@happyvertical/smrt-dev-mcp 0.47.2 → 0.49.0

package/dist/http-TeoaK9Xr.js

@@ -0,0 +1,168 @@
+import { n as TOOLS } from "./tool-catalog-Zl-bcimC.js";
+import { c as runtimeMigrationStatus, d as runtimeScheduleHealth, l as runtimeRecentChanges, m as bootRuntime, n as runtimeRegistry, o as runtimeDispatchHealth, r as runtimeSchemaDiff, s as runtimeJobHealth, t as runtimeObject, u as runtimeRegistryDrift } from "./observation-VJgHaPps.js";
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { Server, createMcpHandler } from "@modelcontextprotocol/server";
+import { dirname, join } from "node:path";
+import { randomBytes, timingSafeEqual } from "node:crypto";
+import { createServer } from "node:http";
+import { localhostHostValidation, localhostOriginValidation, toNodeHandler } from "@modelcontextprotocol/node";
+//#region src/server-info.ts
+var SERVER_NAME = "smrt-dev-mcp";
+function readPackageVersion() {
+	try {
+		const packageJsonPath = join(dirname(fileURLToPath(import.meta.url)), "..", "package.json");
+		const packageJson = JSON.parse(readFileSync(packageJsonPath, "utf-8"));
+		return typeof packageJson.version === "string" ? packageJson.version : "0.0.0";
+	} catch {
+		return "0.0.0";
+	}
+}
+var SERVER_VERSION = readPackageVersion();
+//#endregion
+//#region src/http.ts
+/**
+* Standalone Level 2 runtime dev-plane host (#1831).
+*
+* Serves a *positive* read-only tool catalog over the stateless 2026-07-28
+* Streamable HTTP transport (#2147): `createMcpHandler` with `legacy: 'reject'`
+* and `maxSubscriptions: 0`, adapted to Node with `toNodeHandler`. No SSE,
+* no session header, no sticky routing.
+*
+* Security boundary (development only):
+* - binds loopback only; SDK localhost Host/Origin validation runs first;
+* - every request needs `Authorization: Bearer <token>` (constant-time
+*   compare) — from `SMRT_DEV_MCP_TOKEN` or minted per process;
+* - no authenticated principal exists here, so scope stays fail-closed
+*   global-only exactly as in Level 1;
+* - the catalog never includes generated CRUD, custom actions, `do()`, or
+*   tool-backed `is()`.
+*/
+/**
+* The complete Level 2 catalog. A tool is exposed over HTTP only if it is
+* named here; the static stdio catalog is deliberately not mounted.
+*/
+var RUNTIME_HTTP_TOOL_NAMES = [
+	"runtime-registry",
+	"runtime-object",
+	"runtime-schema-diff",
+	"migration-status",
+	"job-health",
+	"schedule-health",
+	"dispatch-health",
+	"recent-changes",
+	"registry-drift"
+];
+var RUNTIME_HTTP_HANDLERS = {
+	"runtime-registry": (args) => runtimeRegistry(args),
+	"runtime-object": (args) => runtimeObject(args),
+	"runtime-schema-diff": (args) => runtimeSchemaDiff(args),
+	"migration-status": (args) => runtimeMigrationStatus(args),
+	"job-health": (args) => runtimeJobHealth(args),
+	"schedule-health": (args) => runtimeScheduleHealth(args),
+	"dispatch-health": (args) => runtimeDispatchHealth(args),
+	"recent-changes": (args) => runtimeRecentChanges(args),
+	"registry-drift": (args) => runtimeRegistryDrift(args)
+};
+/** Catalog definitions for the HTTP plane, in catalog order. */
+function runtimeHttpTools() {
+	const names = new Set(RUNTIME_HTTP_TOOL_NAMES);
+	return TOOLS.filter((tool) => names.has(tool.name));
+}
+/**
+* Build a fresh protocol server per request (stateless transport contract).
+* `projectRoot` is fixed at host start; per-request `projectPath` arguments
+* are ignored so a client cannot re-point the booted process.
+*/
+function createRuntimeProtocolServer(projectRoot) {
+	const server = new Server({
+		name: `${SERVER_NAME}-runtime`,
+		version: SERVER_VERSION
+	}, { capabilities: { tools: {} } });
+	server.setRequestHandler("tools/list", async () => ({ tools: runtimeHttpTools() }));
+	server.setRequestHandler("tools/call", async (request) => {
+		const name = request.params.name;
+		const handler = RUNTIME_HTTP_HANDLERS[name];
+		if (typeof handler !== "function") throw new Error(`Unknown runtime tool: ${name}`);
+		const { projectPath: _ignored, ...args } = request.params.arguments ?? {};
+		const result = await handler({
+			...args,
+			projectPath: projectRoot
+		});
+		return {
+			content: [{
+				type: "text",
+				text: JSON.stringify(result, null, 2)
+			}],
+			structuredContent: result
+		};
+	});
+	return server;
+}
+var LOOPBACK_HOSTS = /* @__PURE__ */ new Set([
+	"127.0.0.1",
+	"localhost",
+	"::1"
+]);
+function bearerMatches(header, token) {
+	if (!header?.startsWith("Bearer ")) return false;
+	const presented = Buffer.from(header.slice(7));
+	const expected = Buffer.from(token);
+	return presented.length === expected.length && timingSafeEqual(presented, expected);
+}
+function deny(res, status, message) {
+	res.statusCode = status;
+	res.setHeader("content-type", "application/json");
+	if (status === 401) res.setHeader("www-authenticate", "Bearer realm=\"smrt-dev-mcp runtime\"");
+	res.end(JSON.stringify({ error: message }));
+}
+/** Start the Level 2 host. Boots the confined runtime before listening. */
+async function startRuntimeHttpHost(options = {}) {
+	const host = options.host ?? "127.0.0.1";
+	if (!LOOPBACK_HOSTS.has(host)) throw new Error("The runtime dev-plane binds loopback only (127.0.0.1, localhost, ::1).");
+	const path = options.path ?? "/mcp";
+	const token = options.token ?? process.env.SMRT_DEV_MCP_TOKEN?.trim() ?? randomBytes(24).toString("base64url");
+	if (!token) throw new Error("SMRT_DEV_MCP_TOKEN must not be empty.");
+	const projectRoot = options.projectRoot ?? process.cwd();
+	const boot = await bootRuntime({ projectRoot });
+	const mcp = toNodeHandler(createMcpHandler(() => createRuntimeProtocolServer(projectRoot), {
+		legacy: "reject",
+		maxSubscriptions: 0
+	}));
+	const hostGuard = localhostHostValidation();
+	const originGuard = localhostOriginValidation();
+	const httpServer = createServer((req, res) => {
+		if (!hostGuard(req, res)) return;
+		if (!originGuard(req, res)) return;
+		if (new URL(req.url ?? "/", "http://localhost").pathname !== path) {
+			deny(res, 404, "not found");
+			return;
+		}
+		if (!bearerMatches(req.headers.authorization, token)) {
+			deny(res, 401, "missing or invalid bearer token");
+			return;
+		}
+		mcp(req, res);
+	});
+	await new Promise((resolve, reject) => {
+		httpServer.once("error", reject);
+		httpServer.listen(options.port ?? 0, host, () => {
+			httpServer.off("error", reject);
+			resolve();
+		});
+	});
+	const address = httpServer.address();
+	return {
+		url: `http://${address.family === "IPv6" ? `[${address.address}]` : address.address}:${address.port}${path}`,
+		token,
+		boot,
+		close: () => new Promise((resolve, reject) => {
+			httpServer.closeAllConnections?.();
+			httpServer.close((error) => error ? reject(error) : resolve());
+		})
+	};
+}
+//#endregion
+export { SERVER_VERSION as i, startRuntimeHttpHost as n, SERVER_NAME as r, bearerMatches as t };
+
+//# sourceMappingURL=http-TeoaK9Xr.js.map

package/dist/http-TeoaK9Xr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-TeoaK9Xr.js","names":[],"sources":["../src/server-info.ts","../src/http.ts"],"sourcesContent":["import { readFileSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nexport const SERVER_NAME = 'smrt-dev-mcp';\n\nfunction readPackageVersion(): string {\n  try {\n    const packageRoot = dirname(fileURLToPath(import.meta.url));\n    const packageJsonPath = join(packageRoot, '..', 'package.json');\n    const packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf-8')) as {\n      version?: unknown;\n    };\n    return typeof packageJson.version === 'string'\n      ? packageJson.version\n      : '0.0.0';\n  } catch {\n    return '0.0.0';\n  }\n}\n\nexport const SERVER_VERSION = readPackageVersion();\n","/**\n * Standalone Level 2 runtime dev-plane host (#1831).\n *\n * Serves a *positive* read-only tool catalog over the stateless 2026-07-28\n * Streamable HTTP transport (#2147): `createMcpHandler` with `legacy: 'reject'`\n * and `maxSubscriptions: 0`, adapted to Node with `toNodeHandler`. No SSE,\n * no session header, no sticky routing.\n *\n * Security boundary (development only):\n * - binds loopback only; SDK localhost Host/Origin validation runs first;\n * - every request needs `Authorization: Bearer <token>` (constant-time\n *   compare) — from `SMRT_DEV_MCP_TOKEN` or minted per process;\n * - no authenticated principal exists here, so scope stays fail-closed\n *   global-only exactly as in Level 1;\n * - the catalog never includes generated CRUD, custom actions, `do()`, or\n *   tool-backed `is()`.\n */\n\nimport { randomBytes, timingSafeEqual } from 'node:crypto';\nimport {\n  createServer as createHttpServer,\n  type Server as HttpServer,\n  type IncomingMessage,\n  type ServerResponse,\n} from 'node:http';\nimport type { AddressInfo } from 'node:net';\nimport {\n  localhostHostValidation,\n  localhostOriginValidation,\n  toNodeHandler,\n} from '@modelcontextprotocol/node';\nimport type { CallToolResult } from '@modelcontextprotocol/server';\nimport { createMcpHandler, Server } from '@modelcontextprotocol/server';\nimport { SERVER_NAME, SERVER_VERSION } from './server-info.js';\nimport { TOOLS } from './tool-catalog.js';\nimport { bootRuntime, type RuntimeBoot } from './tools/runtime/boot.js';\nimport {\n  runtimeObject,\n  runtimeRegistry,\n  runtimeSchemaDiff,\n} from './tools/runtime/observation.js';\nimport {\n  runtimeDispatchHealth,\n  runtimeJobHealth,\n  runtimeMigrationStatus,\n  runtimeRecentChanges,\n  runtimeRegistryDrift,\n  runtimeScheduleHealth,\n} from './tools/runtime/tools.js';\n\n/**\n * The complete Level 2 catalog. A tool is exposed over HTTP only if it is\n * named here; the static stdio catalog is deliberately not mounted.\n */\nexport const RUNTIME_HTTP_TOOL_NAMES = [\n  'runtime-registry',\n  'runtime-object',\n  'runtime-schema-diff',\n  'migration-status',\n  'job-health',\n  'schedule-health',\n  'dispatch-health',\n  'recent-changes',\n  'registry-drift',\n] as const;\n\nexport type RuntimeHttpToolName = (typeof RUNTIME_HTTP_TOOL_NAMES)[number];\n\nconst RUNTIME_HTTP_HANDLERS: Record<\n  RuntimeHttpToolName,\n  (args: Record<string, unknown>) => Promise<unknown>\n> = {\n  'runtime-registry': (args) => runtimeRegistry(args as never),\n  'runtime-object': (args) => runtimeObject(args as never),\n  'runtime-schema-diff': (args) => runtimeSchemaDiff(args as never),\n  'migration-status': (args) => runtimeMigrationStatus(args as never),\n  'job-health': (args) => runtimeJobHealth(args as never),\n  'schedule-health': (args) => runtimeScheduleHealth(args as never),\n  'dispatch-health': (args) => runtimeDispatchHealth(args as never),\n  'recent-changes': (args) => runtimeRecentChanges(args as never),\n  'registry-drift': (args) => runtimeRegistryDrift(args as never),\n};\n\n/** Catalog definitions for the HTTP plane, in catalog order. */\nexport function runtimeHttpTools() {\n  const names = new Set<string>(RUNTIME_HTTP_TOOL_NAMES);\n  return TOOLS.filter((tool) => names.has(tool.name));\n}\n\n/**\n * Build a fresh protocol server per request (stateless transport contract).\n * `projectRoot` is fixed at host start; per-request `projectPath` arguments\n * are ignored so a client cannot re-point the booted process.\n */\nexport function createRuntimeProtocolServer(projectRoot: string): Server {\n  const server = new Server(\n    { name: `${SERVER_NAME}-runtime`, version: SERVER_VERSION },\n    { capabilities: { tools: {} } },\n  );\n  server.setRequestHandler('tools/list', async () => ({\n    tools: runtimeHttpTools(),\n  }));\n  server.setRequestHandler('tools/call', async (request) => {\n    const name = request.params.name as string;\n    const handler = (RUNTIME_HTTP_HANDLERS as Record<string, unknown>)[name];\n    if (typeof handler !== 'function') {\n      throw new Error(`Unknown runtime tool: ${name}`);\n    }\n    const { projectPath: _ignored, ...args } = (request.params.arguments ??\n      {}) as Record<string, unknown>;\n    const result = await (\n      handler as (a: Record<string, unknown>) => Promise<unknown>\n    )({ ...args, projectPath: projectRoot });\n    const text = JSON.stringify(result, null, 2);\n    return {\n      content: [{ type: 'text', text }],\n      structuredContent: result as Record<string, unknown>,\n    } satisfies CallToolResult;\n  });\n  return server;\n}\n\nexport interface RuntimeHttpHostOptions {\n  projectRoot?: string;\n  /** Loopback interface only; anything else is refused at startup. */\n  host?: '127.0.0.1' | 'localhost' | '::1';\n  /** `0` (default) picks a free port. */\n  port?: number;\n  /** Bearer token; defaults to `SMRT_DEV_MCP_TOKEN` or a per-process random token. */\n  token?: string;\n  /** Path the MCP endpoint is mounted on (default `/mcp`). */\n  path?: string;\n}\n\nexport interface RuntimeHttpHost {\n  url: string;\n  token: string;\n  boot: RuntimeBoot;\n  close(): Promise<void>;\n}\n\nconst LOOPBACK_HOSTS = new Set(['127.0.0.1', 'localhost', '::1']);\n\nexport function bearerMatches(\n  header: string | undefined,\n  token: string,\n): boolean {\n  if (!header?.startsWith('Bearer ')) return false;\n  const presented = Buffer.from(header.slice('Bearer '.length));\n  const expected = Buffer.from(token);\n  return (\n    presented.length === expected.length && timingSafeEqual(presented, expected)\n  );\n}\n\nfunction deny(res: ServerResponse, status: number, message: string): void {\n  res.statusCode = status;\n  res.setHeader('content-type', 'application/json');\n  if (status === 401) {\n    res.setHeader('www-authenticate', 'Bearer realm=\"smrt-dev-mcp runtime\"');\n  }\n  res.end(JSON.stringify({ error: message }));\n}\n\n/** Start the Level 2 host. Boots the confined runtime before listening. */\nexport async function startRuntimeHttpHost(\n  options: RuntimeHttpHostOptions = {},\n): Promise<RuntimeHttpHost> {\n  const host = options.host ?? '127.0.0.1';\n  if (!LOOPBACK_HOSTS.has(host)) {\n    throw new Error(\n      'The runtime dev-plane binds loopback only (127.0.0.1, localhost, ::1).',\n    );\n  }\n  const path = options.path ?? '/mcp';\n  const token =\n    options.token ??\n    process.env.SMRT_DEV_MCP_TOKEN?.trim() ??\n    randomBytes(24).toString('base64url');\n  if (!token) {\n    throw new Error('SMRT_DEV_MCP_TOKEN must not be empty.');\n  }\n  const projectRoot = options.projectRoot ?? process.cwd();\n  const boot = await bootRuntime({ projectRoot });\n\n  const mcp = toNodeHandler(\n    createMcpHandler(() => createRuntimeProtocolServer(projectRoot), {\n      legacy: 'reject',\n      maxSubscriptions: 0,\n    }),\n  );\n  const hostGuard = localhostHostValidation();\n  const originGuard = localhostOriginValidation();\n\n  const httpServer: HttpServer = createHttpServer(\n    (req: IncomingMessage, res: ServerResponse) => {\n      // Guards answer and end the response themselves when they return false.\n      if (!hostGuard(req, res)) return;\n      if (!originGuard(req, res)) return;\n      const url = new URL(req.url ?? '/', 'http://localhost');\n      if (url.pathname !== path) {\n        deny(res, 404, 'not found');\n        return;\n      }\n      if (!bearerMatches(req.headers.authorization, token)) {\n        deny(res, 401, 'missing or invalid bearer token');\n        return;\n      }\n      void mcp(req, res);\n    },\n  );\n\n  await new Promise<void>((resolve, reject) => {\n    httpServer.once('error', reject);\n    httpServer.listen(options.port ?? 0, host, () => {\n      httpServer.off('error', reject);\n      resolve();\n    });\n  });\n  const address = httpServer.address() as AddressInfo;\n  const urlHost =\n    address.family === 'IPv6' ? `[${address.address}]` : address.address;\n  return {\n    url: `http://${urlHost}:${address.port}${path}`,\n    token,\n    boot,\n    close: () =>\n      new Promise<void>((resolve, reject) => {\n        httpServer.closeAllConnections?.();\n        httpServer.close((error) => (error ? reject(error) : resolve()));\n      }),\n  };\n}\n"],"mappings":";;;;;;;;;;AAIA,IAAa,cAAc;AAE3B,SAAS,qBAA6B;CACpC,IAAI;EAEF,MAAM,kBAAkB,KADJ,QAAQ,cAAc,OAAO,KAAK,GAAG,CAC5B,GAAa,MAAM,cAAc;EAC9D,MAAM,cAAc,KAAK,MAAM,aAAa,iBAAiB,OAAO,CAAC;EAGrE,OAAO,OAAO,YAAY,YAAY,WAClC,YAAY,UACZ;CACN,QAAQ;EACN,OAAO;CACT;AACF;AAEA,IAAa,iBAAiB,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;ACiCjD,IAAa,0BAA0B;CACrC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAIA,IAAM,wBAGF;CACF,qBAAqB,SAAS,gBAAgB,IAAa;CAC3D,mBAAmB,SAAS,cAAc,IAAa;CACvD,wBAAwB,SAAS,kBAAkB,IAAa;CAChE,qBAAqB,SAAS,uBAAuB,IAAa;CAClE,eAAe,SAAS,iBAAiB,IAAa;CACtD,oBAAoB,SAAS,sBAAsB,IAAa;CAChE,oBAAoB,SAAS,sBAAsB,IAAa;CAChE,mBAAmB,SAAS,qBAAqB,IAAa;CAC9D,mBAAmB,SAAS,qBAAqB,IAAa;AAChE;;AAGA,SAAgB,mBAAmB;CACjC,MAAM,QAAQ,IAAI,IAAY,uBAAuB;CACrD,OAAO,MAAM,QAAQ,SAAS,MAAM,IAAI,KAAK,IAAI,CAAC;AACpD;;;;;;AAOA,SAAgB,4BAA4B,aAA6B;CACvE,MAAM,SAAS,IAAI,OACjB;EAAE,MAAM,GAAG,YAAY;EAAW,SAAS;CAAe,GAC1D,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,EAAE,CAChC;CACA,OAAO,kBAAkB,cAAc,aAAa,EAClD,OAAO,iBAAiB,EAC1B,EAAE;CACF,OAAO,kBAAkB,cAAc,OAAO,YAAY;EACxD,MAAM,OAAO,QAAQ,OAAO;EAC5B,MAAM,UAAW,sBAAkD;EACnE,IAAI,OAAO,YAAY,YACrB,MAAM,IAAI,MAAM,yBAAyB,MAAM;EAEjD,MAAM,EAAE,aAAa,UAAU,GAAG,SAAU,QAAQ,OAAO,aACzD,CAAC;EACH,MAAM,SAAS,MACb,QACA;GAAE,GAAG;GAAM,aAAa;EAAY,CAAC;EAEvC,OAAO;GACL,SAAS,CAAC;IAAE,MAAM;IAAQ,MAFf,KAAK,UAAU,QAAQ,MAAM,CAEd;GAAK,CAAC;GAChC,mBAAmB;EACrB;CACF,CAAC;CACD,OAAO;AACT;AAqBA,IAAM,iCAAiB,IAAI,IAAI;CAAC;CAAa;CAAa;AAAK,CAAC;AAEhE,SAAgB,cACd,QACA,OACS;CACT,IAAI,CAAC,QAAQ,WAAW,SAAS,GAAG,OAAO;CAC3C,MAAM,YAAY,OAAO,KAAK,OAAO,MAAM,CAAgB,CAAC;CAC5D,MAAM,WAAW,OAAO,KAAK,KAAK;CAClC,OACE,UAAU,WAAW,SAAS,UAAU,gBAAgB,WAAW,QAAQ;AAE/E;AAEA,SAAS,KAAK,KAAqB,QAAgB,SAAuB;CACxE,IAAI,aAAa;CACjB,IAAI,UAAU,gBAAgB,kBAAkB;CAChD,IAAI,WAAW,KACb,IAAI,UAAU,oBAAoB,uCAAqC;CAEzE,IAAI,IAAI,KAAK,UAAU,EAAE,OAAO,QAAQ,CAAC,CAAC;AAC5C;;AAGA,eAAsB,qBACpB,UAAkC,CAAC,GACT;CAC1B,MAAM,OAAO,QAAQ,QAAQ;CAC7B,IAAI,CAAC,eAAe,IAAI,IAAI,GAC1B,MAAM,IAAI,MACR,wEACF;CAEF,MAAM,OAAO,QAAQ,QAAQ;CAC7B,MAAM,QACJ,QAAQ,SACR,QAAQ,IAAI,oBAAoB,KAAK,KACrC,YAAY,EAAE,CAAC,CAAC,SAAS,WAAW;CACtC,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,uCAAuC;CAEzD,MAAM,cAAc,QAAQ,eAAe,QAAQ,IAAI;CACvD,MAAM,OAAO,MAAM,YAAY,EAAE,YAAY,CAAC;CAE9C,MAAM,MAAM,cACV,uBAAuB,4BAA4B,WAAW,GAAG;EAC/D,QAAQ;EACR,kBAAkB;CACpB,CAAC,CACH;CACA,MAAM,YAAY,wBAAwB;CAC1C,MAAM,cAAc,0BAA0B;CAE9C,MAAM,aAAyB,cAC5B,KAAsB,QAAwB;EAE7C,IAAI,CAAC,UAAU,KAAK,GAAG,GAAG;EAC1B,IAAI,CAAC,YAAY,KAAK,GAAG,GAAG;EAE5B,IAAI,IADY,IAAI,IAAI,OAAO,KAAK,kBAChC,CAAA,CAAI,aAAa,MAAM;GACzB,KAAK,KAAK,KAAK,WAAW;GAC1B;EACF;EACA,IAAI,CAAC,cAAc,IAAI,QAAQ,eAAe,KAAK,GAAG;GACpD,KAAK,KAAK,KAAK,iCAAiC;GAChD;EACF;EACA,IAAS,KAAK,GAAG;CACnB,CACF;CAEA,MAAM,IAAI,SAAe,SAAS,WAAW;EAC3C,WAAW,KAAK,SAAS,MAAM;EAC/B,WAAW,OAAO,QAAQ,QAAQ,GAAG,YAAY;GAC/C,WAAW,IAAI,SAAS,MAAM;GAC9B,QAAQ;EACV,CAAC;CACH,CAAC;CACD,MAAM,UAAU,WAAW,QAAQ;CAGnC,OAAO;EACL,KAAK,UAFL,QAAQ,WAAW,SAAS,IAAI,QAAQ,QAAQ,KAAK,QAAQ,QAEtC,GAAG,QAAQ,OAAO;EACzC;EACA;EACA,aACE,IAAI,SAAe,SAAS,WAAW;GACrC,WAAW,sBAAsB;GACjC,WAAW,OAAO,UAAW,QAAQ,OAAO,KAAK,IAAI,QAAQ,CAAE;EACjE,CAAC;CACL;AACF"}

package/dist/http.d.ts

@@ -90,6 +90,7 @@ export interface RuntimeHttpHost {
     boot: RuntimeBoot;
     close(): Promise<void>;
 }
+export declare function bearerMatches(header: string | undefined, token: string): boolean;
 /** Start the Level 2 host. Boots the confined runtime before listening. */
 export declare function startRuntimeHttpHost(options?: RuntimeHttpHostOptions): Promise<RuntimeHttpHost>;
 //# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAgBH,OAAO,EAAoB,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAGxE,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAexE;;;GAGG;AACH,eAAO,MAAM,uBAAuB,oLAU1B,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAiB3E,gEAAgE;AAChE,wBAAgB,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAG/B;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CA0BvE;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,IAAI,CAAC,EAAE,WAAW,GAAG,WAAW,GAAG,KAAK,CAAC;IACzC,uCAAuC;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAsBD,2EAA2E;AAC3E,wBAAsB,oBAAoB,CACxC,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,eAAe,CAAC,CAiE1B"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAgBH,OAAO,EAAoB,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAGxE,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAexE;;;GAGG;AACH,eAAO,MAAM,uBAAuB,oLAU1B,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAiB3E,gEAAgE;AAChE,wBAAgB,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAG/B;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CA0BvE;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,IAAI,CAAC,EAAE,WAAW,GAAG,WAAW,GAAG,KAAK,CAAC;IACzC,uCAAuC;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAID,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,KAAK,EAAE,MAAM,GACZ,OAAO,CAOT;AAWD,2EAA2E;AAC3E,wBAAsB,oBAAoB,CACxC,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,eAAe,CAAC,CAiE1B"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAGL,MAAM,EACP,MAAM,8BAA8B,CAAC;AAqCtC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AA8B1C,wBAAgB,YAAY,IAAI,MAAM,CA0sBrC;AAyND;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IACzD,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAsBA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAGL,MAAM,EACP,MAAM,8BAA8B,CAAC;AAoCtC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AA8B1C,wBAAgB,YAAY,IAAI,MAAM,CA4qBrC;AAyND;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IACzD,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAsBA"}