@ekwo-ai/mcp 0.8.0 → 0.10.0

package/README.md

@@ -1,16 +1,45 @@
 # @ekwo-ai/mcp
 
 The [Model Context Protocol](https://modelcontextprotocol.io) server for
-[Ekwo OS](https://github.com/Ekwo-ai/ekwo-os). It lets an AI assistant work on
+[Ekwo OS](https://github.com/Ekwo-ai/ekwo-os). It lets an AI agent work on
 the books in your own Postgres: read the ledger, raise an invoice, post it, match
 a payment, pull the VAT return or the French FEC — **as you**, under the row
 level security of your own installation.
 
+There are two ways to reach it, and they are the same server.
+
+## Hosted, at `https://mcp.ekwo.ai/mcp`
+
+For a client that adds remote servers rather than launching them — claude.ai,
+or any other that speaks **Streamable HTTP**. Nothing is installed, and no
+password or key is written into a configuration file.
+
+```
+https://mcp.ekwo.ai/mcp
+```
+
+Point a client at that address and it discovers the rest. An unauthenticated
+call is answered with `401` and a `WWW-Authenticate` header naming the
+server's protected-resource metadata (RFC 9728); the client follows it to the
+authorization server (RFC 8414), registers itself (RFC 7591, so it needs no
+credentials of its own) and sends the person to their browser to approve the
+connection. The scope asked for is `books`.
+
+An agent reading this without a browser can start from
+[`/.well-known/oauth-protected-resource`](https://mcp.ekwo.ai/.well-known/oauth-protected-resource).
+
+The books stay where they are: the hosted server holds none, and connects to
+the instance the person names when they approve it.
+
+## Locally, over stdio
+
 ```sh
 npx -y @ekwo-ai/mcp@latest
 ```
 
-It speaks MCP over stdio and is started by a client, never by hand. Keep the
+For a client that launches its own servers — Claude Desktop, Claude Code, any
+editor that reads `.mcp.json`. It speaks MCP over stdio and is started by a
+client, never by hand. Keep the
 version in the command: run from inside a clone of the Ekwo repository, a bare
 `npx @ekwo-ai/mcp` finds the workspace package of the same name, which has no
 built command, and answers `ekwo-mcp: command not found`. With `@latest`, `npx`
@@ -38,7 +67,7 @@ Three things it will never do:
   accounting has always worked. `unreconcile` is the only undo here, and
   matching changes no account.
 - **Use a `service_role` key.** It would work, and that is the objection: it
-  bypasses every policy, so the assistant would answer for companies its user
+  bypasses every policy, so the agent would answer for companies its user
   was never invited to. The server refuses to start with one.
 
 ## Configuration
@@ -95,7 +124,7 @@ alongside the server; the recommended route needs no driver at all.
 |---|---|
 | `SUPABASE_URL` | `https://<ref>.supabase.co` |
 | `SUPABASE_ANON_KEY` | The anon (publishable) key. A `service_role` key is refused. |
-| `EKWO_EMAIL` / `EKWO_PASSWORD` | The user this assistant acts as |
+| `EKWO_EMAIL` / `EKWO_PASSWORD` | The user this agent acts as |
 | `EKWO_ACCESS_TOKEN` | A session already in hand, instead of the two above |
 | `EKWO_DB_URL` | A direct Postgres connection, for a self-hosted installation |
 | `EKWO_ACT_AS_USER_ID` | Required with `EKWO_DB_URL`: the `auth.users` id to act for |
@@ -123,6 +152,75 @@ The `Dockerfile` at the root of the repository builds the same server from the
 checkout; `docker run -i --rm <image>` speaks MCP over stdio, with the variables
 passed as `-e`.
 
+## Over HTTP: hosting it for others
+
+The same server, reached by URL instead of started by a client:
+`handleHttpRequest` answers the **Streamable HTTP** transport of MCP. It is
+**stateless** — each request builds a server, answers in JSON and closes it,
+with no session id and nothing kept — so it runs on a function platform,
+behind a load balancer, or in one process. A `GET` is answered `405`: this
+server never speaks first, so there is no stream to open.
+
+What it does not do is decide who is calling. That is the host's job, and the
+whole of it: the host authenticates the request its own way, then hands in
+**the connection that request may use**.
+
+```ts
+import { handleHttpRequest } from '@ekwo-ai/mcp';
+
+export default async function (request: Request): Promise<Response> {
+  const who = await yourOwnAuthentication(request);      // a token you issued
+  if (who === undefined) return new Response(null, { status: 401 });
+  return handleHttpRequest(request, {
+    supabaseUrl: who.supabaseUrl,                         // https://<ref>.supabase.co
+    anonKey: who.publishableKey,                          // never the service_role key
+    apiKey: who.ekwoKey,                                  // or: accessToken: who.session
+  });
+}
+```
+
+A connection is one of two things, never both:
+
+- **A person's access token** on the instance. Row level security decides,
+  exactly as for that person in a browser.
+- **A key of Ekwo OS**, as `create_api_key()` issues it. It travels in the
+  `X-Ekwo-Api-Key` header with no `Authorization` beside it, the schema's
+  pre-request hook presents it (decision
+  [0062](../../docs/decisions/0062-a-key-reaches-the-api.md)), and the caller
+  is on that key's one company with that key's capabilities. A key issued
+  without a capability that writes gives an agent that reads.
+
+A `service_role` key is refused in all three slots, as on stdio. For
+`node:http` (or anything built on it), `handleNodeRequest(req, res,
+connection, { origin })` is the same handler.
+
+### Putting it in front of people: authorization
+
+A remote MCP client — Claude and the others — expects the server to follow
+the [authorization part of the MCP
+specification](https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization):
+OAuth 2.1 with PKCE. That belongs to the host, not to this package, and a
+host that wants the clients to connect on their own serves:
+
+1. **`401` with `WWW-Authenticate: Bearer resource_metadata="…"`** on the MCP
+   endpoint when there is no valid token.
+2. **Protected resource metadata** (RFC 9728) at
+   `/.well-known/oauth-protected-resource`, naming the endpoint as the
+   `resource` and the authorization server.
+3. **Authorization server metadata** (RFC 8414) at
+   `/.well-known/oauth-authorization-server`, with `S256` in
+   `code_challenge_methods_supported`.
+4. **Dynamic client registration** (RFC 7591), or client metadata documents,
+   so a client registers itself.
+5. **An authorization page** where the person signs in the host's way and
+   chooses what the client may reach; then a token endpoint that issues short
+   access tokens and rotating refresh tokens.
+
+Each access token the host issues maps to a connection — for instance to a
+key of Ekwo OS the person issued on their own installation for this purpose,
+held by the host encrypted and opened in memory for the one request. The
+database stays the only place that decides what may be read or written.
+
 ## The tools
 
 Every write names its company explicitly.
@@ -142,12 +240,12 @@ Every write names its company explicitly.
 | `general_ledger` | Every posted line of an account, with a running balance |
 | `aged_balance` | What is still owed, bucketed by age, read from the ledger |
 | `vat_return` | The boxes for a period, summed from the ledger |
-| `ec_sales_list` | The recapitulative statement of intra-Community supplies: one line per customer VAT number and per nature |
+| `ec_sales_list` | The recapitulative statement of European Union supplies: one line per customer VAT number and per nature |
 | `portfolio_upcoming_filings` | *Portfolio* = the companies you may read: for an accounting firm, its clients ([`docs/firms.md`](../../docs/firms.md)). What falls due between two dates in every company you hold `filings.read` on. One row per company at least: a pack that names no deadline is listed without a date, and says so |
 | `portfolio_filings_touched_since` | Declarations that have gone and whose period received entries afterwards, across the same companies, with the company named |
 | `list_statements` / `financial_statement` | The schemes a company can be presented on, and one statement |
 | `generate_fec` | The French FEC as text, with its checks and its filename |
-| `read_audit_log` | Who changed what and when: the configuration of a company, and the acts that change a state. Append-only; nothing writes it |
+| `read_audit_log` | Who changed what and when: the configuration of a company, and the acts that change a state. Append-only for every client; only the database writes it |
 | `get_preferences` | What you prefer, and the language chain to read labels with |
 | `list_invitations` | Who has been invited into a company and not yet joined |
 | `list_api_keys` | The machine keys of a company, and what each may do |
@@ -164,7 +262,7 @@ Every write names its company explicitly.
 | `reverse_entry` | Undoes a posted entry keyed by hand: its mirror, posted under the next number and matched against it. Same rule for the date |
 | `record_payment` | Books money in or out and matches it against open invoices — or, with `document_id`, against that document alone, which then names the contact and the direction. With `client_ref`, recording twice records once |
 | `reconcile` / `unreconcile` | Matches two ledger lines, or undoes one matching |
-| `create_bank_account` | Registers an account from its IBAN and wires it to the bank journal. Running it twice with the same IBAN creates nothing |
+| `create_bank_account` | Registers an account from its identifier, in the scheme the company's country uses (an IBAN, a routing number and an account number, a sort code and an account number…), and wires it to the bank journal. Running it twice with the same identifier creates nothing |
 | `create_bank_transaction` | One statement line by hand, for an installation with no feed |
 | `import_bank_statement` | A statement file (`camt.053`, `coda`, `cfonb120`) into statements and pending lines. Books nothing; the same file twice creates nothing; an unknown account or a statement that does not add up is refused by name, a missing statement is signalled |
 | `lock_period` | Moves the accounting and VAT lock dates. Needs `company.write`. |
@@ -175,6 +273,7 @@ Every write names its company explicitly.
 | `update_company_profile` | What a company says about itself on its documents |
 | `set_preferences` | Your own language, timezone, formats and default company |
 | `invite_member` / `revoke_invitation` | Invites an address into a company, or withdraws the invitation. The token is shown once |
+| `remove_member` / `set_member_role` | Takes a member out of a company — leaving oneself needs no `members.manage` — or moves them to another preset, clearing their per-member adjustments. The last owner is neither removed nor demoted |
 | `create_api_key` / `revoke_api_key` | A key for a machine, scoped to one company and a list of capabilities |
 
 **`list_accounts` answers with the working chart, not the whole one.** A
@@ -192,8 +291,8 @@ tool still accepts one.
 
 `post_document`, `cancel_document`, `reverse_entry`, `record_payment`,
 `update_document_lines`, `unreconcile`, `lock_period`, `opening_balance`, `import_books`,
-`close_fiscal_year`, `reopen_fiscal_year`, `revoke_invitation` and
-`revoke_api_key` are annotated destructive in the protocol, so a client can ask
+`close_fiscal_year`, `reopen_fiscal_year`, `revoke_invitation`, `remove_member`,
+`set_member_role` and `revoke_api_key` are annotated destructive in the protocol, so a client can ask
 before calling them.
 
 **What a tool may do is the capability the user holds**, not the tool's own
@@ -204,9 +303,12 @@ that reason.
 
 **The modules.** A module of this installation gets its own tools, under the
 prefix its `module.json` declares, and the server reads `public.modules` at
-startup to know which: `assets_list`, `assets_create`, `assets_schedule`,
-`assets_run_depreciation`, `assets_dispose`, `budgets_list`,
-`budgets_upsert_lines`, `budgets_variance`. A module that is not installed is
+startup to know which: `fixed_assets_list`, `fixed_assets_create`,
+`fixed_assets_schedule`, `fixed_assets_run_depreciation`,
+`fixed_assets_dispose`, `budgets_list`, `budgets_upsert_lines`,
+`budgets_variance`. The fixed assets tools were called `assets_*` until
+0.10.0; those names are still registered, as deprecated aliases that say so in
+their description, and are removed in 0.11.0. A module that is not installed is
 not offered, because a tool a model cannot use is worse than a tool it cannot
 see. PostgREST serves a module's schema only once the project exposes it, and
 the refusal it answers with is a profile error that says nothing useful — so
@@ -276,7 +378,7 @@ A payment needs somewhere to book the bank side. On a company installed from a
 country model the bank and cash journals already point at their account
 (`550000` and `570000` in Belgium, `512000` and `530000` in France), so
 `record_payment` works with nothing else set up. `create_bank_account` names
-the real account — the IBAN is the one thing nobody can derive — and wires it
+the real account — its identifier is the one thing nobody can derive — and wires it
 to the journal; `bank_account_id` on the payment then says which one the money
 moved on, which is what you need with several accounts in one journal. Until a
 company has one, `ekwo doctor` says so.

package/dist/bin.js

@@ -45,7 +45,7 @@ in claude_desktop_config.json or .mcp.json with:
 
   SUPABASE_URL            https://<ref>.supabase.co
   SUPABASE_ANON_KEY       the anon (publishable) key — never the service_role key
-  EKWO_EMAIL              the user this assistant acts as
+  EKWO_EMAIL              the user this agent acts as
   EKWO_PASSWORD           their password
   EKWO_ACCESS_TOKEN       an access token, instead of the two above
 

package/dist/config.d.ts

@@ -11,7 +11,7 @@
  *
  * The one thing this file exists to refuse is a `service_role` key. It would
  * work — that is the problem. Every policy in the schema would be bypassed,
- * and an assistant that can read every company of an installation is not the
+ * and an agent that can read every company of an installation is not the
  * thing anybody asked for. It is refused wherever it can arrive, and there are
  * two doors, not one: `SUPABASE_ANON_KEY` is the obvious paste, and
  * `EKWO_ACCESS_TOKEN` is the quiet one — it goes into the `Authorization`

package/dist/config.js

@@ -11,7 +11,7 @@
  *
  * The one thing this file exists to refuse is a `service_role` key. It would
  * work — that is the problem. Every policy in the schema would be bypassed,
- * and an assistant that can read every company of an installation is not the
+ * and an agent that can read every company of an installation is not the
  * thing anybody asked for. It is refused wherever it can arrive, and there are
  * two doors, not one: `SUPABASE_ANON_KEY` is the obvious paste, and
  * `EKWO_ACCESS_TOKEN` is the quiet one — it goes into the `Authorization`

package/dist/http.d.ts

@@ -0,0 +1,92 @@
+/**
+ * The same server over HTTP: the Streamable HTTP transport of MCP, stateless.
+ *
+ * `bin.ts` is a process a client starts on its own machine, and it reads who
+ * it acts as from its environment. A server somebody reaches by URL is the
+ * other shape: one process answers many people, so **who a request acts as
+ * is decided per request**, by whatever put the server on the network — its
+ * own sign-in, its own tokens — and handed in here as a connection. This
+ * file knows nothing about how that host authenticates anybody. It takes a
+ * request and the connection that request is allowed to use, and answers.
+ *
+ * ## Stateless, in JSON
+ *
+ * Each request builds a server, answers, and closes it. Nothing is kept
+ * between two requests — no session id, no stream, no cache of whose books
+ * were open — so a host can run it on a function platform, behind a load
+ * balancer, or on one machine, and two people never share a thing. The
+ * answers are plain JSON (`enableJsonResponse`): every tool of this server
+ * answers once, and an open event stream would hold a connection for nothing.
+ * A `GET` — the stream a client may open for messages the server sends on its
+ * own — is answered `405`, which the protocol allows and which is the truth:
+ * this server never speaks first.
+ *
+ * ## What a connection may be
+ *
+ *   - **A person's session on the instance**: the project address, its
+ *     publishable key and an access token. Row level security decides, as it
+ *     does for that person in a browser.
+ *   - **A key of Ekwo OS**: the same two, and a key `create_api_key()` issued.
+ *     It travels in `X-Ekwo-Api-Key`, the core's pre-request hook presents it
+ *     (decision 0062), and the caller is on the key's one company with the
+ *     key's capabilities.
+ *   - **A backend already built**, for a host that reaches the database some
+ *     other way — and for the tests, which run the real schema in PGlite.
+ *
+ * A `service_role` key is refused in every slot it could arrive in, as it is
+ * on stdio: this server has no privilege of its own, over any transport.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { type Backend } from './backend.js';
+/** Who one request acts as, over PostgREST. Exactly one of the two credentials. */
+export interface HttpConnection {
+    /** The project, `https://<ref>.supabase.co`. */
+    supabaseUrl: string;
+    /** Its publishable (anon) key. Never the `service_role` key. */
+    anonKey: string;
+    /** A person's access token on that project. */
+    accessToken?: string | undefined;
+    /** A key of Ekwo OS, issued on one company of that project. */
+    apiKey?: string | undefined;
+}
+export interface HttpHandlerOptions {
+    /**
+     * The modules whose tools are offered. Left out, the database is asked on
+     * every request that needs to know — a host that knows already, or caches
+     * the answer, passes it and saves the round trip.
+     */
+    modules?: readonly string[] | undefined;
+    /** The `fetch` the PostgREST backend uses. A host or a test may hand its own. */
+    fetch?: typeof globalThis.fetch | undefined;
+}
+/**
+ * Checks a connection and says what is wrong with it, without a network.
+ *
+ * The three refusals of `readConfig`, for a connection that did not come from
+ * an environment: nothing to act as, two things to act as, and a
+ * `service_role` key in any of the three slots.
+ */
+export declare function checkConnection(connection: HttpConnection): void;
+/** The backend a connection describes. The caller closes it. */
+export declare function openHttpBackend(connection: HttpConnection, options?: {
+    fetch?: typeof globalThis.fetch | undefined;
+}): Promise<Backend>;
+/**
+ * Answers one HTTP request of the MCP Streamable HTTP transport.
+ *
+ * `connection` is who this request acts as, decided by the host before it
+ * calls this. Nothing about it is remembered once the response is built.
+ */
+export declare function handleHttpRequest(request: Request, connection: HttpConnection | Backend, options?: HttpHandlerOptions): Promise<Response>;
+/**
+ * The same handler for `node:http` (and anything built on it).
+ *
+ * The request is read into a web `Request`, answered by `handleHttpRequest`,
+ * and the `Response` written back — one path, whichever server a host runs.
+ * `origin` is the address this server is reached at, which `node:http` does
+ * not know: `https://mcp.example.org`.
+ */
+export declare function handleNodeRequest(req: IncomingMessage, res: ServerResponse, connection: HttpConnection | Backend, options: HttpHandlerOptions & {
+    origin: string;
+}): Promise<void>;
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGjE,OAAO,EAAgB,KAAK,OAAO,EAAE,MAAM,cAAc,CAAC;AAM1D,mFAAmF;AACnF,MAAM,WAAW,cAAc;IAC7B,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACxC,iFAAiF;IACjF,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,GAAG,SAAS,CAAC;CAC7C;AAaD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,cAAc,GAAG,IAAI,CAuBhE;AAED,gEAAgE;AAChE,wBAAsB,eAAe,CACnC,UAAU,EAAE,cAAc,EAC1B,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,GAAG,SAAS,CAAA;CAAO,GAC5D,OAAO,CAAC,OAAO,CAAC,CASlB;AAYD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,cAAc,GAAG,OAAO,EACpC,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,QAAQ,CAAC,CA4DnB;AAWD;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,UAAU,EAAE,cAAc,GAAG,OAAO,EACpC,OAAO,EAAE,kBAAkB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/C,OAAO,CAAC,IAAI,CAAC,CAkBf"}

package/dist/http.js

@@ -0,0 +1,208 @@
+/**
+ * The same server over HTTP: the Streamable HTTP transport of MCP, stateless.
+ *
+ * `bin.ts` is a process a client starts on its own machine, and it reads who
+ * it acts as from its environment. A server somebody reaches by URL is the
+ * other shape: one process answers many people, so **who a request acts as
+ * is decided per request**, by whatever put the server on the network — its
+ * own sign-in, its own tokens — and handed in here as a connection. This
+ * file knows nothing about how that host authenticates anybody. It takes a
+ * request and the connection that request is allowed to use, and answers.
+ *
+ * ## Stateless, in JSON
+ *
+ * Each request builds a server, answers, and closes it. Nothing is kept
+ * between two requests — no session id, no stream, no cache of whose books
+ * were open — so a host can run it on a function platform, behind a load
+ * balancer, or on one machine, and two people never share a thing. The
+ * answers are plain JSON (`enableJsonResponse`): every tool of this server
+ * answers once, and an open event stream would hold a connection for nothing.
+ * A `GET` — the stream a client may open for messages the server sends on its
+ * own — is answered `405`, which the protocol allows and which is the truth:
+ * this server never speaks first.
+ *
+ * ## What a connection may be
+ *
+ *   - **A person's session on the instance**: the project address, its
+ *     publishable key and an access token. Row level security decides, as it
+ *     does for that person in a browser.
+ *   - **A key of Ekwo OS**: the same two, and a key `create_api_key()` issued.
+ *     It travels in `X-Ekwo-Api-Key`, the core's pre-request hook presents it
+ *     (decision 0062), and the caller is on the key's one company with the
+ *     key's capabilities.
+ *   - **A backend already built**, for a host that reaches the database some
+ *     other way — and for the tests, which run the real schema in PGlite.
+ *
+ * A `service_role` key is refused in every slot it could arrive in, as it is
+ * on stdio: this server has no privilege of its own, over any transport.
+ */
+import { WebStandardStreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js';
+import { isServiceRoleKey, serviceRoleRefusal } from '@ekwo-ai/core';
+import { EkwoMcpError } from './backend.js';
+import { postgrestBackend } from './postgrest.js';
+import { assertSchemaSupported } from './schema.js';
+import { buildServer } from './server.js';
+import { installedModules } from './tools/modules.js';
+const SURFACE = 'this server';
+const SIGN_IN = 'connect it with a person\'s session or with a key of Ekwo OS';
+/** A JSON-RPC error on the wire, for the refusals that come before the protocol. */
+function rpcError(status, code, message, id = null) {
+    return new Response(JSON.stringify({ jsonrpc: '2.0', error: { code, message }, id }), {
+        status,
+        headers: { 'Content-Type': 'application/json' },
+    });
+}
+/**
+ * Checks a connection and says what is wrong with it, without a network.
+ *
+ * The three refusals of `readConfig`, for a connection that did not come from
+ * an environment: nothing to act as, two things to act as, and a
+ * `service_role` key in any of the three slots.
+ */
+export function checkConnection(connection) {
+    const { supabaseUrl, anonKey, accessToken, apiKey } = connection;
+    if (supabaseUrl.trim().length === 0 || anonKey.trim().length === 0) {
+        throw new EkwoMcpError('missing_configuration: a connection needs the project address and its publishable key.');
+    }
+    if (isServiceRoleKey(anonKey)) {
+        throw new EkwoMcpError(serviceRoleRefusal('the publishable key of the connection', 'apikey', SURFACE, SIGN_IN));
+    }
+    const hasToken = accessToken !== undefined && accessToken.length > 0;
+    const hasKey = apiKey !== undefined && apiKey.length > 0;
+    if (hasToken && isServiceRoleKey(accessToken)) {
+        throw new EkwoMcpError(serviceRoleRefusal('the access token of the connection', 'authorization', SURFACE, SIGN_IN));
+    }
+    if (hasKey && isServiceRoleKey(apiKey)) {
+        throw new EkwoMcpError(serviceRoleRefusal('the key of the connection', 'apikey', SURFACE, SIGN_IN));
+    }
+    if (hasToken === hasKey) {
+        throw new EkwoMcpError(hasToken
+            ? 'two_credentials: a connection acts as a person or as a key of Ekwo OS, never as both at once.'
+            : 'missing_credentials: a connection needs a person\'s access token or a key of Ekwo OS. This server has no identity of its own.');
+    }
+}
+/** The backend a connection describes. The caller closes it. */
+export async function openHttpBackend(connection, options = {}) {
+    checkConnection(connection);
+    return postgrestBackend({
+        supabaseUrl: connection.supabaseUrl,
+        anonKey: connection.anonKey,
+        accessToken: connection.apiKey === undefined ? connection.accessToken : undefined,
+        apiKey: connection.apiKey,
+        fetch: options.fetch,
+    });
+}
+/** The JSON-RPC messages of a body, whether it held one or a batch. */
+function messagesOf(body) {
+    if (Array.isArray(body))
+        return body;
+    if (body !== null && typeof body === 'object')
+        return [body];
+    return [];
+}
+/** Methods whose answer depends on which tools this installation carries. */
+const NEEDS_MODULES = new Set(['tools/list', 'tools/call']);
+/**
+ * Answers one HTTP request of the MCP Streamable HTTP transport.
+ *
+ * `connection` is who this request acts as, decided by the host before it
+ * calls this. Nothing about it is remembered once the response is built.
+ */
+export async function handleHttpRequest(request, connection, options = {}) {
+    if (request.method === 'GET' || request.method === 'DELETE') {
+        // No stream to open and no session to end: every answer is in the
+        // response to the request that asked for it.
+        return new Response(null, { status: 405, headers: { Allow: 'POST' } });
+    }
+    if (request.method !== 'POST') {
+        return new Response(null, { status: 405, headers: { Allow: 'POST' } });
+    }
+    let body;
+    try {
+        body = await request.json();
+    }
+    catch {
+        return rpcError(400, -32700, 'Parse error: the body is not JSON.');
+    }
+    const messages = messagesOf(body);
+    const methods = new Set(messages.map((message) => message.method));
+    const firstId = messages.find((message) => message.id !== undefined)?.id ?? null;
+    let backend;
+    const owned = !isBackend(connection);
+    try {
+        backend = isBackend(connection) ? connection : await openHttpBackend(connection, { fetch: options.fetch });
+    }
+    catch (error) {
+        // A connection the host built wrong, or a token the instance refused.
+        // The host decided this request may act; the database disagreeing is
+        // still an answer, and it goes back as one.
+        return rpcError(200, -32001, error instanceof Error ? error.message : String(error), firstId);
+    }
+    try {
+        if (methods.has('initialize')) {
+            // The one moment a client is told what this server is, so the moment a
+            // database older than it is refused by name. On stdio this is the start
+            // of the process; here there is no such thing.
+            try {
+                await assertSchemaSupported(backend);
+            }
+            catch (error) {
+                return rpcError(200, -32002, error instanceof Error ? error.message : String(error), firstId);
+            }
+        }
+        const needsModules = [...methods].some((method) => typeof method === 'string' && NEEDS_MODULES.has(method));
+        const modules = options.modules ?? (needsModules ? await installedModules(backend) : []);
+        const server = buildServer(backend, { modules });
+        const transport = new WebStandardStreamableHTTPServerTransport({
+            sessionIdGenerator: undefined,
+            enableJsonResponse: true,
+        });
+        try {
+            await server.connect(transport);
+            return await transport.handleRequest(request, { parsedBody: body });
+        }
+        finally {
+            await server.close().catch(() => { });
+        }
+    }
+    finally {
+        if (owned)
+            await backend.close().catch(() => { });
+    }
+}
+function isBackend(value) {
+    return typeof value.select === 'function';
+}
+// ---------------------------------------------------------------------------
+// node:http, for a host that is not a function platform
+// ---------------------------------------------------------------------------
+/**
+ * The same handler for `node:http` (and anything built on it).
+ *
+ * The request is read into a web `Request`, answered by `handleHttpRequest`,
+ * and the `Response` written back — one path, whichever server a host runs.
+ * `origin` is the address this server is reached at, which `node:http` does
+ * not know: `https://mcp.example.org`.
+ */
+export async function handleNodeRequest(req, res, connection, options) {
+    const chunks = [];
+    for await (const chunk of req)
+        chunks.push(typeof chunk === 'string' ? Buffer.from(chunk) : chunk);
+    const headers = new Headers();
+    for (const [name, value] of Object.entries(req.headers)) {
+        if (value === undefined)
+            continue;
+        headers.set(name, Array.isArray(value) ? value.join(', ') : value);
+    }
+    const method = req.method ?? 'GET';
+    const request = new Request(new URL(req.url ?? '/', options.origin), {
+        method,
+        headers,
+        ...(method === 'GET' || method === 'HEAD' ? {} : { body: Buffer.concat(chunks) }),
+    });
+    const response = await handleHttpRequest(request, connection, options);
+    res.statusCode = response.status;
+    response.headers.forEach((value, name) => res.setHeader(name, value));
+    res.end(Buffer.from(await response.arrayBuffer()));
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAGH,OAAO,EAAE,wCAAwC,EAAE,MAAM,+DAA+D,CAAC;AACzH,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,YAAY,EAAgB,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAyBtD,MAAM,OAAO,GAAG,aAAa,CAAC;AAC9B,MAAM,OAAO,GAAG,8DAA8D,CAAC;AAE/E,oFAAoF;AACpF,SAAS,QAAQ,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe,EAAE,KAAc,IAAI;IACjF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE;QACpF,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,UAA0B;IACxD,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;IACjE,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,YAAY,CAAC,wFAAwF,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,YAAY,CAAC,kBAAkB,CAAC,uCAAuC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAClH,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACzD,IAAI,QAAQ,IAAI,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,YAAY,CAAC,kBAAkB,CAAC,oCAAoC,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACtH,CAAC;IACD,IAAI,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,YAAY,CAAC,kBAAkB,CAAC,2BAA2B,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,YAAY,CACpB,QAAQ;YACN,CAAC,CAAC,+FAA+F;YACjG,CAAC,CAAC,+HAA+H,CACpI,CAAC;IACJ,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAA0B,EAC1B,UAA2D,EAAE;IAE7D,eAAe,CAAC,UAAU,CAAC,CAAC;IAC5B,OAAO,gBAAgB,CAAC;QACtB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,WAAW,EAAE,UAAU,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QACjF,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC;AACL,CAAC;AAED,uEAAuE;AACvE,SAAS,UAAU,CAAC,IAAa;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAA8B,CAAC;IAC/D,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,IAA4B,CAAC,CAAC;IACrF,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,6EAA6E;AAC7E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgB,EAChB,UAAoC,EACpC,UAA8B,EAAE;IAEhC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5D,kEAAkE;QAClE,6CAA6C;QAC7C,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC;IAEjF,IAAI,OAAgB,CAAC;IACrB,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7G,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,sEAAsE;QACtE,qEAAqE;QACrE,4CAA4C;QAC5C,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IAChG,CAAC;IAED,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,uEAAuE;YACvE,wEAAwE;YACxE,+CAA+C;YAC/C,IAAI,CAAC;gBACH,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5G,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAEzF,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,IAAI,wCAAwC,CAAC;YAC7D,kBAAkB,EAAE,SAAS;YAC7B,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,OAAO,MAAM,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAA+B;IAChD,OAAO,OAAQ,KAAiB,CAAC,MAAM,KAAK,UAAU,CAAC;AACzD,CAAC;AAED,8EAA8E;AAC9E,wDAAwD;AACxD,8EAA8E;AAG9E;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAoB,EACpB,GAAmB,EACnB,UAAoC,EACpC,OAAgD;IAEhD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG;QAAE,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAgB,CAAC,CAAC;IAC/G,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;QACnE,MAAM;QACN,OAAO;QACP,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;KAClF,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACvE,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACtE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACrD,CAAC"}

package/dist/index.d.ts

@@ -10,7 +10,8 @@ export { EkwoMcpError, explain, socleCode, type Backend, type Filter, type Order
 export { ENV, isServiceRoleKey, openBackend, readConfig, type Config } from './config.js';
 export { amountIn, decimal, money, moneyFields, type Decimal } from '@ekwo-ai/core';
 export { connect, sqlBackend, type SqlBackendOptions, type SqlClient } from './sql.js';
-export { postgrestBackend, type PostgrestBackendOptions } from './postgrest.js';
+export { API_KEY_HEADER, postgrestBackend, type PostgrestBackendOptions } from './postgrest.js';
+export { checkConnection, handleHttpRequest, handleNodeRequest, openHttpBackend, type HttpConnection, type HttpHandlerOptions, } from './http.js';
 export { SERVER_NAME, SERVER_VERSION, buildServer, type ServerOptions } from './server.js';
 export { SCHEMA_MIN, assertSchemaSupported, installedSchemaVersion } from './schema.js';
 export { serverFromEnvironment, type Started } from './start.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,YAAY,EACZ,OAAO,EACP,SAAS,EACT,KAAK,OAAO,EACZ,KAAK,MAAM,EACX,KAAK,KAAK,EACV,KAAK,GAAG,EACR,KAAK,WAAW,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,OAAO,EAAE,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,iBAAiB,EAAE,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,KAAK,OAAO,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,KAAK,UAAU,EACf,KAAK,aAAa,GACnB,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,YAAY,EACZ,OAAO,EACP,SAAS,EACT,KAAK,OAAO,EACZ,KAAK,MAAM,EACX,KAAK,KAAK,EACV,KAAK,GAAG,EACR,KAAK,WAAW,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,OAAO,EAAE,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,iBAAiB,EAAE,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AACvF,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAChG,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,kBAAkB,GACxB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,KAAK,OAAO,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,KAAK,UAAU,EACf,KAAK,aAAa,GACnB,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -10,7 +10,8 @@ export { EkwoMcpError, explain, socleCode, } from './backend.js';
 export { ENV, isServiceRoleKey, openBackend, readConfig } from './config.js';
 export { amountIn, decimal, money, moneyFields } from '@ekwo-ai/core';
 export { connect, sqlBackend } from './sql.js';
-export { postgrestBackend } from './postgrest.js';
+export { API_KEY_HEADER, postgrestBackend } from './postgrest.js';
+export { checkConnection, handleHttpRequest, handleNodeRequest, openHttpBackend, } from './http.js';
 export { SERVER_NAME, SERVER_VERSION, buildServer } from './server.js';
 export { SCHEMA_MIN, assertSchemaSupported, installedSchemaVersion } from './schema.js';
 export { serverFromEnvironment } from './start.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,YAAY,EACZ,OAAO,EACP,SAAS,GAMV,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAe,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAgB,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,OAAO,EAAE,UAAU,EAA0C,MAAM,UAAU,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAgC,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAsB,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAgB,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,WAAW,GAGZ,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,YAAY,EACZ,OAAO,EACP,SAAS,GAMV,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAe,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAgB,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,OAAO,EAAE,UAAU,EAA0C,MAAM,UAAU,CAAC;AACvF,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAgC,MAAM,gBAAgB,CAAC;AAChG,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAGhB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAsB,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAgB,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,WAAW,GAGZ,MAAM,oBAAoB,CAAC"}

package/dist/postgrest.d.ts

@@ -23,7 +23,22 @@ export interface PostgrestBackendOptions {
     accessToken?: string | undefined;
     email?: string | undefined;
     password?: string | undefined;
+    /**
+     * A key of Ekwo OS — what `create_api_key()` issues — instead of a person.
+     *
+     * It travels in `X-Ekwo-Api-Key` and the core's `db_pre_request` hook
+     * presents it at the top of every request's transaction (decision 0062), so
+     * the caller is on the key's company with the key's capabilities and
+     * nothing else. Such a request carries **no `Authorization`**: PostgREST
+     * decides the role from that header before any function of the core runs,
+     * and the hook is what moves the request off `anon`.
+     */
+    apiKey?: string | undefined;
+    /** The `fetch` every request goes through. A host or a test may hand its own. */
+    fetch?: typeof globalThis.fetch | undefined;
 }
+/** The header the core's pre-request hook reads a key out of. */
+export declare const API_KEY_HEADER = "X-Ekwo-Api-Key";
 /**
  * Signs in, or takes the token it was given, and returns the backend.
  *

package/dist/postgrest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgrest.d.ts","sourceRoot":"","sources":["../src/postgrest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAIL,KAAK,OAAO,EAIb,MAAM,cAAc,CAAC;AAuDtB,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAkHzF"}
+{"version":3,"file":"postgrest.d.ts","sourceRoot":"","sources":["../src/postgrest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAIL,KAAK,OAAO,EAIb,MAAM,cAAc,CAAC;AAuDtB,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,iFAAiF;IACjF,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,GAAG,SAAS,CAAC;CAC7C;AAED,iEAAiE;AACjE,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAkB/C;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CA2HzF"}