@cmssy/mcp-server 0.95.0 → 0.97.0

package/README.md

@@ -199,19 +199,20 @@ AI agents can define ModelDefinitions and CRUD their records. Schema/fields
 follow `PropertyField` from `@cmssy/types`; records are validated against the
 model on every write.
 
-| Tool             | Description                                                          |
-| ---------------- | -------------------------------------------------------------------- |
-| `list_models`    | List all ModelDefinitions in the workspace                           |
-| `get_model`      | Get a model by id (ObjectId) or slug                                 |
-| `create_model`   | Create a model (name, slug, fields, optional statusField)            |
-| `update_model`   | Update any field of a model (fields change triggers schema migrate)  |
-| `delete_model`   | Delete a model — **cascades to all its records**                     |
-| `list_records`   | List records with filter (JSON), sort, pagination, optional populate |
-| `get_record`     | Get a record by id                                                   |
-| `create_record`  | Create a record; `data` keyed by model field keys                    |
-| `update_record`  | Update a record's data and/or transition its status                  |
-| `delete_record`  | Delete a record                                                      |
-| `import_records` | Bulk import up to 1000 records; returns `{ importedCount, errors }`  |
+| Tool                  | Description                                                                   |
+| --------------------- | ----------------------------------------------------------------------------- |
+| `list_models`         | List all ModelDefinitions in the workspace                                    |
+| `get_model`           | Get a model by id (ObjectId) or slug                                          |
+| `create_model`        | Create a model (name, slug, fields, optional statusField)                     |
+| `update_model`        | Update any field of a model (fields change triggers schema migrate)           |
+| `delete_model`        | Delete a model — **cascades to all its records**                              |
+| `list_records`        | List records with filter (JSON), sort, pagination, optional populate          |
+| `get_record`          | Get a record by id                                                            |
+| `create_record`       | Create a record; `data` keyed by model field keys                             |
+| `update_record`       | Update a record's data and/or transition its status                           |
+| `delete_record`       | Delete a record                                                               |
+| `import_records`      | Bulk import up to 1000 records; returns `{ importedCount, errors }`           |
+| `bulk_update_records` | Set data and/or status on up to 200 ids or every filter match (confirm-gated) |
 
 Requires workspace permissions `MODELS_VIEW` (read) / `MODELS_CREATE` /
 `MODELS_EDIT` / `MODELS_DELETE` depending on the operation.
@@ -313,6 +314,15 @@ Requires workspace permissions `WEBHOOKS_VIEW` (read) / `WEBHOOKS_MANAGE`
 > Publish the Features page
 ```
 
+## Hosting the server (library)
+
+`createHostedServer` serves the same tools from a host that holds no token and no disk. Every tool takes a `workspace` (`<orgSlug>/<workspaceSlug>`); `list_workspaces` names the ones a connection may use. The package checks only the shape of `workspace` - everything below is the host's job:
+
+- **`resolveWorkspace(workspace)` is the authorization.** Check, on every call, that the caller is still a member of that workspace and that the connection was granted it. Throw the same message for "does not exist" and "not yours", so a refusal does not reveal which workspaces exist.
+- **The executor is the scope.** The `CmssyApi` it returns (`createCmssyApi(execute, workspaceId)`) runs every document as that user in that workspace; the package sends nothing that would scope it.
+- **`ConfirmStore.consume` is single-use and atomic.** Check and delete a ref in one step, or two concurrent calls with the same ref both run. Refs expire after 600 seconds. Hashes already cover the workspace, so one store per connection is safe.
+- **`fetchUrl` is the SSRF boundary.** Refuse private, loopback and link-local addresses and re-check every redirect. The package caps the body at 50MB while reading.
+
 ## Development
 
 ```bash

package/dist/__tests__/binder-input-validation.test.js

@@ -102,14 +102,14 @@ describe("a rule the tool declares across its parameters is enforced through the
     });
     for (const [name, probe] of Object.entries(OBJECT_LEVEL_RULES)) {
         it(`refuses the input ${name} was written to refuse`, async () => {
-            const tool = declaredTools().find((candidate) => candidate.name === name);
+            const tool = withObjectLevelRules().find((candidate) => candidate.name === name);
             expect(tool, `${name} is no longer exported`).toBeDefined();
             const client = await connect([tool], refusingOps);
             const result = await call(client, name, probe.refused);
             expect(refusal(result), "the rule is declared across the parameters, so only a parse of the whole object can enforce it").toBeTruthy();
         });
         it(`lets ${name} through once the rule is satisfied`, async () => {
-            const tool = declaredTools().find((candidate) => candidate.name === name);
+            const tool = withObjectLevelRules().find((candidate) => candidate.name === name);
             const client = await connect([{ ...tool, execute: async () => ({ ok: true }) }], refusingOps);
             const result = await call(client, name, probe.accepted);
             expect(result.isError, "the rule has to refuse its own case only; a guard that refuses everything proves nothing").toBeFalsy();

package/dist/__tests__/binder-input-validation.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"binder-input-validation.test.js","sourceRoot":"","sources":["../../src/__tests__/binder-input-validation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EACL,SAAS,IAAI,IAAI,EACjB,YAAY,IAAI,OAAO,EACvB,aAAa,EACb,iBAAiB,IAAI,OAAO,GAC7B,MAAM,kBAAkB,CAAC;AAQ1B,MAAM,WAAW,GAAG,EAAkB,CAAC;AAEvC,SAAS,QAAQ,CACf,SAAwD;IAExD,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,QAAQ;QACrB,mBAAmB,EAAE,EAAE;QACvB,OAAO,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACtD,GAAG,SAAS;KACQ,CAAC;AACzB,CAAC;AAED,QAAQ,CAAC,yEAAyE,EAAE,GAAG,EAAE;IACvF,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B;YACE,QAAQ,CAAC;gBACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;iBACnC,CAAqC;aACvC,CAAC;SACH,EACD,WAAW,CACZ,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAE7E,MAAM,CACJ,OAAO,CAAC,MAAM,CAAC,EACf,wHAAwH,CACzH,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B;YACE,QAAQ,CAAC;gBACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;oBACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC3B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;iBAC5B,CAAqC;aACvC,CAAC;SACH,EACD,WAAW,CACZ,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,WAAyB,CAAC;QAE1D,MAAM,CACJ,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EACvB,sIAAsI,CACvI,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC;YAChE,IAAI;YACJ,MAAM;YACN,MAAM;YACN,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B;YACE,QAAQ,CAAC;gBACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;oBACd,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;iBAC3C,CAAqC;aACvC,CAAC;SACH,EACD,WAAW,CACZ,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE;YAC9C,EAAE,EAAE,GAAG;YACP,IAAI,EAAE,aAAa;SACpB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAE,MAAM,CAAC,OAA8B,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAC/E,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B;YACE,QAAQ,CAAC;gBACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;iBAClB,CAAqC;aACvC,CAAC;SACH,EACD,WAAW,CACZ,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAEnE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GACtB;IACE,mBAAmB,EAAE;QACnB,OAAO,EAAE,EAAE,EAAE,EAAE,0BAA0B,EAAE;QAC3C,QAAQ,EAAE,EAAE,EAAE,EAAE,0BAA0B,EAAE,IAAI,EAAE,SAAS,EAAE;KAC9D;IACD,YAAY,EAAE;QACZ,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,2BAA2B,EAAE;QACrE,QAAQ,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE;KACrC;CACF,CAAC;AAEJ,SAAS,aAAa;IACpB,OAAQ,MAAM,CAAC,MAAM,CAAC,OAAO,CAAe,CAAC,MAAM,CACjD,CAAC,KAAK,EAAmB,EAAE,CACzB,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,aAAa,IAAI,KAAK;QACtB,SAAS,IAAI,KAAK,CACrB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO,aAAa,EAAE,CAAC,MAAM,CAC3B,CAAC,IAAI,EAAE,EAAE,CACP,CACE,IAAI,CAAC,WAGN,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,0FAA0F,EAAE,GAAG,EAAE;IACxG,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CACJ,oBAAoB,EAAE;aACnB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;aACxB,IAAI,EAAE,EACT,wJAAwJ,CACzJ,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC/D,EAAE,CAAC,qBAAqB,IAAI,wBAAwB,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAC1E,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,wBAAwB,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,IAAK,CAAC,EAAE,WAAW,CAAC,CAAC;YAEnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAEvD,MAAM,CACJ,OAAO,CAAC,MAAM,CAAC,EACf,gGAAgG,CACjG,CAAC,UAAU,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,QAAQ,IAAI,qCAAqC,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,CAAC,EAAE,GAAG,IAAK,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAY,CAAC,EAC7D,WAAW,CACZ,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAExD,MAAM,CACJ,MAAM,CAAC,OAAO,EACd,0FAA0F,CAC3F,CAAC,SAAS,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,CAAC,cAAc,CAAC,CAAC;AAE1D,QAAQ,CAAC,sEAAsE,EAAE,GAAG,EAAE;IACpF,KAAK,UAAU,UAAU;QACvB,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAA4B,CAAC,CAC3D,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACjC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,WAAyB;SACvC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,IAAI,GAAG,CAAC,MAAM,UAAU,EAAE,CAAC,CAAC,MAAM,CACtC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,KAAK,KAAK,CACrD,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAC7D,CAAC;QACF,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,MAAM,UAAU,EAAE,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,QAAQ;gBAAE,SAAS;YACxB,MAAM,cAAc,GAAG,CACrB,QACD,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;YACxB,MAAM,mBAAmB,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YAC/D,IAAI,cAAc,KAAK,mBAAmB;gBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,CACJ,QAAQ,EACR,ubAAub,CACxb,CAAC,aAAa,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"binder-input-validation.test.js","sourceRoot":"","sources":["../../src/__tests__/binder-input-validation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EACL,SAAS,IAAI,IAAI,EACjB,YAAY,IAAI,OAAO,EACvB,aAAa,EACb,iBAAiB,IAAI,OAAO,GAC7B,MAAM,kBAAkB,CAAC;AAQ1B,MAAM,WAAW,GAAG,EAAkB,CAAC;AAEvC,SAAS,QAAQ,CACf,SAAwD;IAExD,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,QAAQ;QACrB,mBAAmB,EAAE,EAAE;QACvB,OAAO,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACtD,GAAG,SAAS;KACQ,CAAC;AACzB,CAAC;AAED,QAAQ,CAAC,yEAAyE,EAAE,GAAG,EAAE;IACvF,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B;YACE,QAAQ,CAAC;gBACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;iBACnC,CAAqC;aACvC,CAAC;SACH,EACD,WAAW,CACZ,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAE7E,MAAM,CACJ,OAAO,CAAC,MAAM,CAAC,EACf,wHAAwH,CACzH,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B;YACE,QAAQ,CAAC;gBACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;oBACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC3B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;iBAC5B,CAAqC;aACvC,CAAC;SACH,EACD,WAAW,CACZ,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,WAAyB,CAAC;QAE1D,MAAM,CACJ,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EACvB,sIAAsI,CACvI,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC;YAChE,IAAI;YACJ,MAAM;YACN,MAAM;YACN,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B;YACE,QAAQ,CAAC;gBACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;oBACd,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;iBAC3C,CAAqC;aACvC,CAAC;SACH,EACD,WAAW,CACZ,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE;YAC9C,EAAE,EAAE,GAAG;YACP,IAAI,EAAE,aAAa;SACpB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAE,MAAM,CAAC,OAA8B,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAC/E,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B;YACE,QAAQ,CAAC;gBACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;iBAClB,CAAqC;aACvC,CAAC;SACH,EACD,WAAW,CACZ,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAEnE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GACtB;IACE,mBAAmB,EAAE;QACnB,OAAO,EAAE,EAAE,EAAE,EAAE,0BAA0B,EAAE;QAC3C,QAAQ,EAAE,EAAE,EAAE,EAAE,0BAA0B,EAAE,IAAI,EAAE,SAAS,EAAE;KAC9D;IACD,YAAY,EAAE;QACZ,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,2BAA2B,EAAE;QACrE,QAAQ,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE;KACrC;CACF,CAAC;AAEJ,SAAS,aAAa;IACpB,OAAQ,MAAM,CAAC,MAAM,CAAC,OAAO,CAAe,CAAC,MAAM,CACjD,CAAC,KAAK,EAAmB,EAAE,CACzB,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,aAAa,IAAI,KAAK;QACtB,SAAS,IAAI,KAAK,CACrB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO,aAAa,EAAE,CAAC,MAAM,CAC3B,CAAC,IAAI,EAAE,EAAE,CACP,CACE,IAAI,CAAC,WAGN,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,0FAA0F,EAAE,GAAG,EAAE;IACxG,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CACJ,oBAAoB,EAAE;aACnB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;aACxB,IAAI,EAAE,EACT,wJAAwJ,CACzJ,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC/D,EAAE,CAAC,qBAAqB,IAAI,wBAAwB,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YACjF,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,wBAAwB,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,IAAK,CAAC,EAAE,WAAW,CAAC,CAAC;YAEnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAEvD,MAAM,CACJ,OAAO,CAAC,MAAM,CAAC,EACf,gGAAgG,CACjG,CAAC,UAAU,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,QAAQ,IAAI,qCAAqC,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,CAAC,EAAE,GAAG,IAAK,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAY,CAAC,EAC7D,WAAW,CACZ,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAExD,MAAM,CACJ,MAAM,CAAC,OAAO,EACd,0FAA0F,CAC3F,CAAC,SAAS,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,CAAC,cAAc,CAAC,CAAC;AAE1D,QAAQ,CAAC,sEAAsE,EAAE,GAAG,EAAE;IACpF,KAAK,UAAU,UAAU;QACvB,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAA4B,CAAC,CAC3D,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACjC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,WAAyB;SACvC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,IAAI,GAAG,CAAC,MAAM,UAAU,EAAE,CAAC,CAAC,MAAM,CACtC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,KAAK,KAAK,CACrD,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAC7D,CAAC;QACF,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,MAAM,UAAU,EAAE,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,QAAQ;gBAAE,SAAS;YACxB,MAAM,cAAc,GAAG,CACrB,QACD,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;YACxB,MAAM,mBAAmB,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YAC/D,IAAI,cAAc,KAAK,mBAAmB;gBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,CACJ,QAAQ,EACR,ubAAub,CACxb,CAAC,aAAa,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/bulk-update-records.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bulk-update-records.test.d.ts.map

package/dist/__tests__/bulk-update-records.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk-update-records.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/bulk-update-records.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/bulk-update-records.test.js

@@ -0,0 +1,67 @@
+import { describe, expect, it, vi } from "vitest";
+import { createMcpWorkspaceOps } from "../ai-tools-ops.js";
+function clientAnswering(answers) {
+    const sent = [];
+    const query = vi.fn(async (document, variables) => {
+        sent.push({
+            document,
+            variables: (variables ?? {}),
+        });
+        return answers.shift();
+    });
+    return { client: { query }, sent };
+}
+const MODEL_ID = "64b1f0c2a3d4e5f60718293a";
+const bySlug = { model: { list: [{ id: MODEL_ID, slug: "part" }] } };
+const resolved = { model: { get: { id: MODEL_ID, name: "Part", fields: [] } } };
+const outcome = {
+    updated: 2,
+    unchanged: 1,
+    failedCount: 0,
+    failed: [],
+    nextCursor: null,
+};
+describe("models.bulkUpdateRecords", () => {
+    it("sends the chosen ids and the patch under the resolved model id", async () => {
+        const { client, sent } = clientAnswering([
+            bySlug,
+            resolved,
+            { record: { bulkUpdate: outcome } },
+        ]);
+        const result = await createMcpWorkspaceOps(client).models.bulkUpdateRecords("part", { ids: ["r1", "r2", "r3"] }, { data: { stock: 0 }, status: "archived" });
+        expect(result).toEqual(outcome);
+        expect(sent[2].document).toContain("bulkUpdate(input: $input)");
+        expect(sent[2].variables).toEqual({
+            input: {
+                modelId: MODEL_ID,
+                ids: ["r1", "r2", "r3"],
+                data: { stock: 0 },
+                status: "archived",
+            },
+        });
+    });
+    it("selects every match of a filter and continues from a cursor", async () => {
+        const { client, sent } = clientAnswering([
+            resolved,
+            { record: { bulkUpdate: { ...outcome, nextCursor: "c2" } } },
+        ]);
+        const result = await createMcpWorkspaceOps(client).models.bulkUpdateRecords(MODEL_ID, { allMatching: true, filter: { color: "red" } }, { status: "published" }, "c1");
+        expect(result?.nextCursor).toBe("c2");
+        expect(sent[1].variables).toEqual({
+            input: {
+                modelId: MODEL_ID,
+                allMatching: true,
+                filter: { color: "red" },
+                status: "published",
+                cursor: "c1",
+            },
+        });
+    });
+    it("answers null for a model the workspace does not have, writing nothing", async () => {
+        const { client, sent } = clientAnswering([{ model: { list: [] } }]);
+        const result = await createMcpWorkspaceOps(client).models.bulkUpdateRecords("missing", { ids: ["r1"] }, { status: "published" });
+        expect(result).toBeNull();
+        expect(sent).toHaveLength(1);
+    });
+});
+//# sourceMappingURL=bulk-update-records.test.js.map

package/dist/__tests__/bulk-update-records.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk-update-records.test.js","sourceRoot":"","sources":["../../src/__tests__/bulk-update-records.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAElD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAQ3D,SAAS,eAAe,CAAC,OAAkB;IACzC,MAAM,IAAI,GAAW,EAAE,CAAC;IACxB,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,QAAgB,EAAE,SAAmB,EAAE,EAAE;QAClE,IAAI,CAAC,IAAI,CAAC;YACR,QAAQ;YACR,SAAS,EAAE,CAAC,SAAS,IAAI,EAAE,CAA4B;SACxD,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAA4B,EAAE,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,QAAQ,GAAG,0BAA0B,CAAC;AAC5C,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;AACrE,MAAM,QAAQ,GAAG,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;AAChF,MAAM,OAAO,GAAG;IACd,OAAO,EAAE,CAAC;IACV,SAAS,EAAE,CAAC;IACZ,WAAW,EAAE,CAAC;IACd,MAAM,EAAE,EAAE;IACV,UAAU,EAAE,IAAI;CACjB,CAAC;AAEF,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC;YACvC,MAAM;YACN,QAAQ;YACR,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE;SACpC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,iBAAiB,CACzE,MAAM,EACN,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAC3B,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAC3C,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACjC,KAAK,EAAE;gBACL,OAAO,EAAE,QAAQ;gBACjB,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;gBACvB,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;gBAClB,MAAM,EAAE,UAAU;aACnB;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC;YACvC,QAAQ;YACR,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE;SAC7D,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,iBAAiB,CACzE,QAAQ,EACR,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAC/C,EAAE,MAAM,EAAE,WAAW,EAAE,EACvB,IAAI,CACL,CAAC;QAEF,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACjC,KAAK,EAAE;gBACL,OAAO,EAAE,QAAQ;gBACjB,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;gBACxB,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAEpE,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,iBAAiB,CACzE,SAAS,EACT,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,EACf,EAAE,MAAM,EAAE,WAAW,EAAE,CACxB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/confirm-gate.test.js

@@ -126,12 +126,15 @@ describe("the MCP confirm gate (CMS-2067)", () => {
         expect([...CONFIRM_GATED_TOOLS].sort()).toEqual([
             "bulk_delete_products",
             "bulk_update_products",
+            "bulk_update_records",
             "cancel_order",
             "clear_cart_config",
             "delete_form",
             "delete_form_submission",
+            "delete_media_folder",
             "delete_model",
             "delete_page",
+            "delete_page_type",
             "delete_record",
             "delete_webhook",
             "promote_dev_draft",

package/dist/__tests__/confirm-gate.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"confirm-gate.test.js","sourceRoot":"","sources":["../../src/__tests__/confirm-gate.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,SAAS,IAAI,IAAI,EAAE,YAAY,IAAI,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE9E,SAAS,SAAS,CAAC,OAA0B;IAC3C,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,oBAAoB;QACjC,mBAAmB,EAAE,EAAE;QACvB,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;YACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;SACrB,CAAqC;QACtC,OAAO;KACa,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CACjB,MAAwC;IAExC,MAAM,IAAI,GAAI,MAAM,CAAC,OAA+B,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;IACpE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;AACrD,CAAC;AAED,MAAM,IAAI,GAAG,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAE3D,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,aAAa,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;QAC/G,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAkB,CAAC,CAAC;QAEvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAEhC,MAAM,CACJ,OAAO,EACP,0HAA0H,CAC3H,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAkB,CAAC,CAAC;QAEvE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE;YACnD,GAAG,IAAI;YACP,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,GAAG;SACzB,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CACJ,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EACzB,sFAAsF,CACvF,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAExD,MAAM,MAAM,GAAG,UAAU,CACvB,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE;YAClC,GAAG,IAAI;YACP,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,GAAG;SACzB,CAAC,CACH,CAAC;QACF,MAAM,CACJ,MAAM,CAAC,iBAAiB,EACxB,mFAAmF,CACpF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAkB,CAAC,CAAC;QAEvE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,UAAU,CACxB,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE;YAClC,aAAa,EAAE,UAAU;YACzB,QAAQ,EAAE,IAAI;YACd,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,GAAG;SACzB,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAkB,CAAC,CAAC;QAEvE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC;QACpE,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,UAAU,CACxB,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE;YAClC,GAAG,IAAI;YACP,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,GAAG;SACzB,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAkB,CAAC,CAAC;QAEvE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAkB,CAAC,CAAC;QAEvE,MAAM,MAAM,GAAG,UAAU,CACvB,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE;YAClC,GAAG,IAAI;YACP,CAAC,WAAW,CAAC,EAAE,UAAU;SAC1B,CAAC,CACH,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG;YACX,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,MAAM;YACnB,mBAAmB,EAAE,EAAE;YACvB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;gBACpB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;aAC1B,CAAqC;YACtC,OAAO;SACa,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAkB,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE;YAChD,aAAa,EAAE,UAAU;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,CACJ,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EACxC,8EAA8E,CAC/E,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CACnE,WAAW,CACZ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YAC9C,sBAAsB;YACtB,sBAAsB;YACtB,cAAc;YACd,mBAAmB;YACnB,aAAa;YACb,wBAAwB;YACxB,cAAc;YACd,aAAa;YACb,eAAe;YACf,gBAAgB;YAChB,mBAAmB;YACnB,cAAc;YACd,cAAc;YACd,qBAAqB;YACrB,uBAAuB;YACvB,sBAAsB;YACtB,kBAAkB;YAClB,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"confirm-gate.test.js","sourceRoot":"","sources":["../../src/__tests__/confirm-gate.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,SAAS,IAAI,IAAI,EAAE,YAAY,IAAI,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE9E,SAAS,SAAS,CAAC,OAA0B;IAC3C,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,oBAAoB;QACjC,mBAAmB,EAAE,EAAE;QACvB,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;YACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;SACrB,CAAqC;QACtC,OAAO;KACa,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CACjB,MAAwC;IAExC,MAAM,IAAI,GAAI,MAAM,CAAC,OAA+B,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;IACpE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;AACrD,CAAC;AAED,MAAM,IAAI,GAAG,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAE3D,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,aAAa,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;QAC/G,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAkB,CAAC,CAAC;QAEvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAEhC,MAAM,CACJ,OAAO,EACP,0HAA0H,CAC3H,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAkB,CAAC,CAAC;QAEvE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE;YACnD,GAAG,IAAI;YACP,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,GAAG;SACzB,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CACJ,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EACzB,sFAAsF,CACvF,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAExD,MAAM,MAAM,GAAG,UAAU,CACvB,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE;YAClC,GAAG,IAAI;YACP,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,GAAG;SACzB,CAAC,CACH,CAAC;QACF,MAAM,CACJ,MAAM,CAAC,iBAAiB,EACxB,mFAAmF,CACpF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAkB,CAAC,CAAC;QAEvE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,UAAU,CACxB,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE;YAClC,aAAa,EAAE,UAAU;YACzB,QAAQ,EAAE,IAAI;YACd,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,GAAG;SACzB,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAkB,CAAC,CAAC;QAEvE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC;QACpE,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,UAAU,CACxB,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE;YAClC,GAAG,IAAI;YACP,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,GAAG;SACzB,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAkB,CAAC,CAAC;QAEvE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAkB,CAAC,CAAC;QAEvE,MAAM,MAAM,GAAG,UAAU,CACvB,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE;YAClC,GAAG,IAAI;YACP,CAAC,WAAW,CAAC,EAAE,UAAU;SAC1B,CAAC,CACH,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG;YACX,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,MAAM;YACnB,mBAAmB,EAAE,EAAE;YACvB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;gBACpB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;aAC1B,CAAqC;YACtC,OAAO;SACa,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAkB,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE;YAChD,aAAa,EAAE,UAAU;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,CACJ,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EACxC,8EAA8E,CAC/E,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CACnE,WAAW,CACZ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YAC9C,sBAAsB;YACtB,sBAAsB;YACtB,qBAAqB;YACrB,cAAc;YACd,mBAAmB;YACnB,aAAa;YACb,wBAAwB;YACxB,qBAAqB;YACrB,cAAc;YACd,aAAa;YACb,kBAAkB;YAClB,eAAe;YACf,gBAAgB;YAChB,mBAAmB;YACnB,cAAc;YACd,cAAc;YACd,qBAAqB;YACrB,uBAAuB;YACvB,sBAAsB;YACtB,kBAAkB;YAClB,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/hosted-server.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=hosted-server.test.d.ts.map

package/dist/__tests__/hosted-server.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-server.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/hosted-server.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/hosted-server.test.js

@@ -0,0 +1,271 @@
+import { describe, expect, it, vi } from "vitest";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import { createHostedServer, hostedUploadPolicy, LIST_WORKSPACES_TOOL, } from "../hosted-server.js";
+import { bindHostedTool } from "../ai-tools-binder.js";
+import { createCmssyApi } from "../graphql-client.js";
+import { createServer } from "../server.js";
+import { ConfirmGate } from "../confirm-gate.js";
+import { connectServer, validationRefusal } from "./mcp-harness.js";
+function workspaceClient(label) {
+    return {
+        workspaceId: label,
+        query: vi.fn(() => Promise.reject(new Error(`queried ${label}`))),
+        buildSelectionSet: vi.fn(() => Promise.reject(new Error(`introspected ${label}`))),
+    };
+}
+function hosted(shared) {
+    const clients = {
+        "acme/shop": workspaceClient("acme/shop"),
+        "acme/blog": workspaceClient("acme/blog"),
+    };
+    const gates = {
+        "acme/shop": shared ?? new ConfirmGate(),
+        "acme/blog": shared ?? new ConfirmGate(),
+    };
+    const resolveWorkspace = vi.fn(async (workspace) => {
+        const client = clients[workspace];
+        if (!client)
+            throw new Error(`Workspace ${workspace} is not connected`);
+        return { client, confirm: gates[workspace] };
+    });
+    const listWorkspaces = vi.fn(async () => [
+        {
+            workspace: "acme/shop",
+            name: "Shop",
+            organization: "Acme",
+            role: "admin",
+        },
+    ]);
+    const fetchUrl = vi.fn(() => Promise.reject(new Error("fetch blocked")));
+    const server = createHostedServer({
+        listWorkspaces,
+        resolveWorkspace,
+        fetchUrl,
+    });
+    return { server, clients, resolveWorkspace, listWorkspaces, fetchUrl };
+}
+function text(result) {
+    return result.content[0].text;
+}
+describe("hosted server (CMS-2095)", () => {
+    it("serves the stdio catalogue plus list_workspaces, and every catalogue tool requires a workspace", async () => {
+        const stdio = await connectServer(createServer({ query: vi.fn() }));
+        const remote = await connectServer(hosted().server);
+        const stdioNames = (await stdio.listTools()).tools.map((t) => t.name);
+        const remoteTools = (await remote.listTools()).tools;
+        expect(remoteTools.map((t) => t.name).sort()).toStrictEqual([...stdioNames, LIST_WORKSPACES_TOOL].sort());
+        const withoutWorkspace = remoteTools
+            .filter((t) => t.name !== LIST_WORKSPACES_TOOL)
+            .filter((t) => !t.inputSchema.required?.includes("workspace"))
+            .map((t) => t.name);
+        expect(withoutWorkspace).toStrictEqual([]);
+    });
+    it("runs a tool against the workspace the call names, and only that one", async () => {
+        const { server, clients, resolveWorkspace } = hosted();
+        const client = await connectServer(server);
+        const result = await client.callTool({
+            name: "list_pages",
+            arguments: { workspace: "acme/blog" },
+        });
+        expect(text(result)).toContain("queried acme/blog");
+        expect(resolveWorkspace).toHaveBeenCalledWith("acme/blog");
+        expect(clients["acme/shop"].query).not.toHaveBeenCalled();
+    });
+    it("returns the host's refusal for a workspace outside the connection, without querying anything", async () => {
+        const { server, clients } = hosted();
+        const client = await connectServer(server);
+        const result = await client.callTool({
+            name: "list_pages",
+            arguments: { workspace: "other/site" },
+        });
+        expect(result.isError).toBe(true);
+        expect(text(result)).toBe("Workspace other/site is not connected");
+        for (const api of Object.values(clients)) {
+            expect(api.query).not.toHaveBeenCalled();
+        }
+    });
+    it.each([
+        ["missing", {}],
+        ["a bare workspace slug", { workspace: "shop" }],
+        ["an id", { workspace: "6abd61e1a51c17ea3525336a" }],
+        ["three segments", { workspace: "acme/shop/x" }],
+        ["an empty workspace slug", { workspace: "acme/" }],
+        ["whitespace", { workspace: "acme/my shop" }],
+    ])("refuses a call whose workspace is %s before resolving it", async (_label, args) => {
+        const { server, resolveWorkspace } = hosted();
+        const client = await connectServer(server);
+        const result = await client.callTool({
+            name: "list_pages",
+            arguments: args,
+        });
+        expect(validationRefusal(result)).toMatch(/workspace/);
+        expect(resolveWorkspace).not.toHaveBeenCalled();
+    });
+    it("offers upload_media from a URL only and fetches it through the host's fetch", async () => {
+        const { server, fetchUrl } = hosted();
+        const client = await connectServer(server);
+        const upload = (await client.listTools()).tools.find((t) => t.name === "upload_media");
+        expect(Object.keys(upload.inputSchema.properties ?? {})).not.toContain("filePath");
+        const refused = await client.callTool({
+            name: "upload_media",
+            arguments: { workspace: "acme/shop", filePath: "/etc/passwd" },
+        });
+        expect(validationRefusal(refused)).toBeTruthy();
+        const fetched = await client.callTool({
+            name: "upload_media",
+            arguments: { workspace: "acme/shop", url: "http://169.254.169.254/x" },
+        });
+        expect(text(fetched)).toBe("fetch blocked");
+        expect(fetchUrl).toHaveBeenCalledWith("http://169.254.169.254/x");
+    });
+    it("keeps confirmations per workspace: a ref issued in one workspace does not run the call in another", async () => {
+        const { server, clients } = hosted();
+        const client = await connectServer(server);
+        const args = { pageId: "6abd61e1a51c17ea3525336a" };
+        const prompt = JSON.parse(text(await client.callTool({
+            name: "delete_page",
+            arguments: { workspace: "acme/shop", ...args },
+        })));
+        expect(prompt.needsConfirmation).toBe(true);
+        const replayed = JSON.parse(text(await client.callTool({
+            name: "delete_page",
+            arguments: { workspace: "acme/blog", ...args, _confirm: prompt.ref },
+        })));
+        expect(replayed.refusedBecause).toBe("unknown-ref");
+        expect(clients["acme/blog"].query).not.toHaveBeenCalled();
+        const approved = await client.callTool({
+            name: "delete_page",
+            arguments: { workspace: "acme/shop", ...args, _confirm: prompt.ref },
+        });
+        expect(text(approved)).toContain("queried acme/shop");
+    });
+    it("binds update_region_settings to the resolved workspace's client", async () => {
+        const { server } = hosted();
+        const client = await connectServer(server);
+        const result = await client.callTool({
+            name: "update_region_settings",
+            arguments: {
+                workspace: "acme/blog",
+                pageId: "6abd61e1a51c17ea3525336a",
+                region: "sidebar",
+                values: {},
+            },
+        });
+        expect(text(result)).toContain("acme/blog");
+    });
+    it("lists the connection's workspaces as a read-only tool", async () => {
+        const { server, listWorkspaces } = hosted();
+        const client = await connectServer(server);
+        const tool = (await client.listTools()).tools.find((t) => t.name === LIST_WORKSPACES_TOOL);
+        expect(tool.annotations?.readOnlyHint).toBe(true);
+        const result = await client.callTool({
+            name: LIST_WORKSPACES_TOOL,
+            arguments: {},
+        });
+        expect(JSON.parse(text(result))).toStrictEqual(await listWorkspaces.mock.results[0].value);
+    });
+    it("binds a confirmation to its workspace even when the host shares one store", async () => {
+        const { server, clients } = hosted(new ConfirmGate());
+        const client = await connectServer(server);
+        const args = { pageId: "6abd61e1a51c17ea3525336a" };
+        const prompt = JSON.parse(text(await client.callTool({
+            name: "delete_page",
+            arguments: { workspace: "acme/shop", ...args },
+        })));
+        expect(prompt.summary).toContain("acme/shop");
+        const replayed = JSON.parse(text(await client.callTool({
+            name: "delete_page",
+            arguments: { workspace: "acme/blog", ...args, _confirm: prompt.ref },
+        })));
+        expect(replayed.refusedBecause).toBe("args-changed");
+        expect(clients["acme/blog"].query).not.toHaveBeenCalled();
+    });
+    it("enforces a tool's cross-field rule on the hosted path too", async () => {
+        const { server, resolveWorkspace } = hosted();
+        const client = await connectServer(server);
+        const result = await client.callTool({
+            name: "update_media_folder",
+            arguments: { workspace: "acme/shop", id: "6abd61e1a51c17ea3525336a" },
+        });
+        expect(validationRefusal(result)).toBeTruthy();
+        expect(resolveWorkspace).not.toHaveBeenCalled();
+    });
+});
+describe("bindHostedTool (CMS-2095)", () => {
+    function echoTool(confirmGated) {
+        return {
+            name: "echo_input",
+            description: "Echo",
+            inputSchema: z.object({ value: z.string() }),
+            requiredPermissions: ["pages:edit"],
+            ...(confirmGated ? { confirmGated } : {}),
+            execute: async (input) => input,
+        };
+    }
+    async function connectEcho(tool, confirm = new ConfirmGate()) {
+        const server = new McpServer({ name: "test", version: "0.0.0" });
+        bindHostedTool(server, tool, async () => ({
+            tool,
+            ops: {},
+            confirm,
+        }));
+        return connectServer(server);
+    }
+    it("hands the tool its own arguments, without the workspace", async () => {
+        const client = await connectEcho(echoTool());
+        const result = await client.callTool({
+            name: "echo_input",
+            arguments: { workspace: "acme/shop", value: "x" },
+        });
+        expect(JSON.parse(text(result))).toStrictEqual({ value: "x" });
+    });
+    it("awaits an asynchronous confirmation store", async () => {
+        const gate = new ConfirmGate();
+        const asyncStore = {
+            request: async (tool, hash) => gate.request(tool, hash),
+            consume: async (ref, tool, hash) => gate.consume(ref, tool, hash),
+        };
+        const client = await connectEcho(echoTool(true), asyncStore);
+        const prompt = JSON.parse(text(await client.callTool({
+            name: "echo_input",
+            arguments: { workspace: "acme/shop", value: "x" },
+        })));
+        expect(prompt.ref).toMatch(/^[0-9a-f]{8}$/);
+        const approved = await client.callTool({
+            name: "echo_input",
+            arguments: { workspace: "acme/shop", value: "x", _confirm: prompt.ref },
+        });
+        expect(JSON.parse(text(approved))).toStrictEqual({ value: "x" });
+    });
+});
+describe("hosted helpers (CMS-2095)", () => {
+    it("never lets the hosted upload policy read local files", () => {
+        const fetchUrl = vi.fn();
+        expect(hostedUploadPolicy(fetchUrl)).toStrictEqual({
+            allowFilePath: false,
+            fetchUrl,
+        });
+    });
+    it("createCmssyApi forwards the document and its variables to the executor", async () => {
+        const execute = vi.fn(async () => ({ ok: true }));
+        const api = createCmssyApi(execute, "ws1", new Map());
+        await api.query("query Q($id: ID!) { x }", { id: "p1" });
+        expect(api.workspaceId).toBe("ws1");
+        expect(execute).toHaveBeenCalledWith("query Q($id: ID!) { x }", {
+            id: "p1",
+        });
+    });
+    it("createCmssyApi introspects a type once per cache", async () => {
+        const execute = vi.fn(async () => ({
+            __type: {
+                fields: [{ name: "title", type: { name: "String", kind: "SCALAR" } }],
+            },
+        }));
+        const api = createCmssyApi(execute, "ws1", new Map());
+        expect(await api.buildSelectionSet("SiteHeader")).toBe("title");
+        expect(await api.buildSelectionSet("SiteHeader")).toBe("title");
+        expect(execute).toHaveBeenCalledTimes(1);
+    });
+});
+//# sourceMappingURL=hosted-server.test.js.map

package/dist/__tests__/hosted-server.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-server.test.js","sourceRoot":"","sources":["../../src/__tests__/hosted-server.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEpE,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO;QACL,WAAW,EAAE,KAAK;QAClB,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC;QACjE,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAC5B,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC,CACnD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,MAAoB;IAClC,MAAM,OAAO,GAAG;QACd,WAAW,EAAE,eAAe,CAAC,WAAW,CAAC;QACzC,WAAW,EAAE,eAAe,CAAC,WAAW,CAAC;KACd,CAAC;IAC9B,MAAM,KAAK,GAAG;QACZ,WAAW,EAAE,MAAM,IAAI,IAAI,WAAW,EAAE;QACxC,WAAW,EAAE,MAAM,IAAI,IAAI,WAAW,EAAE;KACV,CAAC;IACjC,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,SAAiB,EAAE,EAAE;QACzD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,SAAS,mBAAmB,CAAC,CAAC;QACxE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAE,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QACvC;YACE,SAAS,EAAE,WAAW;YACtB,IAAI,EAAE,MAAM;YACZ,YAAY,EAAE,MAAM;YACpB,IAAI,EAAE,OAAO;SACd;KACF,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,cAAc;QACd,gBAAgB;QAChB,QAAQ;KACT,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,IAAI,CAAC,MAAe;IAC3B,OAAQ,MAA0C,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,gGAAgG,EAAE,KAAK,IAAI,EAAE;QAC9G,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAA4B,CAAC,CAC3D,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,CAAC,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,WAAW,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC;QAErD,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CACzD,CAAC,GAAG,UAAU,EAAE,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAC7C,CAAC;QACF,MAAM,gBAAgB,GAAG,WAAW;aACjC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC;aAC9C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;aAC7D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,CAAC,gBAAgB,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,MAAM,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;YACnC,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE;SACtC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACpD,MAAM,CAAC,gBAAgB,CAAC,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,CAAC,OAAO,CAAC,WAAW,CAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;QAC5G,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;YACnC,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE;SACvC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACnE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC3C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,SAAS,EAAE,EAAE,CAAC;QACf,CAAC,uBAAuB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAChD,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,0BAA0B,EAAE,CAAC;QACpD,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;QAChD,CAAC,yBAAyB,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QACnD,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;KAC9C,CAAC,CACA,0DAA0D,EAC1D,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;YACnC,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACvD,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAClD,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAClD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAChC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CACpE,UAAU,CACX,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;YACpC,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE;SAC/D,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QAEhD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;YACpC,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,0BAA0B,EAAE;SACvE,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,0BAA0B,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mGAAmG,EAAE,KAAK,IAAI,EAAE;QACjH,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;QAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,IAAI,CACF,MAAM,MAAM,CAAC,QAAQ,CAAC;YACpB,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE;SAC/C,CAAC,CACH,CAC6C,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,IAAI,CACF,MAAM,MAAM,CAAC,QAAQ,CAAC;YACpB,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAE;SACrE,CAAC,CACH,CACwD,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,WAAW,CAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAE3D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;YACrC,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAE;SACrE,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;YACnC,IAAI,EAAE,wBAAwB;YAC9B,SAAS,EAAE;gBACT,SAAS,EAAE,WAAW;gBACtB,MAAM,EAAE,0BAA0B;gBAClC,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,EAAE;aACX;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CACtC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;YACnC,IAAI,EAAE,oBAAoB;YAC1B,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAC5C,MAAM,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,KAAK,CAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;QAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,IAAI,CACF,MAAM,MAAM,CAAC,QAAQ,CAAC;YACpB,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE;SAC/C,CAAC,CACH,CACkC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAE9C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,IAAI,CACF,MAAM,MAAM,CAAC,QAAQ,CAAC;YACpB,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAE;SACrE,CAAC,CACH,CAC4B,CAAC;QAChC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACrD,MAAM,CAAC,OAAO,CAAC,WAAW,CAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;YACnC,IAAI,EAAE,qBAAqB;YAC3B,SAAS,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE,0BAA0B,EAAE;SACtE,CAAC,CAAC;QAEH,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QAC/C,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,SAAS,QAAQ,CAAC,YAAmB;QACnC,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,MAAM;YACnB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAA0B;YACrE,mBAAmB,EAAE,CAAC,YAAY,CAAC;YACnC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,CAAC,KAAK;SAC/B,CAAC;IACd,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,OAAO,GAAG,IAAI,WAAW,EAAE;QAClE,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACjE,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACxC,IAAI;YACJ,GAAG,EAAE,EAAkB;YACvB,OAAO;SACR,CAAC,CAAC,CAAC;QACJ,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;YACnC,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE;SAClD,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG;YACjB,OAAO,EAAE,KAAK,EAAE,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;YACvE,OAAO,EAAE,KAAK,EAAE,GAAW,EAAE,IAAY,EAAE,IAAY,EAAE,EAAE,CACzD,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC;SAChC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAmB,CAAC,CAAC;QAEtE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,IAAI,CACF,MAAM,MAAM,CAAC,QAAQ,CAAC;YACpB,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE;SAClD,CAAC,CACH,CACiB,CAAC;QACrB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;YACrC,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAE;SACxE,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC;YACjD,aAAa,EAAE,KAAK;YACpB,QAAQ;SACT,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,cAAc,CAAC,OAAgB,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QAE/D,MAAM,GAAG,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzD,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,yBAAyB,EAAE;YAC9D,EAAE,EAAE,IAAI;SACT,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACjC,MAAM,EAAE;gBACN,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC;aACtE;SACF,CAAC,CAAC,CAAC;QACJ,MAAM,GAAG,GAAG,cAAc,CAAC,OAAgB,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QAE/D,MAAM,CAAC,MAAM,GAAG,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,GAAG,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/listing-manifests.test.js

@@ -11,10 +11,5 @@ describe("listing manifests ship the published version", () => {
     it("bundles the same version in the MCPB manifest", () => {
         expect(readJson("mcpb/manifest.json").version).toBe(PACKAGE_VERSION);
     });
-    it("pins the Claude plugin to the same npm version it declares", () => {
-        const plugin = readJson("claude-plugin/.claude-plugin/plugin.json");
-        expect(plugin.version).toBe(PACKAGE_VERSION);
-        expect(plugin.mcpServers.cmssy.args).toContain(`@cmssy/mcp-server@${PACKAGE_VERSION}`);
-    });
 });
 //# sourceMappingURL=listing-manifests.test.js.map

package/dist/__tests__/listing-manifests.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"listing-manifests.test.js","sourceRoot":"","sources":["../../src/__tests__/listing-manifests.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAEvE,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,MAAM,GAAG,QAAQ,CAAC,0CAA0C,CAGjE,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAC5C,qBAAqB,eAAe,EAAE,CACvC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"listing-manifests.test.js","sourceRoot":"","sources":["../../src/__tests__/listing-manifests.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAEvE,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/media-upload.test.js

@@ -5,12 +5,11 @@ import { afterEach, describe, expect, it, vi } from "vitest";
 import { mediaTypeFromMime, mimeFromFilename, resolveUploadSource, } from "../media-upload.js";
 function fetchResponding(init) {
     const body = init.body ?? new TextEncoder().encode("<svg/>");
-    return vi.fn().mockResolvedValue({
-        ok: init.ok ?? true,
-        status: init.status ?? 200,
-        headers: new Headers(init.contentType === null ? {} : { "content-type": init.contentType }),
-        arrayBuffer: () => Promise.resolve(body.buffer.slice(0)),
-    });
+    const status = init.status ?? (init.ok === false ? 404 : 200);
+    return vi.fn().mockResolvedValue(new Response(body, {
+        status,
+        headers: init.contentType === null ? {} : { "content-type": init.contentType },
+    }));
 }
 describe("mimeFromFilename", () => {
     it("maps known extensions case-insensitively", () => {
@@ -90,4 +89,49 @@ describe("resolveUploadSource - url", () => {
         await expect(resolveUploadSource({ url: "https://example.com/missing.png" })).rejects.toThrow("HTTP 404");
     });
 });
+describe("resolveUploadSource - hosted policy (CMS-2095)", () => {
+    afterEach(() => {
+        vi.unstubAllGlobals();
+    });
+    it("refuses a filePath when the policy forbids local files, even for a file that exists", async () => {
+        const dir = await mkdtemp(join(tmpdir(), "cmssy-upload-"));
+        const filePath = join(dir, "logo.png");
+        await writeFile(filePath, "png-bytes");
+        const fetchUrl = vi.fn();
+        await expect(resolveUploadSource({ filePath }, { allowFilePath: false, fetchUrl })).rejects.toThrow("cannot read local files");
+        await expect(resolveUploadSource({ filePath }, { allowFilePath: true, fetchUrl })).resolves.toMatchObject({ filename: "logo.png" });
+        expect(fetchUrl).not.toHaveBeenCalled();
+    });
+    it("fetches a url through the policy's fetch, not the global one", async () => {
+        const globalFetch = vi.fn();
+        vi.stubGlobal("fetch", globalFetch);
+        const fetchUrl = vi.fn(() => Promise.reject(new Error("blocked by host")));
+        await expect(resolveUploadSource({ url: "http://10.0.0.1/a.png" }, { allowFilePath: false, fetchUrl })).rejects.toThrow("blocked by host");
+        expect(fetchUrl).toHaveBeenCalledWith("http://10.0.0.1/a.png");
+        expect(globalFetch).not.toHaveBeenCalled();
+    });
+});
+describe("resolveUploadSource - size cap while reading (CMS-2095)", () => {
+    const limit = 50 * 1024 * 1024;
+    it("refuses a declared content-length over the limit without reading the body", async () => {
+        const pull = vi.fn();
+        const response = new Response(new ReadableStream({ pull }, { highWaterMark: 0 }), {
+            headers: { "content-length": String(limit + 1) },
+        });
+        await expect(resolveUploadSource({ url: "https://example.com/huge.bin" }, { allowFilePath: false, fetchUrl: () => Promise.resolve(response) })).rejects.toThrow("exceeds the upload limit");
+        expect(pull).not.toHaveBeenCalled();
+    });
+    it("stops reading an undeclared stream as soon as it passes the limit", async () => {
+        const chunk = new Uint8Array(8 * 1024 * 1024);
+        let served = 0;
+        const response = new Response(new ReadableStream({
+            pull(controller) {
+                served += chunk.byteLength;
+                controller.enqueue(chunk);
+            },
+        }));
+        await expect(resolveUploadSource({ url: "https://example.com/endless.bin" }, { allowFilePath: false, fetchUrl: () => Promise.resolve(response) })).rejects.toThrow("exceeds the upload limit");
+        expect(served).toBeLessThanOrEqual(limit + 2 * chunk.byteLength);
+    });
+});
 //# sourceMappingURL=media-upload.test.js.map