@creezio/mcp-facade 0.22.0

package/dist-cjs/index.js

@@ -0,0 +1,120 @@
+"use strict";
+/**
+ * @creezio/mcp-facade — MCP d'app unique (H1.2 / discovery H2.3 / proxy H4 / M9).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rateLimitHeaders = exports.pruneExpiredCodes = exports.peekAuthCode = exports.normalizeMcpScopes = exports.mcpResourceUrl = exports.mcpOauthReady = exports.mcpCorsAllowlist = exports.mcpBaseUrl = exports.isMcpPublicUrlRequiredError = exports.getMcpOAuthAdapters = exports.getClient = exports.createRefreshToken = exports.createMcpOAuthRoutes = exports.createMcpHonoApp = exports.createAuthCode = exports.consumeAuthCode = exports.configureMcpOAuth = exports.checkMcpRateLimit = exports.canonicalizeMcpUrl = exports.McpPublicUrlRequiredError = exports.MCP_SCOPES = exports.MCP_SCOPE_WRITE = exports.MCP_SCOPE_READ = exports.MCP_SCOPE_LEGACY = exports.MCP_SCOPE = exports.REFRESH_TOKEN_TTL_S = exports.ACCESS_TOKEN_TTL_S = exports.generateModuleToolsFromOperations = exports.generateModuleToolsFromMountedOps = exports.generateModuleToolsFromListedOps = exports.discoverModuleToolsFromKernel = exports.discoverModuleToolsFromBrandModules = exports.createBrandMcpFacade = exports.mcpFacadeResultToSdk = exports.bindFacadeToolsToHono = exports.wrapMcpFacadeWithHonoProxy = exports.__mcpHonoProxyTest = exports.resolveMcpFacadeRole = exports.MCP_PRODUCT_EXECUTOR = exports.createCoreMcpTools = exports.CREEZIO_CORE_MCP_TOOL_NAMES = exports.denyCrossLayerToolCall = exports.createDenyUnauthorizedPluginToolPolicy = exports.composeToolPolicies = exports.parseNamespacedToolName = exports.isLegacyAliasName = exports.assertNamespacedToolName = exports.verifyMcpBearer = exports.signMcpJwt = exports.createMcpFacade = void 0;
+exports.registerGuardedMcpTool = exports.getStoredMcpToolPolicy = exports.createToolPolicyAuthorize = exports.checkToolPolicy = exports.createMcpAdminRoutes = exports.exportMcpDiagnostics = exports.pruneMcpAuditLogs = exports.listMcpAuditLogs = exports.auditMcpAdmin = exports.mcpMetrics = exports.mcpDiagnostics = exports.mcpAdminStatus = exports.touchMcpClient = exports.clientCanAuthenticate = exports.rotateMcpClientSecret = exports.revokeMcpClient = exports.setMcpClientEnabled = exports.listMcpClients = exports.updateMcpToolPolicy = exports.filterListedToolsByEnabledPolicy = exports.disabledMcpToolPolicyNames = exports.getMcpToolPolicy = exports.listMcpToolPolicies = exports.seedMcpToolPolicies = exports.ensureMcpAdminSchema = exports.resetMcpAdminAdaptersForTests = exports.isMcpAdminConfigured = exports.getMcpAdminAdapters = exports.configureMcpAdmin = exports.createOpenExternalTabHostMcpTools = exports.CREEZIO_OPEN_EXTERNAL_TAB_MCP_TOOL_NAME = exports.CREEZIO_PLATFORM_HOST_MCP_TOOL_NAMES = exports.verifyPkceS256 = exports.verifyClientSecret = exports.verifyAccessToken = exports.touchOAuthClientLastUsed = exports.signAccessToken = exports.rotateRefreshToken = exports.resourceAcceptable = exports.resolveMcpPublicUrl = exports.resolveMcpCorsOrigin = exports.resetMcpRateLimits = exports.resetMcpOAuthAdaptersForTests = exports.registerClient = void 0;
+var facade_js_1 = require("./facade.js");
+Object.defineProperty(exports, "createMcpFacade", { enumerable: true, get: function () { return facade_js_1.createMcpFacade; } });
+var jwt_js_1 = require("./jwt.js");
+Object.defineProperty(exports, "signMcpJwt", { enumerable: true, get: function () { return jwt_js_1.signMcpJwt; } });
+Object.defineProperty(exports, "verifyMcpBearer", { enumerable: true, get: function () { return jwt_js_1.verifyMcpBearer; } });
+var namespace_js_1 = require("./namespace.js");
+Object.defineProperty(exports, "assertNamespacedToolName", { enumerable: true, get: function () { return namespace_js_1.assertNamespacedToolName; } });
+Object.defineProperty(exports, "isLegacyAliasName", { enumerable: true, get: function () { return namespace_js_1.isLegacyAliasName; } });
+Object.defineProperty(exports, "parseNamespacedToolName", { enumerable: true, get: function () { return namespace_js_1.parseNamespacedToolName; } });
+var policy_js_1 = require("./policy.js");
+Object.defineProperty(exports, "composeToolPolicies", { enumerable: true, get: function () { return policy_js_1.composeToolPolicies; } });
+Object.defineProperty(exports, "createDenyUnauthorizedPluginToolPolicy", { enumerable: true, get: function () { return policy_js_1.createDenyUnauthorizedPluginToolPolicy; } });
+Object.defineProperty(exports, "denyCrossLayerToolCall", { enumerable: true, get: function () { return policy_js_1.denyCrossLayerToolCall; } });
+var core_tools_js_1 = require("./core-tools.js");
+Object.defineProperty(exports, "CREEZIO_CORE_MCP_TOOL_NAMES", { enumerable: true, get: function () { return core_tools_js_1.CREEZIO_CORE_MCP_TOOL_NAMES; } });
+Object.defineProperty(exports, "createCoreMcpTools", { enumerable: true, get: function () { return core_tools_js_1.createCoreMcpTools; } });
+var runtime_js_1 = require("./runtime.js");
+Object.defineProperty(exports, "MCP_PRODUCT_EXECUTOR", { enumerable: true, get: function () { return runtime_js_1.MCP_PRODUCT_EXECUTOR; } });
+Object.defineProperty(exports, "resolveMcpFacadeRole", { enumerable: true, get: function () { return runtime_js_1.resolveMcpFacadeRole; } });
+var hono_proxy_js_1 = require("./hono-proxy.js");
+Object.defineProperty(exports, "__mcpHonoProxyTest", { enumerable: true, get: function () { return hono_proxy_js_1.__mcpHonoProxyTest; } });
+Object.defineProperty(exports, "wrapMcpFacadeWithHonoProxy", { enumerable: true, get: function () { return hono_proxy_js_1.wrapMcpFacadeWithHonoProxy; } });
+var hono_bind_js_1 = require("./hono-bind.js");
+Object.defineProperty(exports, "bindFacadeToolsToHono", { enumerable: true, get: function () { return hono_bind_js_1.bindFacadeToolsToHono; } });
+Object.defineProperty(exports, "mcpFacadeResultToSdk", { enumerable: true, get: function () { return hono_bind_js_1.mcpFacadeResultToSdk; } });
+var brand_facade_js_1 = require("./brand-facade.js");
+Object.defineProperty(exports, "createBrandMcpFacade", { enumerable: true, get: function () { return brand_facade_js_1.createBrandMcpFacade; } });
+var module_ops_tools_js_1 = require("./module-ops-tools.js");
+Object.defineProperty(exports, "discoverModuleToolsFromBrandModules", { enumerable: true, get: function () { return module_ops_tools_js_1.discoverModuleToolsFromBrandModules; } });
+Object.defineProperty(exports, "discoverModuleToolsFromKernel", { enumerable: true, get: function () { return module_ops_tools_js_1.discoverModuleToolsFromKernel; } });
+Object.defineProperty(exports, "generateModuleToolsFromListedOps", { enumerable: true, get: function () { return module_ops_tools_js_1.generateModuleToolsFromListedOps; } });
+Object.defineProperty(exports, "generateModuleToolsFromMountedOps", { enumerable: true, get: function () { return module_ops_tools_js_1.generateModuleToolsFromMountedOps; } });
+Object.defineProperty(exports, "generateModuleToolsFromOperations", { enumerable: true, get: function () { return module_ops_tools_js_1.generateModuleToolsFromOperations; } });
+var index_js_1 = require("./oauth/index.js");
+Object.defineProperty(exports, "ACCESS_TOKEN_TTL_S", { enumerable: true, get: function () { return index_js_1.ACCESS_TOKEN_TTL_S; } });
+Object.defineProperty(exports, "REFRESH_TOKEN_TTL_S", { enumerable: true, get: function () { return index_js_1.REFRESH_TOKEN_TTL_S; } });
+Object.defineProperty(exports, "MCP_SCOPE", { enumerable: true, get: function () { return index_js_1.MCP_SCOPE; } });
+Object.defineProperty(exports, "MCP_SCOPE_LEGACY", { enumerable: true, get: function () { return index_js_1.MCP_SCOPE_LEGACY; } });
+Object.defineProperty(exports, "MCP_SCOPE_READ", { enumerable: true, get: function () { return index_js_1.MCP_SCOPE_READ; } });
+Object.defineProperty(exports, "MCP_SCOPE_WRITE", { enumerable: true, get: function () { return index_js_1.MCP_SCOPE_WRITE; } });
+Object.defineProperty(exports, "MCP_SCOPES", { enumerable: true, get: function () { return index_js_1.MCP_SCOPES; } });
+Object.defineProperty(exports, "McpPublicUrlRequiredError", { enumerable: true, get: function () { return index_js_1.McpPublicUrlRequiredError; } });
+Object.defineProperty(exports, "canonicalizeMcpUrl", { enumerable: true, get: function () { return index_js_1.canonicalizeMcpUrl; } });
+Object.defineProperty(exports, "checkMcpRateLimit", { enumerable: true, get: function () { return index_js_1.checkMcpRateLimit; } });
+Object.defineProperty(exports, "configureMcpOAuth", { enumerable: true, get: function () { return index_js_1.configureMcpOAuth; } });
+Object.defineProperty(exports, "consumeAuthCode", { enumerable: true, get: function () { return index_js_1.consumeAuthCode; } });
+Object.defineProperty(exports, "createAuthCode", { enumerable: true, get: function () { return index_js_1.createAuthCode; } });
+Object.defineProperty(exports, "createMcpHonoApp", { enumerable: true, get: function () { return index_js_1.createMcpHonoApp; } });
+Object.defineProperty(exports, "createMcpOAuthRoutes", { enumerable: true, get: function () { return index_js_1.createMcpOAuthRoutes; } });
+Object.defineProperty(exports, "createRefreshToken", { enumerable: true, get: function () { return index_js_1.createRefreshToken; } });
+Object.defineProperty(exports, "getClient", { enumerable: true, get: function () { return index_js_1.getClient; } });
+Object.defineProperty(exports, "getMcpOAuthAdapters", { enumerable: true, get: function () { return index_js_1.getMcpOAuthAdapters; } });
+Object.defineProperty(exports, "isMcpPublicUrlRequiredError", { enumerable: true, get: function () { return index_js_1.isMcpPublicUrlRequiredError; } });
+Object.defineProperty(exports, "mcpBaseUrl", { enumerable: true, get: function () { return index_js_1.mcpBaseUrl; } });
+Object.defineProperty(exports, "mcpCorsAllowlist", { enumerable: true, get: function () { return index_js_1.mcpCorsAllowlist; } });
+Object.defineProperty(exports, "mcpOauthReady", { enumerable: true, get: function () { return index_js_1.mcpOauthReady; } });
+Object.defineProperty(exports, "mcpResourceUrl", { enumerable: true, get: function () { return index_js_1.mcpResourceUrl; } });
+Object.defineProperty(exports, "normalizeMcpScopes", { enumerable: true, get: function () { return index_js_1.normalizeMcpScopes; } });
+Object.defineProperty(exports, "peekAuthCode", { enumerable: true, get: function () { return index_js_1.peekAuthCode; } });
+Object.defineProperty(exports, "pruneExpiredCodes", { enumerable: true, get: function () { return index_js_1.pruneExpiredCodes; } });
+Object.defineProperty(exports, "rateLimitHeaders", { enumerable: true, get: function () { return index_js_1.rateLimitHeaders; } });
+Object.defineProperty(exports, "registerClient", { enumerable: true, get: function () { return index_js_1.registerClient; } });
+Object.defineProperty(exports, "resetMcpOAuthAdaptersForTests", { enumerable: true, get: function () { return index_js_1.resetMcpOAuthAdaptersForTests; } });
+Object.defineProperty(exports, "resetMcpRateLimits", { enumerable: true, get: function () { return index_js_1.resetMcpRateLimits; } });
+Object.defineProperty(exports, "resolveMcpCorsOrigin", { enumerable: true, get: function () { return index_js_1.resolveMcpCorsOrigin; } });
+Object.defineProperty(exports, "resolveMcpPublicUrl", { enumerable: true, get: function () { return index_js_1.resolveMcpPublicUrl; } });
+Object.defineProperty(exports, "resourceAcceptable", { enumerable: true, get: function () { return index_js_1.resourceAcceptable; } });
+Object.defineProperty(exports, "rotateRefreshToken", { enumerable: true, get: function () { return index_js_1.rotateRefreshToken; } });
+Object.defineProperty(exports, "signAccessToken", { enumerable: true, get: function () { return index_js_1.signAccessToken; } });
+Object.defineProperty(exports, "touchOAuthClientLastUsed", { enumerable: true, get: function () { return index_js_1.touchOAuthClientLastUsed; } });
+Object.defineProperty(exports, "verifyAccessToken", { enumerable: true, get: function () { return index_js_1.verifyAccessToken; } });
+Object.defineProperty(exports, "verifyClientSecret", { enumerable: true, get: function () { return index_js_1.verifyClientSecret; } });
+Object.defineProperty(exports, "verifyPkceS256", { enumerable: true, get: function () { return index_js_1.verifyPkceS256; } });
+/** Host-only tools typiques (hors factory marque) — desktop / introspection. */
+exports.CREEZIO_PLATFORM_HOST_MCP_TOOL_NAMES = [
+    "open_external_tab",
+    "list_tools_by_space",
+];
+var open_external_tab_host_tools_js_1 = require("./open-external-tab-host-tools.js");
+Object.defineProperty(exports, "CREEZIO_OPEN_EXTERNAL_TAB_MCP_TOOL_NAME", { enumerable: true, get: function () { return open_external_tab_host_tools_js_1.CREEZIO_OPEN_EXTERNAL_TAB_MCP_TOOL_NAME; } });
+Object.defineProperty(exports, "createOpenExternalTabHostMcpTools", { enumerable: true, get: function () { return open_external_tab_host_tools_js_1.createOpenExternalTabHostMcpTools; } });
+/* ── N6 : MCP admin (port TempoFlow) ── */
+var index_js_2 = require("./admin/index.js");
+Object.defineProperty(exports, "configureMcpAdmin", { enumerable: true, get: function () { return index_js_2.configureMcpAdmin; } });
+Object.defineProperty(exports, "getMcpAdminAdapters", { enumerable: true, get: function () { return index_js_2.getMcpAdminAdapters; } });
+Object.defineProperty(exports, "isMcpAdminConfigured", { enumerable: true, get: function () { return index_js_2.isMcpAdminConfigured; } });
+Object.defineProperty(exports, "resetMcpAdminAdaptersForTests", { enumerable: true, get: function () { return index_js_2.resetMcpAdminAdaptersForTests; } });
+Object.defineProperty(exports, "ensureMcpAdminSchema", { enumerable: true, get: function () { return index_js_2.ensureMcpAdminSchema; } });
+Object.defineProperty(exports, "seedMcpToolPolicies", { enumerable: true, get: function () { return index_js_2.seedMcpToolPolicies; } });
+Object.defineProperty(exports, "listMcpToolPolicies", { enumerable: true, get: function () { return index_js_2.listMcpToolPolicies; } });
+Object.defineProperty(exports, "getMcpToolPolicy", { enumerable: true, get: function () { return index_js_2.getMcpToolPolicy; } });
+Object.defineProperty(exports, "disabledMcpToolPolicyNames", { enumerable: true, get: function () { return index_js_2.disabledMcpToolPolicyNames; } });
+Object.defineProperty(exports, "filterListedToolsByEnabledPolicy", { enumerable: true, get: function () { return index_js_2.filterListedToolsByEnabledPolicy; } });
+Object.defineProperty(exports, "updateMcpToolPolicy", { enumerable: true, get: function () { return index_js_2.updateMcpToolPolicy; } });
+Object.defineProperty(exports, "listMcpClients", { enumerable: true, get: function () { return index_js_2.listMcpClients; } });
+Object.defineProperty(exports, "setMcpClientEnabled", { enumerable: true, get: function () { return index_js_2.setMcpClientEnabled; } });
+Object.defineProperty(exports, "revokeMcpClient", { enumerable: true, get: function () { return index_js_2.revokeMcpClient; } });
+Object.defineProperty(exports, "rotateMcpClientSecret", { enumerable: true, get: function () { return index_js_2.rotateMcpClientSecret; } });
+Object.defineProperty(exports, "clientCanAuthenticate", { enumerable: true, get: function () { return index_js_2.clientCanAuthenticate; } });
+Object.defineProperty(exports, "touchMcpClient", { enumerable: true, get: function () { return index_js_2.touchMcpClient; } });
+Object.defineProperty(exports, "mcpAdminStatus", { enumerable: true, get: function () { return index_js_2.mcpAdminStatus; } });
+Object.defineProperty(exports, "mcpDiagnostics", { enumerable: true, get: function () { return index_js_2.mcpDiagnostics; } });
+Object.defineProperty(exports, "mcpMetrics", { enumerable: true, get: function () { return index_js_2.mcpMetrics; } });
+Object.defineProperty(exports, "auditMcpAdmin", { enumerable: true, get: function () { return index_js_2.auditMcpAdmin; } });
+Object.defineProperty(exports, "listMcpAuditLogs", { enumerable: true, get: function () { return index_js_2.listMcpAuditLogs; } });
+Object.defineProperty(exports, "pruneMcpAuditLogs", { enumerable: true, get: function () { return index_js_2.pruneMcpAuditLogs; } });
+Object.defineProperty(exports, "exportMcpDiagnostics", { enumerable: true, get: function () { return index_js_2.exportMcpDiagnostics; } });
+Object.defineProperty(exports, "createMcpAdminRoutes", { enumerable: true, get: function () { return index_js_2.createMcpAdminRoutes; } });
+Object.defineProperty(exports, "checkToolPolicy", { enumerable: true, get: function () { return index_js_2.checkToolPolicy; } });
+Object.defineProperty(exports, "createToolPolicyAuthorize", { enumerable: true, get: function () { return index_js_2.createToolPolicyAuthorize; } });
+Object.defineProperty(exports, "getStoredMcpToolPolicy", { enumerable: true, get: function () { return index_js_2.getStoredMcpToolPolicy; } });
+Object.defineProperty(exports, "registerGuardedMcpTool", { enumerable: true, get: function () { return index_js_2.registerGuardedMcpTool; } });
+//# sourceMappingURL=index.js.map

package/dist-cjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;AAyBH,yCAA8C;AAArC,4GAAA,eAAe,OAAA;AACxB,mCAAuD;AAA9C,oGAAA,UAAU,OAAA;AAAE,yGAAA,eAAe,OAAA;AACpC,+CAIwB;AAHtB,wHAAA,wBAAwB,OAAA;AACxB,iHAAA,iBAAiB,OAAA;AACjB,uHAAA,uBAAuB,OAAA;AAQzB,yCAIqB;AAHnB,gHAAA,mBAAmB,OAAA;AACnB,mIAAA,sCAAsC,OAAA;AACtC,mHAAA,sBAAsB,OAAA;AAOxB,iDAGyB;AAFvB,4HAAA,2BAA2B,OAAA;AAC3B,mHAAA,kBAAkB,OAAA;AASpB,2CAGsB;AAFpB,kHAAA,oBAAoB,OAAA;AACpB,kHAAA,oBAAoB,OAAA;AAItB,iDAGyB;AAFvB,mHAAA,kBAAkB,OAAA;AAClB,2HAAA,0BAA0B,OAAA;AAU5B,+CAGwB;AAFtB,qHAAA,qBAAqB,OAAA;AACrB,oHAAA,oBAAoB,OAAA;AAMtB,qDAAyD;AAAhD,uHAAA,oBAAoB,OAAA;AAO7B,6DAM+B;AAL7B,0IAAA,mCAAmC,OAAA;AACnC,oIAAA,6BAA6B,OAAA;AAC7B,uIAAA,gCAAgC,OAAA;AAChC,wIAAA,iCAAiC,OAAA;AACjC,wIAAA,iCAAiC,OAAA;AAwBnC,6CAwC0B;AAvCxB,8GAAA,kBAAkB,OAAA;AAClB,+GAAA,mBAAmB,OAAA;AACnB,qGAAA,SAAS,OAAA;AACT,4GAAA,gBAAgB,OAAA;AAChB,0GAAA,cAAc,OAAA;AACd,2GAAA,eAAe,OAAA;AACf,sGAAA,UAAU,OAAA;AACV,qHAAA,yBAAyB,OAAA;AACzB,8GAAA,kBAAkB,OAAA;AAClB,6GAAA,iBAAiB,OAAA;AACjB,6GAAA,iBAAiB,OAAA;AACjB,2GAAA,eAAe,OAAA;AACf,0GAAA,cAAc,OAAA;AACd,4GAAA,gBAAgB,OAAA;AAChB,gHAAA,oBAAoB,OAAA;AACpB,8GAAA,kBAAkB,OAAA;AAClB,qGAAA,SAAS,OAAA;AACT,+GAAA,mBAAmB,OAAA;AACnB,uHAAA,2BAA2B,OAAA;AAC3B,sGAAA,UAAU,OAAA;AACV,4GAAA,gBAAgB,OAAA;AAChB,yGAAA,aAAa,OAAA;AACb,0GAAA,cAAc,OAAA;AACd,8GAAA,kBAAkB,OAAA;AAClB,wGAAA,YAAY,OAAA;AACZ,6GAAA,iBAAiB,OAAA;AACjB,4GAAA,gBAAgB,OAAA;AAChB,0GAAA,cAAc,OAAA;AACd,yHAAA,6BAA6B,OAAA;AAC7B,8GAAA,kBAAkB,OAAA;AAClB,gHAAA,oBAAoB,OAAA;AACpB,+GAAA,mBAAmB,OAAA;AACnB,8GAAA,kBAAkB,OAAA;AAClB,8GAAA,kBAAkB,OAAA;AAClB,2GAAA,eAAe,OAAA;AACf,oHAAA,wBAAwB,OAAA;AACxB,6GAAA,iBAAiB,OAAA;AACjB,8GAAA,kBAAkB,OAAA;AAClB,0GAAA,cAAc,OAAA;AAGhB,gFAAgF;AACnE,QAAA,oCAAoC,GAAG;IAClD,mBAAmB;IACnB,qBAAqB;CACb,CAAC;AAYX,qFAG2C;AAFzC,0JAAA,uCAAuC,OAAA;AACvC,oJAAA,iCAAiC,OAAA;AAGnC,2CAA2C;AAE3C,6CA8B0B;AA7BxB,6GAAA,iBAAiB,OAAA;AACjB,+GAAA,mBAAmB,OAAA;AACnB,gHAAA,oBAAoB,OAAA;AACpB,yHAAA,6BAA6B,OAAA;AAC7B,gHAAA,oBAAoB,OAAA;AACpB,+GAAA,mBAAmB,OAAA;AACnB,+GAAA,mBAAmB,OAAA;AACnB,4GAAA,gBAAgB,OAAA;AAChB,sHAAA,0BAA0B,OAAA;AAC1B,4HAAA,gCAAgC,OAAA;AAChC,+GAAA,mBAAmB,OAAA;AACnB,0GAAA,cAAc,OAAA;AACd,+GAAA,mBAAmB,OAAA;AACnB,2GAAA,eAAe,OAAA;AACf,iHAAA,qBAAqB,OAAA;AACrB,iHAAA,qBAAqB,OAAA;AACrB,0GAAA,cAAc,OAAA;AACd,0GAAA,cAAc,OAAA;AACd,0GAAA,cAAc,OAAA;AACd,sGAAA,UAAU,OAAA;AACV,yGAAA,aAAa,OAAA;AACb,4GAAA,gBAAgB,OAAA;AAChB,6GAAA,iBAAiB,OAAA;AACjB,gHAAA,oBAAoB,OAAA;AACpB,gHAAA,oBAAoB,OAAA;AACpB,2GAAA,eAAe,OAAA;AACf,qHAAA,yBAAyB,OAAA;AACzB,kHAAA,sBAAsB,OAAA;AACtB,kHAAA,sBAAsB,OAAA"}

package/dist-cjs/jwt.js

@@ -0,0 +1,91 @@
+"use strict";
+/**
+ * Vérification JWT HS256 minimale (sans dépendance jsonwebtoken).
+ * Alignée sur le secret local-config `mcpJwtSecret` / MCP_JWT_SECRET.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyMcpBearer = verifyMcpBearer;
+exports.signMcpJwt = signMcpJwt;
+const node_crypto_1 = __importDefault(require("node:crypto"));
+function b64urlToBuf(s) {
+    const pad = "=".repeat((4 - (s.length % 4)) % 4);
+    return Buffer.from(s.replace(/-/g, "+").replace(/_/g, "/") + pad, "base64");
+}
+function timingSafeEqualStr(a, b) {
+    const ba = Buffer.from(a);
+    const bb = Buffer.from(b);
+    if (ba.length !== bb.length)
+        return false;
+    return node_crypto_1.default.timingSafeEqual(ba, bb);
+}
+/**
+ * Accepte :
+ * - bearer === secret (token opaque sandbox) ;
+ * - JWT HS256 signé avec le secret (payload.sub optionnel).
+ */
+function verifyMcpBearer(bearerToken, secret, opts) {
+    if (!secret) {
+        if (opts?.allowUnauthenticated)
+            return { ok: true, subject: "anonymous" };
+        return { ok: false, error: "mcp_jwt_secret_missing", status: 503 };
+    }
+    if (!bearerToken) {
+        if (opts?.allowUnauthenticated)
+            return { ok: true, subject: "anonymous" };
+        return { ok: false, error: "unauthorized", status: 401 };
+    }
+    const token = bearerToken.replace(/^Bearer\s+/i, "").trim();
+    if (!token) {
+        return { ok: false, error: "unauthorized", status: 401 };
+    }
+    if (timingSafeEqualStr(token, secret)) {
+        return { ok: true, subject: "opaque-token" };
+    }
+    const parts = token.split(".");
+    if (parts.length !== 3) {
+        return { ok: false, error: "invalid_token", status: 401 };
+    }
+    const [h, p, s] = parts;
+    const data = `${h}.${p}`;
+    const expected = node_crypto_1.default
+        .createHmac("sha256", secret)
+        .update(data)
+        .digest("base64url");
+    if (!timingSafeEqualStr(s, expected)) {
+        return { ok: false, error: "invalid_signature", status: 401 };
+    }
+    try {
+        const payload = JSON.parse(b64urlToBuf(p).toString("utf8"));
+        if (typeof payload.exp === "number" && payload.exp * 1000 < Date.now()) {
+            return { ok: false, error: "token_expired", status: 401 };
+        }
+        const orgId = typeof payload.orgId === "string"
+            ? payload.orgId
+            : typeof payload.org_id === "string"
+                ? payload.org_id
+                : undefined;
+        return {
+            ok: true,
+            subject: payload.sub || "jwt",
+            ...(orgId ? { orgId } : {}),
+            claims: payload,
+        };
+    }
+    catch {
+        return { ok: false, error: "invalid_payload", status: 401 };
+    }
+}
+/** Émet un JWT HS256 court (tests / sandbox). */
+function signMcpJwt(secret, payload) {
+    const header = Buffer.from(JSON.stringify({ alg: "HS256", typ: "JWT" })).toString("base64url");
+    const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
+    const sig = node_crypto_1.default
+        .createHmac("sha256", secret)
+        .update(`${header}.${body}`)
+        .digest("base64url");
+    return `${header}.${body}.${sig}`;
+}
+//# sourceMappingURL=jwt.js.map

package/dist-cjs/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../src/jwt.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;AAsBH,0CA4DC;AAGD,gCAaC;AAhGD,8DAAiC;AAGjC,SAAS,WAAW,CAAC,CAAS;IAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS,EAAE,CAAS;IAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,qBAAM,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAC7B,WAAsC,EACtC,MAAiC,EACjC,IAAyC;IAEzC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,IAAI,EAAE,oBAAoB;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IAAI,IAAI,EAAE,oBAAoB;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC3D,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,KAAiC,CAAC;IACpD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,qBAAM;SACpB,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,WAAW,CAAC,CAAC;IACvB,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAOzD,CAAC;QACF,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAC5D,CAAC;QACD,MAAM,KAAK,GACT,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;YAC/B,CAAC,CAAC,OAAO,CAAC,KAAK;YACf,CAAC,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;gBAClC,CAAC,CAAC,OAAO,CAAC,MAAM;gBAChB,CAAC,CAAC,SAAS,CAAC;QAClB,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,OAAO,CAAC,GAAG,IAAI,KAAK;YAC7B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,MAAM,EAAE,OAAkC;SAC3C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,iDAAiD;AACjD,SAAgB,UAAU,CACxB,MAAc,EACd,OAA6D;IAE7D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CACxB,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAC7C,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,qBAAM;SACf,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;SAC3B,MAAM,CAAC,WAAW,CAAC,CAAC;IACvB,OAAO,GAAG,MAAM,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;AACpC,CAAC"}

package/dist-cjs/module-ops-tools.js

@@ -0,0 +1,308 @@
+"use strict";
+/**
+ * Génération des tools MCP depuis les opérations de module (SoT).
+ * Handler = requête synthétique vers le même mount HTTP — zéro 2e implémentation.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateModuleToolsFromOperations = generateModuleToolsFromOperations;
+exports.generateModuleToolsFromListedOps = generateModuleToolsFromListedOps;
+exports.generateModuleToolsFromMountedOps = generateModuleToolsFromMountedOps;
+exports.discoverModuleToolsFromKernel = discoverModuleToolsFromKernel;
+exports.discoverModuleToolsFromBrandModules = discoverModuleToolsFromBrandModules;
+const api_kernel_1 = require("@creezio/api-kernel");
+const dyn_import_js_1 = require("./dyn-import.js");
+const store_js_1 = require("./oauth/store.js");
+/**
+ * Access token OAuth MCP (HS256 MCP_JWT_SECRET — ChatGPT & co) → session
+ * plateforme mintée pour le user du consentement (`uid`). Les gardes marque
+ * (`requireSession`) ne connaissent que les JWT session AUTH_SECRET : sans
+ * cette conversion, tout tool `module.*` répond 401 malgré un OAuth valide.
+ * Fail-closed : uid absent/inconnu ou stores indisponibles → null (le 401
+ * métier reste la réponse).
+ */
+async function mintSessionFromMcpAccessToken(token) {
+    let userId = "";
+    try {
+        const payload = await (0, store_js_1.verifyAccessToken)(token);
+        userId = (payload?.user_id || "").trim();
+    }
+    catch {
+        return null; // adapters OAuth non configurés (façade standalone)
+    }
+    if (!userId)
+        return null;
+    try {
+        const [authMod, tasksMod] = await Promise.all([
+            (0, dyn_import_js_1.dynImport)("@creezio/auth"),
+            (0, dyn_import_js_1.dynImport)("@creezio/tasks"),
+        ]);
+        if (!authMod.createSessionToken)
+            return null;
+        const users = tasksMod.getTasksBrandConfig?.()?.users;
+        let user = null;
+        try {
+            const found = users?.list().find((u) => u.id === userId && u.active !== false) ??
+                null;
+            if (found) {
+                user = {
+                    id: found.id,
+                    username: found.username,
+                    role: found.role === "owner" ? "owner" : found.role || "collaborator",
+                    permissions: [...(found.permissions || [])],
+                };
+            }
+        }
+        catch {
+            /* store users indisponible → fallback owner ci-dessous */
+        }
+        if (!user) {
+            try {
+                const owner = users?.getOwner?.() ?? null;
+                if (owner && owner.id === userId) {
+                    user = {
+                        id: owner.id,
+                        username: owner.username,
+                        role: "owner",
+                        permissions: [...(owner.permissions || [])],
+                    };
+                }
+            }
+            catch {
+                /* fail-closed */
+            }
+        }
+        if (!user)
+            return null;
+        return await authMod.createSessionToken({ user });
+    }
+    catch {
+        return null;
+    }
+}
+/** Cookie + Authorization pour `requireSession` sur la req synthétique. */
+async function headersFromActor(actor) {
+    const headers = {};
+    if (actor?.headers) {
+        for (const [key, value] of Object.entries(actor.headers)) {
+            if (value == null || value === "")
+                continue;
+            headers[key.toLowerCase()] = String(value);
+        }
+    }
+    const raw = (actor?.bearerToken || "").trim();
+    if (raw) {
+        const token = raw.replace(/^Bearer\s+/i, "").trim();
+        if (token && !headers.authorization) {
+            headers.authorization = `Bearer ${token}`;
+        }
+    }
+    // Bearer JWT : si c'est un access token OAuth MCP, le convertir en
+    // session plateforme mintée (sinon inchangé — JWT session déjà valide).
+    const authz = (headers.authorization || "")
+        .replace(/^Bearer\s+/i, "")
+        .trim();
+    if (authz && authz.split(".").length === 3) {
+        const minted = await mintSessionFromMcpAccessToken(authz);
+        if (minted)
+            headers.authorization = `Bearer ${minted}`;
+    }
+    return Object.keys(headers).length ? headers : undefined;
+}
+function interpolatePath(template, args) {
+    const used = new Set();
+    const path = template.replace(/:([A-Za-z_][A-Za-z0-9_]*)/g, (_, name) => {
+        used.add(name);
+        const value = args[name];
+        return encodeURIComponent(value == null ? "" : String(value));
+    });
+    return { path, used };
+}
+function asQuery(rest) {
+    const query = {};
+    for (const [key, value] of Object.entries(rest)) {
+        if (value == null)
+            continue;
+        if (Array.isArray(value)) {
+            query[key] = value.map((v) => String(v)).join(",");
+            continue;
+        }
+        if (typeof value === "object")
+            continue;
+        query[key] = String(value);
+    }
+    return query;
+}
+function defaultInputSchema(op) {
+    if (op.inputSchema && typeof op.inputSchema === "object") {
+        return op.inputSchema;
+    }
+    const params = [
+        ...normalizePath(op.path).matchAll(/:([A-Za-z_][A-Za-z0-9_]*)/g),
+    ].map((m) => m[1]);
+    const properties = {};
+    for (const name of params)
+        properties[name] = { type: "string" };
+    return {
+        type: "object",
+        properties,
+        required: params,
+        additionalProperties: true,
+    };
+}
+function normalizePath(path) {
+    const raw = String(path || "").trim();
+    if (!raw || raw === "/")
+        return "/";
+    return raw.startsWith("/") ? raw : `/${raw}`;
+}
+function restArgs(args, used) {
+    const rest = {};
+    for (const [key, value] of Object.entries(args)) {
+        if (used.has(key))
+            continue;
+        rest[key] = value;
+    }
+    return rest;
+}
+function responseToToolResult(res) {
+    if (res.status >= 400) {
+        const body = res.body;
+        return {
+            ok: false,
+            error: (body && typeof body === "object" && body.error) ||
+                `http_${res.status}`,
+            content: res.body,
+        };
+    }
+    return { ok: true, content: res.body };
+}
+/**
+ * Génère un tool MCP par op — `module.<id>.<op.id>`.
+ * Handler = requête synthétique (method/path/body) vers le même
+ * `ApiMount.handle` via `invokeMount` (typiquement `api.handle`) —
+ * zéro 2ᵉ implémentation métier.
+ */
+function generateModuleToolsFromOperations(moduleId, ops, invokeMount, options = {}) {
+    const mountId = options.mountId || moduleId;
+    const space = options.space || "module";
+    const tools = [];
+    for (const op of ops) {
+        const template = (0, api_kernel_1.resolveOperationHttpPath)(space, mountId, op.path);
+        tools.push({
+            name: `module.${mountId}.${op.id}`,
+            description: op.description,
+            space: "module",
+            ownerId: moduleId,
+            inputSchema: defaultInputSchema(op),
+            ...(op.roles?.length ? { defaultRoles: op.roles } : {}),
+            mcpPublishDefault: op.mcpPublishDefault === true,
+            requiredScope: op.method === "GET" ? "crm:read" : op.permission || "crm:write",
+            handler: async (args, actor) => {
+                const { path, used } = interpolatePath(template, args);
+                const rest = restArgs(args, used);
+                const method = op.method;
+                const headers = await headersFromActor(actor);
+                const req = {
+                    method,
+                    path,
+                    ...(headers ? { headers } : {}),
+                    ...(method === "GET"
+                        ? { query: asQuery(rest) }
+                        : { body: rest }),
+                };
+                return responseToToolResult(await invokeMount(req));
+            },
+        });
+    }
+    return tools;
+}
+function toolsFromListedOps(api, listed, spaces) {
+    const byMount = new Map();
+    for (const { space, mountId, op } of listed) {
+        if (!spaces.has(space))
+            continue;
+        const cur = byMount.get(mountId);
+        if (cur) {
+            cur.ops.push(op);
+            continue;
+        }
+        byMount.set(mountId, { space, ops: [op] });
+    }
+    const invokeMount = (req) => api.handle(req);
+    const out = [];
+    for (const [mountId, { space, ops }] of byMount) {
+        out.push(...generateModuleToolsFromOperations(mountId, ops, invokeMount, {
+            mountId,
+            space,
+        }));
+    }
+    return out;
+}
+/**
+ * Tools `module.*` générés depuis `api.listOperations()` (space module).
+ * SoT runtime — `BrandModuleDef.mcpTools` n'existe plus.
+ */
+function generateModuleToolsFromListedOps(api, listed) {
+    return toolsFromListedOps(api, listed ?? api.listOperations(), new Set(["module"]));
+}
+/** Tools générés depuis les mounts déjà enregistrés sur le kernel. */
+function generateModuleToolsFromMountedOps(api, mounts) {
+    if (!mounts) {
+        return toolsFromListedOps(api, api.listOperations(), new Set(["module", "platform"]));
+    }
+    const out = [];
+    for (const mount of mounts) {
+        if (mount.space !== "module" && mount.space !== "platform")
+            continue;
+        if (!mount.operations?.length)
+            continue;
+        out.push(...generateModuleToolsFromOperations(mount.id, mount.operations, (req) => api.handle(req), { mountId: mount.id, space: mount.space }));
+    }
+    return out;
+}
+/**
+ * Discovery runtime : uniquement `listOperations()` (space module).
+ * `extraTools` = hook apps (health, JWT) — pas de `mcpTools` manuscrit.
+ */
+function discoverModuleToolsFromKernel(api, extraTools = []) {
+    const generated = generateModuleToolsFromListedOps(api);
+    if (!extraTools.length)
+        return generated;
+    const seen = new Set(generated.map((t) => t.name));
+    return [...generated, ...extraTools.filter((t) => !seen.has(t.name))];
+}
+/**
+ * Discovery kit-side : SoT = `api.listOperations()` (space module).
+ * Fallback : ops des BrandModuleDef (EntitySpec CRUD + apiMounts) si le
+ * kernel n'a pas encore les mounts. Pas de champ `mcpTools`.
+ */
+function discoverModuleToolsFromBrandModules(modules, api) {
+    const fromKernel = generateModuleToolsFromListedOps(api);
+    if (fromKernel.length)
+        return fromKernel;
+    const generated = [];
+    const invoke = (req) => api.handle(req);
+    for (const mod of modules) {
+        const seenOp = new Set();
+        for (const [mountId, spec] of Object.entries(mod.entitySpecs ?? {})) {
+            const ops = (0, api_kernel_1.entityOperationsFromSpec)(spec);
+            for (const op of ops)
+                seenOp.add(`${mountId}:${op.id}`);
+            generated.push(...generateModuleToolsFromOperations(mod.id, ops, invoke, {
+                mountId,
+                space: "module",
+            }));
+        }
+        for (const [mountId, mount] of Object.entries(mod.apiMounts ?? {})) {
+            const extras = (mount.operations ?? []).filter((op) => !seenOp.has(`${mountId}:${op.id}`));
+            if (!extras.length)
+                continue;
+            generated.push(...generateModuleToolsFromOperations(mod.id, extras, invoke, {
+                mountId,
+                space: "module",
+            }));
+        }
+    }
+    return generated;
+}
+//# sourceMappingURL=module-ops-tools.js.map

package/dist-cjs/module-ops-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-ops-tools.js","sourceRoot":"","sources":["../src/module-ops-tools.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAiPH,8EAuCC;AAqCD,4EASC;AAGD,8EAyBC;AAMD,sEAQC;AAaD,kFAoCC;AApZD,oDAG6B;AAC7B,mDAA4C;AAC5C,+CAAqD;AAOrD;;;;;;;GAOG;AACH,KAAK,UAAU,6BAA6B,CAC1C,KAAa;IAEb,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAA,4BAAiB,EAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,oDAAoD;IACnE,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QAQH,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC5C,IAAA,yBAAS,EAAC,eAAe,CASvB;YACF,IAAA,yBAAS,EAAC,gBAAgB,CAOxB;SACH,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,mBAAmB,EAAE,EAAE,EAAE,KAAK,CAAC;QACtD,IAAI,IAAI,GAKG,IAAI,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,KAAK,GACT,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC;gBAChE,IAAI,CAAC;YACP,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,GAAG;oBACL,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,cAAc;oBACrE,WAAW,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;iBAC5C,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;QAC5D,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,IAAI,IAAI,CAAC;gBAC1C,IAAI,KAAK,IAAI,KAAK,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;oBACjC,IAAI,GAAG;wBACL,EAAE,EAAE,KAAK,CAAC,EAAE;wBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,IAAI,EAAE,OAAO;wBACb,WAAW,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;qBAC5C,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,OAAO,MAAM,OAAO,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,KAAK,UAAU,gBAAgB,CAC7B,KAAwB;IAExB,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE;gBAAE,SAAS;YAC5C,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,KAAK,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YACpC,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,mEAAmE;IACnE,wEAAwE;IACxE,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;SACxC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,IAAI,EAAE,CAAC;IACV,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,MAAM;YAAE,OAAO,CAAC,aAAa,GAAG,UAAU,MAAM,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAYD,SAAS,eAAe,CACtB,QAAgB,EAChB,IAA6B;IAE7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,4BAA4B,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE;QAC9E,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,OAAO,kBAAkB,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,OAAO,CACd,IAA6B;IAE7B,MAAM,KAAK,GAAuC,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,KAAK,IAAI,IAAI;YAAE,SAAS;QAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QACxC,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,EAAmB;IAC7C,IAAI,EAAE,CAAC,WAAW,IAAI,OAAO,EAAE,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACzD,OAAO,EAAE,CAAC,WAAsC,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG;QACb,GAAG,aAAa,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;KACjE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IACpB,MAAM,UAAU,GAAqC,EAAE,CAAC;IACxD,KAAK,MAAM,IAAI,IAAI,MAAM;QAAE,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjE,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,UAAU;QACV,QAAQ,EAAE,MAAM;QAChB,oBAAoB,EAAE,IAAI;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,GAAG,CAAC;IACpC,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,QAAQ,CACf,IAA6B,EAC7B,IAAiB;IAEjB,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAgB;IAC5C,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAsC,CAAC;QACxD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC;gBAChD,QAAQ,GAAG,CAAC,MAAM,EAAE;YACtB,OAAO,EAAE,GAAG,CAAC,IAAI;SAClB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iCAAiC,CAC/C,QAAgB,EAChB,GAA+B,EAC/B,WAAsC,EACtC,UAAsC,EAAE;IAExC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC;IACxC,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAA,qCAAwB,EAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,UAAU,OAAO,IAAI,EAAE,CAAC,EAAE,EAAE;YAClC,WAAW,EAAE,EAAE,CAAC,WAAW;YAC3B,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,QAAQ;YACjB,WAAW,EAAE,kBAAkB,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,KAAK,IAAI;YAChD,aAAa,EACX,EAAE,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,IAAI,WAAW;YACjE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC7B,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC;gBACzB,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBAC9C,MAAM,GAAG,GAAe;oBACtB,MAAM;oBACN,IAAI;oBACJ,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/B,GAAG,CAAC,MAAM,KAAK,KAAK;wBAClB,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;wBAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;iBACpB,CAAC;gBACF,OAAO,oBAAoB,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YACtD,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CACzB,GAAc,EACd,MAAwC,EACxC,MAA8C;IAE9C,MAAM,OAAO,GAAG,IAAI,GAAG,EAGpB,CAAC;IACJ,KAAK,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QACjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,WAAW,GAA8B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxE,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC;QAChD,GAAG,CAAC,IAAI,CACN,GAAG,iCAAiC,CAAC,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE;YAC9D,OAAO;YACP,KAAK;SACN,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAgB,gCAAgC,CAC9C,GAAc,EACd,MAAyC;IAEzC,OAAO,kBAAkB,CACvB,GAAG,EACH,MAAM,IAAI,GAAG,CAAC,cAAc,EAAE,EAC9B,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CACpB,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,SAAgB,iCAAiC,CAC/C,GAAc,EACd,MAAkC;IAElC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,kBAAkB,CACvB,GAAG,EACH,GAAG,CAAC,cAAc,EAAE,EACpB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAChC,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU;YAAE,SAAS;QACrE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM;YAAE,SAAS;QACxC,GAAG,CAAC,IAAI,CACN,GAAG,iCAAiC,CAClC,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,UAAU,EAChB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EACxB,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAC1C,CACF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAgB,6BAA6B,CAC3C,GAAc,EACd,aAA2C,EAAE;IAE7C,MAAM,SAAS,GAAG,gCAAgC,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAQD;;;;GAIG;AACH,SAAgB,mCAAmC,CACjD,OAAwC,EACxC,GAAc;IAEd,MAAM,UAAU,GAAG,gCAAgC,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,MAAM;QAAE,OAAO,UAAU,CAAC;IAEzC,MAAM,SAAS,GAAwB,EAAE,CAAC;IAC1C,MAAM,MAAM,GAA8B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAEnE,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;YACpE,MAAM,GAAG,GAAG,IAAA,qCAAwB,EAAC,IAAI,CAAC,CAAC;YAC3C,KAAK,MAAM,EAAE,IAAI,GAAG;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACxD,SAAS,CAAC,IAAI,CACZ,GAAG,iCAAiC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;gBACxD,OAAO;gBACP,KAAK,EAAE,QAAQ;aAChB,CAAC,CACH,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAC5C,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAC3C,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,SAAS;YAC7B,SAAS,CAAC,IAAI,CACZ,GAAG,iCAAiC,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;gBAC3D,OAAO;gBACP,KAAK,EAAE,QAAQ;aAChB,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist-cjs/namespace.js

@@ -0,0 +1,56 @@
+"use strict";
+/**
+ * Namespacing H4 — core.* / creezio.* · module.<owner>.* · plugin.<owner>.*
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseNamespacedToolName = parseNamespacedToolName;
+exports.assertNamespacedToolName = assertNamespacedToolName;
+exports.isLegacyAliasName = isLegacyAliasName;
+const OWNER_RE = /^[a-z][a-z0-9_-]{0,62}$/;
+/**
+ * Parse un nom de tool namespacé. Retourne null si le format est invalide
+ * pour la couche attendue.
+ */
+function parseNamespacedToolName(name) {
+    if (!name || typeof name !== "string")
+        return null;
+    if (name.startsWith("creezio.") || name.startsWith("core.")) {
+        return { space: "core", rest: name.replace(/^(creezio|core)\./, "") };
+    }
+    const mod = /^module\.([a-z][a-z0-9_-]{0,62})\.(.+)$/.exec(name);
+    if (mod) {
+        return { space: "module", ownerId: mod[1], rest: mod[2] };
+    }
+    const plug = /^plugin\.([a-z][a-z0-9_-]{0,62})\.(.+)$/.exec(name);
+    if (plug) {
+        return { space: "plugin", ownerId: plug[1], rest: plug[2] };
+    }
+    return null;
+}
+/**
+ * Vérifie qu'un tool déclaré respecte le préfixe de sa `space`.
+ * Les alias legacy (snake_case historique) ne passent pas ici — ils
+ * passent par `registerAlias`.
+ */
+function assertNamespacedToolName(space, name, ownerId) {
+    const parsed = parseNamespacedToolName(name);
+    if (!parsed) {
+        throw new Error(`mcp_namespace_invalid: « ${name} » doit être core.*/creezio.* | module.<id>.* | plugin.<id>.*`);
+    }
+    if (parsed.space !== space) {
+        throw new Error(`mcp_namespace_mismatch: « ${name} » parse comme ${parsed.space}, déclaré ${space}`);
+    }
+    if (space === "module" || space === "plugin") {
+        if (!ownerId || !OWNER_RE.test(ownerId)) {
+            throw new Error(`mcp_owner_invalid: ownerId requis pour space=${space}`);
+        }
+        if (parsed.ownerId !== ownerId) {
+            throw new Error(`mcp_owner_mismatch: nom « ${name} » owner=${parsed.ownerId}, déclaré ${ownerId}`);
+        }
+    }
+}
+/** True si le nom ressemble à un alias legacy (hors namespace H4). */
+function isLegacyAliasName(name) {
+    return parseNamespacedToolName(name) === null;
+}
+//# sourceMappingURL=namespace.js.map

package/dist-cjs/namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../src/namespace.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAgBH,0DAcC;AAOD,4DA0BC;AAGD,8CAEC;AA1DD,MAAM,QAAQ,GAAG,yBAAyB,CAAC;AAE3C;;;GAGG;AACH,SAAgB,uBAAuB,CAAC,IAAY;IAClD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,GAAG,GAAG,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAE,EAAE,CAAC;IAC7D,CAAC;IACD,MAAM,IAAI,GAAG,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAE,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAgB,wBAAwB,CACtC,KAAmB,EACnB,IAAY,EACZ,OAAgB;IAEhB,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,+DAA+D,CAChG,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,6BAA6B,IAAI,kBAAkB,MAAM,CAAC,KAAK,aAAa,KAAK,EAAE,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC7C,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,gDAAgD,KAAK,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,6BAA6B,IAAI,YAAY,MAAM,CAAC,OAAO,aAAa,OAAO,EAAE,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,SAAgB,iBAAiB,CAAC,IAAY;IAC5C,OAAO,uBAAuB,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;AAChD,CAAC"}