@evilstar9527/tool-bridge 0.1.0

package/dist/sdk/worker.js

@@ -0,0 +1,2940 @@
+import { a as e, c as t, i as n, n as r, o as i, r as a, s as o, t as s } from "./chunks/errors-DJj3RaDk.js";
+import { createRemoteJWKSet as c, jwtVerify as l } from "jose";
+//#region src/worker/tb/util.ts
+var u = "2025-11-25", d = "tool-bridge", f = "draft", p = 1e6, m = 5e3;
+function h(e, t = {}) {
+	let n = new Headers(t.headers);
+	return n.set("Content-Type", "application/json; charset=utf-8"), new Response(JSON.stringify(e, null, 2), {
+		...t,
+		headers: n
+	});
+}
+function g(e, t = {}) {
+	let n = new Headers(t.headers);
+	return n.set("Content-Type", n.get("Content-Type") ?? "text/plain; charset=utf-8"), new Response(e, {
+		...t,
+		headers: n
+	});
+}
+function _(e) {
+	return !!e && typeof e == "object" && !Array.isArray(e);
+}
+function v(e, t) {
+	let n = e[t];
+	return typeof n == "string" && n.length > 0 ? n : void 0;
+}
+function y(e) {
+	if (!_(e)) return;
+	let t = {};
+	for (let [n, r] of Object.entries(e)) typeof r == "string" && (t[n] = r);
+	return t;
+}
+function b(e) {
+	if (Array.isArray(e)) return e.filter((e) => typeof e == "string");
+}
+function x(e) {
+	return e.replace(/\s+/g, " ").trim();
+}
+function S(e) {
+	return e instanceof Error ? e.message : String(e);
+}
+async function C(e, t) {
+	if (!e.body) return "";
+	let n = e.body.getReader(), r = new TextDecoder(), i = 0, a = "";
+	for (;;) {
+		let { done: e, value: o } = await n.read();
+		if (e) return a + r.decode();
+		if (i += o.byteLength, i > t) throw Error("Response body exceeded the maximum size.");
+		a += r.decode(o, { stream: !0 });
+	}
+}
+async function ee(e) {
+	try {
+		return await C(e, 8e3);
+	} catch {
+		return "";
+	}
+}
+//#endregion
+//#region src/worker/tb/registry.ts
+var w = "/htbp";
+function te(e) {
+	return ne(e.MCP_SERVERS_JSON || "{}");
+}
+function ne(e) {
+	let t = JSON.parse(e || "{}");
+	if (_(t) && (t.type === "directory" || Array.isArray(t.children))) {
+		let e = ie({
+			id: "root",
+			...t
+		}, "root");
+		if (e.kind !== "directory") throw Error("Root tree node must be a directory.");
+		return T(e), e;
+	}
+	let n = {
+		kind: "directory",
+		id: "root",
+		title: "Tool Bridge",
+		children: re(t)
+	};
+	return T(n), n;
+}
+function re(e) {
+	let t = [];
+	if (Array.isArray(e)) {
+		for (let n of e) t.push(oe(n));
+		return t;
+	}
+	if (_(e)) for (let [n, r] of Object.entries(e)) t.push(oe({
+		id: n,
+		..._(r) ? r : {}
+	}));
+	return t;
+}
+function ie(e, t) {
+	if (!_(e)) throw Error(`Tree node at '${t}' must be an object.`);
+	let n = v(e, "type") || (e.children ? "directory" : "mcp");
+	switch (n) {
+		case "directory": return ae(e, t);
+		case "mcp": return oe(e);
+		case "http": return ce(e, t);
+		case "remote": return ue(e, t);
+		case "mount": return de(e, t);
+		case "builtin": return fe(e, t);
+		default: throw Error(`Unknown tree node type '${n}' at '${t}'.`);
+	}
+}
+function ae(e, t) {
+	let n = v(e, "id") || v(e, "name");
+	if (!n) throw Error(`Directory node at '${t}' is missing id/name.`);
+	let r = (Array.isArray(e.children) ? e.children : []).map((e, r) => ie(e, `${t}/${n}[${r}]`));
+	return he(r, `${t}/${n}`), {
+		kind: "directory",
+		id: n,
+		title: v(e, "title") || v(e, "name") || n,
+		summary: v(e, "summary") || v(e, "description"),
+		children: r
+	};
+}
+function oe(e) {
+	if (!_(e)) throw Error("MCP server config must be an object.");
+	let t = v(e, "id") || v(e, "name"), n = v(e, "endpoint") || v(e, "url") || v(e, "baseUrl");
+	if (!t) throw Error("MCP server config is missing id/name.");
+	if (!n) throw Error(`MCP server '${t}' is missing endpoint.`);
+	return {
+		kind: "mcp",
+		id: t,
+		title: v(e, "name") || t,
+		endpoint: n,
+		description: v(e, "description"),
+		headers: y(e.headers),
+		allowedTools: b(e.allowedTools) ?? b(e.allowed_tools),
+		namespace: v(e, "namespace"),
+		toolOverrides: se(e.toolOverrides ?? e.tool_overrides)
+	};
+}
+function se(e) {
+	if (!_(e)) return;
+	let t = {};
+	for (let [n, r] of Object.entries(e)) _(r) && (t[n] = {
+		hide: r.hide === !0,
+		rename: v(r, "rename"),
+		description: v(r, "description"),
+		effect: me(r.effect),
+		scope: v(r, "scope"),
+		confirm: r.confirm === !0 ? !0 : void 0
+	});
+	return Object.keys(t).length > 0 ? t : void 0;
+}
+function ce(e, t) {
+	let n = v(e, "id") || v(e, "name");
+	if (!n) throw Error(`HTTP node at '${t}' is missing id/name.`);
+	let r = (Array.isArray(e.endpoints) ? e.endpoints : []).map((e, r) => le(e, `${t}/${n}[${r}]`));
+	if (r.length === 0) throw Error(`HTTP node '${n}' must declare at least one endpoint.`);
+	return he(r.map((e) => ({ id: e.name })), `${t}/${n}`), {
+		kind: "http",
+		id: n,
+		title: v(e, "title") || v(e, "name") || n,
+		summary: v(e, "summary") || v(e, "description"),
+		endpoints: r
+	};
+}
+function le(e, t) {
+	if (!_(e)) throw Error(`HTTP endpoint at '${t}' must be an object.`);
+	let n = v(e, "name"), r = v(e, "method"), i = v(e, "url");
+	if (!n) throw Error(`HTTP endpoint at '${t}' is missing name.`);
+	if (!r) throw Error(`HTTP endpoint '${n}' is missing method.`);
+	if (!i) throw Error(`HTTP endpoint '${n}' is missing url.`);
+	return {
+		name: n,
+		method: r.toUpperCase(),
+		url: i,
+		description: v(e, "description"),
+		inputSchema: e.inputSchema,
+		outputSchema: e.outputSchema,
+		example: e.example,
+		headers: y(e.headers),
+		effect: me(e.effect),
+		scope: v(e, "scope"),
+		confirm: e.confirm === !0 ? !0 : void 0
+	};
+}
+function ue(e, t) {
+	let n = v(e, "id") || v(e, "name");
+	if (!n) throw Error(`Remote node at '${t}' is missing id/name.`);
+	let r = v(e, "helpUrl") || v(e, "help_url") || v(e, "url");
+	if (!r) throw Error(`Remote node '${n}' is missing helpUrl.`);
+	return {
+		kind: "remote",
+		id: n,
+		title: v(e, "title") || v(e, "name") || n,
+		summary: v(e, "summary") || v(e, "description"),
+		helpUrl: r,
+		headers: y(e.headers)
+	};
+}
+function de(e, t) {
+	let n = v(e, "id") || v(e, "name");
+	if (!n) throw Error(`Mount node at '${t}' is missing id/name.`);
+	let r = v(e, "bucket") || v(e, "binding");
+	if (!r) throw Error(`Mount node '${n}' is missing bucket binding name.`);
+	return {
+		kind: "mount",
+		id: n,
+		title: v(e, "title") || v(e, "name") || n,
+		summary: v(e, "summary") || v(e, "description"),
+		bucket: r,
+		prefix: v(e, "prefix"),
+		description: v(e, "description")
+	};
+}
+function fe(e, t) {
+	let n = v(e, "id") || v(e, "name");
+	if (!n) throw Error(`Builtin node at '${t}' is missing id/name.`);
+	let r = _(e.builtin) ? e.builtin : e, i = (Array.isArray(r.tools) ? r.tools : []).map((e, r) => pe(e, `${t}/${n}[${r}]`));
+	if (i.length === 0) throw Error(`Builtin node '${n}' must declare at least one tool.`);
+	return he(i.map((e) => ({ id: e.name })), `${t}/${n}`), {
+		kind: "builtin",
+		id: n,
+		title: v(e, "title") || v(e, "name") || n,
+		summary: v(e, "summary") || v(e, "description"),
+		description: v(e, "description"),
+		tools: i
+	};
+}
+function pe(e, t) {
+	if (!_(e)) throw Error(`Builtin tool at '${t}' must be an object.`);
+	let n = v(e, "name"), r = v(e, "handler");
+	if (!n) throw Error(`Builtin tool at '${t}' is missing name.`);
+	if (!r) throw Error(`Builtin tool '${n}' is missing handler.`);
+	return {
+		name: n,
+		handler: r,
+		description: v(e, "description"),
+		inputSchema: e.inputSchema,
+		outputSchema: e.outputSchema,
+		effect: me(e.effect),
+		scope: v(e, "scope"),
+		confirm: e.confirm === !0 ? !0 : void 0
+	};
+}
+function me(e) {
+	if (e === "read" || e === "write" || e === "destructive" || e === "external") return e;
+}
+function he(e, t) {
+	let n = /* @__PURE__ */ new Set();
+	for (let r of e) {
+		if (n.has(r.id)) throw Error(`Duplicate sibling id '${r.id}' under '${t}'.`);
+		n.add(r.id);
+	}
+}
+function ge(e, t) {
+	return ie(e, t);
+}
+function T(e) {
+	if (e.kind === "directory") for (let t of e.children) Object.defineProperty(t, "parent", {
+		value: e,
+		enumerable: !1,
+		writable: !0,
+		configurable: !0
+	}), T(t);
+}
+function _e(e) {
+	let t = [], n = e;
+	for (; n && n.parent;) t.unshift(n.id), n = n.parent;
+	return t.length === 0 ? w : `${w}/${t.map(encodeURIComponent).join("/")}`;
+}
+function E(e, t) {
+	let n = e;
+	for (let e = 0; e < t.length; e += 1) {
+		let r = t[e];
+		if (n.kind !== "directory") return {
+			node: n,
+			sub: t.slice(e)
+		};
+		let i = n.children.find((e) => e.id === r);
+		if (!i) return;
+		n = i;
+	}
+	return {
+		node: n,
+		sub: []
+	};
+}
+//#endregion
+//#region src/worker/tb/audit.ts
+var ve = 168 * 3600, ye = 0x9184e72a000;
+function be(e) {
+	return !!e.TENANTS && e.AUDIT_MODE !== "off";
+}
+function xe(e) {
+	let t = e.headers.get("X-TB-Trace-Id");
+	return t && /^[A-Za-z0-9._-]{1,128}$/.test(t) ? t : crypto.randomUUID();
+}
+function Se(e) {
+	if (e === void 0) return;
+	let t = 0;
+	try {
+		t = JSON.stringify(e)?.length ?? 0;
+	} catch {
+		t = 0;
+	}
+	return {
+		bytes: t,
+		keys: _(e) ? Object.keys(e).slice(0, 32) : void 0
+	};
+}
+function Ce(e) {
+	return e ?? "_global";
+}
+function we(e, t) {
+	let n = E(e, t);
+	if (!n) return {};
+	let r = n.node, i = {
+		tool: n.sub.length > 0 ? n.sub.join("/") : void 0,
+		provider: r.tbProviderId
+	}, a = n.sub[0];
+	if (a) {
+		if (r.kind === "http") {
+			let e = r.endpoints.find((e) => e.name === a);
+			i.effect = e?.effect, i.scope = e?.scope;
+		} else if (r.kind === "builtin") {
+			let e = r.tools.find((e) => e.name === a);
+			i.effect = e?.effect, i.scope = e?.scope;
+		} else if (r.kind === "mcp") {
+			let e = r.toolOverrides?.[a];
+			i.effect = e?.effect, i.scope = e?.scope;
+		}
+	}
+	return i;
+}
+async function Te(e) {
+	try {
+		let t = await e.clone().json();
+		return typeof t?.error?.code == "string" ? t.error.code : void 0;
+	} catch {
+		return;
+	}
+}
+async function Ee(e, t) {
+	if (!be(e)) return;
+	let n = e.TENANTS, r = String(ye - Date.parse(t.ts)).padStart(14, "0"), i = crypto.randomUUID().slice(0, 8), a = Number(e.AUDIT_TTL_SECONDS), o = Number.isFinite(a) && a >= 60 ? a : ve;
+	await n.put(`audit:${Ce(t.tenantId)}:${r}:${i}`, JSON.stringify(t), { expirationTtl: o });
+}
+function De(e, t, n) {
+	let r = Ee(e, n).catch(() => {});
+	return t?.waitUntil ? (t.waitUntil(r), Promise.resolve()) : r;
+}
+async function Oe(e, t, n) {
+	let r = new URL(e.url);
+	if (r.pathname !== "/api/audit/events") return;
+	if (e.method !== "GET") return o(405, "method_not_allowed", "Use GET /api/audit/events.");
+	if (!be(t)) return o(501, "not_supported", "Audit requires the TENANTS KV binding.");
+	if (!n.isAdmin && !n.tenantId) return o(403, "Forbidden", "Audit query requires an admin or tenant-bound key.");
+	let i = Math.min(Math.max(Number(r.searchParams.get("limit")) || 50, 1), 200), a = r.searchParams.get("tenant") ?? void 0, s = n.isAdmin ? a : Ce(n.tenantId), c = s ? `audit:${s}:` : "audit:", l = t.TENANTS, u = [], d;
+	for (; u.length < i;) {
+		let e = await l.list({
+			prefix: c,
+			cursor: d,
+			limit: Math.min(i - u.length, 100)
+		});
+		for (let t of e.keys) {
+			let e = await l.get(t.name, "json");
+			if (e && u.push(e), u.length >= i) break;
+		}
+		if (e.list_complete) break;
+		d = e.cursor;
+	}
+	return h({
+		scope: s ?? "all",
+		events: u
+	});
+}
+//#endregion
+//#region src/worker/tb/adapters/builtin.ts
+var ke = {
+	kind: "builtin",
+	async describe(e, t, n) {
+		if (n.length === 0) return {
+			htbp: "draft",
+			kind: "builtin",
+			title: e.title,
+			description: e.description,
+			cachable: !0,
+			resources: e.tools.map(Ae)
+		};
+		let r = je(e, n[0]);
+		return {
+			htbp: "draft",
+			kind: "builtin",
+			title: r.name,
+			description: r.description,
+			cachable: !0,
+			endpoint: {
+				method: "POST",
+				inputSchema: r.inputSchema ?? { type: "object" },
+				outputSchema: r.outputSchema,
+				example: {},
+				effect: r.effect,
+				scope: r.scope,
+				confirm: r.confirm
+			}
+		};
+	},
+	async call(e, t, n, r) {
+		if (n.length === 0) throw Error(`Builtin node '${e.id}' requires a tool: call POST {path}/{tool}.`);
+		let i = je(e, n[0]), a = (t.builtinHandlers ?? {})[i.handler];
+		if (!a) throw Error(`Builtin tool '${i.name}' references handler '${i.handler}', which the host did not register.`);
+		return a(Me(r), t);
+	}
+};
+function Ae(e) {
+	return {
+		name: e.name,
+		path: `./${encodeURIComponent(e.name)}`,
+		description: e.description ? x(e.description) : void 0
+	};
+}
+function je(e, t) {
+	let r = e.tools.find((e) => e.name === t);
+	if (!r) throw new n(`Tool '${t}' is not exposed by builtin node '${e.id}'.`);
+	return r;
+}
+function Me(e) {
+	return e && typeof e == "object" && !Array.isArray(e) && "arguments" in e ? e.arguments ?? {} : e ?? {};
+}
+//#endregion
+//#region src/worker/tb/materialize.ts
+function Ne(e, t) {
+	let n = {};
+	for (let [r, i] of Object.entries(t ?? {})) n[r] = Pe(e, i);
+	return n;
+}
+function Pe(e, t) {
+	return t.startsWith("$env:") ? Fe(e, t.slice(5)) : t.replace(/\$\{([A-Z0-9_]+)\}/g, (t, n) => Fe(e, n));
+}
+function Fe(e, t) {
+	let n = e[t];
+	if (typeof n != "string" || n.length === 0) throw Error(`Environment variable '${t}' is required for header substitution.`);
+	return n;
+}
+function Ie(e, t, n) {
+	let r = new URL(t);
+	if (r.protocol !== "https:" && e.ALLOW_INSECURE_MCP_HTTP !== "true") throw Error(`${n} must use https://.`);
+	return r.toString();
+}
+function Le(e, t) {
+	let n = (e.HTBP_REMOTE_ALLOWLIST || "").split(",").map((e) => e.trim().toLowerCase()).filter((e) => e.length > 0);
+	if (n.length === 0) return;
+	let r = new URL(t).hostname.toLowerCase();
+	if (!n.some((e) => r === e || r.endsWith(`.${e}`))) throw Error(`Remote host '${r}' is not in HTBP_REMOTE_ALLOWLIST.`);
+}
+//#endregion
+//#region src/worker/tb/remote-client.ts
+var Re = [
+	"directory",
+	"mcp",
+	"http",
+	"remote"
+];
+async function ze(t, n, r) {
+	let a = Ie(t, n, `Remote help URL '${n}'`);
+	Le(t, a);
+	let o = new Headers(Ne(t, r));
+	o.set("Accept", "application/json");
+	let s = new AbortController(), c = setTimeout(() => s.abort(), m);
+	try {
+		let e = await fetch(a, {
+			method: "GET",
+			headers: o,
+			signal: s.signal
+		});
+		if (!e.ok) throw new i(`Remote help '${a}' returned ${e.status}: ${await ee(e)}`, {
+			upstream: a,
+			status: e.status
+		});
+		return Be(await C(e, p));
+	} catch (t) {
+		throw t instanceof e ? t : new i(`Remote help '${a}' failed: ${S(t)}`, { upstream: a });
+	} finally {
+		clearTimeout(c);
+	}
+}
+function Be(e) {
+	let t = JSON.parse(e);
+	if (!_(t)) throw Error("Remote help payload is not a JSON object.");
+	return {
+		htbp: "draft",
+		kind: typeof t.kind == "string" && Re.includes(t.kind) ? t.kind : "directory",
+		title: typeof t.title == "string" ? t.title : "Remote TB Server",
+		description: typeof t.description == "string" ? t.description : void 0,
+		cachable: t.cachable === !0,
+		resources: Ve(t.resources),
+		endpoint: _(t.endpoint) ? He(t.endpoint) : void 0
+	};
+}
+function Ve(e) {
+	if (!Array.isArray(e)) return;
+	let t = [];
+	for (let n of e) _(n) && typeof n.name == "string" && typeof n.path == "string" && t.push({
+		name: n.name,
+		path: n.path,
+		description: typeof n.description == "string" ? n.description : void 0
+	});
+	return t;
+}
+function He(e) {
+	let t = (Array.isArray(e.tools) ? e.tools : void 0)?.filter((e) => _(e) && typeof e.name == "string").map((e) => ({
+		name: e.name,
+		description: typeof e.description == "string" ? e.description : void 0,
+		inputSchema: e.inputSchema,
+		outputSchema: e.outputSchema
+	}));
+	return {
+		method: typeof e.method == "string" ? e.method : "POST",
+		inputSchema: e.inputSchema,
+		outputSchema: e.outputSchema,
+		example: e.example,
+		tools: t
+	};
+}
+//#endregion
+//#region src/worker/tb/adapters/directory.ts
+var Ue = {
+	kind: "directory",
+	async describe(e, t, r) {
+		if (r.length > 0) throw new n(`No child '${r[0]}' under directory '${e.id}'.`);
+		let i = await Promise.all(e.children.map((e) => We(e, t)));
+		return {
+			htbp: "draft",
+			kind: "directory",
+			title: e.title,
+			description: e.summary,
+			cachable: !0,
+			resources: i
+		};
+	},
+	async call(e) {
+		throw Error(`Directory '${e.id}' is not callable; descend to an end-path resource.`);
+	}
+};
+async function We(e, t) {
+	let n = {
+		name: e.title,
+		path: `./${encodeURIComponent(e.id)}`,
+		description: Ke(e)
+	};
+	return e.kind === "remote" && await Ge(e, t, n), n;
+}
+async function Ge(e, t, n) {
+	try {
+		let r = await ze(t.env, e.helpUrl, e.headers);
+		r.title && (n.name = r.title), r.description && (n.description = r.description);
+	} catch {}
+}
+function Ke(e) {
+	return e.kind === "directory" || e.kind === "http" || e.kind === "remote" ? e.summary : e.description;
+}
+//#endregion
+//#region src/worker/tb/adapters/http.ts
+var qe = {
+	kind: "http",
+	async describe(e, t, n) {
+		if (n.length === 0) return {
+			htbp: "draft",
+			kind: "http",
+			title: e.title,
+			description: e.summary,
+			cachable: !0,
+			resources: e.endpoints.map(Je)
+		};
+		let r = Ye(e, n[0]);
+		return {
+			htbp: "draft",
+			kind: "http",
+			title: r.name,
+			description: r.description,
+			cachable: !0,
+			endpoint: {
+				method: r.method,
+				inputSchema: r.inputSchema ?? {},
+				outputSchema: r.outputSchema,
+				example: r.example,
+				effect: r.effect,
+				scope: r.scope,
+				confirm: r.confirm
+			}
+		};
+	},
+	async call(e, t, n, r) {
+		if (n.length === 0) throw Error(`HTTP node '${e.id}' requires an endpoint name to call.`);
+		let a = Ye(e, n[0]), o = Ie(t.env, a.url, `HTTP endpoint '${a.name}'`);
+		Le(t.env, o);
+		let s = new Headers(Ne(t.env, a.headers)), c = a.method !== "GET" && a.method !== "HEAD";
+		c && !s.has("Content-Type") && s.set("Content-Type", "application/json"), s.set("Accept", s.get("Accept") ?? "application/json"), s.has("User-Agent") || s.set("User-Agent", "tool-bridge");
+		let l = new AbortController(), u = setTimeout(() => l.abort(), m);
+		try {
+			let t;
+			try {
+				t = await fetch(o, {
+					method: a.method,
+					headers: s,
+					body: c ? JSON.stringify(r ?? {}) : void 0,
+					signal: l.signal
+				});
+			} catch (t) {
+				throw new i(`HTTP endpoint '${a.name}' fetch failed: ${S(t)}`, {
+					upstream: e.id,
+					endpoint: a.name
+				});
+			}
+			if (!t.ok) throw new i(`HTTP endpoint '${a.name}' returned ${t.status}: ${await ee(t)}`, {
+				upstream: e.id,
+				endpoint: a.name,
+				status: t.status
+			});
+			let n = await C(t, p), u = t.headers.get("Content-Type") ?? "";
+			try {
+				return u.includes("application/json") && n ? JSON.parse(n) : n;
+			} catch (t) {
+				throw new i(`HTTP endpoint '${a.name}' returned malformed JSON: ${S(t)}`, {
+					upstream: e.id,
+					endpoint: a.name
+				});
+			}
+		} finally {
+			clearTimeout(u);
+		}
+	}
+};
+function Je(e) {
+	return {
+		name: e.name,
+		path: `./${encodeURIComponent(e.name)}`,
+		description: e.description ? x(e.description) : void 0
+	};
+}
+function Ye(e, t) {
+	let r = e.endpoints.find((e) => e.name === t);
+	if (!r) throw new n(`Endpoint '${t}' not found on HTTP node '${e.id}'.`);
+	return r;
+}
+//#endregion
+//#region src/worker/tb/mcp-client.ts
+function Xe(e, t) {
+	return {
+		id: t.id,
+		endpoint: Ie(e, t.endpoint, `MCP endpoint for '${t.id}'`),
+		allowedTools: t.allowedTools,
+		resolvedHeaders: Ne(e, t.headers)
+	};
+}
+async function Ze(e) {
+	let t = await $e(e, "tools/list", {}), n = (_(t) && Array.isArray(t.tools) ? t.tools : []).map(ct).filter(Boolean);
+	if (!e.allowedTools || e.allowedTools.length === 0) return n;
+	let r = new Set(e.allowedTools);
+	return n.filter((e) => r.has(e.name));
+}
+async function Qe(e, t, r) {
+	if (e.allowedTools && e.allowedTools.length > 0 && !e.allowedTools.includes(t)) throw new n(`Tool '${t}' is not allowed for server '${e.id}'.`);
+	return $e(e, "tools/call", {
+		name: t,
+		arguments: _(r) ? r : {}
+	});
+}
+async function $e(t, n, r) {
+	try {
+		let e = await et(t);
+		try {
+			return await tt(t, e.sessionId, "notifications/initialized", {}), (await nt(t, e.sessionId, n, r)).result;
+		} finally {
+			e.sessionId && await st(t, e.sessionId).catch(() => {});
+		}
+	} catch (r) {
+		throw r instanceof e ? r : new i(`MCP server '${t.id}': ${S(r)}`, {
+			upstream: t.id,
+			method: n
+		});
+	}
+}
+async function et(e) {
+	return { sessionId: (await nt(e, void 0, "initialize", {
+		protocolVersion: u,
+		capabilities: {},
+		clientInfo: {
+			name: d,
+			version: f
+		}
+	})).sessionId };
+}
+async function tt(e, t, n, r) {
+	let i = await fetch(e.endpoint, {
+		method: "POST",
+		headers: rt(e, t),
+		body: JSON.stringify({
+			jsonrpc: "2.0",
+			method: n,
+			params: r
+		})
+	});
+	if (i.status !== 202 && !i.ok) throw Error(`MCP notification '${n}' failed with HTTP ${i.status}.`);
+}
+async function nt(e, t, n, r) {
+	let i = crypto.randomUUID(), a = await fetch(e.endpoint, {
+		method: "POST",
+		headers: rt(e, t),
+		body: JSON.stringify({
+			jsonrpc: "2.0",
+			id: i,
+			method: n,
+			params: r
+		})
+	});
+	if (!a.ok) throw Error(`MCP request '${n}' failed with HTTP ${a.status}: ${await ee(a)}`);
+	let o = await it(a, i);
+	if (o.error) throw Error(`MCP error ${o.error.code}: ${o.error.message}`);
+	return {
+		result: o.result,
+		sessionId: a.headers.get("MCP-Session-Id") ?? void 0
+	};
+}
+function rt(e, t) {
+	let n = new Headers(e.resolvedHeaders);
+	return n.set("Accept", "application/json, text/event-stream"), n.set("Content-Type", "application/json"), n.set("MCP-Protocol-Version", u), t && n.set("MCP-Session-Id", t), n;
+}
+async function it(e, t) {
+	if ((e.headers.get("Content-Type") ?? "").includes("text/event-stream")) return at(e, t);
+	let n = await C(e, p), r = JSON.parse(n);
+	if (r.id !== t) throw Error(`Unexpected MCP response id '${String(r.id)}'.`);
+	return r;
+}
+async function at(e, t) {
+	if (!e.body) throw Error("MCP server returned an empty SSE response.");
+	let n = e.body.getReader(), r = new TextDecoder(), i = "", a = [], o = 0;
+	for (;;) {
+		let { done: e, value: s } = await n.read();
+		if (e) break;
+		if (o += s.byteLength, o > 4e6) throw Error("MCP SSE response exceeded the maximum size.");
+		i += r.decode(s, { stream: !0 });
+		let c = i.indexOf("\n");
+		for (; c >= 0;) {
+			let e = i.slice(0, c);
+			i = i.slice(c + 1);
+			let n = e.endsWith("\r") ? e.slice(0, -1) : e;
+			if (n === "") {
+				let e = ot(a);
+				if (a = [], e && e.id === t) return e;
+			} else n.startsWith("data:") && a.push(n.slice(5).trimStart());
+			c = i.indexOf("\n");
+		}
+	}
+	let s = ot(a);
+	if (s && s.id === t) return s;
+	throw Error(`MCP SSE stream ended before response '${t}' was received.`);
+}
+function ot(e) {
+	if (e.length === 0) return;
+	let t = e.join("\n").trim();
+	if (t.startsWith("{")) return JSON.parse(t);
+}
+async function st(e, t) {
+	await fetch(e.endpoint, {
+		method: "DELETE",
+		headers: rt(e, t)
+	});
+}
+function ct(e) {
+	if (!(!_(e) || typeof e.name != "string")) return {
+		name: e.name,
+		description: typeof e.description == "string" ? e.description : void 0,
+		inputSchema: e.inputSchema,
+		outputSchema: e.outputSchema,
+		annotations: e.annotations
+	};
+}
+//#endregion
+//#region src/worker/tb/virtualize.ts
+function lt(e, t) {
+	let n = e.toolOverrides ?? {}, r = [], i = /* @__PURE__ */ new Map();
+	for (let a of t) {
+		let t = n[a.name];
+		if (t?.hide) continue;
+		let o = dt(e.namespace, t?.rename ?? a.name);
+		i.set(o, a.name), r.push({
+			name: o,
+			description: t?.description ?? a.description,
+			inputSchema: a.inputSchema,
+			outputSchema: a.outputSchema,
+			effect: t?.effect ?? a.effect,
+			scope: t?.scope ?? a.scope,
+			confirm: t?.confirm ?? a.confirm
+		});
+	}
+	return {
+		exposed: r,
+		reverse: i
+	};
+}
+function ut(e, t, r) {
+	let { reverse: i } = lt(e, t), a = i.get(r);
+	if (!a) throw new n(`Tool '${r}' is not exposed by node '${e.id}'.`);
+	return a;
+}
+function dt(e, t) {
+	return e ? `${e}__${t}` : t;
+}
+//#endregion
+//#region src/worker/tb/adapters/mcp.ts
+var ft = {
+	kind: "mcp",
+	async describe(e, t, r) {
+		let { exposed: i } = lt(e, (await Ze(Xe(t.env, e))).map(mt));
+		if (r.length === 0) return {
+			htbp: "draft",
+			kind: "mcp",
+			title: e.title,
+			description: e.description,
+			cachable: !0,
+			resources: i.map(pt)
+		};
+		let a = r[0], o = i.find((e) => e.name === a);
+		if (!o) throw new n(`Tool '${a}' is not exposed by node '${e.id}'.`);
+		return {
+			htbp: "draft",
+			kind: "mcp",
+			title: o.name,
+			description: o.description,
+			cachable: !0,
+			endpoint: {
+				method: "POST",
+				inputSchema: o.inputSchema ?? { type: "object" },
+				outputSchema: o.outputSchema,
+				example: {},
+				effect: o.effect,
+				scope: o.scope,
+				confirm: o.confirm
+			}
+		};
+	},
+	async call(e, t, n, r) {
+		if (n.length === 0) throw Error(`MCP node '${e.id}' requires a tool: call POST {path}/{tool}.`);
+		let i = Xe(t.env, e);
+		return Qe(i, ut(e, (await Ze(i)).map(mt), n[0]), ht(r));
+	}
+};
+function pt(e) {
+	return {
+		name: e.name,
+		path: `./${encodeURIComponent(e.name)}`,
+		description: e.description
+	};
+}
+function mt(e) {
+	return {
+		name: e.name,
+		description: e.description ? x(e.description) : void 0,
+		inputSchema: e.inputSchema,
+		outputSchema: e.outputSchema
+	};
+}
+function ht(e) {
+	return e && typeof e == "object" && !Array.isArray(e) && "arguments" in e ? e.arguments ?? {} : e ?? {};
+}
+//#endregion
+//#region src/worker/tb/storage-r2.ts
+var gt = "/", _t = 1e6;
+function vt(e, t) {
+	let n = e[t];
+	if (!n || typeof n.list != "function") throw Error(`R2 bucket binding '${t}' is not configured on this Worker.`);
+	return {
+		async list(e) {
+			let t = e && !e.endsWith(gt) ? `${e}${gt}` : e, r = await n.list({
+				prefix: t,
+				delimiter: gt
+			}), i = r.delimitedPrefixes.map((e) => ({
+				name: yt(e.replace(/\/$/, ""), t),
+				key: e,
+				isDir: !0
+			})), a = r.objects.filter((e) => e.key !== t).map((e) => ({
+				name: yt(e.key, t),
+				key: e.key,
+				isDir: !1
+			}));
+			return [...i, ...a];
+		},
+		async get(e) {
+			let t = await n.get(e);
+			if (!t) return null;
+			if (typeof t.size == "number" && t.size > _t) throw Error(`Object '${e}' exceeds the maximum readable size.`);
+			return {
+				key: e,
+				body: await t.text(),
+				contentType: t.httpMetadata?.contentType,
+				size: t.size
+			};
+		}
+	};
+}
+function yt(e, t) {
+	return t && e.startsWith(t) ? e.slice(t.length) : e;
+}
+//#endregion
+//#region src/worker/tb/adapters/mount.ts
+var bt = {
+	kind: "mount",
+	async describe(e, t, r) {
+		let i = xt(t, e), a = St(e, r), o = await i.get(a);
+		if (o) return {
+			htbp: "draft",
+			kind: "mount",
+			title: r[r.length - 1] ?? e.title,
+			description: `File ${a} (${o.contentType ?? "application/octet-stream"})`,
+			cachable: !0,
+			endpoint: {
+				method: "GET",
+				inputSchema: {},
+				outputSchema: { type: "string" },
+				example: {}
+			}
+		};
+		let s = await i.list(a);
+		if (s.length === 0 && r.length > 0) throw new n(`No file or folder at '${a}'.`);
+		return {
+			htbp: "draft",
+			kind: "mount",
+			title: r.length === 0 ? e.title : r[r.length - 1] ?? e.title,
+			description: e.description,
+			cachable: !0,
+			resources: s.map(wt)
+		};
+	},
+	async call(e, t, r) {
+		let i = xt(t, e), a = St(e, r), o = await i.get(a);
+		if (!o) throw new n(`File '${a}' not found.`);
+		return {
+			key: o.key,
+			contentType: o.contentType,
+			content: o.body
+		};
+	}
+};
+function xt(e, t) {
+	return vt(e.env, t.bucket);
+}
+function St(e, t) {
+	return [e.prefix ? Ct(e.prefix) : "", t.map((e) => decodeURIComponent(e)).join("/")].filter((e) => e.length > 0).join("/");
+}
+function Ct(e) {
+	return e.replace(/^\/+|\/+$/g, "");
+}
+function wt(e) {
+	return {
+		name: e.name,
+		path: `./${encodeURIComponent(e.name)}`,
+		description: e.isDir ? "folder" : "file"
+	};
+}
+//#endregion
+//#region src/worker/tb/adapters/index.ts
+var Tt = {
+	directory: Ue,
+	mcp: ft,
+	http: qe,
+	remote: {
+		kind: "remote",
+		async describe(e, t) {
+			let n = await ze(t.env, e.helpUrl, e.headers);
+			return {
+				...n,
+				kind: "remote",
+				title: n.title || e.title
+			};
+		},
+		async call(e) {
+			throw Error(`Remote node '${e.id}' is a federation pointer; call the remote TB Server directly at its own endpoint.`);
+		}
+	},
+	mount: bt,
+	builtin: ke
+};
+function Et(e) {
+	let t = Tt[e.kind];
+	if (!t) throw Error(`No adapter registered for node kind '${e.kind}'.`);
+	return t;
+}
+//#endregion
+//#region src/worker/tb/crawl.ts
+var Dt = {
+	maxDepth: 8,
+	maxNodes: 200
+}, Ot = 8, kt = 200;
+function At(e) {
+	return {
+		maxDepth: Ut(e?.maxDepth ?? Dt.maxDepth, 1, Ot),
+		maxNodes: Ut(e?.maxNodes ?? Dt.maxNodes, 1, kt)
+	};
+}
+async function jt(e, t, n, r, i = Dt) {
+	let a = {
+		env: e,
+		root: t,
+		authMode: r,
+		opts: i,
+		visited: /* @__PURE__ */ new Set(),
+		count: 0
+	};
+	return n.url ? Nt(a, n.url, 0) : Mt(a, It(n.path ?? ""), 0);
+}
+async function Mt(e, t, n) {
+	let r = E(e.root, t), i = t.length === 0 ? w : `${w}/${t.join("/")}`;
+	if (!r) return {
+		kind: "directory",
+		path: i,
+		helpUrl: `${i}/~help`,
+		children: [],
+		error: "Resource not found."
+	};
+	let a = i, o = {
+		env: e.env,
+		authMode: e.authMode,
+		basePath: _e(r.node)
+	};
+	if (r.node.kind === "remote") return Nt(e, r.node.helpUrl, n, a);
+	let s;
+	try {
+		s = await Et(r.node).describe(r.node, o, r.sub);
+	} catch (e) {
+		return {
+			kind: r.node.kind,
+			path: a,
+			helpUrl: `${a}/~help`,
+			children: [],
+			error: Ht(e)
+		};
+	}
+	return Pt(e, Ft(s, a, `${a}/~help`), s, n, (t) => Mt(e, t, n + 1), a);
+}
+async function Nt(e, t, n, r) {
+	let i = Vt(t), a = r ?? t, o;
+	try {
+		o = await ze(e.env, t, void 0);
+	} catch (e) {
+		return {
+			kind: "remote",
+			path: a,
+			helpUrl: t,
+			children: [],
+			error: Ht(e)
+		};
+	}
+	let s = Ft(o, a, t);
+	return s.kind = "remote", Pt(e, s, o, n, (t, r) => Nt(e, r, n + 1), i, t);
+}
+async function Pt(e, t, n, r, i, a, o) {
+	if (n.endpoint) return t.endpoint = n.endpoint, t;
+	if (e.visited.has(a) || (e.visited.add(a), r >= e.opts.maxDepth)) return t.truncated = !0, t;
+	for (let r of n.resources ?? []) {
+		if (e.count >= e.opts.maxNodes) {
+			t.truncated = !0;
+			break;
+		}
+		if (e.count += 1, o) {
+			let e = zt(o, r.path);
+			t.children.push(await i([], e));
+		} else {
+			let e = Lt(t.path, r.path);
+			t.children.push(await i(e, ""));
+		}
+	}
+	return t;
+}
+function Ft(e, t, n) {
+	return {
+		kind: e.kind,
+		path: t,
+		title: e.title,
+		description: e.description,
+		helpUrl: n,
+		children: []
+	};
+}
+function It(e) {
+	return e.replace(/^\/?htbp\/?/, "").split("/").map((e) => e.trim()).filter((e) => e.length > 0);
+}
+function Lt(e, t) {
+	let n = It(e);
+	return t.startsWith("../") ? [...n.slice(0, -1), ...Rt(t.slice(3))] : t.startsWith("./") ? [...n, ...Rt(t.slice(2))] : [...n, ...Rt(t)];
+}
+function Rt(e) {
+	return e.split("/").filter((e) => e.length > 0);
+}
+function zt(e, t) {
+	let n = e.replace(/\/~help$/, "/");
+	return new URL(t.endsWith("/~help") ? t : `${Bt(t)}/~help`, n).toString();
+}
+function Bt(e) {
+	return e.endsWith("/") ? e.slice(0, -1) : e;
+}
+function Vt(e) {
+	try {
+		return new URL(e).toString();
+	} catch {
+		return e;
+	}
+}
+function Ht(e) {
+	return e instanceof Error ? e.message : String(e);
+}
+function Ut(e, t, n) {
+	return Number.isFinite(e) ? Math.max(t, Math.min(n, Math.floor(e))) : t;
+}
+//#endregion
+//#region src/worker/tb/entities.ts
+var Wt = "_global";
+function D(e) {
+	return e ?? Wt;
+}
+function O() {
+	return (/* @__PURE__ */ new Date()).toISOString();
+}
+function k(e) {
+	if (!e.TENANTS) throw new s("Provider entities require the TENANTS KV binding.");
+	return e.TENANTS;
+}
+function Gt(e) {
+	return !!e.TENANTS;
+}
+var Kt = [
+	"builtin",
+	"first-party",
+	"verified",
+	"community",
+	"federated"
+], qt = [
+	"active",
+	"suspended",
+	"retired"
+], Jt = [
+	"draft",
+	"published",
+	"deprecated",
+	"retired"
+], Yt = /^[a-z0-9][a-z0-9._-]{0,63}$/;
+function A(e, t) {
+	if (!e || !Yt.test(e)) throw new s(`${t} must match ${Yt} (lowercase alphanumeric, ".", "_", "-").`);
+	return e;
+}
+async function j(e, t) {
+	return await k(e).get(`provider:${t}`, "json");
+}
+async function M(e, t) {
+	await k(e).put(`provider:${t.id}`, JSON.stringify(t));
+}
+async function Xt(e, t) {
+	await k(e).delete(`provider:${t}`);
+}
+async function Zt(e) {
+	return hn(e, "provider:");
+}
+function Qt(e, t) {
+	if (!_(e)) throw new s("Provider must be a JSON object.");
+	let n = t?.id ?? A(v(e, "id"), "provider id"), r = v(e, "trustTier") ?? t?.trustTier ?? "community";
+	if (!Kt.includes(r)) throw new s(`trustTier must be one of ${Kt.join(", ")}.`);
+	let i = v(e, "status") ?? t?.status ?? "active";
+	if (!qt.includes(i)) throw new s(`status must be one of ${qt.join(", ")}.`);
+	return {
+		id: n,
+		displayName: v(e, "displayName") ?? t?.displayName ?? n,
+		contact: v(e, "contact") ?? t?.contact,
+		trustTier: r,
+		status: i,
+		createdAt: t?.createdAt ?? O(),
+		updatedAt: O()
+	};
+}
+async function N(e, t, n) {
+	return await k(e).get(`pub:${t}:${n}`, "json");
+}
+async function P(e, t) {
+	await k(e).put(`pub:${t.providerId}:${t.pubId}`, JSON.stringify(t));
+}
+async function $t(e, t, n) {
+	await k(e).delete(`pub:${t}:${n}`);
+}
+async function F(e, t) {
+	return hn(e, `pub:${t}:`);
+}
+function en(e, t, n) {
+	if (!_(e)) throw new s("Publication must be a JSON object.");
+	let r = n?.pubId ?? A(v(e, "pubId") ?? v(e, "id"), "pubId"), i = v(e, "status") ?? n?.status ?? "draft";
+	if (!Jt.includes(i)) throw new s(`status must be one of ${Jt.join(", ")}.`);
+	let a = _(e.binding) ? e.binding : n?.binding;
+	if (!a) throw new s("Publication binding is required.");
+	let o = _(e.shaping) ? e.shaping : n?.shaping, c = tn(e.semantics) ?? n?.semantics, l = {
+		providerId: t,
+		pubId: r,
+		version: v(e, "version") ?? n?.version ?? "0.1.0",
+		binding: a,
+		shaping: o,
+		semantics: c,
+		status: i,
+		createdAt: n?.createdAt ?? O(),
+		updatedAt: O()
+	};
+	return ln(l, "binding-check"), l;
+}
+function tn(e) {
+	if (!_(e)) return;
+	let t = {};
+	for (let [n, r] of Object.entries(e)) {
+		if (!_(r)) continue;
+		let e = r.effect;
+		t[n] = {
+			effect: e === "read" || e === "write" || e === "destructive" || e === "external" ? e : void 0,
+			scope: v(r, "scope"),
+			confirm: r.confirm === !0 ? !0 : void 0
+		};
+	}
+	return Object.keys(t).length > 0 ? t : void 0;
+}
+async function nn(e, t, n) {
+	return await k(e).get(`placement:${D(t)}:${n}`, "json");
+}
+async function rn(e, t) {
+	await k(e).put(`placement:${D(t.tenantId)}:${t.id}`, JSON.stringify(t));
+}
+async function an(e, t, n) {
+	await k(e).delete(`placement:${D(t)}:${n}`);
+}
+async function on(e, t) {
+	return hn(e, `placement:${D(t)}:`);
+}
+function sn(e) {
+	let t = (e ?? "").split("/").map((e) => e.trim()).filter((e) => e.length > 0);
+	if (t.length === 0) throw new s("Placement path is required.");
+	for (let e of t) if (e.startsWith("~") || e === "." || e === ".." || !Yt.test(e)) throw new s(`Placement path segment '${e}' is not allowed.`);
+	return t;
+}
+function cn() {
+	return `plc_${[...crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(6))].map((e) => e.toString(16).padStart(2, "0")).join("")}`;
+}
+function ln(e, t) {
+	let n = {
+		...un(e.binding),
+		id: t
+	};
+	return e.shaping?.namespace && (n.namespace = e.shaping.namespace), e.shaping?.toolOverrides && (n.toolOverrides = {
+		..._(n.toolOverrides) ? n.toolOverrides : {},
+		...e.shaping.toolOverrides
+	}), dn(n, e.semantics), ge(n, `pub:${e.providerId}:${e.pubId}`);
+}
+function un(e) {
+	return JSON.parse(JSON.stringify(e));
+}
+function dn(e, t) {
+	if (!t) return;
+	let n = e.type ?? "mcp";
+	if (n === "mcp") {
+		let n = _(e.toolOverrides) ? { ...e.toolOverrides } : {};
+		for (let [e, r] of Object.entries(t)) n[e] = {
+			..._(n[e]) ? n[e] : {},
+			...r
+		};
+		e.toolOverrides = n;
+		return;
+	}
+	let r = n === "http" ? e.endpoints : n === "builtin" ? e.tools : void 0;
+	if (Array.isArray(r)) for (let e of r) _(e) && typeof e.name == "string" && t[e.name] && Object.assign(e, t[e.name]);
+}
+async function fn(e, t, n) {
+	let r = {
+		applied: 0,
+		skipped: []
+	};
+	if (!Gt(e)) return r;
+	let i = await on(e, n);
+	if (i.length === 0) return r;
+	let a = /* @__PURE__ */ new Map(), o = /* @__PURE__ */ new Map();
+	for (let n of i) {
+		if (!n.enabled) {
+			r.skipped.push({
+				placementId: n.id,
+				reason: "disabled"
+			});
+			continue;
+		}
+		let { providerId: i, pubId: s, version: c } = n.pubRef;
+		a.has(i) || a.set(i, await j(e, i));
+		let l = a.get(i);
+		if (!l || l.status !== "active") {
+			r.skipped.push({
+				placementId: n.id,
+				reason: `provider ${l ? l.status : "missing"}`
+			});
+			continue;
+		}
+		let u = `${i}:${s}`;
+		o.has(u) || o.set(u, await N(e, i, s));
+		let d = o.get(u);
+		if (!d || d.status !== "published" && d.status !== "deprecated") {
+			r.skipped.push({
+				placementId: n.id,
+				reason: `publication ${d ? d.status : "missing"}`
+			});
+			continue;
+		}
+		if (c && pn(c) !== pn(d.version)) {
+			r.skipped.push({
+				placementId: n.id,
+				reason: `version pin ${c} != ${d.version}`
+			});
+			continue;
+		}
+		let f, p;
+		try {
+			f = sn(n.path), p = ln(d, f[f.length - 1]);
+		} catch (e) {
+			r.skipped.push({
+				placementId: n.id,
+				reason: e instanceof Error ? e.message : "invalid"
+			});
+			continue;
+		}
+		Object.defineProperty(p, "tbProviderId", {
+			value: l.id,
+			enumerable: !1,
+			writable: !0,
+			configurable: !0
+		}), mn(t, f.slice(0, -1), p) ? r.applied += 1 : r.skipped.push({
+			placementId: n.id,
+			reason: "path conflict"
+		});
+	}
+	return r.applied > 0 && T(t), r;
+}
+function pn(e) {
+	return e.split(".")[0] ?? e;
+}
+function mn(e, t, n) {
+	let r = e;
+	for (let e of t) {
+		let t = r.children.find((t) => t.id === e);
+		if (t || (t = {
+			kind: "directory",
+			id: e,
+			title: e,
+			children: []
+		}, r.children.push(t)), t.kind !== "directory") return !1;
+		r = t;
+	}
+	return r.children.some((e) => e.id === n.id) ? !1 : (r.children.push(n), !0);
+}
+async function hn(e, t) {
+	let n = k(e), r = [], i;
+	do {
+		let e = await n.list({
+			prefix: t,
+			cursor: i
+		}), a = await Promise.all(e.keys.map((e) => n.get(e.name, "json")));
+		for (let e of a) e && r.push(e);
+		i = e.list_complete ? void 0 : e.cursor;
+	} while (i);
+	return r;
+}
+//#endregion
+//#region src/worker/tb/tenant.ts
+function gn(e) {
+	return !!e.TENANTS && e.TENANT_MODE === "true";
+}
+async function _n(e) {
+	let t = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(e));
+	return [...new Uint8Array(t)].map((e) => e.toString(16).padStart(2, "0")).join("");
+}
+var vn = [
+	"agent",
+	"provider",
+	"host",
+	"admin",
+	"service"
+];
+async function yn(e, t) {
+	if (!e.TENANTS) return null;
+	let n = await _n(t), r = await e.TENANTS.get(`apikey:${n}`, "json");
+	if (!_(r)) return null;
+	let i = vn.includes(r.principal) ? r.principal : "agent", a = {
+		principal: i,
+		tenantId: typeof r.tenantId == "string" ? r.tenantId : void 0,
+		providerId: typeof r.providerId == "string" ? r.providerId : void 0,
+		hostId: typeof r.hostId == "string" ? r.hostId : void 0,
+		label: typeof r.label == "string" ? r.label : void 0,
+		createdAt: typeof r.createdAt == "string" ? r.createdAt : void 0,
+		expiresAt: typeof r.expiresAt == "string" ? r.expiresAt : void 0
+	};
+	if (a.expiresAt && Date.parse(a.expiresAt) < Date.now()) return null;
+	if (a.tenantId) {
+		let t = await e.TENANTS.get(`tenant:${a.tenantId}`);
+		if (t) a.root = ne(t);
+		else if (i === "agent") return null;
+	} else if (i === "agent") return null;
+	return a;
+}
+function bn(e) {
+	return `${e}_${[...crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(16))].map((e) => e.toString(16).padStart(2, "0")).join("")}`;
+}
+async function xn(e, t, n) {
+	if (!e.TENANTS) throw Error("API keys require the TENANTS KV binding.");
+	if (n.expiresAt && Number.isNaN(Date.parse(n.expiresAt))) throw new s("expiresAt must be a valid date string.");
+	await e.TENANTS.put(`apikey:${await _n(t)}`, JSON.stringify(n));
+}
+async function Sn(e) {
+	if (!e.TENANTS) return [];
+	let t = [], n;
+	do {
+		let r = await e.TENANTS.list({
+			prefix: "apikey:",
+			cursor: n
+		});
+		for (let n of r.keys) {
+			let r = await e.TENANTS.get(n.name, "json");
+			r && t.push({
+				hash: n.name.slice(7),
+				record: r
+			});
+		}
+		n = r.list_complete ? void 0 : r.cursor;
+	} while (n);
+	return t;
+}
+//#endregion
+//#region src/worker/tb/host-api.ts
+var Cn = /^[a-z0-9][a-z0-9._-]{0,63}$/, wn = "mnt-", Tn = "mnt_";
+function I(e) {
+	if (!e.TENANTS) throw new s("Hosts require the TENANTS KV binding.");
+	return e.TENANTS;
+}
+async function En(e, t) {
+	return await I(e).get(`host:${t}`, "json");
+}
+async function Dn(e, t, r) {
+	let i = new URL(e.url).pathname;
+	if (!i.startsWith("/api/hosts")) return;
+	if (!Gt(t)) return o(501, "not_supported", "Host registration requires the TENANTS KV binding.");
+	if (i === "/api/hosts" && e.method === "POST") return On(r, "Registering hosts"), An(e, t);
+	let s = /^\/api\/hosts\/([^/]+)(?:\/(.*))?$/.exec(i);
+	if (!s) return o(404, "not_found", "API route not found.");
+	let c = decodeURIComponent(s[1] ?? ""), l = s[2] ?? "";
+	if (!r.isAdmin && !(r.principal === "host" && r.hostId === c)) throw new a(`Not allowed to access host '${c}'.`);
+	let u = await En(t, c);
+	if (!u) throw new n(`Host '${c}' not found.`);
+	if (l === "" && e.method === "GET") return h({ host: u });
+	if (l === "keys" && e.method === "POST") {
+		On(r, "Minting host keys");
+		let n = await kn(e), i = bn("tbk"), a = {
+			principal: "host",
+			hostId: c,
+			tenantId: u.tenantId,
+			providerId: u.providerId,
+			label: v(n, "label"),
+			createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+			expiresAt: v(n, "expiresAt")
+		};
+		return await xn(t, i, a), h({
+			key: i,
+			record: a
+		}, { status: 201 });
+	}
+	return l === "mounts:sync" && e.method === "POST" ? Mn(e, t, u) : o(404, "not_found", "API route not found.");
+}
+function On(e, t) {
+	if (!e.isAdmin) throw new a(`${t} requires an admin key.`);
+}
+async function kn(e) {
+	let t = await e.json().catch(() => void 0);
+	if (!_(t)) throw new s("Request body must be a JSON object.");
+	return t;
+}
+async function An(e, t) {
+	let n = await kn(e), r = v(n, "id");
+	if (!r || !Cn.test(r)) throw new s(`Host id must match ${Cn}.`);
+	if (await En(t, r)) return o(409, "conflict", `Host '${r}' already exists.`);
+	let i = v(n, "tenantId") ?? r, a = (/* @__PURE__ */ new Date()).toISOString(), c = {
+		id: r,
+		tenantId: i,
+		providerId: r,
+		confirmDelegated: n.confirmDelegated === !0 ? !0 : void 0,
+		createdAt: a,
+		updatedAt: a
+	};
+	return await j(t, r) || await M(t, {
+		id: r,
+		displayName: v(n, "displayName") ?? r,
+		trustTier: "first-party",
+		status: "active",
+		createdAt: a,
+		updatedAt: a
+	}), await I(t).get(`tenant:${i}`) || await I(t).put(`tenant:${i}`, JSON.stringify({
+		type: "directory",
+		id: "root",
+		title: c.id,
+		children: []
+	})), await I(t).put(`host:${r}`, JSON.stringify(c)), h({ host: c }, { status: 201 });
+}
+function jn(e) {
+	return e.replace(/\//g, "-");
+}
+async function Mn(e, t, n) {
+	let r = await kn(e);
+	if (!Array.isArray(r.mounts)) throw new s("mounts must be an array of {path, binding}.");
+	let i = r.prune !== !1, a = (/* @__PURE__ */ new Date()).toISOString(), o = [], c = /* @__PURE__ */ new Set(), l = /* @__PURE__ */ new Set();
+	for (let e of r.mounts) {
+		if (!_(e)) throw new s("Each mount must be an object.");
+		let r = e;
+		if (typeof r.path != "string" || !_(r.binding)) throw new s("Each mount needs a path and a binding object.");
+		let i = jn(r.path), u = `${wn}${i}`;
+		await P(t, en({
+			pubId: u,
+			version: r.version ?? "0.1.0",
+			binding: r.binding,
+			shaping: r.shaping,
+			semantics: r.semantics,
+			status: "published"
+		}, n.providerId)), l.add(u);
+		let d = {
+			id: `${Tn}${i}`,
+			tenantId: n.tenantId,
+			path: r.path,
+			pubRef: {
+				providerId: n.providerId,
+				pubId: u
+			},
+			enabled: !0,
+			createdAt: a,
+			updatedAt: a
+		};
+		await rn(t, d), c.add(d.id), o.push(d);
+	}
+	let u = 0;
+	if (i) {
+		for (let e of await on(t, n.tenantId)) e.id.startsWith(Tn) && !c.has(e.id) && (await an(t, n.tenantId, e.id), u += 1);
+		for (let e of await F(t, n.providerId)) e.pubId.startsWith(wn) && !l.has(e.pubId) && await $t(t, n.providerId, e.pubId);
+	}
+	return await I(t).put(`host:${n.id}`, JSON.stringify({
+		...n,
+		updatedAt: a
+	})), h({
+		ok: !0,
+		applied: o.length,
+		removed: u,
+		placements: o
+	});
+}
+//#endregion
+//#region src/worker/tb/provider-api.ts
+var Nn = 1e6;
+async function L(e) {
+	let t = e.headers.get("Content-Length");
+	if (t && Number(t) > Nn) throw new s("Request body is too large.");
+	let n = await e.json().catch(() => void 0);
+	if (!_(n)) throw new s("Request body must be a JSON object.");
+	return n;
+}
+function Pn(e, t) {
+	if (!e.isAdmin && !(e.principal === "provider" && e.providerId === t)) throw new a(`Not allowed to access provider '${t}'.`);
+}
+function R(e, t) {
+	if (!e.isAdmin) throw new a(`${t} requires an admin key.`);
+}
+async function Fn(e, t, r) {
+	let i = new URL(e.url), s = i.pathname;
+	if (!s.startsWith("/api/providers") && !s.startsWith("/api/placements")) return;
+	if (!Gt(t)) return o(501, "not_supported", "Provider entities require the TENANTS KV binding.");
+	if (s === "/api/placements" && e.method === "GET") {
+		R(r, "Listing placements");
+		let e = i.searchParams.get("tenant"), n = !e || e === "_global" ? null : e;
+		return h({
+			tenantId: D(n),
+			placements: await on(t, n)
+		});
+	}
+	if (s === "/api/placements" && e.method === "POST") return R(r, "Writing placements"), In(e, t);
+	let c = /^\/api\/placements\/([^/]+)$/.exec(s);
+	if (c && e.method === "DELETE") return R(r, "Deleting placements"), Ln(e, t, decodeURIComponent(c[1] ?? ""), i);
+	if (s === "/api/providers" && e.method === "GET") {
+		if (r.isAdmin) return h({ providers: await Zt(t) });
+		if (r.principal === "provider" && r.providerId) {
+			let e = await j(t, r.providerId);
+			return h({ providers: e ? [e] : [] });
+		}
+		throw new a("Listing providers requires an admin or provider key.");
+	}
+	if (s === "/api/providers" && e.method === "POST") {
+		R(r, "Creating providers");
+		let n = Qt(await L(e));
+		return await j(t, n.id) ? o(409, "conflict", `Provider '${n.id}' already exists.`) : (await M(t, n), h({ provider: n }, { status: 201 }));
+	}
+	let l = /^\/api\/providers\/([^/]+)(?:\/(.*))?$/.exec(s);
+	if (!l) return o(404, "not_found", "API route not found.");
+	let u = decodeURIComponent(l[1] ?? ""), d = l[2] ?? "";
+	Pn(r, u);
+	let f = await j(t, u);
+	if (!f && !(d === "" && e.method === "PUT" && r.isAdmin)) throw new n(`Provider '${u}' not found.`);
+	if (d === "") {
+		if (e.method === "GET") return h({ provider: f });
+		if (e.method === "PUT") {
+			let n = await L(e), i = Qt(r.isAdmin ? n : {
+				displayName: n.displayName,
+				contact: n.contact
+			}, f ?? Qt({ id: u }));
+			return await M(t, i), h({ provider: i });
+		}
+		if (e.method === "DELETE") {
+			R(r, "Deleting providers");
+			let e = await F(t, u);
+			return e.length > 0 ? o(409, "conflict", `Provider '${u}' still has ${e.length} publication(s).`) : (await Xt(t, u), h({ ok: !0 }));
+		}
+	}
+	if (d === "keys" && e.method === "POST") {
+		R(r, "Minting provider keys");
+		let n = await L(e), i = bn("tbp"), a = {
+			principal: "provider",
+			providerId: u,
+			label: v(n, "label"),
+			createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+			expiresAt: v(n, "expiresAt")
+		};
+		return await xn(t, i, a), h({
+			key: i,
+			record: a
+		}, { status: 201 });
+	}
+	if (d === "pubs") {
+		if (e.method === "GET") return h({ publications: await F(t, u) });
+		if (e.method === "POST") {
+			let n = en(await L(e), u);
+			return await N(t, u, n.pubId) ? o(409, "conflict", `Publication '${n.pubId}' already exists.`) : (await P(t, n), h({ publication: n }, { status: 201 }));
+		}
+	}
+	let p = /^pubs\/([^/]+)(\/publish)?$/.exec(d);
+	if (p) {
+		let r = decodeURIComponent(p[1] ?? ""), i = await N(t, u, r);
+		if (p[2] === "/publish" && e.method === "POST") {
+			if (!i) throw new n(`Publication '${r}' not found.`);
+			let e = {
+				...i,
+				status: "published",
+				updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			return await P(t, e), h({ publication: e });
+		}
+		if (e.method === "GET") {
+			if (!i) throw new n(`Publication '${r}' not found.`);
+			return h({ publication: i });
+		}
+		if (e.method === "PUT") {
+			let n = en({
+				...await L(e),
+				pubId: r
+			}, u, i ?? void 0);
+			return await P(t, n), h({ publication: n }, { status: i ? 200 : 201 });
+		}
+		if (e.method === "DELETE") return await $t(t, u, r), h({ ok: !0 });
+	}
+	return o(404, "not_found", "API route not found.");
+}
+async function In(e, t) {
+	let n = await L(e), r = v(n, "tenantId") ?? null, i = sn(v(n, "path")), a = _(n.pubRef) ? n.pubRef : void 0, o = {
+		providerId: A(a && v(a, "providerId"), "pubRef.providerId"),
+		pubId: A(a && v(a, "pubId"), "pubRef.pubId"),
+		version: a ? v(a, "version") : void 0
+	};
+	if (!await j(t, o.providerId)) throw new s(`pubRef.providerId '${o.providerId}' does not exist.`);
+	if (!await N(t, o.providerId, o.pubId)) throw new s(`pubRef.pubId '${o.pubId}' does not exist under '${o.providerId}'.`);
+	let c = v(n, "id"), l = c ? await nn(t, r, c) : null, u = i.join("/"), d = {
+		id: l?.id ?? c ?? cn(),
+		tenantId: r,
+		path: u,
+		pubRef: o,
+		enabled: n.enabled !== !1,
+		createdAt: l?.createdAt ?? (/* @__PURE__ */ new Date()).toISOString(),
+		updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+	}, f = n.dryRun === !0 || new URL(e.url).searchParams.get("dryRun") === "true", p = l ? l.path === u ? "update" : "move" : "create", m = l && l.path !== u ? [l.path, u] : [u];
+	return f ? h({
+		dryRun: !0,
+		action: p,
+		placement: d,
+		affected: await Rn(t, r, m)
+	}) : (await rn(t, d), h({
+		placement: d,
+		action: p
+	}, { status: l ? 200 : 201 }));
+}
+async function Ln(e, t, r, i) {
+	let a = i.searchParams.get("tenant"), o = !a || a === "_global" ? null : a, s = await nn(t, o, r);
+	if (!s) throw new n(`Placement '${r}' not found in scope '${D(o)}'.`);
+	return i.searchParams.get("dryRun") === "true" ? h({
+		dryRun: !0,
+		action: "delete",
+		placement: s,
+		affected: await Rn(t, o, [s.path])
+	}) : (await an(t, o, r), h({ ok: !0 }));
+}
+async function Rn(e, t, n) {
+	return t === null ? {
+		tenantId: D(t),
+		paths: n,
+		grants: [],
+		note: "Global tree: affects every non-tenant caller of /htbp."
+	} : {
+		tenantId: t,
+		paths: n,
+		grants: (await Sn(e)).filter((e) => e.record.tenantId === t).map((e) => ({
+			keyHash: e.hash.slice(0, 12),
+			principal: e.record.principal ?? "agent",
+			label: e.record.label
+		}))
+	};
+}
+//#endregion
+//#region src/worker/tb/device.ts
+var zn = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/, Bn = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/, Vn = [
+	"exec.run",
+	"fs.read",
+	"logs.tail"
+], Hn = 3e4, z = 1e6, Un = /* @__PURE__ */ new Set([
+	"rm",
+	"mkfs",
+	"dd",
+	"shutdown",
+	"reboot",
+	"halt",
+	"sudo",
+	"su"
+]), Wn = [
+	/\brm\s+-[^\s]*r[^\s]*f\b.*(?:\s\/|\s\*)/,
+	/:\s*\(\s*\)\s*\{/,
+	/>\s*\/dev\/sd[a-z]/,
+	/\bcurl\b.*\|\s*(?:sh|bash)\b/,
+	/\bwget\b.*\|\s*(?:sh|bash)\b/
+];
+function B(e) {
+	if (!e.TENANTS) throw new s("Tunnel endpoints require the TENANTS KV binding.");
+	return e.TENANTS;
+}
+function Gn(e) {
+	return !!e.TENANTS;
+}
+async function V(e, t) {
+	return await B(e).get(`endpoint:${t}`, "json");
+}
+async function H(e, t) {
+	await B(e).put(`endpoint:${t.id}`, JSON.stringify(t));
+}
+async function Kn(e) {
+	let t = [], n;
+	do {
+		let r = await B(e).list({
+			prefix: "endpoint:",
+			cursor: n
+		});
+		for (let n of r.keys) {
+			let r = await B(e).get(n.name, "json");
+			r && t.push(r);
+		}
+		n = r.list_complete ? void 0 : r.cursor;
+	} while (n);
+	return t;
+}
+async function qn(e, t) {
+	return await B(e).get(`command-policy:${t}`, "json");
+}
+async function Jn(e, t) {
+	await B(e).put(`command-policy:${t.id}`, JSON.stringify(t));
+}
+async function Yn(e) {
+	let t = [], n;
+	do {
+		let r = await B(e).list({
+			prefix: "command-policy:",
+			cursor: n
+		});
+		for (let n of r.keys) {
+			let r = await B(e).get(n.name, "json");
+			r && t.push(r);
+		}
+		n = r.list_complete ? void 0 : r.cursor;
+	} while (n);
+	return t;
+}
+async function Xn(e, t, r) {
+	let i = new URL(e.url).pathname;
+	if (!i.startsWith("/api/endpoints") && !i.startsWith("/api/command-policies")) return;
+	if (!Gn(t)) return o(501, "not_supported", "Tunnel endpoints require the TENANTS KV binding.");
+	if (sr(r, "Managing tunnel endpoints"), i === "/api/endpoints") {
+		if (e.method === "GET") return h({ endpoints: await Kn(t) });
+		if (e.method === "POST") {
+			let n = cr(await U(e));
+			return await H(t, n), h({ endpoint: n }, { status: 201 });
+		}
+	}
+	let a = /^\/api\/endpoints\/([^/]+)$/.exec(i);
+	if (a) {
+		let r = decodeURIComponent(a[1] ?? ""), i = await V(t, r);
+		if (!i) throw new n(`Endpoint '${r}' not found.`);
+		if (e.method === "GET") return h({ endpoint: i });
+		if (e.method === "PUT") {
+			let n = cr(await U(e), i);
+			return await H(t, n), h({ endpoint: n });
+		}
+		if (e.method === "DELETE") {
+			let e = {
+				...i,
+				status: "revoked",
+				updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			return await H(t, e), h({ endpoint: e });
+		}
+	}
+	if (i === "/api/command-policies") {
+		if (e.method === "GET") return h({ policies: await Yn(t) });
+		if (e.method === "POST") {
+			let n = lr(await U(e));
+			return await Jn(t, n), h({ policy: n }, { status: 201 });
+		}
+	}
+	let s = /^\/api\/command-policies\/([^/]+)$/.exec(i);
+	if (s) {
+		let r = decodeURIComponent(s[1] ?? ""), i = await qn(t, r);
+		if (!i) throw new n(`Command policy '${r}' not found.`);
+		if (e.method === "GET") return h({ policy: i });
+		if (e.method === "PUT") {
+			let n = lr(await U(e), i);
+			return await Jn(t, n), h({ policy: n });
+		}
+		if (e.method === "DELETE") return await B(t).delete(`command-policy:${r}`), h({ ok: !0 });
+	}
+	return o(404, "not_found", "API route not found.");
+}
+async function Zn(e, t, n) {
+	let r = new URL(e.url);
+	if (r.pathname.startsWith("/tunnel/")) {
+		if (!Gn(t)) return o(501, "not_supported", "Tunnel endpoints require the TENANTS KV binding.");
+		if (e.method !== "POST") return o(405, "method_not_allowed", "Use POST for tunnel control-plane calls.");
+		if (r.pathname === "/tunnel/connect") {
+			let r = await fr(e, t), i = await n?.connect?.(r), a = (/* @__PURE__ */ new Date()).toISOString(), o = i?.sessionId ?? crypto.randomUUID();
+			return await H(t, {
+				...r,
+				status: "online",
+				sessionId: o,
+				lastSeenAt: a,
+				updatedAt: a
+			}), h({
+				ok: !0,
+				endpointId: r.id,
+				sessionId: o,
+				capabilities: r.capabilities
+			});
+		}
+		if (r.pathname === "/tunnel/heartbeat") {
+			let r = await pr(t, await U(e));
+			await n?.heartbeat?.(r);
+			let i = (/* @__PURE__ */ new Date()).toISOString();
+			return await H(t, {
+				...r,
+				lastSeenAt: i,
+				updatedAt: i
+			}), h({
+				ok: !0,
+				endpointId: r.id
+			});
+		}
+		if (r.pathname === "/tunnel/capabilities") {
+			let n = await U(e), r = await pr(t, n), i = ur(n.capabilities, r.capabilities);
+			if (i.some((e) => !r.capabilities.includes(e))) throw new a("Endpoint cannot report capabilities outside its registered maximum.");
+			let o = (/* @__PURE__ */ new Date()).toISOString();
+			return await H(t, {
+				...r,
+				activeCapabilities: i,
+				lastSeenAt: o,
+				updatedAt: o
+			}), h({
+				ok: !0,
+				endpointId: r.id,
+				capabilities: i
+			});
+		}
+		return o(404, "not_found", "Tunnel route not found.");
+	}
+}
+async function Qn(e) {
+	let { env: t, principal: i, segments: o, isHelp: c, input: l, traceId: u, broker: d } = e;
+	if (o[0] !== "~device") throw new n("Device route not found.");
+	if (o.length === 1) {
+		if (!c) throw new s("Device root is describe-only; select /~device/{id}/{tool}.");
+		return {
+			response: h(await $n(t, i), { headers: { "Cache-Control": "private, max-age=30" } }),
+			audit: {}
+		};
+	}
+	let f = o[1], p = await V(t, f);
+	if (!p || p.status === "revoked") throw new n(`Endpoint '${f}' not found.`);
+	if (mr(i, p), o.length > 3) throw new n(`Device path '/${o.join("/")}' not found.`);
+	let m = o[2], g = m ?? yr(l), _ = {
+		tool: g,
+		provider: p.providerId,
+		effect: ar(g),
+		scope: or(g)
+	};
+	if (c) return {
+		response: h(m ? tr(p, m) : er(p), { headers: { "Cache-Control": "private, max-age=30" } }),
+		audit: _,
+		tenantId: p.tenantId
+	};
+	if (!g) throw new s("Device calls require a tool path or a body.tool field.");
+	if (g === "shell.run") throw new a("shell.run is not exposed by default.");
+	if (!Vn.includes(g)) throw new n(`Device tool '${g}' is not exposed.`);
+	if (!rr(p).includes(g)) throw new n(`Device endpoint '${p.id}' does not expose '${g}'.`);
+	if (p.status !== "online" || !p.sessionId || !d) throw new r(`Endpoint '${p.id}' is offline.`);
+	let v = await hr(t, p, g, l);
+	p.id;
+	let y = await d.dispatch(p, {
+		endpointId: p.id,
+		sessionId: p.sessionId,
+		tool: g,
+		traceId: u,
+		input: v.input,
+		deadlineMs: v.deadlineMs,
+		maxOutputBytes: v.maxOutputBytes
+	});
+	return {
+		response: h({
+			resource: `/htbp/${o.join("/")}`,
+			result: y
+		}),
+		audit: _,
+		tenantId: p.tenantId
+	};
+}
+async function $n(e, t) {
+	return {
+		htbp: "draft",
+		kind: "directory",
+		title: "Devices",
+		cachable: !1,
+		resources: (await Kn(e)).filter((e) => e.status !== "revoked" && (t.isAdmin || !e.tenantId || e.tenantId === t.tenantId)).map((e) => ({
+			name: e.id,
+			path: `./${encodeURIComponent(e.id)}`,
+			description: e.label
+		}))
+	};
+}
+function er(e) {
+	return {
+		htbp: "draft",
+		kind: "builtin",
+		title: e.label ?? e.id,
+		description: `${e.kind} endpoint (${e.status})`,
+		cachable: !1,
+		resources: rr(e).map(nr)
+	};
+}
+function tr(e, t) {
+	if (!rr(e).includes(t)) throw new n(`Device endpoint '${e.id}' does not expose '${t}'.`);
+	return {
+		htbp: "draft",
+		kind: "builtin",
+		title: t,
+		cachable: !1,
+		endpoint: {
+			method: "POST",
+			inputSchema: ir(t),
+			outputSchema: { type: "object" },
+			effect: ar(t),
+			scope: or(t)
+		}
+	};
+}
+function nr(e) {
+	return {
+		name: e,
+		path: `./${encodeURIComponent(e)}`,
+		description: e === "exec.run" ? "Run a structured argv command" : e === "fs.read" ? "Read a file from the endpoint" : "Tail endpoint logs"
+	};
+}
+function rr(e) {
+	return e.activeCapabilities ?? e.capabilities;
+}
+function ir(e) {
+	return e === "exec.run" ? {
+		type: "object",
+		required: ["argv"],
+		properties: {
+			argv: {
+				type: "array",
+				items: { type: "string" },
+				minItems: 1
+			},
+			cwd: { type: "string" },
+			timeoutMs: { type: "number" },
+			maxOutputBytes: { type: "number" }
+		}
+	} : e === "fs.read" ? {
+		type: "object",
+		required: ["path"],
+		properties: {
+			path: { type: "string" },
+			maxBytes: { type: "number" }
+		}
+	} : {
+		type: "object",
+		properties: {
+			stream: { type: "string" },
+			lines: { type: "number" }
+		}
+	};
+}
+function ar(e) {
+	if (e) return e === "exec.run" ? "destructive" : "read";
+}
+function or(e) {
+	if (e) return e === "exec.run" ? "device:exec" : e === "fs.read" ? "device:fs.read" : "device:logs.tail";
+}
+function sr(e, t) {
+	if (!e.isAdmin) throw new a(`${t} requires an admin key.`);
+}
+async function U(e) {
+	let t = await e.json().catch(() => void 0);
+	if (!_(t)) throw new s("Request body must be a JSON object.");
+	return t;
+}
+function cr(e, t) {
+	let n = v(e, "id") ?? t?.id;
+	if (!n || !zn.test(n)) throw new s(`Endpoint id must match ${zn}.`);
+	let r = (/* @__PURE__ */ new Date()).toISOString(), i = ur(e.capabilities, t?.capabilities ?? ["exec.run"]), a = dr(v(e, "kind") ?? t?.kind ?? "generic"), o = v(e, "status") ?? t?.status ?? "offline", c = o === "online" || o === "offline" || o === "revoked" ? o : t?.status ?? "offline";
+	return {
+		id: n,
+		tenantId: v(e, "tenantId") ?? t?.tenantId,
+		providerId: v(e, "providerId") ?? t?.providerId,
+		kind: a,
+		label: v(e, "label") ?? t?.label,
+		capabilities: i,
+		activeCapabilities: t?.activeCapabilities,
+		status: c,
+		commandPolicyId: v(e, "commandPolicyId") ?? t?.commandPolicyId,
+		sessionId: t?.sessionId,
+		lastSeenAt: t?.lastSeenAt,
+		createdAt: t?.createdAt ?? r,
+		updatedAt: r
+	};
+}
+function lr(e, t) {
+	let n = v(e, "id") ?? t?.id;
+	if (!n || !Bn.test(n)) throw new s(`Command policy id must match ${Bn}.`);
+	let r = (/* @__PURE__ */ new Date()).toISOString();
+	return {
+		id: n,
+		defaultMode: e.defaultMode === "deny" || e.defaultMode === "allow" ? e.defaultMode : t?.defaultMode ?? "allow",
+		allowCommands: b(e.allowCommands) ?? t?.allowCommands,
+		denyCommands: b(e.denyCommands) ?? t?.denyCommands,
+		denyPatterns: b(e.denyPatterns) ?? t?.denyPatterns,
+		allowShell: typeof e.allowShell == "boolean" ? e.allowShell : t?.allowShell,
+		allowedCwdPrefixes: b(e.allowedCwdPrefixes) ?? t?.allowedCwdPrefixes,
+		maxTimeoutMs: W(e.maxTimeoutMs) ?? t?.maxTimeoutMs,
+		maxOutputBytes: W(e.maxOutputBytes) ?? t?.maxOutputBytes,
+		requireConfirmFor: b(e.requireConfirmFor) ?? t?.requireConfirmFor,
+		envAllowlist: b(e.envAllowlist) ?? t?.envAllowlist,
+		createdAt: t?.createdAt ?? r,
+		updatedAt: r
+	};
+}
+function ur(e, t) {
+	let n = (Array.isArray(e) ? e : t).filter((e) => typeof e == "string" && Vn.includes(e));
+	if (n.length === 0) throw new s("Endpoint capabilities must include at least one supported device tool.");
+	return [...new Set(n)];
+}
+function dr(e) {
+	if ([
+		"sandbox",
+		"k8s-pod",
+		"pc",
+		"browser-host",
+		"mobile",
+		"generic"
+	].includes(e)) return e;
+	throw new s(`Unsupported endpoint kind '${e}'.`);
+}
+function W(e) {
+	return typeof e == "number" && Number.isFinite(e) && e > 0 ? e : void 0;
+}
+async function fr(e, t) {
+	let r = v(await U(e), "endpointId") ?? e.headers.get("X-TB-Endpoint-Id") ?? void 0;
+	if (!r) throw new s("endpointId is required.");
+	let i = await V(t, r);
+	if (!i) throw new n(`Endpoint '${r}' not found.`);
+	if (i.status === "revoked") throw new a(`Endpoint '${r}' is revoked.`);
+	return i;
+}
+async function pr(e, t) {
+	let r = v(t, "endpointId"), i = v(t, "sessionId");
+	if (!r || !i) throw new s("endpointId and sessionId are required.");
+	let o = await V(e, r);
+	if (!o || o.status === "revoked") throw new n(`Endpoint '${r}' not found.`);
+	if (o.sessionId !== i) throw new a("Endpoint session is invalid.");
+	return o;
+}
+function mr(e, t) {
+	if (!e.isAdmin && !(t.tenantId && e.tenantId === t.tenantId)) throw new n(`Endpoint '${t.id}' not found.`);
+}
+async function hr(e, t, n, r) {
+	let i = vr(r);
+	if (n === "exec.run") return gr(e, t, i);
+	if (n === "fs.read") {
+		let e = v(i, "path");
+		if (!e) throw new s("fs.read requires path.");
+		let t = Math.min(W(i.maxBytes) ?? z, z);
+		return {
+			input: {
+				path: e,
+				maxBytes: t
+			},
+			deadlineMs: Hn,
+			maxOutputBytes: t
+		};
+	}
+	let a = Math.min(Math.max(W(i.lines) ?? 100, 1), 1e3);
+	return {
+		input: {
+			stream: v(i, "stream") ?? "default",
+			lines: a
+		},
+		deadlineMs: Hn,
+		maxOutputBytes: z
+	};
+}
+async function gr(e, t, n) {
+	let r = b(n.argv);
+	if (!r || r.length === 0 || r.some((e) => e.length === 0)) throw new s("exec.run requires non-empty argv: string[].");
+	let i = t.commandPolicyId ? await qn(e, t.commandPolicyId) : null;
+	if (t.commandPolicyId && !i) throw new a(`Command policy '${t.commandPolicyId}' not found.`);
+	_r(r, n, i);
+	let o = i?.maxTimeoutMs ?? Hn, c = i?.maxOutputBytes ?? z, l = Math.min(W(n.timeoutMs) ?? Hn, o), u = Math.min(W(n.maxOutputBytes) ?? z, c), d = {
+		argv: r,
+		timeoutMs: l,
+		maxOutputBytes: u
+	}, f = v(n, "cwd");
+	return f && (d.cwd = f), {
+		input: d,
+		deadlineMs: l,
+		maxOutputBytes: u
+	};
+}
+function _r(e, t, n) {
+	let r = e[0], i = e.join(" ");
+	if (Un.has(r)) throw new a(`Command '${r}' is denied by the global policy.`);
+	if (Wn.some((e) => e.test(i))) throw new a("Command is denied by the global policy.");
+	if (n?.denyCommands?.includes(r)) throw new a(`Command '${r}' is denied by policy '${n.id}'.`);
+	if (n?.denyPatterns?.some((e) => new RegExp(e).test(i))) throw new a(`Command is denied by policy '${n.id}'.`);
+	if (n?.allowCommands && !n.allowCommands.includes(r) || n?.defaultMode === "deny" && !n.allowCommands?.includes(r)) throw new a(`Command '${r}' is not allowed by policy '${n.id}'.`);
+	let o = v(t, "cwd");
+	if (n?.allowedCwdPrefixes && n.allowedCwdPrefixes.length > 0) {
+		if (!o) throw new a(`cwd is required by policy '${n.id}'.`);
+		if (!n.allowedCwdPrefixes.some((e) => o.startsWith(e))) throw new a(`cwd '${o}' is outside policy '${n.id}'.`);
+	}
+}
+function vr(e) {
+	return _(e) && _(e.arguments) ? e.arguments : _(e) ? e : {};
+}
+function yr(e) {
+	if (!_(e)) return;
+	let t = v(e, "tool");
+	return t && Vn.includes(t) ? t : void 0;
+}
+//#endregion
+//#region src/worker/tb/help.ts
+function br(e, t, n) {
+	let r = [
+		"htbp draft",
+		`resource ${t}`,
+		`title ${x(e.title)}`
+	];
+	if (e.description && r.push(`summary ${x(e.description)}`), r.push("skill ./~skill", `auth ${n}`, ""), e.endpoint) {
+		let { method: i, tools: a } = e.endpoint;
+		if (a && a.length > 0) for (let e of a) r.push(`cmd ${e.name} ${i} ${t}`), r.push(`  body application/json {"tool":"${e.name}","arguments":object?}`), r.push(`  auth ${n}`), xr(r, e), r.push("  returns 200 application/json"), e.description && r.push(`  note ${x(e.description)}`);
+		else r.push(`cmd call ${i} ${t}`), r.push("  body application/json {\"arguments\":object?}"), r.push(`  auth ${n}`), xr(r, e.endpoint), r.push("  returns 200 application/json");
+	}
+	for (let n of e.resources ?? []) r.push(`link child ${Sr(t, n.path)}/~help`), n.description && r.push(`  note ${x(n.description)}`);
+	return `${r.join("\n").trimEnd()}\n`;
+}
+function xr(e, t) {
+	e.push(`  effect ${t.effect ?? "external"}`), t.scope && e.push(`  scope ${x(t.scope)}`), t.confirm && e.push("  confirm true");
+}
+function Sr(e, t) {
+	return t.startsWith("./") ? `${e}/${t.slice(2)}` : t.startsWith("../") ? `${e.split("/").slice(0, -1).join("/")}/${t.slice(3)}` : `${e}/${t}`;
+}
+//#endregion
+//#region src/worker/tb/resolve.ts
+async function Cr(e, t, r, i, a) {
+	let o = E(t, r);
+	if (!o) throw new n(`No TB resource at '/${r.join("/")}'.`);
+	let s = r.length > 0 ? `${w}/${r.join("/")}` : w, c = {
+		env: e,
+		authMode: i,
+		basePath: _e(o.node),
+		builtinHandlers: a
+	};
+	return {
+		payload: await Et(o.node).describe(o.node, c, o.sub),
+		resourcePath: s
+	};
+}
+async function wr(e, t, n, r, i, a) {
+	let { payload: o, resourcePath: s } = await Cr(e, t, n, r, a);
+	return Er(i) ? g(br(o, s, r === "none" ? "none" : "bearer"), { headers: {
+		"Content-Type": "text/plain; charset=utf-8",
+		"Cache-Control": Dr(o, r)
+	} }) : h(o, { headers: { "Cache-Control": Dr(o, r) } });
+}
+async function Tr(e, t, r, i, a, o) {
+	let s = E(t, r);
+	if (!s) throw new n(`No TB resource at '/${r.join("/")}'.`);
+	let c = r.length > 0 ? `${w}/${r.join("/")}` : w, l = {
+		env: e,
+		authMode: i,
+		basePath: _e(s.node),
+		builtinHandlers: o
+	};
+	return h({
+		resource: c,
+		result: await Et(s.node).call(s.node, l, s.sub, a)
+	});
+}
+function Er(e) {
+	let t = e.toLowerCase();
+	return t.includes("application/json") ? !1 : t.includes("text/plain") || t.includes("text/markdown");
+}
+function Dr(e, t) {
+	let n = t === "none" ? "public" : "private";
+	return e.cachable === !1 ? "no-store" : `${n}, max-age=300`;
+}
+//#endregion
+//#region src/worker/tb/dynamic-servers.ts
+var Or = "dynamic-server:", G = "dynamic";
+function kr(e) {
+	return !!e.TENANTS;
+}
+async function Ar(e) {
+	if (!e.TENANTS) return [];
+	let t = await Pr(e), n = new Set(t.map((e) => e.id)), r = (await Fr(e)).filter((e) => !n.has(e.id));
+	return [...t, ...r];
+}
+async function jr(e, t) {
+	if (!e.TENANTS) throw Error("Dynamic servers require the TENANTS KV binding.");
+	let n = (/* @__PURE__ */ new Date()).toISOString();
+	await j(e, "dynamic") || await M(e, {
+		id: G,
+		displayName: "Dynamic Servers (compat)",
+		trustTier: "community",
+		status: "active",
+		createdAt: n,
+		updatedAt: n
+	});
+	let r = await N(e, G, t.id);
+	await P(e, {
+		providerId: G,
+		pubId: t.id,
+		version: r?.version ?? "0.0.0",
+		binding: {
+			type: "mcp",
+			name: t.name,
+			endpoint: t.endpoint,
+			description: t.description
+		},
+		status: "published",
+		createdAt: r?.createdAt ?? n,
+		updatedAt: n
+	}), await rn(e, {
+		id: Nr(t.id),
+		tenantId: null,
+		path: t.id,
+		pubRef: {
+			providerId: G,
+			pubId: t.id
+		},
+		enabled: !0,
+		createdAt: n,
+		updatedAt: n
+	}), await e.TENANTS.delete(`${Or}${t.id}`);
+}
+async function Mr(e, t) {
+	if (!e.TENANTS) throw Error("Dynamic servers require the TENANTS KV binding.");
+	await e.TENANTS.delete(`${Or}${t}`), await $t(e, G, t), await an(e, null, Nr(t));
+}
+function Nr(e) {
+	return `dyn_${e}`;
+}
+async function Pr(e) {
+	let t = await F(e, G), n = [];
+	for (let e of t) {
+		let t = _(e.binding) ? e.binding : {}, r = v(t, "endpoint");
+		r && n.push({
+			id: e.pubId,
+			name: v(t, "name") ?? e.pubId,
+			endpoint: r,
+			description: v(t, "description")
+		});
+	}
+	return n;
+}
+async function Fr(e) {
+	let t = e.TENANTS;
+	if (!t) return [];
+	let n = [], r;
+	do {
+		let e = await t.list({
+			prefix: Or,
+			cursor: r
+		});
+		for (let r of e.keys) {
+			let e = await t.get(r.name);
+			if (e) try {
+				n.push(JSON.parse(e));
+			} catch {}
+		}
+		r = e.list_complete ? void 0 : e.cursor;
+	} while (r);
+	return n;
+}
+//#endregion
+//#region src/worker/index.ts
+var Ir = "2025-11-25", Lr = "tool-bridge", Rr = "draft", zr = 1e6, Br = 4e6;
+function K(e, t = {}) {
+	let n = new Headers(t.headers);
+	return n.set("Content-Type", "application/json; charset=utf-8"), new Response(JSON.stringify(e, null, 2), {
+		...t,
+		headers: n
+	});
+}
+function Vr(e, t = {}) {
+	let n = new Headers(t.headers);
+	return n.set("Content-Type", n.get("Content-Type") ?? "text/plain; charset=utf-8"), new Response(e, {
+		...t,
+		headers: n
+	});
+}
+function q(e, t, n, r) {
+	return K({ error: {
+		code: t,
+		message: n,
+		details: r
+	} }, { status: e });
+}
+function Hr(e) {
+	return e.OAUTH_ISSUER ? "oauth" : e.AUTH_BEARER_TOKEN ? "bearer" : "none";
+}
+function Ur(e) {
+	let t = e.headers.get("Authorization");
+	if (t) return /^Bearer\s+(.+)$/i.exec(t)?.[1];
+}
+async function Wr(e) {
+	return new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(e)));
+}
+async function Gr(e, t) {
+	let n = await Wr(e), r = await Wr(t), i = n.length ^ r.length, a = Math.max(n.length, r.length);
+	for (let e = 0; e < a; e += 1) i |= (n[e] ?? 0) ^ (r[e] ?? 0);
+	return i === 0;
+}
+async function Kr(e, t) {
+	let n = Hr(t);
+	if (gn(t)) {
+		let r = Ur(e);
+		if (!r) return q(401, "unauthorized", "Secret Key (bearer token) required.");
+		let i = await yn(t, r);
+		return i ? {
+			mode: n,
+			subject: i.label ?? i.providerId ?? i.hostId ?? i.tenantId,
+			tenantId: i.tenantId,
+			root: i.root,
+			principal: i.principal,
+			providerId: i.providerId,
+			hostId: i.hostId,
+			isAdmin: i.principal === "admin"
+		} : q(401, "unauthorized", "Secret Key is invalid.");
+	}
+	if (n === "none") return {
+		mode: n,
+		isAdmin: !t.TENANTS
+	};
+	let r = Ur(e);
+	if (!r) return q(401, "unauthorized", "Bearer token required.");
+	if (n === "bearer") {
+		let e = t.AUTH_BEARER_TOKEN;
+		return e ? await Gr(r, e) ? {
+			mode: n,
+			subject: "static-bearer",
+			isAdmin: !0
+		} : q(401, "unauthorized", "Bearer token is invalid.") : q(500, "auth_misconfigured", "AUTH_BEARER_TOKEN is required for bearer auth.");
+	}
+	try {
+		let e = t.OAUTH_ISSUER;
+		if (!e) return q(500, "auth_misconfigured", "OAUTH_ISSUER is required for OAuth auth.");
+		let i = t.OAUTH_JWKS_URI || await qr(e), a = await l(r, c(new URL(i)), {
+			issuer: e,
+			audience: t.OAUTH_REQUIRED_AUDIENCE || void 0
+		});
+		return {
+			mode: n,
+			subject: typeof a.payload.sub == "string" ? a.payload.sub : void 0,
+			isAdmin: !0
+		};
+	} catch (e) {
+		return q(401, "unauthorized", "OAuth bearer token is invalid.", Ci(e));
+	}
+}
+async function qr(e) {
+	let t = e.endsWith("/") ? e.slice(0, -1) : e, n = await fetch(`${t}/.well-known/openid-configuration`, { headers: { Accept: "application/json" } });
+	if (!n.ok) throw Error(`Unable to load OIDC metadata: HTTP ${n.status}`);
+	let r = await n.json();
+	if (typeof r.jwks_uri != "string" || r.jwks_uri.length === 0) throw Error("OIDC metadata does not include jwks_uri.");
+	return r.jwks_uri;
+}
+function Jr(e) {
+	return {
+		mode: Hr(e),
+		oauthIssuer: e.OAUTH_ISSUER || void 0,
+		oauthAudience: e.OAUTH_REQUIRED_AUDIENCE || void 0
+	};
+}
+async function J(e) {
+	let t = e.headers.get("Content-Length");
+	if (t && Number(t) > zr) throw Error("Request body is too large.");
+	return await e.json();
+}
+function Yr(e) {
+	let t = e.MCP_SERVERS_JSON || "{}", n = JSON.parse(t), r = [];
+	if (Z(n) && (n.type === "directory" || Array.isArray(n.children))) return Xr(n, r), r;
+	if (Array.isArray(n)) {
+		for (let e of n) r.push(Zr(e));
+		return r;
+	}
+	if (Z(n)) for (let [e, t] of Object.entries(n)) r.push(Zr({
+		id: e,
+		...Z(t) ? t : {}
+	}));
+	return r;
+}
+function Xr(e, t) {
+	if (Z(e)) {
+		if (e.type === "mcp") {
+			t.push(Zr(e));
+			return;
+		}
+		if (Array.isArray(e.children)) for (let n of e.children) Xr(n, t);
+	}
+}
+function Zr(e) {
+	if (!Z(e)) throw Error("MCP server config must be an object.");
+	let t = Q(e, "id") || Q(e, "name"), n = Q(e, "endpoint") || Q(e, "url") || Q(e, "baseUrl");
+	if (!t) throw Error("MCP server config is missing id/name.");
+	if (!n) throw Error(`MCP server '${t}' is missing endpoint.`);
+	let r = xi(e.headers), i = Si(e.allowedTools) ?? Si(e.allowed_tools);
+	return {
+		id: t,
+		name: Q(e, "name") || t,
+		endpoint: n,
+		description: Q(e, "description"),
+		headers: r,
+		allowedTools: i
+	};
+}
+function Qr(e) {
+	if (!e.endpoint) throw Error("Ad-hoc server endpoint is required.");
+	let t = { ...e.headers ?? {} };
+	return e.bearerToken && (t.Authorization = `Bearer ${e.bearerToken}`), {
+		id: e.name || "adhoc",
+		name: e.name || "Ad-hoc MCP",
+		endpoint: e.endpoint,
+		headers: t
+	};
+}
+function $r(e) {
+	return e.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "server";
+}
+async function ei(e, t) {
+	let n = Yr(e).find((e) => e.id === t || e.name === t);
+	if (n) return Y(e, n);
+	let r = (await Ar(e)).find((e) => e.id === t || e.name === t);
+	if (r) return Y(e, {
+		id: r.id,
+		name: r.name,
+		endpoint: r.endpoint,
+		description: r.description
+	});
+	throw Error(`Unknown MCP server '${t}'.`);
+}
+function Y(e, t) {
+	let n = new URL(t.endpoint);
+	if (n.protocol !== "https:" && e.ALLOW_INSECURE_MCP_HTTP !== "true") throw Error(`MCP endpoint for '${t.id}' must use https://.`);
+	return {
+		...t,
+		endpoint: n.toString(),
+		resolvedHeaders: ti(e, t.headers)
+	};
+}
+function ti(e, t) {
+	let n = {};
+	for (let [r, i] of Object.entries(t ?? {})) n[r] = ni(e, i);
+	return n;
+}
+function ni(e, t) {
+	return t.startsWith("$env:") ? ri(e, t.slice(5)) : t.replace(/\$\{([A-Z0-9_]+)\}/g, (t, n) => ri(e, n));
+}
+function ri(e, t) {
+	let n = e[t];
+	if (typeof n != "string" || n.length === 0) throw Error(`Environment variable '${t}' is required for MCP header substitution.`);
+	return n;
+}
+async function X(e) {
+	let t = await ai(e, "tools/list", {}), n = (Z(t) && Array.isArray(t.tools) ? t.tools : []).map(gi).filter(Boolean);
+	if (!e.allowedTools || e.allowedTools.length === 0) return n;
+	let r = new Set(e.allowedTools);
+	return n.filter((e) => r.has(e.name));
+}
+async function ii(e, t, n) {
+	if (e.allowedTools && e.allowedTools.length > 0 && !e.allowedTools.includes(t)) throw Error(`Tool '${t}' is not allowed for server '${e.id}'.`);
+	return ai(e, "tools/call", {
+		name: t,
+		arguments: Z(n) ? n : {}
+	});
+}
+async function ai(e, t, n) {
+	let r = await oi(e);
+	try {
+		return await si(e, r.sessionId, "notifications/initialized", {}), (await ci(e, r.sessionId, t, n)).result;
+	} finally {
+		r.sessionId && await hi(e, r.sessionId).catch(() => {});
+	}
+}
+async function oi(e) {
+	return { sessionId: (await ci(e, void 0, "initialize", {
+		protocolVersion: Ir,
+		capabilities: {},
+		clientInfo: {
+			name: Lr,
+			version: Rr
+		}
+	})).sessionId };
+}
+async function si(e, t, n, r) {
+	let i = await fetch(e.endpoint, {
+		method: "POST",
+		headers: li(e, t),
+		body: JSON.stringify({
+			jsonrpc: "2.0",
+			method: n,
+			params: r
+		})
+	});
+	if (i.status !== 202 && !i.ok) throw Error(`MCP notification '${n}' failed with HTTP ${i.status}.`);
+}
+async function ci(e, t, n, r) {
+	let i = crypto.randomUUID(), a = await fetch(e.endpoint, {
+		method: "POST",
+		headers: li(e, t),
+		body: JSON.stringify({
+			jsonrpc: "2.0",
+			id: i,
+			method: n,
+			params: r
+		})
+	});
+	if (!a.ok) throw Error(`MCP request '${n}' failed with HTTP ${a.status}: ${await mi(a)}`);
+	let o = await ui(a, i);
+	if (o.error) throw Error(`MCP error ${o.error.code}: ${o.error.message}`);
+	return {
+		result: o.result,
+		sessionId: a.headers.get("MCP-Session-Id") ?? void 0
+	};
+}
+function li(e, t) {
+	let n = new Headers(e.resolvedHeaders);
+	return n.set("Accept", "application/json, text/event-stream"), n.set("Content-Type", "application/json"), n.set("MCP-Protocol-Version", Ir), t && n.set("MCP-Session-Id", t), n;
+}
+async function ui(e, t) {
+	if ((e.headers.get("Content-Type") ?? "").includes("text/event-stream")) return di(e, t);
+	let n = await pi(e, zr), r = JSON.parse(n);
+	if (r.id !== t) throw Error(`Unexpected MCP response id '${String(r.id)}'.`);
+	return r;
+}
+async function di(e, t) {
+	if (!e.body) throw Error("MCP server returned an empty SSE response.");
+	let n = e.body.getReader(), r = new TextDecoder(), i = "", a = [], o = 0;
+	for (;;) {
+		let { done: e, value: s } = await n.read();
+		if (e) break;
+		if (o += s.byteLength, o > Br) throw Error("MCP SSE response exceeded the maximum size.");
+		i += r.decode(s, { stream: !0 });
+		let c = i.indexOf("\n");
+		for (; c >= 0;) {
+			let e = i.slice(0, c);
+			i = i.slice(c + 1);
+			let n = e.endsWith("\r") ? e.slice(0, -1) : e;
+			if (n === "") {
+				let e = fi(a);
+				if (a = [], e && e.id === t) return e;
+			} else n.startsWith("data:") && a.push(n.slice(5).trimStart());
+			c = i.indexOf("\n");
+		}
+	}
+	let s = fi(a);
+	if (s && s.id === t) return s;
+	throw Error(`MCP SSE stream ended before response '${t}' was received.`);
+}
+function fi(e) {
+	if (e.length === 0) return;
+	let t = e.join("\n").trim();
+	if (t.startsWith("{")) return JSON.parse(t);
+}
+async function pi(e, t) {
+	if (!e.body) return "";
+	let n = e.body.getReader(), r = new TextDecoder(), i = 0, a = "";
+	for (;;) {
+		let { done: e, value: o } = await n.read();
+		if (e) return a + r.decode();
+		if (i += o.byteLength, i > t) throw Error("Response body exceeded the maximum size.");
+		a += r.decode(o, { stream: !0 });
+	}
+}
+async function mi(e) {
+	try {
+		return await pi(e, 8e3);
+	} catch {
+		return "";
+	}
+}
+async function hi(e, t) {
+	await fetch(e.endpoint, {
+		method: "DELETE",
+		headers: li(e, t)
+	});
+}
+function gi(e) {
+	if (!(!Z(e) || typeof e.name != "string")) return {
+		name: e.name,
+		description: typeof e.description == "string" ? e.description : void 0,
+		inputSchema: e.inputSchema,
+		outputSchema: e.outputSchema,
+		annotations: e.annotations
+	};
+}
+function _i(e) {
+	return e === "none" ? "none" : "bearer";
+}
+function vi(e, t, n, r) {
+	let i = _i(r), a = [
+		"htbp draft",
+		`resource ${n}`,
+		`title ${e.name}`,
+		e.description ? `summary ${e.description}` : `summary MCP Streamable HTTP bridge for ${e.name}.`,
+		"skill ./~skill",
+		`auth ${i}`,
+		""
+	];
+	for (let e of t) a.push(`cmd ${e.name} POST ${n}/tools/${encodeURIComponent(e.name)}`), a.push("  body application/json {\"arguments\":object?}"), a.push(`  auth ${i}`), a.push("  effect external"), a.push("  returns 200 application/json"), e.description && a.push(`  note ${bi(e.description)}`), a.push("");
+	return `${a.join("\n").trimEnd()}\n`;
+}
+function yi(e, t, n, r) {
+	let i = t.map((e) => `- \`${e.name}\`${e.description ? `：${bi(e.description)}` : ""}`).join("\n"), a = r === "none" ? "" : "Authorization: Bearer <token>\n";
+	return `# ${e.name}
+
+## When To Use
+
+当需要通过 HTBP 调用 \`${e.name}\` 这个 MCP server 暴露的 tool 时，先读取 \`${n}/~help\`，再选择具体 tool endpoint。
+
+## Request Construction
+
+每个 MCP tool 都映射为一个普通 HTTP POST：
+
+\`\`\`http
+POST ${n}/tools/{tool}
+${a}Content-Type: application/json
+\`\`\`
+
+请求体：
+
+\`\`\`json
+{
+  "arguments": {}
+}
+\`\`\`
+
+## Available Tools
+
+${i || "当前没有可见 tool。"}
+
+## Safety
+
+这些调用会转发到上游 MCP server。执行 write、delete、external side effect 操作前，应先确认用户意图。
+`;
+}
+function bi(e) {
+	return e.replace(/\s+/g, " ").trim();
+}
+function Z(e) {
+	return !!e && typeof e == "object" && !Array.isArray(e);
+}
+function Q(e, t) {
+	let n = e[t];
+	return typeof n == "string" && n.length > 0 ? n : void 0;
+}
+function xi(e) {
+	if (!Z(e)) return;
+	let t = {};
+	for (let [n, r] of Object.entries(e)) typeof r == "string" && (t[n] = r);
+	return t;
+}
+function Si(e) {
+	if (Array.isArray(e)) return e.filter((e) => typeof e == "string");
+}
+function Ci(e) {
+	return e instanceof Error ? e.message : String(e);
+}
+async function wi(e, t) {
+	let n = new URL(e.url).pathname;
+	if (n === "/api/auth/config" && e.method === "GET") return K(Jr(t));
+	let r = await Kr(e, t);
+	if (r instanceof Response) return r;
+	let i = await Fn(e, t, r);
+	if (i) return i;
+	let a = await Xn(e, t, r);
+	if (a) return a;
+	let o = await Dn(e, t, r);
+	if (o) return o;
+	let s = await Oe(e, t, r);
+	if (s) return s;
+	if (n === "/api/servers" && e.method === "GET") {
+		let e = Yr(t).map(({ headers: e, ...t }) => ({
+			...t,
+			source: "static"
+		})), n = (await Ar(t)).map((e) => ({
+			...e,
+			source: "dynamic"
+		})), i = new Set(e.map((e) => e.id));
+		return K({
+			auth: r,
+			servers: [...e, ...n.filter((e) => !i.has(e.id))],
+			dynamicEnabled: kr(t)
+		});
+	}
+	if (n === "/api/servers" && e.method === "POST") {
+		if (!kr(t)) return q(501, "not_supported", "Saving servers requires the TENANTS KV binding.");
+		let n = await J(e);
+		if (!n.endpoint) return q(400, "bad_request", "endpoint is required.");
+		let r = Y(t, Qr({
+			name: n.name,
+			endpoint: n.endpoint
+		})), i = $r(n.name || r.id);
+		return await jr(t, {
+			id: i,
+			name: n.name || i,
+			endpoint: r.endpoint,
+			description: n.description
+		}), K({
+			ok: !0,
+			id: i
+		});
+	}
+	let c = /^\/api\/servers\/([^/]+)$/.exec(n);
+	if (c && e.method === "DELETE") return kr(t) ? (await Mr(t, decodeURIComponent(c[1] ?? "")), K({ ok: !0 })) : q(501, "not_supported", "Deleting servers requires the TENANTS KV binding.");
+	if (n === "/api/bridge/tools" && e.method === "POST") {
+		let n = Y(t, Qr((await J(e)).server ?? {})), r = await X(n);
+		return K({
+			server: $(n),
+			tools: r
+		});
+	}
+	if (n === "/api/bridge/call" && e.method === "POST") {
+		let n = await J(e);
+		if (!n.tool) return q(400, "bad_request", "Tool name is required.");
+		let r = Y(t, Qr(n.server ?? {})), i = await ii(r, n.tool, n.arguments);
+		return K({
+			server: $(r),
+			tool: n.tool,
+			result: i
+		});
+	}
+	if (n === "/api/tree" && e.method === "GET") return K({
+		auth: r,
+		tree: await jt(t, await Ti(r, t), { path: "" }, r.mode)
+	});
+	if (n === "/api/crawl" && e.method === "POST") {
+		let n = await J(e), i = At({
+			maxDepth: n.maxDepth,
+			maxNodes: n.maxNodes
+		});
+		return K({
+			auth: r,
+			tree: await jt(t, await Ti(r, t), n.start ?? { path: "" }, r.mode, i)
+		});
+	}
+	let l = /^\/api\/servers\/([^/]+)(\/.*)?$/.exec(n);
+	if (l) {
+		let n = await ei(t, decodeURIComponent(l[1] ?? ""));
+		return Oi(e, n, l[2] ?? "", `/api/servers/${encodeURIComponent(n.id)}`, r.mode);
+	}
+	return q(404, "not_found", "API route not found.");
+}
+async function Ti(e, t) {
+	let n = e.root ?? te(t);
+	return await fn(t, n, e.root && e.tenantId ? e.tenantId : null), n;
+}
+async function Ei(e, n, r, i, o) {
+	let s = Date.now(), c = xe(e), l = new URL(e.url), u = l.pathname.replace(/^\/htbp\/?/, "").split("/").filter((e) => e.length > 0), d = u[u.length - 1] === "~help", f = u.length === 0 || d, p = (d ? u.slice(0, -1) : u).map(decodeURIComponent), m = {
+		principal: "anonymous",
+		onBehalfOf: e.headers.get("X-TB-On-Behalf-Of") ?? void 0
+	}, h, g = {}, _, v;
+	try {
+		let t = await Kr(e, n);
+		if (t instanceof Response) v = t;
+		else {
+			if (m.principal = t.principal ?? (t.mode === "none" ? "anonymous" : t.mode === "bearer" ? "static-bearer" : "oauth"), m.subject = t.subject, h = t.tenantId, gn(n) && !t.root && !t.isAdmin) throw new a("This key is not bound to a tenant tree.");
+			if (p[0] === "~device") if (!f && e.method !== "POST") v = q(405, "method_not_allowed", "Use GET {path}/~help or POST {path} to call.");
+			else {
+				let r = e.headers.get("Accept") ?? "", a = f ? void 0 : await J(e);
+				_ = Se(a);
+				let o = await Qn({
+					env: n,
+					principal: t,
+					segments: p,
+					isHelp: f,
+					accept: r,
+					input: a,
+					traceId: c,
+					broker: i
+				});
+				v = o.response, g = o.audit, h = o.tenantId ?? h;
+			}
+			else if (f) {
+				let i = await Ti(t, n);
+				g = we(i, p);
+				let a = e.headers.get("Accept") ?? "";
+				v = await wr(n, i, p, t.mode, a, r);
+			} else if (e.method === "POST") {
+				let i = await Ti(t, n);
+				g = we(i, p);
+				let a = await J(e);
+				_ = Se(a), v = await Tr(n, i, p, t.mode, a, r);
+			} else v = q(405, "method_not_allowed", "Use GET {path}/~help or POST {path} to call.");
+		}
+	} catch (e) {
+		v = t(e);
+	}
+	return v = new Response(v.body, v), v.headers.set("X-TB-Trace-Id", c), await De(n, o, {
+		ts: new Date(s).toISOString(),
+		traceId: c,
+		action: f ? "describe" : "call",
+		actor: m,
+		tenantId: h,
+		path: l.pathname,
+		tool: g.tool,
+		provider: g.provider,
+		effect: g.effect,
+		scope: g.scope,
+		decision: v.status === 401 || v.status === 403 ? "deny" : v.status === 404 ? "not_found" : "allow",
+		result: v.ok ? "ok" : "error",
+		status: v.status,
+		errorCode: v.ok ? void 0 : await Te(v),
+		latencyMs: Date.now() - s,
+		reason: e.headers.get("X-TB-Reason") ?? void 0,
+		input: _
+	}), v;
+}
+async function Di(e, t) {
+	let n = await Kr(e, t);
+	if (n instanceof Response) return n;
+	let r = new URL(e.url), i = /^\/mcp\/([^/]+)(\/.*)?$/.exec(r.pathname);
+	if (!i) return q(404, "not_found", "MCP bridge route not found.");
+	let a = await ei(t, decodeURIComponent(i[1] ?? ""));
+	return Oi(e, a, i[2] ?? "", `/mcp/${encodeURIComponent(a.id)}`, n.mode);
+}
+async function Oi(e, t, n, r, i) {
+	if (n === "" && e.method === "GET") return K({
+		server: $(t),
+		links: {
+			help: `${r}/~help`,
+			skill: `${r}/~skill`
+		}
+	});
+	if (n === "/tools" && e.method === "GET") {
+		let e = await X(t);
+		return K({
+			server: $(t),
+			tools: e
+		});
+	}
+	if (n === "/~help" && e.method === "GET") return Vr(vi(t, await X(t), r, i));
+	if (n === "/~skill" && e.method === "GET") return Vr(yi(t, await X(t), r, i), { headers: { "Content-Type": "text/markdown; charset=utf-8" } });
+	let a = /^\/tools\/([^/]+)(?:\/call)?$/.exec(n);
+	if (a && e.method === "POST") {
+		let n = await J(e), r = decodeURIComponent(a[1] ?? ""), i = await ii(t, r, n.arguments);
+		return K({
+			server: $(t),
+			tool: r,
+			result: i
+		});
+	}
+	return q(404, "not_found", "Server route not found.");
+}
+function $(e) {
+	return {
+		id: e.id,
+		name: e.name,
+		endpoint: e.endpoint,
+		description: e.description,
+		allowedTools: e.allowedTools
+	};
+}
+async function ki(e, n, r = {}, i) {
+	let a = new URL(e.url);
+	try {
+		if (a.pathname.startsWith("/api/")) return await wi(e, n);
+		if (a.pathname.startsWith("/tunnel/")) {
+			let t = await Zn(e, n, r.tunnelBroker);
+			if (t) return t;
+		}
+		if (a.pathname.startsWith("/mcp/")) return await Di(e, n);
+		if (a.pathname === "/htbp" || a.pathname.startsWith("/htbp/")) {
+			let t = await Ei(e, n, r.builtinHandlers, r.tunnelBroker, i), a = new Response(t.body, t);
+			return a.headers.set("Access-Control-Allow-Origin", "*"), a;
+		}
+		return n.ASSETS.fetch(e);
+	} catch (e) {
+		return t(e);
+	}
+}
+function Ai(e = {}) {
+	return { fetch(t, n, r) {
+		return ki(t, n, e, r);
+	} };
+}
+var ji = Ai();
+//#endregion
+export { Ai as createBridge, ji as default };