Index {
+    docs = new Map();
+    tokens = new Map(); // doc id -> tokens
+    df = new Map(); // term -> doc freq
+    avgdl = 0;
+    N = 0;
+    k1 = 1.5;
+    b = 0.75;
+    add(doc) {
+        const toks = tokenize(doc.text);
+        this.docs.set(doc.id, doc);
+        this.tokens.set(doc.id, toks);
+        const seen = new Set();
+        for (const t of toks) {
+            if (seen.has(t))
+                continue;
+            seen.add(t);
+            this.df.set(t, (this.df.get(t) ?? 0) + 1);
+        }
+        this.N = this.docs.size;
+        let total = 0;
+        for (const v of this.tokens.values())
+            total += v.length;
+        this.avgdl = total / Math.max(this.N, 1);
+    }
+    search(query, k = 10) {
+        const qt = tokenize(query);
+        if (qt.length === 0)
+            return [];
+        const results = [];
+        for (const [id, toks] of this.tokens) {
+            let score = 0;
+            const dl = toks.length;
+            const tf = new Map();
+            for (const t of toks)
+                tf.set(t, (tf.get(t) ?? 0) + 1);
+            for (const term of qt) {
+                const f = tf.get(term);
+                if (!f)
+                    continue;
+                const n = this.df.get(term) ?? 0;
+                const idf = Math.log((this.N - n + 0.5) / (n + 0.5) + 1);
+                const denom = f + this.k1 * (1 - this.b + this.b * (dl / Math.max(this.avgdl, 1)));
+                score += idf * ((f * (this.k1 + 1)) / denom);
+            }
+            if (score > 0)
+                results.push({ id, score });
+        }
+        results.sort((a, b) => b.score - a.score);
+        return results.slice(0, k);
+    }
+    get(id) {
+        return this.docs.get(id);
+    }
+}
+//# sourceMappingURL=bm25.js.map

package/dist/search/bm25.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bm25.js","sourceRoot":"","sources":["../../src/search/bm25.ts"],"names":[],"mappings":"AAaA,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC;IACnB,GAAG,EAAC,IAAI,EAAC,KAAK,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,MAAM,EAAC,KAAK,EAAC,MAAM,EAAC,GAAG,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,MAAM;IACjH,KAAK,EAAC,IAAI,EAAC,KAAK,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,OAAO,EAAC,OAAO,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,IAAI,EAAC,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,QAAQ;CAChH,CAAC,CAAC;AAEH,MAAM,UAAU,QAAQ,CAAC,CAAS;IAChC,OAAO,CAAC;SACL,WAAW,EAAE;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,OAAO,SAAS;IACH,IAAI,GAAqB,IAAI,GAAG,EAAE,CAAC;IACnC,MAAM,GAA0B,IAAI,GAAG,EAAE,CAAC,CAAC,mBAAmB;IAC9D,EAAE,GAAwB,IAAI,GAAG,EAAE,CAAC,CAAO,mBAAmB;IACvE,KAAK,GAAG,CAAC,CAAC;IACV,CAAC,GAAG,CAAC,CAAC;IACN,EAAE,GAAG,GAAG,CAAC;IACT,CAAC,GAAG,IAAI,CAAC;IAEjB,GAAG,CAAC,GAAQ;QACV,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC1B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACxB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,CAAC,GAAG,EAAE;QAC1B,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAgB,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACrC,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;YACvB,MAAM,EAAE,GAAwB,IAAI,GAAG,EAAE,CAAC;YAC1C,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtD,KAAK,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;gBACtB,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvB,IAAI,CAAC,CAAC;oBAAE,SAAS;gBACjB,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzD,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnF,KAAK,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;CACF"}

package/dist/search/corpus.d.ts

@@ -0,0 +1,24 @@
+import { Bm25Index } from './bm25.js';
+export interface CorpusEntry {
+    id: string;
+    kind: 'endpoint' | 'field';
+    binding: string;
+    description: string;
+    example?: string;
+    signature?: string;
+}
+export interface Corpus {
+    index: Bm25Index;
+    entries: Map<string, CorpusEntry>;
+}
+export declare function buildCorpus(sources: Array<{
+    corpus: {
+        endpoints: CorpusEntry[];
+        fields: CorpusEntry[];
+    };
+}>): Corpus;
+export declare function lookupByPathOrPrefix(entries: Map<string, CorpusEntry>, target: {
+    path?: string;
+    prefix?: string;
+}): CorpusEntry[];
+//# sourceMappingURL=corpus.d.ts.map

package/dist/search/corpus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"corpus.d.ts","sourceRoot":"","sources":["../../src/search/corpus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,MAAM;IACrB,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CACnC;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC;IAAE,MAAM,EAAE;QAAE,SAAS,EAAE,WAAW,EAAE,CAAC;QAAC,MAAM,EAAE,WAAW,EAAE,CAAA;KAAE,CAAA;CAAE,CAAC,GAAG,MAAM,CAUnH;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,WAAW,EAAE,CAQjI"}

package/dist/search/corpus.js

@@ -0,0 +1,23 @@
+import { Bm25Index } from './bm25.js';
+export function buildCorpus(sources) {
+    const index = new Bm25Index();
+    const entries = new Map();
+    for (const s of sources) {
+        for (const e of [...s.corpus.endpoints, ...s.corpus.fields]) {
+            entries.set(e.id, e);
+            index.add({ id: e.id, text: [e.id, e.description, e.signature ?? '', e.example ?? ''].join(' ') });
+        }
+    }
+    return { index, entries };
+}
+export function lookupByPathOrPrefix(entries, target) {
+    const all = [...entries.values()];
+    if (target.path) {
+        const hit = entries.get(target.path);
+        return hit ? [hit] : [];
+    }
+    if (target.prefix)
+        return all.filter(e => e.id.startsWith(target.prefix));
+    return [];
+}
+//# sourceMappingURL=corpus.js.map

package/dist/search/corpus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"corpus.js","sourceRoot":"","sources":["../../src/search/corpus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAgBtC,MAAM,UAAU,WAAW,CAAC,OAA+E;IACzG,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACrB,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAiC,EAAE,MAA0C;IAChH,MAAM,GAAG,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,MAAO,CAAC,CAAC,CAAC;IAC3E,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/server/authz.d.ts

@@ -0,0 +1,18 @@
+import { type JWTPayload } from 'jose';
+export interface AuthConfig {
+    provider: 'none' | 'embedded' | 'generic-oidc' | 'clerk' | 'workos' | 'auth0';
+    issuer?: string;
+    audience?: string;
+    jwksUrl?: string;
+    resource?: string;
+    scopes?: string[];
+}
+export interface AuthContext {
+    subject: string;
+    claims: JWTPayload;
+}
+export interface Verifier {
+    verify(token: string): Promise<AuthContext>;
+}
+export declare function buildVerifier(cfg: AuthConfig): Verifier;
+//# sourceMappingURL=authz.d.ts.map

package/dist/server/authz.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz.d.ts","sourceRoot":"","sources":["../../src/server/authz.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiC,KAAK,UAAU,EAAE,MAAM,MAAM,CAAC;AAGtE,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,cAAc,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CAC7C;AAwBD,wBAAgB,aAAa,CAAC,GAAG,EAAE,UAAU,GAAG,QAAQ,CAcvD"}

package/dist/server/authz.js

@@ -0,0 +1,42 @@
+import { createRemoteJWKSet, jwtVerify } from 'jose';
+import { log } from '../util/logger.js';
+class NoopVerifier {
+    async verify() {
+        return { subject: 'anonymous', claims: {} };
+    }
+}
+class OidcVerifier {
+    cfg;
+    jwks;
+    constructor(cfg) {
+        this.cfg = cfg;
+        if (!cfg.jwksUrl)
+            throw new Error('FEDREG_AUTH_JWKS_URL is required for OIDC verifiers');
+        this.jwks = createRemoteJWKSet(new URL(cfg.jwksUrl));
+    }
+    async verify(token) {
+        const { payload } = await jwtVerify(token, this.jwks, {
+            issuer: this.cfg.issuer,
+            audience: this.cfg.audience,
+        });
+        const sub = String(payload.sub ?? 'unknown');
+        return { subject: sub, claims: payload };
+    }
+}
+export function buildVerifier(cfg) {
+    switch (cfg.provider) {
+        case 'none':
+        case 'embedded':
+            if (cfg.provider === 'embedded')
+                log.warn('authz.embedded_dev_only');
+            return new NoopVerifier();
+        case 'generic-oidc':
+        case 'clerk':
+        case 'workos':
+        case 'auth0':
+            return new OidcVerifier(cfg);
+        default:
+            return new NoopVerifier();
+    }
+}
+//# sourceMappingURL=authz.js.map

package/dist/server/authz.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz.js","sourceRoot":"","sources":["../../src/server/authz.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAmB,MAAM,MAAM,CAAC;AACtE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAoBxC,MAAM,YAAY;IAChB,KAAK,CAAC,MAAM;QACV,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,YAAY;IAEa;IADrB,IAAI,CAAwC;IACpD,YAA6B,GAAe;QAAf,QAAG,GAAH,GAAG,CAAY;QAC1C,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzF,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;YACpD,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;YACvB,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ;SAC5B,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC3C,CAAC;CACF;AAED,MAAM,UAAU,aAAa,CAAC,GAAe;IAC3C,QAAQ,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC;QACZ,KAAK,UAAU;YACb,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU;gBAAE,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACrE,OAAO,IAAI,YAAY,EAAE,CAAC;QAC5B,KAAK,cAAc,CAAC;QACpB,KAAK,OAAO,CAAC;QACb,KAAK,QAAQ,CAAC;QACd,KAAK,OAAO;YACV,OAAO,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC;QAC/B;YACE,OAAO,IAAI,YAAY,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC"}

package/dist/server/http.d.ts

@@ -0,0 +1,21 @@
+import type { CatalogDeps } from './toolCatalog.js';
+import { type AuthConfig } from './authz.js';
+export interface HttpOptions {
+    port: number;
+    host: string;
+    rps: number;
+    burst: number;
+    subjectDailyQuota: number;
+    auth: AuthConfig;
+    insecure?: boolean;
+    /** Allowed Host header values for DNS rebinding protection. Pass [] to disable. */
+    allowedHosts?: string[];
+    /** Public origin clients should use (for protected-resource metadata). */
+    publicOrigin?: string;
+}
+export interface HttpHandle {
+    close: () => Promise<void>;
+    port: number;
+}
+export declare function startHttp(deps: CatalogDeps, opts: HttpOptions): Promise<HttpHandle>;
+//# sourceMappingURL=http.d.ts.map

package/dist/server/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/server/http.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAGpD,OAAO,EAAiB,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAK5D,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,mFAAmF;IACnF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;CACd;AAqCD,wBAAsB,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CA4HzF"}