@hasna/treasury 0.1.2

package/dist/mcp/tools/domain.d.ts

@@ -0,0 +1,10 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { ApiPrincipal } from "../../server/auth.js";
+import { type Profile } from "../../services/registry.js";
+/**
+ * Register every registry op as an MCP domain tool, threading the CALLER
+ * principal into per-op authorization exactly like /v1 — never a SYSTEM bypass
+ * (defeats wave-1 failure class #1). Filtered by the active tool profile.
+ */
+export declare function registerDomainTools(server: McpServer, principal: ApiPrincipal, profile: Profile): void;
+//# sourceMappingURL=domain.d.ts.map

package/dist/mcp/tools/domain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/domain.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAgC,KAAK,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAwBxF;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAatG"}

package/dist/mcp/tools/standard.d.ts

@@ -0,0 +1,4 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { ApiPrincipal } from "../../server/auth.js";
+export declare function registerStandardTools(server: McpServer, principal: ApiPrincipal): void;
+//# sourceMappingURL=standard.d.ts.map

package/dist/mcp/tools/standard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"standard.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/standard.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAgBzD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,GAAG,IAAI,CA2CtF"}

package/dist/mcp/tools/storage.d.ts

@@ -0,0 +1,4 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { ApiPrincipal } from "../../server/auth.js";
+export declare function registerStorageTools(server: McpServer, principal: ApiPrincipal): void;
+//# sourceMappingURL=storage.d.ts.map

package/dist/mcp/tools/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/storage.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAOzD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,GAAG,IAAI,CAiDrF"}

package/dist/release/package-smoke.d.ts

@@ -0,0 +1,11 @@
+#!/usr/bin/env bun
+export interface SmokeResult {
+    ok: boolean;
+    entity_id: string;
+    cash_in_base_minor: number;
+    openapi_paths: number;
+    mcp_built: boolean;
+    serve_built: boolean;
+}
+export declare function runSmoke(): Promise<SmokeResult>;
+//# sourceMappingURL=package-smoke.d.ts.map

package/dist/release/package-smoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-smoke.d.ts","sourceRoot":"","sources":["../../src/release/package-smoke.ts"],"names":[],"mappings":";AAaA,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,wBAAsB,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,CAkBrD"}

package/dist/server/app.d.ts

@@ -0,0 +1,19 @@
+import { Hono } from "hono";
+import type { Context } from "hono";
+export declare function checkRateLimit(ip: string): boolean;
+export declare function resetRateLimit(): void;
+export declare function getBindHost(): string;
+export declare function isLoopback(host?: string): boolean;
+/**
+ * Derive the rate-limit key from the CONNECTION, not the client-controllable
+ * `X-Forwarded-For` header. Preference order:
+ *   1. the real socket peer (Bun `server.requestIP`) — unspoofable by the client;
+ *   2. the RIGHTMOST `X-Forwarded-For` hop (appended by the trusted proxy),
+ *      never the leftmost client-supplied entry;
+ *   3. a single connection bucket as a last resort.
+ * This defeats the X-Forwarded-For rotation/spoofing bypass of the per-IP limit
+ * on the unauthenticated auth surface.
+ */
+export declare function clientIp(c: Context): string;
+export declare function createApp(): Hono;
+//# sourceMappingURL=app.d.ts.map

package/dist/server/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/server/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAepC,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CASlD;AAED,wBAAgB,cAAc,IAAI,IAAI,CAErC;AAQD,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED,wBAAgB,UAAU,CAAC,IAAI,SAAgB,GAAG,OAAO,CAExD;AAED;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAU3C;AAmBD,wBAAgB,SAAS,IAAI,IAAI,CAsEhC"}

package/dist/server/auth-constants.d.ts

@@ -0,0 +1,22 @@
+import type { AuthorizationRole } from "../services/authorization.js";
+export declare const apiScopes: readonly ["treasury:read", "treasury:write", "treasury:recommend", "treasury:export", "treasury:admin", "storage:admin"];
+export type ApiScope = (typeof apiScopes)[number];
+export interface AuthConstants {
+    apiScopes: readonly ApiScope[];
+    knownRoles: AuthorizationRole[];
+    roleScopes: Record<AuthorizationRole, ApiScope[]>;
+    actionScope: Record<string, ApiScope>;
+    defaultAction: ApiScope;
+    env: {
+        apiKey: string[];
+        credentials: string[];
+    };
+    verifyToken?: (token: string) => {
+        identity_id: string;
+        jti: string;
+        scopes: string[];
+        entity_ids?: string[];
+    };
+}
+export declare const AUTH_CONSTANTS: AuthConstants;
+//# sourceMappingURL=auth-constants.d.ts.map

package/dist/server/auth-constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-constants.d.ts","sourceRoot":"","sources":["../../src/server/auth-constants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEtE,eAAO,MAAM,SAAS,0HAGZ,CAAC;AACX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AAElD,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAC;IAC/B,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtC,aAAa,EAAE,QAAQ,CAAC;IACxB,GAAG,EAAE;QAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACjD,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK;QAC/B,WAAW,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;KAC3E,CAAC;CACH;AAGD,eAAO,MAAM,cAAc,EAAE,aAmB5B,CAAC"}

package/dist/server/auth.d.ts

@@ -0,0 +1,147 @@
+import type { AuthorizationContext, AuthorizationRole } from "../services/authorization.js";
+import { apiScopes } from "./auth-constants.js";
+import type { ApiScope } from "./auth-constants.js";
+/**
+ * CANONICAL transport credential module — identical across all 9 Hasna internal
+ * apps. The MECHANISM (timing-safe bearer compare, expiry, revocation, STRICT
+ * deny-by-default entity scoping, and the rule that a network credential can
+ * NEVER escalate to a SYSTEM bypass) is NOT a per-app design choice.
+ *
+ * The ONLY per-app difference is the imported `./auth-constants.js`, which
+ * carries the domain scope/role NAMES (apiScopes, knownRoles, roleScopes,
+ * actionScope), the env-var names, and an OPTIONAL `verifyToken` hook (provided
+ * only by the token-issuer app). This file is otherwise byte-identical.
+ *
+ * ONE shared authenticate path (`authenticateToken` / `authenticateApiRequest`)
+ * is the SOLE credential resolver for BOTH the /v1 serve tier AND the MCP HTTP
+ * transport, so the identical credential set is honored on both surfaces. It
+ * resolves, in order: the single static legacy API key (a trusted bootstrap
+ * principal, `owner` ROLE but NEVER a bypass), an env-configured serve
+ * credential, then — if the app is a token issuer — a signed bearer token whose
+ * OWN scopes/entity_ids are its sole authority (it carries no roles).
+ */
+export type { ApiScope };
+export { apiScopes };
+export type ApiCredentialType = "api_key" | "user" | "session" | "service";
+export interface ApiCredentialConfig {
+    id: string;
+    token?: string;
+    key?: string;
+    type?: ApiCredentialType;
+    actor_id?: string;
+    roles?: AuthorizationRole[];
+    scopes?: ApiScope[];
+    /** CANONICAL entity dimension. */
+    entity_id?: string;
+    entity_ids?: string[];
+    /**
+     * DEPRECATED org-dimension aliases, still accepted and folded into the
+     * principal's `entity_ids` for drop-in compatibility with older credential
+     * blobs. New credentials should use entity_id/entity_ids only.
+     */
+    org_id?: string;
+    org_ids?: string[];
+    expires_at?: string;
+    revoked?: boolean;
+}
+/**
+ * CANONICAL principal shape. Extends the shared AuthorizationContext (actor_id,
+ * roles, entity_id/entity_ids, bypass) and adds the credential identity + the
+ * resolved API scopes. Entity dimension only — the org_* aliases are collapsed
+ * into `entity_ids` at authentication time.
+ */
+export interface ApiPrincipal extends AuthorizationContext {
+    credential_id: string;
+    credential_type: ApiCredentialType;
+    scopes: ApiScope[];
+    /**
+     * SYSTEM bypass — grants unrestricted entity access, mirroring the CLI's
+     * local-owner context. It is set ONLY by the in-process `localOwnerPrincipal`
+     * (stdio / auth-off loopback dev); it is NEVER derived from a caller-supplied
+     * credential (`authenticateToken` never sets it), so a bearer token can never
+     * escalate to a bypass.
+     */
+    bypass?: boolean;
+}
+export interface ApiAuthResult {
+    allowed: boolean;
+    status?: number;
+    code?: "UNAUTHORIZED" | "PERMISSION_DENIED";
+    message?: string;
+    /** Single required scope (principal-level `authorizeScopeAndEntity`). */
+    required_scope?: ApiScope;
+    /** Required scope set (request-level `authorizeApiRequest`). */
+    required_scopes?: ApiScope[];
+    principal?: ApiPrincipal;
+}
+/** Map an authorization action to its required API scope (deny-by-default fallback). */
+export declare const actionScope: Record<string, ApiScope>;
+/** Back-compat UPPER_SNAKE alias (controls). */
+export declare const ACTION_SCOPE: Record<string, "treasury:read" | "treasury:write" | "treasury:recommend" | "treasury:export" | "treasury:admin" | "storage:admin">;
+export declare function requiredScopeForAction(action: string): ApiScope;
+/** Back-compat alias (workforce). */
+export declare const scopeForAction: typeof requiredScopeForAction;
+/** Roles → API scopes (union). Names are per-app; the mechanism is shared. */
+export declare function scopesForRoles(roles: AuthorizationRole[]): ApiScope[];
+/** Back-compat alias (entities). */
+export declare const apiScopesForRoles: typeof scopesForRoles;
+/** First non-empty configured legacy API key across the app's env-var names. */
+export declare function legacyApiKey(): string | undefined;
+/** Back-compat alias (access). */
+export declare const getApiKey: typeof legacyApiKey;
+export declare function isApiAuthConfigured(): boolean;
+export declare function configuredApiCredentials(): ApiCredentialConfig[];
+/**
+ * Extract a bearer token from an Authorization header value OR a Request. Accepts
+ * both shapes so it is drop-in for `bearerToken(header)` and `bearerToken(req)`.
+ */
+export declare function bearerToken(input: string | null | undefined | Request): string;
+/** Back-compat alias (controls, billing). */
+export declare const bearerFromHeader: typeof bearerToken;
+/**
+ * Authenticate a raw bearer token to a principal, honoring expiry + revocation.
+ * NEVER sets `bypass` — a network-presented credential cannot escalate to the
+ * entity-unrestricted SYSTEM context.
+ */
+export declare function authenticateToken(token: string): ApiPrincipal | null;
+/** Back-compat alias (entities, holdings). */
+export declare const authenticateBearer: typeof authenticateToken;
+export declare function authenticateApiRequest(req: Request): ApiPrincipal | null;
+/** Back-compat alias (consolidations, entities). */
+export declare const authenticateRequest: typeof authenticateApiRequest;
+/**
+ * The in-process local-owner principal (CLI / stdio / auth-off loopback dev).
+ * This is the ONLY principal that carries `bypass: true`; it is never produced
+ * from a network credential.
+ */
+export declare function localOwnerPrincipal(): ApiPrincipal;
+export declare function principalHasScope(principal: ApiPrincipal, scope: ApiScope): boolean;
+/**
+ * Bridge an authenticated principal to the shared authorization context. Threads
+ * the principal's scopes so the service layer honors scope-based grants (for a
+ * token/serve credential that carries scopes but no roles) identically on the
+ * /v1 and MCP paths. `bypass` is propagated ONLY when already set by
+ * `localOwnerPrincipal` — a network principal always carries `bypass: false`.
+ */
+export declare function toAuthorizationContext(principal: ApiPrincipal): AuthorizationContext & {
+    scopes?: ApiScope[];
+};
+/** Back-compat aliases (access: principalToContext, entities: principalContext). */
+export declare const principalToContext: typeof toAuthorizationContext;
+export declare const principalContext: typeof toAuthorizationContext;
+/**
+ * Request-level gate: authenticate + require a scope set + (optional) entity.
+ * Deny-by-default. Used by apps that gate at the HTTP layer (access).
+ */
+export declare function authorizeApiRequest(req: Request, requirement: {
+    public?: boolean;
+    scopes: ApiScope[];
+    entity_id?: string;
+}): ApiAuthResult;
+/**
+ * Principal-level gate: require a single scope + (optional) entity access for an
+ * already-authenticated principal. Deny-by-default; knowing an entity_id grants
+ * nothing without matching access.
+ */
+export declare function authorizeScopeAndEntity(principal: ApiPrincipal, requiredScope: ApiScope, entityId?: string): ApiAuthResult;
+//# sourceMappingURL=auth.d.ts.map

package/dist/server/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/server/auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAE5F,OAAO,EAAkB,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD;;;;;;;;;;;;;;;;;;GAkBG;AAEH,YAAY,EAAE,QAAQ,EAAE,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,CAAC;AAErB,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;AAE3E,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC;IACpB,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAa,SAAQ,oBAAoB;IACxD,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,iBAAiB,CAAC;IACnC,MAAM,EAAE,QAAQ,EAAE,CAAC;IACnB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,cAAc,GAAG,mBAAmB,CAAC;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,cAAc,CAAC,EAAE,QAAQ,CAAC;IAC1B,gEAAgE;IAChE,eAAe,CAAC,EAAE,QAAQ,EAAE,CAAC;IAC7B,SAAS,CAAC,EAAE,YAAY,CAAC;CAC1B;AAOD,wFAAwF;AACxF,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAA8B,CAAC;AAChF,gDAAgD;AAChD,eAAO,MAAM,YAAY,oIAAc,CAAC;AAExC,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAE/D;AACD,qCAAqC;AACrC,eAAO,MAAM,cAAc,+BAAyB,CAAC;AAErD,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,QAAQ,EAAE,CAErE;AACD,oCAAoC;AACpC,eAAO,MAAM,iBAAiB,uBAAiB,CAAC;AAEhD,gFAAgF;AAChF,wBAAgB,YAAY,IAAI,MAAM,GAAG,SAAS,CAMjD;AACD,kCAAkC;AAClC,eAAO,MAAM,SAAS,qBAAe,CAAC;AAUtC,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AAED,wBAAgB,wBAAwB,IAAI,mBAAmB,EAAE,CAWhE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,CAQ9E;AACD,6CAA6C;AAC7C,eAAO,MAAM,gBAAgB,oBAAc,CAAC;AAY5C;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAyDpE;AACD,8CAA8C;AAC9C,eAAO,MAAM,kBAAkB,0BAAoB,CAAC;AAEpD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,GAAG,IAAI,CAExE;AACD,oDAAoD;AACpD,eAAO,MAAM,mBAAmB,+BAAyB,CAAC;AAE1D;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,YAAY,CASlD;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,GAAG,OAAO,CAEnF;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,YAAY,GACtB,oBAAoB,GAAG;IAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAA;CAAE,CAQhD;AACD,oFAAoF;AACpF,eAAO,MAAM,kBAAkB,+BAAyB,CAAC;AACzD,eAAO,MAAM,gBAAgB,+BAAyB,CAAC;AAEvD;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACxE,aAAa,CA4Bf;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,YAAY,EACvB,aAAa,EAAE,QAAQ,EACvB,QAAQ,CAAC,EAAE,MAAM,GAChB,aAAa,CAcf"}

package/dist/server/health.d.ts

@@ -0,0 +1,23 @@
+export declare function versionPayload(): {
+    status: "ok";
+    version: string;
+    mode: "local" | "cloud";
+};
+export declare function healthPayload(): {
+    status: "ok";
+    version: string;
+    mode: "local" | "cloud";
+};
+/**
+ * Readiness probe. The response BODY matches BUILD-SPEC §6.2 exactly:
+ * `{ status: "ready" }` with 200 on success, and a minimal `{ status: "unavailable" }`
+ * with 503 on failure. `ok` is a transport-only discriminant for the HTTP status
+ * code and is NOT part of the response body.
+ */
+export declare function readyPayload(): Promise<{
+    ok: boolean;
+    body: {
+        status: "ready" | "unavailable";
+    };
+}>;
+//# sourceMappingURL=health.d.ts.map

package/dist/server/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/server/health.ts"],"names":[],"mappings":"AAOA,wBAAgB,cAAc,IAAI;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAA;CAAE,CAE3F;AAED,wBAAgB,aAAa,IAAI;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAA;CAAE,CAE1F;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE;QAAE,MAAM,EAAE,OAAO,GAAG,aAAa,CAAA;KAAE,CAAA;CAAE,CAAC,CAQxG"}

package/dist/server/index.d.ts

@@ -0,0 +1,11 @@
+#!/usr/bin/env bun
+export declare function getPort(): number;
+/**
+ * Fail-closed startup guard (BUILD-SPEC §6.3): auth is decoupled from storage
+ * mode. Unauthenticated /v1 is permitted ONLY on a loopback bind in local mode.
+ * A cloud-mode or non-loopback bind with no credentials configured is a hard
+ * startup error — never silently serve open.
+ */
+export declare function assertServeSafety(): void;
+export declare function startServer(): ReturnType<typeof Bun.serve>;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":";AAMA,wBAAgB,OAAO,IAAI,MAAM,CAEhC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAWxC;AAED,wBAAgB,WAAW,IAAI,UAAU,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,CAS1D"}