@ganju/utils 0.0.1

package/dist/mimeMessage.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildMimeMessage = exports.chunkBase64 = exports.formatFilenameHeader = exports.sanitizeFilename = void 0;
+const mailHeaders_1 = require("./mailHeaders");
+const sanitizeFilename = (name) => {
+    const cleaned = name.replace(/[\r\n"]/g, '').trim();
+    return cleaned || 'attachment';
+};
+exports.sanitizeFilename = sanitizeFilename;
+const formatFilenameHeader = (name) => {
+    const safe = (0, exports.sanitizeFilename)(name);
+    if (/^[\x20-\x7E]+$/.test(safe)) {
+        return `filename="${safe.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
+    }
+    return `filename*=UTF-8''${encodeURIComponent(safe)}`;
+};
+exports.formatFilenameHeader = formatFilenameHeader;
+const chunkBase64 = (b64) => b64.replace(/(.{76})/g, '$1\r\n');
+exports.chunkBase64 = chunkBase64;
+const buildMimeMessage = (input) => {
+    const headers = [];
+    headers.push(`To: ${(0, mailHeaders_1.formatMailHeader)(input.to)}`);
+    if (input.cc)
+        headers.push(`Cc: ${(0, mailHeaders_1.formatMailHeader)(input.cc)}`);
+    if (input.bcc)
+        headers.push(`Bcc: ${(0, mailHeaders_1.formatMailHeader)(input.bcc)}`);
+    headers.push(`Subject: ${(0, mailHeaders_1.formatMailHeader)(input.subject)}`);
+    if (input.inReplyTo)
+        headers.push(`In-Reply-To: ${(0, mailHeaders_1.sanitizeMailHeader)(input.inReplyTo)}`);
+    if (input.references)
+        headers.push(`References: ${(0, mailHeaders_1.sanitizeMailHeader)(input.references)}`);
+    headers.push('MIME-Version: 1.0');
+    const bodyContentType = input.contentType || 'text/html';
+    if (!input.attachments || input.attachments.length === 0) {
+        headers.push(`Content-Type: ${bodyContentType}; charset=utf-8`);
+        return `${headers.join('\r\n')}\r\n\r\n${input.body}`;
+    }
+    const boundary = `_ganju_${crypto.randomUUID().replace(/-/g, '')}`;
+    headers.push(`Content-Type: multipart/mixed; boundary="${boundary}"`);
+    const parts = [headers.join('\r\n'), ''];
+    parts.push(`--${boundary}`);
+    parts.push(`Content-Type: ${bodyContentType}; charset=utf-8`);
+    parts.push('Content-Transfer-Encoding: 7bit');
+    parts.push('');
+    parts.push(input.body);
+    for (const att of input.attachments) {
+        const safeName = (0, exports.sanitizeFilename)(att.filename);
+        parts.push(`--${boundary}`);
+        parts.push(`Content-Type: ${att.mimeType}; name="${safeName.replace(/"/g, '\\"')}"`);
+        parts.push('Content-Transfer-Encoding: base64');
+        parts.push(`Content-Disposition: attachment; ${(0, exports.formatFilenameHeader)(att.filename)}`);
+        parts.push('');
+        parts.push((0, exports.chunkBase64)(att.base64));
+    }
+    parts.push(`--${boundary}--`);
+    return parts.join('\r\n');
+};
+exports.buildMimeMessage = buildMimeMessage;

package/dist/oauth.d.ts

@@ -0,0 +1,21 @@
+export interface RefreshOAuthTokenInput {
+    tokenUrl: string;
+    clientId: string;
+    clientSecret: string;
+    refreshToken: string;
+}
+export interface RefreshedOAuthToken {
+    accessToken: string;
+    refreshToken?: string;
+    expiresIn?: number;
+    scope?: string;
+}
+export declare class OAuthReauthRequiredError extends Error {
+    readonly code: string;
+    constructor(code: string);
+}
+export declare const refreshOAuthToken: (input: RefreshOAuthTokenInput) => Promise<RefreshedOAuthToken>;
+export declare const buildReauthMetadata: (previous: Record<string, unknown> | null, reason: string) => Record<string, unknown>;
+export declare const clearReauthMetadata: (previous: Record<string, unknown> | null) => Record<string, unknown> | null;
+export declare const isCredentialNeedingReauth: (metadata: unknown) => boolean;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM;CAKzB;AAUD,eAAO,MAAM,iBAAiB,GAC5B,OAAO,sBAAsB,KAC5B,OAAO,CAAC,mBAAmB,CAsC7B,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC9B,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACxC,QAAQ,MAAM,KACb,MAAM,CAAC,MAAM,EAAE,OAAO,CAKvB,CAAC;AAEH,eAAO,MAAM,mBAAmB,GAC9B,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,KACvC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAO5B,CAAC;AAEF,eAAO,MAAM,yBAAyB,GACpC,UAAU,OAAO,KAChB,OAGF,CAAC"}

package/dist/oauth.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isCredentialNeedingReauth = exports.clearReauthMetadata = exports.buildReauthMetadata = exports.refreshOAuthToken = exports.OAuthReauthRequiredError = void 0;
+const constants_1 = require("./constants");
+class OAuthReauthRequiredError extends Error {
+    code;
+    constructor(code) {
+        super(`OAuth reauth required (${code})`);
+        this.name = 'OAuthReauthRequiredError';
+        this.code = code;
+    }
+}
+exports.OAuthReauthRequiredError = OAuthReauthRequiredError;
+const parseErrorCode = (body) => {
+    try {
+        return JSON.parse(body)?.error;
+    }
+    catch {
+        return undefined;
+    }
+};
+const refreshOAuthToken = async (input) => {
+    const response = await fetch(input.tokenUrl, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: new URLSearchParams({
+            client_id: input.clientId,
+            client_secret: input.clientSecret,
+            grant_type: 'refresh_token',
+            refresh_token: input.refreshToken
+        })
+    });
+    if (!response.ok) {
+        const body = await response.text();
+        const code = parseErrorCode(body);
+        if (code && constants_1.constants.REAUTH_ERROR_CODES.includes(code)) {
+            throw new OAuthReauthRequiredError(code);
+        }
+        throw new Error(`oauth refresh failed (${response.status}): ${body}`);
+    }
+    const tokens = (await response.json());
+    if (!tokens.access_token) {
+        throw new Error('oauth refresh missing access_token');
+    }
+    return {
+        accessToken: tokens.access_token,
+        refreshToken: tokens.refresh_token,
+        expiresIn: tokens.expires_in,
+        scope: tokens.scope
+    };
+};
+exports.refreshOAuthToken = refreshOAuthToken;
+const buildReauthMetadata = (previous, reason) => ({
+    ...(previous || {}),
+    needsReauth: true,
+    reauthReason: reason,
+    reauthAt: new Date().toISOString()
+});
+exports.buildReauthMetadata = buildReauthMetadata;
+const clearReauthMetadata = (previous) => {
+    if (!previous)
+        return null;
+    const next = { ...previous };
+    delete next.needsReauth;
+    delete next.reauthReason;
+    delete next.reauthAt;
+    return Object.keys(next).length > 0 ? next : null;
+};
+exports.clearReauthMetadata = clearReauthMetadata;
+const isCredentialNeedingReauth = (metadata) => {
+    if (!metadata || typeof metadata !== 'object')
+        return false;
+    return metadata.needsReauth === true;
+};
+exports.isCredentialNeedingReauth = isCredentialNeedingReauth;

package/dist/oauthProviders.d.ts

@@ -0,0 +1,12 @@
+export interface OAuthProviderConfig {
+    authUrl: string;
+    tokenUrl: string;
+    clientIdEnv: string;
+    clientSecretEnv: string;
+    defaultScopes: string[];
+    scopeParam?: 'scope' | 'user_scope';
+    tokenSource?: 'top' | 'authed_user';
+    omitGrantType?: boolean;
+}
+export declare const oauthProviders: Record<string, OAuthProviderConfig>;
+//# sourceMappingURL=oauthProviders.d.ts.map

package/dist/oauthProviders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthProviders.d.ts","sourceRoot":"","sources":["../src/oauthProviders.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;IAIxB,UAAU,CAAC,EAAE,OAAO,GAAG,YAAY,CAAC;IAIpC,WAAW,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC;IAKpC,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAQD,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAwF9D,CAAC"}

package/dist/oauthProviders.js

@@ -0,0 +1,99 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.oauthProviders = void 0;
+const constants_1 = require("./constants");
+// The managed OAuth apps we run. This lives in @ganju/utils rather than in
+// apps/api because three workers now need it: apps/api (the authorization flow),
+// and apps/tool-broker, which mints short-lived access tokens for user code and
+// must refresh with the same client credentials against the same token URLs.
+// Adding a provider in one place and not the other is exactly the drift this
+// prevents.
+exports.oauthProviders = {
+    [constants_1.constants.OAUTH_PROVIDER_GOOGLE_GMAIL]: {
+        authUrl: constants_1.constants.GOOGLE_OAUTH_AUTH_URL,
+        tokenUrl: constants_1.constants.GOOGLE_OAUTH_TOKEN_URL,
+        clientIdEnv: 'GOOGLE_CLIENT_ID',
+        clientSecretEnv: 'GOOGLE_CLIENT_SECRET',
+        defaultScopes: [
+            'https://www.googleapis.com/auth/gmail.readonly',
+            'https://www.googleapis.com/auth/gmail.send',
+            'https://www.googleapis.com/auth/gmail.modify',
+            'https://www.googleapis.com/auth/gmail.compose',
+            'https://www.googleapis.com/auth/gmail.labels'
+        ]
+    },
+    [constants_1.constants.OAUTH_PROVIDER_GOOGLE_DRIVE]: {
+        authUrl: constants_1.constants.GOOGLE_OAUTH_AUTH_URL,
+        tokenUrl: constants_1.constants.GOOGLE_OAUTH_TOKEN_URL,
+        clientIdEnv: 'GOOGLE_CLIENT_ID',
+        clientSecretEnv: 'GOOGLE_CLIENT_SECRET',
+        defaultScopes: [
+            'https://www.googleapis.com/auth/drive.readonly',
+            'https://www.googleapis.com/auth/drive.metadata.readonly'
+        ]
+    },
+    [constants_1.constants.OAUTH_PROVIDER_GOOGLE_CALENDAR]: {
+        authUrl: constants_1.constants.GOOGLE_OAUTH_AUTH_URL,
+        tokenUrl: constants_1.constants.GOOGLE_OAUTH_TOKEN_URL,
+        clientIdEnv: 'GOOGLE_CLIENT_ID',
+        clientSecretEnv: 'GOOGLE_CLIENT_SECRET',
+        defaultScopes: [
+            'https://www.googleapis.com/auth/calendar.events',
+            'https://www.googleapis.com/auth/calendar.readonly'
+        ]
+    },
+    [constants_1.constants.OAUTH_PROVIDER_MICROSOFT_OUTLOOK]: {
+        authUrl: constants_1.constants.MICROSOFT_OAUTH_AUTH_URL,
+        tokenUrl: constants_1.constants.MICROSOFT_OAUTH_TOKEN_URL,
+        clientIdEnv: 'MICROSOFT_CLIENT_ID',
+        clientSecretEnv: 'MICROSOFT_CLIENT_SECRET',
+        defaultScopes: [
+            'https://graph.microsoft.com/Mail.ReadWrite',
+            'https://graph.microsoft.com/Mail.Send',
+            'https://graph.microsoft.com/User.Read',
+            'offline_access'
+        ]
+    },
+    [constants_1.constants.OAUTH_PROVIDER_ONE_DRIVE]: {
+        authUrl: constants_1.constants.MICROSOFT_OAUTH_AUTH_URL,
+        tokenUrl: constants_1.constants.MICROSOFT_OAUTH_TOKEN_URL,
+        clientIdEnv: 'MICROSOFT_CLIENT_ID',
+        clientSecretEnv: 'MICROSOFT_CLIENT_SECRET',
+        defaultScopes: [
+            'https://graph.microsoft.com/Files.Read',
+            'https://graph.microsoft.com/Files.Read.All',
+            'offline_access'
+        ]
+    },
+    [constants_1.constants.OAUTH_PROVIDER_SLACK]: {
+        authUrl: constants_1.constants.SLACK_OAUTH_AUTH_URL,
+        tokenUrl: constants_1.constants.SLACK_OAUTH_TOKEN_URL,
+        clientIdEnv: 'SLACK_CLIENT_ID',
+        clientSecretEnv: 'SLACK_CLIENT_SECRET',
+        defaultScopes: [
+            'chat:write',
+            'channels:read',
+            'groups:read',
+            'mpim:read',
+            'im:read',
+            'users:read',
+            'users:read.email',
+            'files:write'
+        ],
+        omitGrantType: true
+    },
+    [constants_1.constants.OAUTH_PROVIDER_SLACK_USER]: {
+        authUrl: constants_1.constants.SLACK_OAUTH_AUTH_URL,
+        tokenUrl: constants_1.constants.SLACK_OAUTH_TOKEN_URL,
+        clientIdEnv: 'SLACK_CLIENT_ID',
+        clientSecretEnv: 'SLACK_CLIENT_SECRET',
+        // search.messages is the only Slack endpoint that needs a user (xoxp)
+        // token. Kept as its own provider so the OAuth flow stays generic —
+        // scopes are requested in the user_scope bucket, and the access_token
+        // is read from authed_user on callback.
+        defaultScopes: ['search:read'],
+        scopeParam: 'user_scope',
+        tokenSource: 'authed_user',
+        omitGrantType: true
+    }
+};

package/dist/outlookSend.d.ts

@@ -0,0 +1,19 @@
+export type OutlookOperation = 'send-email' | 'reply-email' | 'forward-email' | 'create-draft' | 'update-draft';
+export interface OutlookSendRequest {
+    accessToken: string;
+    operation: OutlookOperation;
+    body: string;
+    contentType?: 'html' | 'text';
+    to?: string;
+    subject?: string;
+    cc?: string;
+    bcc?: string;
+    messageId?: string;
+    replyAll?: boolean;
+    draftId?: string;
+}
+export interface OutlookSendResponse {
+    id: string;
+    conversationId?: string;
+}
+//# sourceMappingURL=outlookSend.d.ts.map

package/dist/outlookSend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outlookSend.d.ts","sourceRoot":"","sources":["../src/outlookSend.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,gBAAgB,GACxB,YAAY,GACZ,aAAa,GACb,eAAe,GACf,cAAc,GACd,cAAc,CAAC;AAEnB,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IAEb,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAG9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IAGb,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IAGnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAIlC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB"}

package/dist/outlookSend.js

@@ -0,0 +1,9 @@
+"use strict";
+// Wire protocol shared between the MCP worker (which builds the request) and
+// the resource-handler container (which talks to Microsoft Graph).
+//
+// The worker sends a multipart/form-data POST with one `metadata` field (JSON
+// matching OutlookSendRequest) and zero-or-more `attachment` fields. The
+// container decides per-attachment whether to inline it in the Graph message
+// JSON (≤3MB) or upload it via createUploadSession with chunked PUTs.
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/parseHttpError.d.ts

@@ -0,0 +1,2 @@
+export declare const parseHttpErrorMessage: (response: Response) => Promise<string>;
+//# sourceMappingURL=parseHttpError.d.ts.map

package/dist/parseHttpError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parseHttpError.d.ts","sourceRoot":"","sources":["../src/parseHttpError.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,qBAAqB,GAAU,UAAU,QAAQ,KAAG,OAAO,CAAC,MAAM,CAe9E,CAAC"}

package/dist/parseHttpError.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseHttpErrorMessage = void 0;
+const parseHttpErrorMessage = async (response) => {
+    const raw = await response.text();
+    if (!raw)
+        return `${response.status} ${response.statusText}`;
+    try {
+        const parsed = JSON.parse(raw);
+        if (parsed?.error?.message && typeof parsed.error.message === 'string') {
+            return parsed.error.message;
+        }
+        if (typeof parsed?.error === 'string')
+            return parsed.error;
+        if (typeof parsed?.message === 'string')
+            return parsed.message;
+        return raw;
+    }
+    catch {
+        return raw;
+    }
+};
+exports.parseHttpErrorMessage = parseHttpErrorMessage;

package/dist/planLimitError.d.ts

@@ -0,0 +1,18 @@
+export interface PlanLimitDetails {
+    feature: string;
+    plan: string;
+    limit?: number | null;
+    used?: number | null;
+}
+export declare class PlanLimitError extends Error {
+    readonly status = 402;
+    readonly code: string;
+    readonly feature: string;
+    readonly plan: string;
+    readonly limit: number | null;
+    readonly used: number | null;
+    constructor(message: string, details: PlanLimitDetails);
+    toBody(): Record<string, unknown>;
+}
+export declare const isPlanLimitError: (error: unknown) => error is PlanLimitError;
+//# sourceMappingURL=planLimitError.d.ts.map

package/dist/planLimitError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"planLimitError.d.ts","sourceRoot":"","sources":["../src/planLimitError.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,gBAAgB;IAE/B,OAAO,EAAE,MAAM,CAAC;IAEhB,IAAI,EAAE,MAAM,CAAC;IAEb,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEtB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,MAAM,OAAO;IACtB,QAAQ,CAAC,IAAI,SAAmC;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;gBAEjB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB;IAWtD,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAUlC;AAED,eAAO,MAAM,gBAAgB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,cAC1B,CAAC"}

package/dist/planLimitError.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isPlanLimitError = exports.PlanLimitError = void 0;
+const constants_1 = require("./constants");
+class PlanLimitError extends Error {
+    status = 402;
+    code = constants_1.constants.PLAN_LIMIT_ERROR_CODE;
+    feature;
+    plan;
+    limit;
+    used;
+    constructor(message, details) {
+        super(message);
+        this.name = 'PlanLimitError';
+        this.feature = details.feature;
+        this.plan = details.plan;
+        this.limit = details.limit ?? null;
+        this.used = details.used ?? null;
+    }
+    // The extra fields merged into the JSON error body so clients get structured
+    // context alongside the message.
+    toBody() {
+        return {
+            code: this.code,
+            feature: this.feature,
+            plan: this.plan,
+            limit: this.limit,
+            used: this.used,
+            upgrade: true
+        };
+    }
+}
+exports.PlanLimitError = PlanLimitError;
+const isPlanLimitError = (error) => error instanceof PlanLimitError;
+exports.isPlanLimitError = isPlanLimitError;

package/dist/processQueueBatch.d.ts

@@ -0,0 +1,17 @@
+export interface QueueMessageLike<T> {
+    body: T;
+    ack: () => void;
+    retry: (opts?: {
+        delaySeconds?: number;
+    }) => void;
+}
+export interface QueueBatchLike<T> {
+    queue: string;
+    messages: readonly QueueMessageLike<T>[];
+}
+export interface ProcessQueueBatchHandlers<T> {
+    process: (body: T) => Promise<void>;
+    onError: (error: unknown, body: T, queueName: string) => Promise<void>;
+}
+export declare const processQueueBatch: <T>(batch: QueueBatchLike<T>, handlers: ProcessQueueBatchHandlers<T>) => Promise<void>;
+//# sourceMappingURL=processQueueBatch.d.ts.map

package/dist/processQueueBatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"processQueueBatch.d.ts","sourceRoot":"","sources":["../src/processQueueBatch.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC;IACR,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CACnD;AAED,MAAM,WAAW,cAAc,CAAC,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,SAAS,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,yBAAyB,CAAC,CAAC;IAC1C,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACxE;AAED,eAAO,MAAM,iBAAiB,GAAU,CAAC,EACvC,OAAO,cAAc,CAAC,CAAC,CAAC,EACxB,UAAU,yBAAyB,CAAC,CAAC,CAAC,KACrC,OAAO,CAAC,IAAI,CAuBd,CAAC"}

package/dist/processQueueBatch.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.processQueueBatch = void 0;
+const retry_1 = require("./retry");
+const constants_1 = require("./constants");
+const processQueueBatch = async (batch, handlers) => {
+    for (const message of batch.messages) {
+        try {
+            await handlers.process(message.body);
+            message.ack();
+        }
+        catch (error) {
+            if ((0, retry_1.isTransientInfraError)(error)) {
+                // Transient Cloudflare platform hiccup (e.g. a Durable Object /
+                // Container reset). The job itself is fine, so re-run it after a short
+                // backoff without reporting an error or marking the work failed.
+                message.retry({ delaySeconds: constants_1.constants.TRANSIENT_BACKOFF_SECONDS });
+                continue;
+            }
+            await handlers.onError(error, message.body, batch.queue);
+            if ((0, retry_1.isRateLimitError)(error)) {
+                message.retry({
+                    delaySeconds: constants_1.constants.RATE_LIMIT_BACKOFF_SECONDS
+                });
+            }
+            else {
+                message.retry();
+            }
+        }
+    }
+};
+exports.processQueueBatch = processQueueBatch;

package/dist/reservedToolName.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Is this MCP tool name reserved by the platform?
+ *
+ * Called on the WRITE path only — when a user names an `http-endpoint` tool or
+ * uploads a `custom-code` manifest. Deliberately NOT applied when reading a
+ * stored row back at boot: tightening this list must never stop an already
+ * installed tool from registering, which would be a silent failure the owner
+ * could only diagnose from logs. A legacy name that is reserved today keeps
+ * working; it simply loses the name to the native tool, because apps/mcp
+ * registers natives first.
+ *
+ * See RESERVED_TOOL_NAME_PREFIXES in constants.ts for why this reserves whole
+ * namespaces rather than the enumerated set of shipped keys.
+ */
+export declare const isReservedToolName: (name: string) => boolean;
+//# sourceMappingURL=reservedToolName.d.ts.map

package/dist/reservedToolName.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reservedToolName.d.ts","sourceRoot":"","sources":["../src/reservedToolName.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB,GAAI,MAAM,MAAM,KAAG,OAQjD,CAAC"}

package/dist/reservedToolName.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isReservedToolName = void 0;
+const constants_1 = require("./constants");
+const RESERVED = new Set(constants_1.constants.RESERVED_TOOL_NAMES);
+/**
+ * Is this MCP tool name reserved by the platform?
+ *
+ * Called on the WRITE path only — when a user names an `http-endpoint` tool or
+ * uploads a `custom-code` manifest. Deliberately NOT applied when reading a
+ * stored row back at boot: tightening this list must never stop an already
+ * installed tool from registering, which would be a silent failure the owner
+ * could only diagnose from logs. A legacy name that is reserved today keeps
+ * working; it simply loses the name to the native tool, because apps/mcp
+ * registers natives first.
+ *
+ * See RESERVED_TOOL_NAME_PREFIXES in constants.ts for why this reserves whole
+ * namespaces rather than the enumerated set of shipped keys.
+ */
+const isReservedToolName = (name) => {
+    const lower = name.toLowerCase();
+    return (RESERVED.has(lower) ||
+        constants_1.constants.RESERVED_TOOL_NAME_PREFIXES.some(prefix => lower.startsWith(prefix)));
+};
+exports.isReservedToolName = isReservedToolName;

package/dist/resourceUri.d.ts

@@ -0,0 +1,2 @@
+export declare const resourceUriFromTitle: (title: string) => string;
+//# sourceMappingURL=resourceUri.d.ts.map

package/dist/resourceUri.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceUri.d.ts","sourceRoot":"","sources":["../src/resourceUri.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,oBAAoB,GAAI,OAAO,MAAM,KAAG,MAIvB,CAAC"}

package/dist/resourceUri.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resourceUriFromTitle = void 0;
+const constants_1 = require("./constants");
+// The `resource://…` URI the dashboard generates from a title when the author
+// doesn't type one, and the same one the broker derives for a script-created
+// resource that arrives without a uri.
+//
+// Shared rather than duplicated because the two have to agree: a resource a
+// tool writes should be addressable exactly like one a person uploaded, and a
+// script asked to "replace the Q3 report" has to be able to name the row the
+// dashboard created. Hyphens, not the underscores `slugifyTitle` produces —
+// that one names MCP prompts and bot commands, where an underscore is legal and
+// a hyphen isn't.
+const resourceUriFromTitle = (title) => `${constants_1.constants.CUSTOM_CODE_RESOURCE_URI_PREFIX}${title
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, '-')
+    .replace(/^-+|-+$/g, '')}`;
+exports.resourceUriFromTitle = resourceUriFromTitle;

package/dist/retry.d.ts

@@ -0,0 +1,10 @@
+export declare const sleep: (ms: number) => Promise<void>;
+export declare const isRateLimitError: (err: unknown) => boolean;
+export declare const isTransientInfraError: (err: unknown) => boolean;
+export interface RateLimitRetryOptions {
+    maxAttempts?: number;
+    baseDelayMs?: number;
+    maxDelayMs?: number;
+}
+export declare const withRateLimitRetry: <T>(fn: () => Promise<T>, options?: RateLimitRetryOptions) => Promise<T>;
+//# sourceMappingURL=retry.d.ts.map

package/dist/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../src/retry.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,KAAK,GAAI,IAAI,MAAM,KAAG,OAAO,CAAC,IAAI,CACQ,CAAC;AAExD,eAAO,MAAM,gBAAgB,GAAI,KAAK,OAAO,KAAG,OAG/C,CAAC;AAOF,eAAO,MAAM,qBAAqB,GAAI,KAAK,OAAO,KAAG,OAKpD,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,kBAAkB,GAAU,CAAC,EACxC,IAAI,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,UAAS,qBAA0B,KAClC,OAAO,CAAC,CAAC,CAaX,CAAC"}

package/dist/retry.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withRateLimitRetry = exports.isTransientInfraError = exports.isRateLimitError = exports.sleep = void 0;
+const sleep = (ms) => new Promise(resolve => setTimeout(resolve, ms));
+exports.sleep = sleep;
+const isRateLimitError = (err) => {
+    const msg = String(err?.message ?? err);
+    return /\b429\b|quota|RESOURCE_EXHAUSTED|rate.?limit/i.test(msg);
+};
+exports.isRateLimitError = isRateLimitError;
+// Transient Cloudflare platform errors that are safe to retry as-is: a Durable
+// Object / Container (e.g. the resource-handler) getting evicted or reset
+// mid-request, a code-update eviction, or a dropped internal connection. These
+// are infra hiccups, not job failures, so callers should re-run the job rather
+// than report an error or mark the work failed.
+const isTransientInfraError = (err) => {
+    const msg = String(err?.message ?? err);
+    return /object to be reset|Durable Object reset|code (?:was|has been) updated|cannot access storage|Network connection lost|internal error.*Durable Object|Durable Object.*internal error/i.test(msg);
+};
+exports.isTransientInfraError = isTransientInfraError;
+const withRateLimitRetry = async (fn, options = {}) => {
+    const { maxAttempts = 5, baseDelayMs = 500, maxDelayMs = 10_000 } = options;
+    let attempt = 0;
+    while (true) {
+        try {
+            return await fn();
+        }
+        catch (err) {
+            attempt += 1;
+            if (attempt >= maxAttempts || !(0, exports.isRateLimitError)(err))
+                throw err;
+            const delay = Math.min(2 ** attempt * baseDelayMs, maxDelayMs);
+            await (0, exports.sleep)(delay);
+        }
+    }
+};
+exports.withRateLimitRetry = withRateLimitRetry;

package/dist/sanitize.d.ts

@@ -0,0 +1,7 @@
+export declare const decodeEntities: (value: string) => string;
+export declare const escapeHtml: (value: string) => string;
+export declare const parseOpenXmlProps: (xml: string) => Record<string, string>;
+export declare const stripBase64Images: (text: string) => string;
+export declare const sanitizeMetadataString: (value: string) => string;
+export declare const serializeMetadataValue: (value: unknown) => unknown;
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../src/sanitize.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,cAAc,GAAI,OAAO,MAAM,KAAG,MAMpB,CAAC;AAK5B,eAAO,MAAM,UAAU,GAAI,OAAO,MAAM,KAAG,MAMhB,CAAC;AAE5B,eAAO,MAAM,iBAAiB,GAAI,KAAK,MAAM,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAUpE,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAAI,MAAM,MAAM,KAAG,MAQtC,CAAC;AAEZ,eAAO,MAAM,sBAAsB,GAAI,OAAO,MAAM,KAAG,MAK5C,CAAC;AAEZ,eAAO,MAAM,sBAAsB,GAAI,OAAO,OAAO,KAAG,OAgBvD,CAAC"}