@kelpie/server 0.1.0

package/dist/modules/mcp/protocol.js

@@ -0,0 +1,292 @@
+import { z } from 'zod';
+import { AppError, describeThrown, internalErrorBody, toErrorBody } from '../../lib/errors.js';
+/**
+ * Revisions that carry version, identity and capabilities in each request's
+ * `_meta` rather than establishing them with a handshake.
+ */
+export const MODERN_PROTOCOL_VERSIONS = ['2026-07-28'];
+/**
+ * Revisions that open with `initialize`.
+ *
+ * `2025-03-26` is kept because its clients are the ones that send JSON-RPC
+ * batches, which `2025-06-18` removed. Answering both costs one array branch in
+ * the transport and keeps older MCP clients working.
+ */
+export const LEGACY_PROTOCOL_VERSIONS = ['2025-06-18', '2025-03-26'];
+/** Everything Kelpie speaks, newest first. This is the list a `-32022` hands back. */
+export const SUPPORTED_PROTOCOL_VERSIONS = [
+    ...MODERN_PROTOCOL_VERSIONS,
+    ...LEGACY_PROTOCOL_VERSIONS,
+];
+/** Newest revision Kelpie speaks, which is also the newest that exists. */
+export const LATEST_PROTOCOL_VERSION = '2026-07-28';
+/**
+ * Newest *legacy* revision, and the one an `initialize` naming something
+ * unrecognised is answered with. Handing a legacy client `2026-07-28` would name
+ * a revision in which the handshake it just completed does not exist.
+ */
+export const LATEST_LEGACY_PROTOCOL_VERSION = '2025-06-18';
+/**
+ * `_meta` keys the modern revision defines. Reverse-DNS prefixed, which is the
+ * naming rule for anything outside a caller's own namespace.
+ */
+export const PROTOCOL_VERSION_META = 'io.modelcontextprotocol/protocolVersion';
+export const CLIENT_INFO_META = 'io.modelcontextprotocol/clientInfo';
+export const CLIENT_CAPABILITIES_META = 'io.modelcontextprotocol/clientCapabilities';
+export const SERVER_INFO_META = 'io.modelcontextprotocol/serverInfo';
+/** JSON-RPC's own codes. Anything Kelpie refuses maps onto one of these. */
+export const PARSE_ERROR = -32_700;
+export const INVALID_REQUEST = -32_600;
+export const METHOD_NOT_FOUND = -32_601;
+export const INVALID_PARAMS = -32_602;
+export const INTERNAL_ERROR = -32_603;
+/**
+ * Codes MCP allocates for itself, from the `-32020` to `-32099` band the spec
+ * reserves. Both were renumbered out of the implementation-defined range in
+ * `2026-07-28`, so these values are the current ones and not the draft's.
+ */
+export const HEADER_MISMATCH = -32_020;
+export const UNSUPPORTED_PROTOCOL_VERSION = -32_022;
+/**
+ * How long a client may hold the tool listing.
+ *
+ * The set is fixed at boot by the module list, so within one process it cannot
+ * change at all; only a redeploy that adds a module can move it. An hour bounds
+ * how long a client can be wrong about that, and matches the figure the spec's
+ * own `server/discover` example uses.
+ */
+export const TOOL_LISTING_TTL_MS = 3_600_000;
+/**
+ * Cacheable by anyone. The listing is derived from the module list, so it is
+ * identical for every workspace and every key, and holds no workspace data — the
+ * condition the spec sets for sharing a response across authorization contexts.
+ */
+const CACHE_HINTS = { ttlMs: TOOL_LISTING_TTL_MS, cacheScope: 'public' };
+/**
+ * An incoming message. `id` present means a request that must be answered; absent
+ * means a notification, which must not be.
+ *
+ * Loose about `params` on purpose: each method validates its own, so a bad shape
+ * is that method's `-32602` rather than a blanket parse failure that says nothing
+ * about which field was wrong.
+ */
+const messageSchema = z.object({
+    jsonrpc: z.literal('2.0'),
+    id: z.union([z.string(), z.number()]).optional(),
+    method: z.string().min(1),
+    params: z.unknown().optional(),
+});
+const initializeParams = z.object({
+    protocolVersion: z.string().min(1),
+    capabilities: z.unknown().optional(),
+    clientInfo: z.unknown().optional(),
+});
+const callToolParams = z.object({
+    name: z.string().min(1),
+    arguments: z.unknown().optional(),
+});
+/** Reads the two body fields the transport mirrors into headers, and the `_meta` version. */
+const requestEnvelope = z.object({
+    name: z.string().optional(),
+    _meta: z.object({ [PROTOCOL_VERSION_META]: z.string().min(1).optional() }).optional(),
+});
+/**
+ * Converts a tool's Zod input schema to the JSON Schema `tools/list` publishes.
+ *
+ * `io: 'input'` matters: a field with a `.default()` is optional to the caller and
+ * required to the tool body, and only the input view says so.
+ *
+ * @throws When a schema has no JSON Schema equivalent. Called at mount, so that
+ *   is a boot failure rather than a broken tool listing.
+ */
+export function publishTool(tool) {
+    const schema = z.toJSONSchema(tool.inputSchema, { io: 'input' });
+    // `$schema` is valid and useless here: MCP already fixes the dialect, and the
+    // key repeats on every one of a hundred tools in every listing.
+    delete schema.$schema;
+    return { name: tool.name, description: tool.description, inputSchema: schema };
+}
+/** Parses one incoming message. */
+export function parseMessage(value) {
+    const parsed = messageSchema.safeParse(value);
+    return parsed.success ? parsed.data : undefined;
+}
+/** The protocol version a modern client puts in every request's `_meta`. */
+export function readMetaVersion(params) {
+    const parsed = requestEnvelope.safeParse(params);
+    return parsed.success ? parsed.data._meta?.[PROTOCOL_VERSION_META] : undefined;
+}
+/** `params.name`, which the transport mirrors into `Mcp-Name`. */
+export function readParamsName(params) {
+    const parsed = requestEnvelope.safeParse(params);
+    return parsed.success ? parsed.data.name : undefined;
+}
+export function isModernVersion(version) {
+    return MODERN_PROTOCOL_VERSIONS.includes(version);
+}
+export function isSupportedVersion(version) {
+    return SUPPORTED_PROTOCOL_VERSIONS.includes(version);
+}
+function success(id, result) {
+    return { jsonrpc: '2.0', id, result };
+}
+export function failure(id, code, message, data) {
+    return {
+        jsonrpc: '2.0',
+        id,
+        error: data === undefined ? { code, message } : { code, message, data },
+    };
+}
+/** The `-32022` a client reads to pick a version it and Kelpie both speak. */
+export function unsupportedVersion(id, requested) {
+    return failure(id, UNSUPPORTED_PROTOCOL_VERSION, 'Unsupported protocol version', {
+        supported: SUPPORTED_PROTOCOL_VERSIONS,
+        requested,
+    });
+}
+/**
+ * The version to answer a legacy `initialize` with.
+ *
+ * A client asking for a legacy revision gets that one back, which is what lets a
+ * `2025-03-26` client keep its batches. Anything else gets the newest legacy
+ * revision, and the client decides whether it can live with it.
+ */
+export function negotiateLegacyVersion(requested) {
+    return LEGACY_PROTOCOL_VERSIONS.includes(requested) ? requested : LATEST_LEGACY_PROTOCOL_VERSION;
+}
+/**
+ * Dresses a payload as a finished result.
+ *
+ * Modern results carry `resultType` and identify the server in `_meta`; legacy
+ * results carry neither, and adding them would put fields in front of a client
+ * whose revision never defined them.
+ */
+function completeResult(dependencies, era, payload) {
+    if (era === 'legacy') {
+        return payload;
+    }
+    return {
+        ...payload,
+        resultType: 'complete',
+        _meta: { [SERVER_INFO_META]: dependencies.serverInfo },
+    };
+}
+/**
+ * Renders what a tool threw as a tool result rather than a JSON-RPC error.
+ *
+ * MCP draws that line deliberately: a protocol error means the call never
+ * happened, while a tool that ran and refused is an answer the model should see
+ * and can act on. The body is the same `api.md` error shape the REST route would
+ * have returned, so a 404 reads identically on both surfaces.
+ */
+function toolFailure(logger, toolName, error) {
+    if (error instanceof AppError) {
+        return {
+            content: [{ type: 'text', text: JSON.stringify(toErrorBody(error)) }],
+            isError: true,
+        };
+    }
+    logger.error('mcp tool failed', { tool: toolName, error: describeThrown(error) });
+    return {
+        content: [{ type: 'text', text: JSON.stringify(internalErrorBody()) }],
+        isError: true,
+    };
+}
+async function callTool(dependencies, era, id, params, actor) {
+    const parsed = callToolParams.safeParse(params);
+    if (!parsed.success) {
+        return failure(id, INVALID_PARAMS, 'tools/call needs a tool "name"');
+    }
+    const tool = dependencies.tools.find((candidate) => candidate.name === parsed.data.name);
+    if (tool === undefined) {
+        return failure(id, INVALID_PARAMS, `Unknown tool "${parsed.data.name}"`);
+    }
+    try {
+        // `arguments` is optional on the wire and every tool schema is an object, so
+        // an absent one is an empty object rather than a validation failure the
+        // caller cannot act on.
+        const value = await tool.invoke(parsed.data.arguments ?? {}, actor);
+        return success(id, completeResult(dependencies, era, {
+            content: [{ type: 'text', text: JSON.stringify(value) }],
+            isError: false,
+        }));
+    }
+    catch (error) {
+        return success(id, completeResult(dependencies, era, toolFailure(dependencies.logger, tool.name, error)));
+    }
+}
+/**
+ * Answers one message.
+ *
+ * @param era Which revision's rules to answer under. The transport decides it
+ *   from how the request arrived, and every method here that exists in only one
+ *   era is method-not-found in the other.
+ * @returns The response, or undefined for a notification, which JSON-RPC forbids
+ *   answering.
+ */
+export async function dispatch(dependencies, message, era, actor) {
+    const { id } = message;
+    if (id === undefined) {
+        // Kelpie subscribes to no client notifications. `notifications/initialized`
+        // and the cancellations are acknowledged by the transport's 202 and dropped.
+        return undefined;
+    }
+    switch (message.method) {
+        /** Legacy only: the modern revision removed the handshake outright. */
+        case 'initialize': {
+            if (era === 'modern') {
+                break;
+            }
+            const parsed = initializeParams.safeParse(message.params);
+            if (!parsed.success) {
+                return failure(id, INVALID_PARAMS, 'initialize needs a "protocolVersion"');
+            }
+            return success(id, {
+                protocolVersion: negotiateLegacyVersion(parsed.data.protocolVersion),
+                // `listChanged: false`: the tool set is fixed at boot by the module list,
+                // so there is never a change to notify.
+                capabilities: { tools: { listChanged: false } },
+                serverInfo: dependencies.serverInfo,
+                instructions: dependencies.instructions,
+            });
+        }
+        /**
+         * Modern only, and mandatory there. It is the one request a client may send
+         * before it knows anything about the server, so it names every revision this
+         * deployment speaks — legacy ones included, which is how a dual-era client
+         * discovers it can fall back.
+         */
+        case 'server/discover': {
+            if (era === 'legacy') {
+                break;
+            }
+            return success(id, completeResult(dependencies, era, {
+                supportedVersions: SUPPORTED_PROTOCOL_VERSIONS,
+                capabilities: { tools: {} },
+                instructions: dependencies.instructions,
+                ...CACHE_HINTS,
+            }));
+        }
+        /** Legacy only: `2026-07-28` removed it. */
+        case 'ping': {
+            if (era === 'modern') {
+                break;
+            }
+            return success(id, {});
+        }
+        case 'tools/list':
+            // No pagination: the whole set is known at boot and is a few hundred
+            // kilobytes at most, so a cursor would only add a round trip. The order is
+            // module registration order, which is fixed, so a client may cache it.
+            return success(id, completeResult(dependencies, era, {
+                tools: dependencies.published,
+                ...(era === 'modern' ? CACHE_HINTS : {}),
+            }));
+        case 'tools/call':
+            return callTool(dependencies, era, id, message.params, actor);
+        default:
+            break;
+    }
+    return failure(id, METHOD_NOT_FOUND, `Kelpie does not implement "${message.method}" under MCP ${era === 'modern' ? LATEST_PROTOCOL_VERSION : 'the initialize-based revisions'}`);
+}
+//# sourceMappingURL=protocol.js.map

package/dist/modules/mcp/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../src/modules/mcp/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAuB9F;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAsB,CAAC,YAAY,CAAC,CAAA;AAEzE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAsB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;AAEvF,sFAAsF;AACtF,MAAM,CAAC,MAAM,2BAA2B,GAAsB;IAC5D,GAAG,wBAAwB;IAC3B,GAAG,wBAAwB;CAC5B,CAAA;AAED,2EAA2E;AAC3E,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CAAA;AAEnD;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,YAAY,CAAA;AAE1D;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,yCAAyC,CAAA;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,oCAAoC,CAAA;AACpE,MAAM,CAAC,MAAM,wBAAwB,GAAG,4CAA4C,CAAA;AACpF,MAAM,CAAC,MAAM,gBAAgB,GAAG,oCAAoC,CAAA;AAEpE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAM,CAAA;AAClC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAM,CAAA;AACtC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAM,CAAA;AACvC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAM,CAAA;AACrC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAM,CAAA;AAErC;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAM,CAAA;AACtC,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,MAAM,CAAA;AAEnD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAA;AAE5C;;;;GAIG;AACH,MAAM,WAAW,GAAG,EAAE,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,QAAQ,EAAW,CAAA;AAqBjF;;;;;;;GAOG;AACH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACzB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAA;AAIF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAA;AAEF,6FAA6F;AAC7F,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtF,CAAC,CAAA;AAyBF;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;IAEhE,8EAA8E;IAC9E,gEAAgE;IAChE,OAAO,MAAM,CAAC,OAAO,CAAA;IAErB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,CAAA;AAChF,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAE7C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;AACjD,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,MAAe;IAC7C,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAEhD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAChF,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,cAAc,CAAC,MAAe;IAC5C,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAEhD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;AACtD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,OAAO,wBAAwB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;AACnD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,2BAA2B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;AACtD,CAAC;AAED,SAAS,OAAO,CAAC,EAAa,EAAE,MAAe;IAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAA;AACvC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,EAAa,EAAE,IAAY,EAAE,OAAe,EAAE,IAAc;IAClF,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,KAAK,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;KACxE,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,EAAa,EAAE,SAAiB;IACjE,OAAO,OAAO,CAAC,EAAE,EAAE,4BAA4B,EAAE,8BAA8B,EAAE;QAC/E,SAAS,EAAE,2BAA2B;QACtC,SAAS;KACV,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,OAAO,wBAAwB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8BAA8B,CAAA;AAClG,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CACrB,YAAkC,EAClC,GAAgB,EAChB,OAAgC;IAEhC,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrB,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,OAAO;QACL,GAAG,OAAO;QACV,UAAU,EAAE,UAAU;QACtB,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,YAAY,CAAC,UAAU,EAAE;KACvD,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,MAAc,EAAE,QAAgB,EAAE,KAAc;IACnE,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACrE,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAEjF,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,IAAI;KACd,CAAA;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,YAAkC,EAClC,GAAgB,EAChB,EAAa,EACb,MAAe,EACf,KAAY;IAEZ,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAE/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,OAAO,CAAC,EAAE,EAAE,cAAc,EAAE,gCAAgC,CAAC,CAAA;IACtE,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAExF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,OAAO,CAAC,EAAE,EAAE,cAAc,EAAE,iBAAiB,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAA;IAC1E,CAAC;IAED,IAAI,CAAC;QACH,6EAA6E;QAC7E,wEAAwE;QACxE,wBAAwB;QACxB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE,KAAK,CAAC,CAAA;QAEnE,OAAO,OAAO,CACZ,EAAE,EACF,cAAc,CAAC,YAAY,EAAE,GAAG,EAAE;YAChC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,EAAE,KAAK;SACf,CAAC,CACH,CAAA;IACH,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,OAAO,CACZ,EAAE,EACF,cAAc,CAAC,YAAY,EAAE,GAAG,EAAE,WAAW,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CACtF,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,YAAkC,EAClC,OAAuB,EACvB,GAAgB,EAChB,KAAY;IAEZ,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAA;IAEtB,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,4EAA4E;QAC5E,6EAA6E;QAC7E,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,uEAAuE;QACvE,KAAK,YAAY,EAAE,CAAC;YAClB,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrB,MAAK;YACP,CAAC;YAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAEzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,OAAO,CAAC,EAAE,EAAE,cAAc,EAAE,sCAAsC,CAAC,CAAA;YAC5E,CAAC;YAED,OAAO,OAAO,CAAC,EAAE,EAAE;gBACjB,eAAe,EAAE,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;gBACpE,0EAA0E;gBAC1E,wCAAwC;gBACxC,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;gBAC/C,UAAU,EAAE,YAAY,CAAC,UAAU;gBACnC,YAAY,EAAE,YAAY,CAAC,YAAY;aACxC,CAAC,CAAA;QACJ,CAAC;QAED;;;;;WAKG;QACH,KAAK,iBAAiB,EAAE,CAAC;YACvB,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrB,MAAK;YACP,CAAC;YAED,OAAO,OAAO,CACZ,EAAE,EACF,cAAc,CAAC,YAAY,EAAE,GAAG,EAAE;gBAChC,iBAAiB,EAAE,2BAA2B;gBAC9C,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC3B,YAAY,EAAE,YAAY,CAAC,YAAY;gBACvC,GAAG,WAAW;aACf,CAAC,CACH,CAAA;QACH,CAAC;QAED,4CAA4C;QAC5C,KAAK,MAAM,EAAE,CAAC;YACZ,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrB,MAAK;YACP,CAAC;YAED,OAAO,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QACxB,CAAC;QAED,KAAK,YAAY;YACf,qEAAqE;YACrE,2EAA2E;YAC3E,uEAAuE;YACvE,OAAO,OAAO,CACZ,EAAE,EACF,cAAc,CAAC,YAAY,EAAE,GAAG,EAAE;gBAChC,KAAK,EAAE,YAAY,CAAC,SAAS;gBAC7B,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;aACzC,CAAC,CACH,CAAA;QAEH,KAAK,YAAY;YACf,OAAO,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAE/D;YACE,MAAK;IACT,CAAC;IAED,OAAO,OAAO,CACZ,EAAE,EACF,gBAAgB,EAChB,8BAA8B,OAAO,CAAC,MAAM,eAAe,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,gCAAgC,EAAE,CAC3I,CAAA;AACH,CAAC"}

package/dist/modules/mcp/router.d.ts

@@ -0,0 +1,23 @@
+import { Hono } from 'hono';
+import type { Logger } from '../../lib/logger.ts';
+import type { McpTool } from '../../runtime/module.ts';
+import type { CredentialDependencies } from '../auth/credentials.ts';
+import type { McpServerInfo } from './protocol.ts';
+export interface McpRouterDependencies extends CredentialDependencies {
+    readonly tools: readonly McpTool[];
+    readonly serverInfo: McpServerInfo;
+    readonly instructions: string;
+    readonly logger: Logger;
+}
+export interface McpEndpoint {
+    /** Mounts at `/mcp`. Speaks JSON-RPC to MCP clients. */
+    readonly transport: Hono;
+    /**
+     * Mounts under `/v1`. One ordinary REST read of the same tool listing, for a
+     * caller holding a session rather than a key: the admin page showing what this
+     * deployment exposes, or anyone checking the surface without an MCP client.
+     */
+    readonly catalog: Hono;
+}
+export declare function createMcpEndpoint(dependencies: McpRouterDependencies): McpEndpoint;
+//# sourceMappingURL=router.d.ts.map

package/dist/modules/mcp/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../../src/modules/mcp/router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAM3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AAGtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAmBpE,OAAO,KAAK,EAIV,aAAa,EAGd,MAAM,eAAe,CAAA;AAwCtB,MAAM,WAAW,qBAAsB,SAAQ,sBAAsB;IACnE,QAAQ,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,CAAA;IAClC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAA;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AA+ND,MAAM,WAAW,WAAW;IAC1B,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAA;CACvB;AAOD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,qBAAqB,GAAG,WAAW,CAwGlF"}

package/dist/modules/mcp/router.js

@@ -0,0 +1,298 @@
+import { Hono } from 'hono';
+import { AppError } from '../../lib/errors.js';
+import { requestOrigin } from '../../lib/http.js';
+import { readBearerToken } from '../api-keys/keys.js';
+import { resolveActor, resolveActorFrom } from '../auth/credentials.js';
+import { HEADER_MISMATCH, INVALID_REQUEST, LATEST_LEGACY_PROTOCOL_VERSION, LATEST_PROTOCOL_VERSION, METHOD_NOT_FOUND, PARSE_ERROR, PROTOCOL_VERSION_META, dispatch, failure, isModernVersion, isSupportedVersion, parseMessage, publishTool, readMetaVersion, readParamsName, unsupportedVersion, } from './protocol.js';
+/**
+ * The Streamable HTTP transport, mounted at `/mcp` (`architecture.md` boot step 6).
+ *
+ * Kelpie never initiates a message, so the transport is one `POST` and nothing
+ * else: `GET` would open a server-to-client stream there is nothing to put on,
+ * and `DELETE` would end a session that is never started. Both answer `405`,
+ * which the transport spec allows and which tells a client to stop trying.
+ *
+ * **No session id.** Every request carries its own bearer key, so two POSTs need
+ * nothing in common and any instance can answer either.
+ *
+ * **Two eras, decided per POST.** `2026-07-28` removed the handshake, so a modern
+ * client announces its revision in every request instead. `readEra` works out
+ * which one is being asked for and, for a modern request, checks that the headers
+ * the transport mirrors agree with the body before anything acts on either. A
+ * batch can only have come from a legacy client, so the first message decides for
+ * all of them.
+ *
+ * **No CORS, and an explicit `Origin` check.** The endpoint sends no CORS headers
+ * and reads no cookie, so a page on another origin can neither read a reply nor
+ * borrow a signed-in reader's identity. That reasoning is why the check below
+ * looked unnecessary and it is still why the risk is small, but the transport
+ * spec makes validating `Origin` a requirement rather than an argument, and a
+ * rule that holds without depending on a chain of reasoning is worth five lines.
+ */
+/**
+ * The body fields the transport mirrors into headers, so an intermediary can
+ * route on them without parsing the body. Names compare case-insensitively,
+ * which is what Hono's header lookup already does; values do not.
+ */
+const PROTOCOL_VERSION_HEADER = 'MCP-Protocol-Version';
+const METHOD_HEADER = 'Mcp-Method';
+const NAME_HEADER = 'Mcp-Name';
+/** Answered by GET and DELETE, so a client learns the shape of the endpoint. */
+const POST_ONLY = 'Send MCP messages as a POST to this endpoint';
+/** True when the client will take a plain JSON reply. */
+function acceptsJson(header) {
+    if (header === undefined || header.trim().length === 0) {
+        return true;
+    }
+    return header
+        .split(',')
+        .some((value) => {
+        const type = value.split(';')[0]?.trim() ?? '';
+        return type === 'application/json' || type === 'application/*' || type === '*/*';
+    });
+}
+function acceptsEventStream(header) {
+    return (header ?? '')
+        .split(',')
+        .some((value) => (value.split(';')[0]?.trim() ?? '') === 'text/event-stream');
+}
+/**
+ * Resolves the caller, bearer key only.
+ *
+ * A session cookie is deliberately not read here even though the REST surface
+ * takes one. MCP clients are not browsers, and refusing the cookie means there is
+ * no ambient credential for a cross-origin page to spend. That is one of three
+ * defences, not the whole of it: `checkOrigin` refuses the page outright, and the
+ * absent CORS headers stop it reading a reply.
+ *
+ * @throws AppError 401 when no key is presented, or it is not a live one.
+ */
+function resolveKeyActor(dependencies, context) {
+    return resolveActor(dependencies, { bearer: readBearerToken(context.req.header('Authorization')) });
+}
+/**
+ * Refuses a browser calling from somewhere else.
+ *
+ * An MCP client is not a browser and sends no `Origin` at all, so an absent
+ * header is the ordinary case and is allowed. A present one has to be this
+ * deployment's own, which is the same `Host`-derived origin a form's embed URL
+ * is built from.
+ *
+ * There is no allowlist and no configuration for one. A cross-origin browser has
+ * no business here whatever its address: the endpoint takes a bearer key, and a
+ * page that holds one can send it from a server instead.
+ *
+ * @throws AppError 403 for a browser on another origin.
+ */
+function checkOrigin(context) {
+    const origin = context.req.header('Origin');
+    if (origin !== undefined && origin !== requestOrigin(context)) {
+        throw new AppError('forbidden', 'This endpoint does not answer requests from another origin');
+    }
+}
+/**
+ * Undoes the sentinel a client wraps a header value in when it will not survive
+ * as plain ASCII: `=?base64?…?=`.
+ *
+ * A value that is not wrapped is returned as it arrived. The markers are
+ * case-sensitive and must be exactly these, so a value that merely looks similar
+ * is left alone — and a client with a real value shaped like the sentinel is
+ * required to encode it for exactly that reason.
+ */
+const BASE64_SENTINEL = /^=\?base64\?(.*)\?=$/u;
+function decodeHeaderValue(raw) {
+    if (raw === undefined) {
+        return undefined;
+    }
+    const encoded = BASE64_SENTINEL.exec(raw);
+    return encoded === null ? raw : Buffer.from(encoded[1] ?? '', 'base64').toString('utf8');
+}
+/**
+ * Names the header and body values that disagree, or nothing when they agree.
+ *
+ * The point of mirroring body fields into headers is that an intermediary can
+ * route on them without parsing the body. That only holds if the two cannot
+ * differ, so the server that does parse the body is the one that has to check —
+ * otherwise a load balancer and the server act on different values.
+ */
+function headerProblem(context, message) {
+    const headerVersion = context.req.header(PROTOCOL_VERSION_HEADER);
+    const bodyVersion = readMetaVersion(message.params);
+    if (headerVersion === undefined) {
+        return `${PROTOCOL_VERSION_HEADER} is required`;
+    }
+    if (headerVersion !== bodyVersion) {
+        return `${PROTOCOL_VERSION_HEADER} is "${headerVersion}" and ${PROTOCOL_VERSION_META} is ${bodyVersion === undefined ? 'absent' : `"${bodyVersion}"`}`;
+    }
+    const methodHeader = context.req.header(METHOD_HEADER);
+    if (methodHeader === undefined) {
+        return `${METHOD_HEADER} is required`;
+    }
+    if (methodHeader !== message.method) {
+        return `${METHOD_HEADER} is "${methodHeader}" and the body's method is "${message.method}"`;
+    }
+    // `Mcp-Name` mirrors `params.name`, which only these methods carry. Of the
+    // three the spec names, `tools/call` is the only one Kelpie implements.
+    if (message.method !== 'tools/call') {
+        return undefined;
+    }
+    const nameHeader = decodeHeaderValue(context.req.header(NAME_HEADER));
+    const bodyName = readParamsName(message.params);
+    if (nameHeader === undefined) {
+        return `${NAME_HEADER} is required on tools/call`;
+    }
+    if (nameHeader !== bodyName) {
+        return `${NAME_HEADER} is "${nameHeader}" and the body names ${bodyName === undefined ? 'no tool' : `"${bodyName}"`}`;
+    }
+    return undefined;
+}
+/**
+ * Works out which revision a request is asking for.
+ *
+ * A modern request says so in its `_meta`, and `server/discover` is a modern
+ * method whatever else it carries. Everything else is legacy, including a request
+ * that names no version at all: the transport spec has a server read that as
+ * `2025-03-26`, from before the header existed.
+ *
+ * A version Kelpie does not speak is refused with `-32022` carrying the list it
+ * does, which is what lets a client pick another and retry. `initialize` is the
+ * exception, because negotiating down is what that handshake is for.
+ */
+function readEra(context, message) {
+    const id = message.id ?? null;
+    const claimed = readMetaVersion(message.params) ?? context.req.header(PROTOCOL_VERSION_HEADER);
+    if (claimed !== undefined && !isSupportedVersion(claimed) && message.method !== 'initialize') {
+        return { kind: 'refuse', response: unsupportedVersion(id, claimed) };
+    }
+    const modern = message.method === 'server/discover' || (claimed !== undefined && isModernVersion(claimed));
+    if (!modern) {
+        return { kind: 'era', era: 'legacy' };
+    }
+    const problem = headerProblem(context, message);
+    return problem === undefined
+        ? { kind: 'era', era: 'modern' }
+        : { kind: 'refuse', response: failure(id, HEADER_MISMATCH, `Header mismatch: ${problem}`) };
+}
+/**
+ * The status a set of responses is sent with.
+ *
+ * `200` almost always: a JSON-RPC error is a normal HTTP response. The exception
+ * is a modern method-not-found, which the transport spec puts on `404` so a
+ * client can tell a modern server that lacks the method from a legacy server that
+ * does not host the endpoint at all. Legacy revisions never said that, so they
+ * keep the `200`.
+ */
+function statusFor(responses, era) {
+    if (era === 'legacy' || responses.length !== 1) {
+        return 200;
+    }
+    return responses[0]?.error?.code === METHOD_NOT_FOUND ? 404 : 200;
+}
+/**
+ * Renders responses in whichever of the two content types the client will take.
+ *
+ * A `2025-03-26` client may send a batch, so the payload is an array when the
+ * request was one, and a bare object otherwise.
+ */
+function renderResponses(context, responses, batched, era) {
+    // Nothing to answer: every message in the body was a notification. The spec
+    // fixes this on 202, and the body must be empty.
+    if (responses.length === 0) {
+        return context.body(null, 202);
+    }
+    const payload = batched ? responses : responses[0];
+    const accept = context.req.header('Accept');
+    const status = statusFor(responses, era);
+    if (acceptsJson(accept)) {
+        return context.json(payload, status);
+    }
+    if (acceptsEventStream(accept)) {
+        return context.body(`event: message\ndata: ${JSON.stringify(payload)}\n\n`, status, {
+            'Content-Type': 'text/event-stream',
+            'Cache-Control': 'no-cache, no-store',
+        });
+    }
+    throw new AppError('bad_request', 'Accept application/json or text/event-stream');
+}
+/** The `tools/list` entry, rendered in `api.md`'s `snake_case`. */
+function catalogEntry(tool) {
+    return { name: tool.name, description: tool.description, input_schema: tool.inputSchema };
+}
+export function createMcpEndpoint(dependencies) {
+    const transport = new Hono();
+    const catalog = new Hono();
+    // Built once: a schema Zod cannot render as JSON Schema then fails boot, rather
+    // than producing a tool listing no client can read.
+    const published = dependencies.tools.map(publishTool);
+    const dispatchDependencies = {
+        tools: dependencies.tools,
+        published,
+        serverInfo: dependencies.serverInfo,
+        instructions: dependencies.instructions,
+        logger: dependencies.logger,
+    };
+    catalog.get('/mcp/tools', async (context) => {
+        // Credentials as anywhere under `/v1`, so a signed-in reader qualifies. The
+        // listing describes the deployment rather than the workspace, but it is not
+        // public: what an install exposes is not a stranger's business.
+        await resolveActorFrom(dependencies, context);
+        return context.json({ data: published.map(catalogEntry), next_cursor: null });
+    });
+    transport.post('/', async (context) => {
+        checkOrigin(context);
+        // Credentials before anything protocol-level, including `server/discover`.
+        // A client may call that one before it knows anything about the server, but
+        // it always has the key already: it is in the same config as the URL.
+        const actor = await resolveKeyActor(dependencies, context).catch((error) => {
+            if (error instanceof AppError && error.code === 'unauthorized') {
+                // The header is what tells a client it may retry with a credential
+                // rather than that the endpoint is gone.
+                context.header('WWW-Authenticate', 'Bearer');
+            }
+            throw error;
+        });
+        const raw = await context.req.json().catch(() => {
+            throw new AppError('bad_request', 'Body must be valid JSON');
+        });
+        const batched = Array.isArray(raw);
+        const incoming = batched ? raw : [raw];
+        if (incoming.length === 0) {
+            return context.json(failure(null, INVALID_REQUEST, 'A batch must hold at least one message'), 400);
+        }
+        const parsed = incoming.map(parseMessage);
+        // The era belongs to the POST, not to each message in it: a modern request
+        // is one message, and a batch can only have come from a legacy client.
+        const first = parsed.find((message) => message !== undefined);
+        if (first === undefined) {
+            return context.json(failure(null, PARSE_ERROR, 'Not a JSON-RPC 2.0 message'), 400);
+        }
+        const decision = readEra(context, first);
+        if (decision.kind === 'refuse') {
+            return context.json(decision.response, 400);
+        }
+        const { era } = decision;
+        if (era === 'modern' && batched) {
+            return context.json(failure(first.id ?? null, INVALID_REQUEST, `MCP ${LATEST_PROTOCOL_VERSION} takes one message per request; batches ended with ${LATEST_LEGACY_PROTOCOL_VERSION}`), 400);
+        }
+        const responses = [];
+        for (const message of parsed) {
+            if (message === undefined) {
+                responses.push(failure(null, PARSE_ERROR, 'Not a JSON-RPC 2.0 message'));
+                continue;
+            }
+            const response = await dispatch(dispatchDependencies, message, era, actor);
+            if (response !== undefined) {
+                responses.push(response);
+            }
+        }
+        return renderResponses(context, responses, batched, era);
+    });
+    transport.get('/', () => {
+        throw new AppError('method_not_allowed', POST_ONLY);
+    });
+    transport.delete('/', () => {
+        throw new AppError('method_not_allowed', POST_ONLY);
+    });
+    return { transport, catalog };
+}
+//# sourceMappingURL=router.js.map

package/dist/modules/mcp/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../../src/modules/mcp/router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAI3B,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAGjD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAEvE,OAAO,EACL,eAAe,EACf,eAAe,EACf,8BAA8B,EAC9B,uBAAuB,EACvB,gBAAgB,EAChB,WAAW,EACX,qBAAqB,EACrB,QAAQ,EACR,OAAO,EACP,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,WAAW,EACX,eAAe,EACf,cAAc,EACd,kBAAkB,GACnB,MAAM,eAAe,CAAA;AAUtB;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;GAIG;AACH,MAAM,uBAAuB,GAAG,sBAAsB,CAAA;AACtD,MAAM,aAAa,GAAG,YAAY,CAAA;AAClC,MAAM,WAAW,GAAG,UAAU,CAAA;AAE9B,gFAAgF;AAChF,MAAM,SAAS,GAAG,8CAA8C,CAAA;AAShE,yDAAyD;AACzD,SAAS,WAAW,CAAC,MAA0B;IAC7C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,MAAM;SACV,KAAK,CAAC,GAAG,CAAC;SACV,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QACd,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QAE9C,OAAO,IAAI,KAAK,kBAAkB,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,KAAK,CAAA;IAClF,CAAC,CAAC,CAAA;AACN,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA0B;IACpD,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;SAClB,KAAK,CAAC,GAAG,CAAC;SACV,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,mBAAmB,CAAC,CAAA;AACjF,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,eAAe,CAAC,YAAmC,EAAE,OAAgB;IAC5E,OAAO,YAAY,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAA;AACrG,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,WAAW,CAAC,OAAgB;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAE3C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,4DAA4D,CAAC,CAAA;IAC/F,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,eAAe,GAAG,uBAAuB,CAAA;AAE/C,SAAS,iBAAiB,CAAC,GAAuB;IAChD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAEzC,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AAC1F,CAAC;AAOD;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,OAAgB,EAAE,OAAuB;IAC9D,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAA;IACjE,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAEnD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,GAAG,uBAAuB,cAAc,CAAA;IACjD,CAAC;IAED,IAAI,aAAa,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,GAAG,uBAAuB,QAAQ,aAAa,SAAS,qBAAqB,OAAO,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,GAAG,EAAE,CAAA;IACxJ,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IAEtD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,GAAG,aAAa,cAAc,CAAA;IACvC,CAAC;IAED,IAAI,YAAY,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACpC,OAAO,GAAG,aAAa,QAAQ,YAAY,+BAA+B,OAAO,CAAC,MAAM,GAAG,CAAA;IAC7F,CAAC;IAED,2EAA2E;IAC3E,wEAAwE;IACxE,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACpC,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;IACrE,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAE/C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,GAAG,WAAW,4BAA4B,CAAA;IACnD,CAAC;IAED,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,WAAW,QAAQ,UAAU,wBAAwB,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,QAAQ,GAAG,EAAE,CAAA;IACvH,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,OAAO,CAAC,OAAgB,EAAE,OAAuB;IACxD,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,IAAI,CAAA;IAC7B,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAA;IAE9F,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QAC7F,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,kBAAkB,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAA;IACtE,CAAC;IAED,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,KAAK,iBAAiB,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC,CAAA;IAE7F,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAA;IACvC,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAE/C,OAAO,OAAO,KAAK,SAAS;QAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE;QAChC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,eAAe,EAAE,oBAAoB,OAAO,EAAE,CAAC,EAAE,CAAA;AAC/F,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,SAAqC,EAAE,GAAgB;IACxE,IAAI,GAAG,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAA;AACnE,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CACtB,OAAgB,EAChB,SAAqC,EACrC,OAAgB,EAChB,GAAgB;IAEhB,4EAA4E;IAC5E,iDAAiD;IACjD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAChC,CAAC;IAED,MAAM,OAAO,GAAY,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;IAExC,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACtC,CAAC;IAED,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE;YAClF,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,oBAAoB;SACtC,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,8CAA8C,CAAC,CAAA;AACnF,CAAC;AAaD,mEAAmE;AACnE,SAAS,YAAY,CAAC,IAAmB;IACvC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,WAAW,EAAE,CAAA;AAC3F,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,YAAmC;IACnE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAA;IAC5B,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAA;IAC1B,gFAAgF;IAChF,oDAAoD;IACpD,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACrD,MAAM,oBAAoB,GAAyB;QACjD,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,SAAS;QACT,UAAU,EAAE,YAAY,CAAC,UAAU;QACnC,YAAY,EAAE,YAAY,CAAC,YAAY;QACvC,MAAM,EAAE,YAAY,CAAC,MAAM;KAC5B,CAAA;IAED,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC1C,4EAA4E;QAC5E,4EAA4E;QAC5E,gEAAgE;QAChE,MAAM,gBAAgB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QAE7C,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACpC,WAAW,CAAC,OAAO,CAAC,CAAA;QAEpB,2EAA2E;QAC3E,4EAA4E;QAC5E,sEAAsE;QACtE,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAClF,IAAI,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAC/D,mEAAmE;gBACnE,yCAAyC;gBACzC,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAA;YAC9C,CAAC;YAED,MAAM,KAAK,CAAA;QACb,CAAC,CAAC,CAAA;QAEF,MAAM,GAAG,GAAY,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YACvD,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAA;QAC9D,CAAC,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAClC,MAAM,QAAQ,GAAuB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAE1D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,EAAE,wCAAwC,CAAC,EAAE,GAAG,CAAC,CAAA;QACpG,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QACzC,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC,CAAA;QAE7D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,4BAA4B,CAAC,EAAE,GAAG,CAAC,CAAA;QACpF,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAExC,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;QAC7C,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAA;QAExB,IAAI,GAAG,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC;YAChC,OAAO,OAAO,CAAC,IAAI,CACjB,OAAO,CACL,KAAK,CAAC,EAAE,IAAI,IAAI,EAChB,eAAe,EACf,OAAO,uBAAuB,sDAAsD,8BAA8B,EAAE,CACrH,EACD,GAAG,CACJ,CAAA;QACH,CAAC;QAED,MAAM,SAAS,GAAsB,EAAE,CAAA;QAEvC,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,4BAA4B,CAAC,CAAC,CAAA;gBACxE,SAAQ;YACV,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,oBAAoB,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;YAE1E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YAC1B,CAAC;QACH,CAAC;QAED,OAAO,eAAe,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE;QACtB,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE;QACzB,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAA;AAC/B,CAAC"}

package/dist/modules/notes/index.d.ts

@@ -0,0 +1,9 @@
+import type { KelpieModule } from '../../runtime/module.ts';
+/**
+ * Notes: what a person wrote down about a record.
+ *
+ * Requires `activities`, because writing a note writes the timeline entry
+ * announcing it, in the same transaction.
+ */
+export declare function createNotesModule(migrationsDirectory: string): KelpieModule;
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/notes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/modules/notes/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAO3D;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,mBAAmB,EAAE,MAAM,GAAG,YAAY,CA6B3E"}