@forumone/throughline-core 0.0.1 → 0.2.0

package/dist/events/taxonomy.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Canonical event taxonomy for Throughline. Server packages add their own
+ * events via TypeScript module augmentation — see {@link FrameworkEvents}.
+ *
+ * The runtime client (created by `createInngestClient`) does not enforce
+ * this taxonomy at type-check time; the interface is for documentation and
+ * for callers who want to type-check their own `inngest.send(...)` calls.
+ */
+export interface CoreEvents {
+    /** Fired by the audit writer after every audit-log entry is persisted. */
+    'audit/event.recorded': {
+        data: {
+            auditEventId: string;
+            action: string;
+            actorId?: string;
+            targetCollection?: string;
+            targetId?: string;
+            approvalRequestId?: string;
+            integrationId?: string;
+        };
+    };
+    /** Fired by the publishing server when a page is published. */
+    'content/page.published': {
+        data: {
+            collection: string;
+            id: string;
+            slug: string;
+            publishedBy: string;
+            previousPublishedAt: string | null;
+            isFirstPublish: boolean;
+        };
+    };
+    /** Fired when a page is unpublished or reverted to draft. */
+    'content/page.unpublished': {
+        data: {
+            collection: string;
+            id: string;
+            slug: string;
+            unpublishedBy: string;
+        };
+    };
+    /** Fired when a publish is scheduled for a future time. */
+    'content/page.scheduled': {
+        data: {
+            collection: string;
+            id: string;
+            scheduledFor: string;
+        };
+    };
+    /** Fired when a page is rolled back to a previous version. */
+    'content/page.rolled_back': {
+        data: {
+            collection: string;
+            id: string;
+            rolledBackBy: string;
+            toVersionId: string;
+        };
+    };
+    /** Periodic system healthcheck event. */
+    'system/healthcheck': {
+        data: {
+            source: string;
+            timestamp: string;
+        };
+    };
+}
+/**
+ * Framework-wide event taxonomy. Server packages extend this interface via
+ * TypeScript module augmentation:
+ *
+ * ```ts
+ * declare module '@forumone/throughline-core/events' {
+ *   interface FrameworkEvents {
+ *     'approval/decided': { data: { approvalId: string; decision: 'granted' | 'declined' } }
+ *   }
+ * }
+ * ```
+ *
+ * After augmentation, callers in any package can `inngest.send({ name: 'approval/decided', data: ... })`
+ * and TypeScript will type-check the payload against the merged set.
+ */
+export interface FrameworkEvents extends CoreEvents {
+}
+//# sourceMappingURL=taxonomy.d.ts.map

package/dist/events/taxonomy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"taxonomy.d.ts","sourceRoot":"","sources":["../../src/events/taxonomy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,UAAU;IACzB,0EAA0E;IAC1E,sBAAsB,EAAE;QACtB,IAAI,EAAE;YACJ,YAAY,EAAE,MAAM,CAAA;YACpB,MAAM,EAAE,MAAM,CAAA;YACd,OAAO,CAAC,EAAE,MAAM,CAAA;YAChB,gBAAgB,CAAC,EAAE,MAAM,CAAA;YACzB,QAAQ,CAAC,EAAE,MAAM,CAAA;YACjB,iBAAiB,CAAC,EAAE,MAAM,CAAA;YAC1B,aAAa,CAAC,EAAE,MAAM,CAAA;SACvB,CAAA;KACF,CAAA;IACD,+DAA+D;IAC/D,wBAAwB,EAAE;QACxB,IAAI,EAAE;YACJ,UAAU,EAAE,MAAM,CAAA;YAClB,EAAE,EAAE,MAAM,CAAA;YACV,IAAI,EAAE,MAAM,CAAA;YACZ,WAAW,EAAE,MAAM,CAAA;YACnB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;YAClC,cAAc,EAAE,OAAO,CAAA;SACxB,CAAA;KACF,CAAA;IACD,6DAA6D;IAC7D,0BAA0B,EAAE;QAC1B,IAAI,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,aAAa,EAAE,MAAM,CAAA;SAAE,CAAA;KAC9E,CAAA;IACD,2DAA2D;IAC3D,wBAAwB,EAAE;QACxB,IAAI,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAC/D,CAAA;IACD,8DAA8D;IAC9D,0BAA0B,EAAE;QAC1B,IAAI,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAA;KACpF,CAAA;IACD,yCAAyC;IACzC,oBAAoB,EAAE;QACpB,IAAI,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KAC5C,CAAA;CACF;AAED;;;;;;;;;;;;;;GAcG;AAIH,MAAM,WAAW,eAAgB,SAAQ,UAAU;CAAG"}

package/dist/events/taxonomy.js

@@ -0,0 +1,10 @@
+/**
+ * Canonical event taxonomy for Throughline. Server packages add their own
+ * events via TypeScript module augmentation — see {@link FrameworkEvents}.
+ *
+ * The runtime client (created by `createInngestClient`) does not enforce
+ * this taxonomy at type-check time; the interface is for documentation and
+ * for callers who want to type-check their own `inngest.send(...)` calls.
+ */
+export {};
+//# sourceMappingURL=taxonomy.js.map

package/dist/events/taxonomy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taxonomy.js","sourceRoot":"","sources":["../../src/events/taxonomy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+export { AUDIT_ACTIONS, AUDIT_MCP_SERVERS, DEFAULT_AUDIT_SLUG, auditPlugin, createAuditCollection, createAuditWriter, getAuditWriter, } from './audit/index.js';
+export type { AuditAction, AuditActor, AuditCollectionOptions, AuditEventInput, AuditMcpServer, AuditPluginOptions, AuditWriter, AuditWriterOptions, } from './audit/index.js';
+export { DEFAULT_API_KEYS_SLUG, createApiKeysCollection, createBearerTokenAuthenticator, generateApiKey, sha256Hex, } from './auth/index.js';
+export type { ApiKeysCollectionOptions, BearerTokenAuthenticatorOptions } from './auth/index.js';
+export { ENV_VARS, validateBaseEnv, requireEnv, optionalEnv } from './env/index.js';
+export type { EnvVarName, BaseEnv } from './env/index.js';
+export { createInngestClient } from './events/index.js';
+export type { CoreEvents, FrameworkEvents, InngestClientOptions } from './events/index.js';
+export { McpMetaSchema, createMcpHandler, withMeta } from './mcp/index.js';
+export type { McpHandlerOptions, McpMeta } from './mcp/index.js';
+export { defaultLogger, createNamedLogger } from './logger/index.js';
+export { shallowDiff, generateId } from './utils/index.js';
+export type { AuthenticatedUser, BaseCorePluginOptions, CorePlugin, Logger, McpAuthResult, McpAuthenticator, McpToolContext, McpToolDefinition, PluginRegistry, PluginRegistryEntry, } from '@forumone/throughline-plugin-contract';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,GACf,MAAM,kBAAkB,CAAA;AACzB,YAAY,EACV,WAAW,EACX,UAAU,EACV,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,WAAW,EACX,kBAAkB,GACnB,MAAM,kBAAkB,CAAA;AAEzB,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,8BAA8B,EAC9B,cAAc,EACd,SAAS,GACV,MAAM,iBAAiB,CAAA;AACxB,YAAY,EAAE,wBAAwB,EAAE,+BAA+B,EAAE,MAAM,iBAAiB,CAAA;AAEhG,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACnF,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAEzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAE1F,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAC1E,YAAY,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAEhE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAEpE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAI1D,YAAY,EACV,iBAAiB,EACjB,qBAAqB,EACrB,UAAU,EACV,MAAM,EACN,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,mBAAmB,GACpB,MAAM,uCAAuC,CAAA"}

package/dist/index.js

@@ -0,0 +1,10 @@
+// Subsystems are re-exported as they are added during C4. The aggregated
+// surface here mirrors the package's `./<subpath>` exports.
+export { AUDIT_ACTIONS, AUDIT_MCP_SERVERS, DEFAULT_AUDIT_SLUG, auditPlugin, createAuditCollection, createAuditWriter, getAuditWriter, } from './audit/index.js';
+export { DEFAULT_API_KEYS_SLUG, createApiKeysCollection, createBearerTokenAuthenticator, generateApiKey, sha256Hex, } from './auth/index.js';
+export { ENV_VARS, validateBaseEnv, requireEnv, optionalEnv } from './env/index.js';
+export { createInngestClient } from './events/index.js';
+export { McpMetaSchema, createMcpHandler, withMeta } from './mcp/index.js';
+export { defaultLogger, createNamedLogger } from './logger/index.js';
+export { shallowDiff, generateId } from './utils/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,4DAA4D;AAE5D,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,GACf,MAAM,kBAAkB,CAAA;AAYzB,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,8BAA8B,EAC9B,cAAc,EACd,SAAS,GACV,MAAM,iBAAiB,CAAA;AAGxB,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAGnF,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAGvD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAG1E,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAEpE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA"}

package/dist/logger/index.d.ts

@@ -0,0 +1,9 @@
+import type { Logger } from '@forumone/throughline-plugin-contract';
+/** Default logger that delegates to `console`. Plugins fall back to this when no logger is supplied. */
+export declare const defaultLogger: Logger;
+/**
+ * Wraps a logger so every message is prefixed with a `[name]` tag. Useful
+ * for request-scoped or plugin-scoped logging.
+ */
+export declare function createNamedLogger(name: string, base?: Logger): Logger;
+//# sourceMappingURL=index.d.ts.map

package/dist/logger/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/logger/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAA;AAEnE,wGAAwG;AACxG,eAAO,MAAM,aAAa,EAAE,MAiB3B,CAAA;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,MAAsB,GAAG,MAAM,CAQpF"}

package/dist/logger/index.js

@@ -0,0 +1,41 @@
+/** Default logger that delegates to `console`. Plugins fall back to this when no logger is supplied. */
+export const defaultLogger = {
+    debug: (message, context) => {
+        if (context)
+            console.debug(message, context);
+        else
+            console.debug(message);
+    },
+    info: (message, context) => {
+        if (context)
+            console.log(message, context);
+        else
+            console.log(message);
+    },
+    warn: (message, context) => {
+        if (context)
+            console.warn(message, context);
+        else
+            console.warn(message);
+    },
+    error: (message, context) => {
+        if (context)
+            console.error(message, context);
+        else
+            console.error(message);
+    },
+};
+/**
+ * Wraps a logger so every message is prefixed with a `[name]` tag. Useful
+ * for request-scoped or plugin-scoped logging.
+ */
+export function createNamedLogger(name, base = defaultLogger) {
+    const tag = `[${name}]`;
+    return {
+        debug: (message, context) => base.debug(`${tag} ${message}`, context),
+        info: (message, context) => base.info(`${tag} ${message}`, context),
+        warn: (message, context) => base.warn(`${tag} ${message}`, context),
+        error: (message, context) => base.error(`${tag} ${message}`, context),
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/logger/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/logger/index.ts"],"names":[],"mappings":"AAGA,wGAAwG;AACxG,MAAM,CAAC,MAAM,aAAa,GAAW;IACnC,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;QAC1B,IAAI,OAAO;YAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;;YACvC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC7B,CAAC;IACD,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;QACzB,IAAI,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;;YACrC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAC3B,CAAC;IACD,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;QACzB,IAAI,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;;YACtC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC5B,CAAC;IACD,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;QAC1B,IAAI,OAAO;YAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;;YACvC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC7B,CAAC;CACF,CAAA;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAe,aAAa;IAC1E,MAAM,GAAG,GAAG,IAAI,IAAI,GAAG,CAAA;IACvB,OAAO;QACL,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,OAAO,EAAE,EAAE,OAAO,CAAC;QACrE,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,OAAO,EAAE,EAAE,OAAO,CAAC;QACnE,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,OAAO,EAAE,EAAE,OAAO,CAAC;QACnE,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,OAAO,EAAE,EAAE,OAAO,CAAC;KACtE,CAAA;AACH,CAAC"}

package/dist/mcp/handler.d.ts

@@ -0,0 +1,20 @@
+import type { Payload } from 'payload';
+import type { Logger, McpAuthenticator, McpToolDefinition } from '@forumone/throughline-plugin-contract';
+export interface McpHandlerOptions {
+    payload: Payload;
+    /** Server identifier surfaced in logs (e.g. `'publishing'`). */
+    serverName: string;
+    /** Tools the server exposes via `tools/list` and `tools/call`. */
+    tools: McpToolDefinition[];
+    /** Optional override; defaults to a bearer-token authenticator. */
+    authenticator?: McpAuthenticator;
+    /** Optional logger; defaults to the framework's console logger. */
+    logger?: Logger;
+}
+/**
+ * Returns an HTTP handler that implements the Model Context Protocol's
+ * JSON-RPC subset over a single POST endpoint. Handles authentication,
+ * tool listing, tool dispatch, and error formatting.
+ */
+export declare function createMcpHandler(options: McpHandlerOptions): (request: Request) => Promise<Response>;
+//# sourceMappingURL=handler.d.ts.map

package/dist/mcp/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/mcp/handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAGtC,OAAO,KAAK,EACV,MAAM,EACN,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAI9C,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAA;IAClB,kEAAkE;IAClE,KAAK,EAAE,iBAAiB,EAAE,CAAA;IAC1B,mEAAmE;IACnE,aAAa,CAAC,EAAE,gBAAgB,CAAA;IAChC,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAoFpG"}

package/dist/mcp/handler.js

@@ -0,0 +1,109 @@
+import { z } from 'zod';
+import { zodToJsonSchema } from 'zod-to-json-schema';
+import { createBearerTokenAuthenticator } from '../auth/index.js';
+import { defaultLogger } from '../logger/index.js';
+/**
+ * Returns an HTTP handler that implements the Model Context Protocol's
+ * JSON-RPC subset over a single POST endpoint. Handles authentication,
+ * tool listing, tool dispatch, and error formatting.
+ */
+export function createMcpHandler(options) {
+    const authenticator = options.authenticator ?? createBearerTokenAuthenticator({ payload: options.payload });
+    const toolsByName = new Map(options.tools.map((t) => [t.name, t]));
+    const logger = options.logger ?? defaultLogger;
+    const tag = `[${options.serverName}]`;
+    return async function handleMcp(request) {
+        const auth = await authenticator.authenticate(request);
+        if (!auth)
+            return jsonResponse({ error: 'Unauthorized' }, 401);
+        let body;
+        try {
+            body = await request.json();
+        }
+        catch {
+            return jsonRpcError(null, JSON_RPC_PARSE_ERROR, 'Parse error');
+        }
+        const parsed = JsonRpcRequestSchema.safeParse(body);
+        if (!parsed.success)
+            return jsonRpcError(null, JSON_RPC_INVALID_REQUEST, 'Invalid request');
+        const rpc = parsed.data;
+        const id = rpc.id ?? null;
+        try {
+            if (rpc.method === 'tools/list') {
+                return jsonRpcResult(id, {
+                    tools: options.tools.map((tool) => ({
+                        name: tool.name,
+                        description: tool.description,
+                        inputSchema: zodToJsonSchema(tool.inputSchema, { target: 'jsonSchema7' }),
+                    })),
+                });
+            }
+            if (rpc.method === 'tools/call') {
+                const params = ToolCallParamsSchema.safeParse(rpc.params);
+                if (!params.success) {
+                    return jsonRpcError(id, JSON_RPC_INVALID_PARAMS, 'Invalid params');
+                }
+                const tool = toolsByName.get(params.data.name);
+                if (!tool) {
+                    return jsonRpcError(id, JSON_RPC_METHOD_NOT_FOUND, `Unknown tool: ${params.data.name}`);
+                }
+                const inputResult = tool.inputSchema.safeParse(params.data.arguments ?? {});
+                if (!inputResult.success) {
+                    return jsonRpcError(id, JSON_RPC_INVALID_PARAMS, `Invalid arguments: ${inputResult.error.message}`);
+                }
+                const toolLogger = {
+                    debug: (m, c) => logger.debug(`${tag} ${m}`, c),
+                    info: (m, c) => logger.info(`${tag} ${m}`, c),
+                    warn: (m, c) => logger.warn(`${tag} ${m}`, c),
+                    error: (m, c) => logger.error(`${tag} ${m}`, c),
+                };
+                const result = await tool.handler(inputResult.data, {
+                    user: auth.user,
+                    apiKeyName: auth.apiKeyName,
+                    logger: toolLogger,
+                });
+                return jsonRpcResult(id, {
+                    content: [
+                        {
+                            type: 'text',
+                            text: typeof result === 'string' ? result : JSON.stringify(result),
+                        },
+                    ],
+                });
+            }
+            return jsonRpcError(id, JSON_RPC_METHOD_NOT_FOUND, `Method not found: ${rpc.method}`);
+        }
+        catch (error) {
+            logger.error(`${tag} MCP handler error`, { error: String(error), method: rpc.method });
+            return jsonRpcError(id, JSON_RPC_INTERNAL_ERROR, 'Internal error');
+        }
+    };
+}
+const JSON_RPC_PARSE_ERROR = -32700;
+const JSON_RPC_INVALID_REQUEST = -32600;
+const JSON_RPC_METHOD_NOT_FOUND = -32601;
+const JSON_RPC_INVALID_PARAMS = -32602;
+const JSON_RPC_INTERNAL_ERROR = -32603;
+const JsonRpcRequestSchema = z.object({
+    jsonrpc: z.literal('2.0'),
+    id: z.union([z.string(), z.number(), z.null()]).optional(),
+    method: z.string(),
+    params: z.unknown().optional(),
+});
+const ToolCallParamsSchema = z.object({
+    name: z.string(),
+    arguments: z.record(z.string(), z.unknown()).optional(),
+});
+function jsonResponse(body, status = 200) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'content-type': 'application/json' },
+    });
+}
+function jsonRpcResult(id, result) {
+    return jsonResponse({ jsonrpc: '2.0', id, result });
+}
+function jsonRpcError(id, code, message) {
+    return jsonResponse({ jsonrpc: '2.0', id, error: { code, message } });
+}
+//# sourceMappingURL=handler.js.map

package/dist/mcp/handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../src/mcp/handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAMpD,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAclD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA0B;IACzD,MAAM,aAAa,GACjB,OAAO,CAAC,aAAa,IAAI,8BAA8B,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IACvF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAA;IAC9C,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,UAAU,GAAG,CAAA;IAErC,OAAO,KAAK,UAAU,SAAS,CAAC,OAAgB;QAC9C,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;QACtD,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QAE9D,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CAAC,IAAI,EAAE,oBAAoB,EAAE,aAAa,CAAC,CAAA;QAChE,CAAC;QAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACnD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,YAAY,CAAC,IAAI,EAAE,wBAAwB,EAAE,iBAAiB,CAAC,CAAA;QAE3F,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAA;QACvB,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,IAAI,CAAA;QAEzB,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBAChC,OAAO,aAAa,CAAC,EAAE,EAAE;oBACvB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;wBAClC,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,WAAW,EAAE,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;qBAC1E,CAAC,CAAC;iBACJ,CAAC,CAAA;YACJ,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,OAAO,YAAY,CAAC,EAAE,EAAE,uBAAuB,EAAE,gBAAgB,CAAC,CAAA;gBACpE,CAAC;gBAED,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO,YAAY,CAAC,EAAE,EAAE,yBAAyB,EAAE,iBAAiB,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;gBACzF,CAAC;gBAED,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;gBAC3E,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,OAAO,YAAY,CACjB,EAAE,EACF,uBAAuB,EACvB,sBAAsB,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,CAClD,CAAA;gBACH,CAAC;gBAED,MAAM,UAAU,GAAW;oBACzB,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC/C,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC7C,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC7C,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;iBAChD,CAAA;gBAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE;oBAClD,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,MAAM,EAAE,UAAU;iBACnB,CAAC,CAAA;gBAEF,OAAO,aAAa,CAAC,EAAE,EAAE;oBACvB,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;yBACnE;qBACF;iBACF,CAAC,CAAA;YACJ,CAAC;YAED,OAAO,YAAY,CAAC,EAAE,EAAE,yBAAyB,EAAE,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;QACvF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;YACtF,OAAO,YAAY,CAAC,EAAE,EAAE,uBAAuB,EAAE,gBAAgB,CAAC,CAAA;QACpE,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED,MAAM,oBAAoB,GAAG,CAAC,KAAK,CAAA;AACnC,MAAM,wBAAwB,GAAG,CAAC,KAAK,CAAA;AACvC,MAAM,yBAAyB,GAAG,CAAC,KAAK,CAAA;AACxC,MAAM,uBAAuB,GAAG,CAAC,KAAK,CAAA;AACtC,MAAM,uBAAuB,GAAG,CAAC,KAAK,CAAA;AAEtC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACzB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAA;AAEF,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACxD,CAAC,CAAA;AAEF,SAAS,YAAY,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;IAC/C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,EAA0B,EAAE,MAAe;IAChE,OAAO,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;AACrD,CAAC;AAED,SAAS,YAAY,CAAC,EAA0B,EAAE,IAAY,EAAE,OAAe;IAC7E,OAAO,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;AACvE,CAAC"}

package/dist/mcp/index.d.ts

@@ -0,0 +1,5 @@
+export { createMcpHandler } from './handler.js';
+export type { McpHandlerOptions } from './handler.js';
+export { McpMetaSchema, withMeta } from './meta.js';
+export type { McpMeta } from './meta.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/mcp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAErD,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACnD,YAAY,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA"}

package/dist/mcp/index.js

@@ -0,0 +1,3 @@
+export { createMcpHandler } from './handler.js';
+export { McpMetaSchema, withMeta } from './meta.js';
+//# sourceMappingURL=index.js.map

package/dist/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAG/C,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA"}

package/dist/mcp/meta.d.ts

@@ -0,0 +1,74 @@
+import { z } from 'zod';
+/**
+ * Optional `_meta` payload Claude can attach to consequential tool calls.
+ * The audit writer reads `userPrompt`, `reasoning`, and `changesSummary`
+ * to give audit log entries narrative context.
+ */
+export declare const McpMetaSchema: z.ZodOptional<z.ZodObject<{
+    userPrompt: z.ZodOptional<z.ZodString>;
+    reasoning: z.ZodOptional<z.ZodString>;
+    changesSummary: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    reasoning?: string | undefined;
+    changesSummary?: string | undefined;
+    userPrompt?: string | undefined;
+}, {
+    reasoning?: string | undefined;
+    changesSummary?: string | undefined;
+    userPrompt?: string | undefined;
+}>>;
+export type McpMeta = z.infer<typeof McpMetaSchema>;
+/**
+ * Wraps a Zod object shape in a schema that also accepts an optional `_meta`
+ * field. Plugin authors use this for any tool whose input belongs in the
+ * audit log:
+ *
+ * ```ts
+ * const inputSchema = withMeta({ pageId: z.string() })
+ * type Input = z.infer<typeof inputSchema>  // { pageId: string; _meta?: McpMeta }
+ * ```
+ */
+export declare function withMeta<Shape extends z.ZodRawShape>(shape: Shape): z.ZodObject<Shape & {
+    _meta: z.ZodOptional<z.ZodObject<{
+        userPrompt: z.ZodOptional<z.ZodString>;
+        reasoning: z.ZodOptional<z.ZodString>;
+        changesSummary: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        reasoning?: string | undefined;
+        changesSummary?: string | undefined;
+        userPrompt?: string | undefined;
+    }, {
+        reasoning?: string | undefined;
+        changesSummary?: string | undefined;
+        userPrompt?: string | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, z.objectUtil.addQuestionMarks<z.baseObjectOutputType<Shape & {
+    _meta: z.ZodOptional<z.ZodObject<{
+        userPrompt: z.ZodOptional<z.ZodString>;
+        reasoning: z.ZodOptional<z.ZodString>;
+        changesSummary: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        reasoning?: string | undefined;
+        changesSummary?: string | undefined;
+        userPrompt?: string | undefined;
+    }, {
+        reasoning?: string | undefined;
+        changesSummary?: string | undefined;
+        userPrompt?: string | undefined;
+    }>>;
+}>, any> extends infer T ? { [k in keyof T]: T[k]; } : never, z.baseObjectInputType<Shape & {
+    _meta: z.ZodOptional<z.ZodObject<{
+        userPrompt: z.ZodOptional<z.ZodString>;
+        reasoning: z.ZodOptional<z.ZodString>;
+        changesSummary: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        reasoning?: string | undefined;
+        changesSummary?: string | undefined;
+        userPrompt?: string | undefined;
+    }, {
+        reasoning?: string | undefined;
+        changesSummary?: string | undefined;
+        userPrompt?: string | undefined;
+    }>>;
+}> extends infer T_1 ? { [k_1 in keyof T_1]: T_1[k_1]; } : never>;
+//# sourceMappingURL=meta.d.ts.map

package/dist/mcp/meta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta.d.ts","sourceRoot":"","sources":["../../src/mcp/meta.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;GAMb,CAAA;AAEb,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAA;AAEnD;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kEAEjE"}

package/dist/mcp/meta.js

@@ -0,0 +1,27 @@
+import { z } from 'zod';
+/**
+ * Optional `_meta` payload Claude can attach to consequential tool calls.
+ * The audit writer reads `userPrompt`, `reasoning`, and `changesSummary`
+ * to give audit log entries narrative context.
+ */
+export const McpMetaSchema = z
+    .object({
+    userPrompt: z.string().optional(),
+    reasoning: z.string().optional(),
+    changesSummary: z.string().optional(),
+})
+    .optional();
+/**
+ * Wraps a Zod object shape in a schema that also accepts an optional `_meta`
+ * field. Plugin authors use this for any tool whose input belongs in the
+ * audit log:
+ *
+ * ```ts
+ * const inputSchema = withMeta({ pageId: z.string() })
+ * type Input = z.infer<typeof inputSchema>  // { pageId: string; _meta?: McpMeta }
+ * ```
+ */
+export function withMeta(shape) {
+    return z.object({ ...shape, _meta: McpMetaSchema });
+}
+//# sourceMappingURL=meta.js.map

package/dist/mcp/meta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta.js","sourceRoot":"","sources":["../../src/mcp/meta.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,QAAQ,EAAE,CAAA;AAIb;;;;;;;;;GASG;AACH,MAAM,UAAU,QAAQ,CAA8B,KAAY;IAChE,OAAO,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAA;AACrD,CAAC"}

package/dist/utils/diff.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Computes a shallow diff between two records. Returns an entry per
+ * field whose value changed, with `before` and `after` values.
+ *
+ * Field equality is determined by JSON-string equality for objects and
+ * arrays, and `===` for primitives. That is sufficient for audit-log
+ * payloads where structures are JSON-shaped to begin with.
+ */
+export declare function shallowDiff<T extends Record<string, unknown>>(before: T, after: T): Record<string, {
+    before: unknown;
+    after: unknown;
+}>;
+//# sourceMappingURL=diff.d.ts.map

package/dist/utils/diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/utils/diff.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3D,MAAM,EAAE,CAAC,EACT,KAAK,EAAE,CAAC,GACP,MAAM,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,CASrD"}

package/dist/utils/diff.js

@@ -0,0 +1,31 @@
+/**
+ * Computes a shallow diff between two records. Returns an entry per
+ * field whose value changed, with `before` and `after` values.
+ *
+ * Field equality is determined by JSON-string equality for objects and
+ * arrays, and `===` for primitives. That is sufficient for audit-log
+ * payloads where structures are JSON-shaped to begin with.
+ */
+export function shallowDiff(before, after) {
+    const diff = {};
+    const keys = new Set([...Object.keys(before), ...Object.keys(after)]);
+    for (const key of keys) {
+        if (!isEqual(before[key], after[key])) {
+            diff[key] = { before: before[key], after: after[key] };
+        }
+    }
+    return diff;
+}
+function isEqual(a, b) {
+    if (Object.is(a, b))
+        return true;
+    if (a === null || b === null || a === undefined || b === undefined)
+        return false;
+    if (typeof a !== typeof b)
+        return false;
+    if (typeof a === 'object') {
+        return JSON.stringify(a) === JSON.stringify(b);
+    }
+    return false;
+}
+//# sourceMappingURL=diff.js.map

package/dist/utils/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../src/utils/diff.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CACzB,MAAS,EACT,KAAQ;IAER,MAAM,IAAI,GAAwD,EAAE,CAAA;IACpE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACrE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAA;QACxD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,OAAO,CAAC,CAAU,EAAE,CAAU;IACrC,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAChC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAChF,IAAI,OAAO,CAAC,KAAK,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IACvC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/utils/id.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Generates a short, URL-safe, hex-encoded random ID. Optionally prefixed
+ * with a token category (e.g. `evt_a1b2c3...`).
+ */
+export declare function generateId(prefix?: string): string;
+//# sourceMappingURL=id.d.ts.map

package/dist/utils/id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.d.ts","sourceRoot":"","sources":["../../src/utils/id.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAOlD"}

package/dist/utils/id.js

@@ -0,0 +1,13 @@
+/**
+ * Generates a short, URL-safe, hex-encoded random ID. Optionally prefixed
+ * with a token category (e.g. `evt_a1b2c3...`).
+ */
+export function generateId(prefix) {
+    const bytes = new Uint8Array(12);
+    crypto.getRandomValues(bytes);
+    const id = Array.from(bytes)
+        .map((b) => b.toString(16).padStart(2, '0'))
+        .join('');
+    return prefix ? `${prefix}_${id}` : id;
+}
+//# sourceMappingURL=id.js.map

package/dist/utils/id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.js","sourceRoot":"","sources":["../../src/utils/id.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,MAAe;IACxC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAChC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IAC7B,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACzB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAA;IACX,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AACxC,CAAC"}

package/dist/utils/index.d.ts

@@ -0,0 +1,3 @@
+export { shallowDiff } from './diff.js';
+export { generateId } from './id.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA"}

package/dist/utils/index.js

@@ -0,0 +1,3 @@
+export { shallowDiff } from './diff.js';
+export { generateId } from './id.js';
+//# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA"}