@micropage-sh/mcp 0.1.0

package/dist/client/deploy-events.js

@@ -0,0 +1,170 @@
+import { IN_PROGRESS_STATUSES } from "./builds.js";
+import { MicropageError } from "./errors.js";
+import { eq, gt } from "./http.js";
+/** Same set as the CLI's stream (cli/src/supabase.js). */
+export const TERMINAL_DEPLOY_EVENTS = new Set([
+    "build.failed",
+    "deployment.completed",
+    "archive.completed",
+    "archive.failed",
+]);
+/**
+ * The events that end a publish. archive.* events belong to the zip export,
+ * which runs on the same build, so they must not end a publish wait.
+ */
+export const PUBLISH_TERMINAL_EVENTS = new Set(["build.failed", "deployment.completed"]);
+function truncate(str, max = 200) {
+    const oneLine = String(str).replace(/\s+/g, " ").trim();
+    return oneLine.length > max ? `${oneLine.slice(0, max)}…` : oneLine;
+}
+/** Port of the CLI's formatDeployEventForConsole, so both read the same. */
+export function formatDeployEvent(ev) {
+    const eventType = ev.event_type ?? "";
+    const payload = ev.payload && typeof ev.payload === "object" && !Array.isArray(ev.payload)
+        ? ev.payload
+        : null;
+    if (eventType === "deployment.domain_wiring" && payload) {
+        const host = typeof payload.hostname === "string" ? payload.hostname : "";
+        const https = host ? `https://${host}` : "";
+        switch (payload.step) {
+            case "started":
+                return `${eventType}: preparing ${host || "platform hostname"}`;
+            case "dns_ok":
+                return `${eventType}: DNS CNAME ready (${host})`;
+            case "dns_resolve_ok":
+                return payload.skipped ? `${eventType}: skipped public DNS wait` : `${eventType}: hostname resolves (${host})`;
+            case "attach_ok":
+                return `${eventType}: registered on Cloudflare Pages (${host})`;
+            case "polling":
+                return `${eventType}: Pages status "${typeof payload.pages_status === "string" && payload.pages_status ? payload.pages_status : "…"}" (${host})`;
+            case "active":
+                return `${eventType}: live — ${https}`;
+            case "failed":
+                return `${eventType}: failed — ${truncate(payload.error ?? "unknown", 160)}`;
+            case "timeout":
+                return `${eventType}: still pending after wait (try ${https || "URL"} shortly)`;
+            default:
+                break;
+        }
+    }
+    const extra = ev.payload ? ` ${truncate(JSON.stringify(ev.payload))}` : "";
+    return `${eventType}${extra}`;
+}
+export function toDeployEvent(row) {
+    return { id: row.id, type: row.event_type ?? "", message: formatDeployEvent(row), created_at: row.created_at ?? null };
+}
+/** Highest build_deploy_events.id for the build, 0 when none: the cursor taken before publishing. */
+export async function getMaxDeployEventId(http, buildId) {
+    const row = await http.selectOne("build_deploy_events", {
+        select: "id",
+        filters: { build_id: eq(buildId) },
+        order: "id.desc",
+    });
+    const n = Number(row?.id);
+    return Number.isFinite(n) ? n : 0;
+}
+/**
+ * Highest build_deploy_events.id across the project, 0 when none. Taken
+ * before a post change, when the build the server will rebuild is not known
+ * yet: event ids are global and polling filters by build, so any later event
+ * of whichever build gets rebuilt lands after it.
+ */
+export async function getMaxProjectDeployEventId(http, projectId) {
+    const row = await http.selectOne("build_deploy_events", {
+        select: "id",
+        filters: { project_id: eq(projectId) },
+        order: "id.desc",
+    });
+    const n = Number(row?.id);
+    return Number.isFinite(n) ? n : 0;
+}
+/** created_at of the build's newest deploy event, null when it has none. */
+export async function getLatestDeployEventAt(http, buildId) {
+    const row = await http.selectOne("build_deploy_events", {
+        select: "created_at",
+        filters: { build_id: eq(buildId) },
+        order: "id.desc",
+    });
+    return row?.created_at ?? null;
+}
+export const EVENTS_PAGE = 100;
+export async function fetchDeployEventsAfter(http, buildId, afterId) {
+    return http.select("build_deploy_events", {
+        select: "id,event_type,payload,created_at",
+        filters: { build_id: eq(buildId), id: gt(afterId) },
+        order: "id.asc",
+        limit: EVENTS_PAGE,
+    });
+}
+export const realClock = {
+    now: () => Date.now(),
+    sleep: (ms) => new Promise((resolve) => setTimeout(resolve, ms)),
+};
+export const POLL_INTERVAL_MS = 2_000;
+/**
+ * Polls builds.status and build_deploy_events (id > cursor) until the deploy
+ * ends (see PollOptions.trustEvents) or waitMs runs out. Always polls at
+ * least once, so waitMs 0 is a single snapshot. Never sleeps past the
+ * deadline and does not start a poll it would have to finish after it.
+ */
+export async function pollDeployStatus(options) {
+    const { http, projectId, buildId } = options;
+    const clock = options.clock ?? realClock;
+    const interval = options.intervalMs ?? POLL_INTERVAL_MS;
+    const cursorMode = options.trustEvents !== false;
+    const start = clock.now();
+    const deadline = start + Math.max(0, options.waitMs);
+    let cursor = options.afterId;
+    const events = [];
+    let terminal = null;
+    let sawInProgress = false;
+    for (;;) {
+        // Status before events: the publisher writes the status first, so the
+        // event that goes with a terminal status is normally already visible.
+        const build = await http.selectOne("builds", {
+            select: "id,number,status,failure_reason,updated_at",
+            filters: { id: eq(buildId), project_id: eq(projectId) },
+        });
+        if (!build) {
+            throw new MicropageError("BUILD_NOT_FOUND", `Build id ${buildId} is not in this project. Call list_builds to see its builds.`);
+        }
+        const rows = await fetchDeployEventsAfter(http, buildId, cursor);
+        const fresh = rows.map(toDeployEvent);
+        for (const ev of fresh)
+            cursor = Math.max(cursor, ev.id);
+        events.push(...fresh);
+        const inProgress = IN_PROGRESS_STATUSES.has(build.status ?? "");
+        if (cursorMode) {
+            terminal ??= fresh.find((e) => PUBLISH_TERMINAL_EVENTS.has(e.type)) ?? null;
+        }
+        const settledByStatus = !inProgress && (!cursorMode || sawInProgress);
+        if (inProgress)
+            sawInProgress = true;
+        const done = terminal !== null || settledByStatus;
+        if (options.onPoll) {
+            try {
+                await options.onPoll({ elapsedMs: clock.now() - start, status: build.status, newEvents: fresh });
+            }
+            catch {
+                // progress is best effort
+            }
+        }
+        const now = clock.now();
+        // A full page means more events are waiting: drain them while time allows.
+        const more = rows.length >= EVENTS_PAGE && now < deadline;
+        if (!more && (done || deadline - now <= interval)) {
+            return {
+                build,
+                events,
+                after_event_id: cursor,
+                done,
+                terminal_event: terminal,
+                timed_out: !done,
+                waiting_for_start: cursorMode && !done && !inProgress,
+            };
+        }
+        if (!more)
+            await clock.sleep(interval);
+    }
+}
+//# sourceMappingURL=deploy-events.js.map

package/dist/client/deploy-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-events.js","sourceRoot":"","sources":["../../src/client/deploy-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,EAAE,EAAE,EAAE,EAAa,MAAM,WAAW,CAAC;AAE9C,0DAA0D;AAC1D,MAAM,CAAC,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IACjE,cAAc;IACd,sBAAsB;IACtB,mBAAmB;IACnB,gBAAgB;CACjB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC,CAAC;AAgB9G,SAAS,QAAQ,CAAC,GAAY,EAAE,GAAG,GAAG,GAAG;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,OAAO,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;AACtE,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,iBAAiB,CAAC,EAAkD;IAClF,MAAM,SAAS,GAAG,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC;IACtC,MAAM,OAAO,GACX,EAAE,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC;QACxE,CAAC,CAAE,EAAE,CAAC,OAAmC;QACzC,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,SAAS,KAAK,0BAA0B,IAAI,OAAO,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,KAAK,SAAS;gBACZ,OAAO,GAAG,SAAS,eAAe,IAAI,IAAI,mBAAmB,EAAE,CAAC;YAClE,KAAK,QAAQ;gBACX,OAAO,GAAG,SAAS,sBAAsB,IAAI,GAAG,CAAC;YACnD,KAAK,gBAAgB;gBACnB,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS,2BAA2B,CAAC,CAAC,CAAC,GAAG,SAAS,wBAAwB,IAAI,GAAG,CAAC;YACjH,KAAK,WAAW;gBACd,OAAO,GAAG,SAAS,qCAAqC,IAAI,GAAG,CAAC;YAClE,KAAK,SAAS;gBACZ,OAAO,GAAG,SAAS,mBAAmB,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC;YACnJ,KAAK,QAAQ;gBACX,OAAO,GAAG,SAAS,YAAY,KAAK,EAAE,CAAC;YACzC,KAAK,QAAQ;gBACX,OAAO,GAAG,SAAS,cAAc,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;YAC/E,KAAK,SAAS;gBACZ,OAAO,GAAG,SAAS,mCAAmC,KAAK,IAAI,KAAK,WAAW,CAAC;YAClF;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,OAAO,GAAG,SAAS,GAAG,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAmB;IAC/C,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;AACzH,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAU,EAAE,OAAe;IACnE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAA0B,qBAAqB,EAAE;QAC/E,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE;QAClC,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAU,EAAE,SAAiB;IAC5E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAA0B,qBAAqB,EAAE;QAC/E,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE;QACtC,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAU,EAAE,OAAe;IACtE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAgC,qBAAqB,EAAE;QACrF,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE;QAClC,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IACH,OAAO,GAAG,EAAE,UAAU,IAAI,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAE/B,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAU,EAAE,OAAe,EAAE,OAAe;IACvF,OAAO,IAAI,CAAC,MAAM,CAAiB,qBAAqB,EAAE;QACxD,MAAM,EAAE,kCAAkC;QAC1C,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE;QACnD,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,WAAW;KACnB,CAAC,CAAC;AACL,CAAC;AAWD,MAAM,CAAC,MAAM,SAAS,GAAU;IAC9B,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;IACrB,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;CACjE,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAkDtC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAoB;IACzD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,IAAI,gBAAgB,CAAC;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAC7B,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,QAAQ,GAAuB,IAAI,CAAC;IACxC,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,SAAS,CAAC;QACR,sEAAsE;QACtE,sEAAsE;QACtE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAiB,QAAQ,EAAE;YAC3D,MAAM,EAAE,4CAA4C;YACpD,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE;SACxD,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,YAAY,OAAO,8DAA8D,CAAC,CAAC;QACjI,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACtC,KAAK,MAAM,EAAE,IAAI,KAAK;YAAE,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QAEtB,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,UAAU,EAAE,CAAC;YACf,QAAQ,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC;QAC9E,CAAC;QACD,MAAM,eAAe,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,IAAI,aAAa,CAAC,CAAC;QACtE,IAAI,UAAU;YAAE,aAAa,GAAG,IAAI,CAAC;QACrC,MAAM,IAAI,GAAG,QAAQ,KAAK,IAAI,IAAI,eAAe,CAAC;QAElD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACnG,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QACxB,2EAA2E;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,WAAW,IAAI,GAAG,GAAG,QAAQ,CAAC;QAC1D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,QAAQ,GAAG,GAAG,IAAI,QAAQ,CAAC,EAAE,CAAC;YAClD,OAAO;gBACL,KAAK;gBACL,MAAM;gBACN,cAAc,EAAE,MAAM;gBACtB,IAAI;gBACJ,cAAc,EAAE,QAAQ;gBACxB,SAAS,EAAE,CAAC,IAAI;gBAChB,iBAAiB,EAAE,UAAU,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU;aACtD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI;YAAE,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;AACH,CAAC"}

package/dist/client/deploy-token.d.ts

@@ -0,0 +1,48 @@
+import type { AuthProvider } from "./auth-provider.js";
+import type { MicropageConfig } from "./config.js";
+import type { FetchLike } from "./http.js";
+/** TTL requested from exchange-deploy-token (the function clamps to 60-3600 s). */
+export declare const DEPLOY_TOKEN_TTL_SECONDS = 1800;
+export interface DeployTokenEnv {
+    token: string;
+    projectUuid: string;
+}
+/**
+ * MICROPAGE_DEPLOY_TOKEN + MICROPAGE_DEPLOY_PROJECT, or null when neither is
+ * set. Exactly one set, or a project that is not a uuid, is a config mistake
+ * the user must fix, so it throws rather than silently falling back to the
+ * CLI session (which would act with broader access than they configured).
+ */
+export declare function readDeployTokenEnv(env?: NodeJS.ProcessEnv): DeployTokenEnv | null;
+export interface DeployTokenAuthOptions extends DeployTokenEnv {
+    config: Pick<MicropageConfig, "supabaseUrl" | "supabaseAnonKey">;
+    fetch?: FetchLike;
+    now?: () => number;
+    ttlSeconds?: number;
+    timeoutMs?: number;
+}
+/**
+ * Exchanges a project deploy token for a short-lived owner JWT
+ * (supabase/functions/exchange-deploy-token), re-exchanging shortly before it
+ * expires. The JWT is a full owner token server-side; the pin to one project
+ * is enforced client-side (project-ref + guards).
+ */
+export declare class DeployTokenAuthProvider implements AuthProvider {
+    readonly mode: "deploy_token";
+    readonly pinnedProjectUuid: string;
+    /** Internal numeric id of the pinned project, known after the first exchange. */
+    projectId: number | undefined;
+    private readonly token;
+    private readonly config;
+    private readonly fetchImpl;
+    private readonly now;
+    private readonly ttlSeconds;
+    private readonly timeoutMs;
+    private cached;
+    private inflight;
+    constructor(options: DeployTokenAuthOptions);
+    getAccessToken(options?: {
+        forceRefresh?: boolean;
+    }): Promise<string>;
+    private exchange;
+}

package/dist/client/deploy-token.js

@@ -0,0 +1,130 @@
+import { VERSION } from "../version.js";
+import { MicropageError } from "./errors.js";
+import { isProjectUuid } from "./project-ref.js";
+/** TTL requested from exchange-deploy-token (the function clamps to 60-3600 s). */
+export const DEPLOY_TOKEN_TTL_SECONDS = 1800;
+/** Re-exchange this long before the minted JWT expires. */
+const REEXCHANGE_SKEW_MS = 60_000;
+/**
+ * MICROPAGE_DEPLOY_TOKEN + MICROPAGE_DEPLOY_PROJECT, or null when neither is
+ * set. Exactly one set, or a project that is not a uuid, is a config mistake
+ * the user must fix, so it throws rather than silently falling back to the
+ * CLI session (which would act with broader access than they configured).
+ */
+export function readDeployTokenEnv(env = process.env) {
+    const token = env.MICROPAGE_DEPLOY_TOKEN?.trim() ?? "";
+    const projectUuid = env.MICROPAGE_DEPLOY_PROJECT?.trim() ?? "";
+    if (!token && !projectUuid)
+        return null;
+    if (!token || !projectUuid) {
+        const missing = token ? "MICROPAGE_DEPLOY_PROJECT" : "MICROPAGE_DEPLOY_TOKEN";
+        const present = token ? "MICROPAGE_DEPLOY_TOKEN" : "MICROPAGE_DEPLOY_PROJECT";
+        throw new MicropageError("DEPLOY_TOKEN_CONFIG", `${present} is set but ${missing} is not. Set both (the deploy token and the project's uuid) ` +
+            `or neither (to use the \`micropage login\` session).`);
+    }
+    if (!isProjectUuid(projectUuid)) {
+        throw new MicropageError("DEPLOY_TOKEN_CONFIG", `MICROPAGE_DEPLOY_PROJECT must be the project's uuid (e.g. 1b4e28ba-2fa1-11d2-883f-0016d3cca427), got "${projectUuid}".`);
+    }
+    return { token, projectUuid: projectUuid.toLowerCase() };
+}
+/**
+ * Exchanges a project deploy token for a short-lived owner JWT
+ * (supabase/functions/exchange-deploy-token), re-exchanging shortly before it
+ * expires. The JWT is a full owner token server-side; the pin to one project
+ * is enforced client-side (project-ref + guards).
+ */
+export class DeployTokenAuthProvider {
+    mode = "deploy_token";
+    pinnedProjectUuid;
+    /** Internal numeric id of the pinned project, known after the first exchange. */
+    projectId;
+    token;
+    config;
+    fetchImpl;
+    now;
+    ttlSeconds;
+    timeoutMs;
+    cached = null;
+    inflight = null;
+    constructor(options) {
+        this.token = options.token;
+        this.pinnedProjectUuid = options.projectUuid.toLowerCase();
+        this.config = options.config;
+        this.fetchImpl = options.fetch ?? ((input, init) => fetch(input, init));
+        this.now = options.now ?? Date.now;
+        this.ttlSeconds = options.ttlSeconds ?? DEPLOY_TOKEN_TTL_SECONDS;
+        this.timeoutMs = options.timeoutMs ?? 20_000;
+    }
+    async getAccessToken(options = {}) {
+        const cached = this.cached;
+        if (!options.forceRefresh && cached && cached.expiresAtMs - REEXCHANGE_SKEW_MS > this.now()) {
+            return cached.accessToken;
+        }
+        this.inflight ??= this.exchange(options.forceRefresh ? cached?.accessToken : undefined).finally(() => {
+            this.inflight = null;
+        });
+        return this.inflight;
+    }
+    async exchange(rejected) {
+        let res;
+        try {
+            res = await this.fetchImpl(`${this.config.supabaseUrl}/functions/v1/exchange-deploy-token`, {
+                method: "POST",
+                headers: {
+                    apikey: this.config.supabaseAnonKey,
+                    Authorization: `Bearer ${this.token}`,
+                    "Content-Type": "application/json",
+                    "User-Agent": `micropage-mcp/${VERSION}`,
+                },
+                body: JSON.stringify({ projectUuid: this.pinnedProjectUuid, expiresInSeconds: this.ttlSeconds }),
+                signal: AbortSignal.timeout(this.timeoutMs),
+            });
+        }
+        catch (err) {
+            throw new MicropageError("NETWORK", `Exchanging the deploy token failed before a response arrived (${err instanceof Error ? err.message : String(err)}). Check the network and retry.`, { cause: err });
+        }
+        const text = await res.text().catch(() => "");
+        let data = null;
+        try {
+            data = text ? JSON.parse(text) : null;
+        }
+        catch {
+            data = null;
+        }
+        const detail = (typeof data?.error === "string" && data.error) ||
+            (typeof data?.message === "string" && data.message) ||
+            `HTTP ${res.status}`;
+        if (res.status === 401 || res.status === 403) {
+            throw new MicropageError("DEPLOY_TOKEN_INVALID", `The deploy token was rejected (${detail}). Ask the user to check MICROPAGE_DEPLOY_TOKEN, or to create a new ` +
+                `token in the micropage editor under Settings > Deploy tokens.`, { status: res.status, data });
+        }
+        if (res.status === 404) {
+            throw new MicropageError("DEPLOY_TOKEN_INVALID", `No project with uuid ${this.pinnedProjectUuid} exists (${detail}). Ask the user to check MICROPAGE_DEPLOY_PROJECT.`, { status: 404, data });
+        }
+        if (!res.ok) {
+            throw new MicropageError("HTTP", `Exchanging the deploy token failed (HTTP ${res.status}): ${detail}`, {
+                status: res.status,
+                data,
+            });
+        }
+        if (typeof data?.access_token !== "string" || !data.access_token) {
+            throw new MicropageError("HTTP", "exchange-deploy-token answered without an access_token.", { data });
+        }
+        if (rejected !== undefined && data.access_token === rejected) {
+            // Minted twice in the same second with identical claims: the server
+            // rejected a token it would mint again, so retrying cannot help.
+            throw new MicropageError("DEPLOY_TOKEN_INVALID", "micropage rejected a freshly exchanged deploy-token session. Ask the user to check the deploy token, then retry.");
+        }
+        const expiresAtMs = typeof data.expires_at === "number"
+            ? data.expires_at * 1000
+            : this.now() + (typeof data.expires_in === "number" ? data.expires_in : this.ttlSeconds) * 1000;
+        if (typeof data.project_id === "number" || typeof data.project_id === "string") {
+            const id = Number(data.project_id);
+            if (Number.isFinite(id))
+                this.projectId = id;
+        }
+        this.cached = { accessToken: data.access_token, expiresAtMs };
+        return data.access_token;
+    }
+}
+//# sourceMappingURL=deploy-token.js.map

package/dist/client/deploy-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-token.js","sourceRoot":"","sources":["../../src/client/deploy-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAGxC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,mFAAmF;AACnF,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAC7C,2DAA2D;AAC3D,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAOlC;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrE,MAAM,KAAK,GAAG,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACvD,MAAM,WAAW,GAAG,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/D,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,wBAAwB,CAAC;QAC9E,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,0BAA0B,CAAC;QAC9E,MAAM,IAAI,cAAc,CACtB,qBAAqB,EACrB,GAAG,OAAO,eAAe,OAAO,8DAA8D;YAC5F,sDAAsD,CACzD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,cAAc,CACtB,qBAAqB,EACrB,yGAAyG,WAAW,IAAI,CACzH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;AAC3D,CAAC;AAmBD;;;;;GAKG;AACH,MAAM,OAAO,uBAAuB;IACzB,IAAI,GAAG,cAAuB,CAAC;IAC/B,iBAAiB,CAAS;IACnC,iFAAiF;IACjF,SAAS,CAAqB;IACb,KAAK,CAAS;IACd,MAAM,CAAmC;IACzC,SAAS,CAAY;IACrB,GAAG,CAAe;IAClB,UAAU,CAAS;IACnB,SAAS,CAAS;IAC3B,MAAM,GAAwD,IAAI,CAAC;IACnE,QAAQ,GAA2B,IAAI,CAAC;IAEhD,YAAY,OAA+B;QACzC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QAC3D,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,wBAAwB,CAAC;QACjE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,UAAsC,EAAE;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,MAAM,IAAI,MAAM,CAAC,WAAW,GAAG,kBAAkB,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC5F,OAAO,MAAM,CAAC,WAAW,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACnG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,QAA4B;QACjD,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,qCAAqC,EAAE;gBAC1F,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;oBACnC,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;oBACrC,cAAc,EAAE,kBAAkB;oBAClC,YAAY,EAAE,iBAAiB,OAAO,EAAE;iBACzC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChG,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,cAAc,CACtB,SAAS,EACT,iEAAiE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,iCAAiC,EAClJ,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,IAAI,GAA4B,IAAI,CAAC;QACzC,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GACV,CAAC,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC;YAC/C,CAAC,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC;YACnD,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QAEvB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7C,MAAM,IAAI,cAAc,CACtB,sBAAsB,EACtB,kCAAkC,MAAM,sEAAsE;gBAC5G,+DAA+D,EACjE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAC7B,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,cAAc,CACtB,sBAAsB,EACtB,wBAAwB,IAAI,CAAC,iBAAiB,YAAY,MAAM,oDAAoD,EACpH,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CACtB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,4CAA4C,GAAG,CAAC,MAAM,MAAM,MAAM,EAAE,EAAE;gBACrG,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI;aACL,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,IAAI,EAAE,YAAY,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACjE,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,yDAAyD,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YAC7D,oEAAoE;YACpE,iEAAiE;YACjE,MAAM,IAAI,cAAc,CACtB,sBAAsB,EACtB,kHAAkH,CACnH,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GACf,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACjC,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI;YACxB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QACpG,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC/E,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;CACF"}

package/dist/client/errors.d.ts

@@ -0,0 +1,18 @@
+export type MicropageErrorCode = "NOT_LOGGED_IN" | "SESSION_EXPIRED" | "HTTP" | "TIMEOUT" | "NETWORK" | "CONFIRM_REQUIRED" | "CONFIRM_INVALID" | "DISABLED" | "NOT_ALLOWED_IN_DEPLOY_TOKEN_MODE" | (string & {});
+export interface MicropageErrorOptions {
+    status?: number;
+    data?: unknown;
+    cause?: unknown;
+}
+/**
+ * The one error type the client and guards throw. `message` is written for
+ * the model: it says what went wrong and names the call or argument that
+ * fixes it, because the model sees nothing else.
+ */
+export declare class MicropageError extends Error {
+    readonly code: MicropageErrorCode;
+    readonly status: number | undefined;
+    readonly data: unknown;
+    constructor(code: MicropageErrorCode, message: string, options?: MicropageErrorOptions);
+}
+export declare function isMicropageError(err: unknown): err is MicropageError;

package/dist/client/errors.js

@@ -0,0 +1,21 @@
+/**
+ * The one error type the client and guards throw. `message` is written for
+ * the model: it says what went wrong and names the call or argument that
+ * fixes it, because the model sees nothing else.
+ */
+export class MicropageError extends Error {
+    code;
+    status;
+    data;
+    constructor(code, message, options = {}) {
+        super(message, options.cause === undefined ? undefined : { cause: options.cause });
+        this.name = "MicropageError";
+        this.code = code;
+        this.status = options.status;
+        this.data = options.data;
+    }
+}
+export function isMicropageError(err) {
+    return err instanceof MicropageError;
+}
+//# sourceMappingURL=errors.js.map

package/dist/client/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/client/errors.ts"],"names":[],"mappings":"AAkBA;;;;GAIG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,IAAI,CAAqB;IACzB,MAAM,CAAqB;IAC3B,IAAI,CAAU;IAEvB,YAAY,IAAwB,EAAE,OAAe,EAAE,UAAiC,EAAE;QACxF,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,OAAO,GAAG,YAAY,cAAc,CAAC;AACvC,CAAC"}

package/dist/client/http.d.ts

@@ -0,0 +1,68 @@
+import type { AuthProvider } from "./auth-provider.js";
+import type { MicropageConfig } from "./config.js";
+export type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;
+export interface HttpOptions {
+    config: MicropageConfig;
+    auth: AuthProvider;
+    fetch?: FetchLike;
+    timeoutMs?: number;
+    userAgent?: string;
+}
+export interface RequestOptions {
+    /** JSON-serialised into the request body. */
+    body?: unknown;
+    /** Sent as-is (uploads). Takes precedence over `body`. */
+    rawBody?: NonNullable<RequestInit["body"]>;
+    headers?: Record<string, string>;
+    /**
+     * When false the anon key is sent as the bearer instead of a user token —
+     * for endpoints that run before the user is known (deploy-token exchange).
+     */
+    auth?: boolean;
+}
+/** PostgREST filter expressions keyed by column, e.g. `{ id: eq(42) }`. */
+export type Filters = Record<string, string>;
+export declare const eq: (v: string | number | boolean) => string;
+export declare const neq: (v: string | number | boolean) => string;
+export declare const is: (v: "null" | "true" | "false") => string;
+export declare const inList: (vs: ReadonlyArray<string | number>) => string;
+export declare const gt: (v: string | number) => string;
+export interface SelectOptions {
+    select?: string;
+    filters?: Filters;
+    order?: string;
+    limit?: number;
+}
+export declare const DEFAULT_TIMEOUT_MS = 20000;
+/**
+ * fetch wrapper for Supabase (PostgREST + edge functions) and the build
+ * compiler. Mirrors the CLI's request() (cli/src/supabase.js): apikey header
+ * plus a user bearer, and one forced refresh + retry on 401 to cover tokens
+ * that expired server-side before the local expiry check caught them.
+ */
+export declare class Http {
+    readonly config: MicropageConfig;
+    readonly auth: AuthProvider;
+    private readonly fetchImpl;
+    private readonly timeoutMs;
+    private readonly userAgent;
+    constructor(options: HttpOptions);
+    request<T = unknown>(method: string, url: string, options?: RequestOptions): Promise<T>;
+    /** The response after auth and the one 401 retry; the caller reads (or cancels) the body. */
+    private exchange;
+    /**
+     * Exact row count from PostgREST's Content-Range (a HEAD with
+     * Prefer: count=exact). Selecting rows to count them would stop at the
+     * server's max_rows cap and undercount silently.
+     */
+    count(table: string, filters?: Filters): Promise<number>;
+    select<T = unknown>(table: string, options?: SelectOptions): Promise<T[]>;
+    selectOne<T = unknown>(table: string, options?: SelectOptions): Promise<T | null>;
+    insert<T = unknown>(table: string, rows: object | object[]): Promise<T[]>;
+    patch<T = unknown>(table: string, filters: Filters, values: object): Promise<T[]>;
+    invoke<T = unknown>(name: string, body?: unknown): Promise<T>;
+    invokeGet<T = unknown>(name: string, params?: Record<string, string>): Promise<T>;
+    restUrl(table: string, params?: URLSearchParams): string;
+    functionUrl(name: string): string;
+    private send;
+}