@fuzdev/fuz_app 0.10.0 → 0.11.0

package/dist/actions/transports_ws.js

@@ -0,0 +1,94 @@
+/**
+ * WebSocket transport — sends JSON-RPC messages via WebSocket with request tracking.
+ *
+ * @module
+ */
+import { ThrownJsonrpcError, jsonrpc_error_messages, UNKNOWN_ERROR_MESSAGE, } from '../http/jsonrpc_errors.js';
+import { is_jsonrpc_notification, is_jsonrpc_request, is_jsonrpc_response, is_jsonrpc_error_response, to_jsonrpc_message_id, create_jsonrpc_error_response, } from '../http/jsonrpc_helpers.js';
+import { RequestTracker } from './request_tracker.svelte.js';
+export class FrontendWebsocketTransport {
+    transport_name = 'frontend_websocket_rpc';
+    #connection;
+    #receive;
+    #request_tracker;
+    #remove_message_handler;
+    #remove_error_handler;
+    constructor(connection, receive, request_timeout_ms) {
+        this.#connection = connection;
+        this.#receive = receive;
+        this.#request_tracker = new RequestTracker(request_timeout_ms);
+        // TODO maybe we want to do this setup elsewhere, not hardcoded like this
+        this.#remove_message_handler = connection.add_message_handler(async (event) => {
+            try {
+                const data = JSON.parse(event.data);
+                // TODO the `data.id !== null` check should be refactored, maybe we want the "Error Message Response" concept for non-null ids
+                // Check if this is a response to one of our requests
+                if (is_jsonrpc_response(data) || (is_jsonrpc_error_response(data) && data.id !== null)) {
+                    // This is a response to a request we sent
+                    this.#request_tracker.handle_message(data);
+                }
+                else if (is_jsonrpc_request(data) || is_jsonrpc_notification(data)) {
+                    // This is a new request/notification from the server
+                    await this.#receive(data);
+                }
+                else {
+                    console.warn('[ws_transport] received unknown message type:', data);
+                }
+            }
+            catch (error) {
+                console.error('[ws_transport] error parsing WebSocket message:', error);
+                // TODO maybe send the whole thing back wrapped in an error?
+                // can't reference anything else for a response
+            }
+        });
+        this.#remove_error_handler = connection.add_error_handler((event) => {
+            console.error('[ws_transport] WebSocket error:', event);
+        });
+    }
+    async send(message) {
+        if (!this.is_ready()) {
+            return create_jsonrpc_error_response(to_jsonrpc_message_id(message), jsonrpc_error_messages.service_unavailable('WebSocket not connected'));
+        }
+        try {
+            // If this is a JSON-RPC request with an id (not a notification), set up request tracking.
+            if (is_jsonrpc_request(message)) {
+                // TODO track the whole request?
+                const deferred = this.#request_tracker.track_request(message.id);
+                this.#connection.send(message);
+                // Return the promise that will resolve when the response is received
+                const result = await deferred.promise;
+                return result;
+            }
+            else if (is_jsonrpc_notification(message)) {
+                // For notifications, just send without tracking
+                this.#connection.send(message);
+                return null;
+            }
+            // Invalid message type - return error with id if available
+            return create_jsonrpc_error_response(to_jsonrpc_message_id(message), jsonrpc_error_messages.invalid_request());
+        }
+        catch (error) {
+            if (error instanceof ThrownJsonrpcError) {
+                return create_jsonrpc_error_response(to_jsonrpc_message_id(message), {
+                    code: error.code,
+                    message: error.message,
+                    data: error.data,
+                });
+            }
+            return create_jsonrpc_error_response(to_jsonrpc_message_id(message), jsonrpc_error_messages.internal_error(error.message || UNKNOWN_ERROR_MESSAGE));
+        }
+    }
+    is_ready() {
+        return this.#connection.connected;
+    }
+    dispose() {
+        if (this.#remove_message_handler) {
+            this.#remove_message_handler();
+            this.#remove_message_handler = null;
+        }
+        if (this.#remove_error_handler) {
+            this.#remove_error_handler();
+            this.#remove_error_handler = null;
+        }
+    }
+}

package/dist/actions/transports_ws_backend.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Backend WebSocket transport — manages server-side WebSocket connections
+ * with session tracking and revocation support.
+ *
+ * @module
+ */
+import type { WSContext } from 'hono/ws';
+import type { JsonrpcNotification, JsonrpcRequest, JsonrpcResponseOrError, JsonrpcErrorResponse } from '../http/jsonrpc.js';
+import { type Uuid } from '../uuid.js';
+import { type Transport } from './transports.js';
+export declare class BackendWebsocketTransport implements Transport {
+    #private;
+    readonly transport_name: "backend_websocket_rpc";
+    /**
+     * Add a new WebSocket connection with auth info.
+     * Session connections pass a token hash for targeted revocation.
+     * Bearer token connections (api_token, daemon_token) pass null —
+     * they're still reachable via {@link close_sockets_for_account}.
+     */
+    add_connection(ws: WSContext, token_hash: string | null, account_id: Uuid): Uuid;
+    /**
+     * Remove a WebSocket connection and its auth tracking data.
+     * Idempotent — safe to call after revocation has already cleaned up.
+     */
+    remove_connection(ws: WSContext): void;
+    /**
+     * Close all sockets associated with a specific session token hash.
+     *
+     * @returns the number of sockets closed
+     */
+    close_sockets_for_session(token_hash: string): number;
+    /**
+     * Close all sockets associated with a specific account.
+     *
+     * @returns the number of sockets closed
+     */
+    close_sockets_for_account(account_id: Uuid): number;
+    send(message: JsonrpcRequest): Promise<JsonrpcResponseOrError>;
+    send(message: JsonrpcNotification): Promise<JsonrpcErrorResponse | null>;
+    is_ready(): boolean;
+}
+//# sourceMappingURL=transports_ws_backend.d.ts.map

package/dist/actions/transports_ws_backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transports_ws_backend.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/transports_ws_backend.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,SAAS,CAAC;AACvC,OAAO,KAAK,EAGX,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,oBAAoB,EACpB,MAAM,oBAAoB,CAAC;AAQ5B,OAAO,EAAc,KAAK,IAAI,EAAC,MAAM,YAAY,CAAC;AAClD,OAAO,EAA2B,KAAK,SAAS,EAAC,MAAM,iBAAiB,CAAC;AAIzE,qBAAa,yBAA0B,YAAW,SAAS;;IAC1D,QAAQ,CAAC,cAAc,EAAG,uBAAuB,CAAU;IAY3D;;;;;OAKG;IACH,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,EAAE,UAAU,EAAE,IAAI,GAAG,IAAI;IAWhF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI;IAOtC;;;;OAIG;IACH,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;IAcrD;;;;OAIG;IACH,yBAAyB,CAAC,UAAU,EAAE,IAAI,GAAG,MAAM;IAiC7C,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAC9D,IAAI,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IA4C9E,QAAQ,IAAI,OAAO;CAGnB"}

package/dist/actions/transports_ws_backend.js

@@ -0,0 +1,133 @@
+/**
+ * Backend WebSocket transport — manages server-side WebSocket connections
+ * with session tracking and revocation support.
+ *
+ * @module
+ */
+import { jsonrpc_error_messages } from '../http/jsonrpc_errors.js';
+import { create_jsonrpc_error_response, to_jsonrpc_message_id, is_jsonrpc_request, } from '../http/jsonrpc_helpers.js';
+import { create_uuid } from '../uuid.js';
+import { WS_CLOSE_SESSION_REVOKED } from './transports.js';
+// TODO support a SSE backend transport
+export class BackendWebsocketTransport {
+    transport_name = 'backend_websocket_rpc';
+    // Map connection IDs to WebSocket contexts
+    #connections = new Map();
+    // Reverse map to find connection ID by socket
+    #connection_ids = new WeakMap();
+    // Session auth tracking — parallel maps keyed by connection ID
+    #connection_token_hashes = new Map();
+    #connection_account_ids = new Map();
+    /**
+     * Add a new WebSocket connection with auth info.
+     * Session connections pass a token hash for targeted revocation.
+     * Bearer token connections (api_token, daemon_token) pass null —
+     * they're still reachable via {@link close_sockets_for_account}.
+     */
+    add_connection(ws, token_hash, account_id) {
+        const connection_id = create_uuid();
+        this.#connections.set(connection_id, ws);
+        this.#connection_ids.set(ws, connection_id);
+        if (token_hash !== null) {
+            this.#connection_token_hashes.set(connection_id, token_hash);
+        }
+        this.#connection_account_ids.set(connection_id, account_id);
+        return connection_id;
+    }
+    /**
+     * Remove a WebSocket connection and its auth tracking data.
+     * Idempotent — safe to call after revocation has already cleaned up.
+     */
+    remove_connection(ws) {
+        const connection_id = this.#connection_ids.get(ws);
+        if (connection_id) {
+            this.#cleanup_connection(connection_id, ws);
+        }
+    }
+    /**
+     * Close all sockets associated with a specific session token hash.
+     *
+     * @returns the number of sockets closed
+     */
+    close_sockets_for_session(token_hash) {
+        let count = 0;
+        for (const [connection_id, hash] of this.#connection_token_hashes) {
+            if (hash === token_hash) {
+                const ws = this.#connections.get(connection_id);
+                if (ws) {
+                    this.#revoke_connection(connection_id, ws);
+                    count++;
+                }
+            }
+        }
+        return count;
+    }
+    /**
+     * Close all sockets associated with a specific account.
+     *
+     * @returns the number of sockets closed
+     */
+    close_sockets_for_account(account_id) {
+        let count = 0;
+        for (const [connection_id, id] of this.#connection_account_ids) {
+            if (id === account_id) {
+                const ws = this.#connections.get(connection_id);
+                if (ws) {
+                    this.#revoke_connection(connection_id, ws);
+                    count++;
+                }
+            }
+        }
+        return count;
+    }
+    /**
+     * Remove all tracking state for a connection.
+     */
+    #cleanup_connection(connection_id, ws) {
+        this.#connections.delete(connection_id);
+        this.#connection_ids.delete(ws);
+        this.#connection_token_hashes.delete(connection_id);
+        this.#connection_account_ids.delete(connection_id);
+    }
+    /**
+     * Clean up a connection and close its socket with a revocation code.
+     */
+    #revoke_connection(connection_id, ws) {
+        this.#cleanup_connection(connection_id, ws);
+        ws.close(WS_CLOSE_SESSION_REVOKED, 'Session revoked');
+    }
+    async send(message) {
+        // TODO currently just broadcasts all messages to all clients, the transport abstraction is still a WIP
+        if (is_jsonrpc_request(message)) {
+            return create_jsonrpc_error_response(message.id, 
+            // TODO maybe use a not yet implemented error message?
+            jsonrpc_error_messages.internal_error('TODO not yet implemented - backend WebSocket transport cannot send requests expecting responses yet'));
+        }
+        try {
+            await this.#broadcast(message);
+            return null;
+        }
+        catch (error) {
+            return create_jsonrpc_error_response(to_jsonrpc_message_id(message), jsonrpc_error_messages.internal_error(error instanceof Error ? error.message : 'failed to broadcast notification'));
+        }
+    }
+    /**
+     * Broadcast a message to all connected clients.
+     */
+    #broadcast(message) {
+        const serialized = JSON.stringify(message);
+        for (const ws of this.#connections.values()) {
+            try {
+                ws.send(serialized);
+            }
+            catch (error) {
+                console.error('[backend websocket transport] Error broadcasting to client:', error);
+            }
+        }
+        // TODO hack - remove if not ever needed, I assume this will need to be async so let's hold that assumption
+        return Promise.resolve();
+    }
+    is_ready() {
+        return this.#connections.size > 0;
+    }
+}

package/dist/http/jsonrpc.d.ts

@@ -1,11 +1,12 @@
 /**
  * JSON-RPC 2.0 envelope schemas for RPC dispatch and SAES transport.
  *
- * MCP-superset: includes optional `_meta` and `progressToken` fields
- * on params and results. These are `optional()` so consumers that
- * don't use MCP are unaffected.
- *
  * Following MCP, params and result are object-only (no positional arrays).
+ * MCP `_meta` types (`JsonrpcMcpMeta`, `JsonrpcRequestParamsMeta`) are
+ * exported as building blocks for per-action schemas but are NOT validated
+ * at the envelope level — `_meta` content validation belongs in per-action
+ * schemas where it produces the correct error code (`invalid_params`, not
+ * `invalid_request`).
  *
  * @source https://github.com/modelcontextprotocol/typescript-sdk
  * @see https://www.jsonrpc.org/specification
@@ -30,67 +31,35 @@ export declare const JsonrpcRequestParamsMeta: z.ZodObject<{
     progressToken: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
 }, z.core.$loose>;
 export type JsonrpcRequestParamsMeta = z.infer<typeof JsonrpcRequestParamsMeta>;
-/** Request params — loose object with optional MCP metadata. */
-export declare const JsonrpcRequestParams: z.ZodObject<{
-    _meta: z.ZodOptional<z.ZodObject<{
-        progressToken: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
-    }, z.core.$loose>>;
-}, z.core.$loose>;
+/** Request params — loose object. Per-action schemas validate `_meta` content. */
+export declare const JsonrpcRequestParams: z.ZodObject<{}, z.core.$loose>;
 export type JsonrpcRequestParams = z.infer<typeof JsonrpcRequestParams>;
-/** Notification params — loose object with optional MCP metadata. */
-export declare const JsonrpcNotificationParams: z.ZodObject<{
-    /**
-     * Reserved by MCP to allow clients and servers to attach
-     * additional metadata to their notifications.
-     */
-    _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
-}, z.core.$loose>;
+/** Notification params — loose object. Per-action schemas validate `_meta` content. */
+export declare const JsonrpcNotificationParams: z.ZodObject<{}, z.core.$loose>;
 export type JsonrpcNotificationParams = z.infer<typeof JsonrpcNotificationParams>;
-/** Result — loose object with optional MCP metadata. */
-export declare const JsonrpcResult: z.ZodObject<{
-    /**
-     * Reserved by the protocol to allow clients and servers
-     * to attach additional metadata to their responses.
-     */
-    _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
-}, z.core.$loose>;
+/** Result — loose object. Per-action schemas validate `_meta` content. */
+export declare const JsonrpcResult: z.ZodObject<{}, z.core.$loose>;
 export type JsonrpcResult = z.infer<typeof JsonrpcResult>;
 /** A request that expects a response. */
 export declare const JsonrpcRequest: z.ZodObject<{
     jsonrpc: z.ZodLiteral<"2.0">;
     id: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
     method: z.ZodString;
-    params: z.ZodOptional<z.ZodObject<{
-        _meta: z.ZodOptional<z.ZodObject<{
-            progressToken: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
-        }, z.core.$loose>>;
-    }, z.core.$loose>>;
+    params: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
 }, z.core.$loose>;
 export type JsonrpcRequest = z.infer<typeof JsonrpcRequest>;
 /** A notification which does not expect a response. */
 export declare const JsonrpcNotification: z.ZodObject<{
     jsonrpc: z.ZodLiteral<"2.0">;
     method: z.ZodString;
-    params: z.ZodOptional<z.ZodObject<{
-        /**
-         * Reserved by MCP to allow clients and servers to attach
-         * additional metadata to their notifications.
-         */
-        _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
-    }, z.core.$loose>>;
+    params: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
 }, z.core.$loose>;
 export type JsonrpcNotification = z.infer<typeof JsonrpcNotification>;
 /** A successful (non-error) response to a request. */
 export declare const JsonrpcResponse: z.ZodObject<{
     jsonrpc: z.ZodLiteral<"2.0">;
     id: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
-    result: z.ZodObject<{
-        /**
-         * Reserved by the protocol to allow clients and servers
-         * to attach additional metadata to their responses.
-         */
-        _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
-    }, z.core.$loose>;
+    result: z.ZodObject<{}, z.core.$loose>;
 }, z.core.$loose>;
 export type JsonrpcResponse = z.infer<typeof JsonrpcResponse>;
 export declare const JSONRPC_PARSE_ERROR = -32700;
@@ -133,13 +102,7 @@ export type JsonrpcErrorResponse = z.infer<typeof JsonrpcErrorResponse>;
 export declare const JsonrpcResponseOrError: z.ZodUnion<readonly [z.ZodObject<{
     jsonrpc: z.ZodLiteral<"2.0">;
     id: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
-    result: z.ZodObject<{
-        /**
-         * Reserved by the protocol to allow clients and servers
-         * to attach additional metadata to their responses.
-         */
-        _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
-    }, z.core.$loose>;
+    result: z.ZodObject<{}, z.core.$loose>;
 }, z.core.$loose>, z.ZodObject<{
     jsonrpc: z.ZodLiteral<"2.0">;
     id: z.ZodNullable<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
@@ -155,31 +118,15 @@ export declare const JsonrpcMessage: z.ZodUnion<readonly [z.ZodObject<{
     jsonrpc: z.ZodLiteral<"2.0">;
     id: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
     method: z.ZodString;
-    params: z.ZodOptional<z.ZodObject<{
-        _meta: z.ZodOptional<z.ZodObject<{
-            progressToken: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
-        }, z.core.$loose>>;
-    }, z.core.$loose>>;
+    params: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
 }, z.core.$loose>, z.ZodObject<{
     jsonrpc: z.ZodLiteral<"2.0">;
     method: z.ZodString;
-    params: z.ZodOptional<z.ZodObject<{
-        /**
-         * Reserved by MCP to allow clients and servers to attach
-         * additional metadata to their notifications.
-         */
-        _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
-    }, z.core.$loose>>;
+    params: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
 }, z.core.$loose>, z.ZodObject<{
     jsonrpc: z.ZodLiteral<"2.0">;
     id: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
-    result: z.ZodObject<{
-        /**
-         * Reserved by the protocol to allow clients and servers
-         * to attach additional metadata to their responses.
-         */
-        _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
-    }, z.core.$loose>;
+    result: z.ZodObject<{}, z.core.$loose>;
 }, z.core.$loose>, z.ZodObject<{
     jsonrpc: z.ZodLiteral<"2.0">;
     id: z.ZodNullable<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
@@ -195,44 +142,22 @@ export declare const JsonrpcMessageFromClientToServer: z.ZodUnion<readonly [z.Zo
     jsonrpc: z.ZodLiteral<"2.0">;
     id: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
     method: z.ZodString;
-    params: z.ZodOptional<z.ZodObject<{
-        _meta: z.ZodOptional<z.ZodObject<{
-            progressToken: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
-        }, z.core.$loose>>;
-    }, z.core.$loose>>;
+    params: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
 }, z.core.$loose>, z.ZodObject<{
     jsonrpc: z.ZodLiteral<"2.0">;
     method: z.ZodString;
-    params: z.ZodOptional<z.ZodObject<{
-        /**
-         * Reserved by MCP to allow clients and servers to attach
-         * additional metadata to their notifications.
-         */
-        _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
-    }, z.core.$loose>>;
+    params: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
 }, z.core.$loose>]>;
 export type JsonrpcMessageFromClientToServer = z.infer<typeof JsonrpcMessageFromClientToServer>;
 /** Messages a server can send to a client (notification, response, or error response). */
 export declare const JsonrpcMessageFromServerToClient: z.ZodUnion<readonly [z.ZodObject<{
     jsonrpc: z.ZodLiteral<"2.0">;
     method: z.ZodString;
-    params: z.ZodOptional<z.ZodObject<{
-        /**
-         * Reserved by MCP to allow clients and servers to attach
-         * additional metadata to their notifications.
-         */
-        _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
-    }, z.core.$loose>>;
+    params: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
 }, z.core.$loose>, z.ZodObject<{
     jsonrpc: z.ZodLiteral<"2.0">;
     id: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
-    result: z.ZodObject<{
-        /**
-         * Reserved by the protocol to allow clients and servers
-         * to attach additional metadata to their responses.
-         */
-        _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
-    }, z.core.$loose>;
+    result: z.ZodObject<{}, z.core.$loose>;
 }, z.core.$loose>, z.ZodObject<{
     jsonrpc: z.ZodLiteral<"2.0">;
     id: z.ZodNullable<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;

package/dist/http/jsonrpc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jsonrpc.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/http/jsonrpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,eAAO,MAAM,eAAe,QAAQ,CAAC;AAErC,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,iDAAoC,CAAC;AAClE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,8BAA8B;AAC9B,eAAO,MAAM,aAAa,aAAa,CAAC;AACxC,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,4FAA4F;AAC5F,eAAO,MAAM,oBAAoB,iDAAoC,CAAC;AACtE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,gFAAgF;AAChF,eAAO,MAAM,cAAc,gCAAoB,CAAC;AAChD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,+EAA+E;AAC/E,eAAO,MAAM,wBAAwB;;iBAOnC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF,gEAAgE;AAChE,eAAO,MAAM,oBAAoB;;;;iBAE/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,qEAAqE;AACrE,eAAO,MAAM,yBAAyB;IACrC;;;OAGG;;iBAEF,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF,wDAAwD;AACxD,eAAO,MAAM,aAAa;IACzB;;;OAGG;;iBAEF,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,yCAAyC;AACzC,eAAO,MAAM,cAAc;;;;;;;;;iBAKzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,uDAAuD;AACvD,eAAO,MAAM,mBAAmB;;;;QA5B/B;;;WAGG;;;iBA6BF,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,sDAAsD;AACtD,eAAO,MAAM,eAAe;;;;QA1B3B;;;WAGG;;;iBA2BF,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAK9D,eAAO,MAAM,mBAAmB,SAAS,CAAC;AAC1C,eAAO,MAAM,uBAAuB,SAAS,CAAC;AAC9C,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAC/C,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAC7C,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAE7C,6DAA6D;AAC7D,eAAO,MAAM,0BAA0B,SAAS,CAAC;AACjD,2DAA2D;AAC3D,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAE/C,iEAAiE;AACjE,eAAO,MAAM,sBAAsB,kEAIF,CAAC;AAClC,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,gBAAgB,uMAO3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,qDAAqD;AACrD,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,mDAAmD;AACnD,eAAO,MAAM,oBAAoB;;;;;;;;iBAI/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,kDAAkD;AAClD,eAAO,MAAM,sBAAsB;;;;QAtFlC;;;WAGG;;;;;;;;;;;mBAmFkF,CAAC;AACvF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,uFAAuF;AACvF,eAAO,MAAM,cAAc;;;;;;;;;;;;;QApG1B;;;WAGG;;;;;;;QAOH;;;WAGG;;;;;;;;;;;mBA4FF,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,wEAAwE;AACxE,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;QA7G5C;;;WAGG;;;mBA0G0F,CAAC;AAC/F,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAEhG,0FAA0F;AAC1F,eAAO,MAAM,gCAAgC;;;;QAjH5C;;;WAGG;;;;;;;QAOH;;;WAGG;;;;;;;;;;;mBAwGF,CAAC;AACH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC"}
+{"version":3,"file":"jsonrpc.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/http/jsonrpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,eAAO,MAAM,eAAe,QAAQ,CAAC;AAErC,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,iDAAoC,CAAC;AAClE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,8BAA8B;AAC9B,eAAO,MAAM,aAAa,aAAa,CAAC;AACxC,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,4FAA4F;AAC5F,eAAO,MAAM,oBAAoB,iDAAoC,CAAC;AACtE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,gFAAgF;AAChF,eAAO,MAAM,cAAc,gCAAoB,CAAC;AAChD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,+EAA+E;AAC/E,eAAO,MAAM,wBAAwB;;iBAOnC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF,kFAAkF;AAClF,eAAO,MAAM,oBAAoB,gCAAoB,CAAC;AACtD,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,uFAAuF;AACvF,eAAO,MAAM,yBAAyB,gCAAoB,CAAC;AAC3D,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF,0EAA0E;AAC1E,eAAO,MAAM,aAAa,gCAAoB,CAAC;AAC/C,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,yCAAyC;AACzC,eAAO,MAAM,cAAc;;;;;iBAKzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,uDAAuD;AACvD,eAAO,MAAM,mBAAmB;;;;iBAI9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,sDAAsD;AACtD,eAAO,MAAM,eAAe;;;;iBAI1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAK9D,eAAO,MAAM,mBAAmB,SAAS,CAAC;AAC1C,eAAO,MAAM,uBAAuB,SAAS,CAAC;AAC9C,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAC/C,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAC7C,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAE7C,6DAA6D;AAC7D,eAAO,MAAM,0BAA0B,SAAS,CAAC;AACjD,2DAA2D;AAC3D,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAE/C,iEAAiE;AACjE,eAAO,MAAM,sBAAsB,kEAIF,CAAC;AAClC,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,gBAAgB,uMAO3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,qDAAqD;AACrD,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,mDAAmD;AACnD,eAAO,MAAM,oBAAoB;;;;;;;;iBAI/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,kDAAkD;AAClD,eAAO,MAAM,sBAAsB;;;;;;;;;;;;mBAAmD,CAAC;AACvF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,uFAAuF;AACvF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;mBAKzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,wEAAwE;AACxE,eAAO,MAAM,gCAAgC;;;;;;;;;mBAAiD,CAAC;AAC/F,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAEhG,0FAA0F;AAC1F,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;mBAI3C,CAAC;AACH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC"}

package/dist/http/jsonrpc.js

@@ -1,11 +1,12 @@
 /**
  * JSON-RPC 2.0 envelope schemas for RPC dispatch and SAES transport.
  *
- * MCP-superset: includes optional `_meta` and `progressToken` fields
- * on params and results. These are `optional()` so consumers that
- * don't use MCP are unaffected.
- *
  * Following MCP, params and result are object-only (no positional arrays).
+ * MCP `_meta` types (`JsonrpcMcpMeta`, `JsonrpcRequestParamsMeta`) are
+ * exported as building blocks for per-action schemas but are NOT validated
+ * at the envelope level — `_meta` content validation belongs in per-action
+ * schemas where it produces the correct error code (`invalid_params`, not
+ * `invalid_request`).
  *
  * @source https://github.com/modelcontextprotocol/typescript-sdk
  * @see https://www.jsonrpc.org/specification
@@ -30,26 +31,12 @@ export const JsonrpcRequestParamsMeta = JsonrpcMcpMeta.extend({
      */
     progressToken: JsonrpcProgressToken.optional(),
 });
-/** Request params — loose object with optional MCP metadata. */
-export const JsonrpcRequestParams = z.looseObject({
-    _meta: JsonrpcRequestParamsMeta.optional(),
-});
-/** Notification params — loose object with optional MCP metadata. */
-export const JsonrpcNotificationParams = z.looseObject({
-    /**
-     * Reserved by MCP to allow clients and servers to attach
-     * additional metadata to their notifications.
-     */
-    _meta: JsonrpcMcpMeta.optional(),
-});
-/** Result — loose object with optional MCP metadata. */
-export const JsonrpcResult = z.looseObject({
-    /**
-     * Reserved by the protocol to allow clients and servers
-     * to attach additional metadata to their responses.
-     */
-    _meta: JsonrpcMcpMeta.optional(),
-});
+/** Request params — loose object. Per-action schemas validate `_meta` content. */
+export const JsonrpcRequestParams = z.looseObject({});
+/** Notification params — loose object. Per-action schemas validate `_meta` content. */
+export const JsonrpcNotificationParams = z.looseObject({});
+/** Result — loose object. Per-action schemas validate `_meta` content. */
+export const JsonrpcResult = z.looseObject({});
 /** A request that expects a response. */
 export const JsonrpcRequest = z.looseObject({
     jsonrpc: z.literal(JSONRPC_VERSION),

package/dist/http/jsonrpc_errors.d.ts

@@ -17,6 +17,8 @@
  * @module
  */
 import { type JsonrpcErrorCode, type JsonrpcErrorObject } from './jsonrpc.js';
+/** Default message for unknown errors. */
+export declare const UNKNOWN_ERROR_MESSAGE = "unknown error";
 /** Names of standard and general application JSON-RPC error codes. */
 export type JsonrpcErrorName = 'parse_error' | 'invalid_request' | 'method_not_found' | 'invalid_params' | 'internal_error' | 'unauthenticated' | 'forbidden' | 'not_found' | 'conflict' | 'validation_error' | 'rate_limited' | 'service_unavailable' | 'timeout';
 /**

package/dist/http/jsonrpc_errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jsonrpc_errors.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/http/jsonrpc_errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAMN,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,MAAM,cAAc,CAAC;AAEtB,sEAAsE;AACtE,MAAM,MAAM,gBAAgB,GACzB,aAAa,GACb,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,WAAW,GACX,WAAW,GACX,UAAU,GACV,kBAAkB,GAClB,cAAc,GACd,qBAAqB,GACrB,SAAS,CAAC;AAEb;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB;0BAEK,gBAAgB;8BACR,gBAAgB;+BACd,gBAAgB;6BACpB,gBAAgB;6BAChB,gBAAgB;IAG1D;;;;OAIG;8BACwB,gBAAgB;IAC3C;;;OAGG;wBACkB,gBAAgB;wBAChB,gBAAgB;uBACjB,gBAAgB;IACpC;;;OAGG;+BACyB,gBAAgB;2BACpB,gBAAgB;kCACT,gBAAgB;sBAC5B,gBAAgB;CAC2B,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB;kCACb,OAAO,KAAG,kBAAkB;sCAMxB,OAAO,KAAG,kBAAkB;yCAMzB,MAAM,SAAS,OAAO,KAAG,kBAAkB;wCAM5C,MAAM,SAAS,OAAO,KAAG,kBAAkB;wCAO5D,MAAM,SACR,OAAO,KACZ,kBAAkB;yCAMM,MAAM,SAA6B,OAAO,KAAG,kBAAkB;mCAMrE,MAAM,SAAuB,OAAO,KAAG,kBAAkB;oCAMvD,MAAM,SAAS,OAAO,KAAG,kBAAkB;kCAM9C,MAAM,SAAsB,OAAO,KAAG,kBAAkB;0CAMhD,MAAM,SAA8B,OAAO,KAAG,kBAAkB;sCAMpE,MAAM,SAA0B,OAAO,KAAG,kBAAkB;6CAO1E,MAAM,SACR,OAAO,KACZ,kBAAkB;iCAMF,MAAM,SAAqB,OAAO,KAAG,kBAAkB;CAKe,CAAC;AAE3F;;;;;GAKG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC5C,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,CAAC,EAAE,OAAO,CAAC;gBAEH,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,YAAY;CAK3F;AAWD;;;;GAIG;AACH,eAAO,MAAM,cAAc;8CAXQ,kBAAkB;kDAAlB,kBAAkB;gFAAlB,kBAAkB;+EAAlB,kBAAkB;+EAAlB,kBAAkB;gFAAlB,kBAAkB;0EAAlB,kBAAkB;2EAAlB,kBAAkB;yEAAlB,kBAAkB;iFAAlB,kBAAkB;6EAAlB,kBAAkB;oFAAlB,kBAAkB;wEAAlB,kBAAkB;CAyBqC,CAAC;AAI3F;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAcpE,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAMzC,CAAC;AAEvC;;;;;;;;GAQG;AACH,eAAO,MAAM,iCAAiC,GAAI,MAAM,gBAAgB,KAAG,MAClB,CAAC;AAE1D;;;;;;;GAOG;AACH,eAAO,MAAM,iCAAiC,GAAI,QAAQ,MAAM,KAAG,gBACa,CAAC"}
+{"version":3,"file":"jsonrpc_errors.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/http/jsonrpc_errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAMN,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,MAAM,cAAc,CAAC;AAEtB,0CAA0C;AAC1C,eAAO,MAAM,qBAAqB,kBAAkB,CAAC;AAErD,sEAAsE;AACtE,MAAM,MAAM,gBAAgB,GACzB,aAAa,GACb,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,WAAW,GACX,WAAW,GACX,UAAU,GACV,kBAAkB,GAClB,cAAc,GACd,qBAAqB,GACrB,SAAS,CAAC;AAEb;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB;0BAEK,gBAAgB;8BACR,gBAAgB;+BACd,gBAAgB;6BACpB,gBAAgB;6BAChB,gBAAgB;IAG1D;;;;OAIG;8BACwB,gBAAgB;IAC3C;;;OAGG;wBACkB,gBAAgB;wBAChB,gBAAgB;uBACjB,gBAAgB;IACpC;;;OAGG;+BACyB,gBAAgB;2BACpB,gBAAgB;kCACT,gBAAgB;sBAC5B,gBAAgB;CAC2B,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB;kCACb,OAAO,KAAG,kBAAkB;sCAMxB,OAAO,KAAG,kBAAkB;yCAMzB,MAAM,SAAS,OAAO,KAAG,kBAAkB;wCAM5C,MAAM,SAAS,OAAO,KAAG,kBAAkB;wCAO5D,MAAM,SACR,OAAO,KACZ,kBAAkB;yCAMM,MAAM,SAA6B,OAAO,KAAG,kBAAkB;mCAMrE,MAAM,SAAuB,OAAO,KAAG,kBAAkB;oCAMvD,MAAM,SAAS,OAAO,KAAG,kBAAkB;kCAM9C,MAAM,SAAsB,OAAO,KAAG,kBAAkB;0CAMhD,MAAM,SAA8B,OAAO,KAAG,kBAAkB;sCAMpE,MAAM,SAA0B,OAAO,KAAG,kBAAkB;6CAO1E,MAAM,SACR,OAAO,KACZ,kBAAkB;iCAMF,MAAM,SAAqB,OAAO,KAAG,kBAAkB;CAKe,CAAC;AAE3F;;;;;GAKG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC5C,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,CAAC,EAAE,OAAO,CAAC;gBAEH,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,YAAY;CAK3F;AAWD;;;;GAIG;AACH,eAAO,MAAM,cAAc;8CAXQ,kBAAkB;kDAAlB,kBAAkB;gFAAlB,kBAAkB;+EAAlB,kBAAkB;+EAAlB,kBAAkB;gFAAlB,kBAAkB;0EAAlB,kBAAkB;2EAAlB,kBAAkB;yEAAlB,kBAAkB;iFAAlB,kBAAkB;6EAAlB,kBAAkB;oFAAlB,kBAAkB;wEAAlB,kBAAkB;CAyBqC,CAAC;AAI3F;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAcpE,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAMzC,CAAC;AAEvC;;;;;;;;GAQG;AACH,eAAO,MAAM,iCAAiC,GAAI,MAAM,gBAAgB,KAAG,MAClB,CAAC;AAE1D;;;;;;;GAOG;AACH,eAAO,MAAM,iCAAiC,GAAI,QAAQ,MAAM,KAAG,gBACa,CAAC"}

package/dist/http/jsonrpc_errors.js

@@ -17,6 +17,8 @@
  * @module
  */
 import { JSONRPC_PARSE_ERROR, JSONRPC_INVALID_REQUEST, JSONRPC_METHOD_NOT_FOUND, JSONRPC_INVALID_PARAMS, JSONRPC_INTERNAL_ERROR, } from './jsonrpc.js';
+/** Default message for unknown errors. */
+export const UNKNOWN_ERROR_MESSAGE = 'unknown error';
 /**
  * Standard JSON-RPC error codes (5) plus general application codes (8).
  *

package/dist/http/surface.d.ts

@@ -7,7 +7,7 @@
  * @module
  */
 import { z } from 'zod';
-import type { SseEventSpec } from '../realtime/sse.js';
+import type { EventSpec } from '../realtime/sse.js';
 import type { MiddlewareSpec } from './middleware_spec.js';
 import type { RouteAuth, RouteSpec } from './route_spec.js';
 import type { RateLimitKey, RouteErrorSchemas } from './error_schemas.js';
@@ -114,7 +114,7 @@ export interface GenerateAppSurfaceOptions {
     route_specs: Array<RouteSpec>;
     middleware_specs: Array<MiddlewareSpec>;
     env_schema?: z.ZodObject;
-    event_specs?: Array<SseEventSpec>;
+    event_specs?: Array<EventSpec>;
     rpc_endpoints?: Array<RpcEndpointSpec>;
 }
 /**
@@ -138,7 +138,7 @@ export declare const env_schema_to_surface: (schema: z.ZodObject) => Array<AppSu
  * @param event_specs - event specs to convert
  * @returns array of event surface entries
  */
-export declare const events_to_surface: (event_specs: Array<SseEventSpec>) => Array<AppSurfaceEvent>;
+export declare const events_to_surface: (event_specs: Array<EventSpec>) => Array<AppSurfaceEvent>;
 /**
  * Generate a JSON-serializable attack surface from middleware, route specs,
  * and optional env/event metadata.

package/dist/http/surface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"surface.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/http/surface.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAC,SAAS,EAAE,SAAS,EAAC,MAAM,iBAAiB,CAAC;AAC1D,OAAO,KAAK,EAAC,YAAY,EAAE,iBAAiB,EAAC,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,0BAA0B,CAAC;AASxD,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,mBAAmB,CAAC;AAKnD,mEAAmE;AACnE,MAAM,WAAW,eAAe;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,CAAC;IAChB,qBAAqB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,WAAW,EAAE,OAAO,CAAC;IACrB,uEAAuE;IACvE,WAAW,EAAE,OAAO,CAAC;IACrB,oFAAoF;IACpF,cAAc,EAAE,YAAY,GAAG,IAAI,CAAC;IACpC,uFAAuF;IACvF,aAAa,EAAE,OAAO,CAAC;IACvB,8FAA8F;IAC9F,YAAY,EAAE,OAAO,CAAC;IACtB,wFAAwF;IACxF,YAAY,EAAE,OAAO,CAAC;IACtB,iEAAiE;IACjE,aAAa,EAAE,OAAO,CAAC;IACvB,mGAAmG;IACnG,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC9C;AAED,wEAAwE;AACxE,MAAM,WAAW,oBAAoB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,mGAAmG;IACnG,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC9C;AAED,sEAAsE;AACtE,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;CAClB;AAED,wEAAwE;AACxE,MAAM,WAAW,eAAe;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;CACvB;AAED,2FAA2F;AAC3F,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,CAAC;IAChB,qFAAqF;IACrF,YAAY,EAAE,OAAO,CAAC;IACtB,uDAAuD;IACvD,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,2EAA2E;AAC3E,MAAM,WAAW,qBAAqB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;CACpC;AAED,uFAAuF;AACvF,MAAM,WAAW,oBAAoB;IACpC,KAAK,EAAE,SAAS,GAAG,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,oDAAoD;AACpD,MAAM,WAAW,UAAU;IAC1B,UAAU,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAC/B,aAAa,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC5C,GAAG,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1B,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAC/B,WAAW,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC;CACzC;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,UAAU,CAAC;IACpB,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9B,gBAAgB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACxC,aAAa,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;CACtC;AAED,yDAAyD;AACzD,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;CAC1B;AAED,0CAA0C;AAC1C,MAAM,WAAW,yBAAyB;IACzC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9B,gBAAgB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACxC,UAAU,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;IACzB,WAAW,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAClC,aAAa,CAAC,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;CACvC;AAID;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,GACrC,YAAY,KAAK,CAAC,cAAc,CAAC,EACjC,YAAY,MAAM,KAChB,iBAAiB,GAAG,IAQtB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,GAAI,QAAQ,CAAC,CAAC,SAAS,KAAG,KAAK,CAAC,aAAa,CAe9E,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAAI,aAAa,KAAK,CAAC,YAAY,CAAC,KAAG,KAAK,CAAC,eAAe,CAOzF,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,GAAI,SAAS,yBAAyB,KAAG,UAwFzE,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,GAAI,SAAS,yBAAyB,KAAG,cAQ5E,CAAC"}
+{"version":3,"file":"surface.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/http/surface.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAC,SAAS,EAAE,SAAS,EAAC,MAAM,iBAAiB,CAAC;AAC1D,OAAO,KAAK,EAAC,YAAY,EAAE,iBAAiB,EAAC,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,0BAA0B,CAAC;AASxD,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,mBAAmB,CAAC;AAKnD,mEAAmE;AACnE,MAAM,WAAW,eAAe;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,CAAC;IAChB,qBAAqB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,WAAW,EAAE,OAAO,CAAC;IACrB,uEAAuE;IACvE,WAAW,EAAE,OAAO,CAAC;IACrB,oFAAoF;IACpF,cAAc,EAAE,YAAY,GAAG,IAAI,CAAC;IACpC,uFAAuF;IACvF,aAAa,EAAE,OAAO,CAAC;IACvB,8FAA8F;IAC9F,YAAY,EAAE,OAAO,CAAC;IACtB,wFAAwF;IACxF,YAAY,EAAE,OAAO,CAAC;IACtB,iEAAiE;IACjE,aAAa,EAAE,OAAO,CAAC;IACvB,mGAAmG;IACnG,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC9C;AAED,wEAAwE;AACxE,MAAM,WAAW,oBAAoB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,mGAAmG;IACnG,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC9C;AAED,sEAAsE;AACtE,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;CAClB;AAED,wEAAwE;AACxE,MAAM,WAAW,eAAe;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;CACvB;AAED,2FAA2F;AAC3F,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,CAAC;IAChB,qFAAqF;IACrF,YAAY,EAAE,OAAO,CAAC;IACtB,uDAAuD;IACvD,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,2EAA2E;AAC3E,MAAM,WAAW,qBAAqB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;CACpC;AAED,uFAAuF;AACvF,MAAM,WAAW,oBAAoB;IACpC,KAAK,EAAE,SAAS,GAAG,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,oDAAoD;AACpD,MAAM,WAAW,UAAU;IAC1B,UAAU,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAC/B,aAAa,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC5C,GAAG,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1B,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAC/B,WAAW,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC;CACzC;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,UAAU,CAAC;IACpB,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9B,gBAAgB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACxC,aAAa,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;CACtC;AAED,yDAAyD;AACzD,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;CAC1B;AAED,0CAA0C;AAC1C,MAAM,WAAW,yBAAyB;IACzC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9B,gBAAgB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACxC,UAAU,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;IACzB,WAAW,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/B,aAAa,CAAC,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;CACvC;AAID;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,GACrC,YAAY,KAAK,CAAC,cAAc,CAAC,EACjC,YAAY,MAAM,KAChB,iBAAiB,GAAG,IAQtB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,GAAI,QAAQ,CAAC,CAAC,SAAS,KAAG,KAAK,CAAC,aAAa,CAe9E,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAAI,aAAa,KAAK,CAAC,SAAS,CAAC,KAAG,KAAK,CAAC,eAAe,CAOtF,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,GAAI,SAAS,yBAAyB,KAAG,UAwFzE,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,GAAI,SAAS,yBAAyB,KAAG,cAQ5E,CAAC"}

package/dist/realtime/sse.d.ts

@@ -55,13 +55,15 @@ export declare const create_sse_response: <T = unknown>(c: Context, log: Logger)
 };
 /** SSE comment sent on connect to flush headers through proxies. Exported for test assertions. */
 export declare const SSE_CONNECTED_COMMENT = ": connected\n\n";
-/** Spec for an SSE event — declares params schema, description, and channel. */
-export interface SseEventSpec {
+/** Spec for a push event — declares params schema, description, and channel. */
+export interface EventSpec {
     method: string;
     params: z.ZodType;
     description: string;
     channel?: string;
 }
+/** @deprecated Use `EventSpec` instead. */
+export type SseEventSpec = EventSpec;
 /**
  * Create a broadcaster that validates events in DEV mode.
  *
@@ -74,7 +76,7 @@ export interface SseEventSpec {
  */
 export declare const create_validated_broadcaster: <T extends SseNotification>(broadcaster: {
     broadcast: (channel: string, data: T) => void;
-}, event_specs: Array<SseEventSpec>, log: Logger) => {
+}, event_specs: Array<EventSpec>, log: Logger) => {
     broadcast: (channel: string, data: T) => void;
 };
 //# sourceMappingURL=sse.d.ts.map

package/dist/realtime/sse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sse.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/realtime/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAC,OAAO,EAAC,MAAM,MAAM,CAAC;AAElC,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,yBAAyB,CAAC;AAEpD;;;;GAIG;AACH,MAAM,WAAW,SAAS,CAAC,CAAC,GAAG,OAAO;IACrC,mDAAmD;IACnD,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC;IACxB,6CAA6C;IAC7C,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,wBAAwB;IACxB,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,+FAA+F;IAC/F,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;CACnC;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC/B,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;IACf,+BAA+B;IAC/B,MAAM,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mBAAmB,GAAI,CAAC,GAAG,OAAO,EAC9C,GAAG,OAAO,EACV,KAAK,MAAM,KACT;IAAC,QAAQ,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAA;CAiD3C,CAAC;AAEF,kGAAkG;AAClG,eAAO,MAAM,qBAAqB,oBAAoB,CAAC;AAEvD,gFAAgF;AAChF,MAAM,WAAW,YAAY;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B,GAAI,CAAC,SAAS,eAAe,EACrE,aAAa;IAAC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,IAAI,CAAA;CAAC,EAC5D,aAAa,KAAK,CAAC,YAAY,CAAC,EAChC,KAAK,MAAM,KACT;IAAC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,IAAI,CAAA;CAmBhD,CAAC"}
+{"version":3,"file":"sse.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/realtime/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAC,OAAO,EAAC,MAAM,MAAM,CAAC;AAElC,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,yBAAyB,CAAC;AAEpD;;;;GAIG;AACH,MAAM,WAAW,SAAS,CAAC,CAAC,GAAG,OAAO;IACrC,mDAAmD;IACnD,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC;IACxB,6CAA6C;IAC7C,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,wBAAwB;IACxB,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,+FAA+F;IAC/F,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;CACnC;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC/B,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;IACf,+BAA+B;IAC/B,MAAM,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mBAAmB,GAAI,CAAC,GAAG,OAAO,EAC9C,GAAG,OAAO,EACV,KAAK,MAAM,KACT;IAAC,QAAQ,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAA;CAiD3C,CAAC;AAEF,kGAAkG;AAClG,eAAO,MAAM,qBAAqB,oBAAoB,CAAC;AAEvD,gFAAgF;AAChF,MAAM,WAAW,SAAS;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,2CAA2C;AAC3C,MAAM,MAAM,YAAY,GAAG,SAAS,CAAC;AAErC;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B,GAAI,CAAC,SAAS,eAAe,EACrE,aAAa;IAAC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,IAAI,CAAA;CAAC,EAC5D,aAAa,KAAK,CAAC,SAAS,CAAC,EAC7B,KAAK,MAAM,KACT;IAAC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,IAAI,CAAA;CAmBhD,CAAC"}