@emseepea/server 0.19.0 → 0.20.0

package/dist/external-approval.d.ts

@@ -0,0 +1,66 @@
+import { z } from "zod";
+declare const proposalSchema: z.ZodObject<{
+    principalId: z.ZodString;
+    scopeId: z.ZodString;
+    tool: z.ZodString;
+    input: z.ZodJSONSchema;
+    effect: z.ZodJSONSchema;
+    formSchema: z.ZodJSONSchema;
+}, z.core.$strict>;
+export type ExternalApprovalProposal = z.infer<typeof proposalSchema>;
+declare const recordSchema: z.ZodObject<{
+    capsuleDigest: z.ZodString;
+    expiresAt: z.ZodNumber;
+    state: z.ZodEnum<{
+        pending: "pending";
+        approved: "approved";
+        cancelled: "cancelled";
+        consumed: "consumed";
+    }>;
+}, z.core.$strict>;
+export type ExternalApprovalRecord = Readonly<z.infer<typeof recordSchema>>;
+/** CAS must compare the entire expected record atomically across all instances. */
+export interface ExternalApprovalStore {
+    load(key: string): Promise<ExternalApprovalRecord | null>;
+    compareAndSwap(key: string, expected: ExternalApprovalRecord | null, replacement: ExternalApprovalRecord): Promise<boolean>;
+}
+export interface ExternalApprovalOptions {
+    readonly key: Uint8Array;
+    readonly store: ExternalApprovalStore;
+    readonly lifetimeMs: number;
+    readonly maxCapsuleBytes: number;
+    readonly now?: () => number;
+}
+declare const VERIFIED_EXTERNAL_APPROVAL: unique symbol;
+export type ExternalApprovalOutcome = {
+    readonly status: "missing" | "pending" | "cancelled" | "expired" | "used";
+} | {
+    readonly status: "approved";
+    readonly [VERIFIED_EXTERNAL_APPROVAL]: true;
+};
+/**
+ * An opt-in primitive, not an HTTP route or effect executor. Page adapters must
+ * supply the authenticated principal, enforce CSRF, and keep the capsule in a
+ * URL fragment or POST body, never a server-visible URL query or application log.
+ * Applications must recheck permissions/freshness and retain effect idempotency.
+ */
+export declare function createExternalApprovalBroker(options: ExternalApprovalOptions): Readonly<{
+    prepare(value: ExternalApprovalProposal): Promise<{
+        capsule: string;
+        expiresAt: number;
+    }>;
+    review(token: string, principalId: string): Promise<{
+        principalId: string;
+        scopeId: string;
+        tool: string;
+        input: z.core.util.JSONType;
+        effect: z.core.util.JSONType;
+        formSchema: z.core.util.JSONType;
+    }>;
+    decide(token: string, principalId: string, decision: "approve" | "cancel"): Promise<{
+        readonly status: "approved" | "cancelled";
+    }>;
+    consume(value: ExternalApprovalProposal): Promise<ExternalApprovalOutcome>;
+}>;
+export {};
+//# sourceMappingURL=external-approval.d.ts.map

package/dist/external-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-approval.d.ts","sourceRoot":"","sources":["../src/external-approval.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,QAAA,MAAM,cAAc;;;;;;;kBAOlB,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtE,QAAA,MAAM,YAAY;;;;;;;;;kBAIhB,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC;AAE5E,mFAAmF;AACnF,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IAC1D,cAAc,CACZ,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,sBAAsB,GAAG,IAAI,EACvC,WAAW,EAAE,sBAAsB,GAClC,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,OAAO,CAAC,MAAM,0BAA0B,EAAE,OAAO,MAAM,CAAC;AACxD,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,MAAM,CAAA;CAAE,GAC7E;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,CAAC,0BAA0B,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC;AA0BjF;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,uBAAuB;mBAwFpD,wBAAwB;;;;kBAezB,MAAM,eAAe,MAAM;;;;;;;;kBAK3B,MAAM,eAAe,MAAM,YAAY,SAAS,GAAG,QAAQ;;;mBAS1D,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC;GAanF"}

package/dist/external-approval.js

@@ -0,0 +1,215 @@
+import { createCipheriv, createDecipheriv, createHmac, randomBytes } from "node:crypto";
+import { z } from "zod";
+const proposalSchema = z.strictObject({
+    principalId: z.string().min(1).max(512),
+    scopeId: z.string().min(1).max(512),
+    tool: z.string().min(1).max(128),
+    input: z.json(),
+    effect: z.json(),
+    formSchema: z.json(),
+});
+const recordSchema = z.strictObject({
+    capsuleDigest: z.string().regex(/^[a-f0-9]{64}$/),
+    expiresAt: z.number().int().positive(),
+    state: z.enum(["pending", "approved", "cancelled", "consumed"]),
+});
+const capsuleSchema = z.strictObject({
+    version: z.literal(1),
+    issuedAt: z.number().int().nonnegative(),
+    expiresAt: z.number().int().positive(),
+    nonce: z.string().regex(/^[a-f0-9]{32}$/),
+    proposal: proposalSchema,
+});
+const aad = Buffer.from("emseepea.external-approval.v1");
+function invalid() {
+    throw new Error("External approval is unavailable or invalid");
+}
+function canonical(value, depth = 0) {
+    if (depth > 32)
+        invalid();
+    if (value === null || typeof value === "string" || typeof value === "boolean")
+        return JSON.stringify(value);
+    if (typeof value === "number" && Number.isFinite(value))
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map((item) => canonical(item, depth + 1)).join(",")}]`;
+    if (typeof value === "object" && value !== null && Object.getPrototypeOf(value) === Object.prototype) {
+        return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${canonical(value[key], depth + 1)}`).join(",")}}`;
+    }
+    return invalid();
+}
+/**
+ * An opt-in primitive, not an HTTP route or effect executor. Page adapters must
+ * supply the authenticated principal, enforce CSRF, and keep the capsule in a
+ * URL fragment or POST body, never a server-visible URL query or application log.
+ * Applications must recheck permissions/freshness and retain effect idempotency.
+ */
+export function createExternalApprovalBroker(options) {
+    const { key: configuredKey, store, lifetimeMs, maxCapsuleBytes, now: configuredClock } = options;
+    if (!(configuredKey instanceof Uint8Array) || configuredKey.byteLength !== 32 ||
+        !Number.isSafeInteger(lifetimeMs) || lifetimeMs <= 0 || lifetimeMs > 3_600_000 ||
+        !Number.isSafeInteger(maxCapsuleBytes) || maxCapsuleBytes <= 0 || maxCapsuleBytes > 131_072 ||
+        (configuredClock !== undefined && typeof configuredClock !== "function") ||
+        typeof store?.load !== "function" || typeof store?.compareAndSwap !== "function") {
+        throw new TypeError("External approval requires a 32-byte key, atomic store and bounded lifetime/size");
+    }
+    const key = Buffer.from(configuredKey);
+    const now = configuredClock ?? Date.now;
+    const timestamp = () => {
+        const value = now();
+        if (!Number.isSafeInteger(value) || value < 0)
+            invalid();
+        return value;
+    };
+    const digest = (domain, value) => createHmac("sha256", key).update(`${domain}\0${value}`).digest("hex");
+    const checkedProposal = (value) => {
+        // Bound nesting before recursive JSON schema validation, and freeze the
+        // serialized proposal before any asynchronous store operation.
+        const encoded = canonical(value);
+        if (Buffer.byteLength(encoded) > maxCapsuleBytes)
+            invalid();
+        const result = proposalSchema.safeParse(JSON.parse(encoded));
+        if (!result.success)
+            invalid();
+        return result.data;
+    };
+    const recordFor = async (id) => {
+        let value;
+        try {
+            value = await store.load(id);
+        }
+        catch {
+            return invalid();
+        }
+        if (value === null)
+            return null;
+        const result = recordSchema.safeParse(value);
+        if (!result.success)
+            invalid();
+        return result.data;
+    };
+    const transition = async (id, expected, next) => {
+        try {
+            const success = await store.compareAndSwap(id, expected, next);
+            if (typeof success !== "boolean")
+                invalid();
+            return success;
+        }
+        catch {
+            return invalid();
+        }
+    };
+    const proposalId = (value) => digest("proposal", canonical(value));
+    const seal = (value) => {
+        const iv = randomBytes(12);
+        const cipher = createCipheriv("aes-256-gcm", key, iv);
+        cipher.setAAD(aad);
+        const ciphertext = Buffer.concat([cipher.update(JSON.stringify(value), "utf8"), cipher.final()]);
+        const token = `1.${iv.toString("base64url")}.${ciphertext.toString("base64url")}.${cipher.getAuthTag().toString("base64url")}`;
+        if (Buffer.byteLength(token) > maxCapsuleBytes)
+            invalid();
+        return token;
+    };
+    const open = (token, principalId) => {
+        try {
+            if (typeof token !== "string" || Buffer.byteLength(token) > maxCapsuleBytes)
+                invalid();
+            const parts = token.split(".");
+            if (parts.length !== 4 || parts[0] !== "1")
+                invalid();
+            const decode = (value) => {
+                const bytes = Buffer.from(value, "base64url");
+                if (bytes.toString("base64url") !== value)
+                    invalid();
+                return bytes;
+            };
+            const iv = decode(parts[1]);
+            const ciphertext = decode(parts[2]);
+            const tag = decode(parts[3]);
+            if (iv.byteLength !== 12 || tag.byteLength !== 16)
+                invalid();
+            const decipher = createDecipheriv("aes-256-gcm", key, iv);
+            decipher.setAAD(aad);
+            decipher.setAuthTag(tag);
+            const text = Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf8");
+            const parsed = JSON.parse(text);
+            canonical(parsed);
+            const capsule = capsuleSchema.parse(parsed);
+            const at = timestamp();
+            if (capsule.proposal.principalId !== principalId || capsule.issuedAt > at ||
+                capsule.expiresAt <= at || capsule.expiresAt - capsule.issuedAt !== lifetimeMs)
+                invalid();
+            return capsule;
+        }
+        catch {
+            return invalid();
+        }
+    };
+    const current = async (token, principalId) => {
+        const capsule = open(token, principalId);
+        const id = proposalId(capsule.proposal);
+        const record = await recordFor(id);
+        if (!record || record.capsuleDigest !== digest("capsule", token) ||
+            record.expiresAt !== capsule.expiresAt || record.expiresAt <= timestamp())
+            invalid();
+        return { capsule, id, record };
+    };
+    return Object.freeze({
+        async prepare(value) {
+            const proposal = checkedProposal(value);
+            const id = proposalId(proposal);
+            const expected = await recordFor(id);
+            const at = timestamp();
+            // An active request (including cancellation/consumption) is terminal for
+            // this proposal. Restart explicitly after expiry; never silently renew it.
+            if (expected && expected.expiresAt > at)
+                invalid();
+            const expiresAt = at + lifetimeMs;
+            if (!Number.isSafeInteger(expiresAt))
+                invalid();
+            const capsule = seal({ version: 1, issuedAt: at, expiresAt, nonce: randomBytes(16).toString("hex"), proposal });
+            const record = { capsuleDigest: digest("capsule", capsule), expiresAt, state: "pending" };
+            if (!await transition(id, expected, record))
+                invalid();
+            return { capsule, expiresAt };
+        },
+        async review(token, principalId) {
+            const { capsule, record } = await current(token, principalId);
+            if (record.state !== "pending")
+                invalid();
+            return capsule.proposal;
+        },
+        async decide(token, principalId, decision) {
+            if (decision !== "approve" && decision !== "cancel")
+                invalid();
+            const { id, record } = await current(token, principalId);
+            if (record.state !== "pending")
+                invalid();
+            const state = decision === "approve" ? "approved" : "cancelled";
+            if (!await transition(id, record, { ...record, state }))
+                invalid();
+            if (record.expiresAt <= timestamp())
+                invalid();
+            return { status: state };
+        },
+        async consume(value) {
+            const proposal = checkedProposal(value);
+            const id = proposalId(proposal);
+            const record = await recordFor(id);
+            if (!record)
+                return { status: "missing" };
+            if (record.expiresAt <= timestamp())
+                return { status: "expired" };
+            if (record.state === "pending" || record.state === "cancelled")
+                return { status: record.state };
+            if (record.state === "consumed")
+                return { status: "used" };
+            if (!await transition(id, record, { ...record, state: "consumed" }))
+                return { status: "used" };
+            if (record.expiresAt <= timestamp())
+                return { status: "expired" };
+            return { status: "approved" };
+        },
+    });
+}
+//# sourceMappingURL=external-approval.js.map

package/dist/external-approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-approval.js","sourceRoot":"","sources":["../src/external-approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,cAAc,GAAG,CAAC,CAAC,YAAY,CAAC;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE;IACf,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE;IAChB,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE;CACrB,CAAC,CAAC;AAGH,MAAM,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;IAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;CAChE,CAAC,CAAC;AA0BH,MAAM,aAAa,GAAG,CAAC,CAAC,YAAY,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACzC,QAAQ,EAAE,cAAc;CACzB,CAAC,CAAC;AACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;AAEzD,SAAS,OAAO;IACd,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAC1C,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,EAAE,CAAC;IAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5G,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClG,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QACrG,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAE,KAAiC,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC5J,CAAC;IACD,OAAO,OAAO,EAAE,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,OAAgC;IAC3E,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC;IACjG,IAAI,CAAC,CAAC,aAAa,YAAY,UAAU,CAAC,IAAI,aAAa,CAAC,UAAU,KAAK,EAAE;QACzE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,IAAI,UAAU,GAAG,SAAS;QAC9E,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,eAAe,IAAI,CAAC,IAAI,eAAe,GAAG,OAAO;QAC3F,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,eAAe,KAAK,UAAU,CAAC;QACxE,OAAO,KAAK,EAAE,IAAI,KAAK,UAAU,IAAI,OAAO,KAAK,EAAE,cAAc,KAAK,UAAU,EAAE,CAAC;QACrF,MAAM,IAAI,SAAS,CAAC,kFAAkF,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,eAAe,IAAI,IAAI,CAAC,GAAG,CAAC;IACxC,MAAM,SAAS,GAAG,GAAG,EAAE;QACrB,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,KAAK,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxH,MAAM,eAAe,GAAG,CAAC,KAA+B,EAAE,EAAE;QAC1D,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,eAAe;YAAE,OAAO,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,KAAK,EAAE,EAAU,EAAE,EAAE;QACrC,IAAI,KAAoC,CAAC;QACzC,IAAI,CAAC;YAAC,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;QAAC,CAAC;QACjE,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,KAAK,EAAE,EAAU,EAAE,QAAuC,EAAE,IAA4B,EAAE,EAAE;QAC7G,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC/D,IAAI,OAAO,OAAO,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;YAC5C,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;QAAC,CAAC;IAC/B,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,KAA+B,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7F,MAAM,IAAI,GAAG,CAAC,KAAoC,EAAE,EAAE;QACpD,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjG,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/H,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,eAAe;YAAE,OAAO,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,WAAmB,EAAE,EAAE;QAClD,IAAI,CAAC;YACH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,eAAe;gBAAE,OAAO,EAAE,CAAC;YACvF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,OAAO,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;gBAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;gBAC9C,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK;oBAAE,OAAO,EAAE,CAAC;gBACrD,OAAO,KAAK,CAAC;YACf,CAAC,CAAC;YACF,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;YAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;YACrC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;YAC9B,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE,IAAI,GAAG,CAAC,UAAU,KAAK,EAAE;gBAAE,OAAO,EAAE,CAAC;YAC7D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAC1D,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7F,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,SAAS,CAAC,MAAM,CAAC,CAAC;YAClB,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;YACvB,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,KAAK,WAAW,IAAI,OAAO,CAAC,QAAQ,GAAG,EAAE;gBACrE,OAAO,CAAC,SAAS,IAAI,EAAE,IAAI,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,UAAU;gBAAE,OAAO,EAAE,CAAC;YAC9F,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;QAAC,CAAC;IAC/B,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,EAAE,KAAa,EAAE,WAAmB,EAAE,EAAE;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC;YAC5D,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,SAAS,EAAE;YAAE,OAAO,EAAE,CAAC;QACzF,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;IACjC,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,OAAO,CAAC,KAA+B;YAC3C,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YACxC,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;YACrC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;YACvB,yEAAyE;YACzE,2EAA2E;YAC3E,IAAI,QAAQ,IAAI,QAAQ,CAAC,SAAS,GAAG,EAAE;gBAAE,OAAO,EAAE,CAAC;YACnD,MAAM,SAAS,GAAG,EAAE,GAAG,UAAU,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;gBAAE,OAAO,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;YAChH,MAAM,MAAM,GAA2B,EAAE,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YAClH,IAAI,CAAC,MAAM,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC;gBAAE,OAAO,EAAE,CAAC;YACvD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,WAAmB;YAC7C,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAC9D,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;YAC1C,OAAO,OAAO,CAAC,QAAQ,CAAC;QAC1B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,WAAmB,EAAE,QAA8B;YAC7E,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAC/D,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YACzD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;YAChE,IAAI,CAAC,MAAM,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC;gBAAE,OAAO,EAAE,CAAC;YACnE,IAAI,MAAM,CAAC,SAAS,IAAI,SAAS,EAAE;gBAAE,OAAO,EAAE,CAAC;YAC/C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAW,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAA+B;YAC3C,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YACxC,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,SAAS,IAAI,SAAS,EAAE;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAClE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YAChG,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAC3D,IAAI,CAAC,MAAM,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAC/F,IAAI,MAAM,CAAC,SAAS,IAAI,SAAS,EAAE;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAClE,OAAO,EAAE,MAAM,EAAE,UAAU,EAA6B,CAAC;QAC3D,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@emseepea/server",
-  "version": "0.19.0",
+  "version": "0.20.0",
   "description": "Fastify-first framework for Model Context Protocol 2026-07-28 servers over Streamable HTTP",
   "license": "MIT",
   "repository": {
@@ -27,6 +27,10 @@
     "./http": {
       "types": "./dist/http.d.ts",
       "import": "./dist/http.js"
+    },
+    "./external-approval": {
+      "types": "./dist/external-approval.d.ts",
+      "import": "./dist/external-approval.js"
     }
   },
   "files": [
@@ -44,7 +48,7 @@
     "@modelcontextprotocol/fastify": "2.0.0",
     "@modelcontextprotocol/node": "2.0.0",
     "@modelcontextprotocol/server": "2.0.0",
-    "fastify": "5.12.1",
+    "fastify": "5.12.5",
     "zod": "4.4.3"
   },
   "engines": {