@miragon/mcp-toolkit-core 0.10.1

package/dist/index.d.ts

@@ -0,0 +1,31 @@
+export type { StepOutput, StepResult, PipelineContext, PipelineStepDefinition, OptionalKeyDeclaration, WidgetProps, WidgetSize, WidgetDefinition, AppDefinition, AppPlugin, PipelineConfig, PipelineStepRef, AppConfig, AppConfigEntry, ValidationResult, ViewStructuredContent, StepDataEntry, RefreshParams, } from "./types/index.js";
+export { APP_ONLY_META, uiMeta } from "./types/index.js";
+export type { UiMetaOptions } from "./types/index.js";
+export { createTranslator } from "./i18n/index.js";
+export type { Message, MessageCatalog, Catalogs, Translate, CreateTranslatorOptions, } from "./i18n/index.js";
+export { executePipeline } from "./engine/pipeline-executor.js";
+export type { PipelineExecutionContext, ExecutePipelineOptions, } from "./engine/pipeline-executor.js";
+export { validatePipeline } from "./engine/context-builder.js";
+export { StepRegistry } from "./registry/step-registry.js";
+export type { KeyContract } from "./registry/step-registry.js";
+export { WidgetRegistry } from "./registry/widget-registry.js";
+export { loadApps } from "./registry/app-loader.js";
+export { renderView } from "./framework/render-view.js";
+export type { RenderViewInput, RenderViewOptions } from "./framework/render-view.js";
+export { buildSingleWidgetView, buildComposedView, deriveItemCount, defaultSummary, collectLayoutWidgets, } from "./framework/view-builders.js";
+export type { SingleWidgetViewInput, ComposedViewInput, ComposedViewEntry, ViewToolResult, } from "./framework/view-builders.js";
+export { getBuilderCatalogue } from "./framework/catalogue.js";
+export type { CatalogueInput, CatalogueOptions, CataloguePayload, ReachableWidget, UnreachableWidget, AvailableStep, KeyCatalogEntry, } from "./framework/catalogue.js";
+export type { DashboardStore, DashboardRecord, DashboardSaveInput, DashboardSummary, DashboardListFilter, FileSystemDashboardStoreOptions, } from "./framework/dashboard-store.js";
+export { getFrameworkManifest } from "./framework/manifest.js";
+export type { FrameworkManifest } from "./framework/manifest.js";
+export { normalizeLayout } from "./framework/layout-types.js";
+export type { LayoutConfig, RowDef } from "./framework/layout-types.js";
+export { layoutInputSchema, layoutSchema, rowSchema } from "./framework/layout-schemas.js";
+export { resolveActiveModules, parseActiveModules } from "./framework/active-modules.js";
+export type { ActiveModuleSelection } from "./framework/active-modules.js";
+export { createOrgGateMiddleware } from "./middleware/org-gate.js";
+export type { OrgGateMiddleware } from "./middleware/org-gate.js";
+export { createRoleFilterMiddleware } from "./middleware/role-filter.js";
+export type { RoleFilterMiddleware, RoleFilterMiddlewares, RoleFilterOptions, RoleFilterContext, } from "./middleware/role-filter.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,UAAU,EACV,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,SAAS,EACT,cAAc,EACd,eAAe,EACf,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,aAAa,EACb,aAAa,GACd,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACxD,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAOrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClD,YAAY,EACV,OAAO,EACP,cAAc,EACd,QAAQ,EACR,SAAS,EACT,uBAAuB,GACxB,MAAM,iBAAiB,CAAA;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAC/D,YAAY,EACV,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAC1D,YAAY,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAA;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAEnD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAA;AACvD,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AACpF,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,oBAAoB,GACrB,MAAM,8BAA8B,CAAA;AACrC,YAAY,EACV,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,GACf,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,eAAe,GAChB,MAAM,0BAA0B,CAAA;AAOjC,YAAY,EACV,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,+BAA+B,GAChC,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAC9D,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC7D,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AACvE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAA;AAE1F,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AACxF,YAAY,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAA;AAE1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAA;AAClE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AACjE,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AACxE,YAAY,EACV,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,6BAA6B,CAAA"}

package/dist/index.js

@@ -0,0 +1,27 @@
+export { APP_ONLY_META, uiMeta } from "./types/index.js";
+// Localization engine — a dependency-free translator shared by the server (tool
+// summaries) and the UI (widget strings). Browser-safe, so it belongs in the
+// root barrel; ships no catalogs (the consuming app provides its own). The UI
+// `LocaleProvider`/`useLocale` (in `@miragon/mcp-toolkit-ui`) consume a
+// `Translate` from here.
+export { createTranslator } from "./i18n/index.js";
+export { executePipeline } from "./engine/pipeline-executor.js";
+export { validatePipeline } from "./engine/context-builder.js";
+export { StepRegistry } from "./registry/step-registry.js";
+export { WidgetRegistry } from "./registry/widget-registry.js";
+export { loadApps } from "./registry/app-loader.js";
+export { renderView } from "./framework/render-view.js";
+export { buildSingleWidgetView, buildComposedView, deriveItemCount, defaultSummary, collectLayoutWidgets, } from "./framework/view-builders.js";
+export { getBuilderCatalogue } from "./framework/catalogue.js";
+export { getFrameworkManifest } from "./framework/manifest.js";
+export { normalizeLayout } from "./framework/layout-types.js";
+export { layoutInputSchema, layoutSchema, rowSchema } from "./framework/layout-schemas.js";
+export { resolveActiveModules, parseActiveModules } from "./framework/active-modules.js";
+export { createOrgGateMiddleware } from "./middleware/org-gate.js";
+export { createRoleFilterMiddleware } from "./middleware/role-filter.js";
+// NOTE: Tool registrars (`createToolRegistrar`, `createWidgetToolRegistrar`)
+// live in the `./tools` subpath export because they import from
+// `mcp-use/server` at runtime. Keeping them out of the main barrel prevents
+// consumers that only need the framework types and runtime (e.g. a React UI
+// bundle) from pulling `mcp-use/server` into their browser graph.
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAGxD,gFAAgF;AAChF,6EAA6E;AAC7E,8EAA8E;AAC9E,wEAAwE;AACxE,yBAAyB;AACzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AASlD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAK/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAE1D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAA;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAEnD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAA;AAEvD,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,oBAAoB,GACrB,MAAM,8BAA8B,CAAA;AAOrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAwB9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAE9D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAE7D,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAA;AAE1F,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAGxF,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAA;AAElE,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAQxE,6EAA6E;AAC7E,gEAAgE;AAChE,4EAA4E;AAC5E,4EAA4E;AAC5E,kEAAkE"}

package/dist/middleware/org-gate.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Organisation-scope gate for mcp-use middleware.
+ *
+ * Built for WorkOS-style tokens that carry an `organization_id` claim on the
+ * user object. If `orgId` is given, every inbound MCP RPC must come from a
+ * user whose token matches — other orgs (or tokens without any org context)
+ * get rejected with a thrown error.
+ *
+ * Register on an mcp-use server with `server.use("mcp:*", createOrgGateMiddleware(ORG_ID))`.
+ * Pass `undefined` to disable (returns a pass-through middleware) — handy so
+ * the caller can unconditionally wire it up and let env config decide.
+ */
+interface OrgGateContext {
+    auth?: {
+        user?: Record<string, unknown>;
+    };
+}
+type Next = () => Promise<unknown>;
+export type OrgGateMiddleware = (ctx: OrgGateContext, next: Next) => Promise<unknown>;
+export declare function createOrgGateMiddleware(orgId: string | undefined): OrgGateMiddleware;
+export {};
+//# sourceMappingURL=org-gate.d.ts.map

package/dist/middleware/org-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-gate.d.ts","sourceRoot":"","sources":["../../src/middleware/org-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,UAAU,cAAc;IACtB,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAA;CAC1C;AACD,KAAK,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;AAClC,MAAM,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAErF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,iBAAiB,CAgBpF"}

package/dist/middleware/org-gate.js

@@ -0,0 +1,28 @@
+/**
+ * Organisation-scope gate for mcp-use middleware.
+ *
+ * Built for WorkOS-style tokens that carry an `organization_id` claim on the
+ * user object. If `orgId` is given, every inbound MCP RPC must come from a
+ * user whose token matches — other orgs (or tokens without any org context)
+ * get rejected with a thrown error.
+ *
+ * Register on an mcp-use server with `server.use("mcp:*", createOrgGateMiddleware(ORG_ID))`.
+ * Pass `undefined` to disable (returns a pass-through middleware) — handy so
+ * the caller can unconditionally wire it up and let env config decide.
+ */
+export function createOrgGateMiddleware(orgId) {
+    if (!orgId)
+        return (_ctx, next) => next();
+    return async (ctx, next) => {
+        const user = ctx.auth?.user;
+        const tokenOrgId = user?.organization_id;
+        if (!tokenOrgId) {
+            throw new Error("Access denied: no organization context in the token. Authenticate with the correct organization.");
+        }
+        if (tokenOrgId !== orgId) {
+            throw new Error("Access denied: user is not a member of this organization.");
+        }
+        return next();
+    };
+}
+//# sourceMappingURL=org-gate.js.map

package/dist/middleware/org-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-gate.js","sourceRoot":"","sources":["../../src/middleware/org-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAQH,MAAM,UAAU,uBAAuB,CAAC,KAAyB;IAC/D,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAA;IAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,CAAA;QAC3B,MAAM,UAAU,GAAG,IAAI,EAAE,eAAe,CAAA;QACxC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAA;QACH,CAAC;QACD,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;QAC9E,CAAC;QACD,OAAO,IAAI,EAAE,CAAA;IACf,CAAC,CAAA;AACH,CAAC"}

package/dist/middleware/role-filter.d.ts

@@ -0,0 +1,79 @@
+/**
+ * Role-scoped module access for mcp-use middleware.
+ *
+ * Two middlewares are returned from a single role→modules mapping so they
+ * stay in sync:
+ *
+ * - `toolsList` — filters `tools/list` responses so users only see tools
+ *   belonging to modules their role(s) can access.
+ * - `toolsCall` — defence-in-depth: blocks a `tools/call` for a tool whose
+ *   module isn't allowed for the caller's role(s). Reads the tool name(s) via
+ *   the injected `resolveToolNames`/`resolveToolName` (mcp-use 1.28 does not
+ *   put them in `ctx.params`); a JSON-RPC batch can carry several `tools/call`
+ *   requests, and the guard denies when *any* of them is disallowed. When no
+ *   name can be resolved it fails *open* by default (allow) — pass
+ *   `failClosed: true` to deny instead.
+ *
+ * Tool-to-module mapping uses the prefix convention `<module>_<tool>`.
+ * Tools without an underscore are always allowed (they're framework or
+ * app-level tools that don't belong to a specific module).
+ *
+ * Role semantics: a role listed as a key in the mapping *restricts* users
+ * with that role to the listed modules. A user with multiple restricted
+ * roles sees the *union*. A user with no role that appears as a key gets
+ * *unrestricted* access — this is deliberately opt-in so that adding a new
+ * role doesn't silently revoke anyone's tools.
+ */
+export interface RoleFilterContext {
+    auth?: {
+        user?: {
+            roles?: unknown;
+        };
+    };
+    method?: string;
+    params?: {
+        name?: unknown;
+    };
+}
+type Next = () => Promise<unknown>;
+export type RoleFilterMiddleware = (ctx: RoleFilterContext, next: Next) => Promise<unknown>;
+export interface RoleFilterMiddlewares {
+    /** Register with `server.use("mcp:tools/list", ...)`. */
+    toolsList: RoleFilterMiddleware;
+    /** Register with `server.use("mcp:tools/call", ...)`. */
+    toolsCall: RoleFilterMiddleware;
+}
+export interface RoleFilterOptions {
+    /**
+     * Resolves the in-flight `tools/call` tool name. Required for the
+     * `toolsCall` guard to function: mcp-use 1.28 populates `ctx.params` with the
+     * tool *arguments*, not `{ name, arguments }`, so `ctx.params?.name` is never
+     * the tool name at runtime (and a tool argument literally called `name` —
+     * e.g. `save-dashboard`'s — would be misread as one). Wire this to
+     * `installToolCallNameCapture(server)` from the `./tools` subpath, which
+     * recovers the name from the JSON-RPC envelope. Falls back to
+     * `ctx.params?.name` when omitted (legacy behaviour).
+     */
+    resolveToolName?: () => string | undefined;
+    /**
+     * Resolves *every* `tools/call` name of the in-flight request. A JSON-RPC
+     * batch envelope can carry several `tools/call` requests — a guard that only
+     * checks one of them can be bypassed by the others, so when this resolver is
+     * provided the guard checks each name and denies if *any* is disallowed.
+     * Wire it to the `.all` of `installToolCallNameCapture(server)`'s return.
+     * Takes precedence over `resolveToolName` when it yields at least one name.
+     */
+    resolveToolNames?: () => string[] | undefined;
+    /**
+     * When `true`, a `tools/call` whose tool name can't be resolved is *denied*
+     * instead of allowed. Defaults to `false` (fail-open) to preserve the prior
+     * behaviour — opt in for stricter deployments where an unresolved name should
+     * never slip past the module guard. Only meaningful alongside
+     * `resolveToolName`; without a resolver the name is unavailable by design and
+     * enabling this would block every call.
+     */
+    failClosed?: boolean;
+}
+export declare function createRoleFilterMiddleware(roleToModules: Record<string, string[]>, opts?: RoleFilterOptions): RoleFilterMiddlewares;
+export {};
+//# sourceMappingURL=role-filter.d.ts.map

package/dist/middleware/role-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-filter.d.ts","sourceRoot":"","sources":["../../src/middleware/role-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,OAAO,CAAA;SAAE,CAAA;KAAE,CAAA;IACrC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAC5B;AACD,KAAK,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;AAClC,MAAM,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAE3F,MAAM,WAAW,qBAAqB;IACpC,yDAAyD;IACzD,SAAS,EAAE,oBAAoB,CAAA;IAC/B,yDAAyD;IACzD,SAAS,EAAE,oBAAoB,CAAA;CAChC;AAED,MAAM,WAAW,iBAAiB;IAChC;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;IAC1C;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,MAAM,MAAM,EAAE,GAAG,SAAS,CAAA;IAC7C;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,wBAAgB,0BAA0B,CACxC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EACvC,IAAI,GAAE,iBAAsB,GAC3B,qBAAqB,CAqEvB"}

package/dist/middleware/role-filter.js

@@ -0,0 +1,95 @@
+/**
+ * Role-scoped module access for mcp-use middleware.
+ *
+ * Two middlewares are returned from a single role→modules mapping so they
+ * stay in sync:
+ *
+ * - `toolsList` — filters `tools/list` responses so users only see tools
+ *   belonging to modules their role(s) can access.
+ * - `toolsCall` — defence-in-depth: blocks a `tools/call` for a tool whose
+ *   module isn't allowed for the caller's role(s). Reads the tool name(s) via
+ *   the injected `resolveToolNames`/`resolveToolName` (mcp-use 1.28 does not
+ *   put them in `ctx.params`); a JSON-RPC batch can carry several `tools/call`
+ *   requests, and the guard denies when *any* of them is disallowed. When no
+ *   name can be resolved it fails *open* by default (allow) — pass
+ *   `failClosed: true` to deny instead.
+ *
+ * Tool-to-module mapping uses the prefix convention `<module>_<tool>`.
+ * Tools without an underscore are always allowed (they're framework or
+ * app-level tools that don't belong to a specific module).
+ *
+ * Role semantics: a role listed as a key in the mapping *restricts* users
+ * with that role to the listed modules. A user with multiple restricted
+ * roles sees the *union*. A user with no role that appears as a key gets
+ * *unrestricted* access — this is deliberately opt-in so that adding a new
+ * role doesn't silently revoke anyone's tools.
+ */
+export function createRoleFilterMiddleware(roleToModules, opts = {}) {
+    const resolveToolName = opts.resolveToolName;
+    const resolveToolNames = opts.resolveToolNames;
+    const failClosed = opts.failClosed ?? false;
+    const hasRules = Object.keys(roleToModules).length > 0;
+    // Returns `null` = unrestricted (full access), array = restricted.
+    const allowedModulesFor = (user) => {
+        if (!hasRules)
+            return null;
+        const roles = Array.isArray(user?.roles) ? user.roles : [];
+        const restrictedRoles = roles.filter((r) => r in roleToModules);
+        if (restrictedRoles.length === 0)
+            return null;
+        return [...new Set(restrictedRoles.flatMap((r) => roleToModules[r] ?? []))];
+    };
+    const toolsList = async (ctx, next) => {
+        const tools = (await next());
+        if (!hasRules || !Array.isArray(tools))
+            return tools;
+        const allowed = allowedModulesFor(ctx.auth?.user);
+        if (allowed === null)
+            return tools;
+        return tools.filter((t) => {
+            if (!t.name.includes("_"))
+                return true;
+            return allowed.includes(t.name.split("_")[0] ?? "");
+        });
+    };
+    const toolsCall = async (ctx, next) => {
+        if (!hasRules)
+            return next();
+        // A JSON-RPC batch can carry several tools/call requests — check them
+        // all; a single-name check would let the remaining batch entries through.
+        const resolvedNames = resolveToolNames?.();
+        const resolved = resolveToolName?.();
+        const fallbackName = typeof resolved === "string"
+            ? resolved
+            : typeof ctx.params?.name === "string"
+                ? ctx.params.name
+                : undefined;
+        const toolNames = resolvedNames && resolvedNames.length > 0
+            ? resolvedNames
+            : fallbackName !== undefined
+                ? [fallbackName]
+                : [];
+        if (toolNames.length === 0) {
+            if (failClosed) {
+                throw new Error("Access denied: unable to resolve the tool name for this call; rejecting under fail-closed policy.");
+            }
+            return next();
+        }
+        const allowed = allowedModulesFor(ctx.auth?.user);
+        if (allowed === null)
+            return next();
+        for (const toolName of toolNames) {
+            // Tools without an underscore are framework/app-level and always allowed.
+            if (!toolName.includes("_"))
+                continue;
+            const modulePrefix = toolName.split("_")[0] ?? "";
+            if (!allowed.includes(modulePrefix)) {
+                const userRoles = ctx.auth?.user?.roles ?? [];
+                throw new Error(`Access denied: role(s) "${userRoles.join(", ")}" have no access to module "${modulePrefix}".`);
+            }
+        }
+        return next();
+    };
+    return { toolsList, toolsCall };
+}
+//# sourceMappingURL=role-filter.js.map

package/dist/middleware/role-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-filter.js","sourceRoot":"","sources":["../../src/middleware/role-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAiDH,MAAM,UAAU,0BAA0B,CACxC,aAAuC,EACvC,OAA0B,EAAE;IAE5B,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAA;IAC5C,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAA;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAA;IAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;IAEtD,mEAAmE;IACnE,MAAM,iBAAiB,GAAG,CAAC,IAAqC,EAAmB,EAAE;QACnF,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAkB,CAAC,CAAC,CAAC,EAAE,CAAA;QACxE,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,aAAa,CAAC,CAAA;QAC/D,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAC7C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;IAC7E,CAAC,CAAA;IAED,MAAM,SAAS,GAAyB,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1D,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,EAAE,CAAuB,CAAA;QAClD,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;QACpD,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACjD,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;QAClC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACxB,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAA;YACtC,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,MAAM,SAAS,GAAyB,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1D,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,EAAE,CAAA;QAC5B,sEAAsE;QACtE,0EAA0E;QAC1E,MAAM,aAAa,GAAG,gBAAgB,EAAE,EAAE,CAAA;QAC1C,MAAM,QAAQ,GAAG,eAAe,EAAE,EAAE,CAAA;QACpC,MAAM,YAAY,GAChB,OAAO,QAAQ,KAAK,QAAQ;YAC1B,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,OAAO,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,QAAQ;gBACpC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI;gBACjB,CAAC,CAAC,SAAS,CAAA;QACjB,MAAM,SAAS,GACb,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;YACvC,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,YAAY,KAAK,SAAS;gBAC1B,CAAC,CAAC,CAAC,YAAY,CAAC;gBAChB,CAAC,CAAC,EAAE,CAAA;QACV,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,mGAAmG,CACpG,CAAA;YACH,CAAC;YACD,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACjD,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,EAAE,CAAA;QACnC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,0EAA0E;YAC1E,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,SAAQ;YACrC,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YACjD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBACpC,MAAM,SAAS,GAAI,GAAG,CAAC,IAAI,EAAE,IAAyC,EAAE,KAAK,IAAI,EAAE,CAAA;gBACnF,MAAM,IAAI,KAAK,CACb,2BAA2B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,+BAA+B,YAAY,IAAI,CAC/F,CAAA;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,EAAE,CAAA;IACf,CAAC,CAAA;IAED,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;AACjC,CAAC"}

package/dist/registry/app-loader.d.ts

@@ -0,0 +1,35 @@
+import type { AppDefinition } from "../types/app.js";
+import type { StepRegistry } from "./step-registry.js";
+import type { WidgetRegistry } from "./widget-registry.js";
+export interface LoadAppsOptions {
+    /**
+     * When `true`, an app whose step/widget ids collide with an already-loaded
+     * app is skipped (with a `console.warn`) instead of throwing — and any ids it
+     * did register before the collision are rolled back, so the registries never
+     * hold a half-loaded module. Use this for *untrusted* module sources, where
+     * one bad third-party definition must not brick the whole host boot. Defaults
+     * to `false` (throw), which is correct for first-party plugins whose ids the
+     * app author controls — there a collision is a real bug that should fail loud.
+     */
+    isolateFailures?: boolean;
+}
+export interface LoadAppsResult {
+    /** Apps whose steps and widgets were fully registered. */
+    loaded: AppDefinition[];
+    /** Apps skipped due to a collision (only possible with `isolateFailures`). */
+    skipped: Array<{
+        app: AppDefinition;
+        reason: string;
+    }>;
+}
+/**
+ * Registers each app's steps and widgets into the shared registries.
+ *
+ * By default a collision throws (the registry's own error), which is the right
+ * behaviour for first-party plugins. Pass `isolateFailures: true` for
+ * untrusted module sources so a single colliding third-party module is
+ * skipped — with its partial registrations rolled back — rather than aborting
+ * the entire boot.
+ */
+export declare function loadApps(apps: AppDefinition[], stepRegistry: StepRegistry, widgetRegistry: WidgetRegistry, options?: LoadAppsOptions): LoadAppsResult;
+//# sourceMappingURL=app-loader.d.ts.map

package/dist/registry/app-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-loader.d.ts","sourceRoot":"","sources":["../../src/registry/app-loader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAE1D,MAAM,WAAW,eAAe;IAC9B;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,MAAM,EAAE,aAAa,EAAE,CAAA;IACvB,8EAA8E;IAC9E,OAAO,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,aAAa,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACvD;AAED;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CACtB,IAAI,EAAE,aAAa,EAAE,EACrB,YAAY,EAAE,YAAY,EAC1B,cAAc,EAAE,cAAc,EAC9B,OAAO,GAAE,eAAoB,GAC5B,cAAc,CA4ChB"}

package/dist/registry/app-loader.js

@@ -0,0 +1,55 @@
+/**
+ * Registers each app's steps and widgets into the shared registries.
+ *
+ * By default a collision throws (the registry's own error), which is the right
+ * behaviour for first-party plugins. Pass `isolateFailures: true` for
+ * untrusted module sources so a single colliding third-party module is
+ * skipped — with its partial registrations rolled back — rather than aborting
+ * the entire boot.
+ */
+export function loadApps(apps, stepRegistry, widgetRegistry, options = {}) {
+    const { isolateFailures = false } = options;
+    const loaded = [];
+    const skipped = [];
+    for (const app of apps) {
+        if (!isolateFailures) {
+            // First-party path: register directly and let a collision throw, exactly
+            // as before.
+            for (const step of app.steps)
+                stepRegistry.register(step);
+            for (const widget of app.widgets)
+                widgetRegistry.register(widget);
+            loaded.push(app);
+            continue;
+        }
+        // Isolated path: track what this app registers so we can roll back cleanly
+        // if any of its ids collide with an already-loaded app. `register` throws
+        // only on ids that already exist — i.e. never on the ones we just added —
+        // so rollback only removes this app's own registrations.
+        const registeredSteps = [];
+        const registeredWidgets = [];
+        try {
+            for (const step of app.steps) {
+                stepRegistry.register(step);
+                registeredSteps.push(step.id);
+            }
+            for (const widget of app.widgets) {
+                widgetRegistry.register(widget);
+                registeredWidgets.push(widget.id);
+            }
+            loaded.push(app);
+        }
+        catch (err) {
+            for (const id of registeredSteps)
+                stepRegistry.unregister(id);
+            for (const id of registeredWidgets)
+                widgetRegistry.unregister(id);
+            const reason = err instanceof Error ? err.message : String(err);
+            console.warn(`[app-loader] Skipping module "${app.name}": ${reason}. ` +
+                `Its tools and widgets will not be available.`);
+            skipped.push({ app, reason });
+        }
+    }
+    return { loaded, skipped };
+}
+//# sourceMappingURL=app-loader.js.map

package/dist/registry/app-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-loader.js","sourceRoot":"","sources":["../../src/registry/app-loader.ts"],"names":[],"mappings":"AAwBA;;;;;;;;GAQG;AACH,MAAM,UAAU,QAAQ,CACtB,IAAqB,EACrB,YAA0B,EAC1B,cAA8B,EAC9B,UAA2B,EAAE;IAE7B,MAAM,EAAE,eAAe,GAAG,KAAK,EAAE,GAAG,OAAO,CAAA;IAC3C,MAAM,MAAM,GAAoB,EAAE,CAAA;IAClC,MAAM,OAAO,GAAkD,EAAE,CAAA;IAEjE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,yEAAyE;YACzE,aAAa;YACb,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK;gBAAE,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;YACzD,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO;gBAAE,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YACjE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAChB,SAAQ;QACV,CAAC;QAED,2EAA2E;QAC3E,0EAA0E;QAC1E,0EAA0E;QAC1E,yDAAyD;QACzD,MAAM,eAAe,GAAa,EAAE,CAAA;QACpC,MAAM,iBAAiB,GAAa,EAAE,CAAA;QACtC,IAAI,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBAC7B,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;gBAC3B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC/B,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;gBAC/B,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACnC,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,MAAM,EAAE,IAAI,eAAe;gBAAE,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;YAC7D,KAAK,MAAM,EAAE,IAAI,iBAAiB;gBAAE,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;YACjE,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC/D,OAAO,CAAC,IAAI,CACV,iCAAiC,GAAG,CAAC,IAAI,MAAM,MAAM,IAAI;gBACvD,8CAA8C,CACjD,CAAA;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AAC5B,CAAC"}

package/dist/registry/step-registry.d.ts

@@ -0,0 +1,27 @@
+import type { PipelineStepDefinition } from "../types/step.js";
+export interface KeyContract {
+    key: string;
+    producedBy: string[];
+    /** Steps that hard-require this key (gate execution on it). */
+    consumedBy: string[];
+    /**
+     * Steps that read this key from `context.keys` opportunistically — e.g. for
+     * scoping or filtering — but still run without it. Mirrors
+     * `PipelineStepDefinition.optionalKeys`.
+     */
+    optionallyConsumedBy: string[];
+}
+export declare class StepRegistry {
+    private steps;
+    register(step: PipelineStepDefinition): void;
+    get(stepId: string): PipelineStepDefinition | undefined;
+    /**
+     * Remove a previously-registered step. Used to roll back a partially loaded
+     * module when isolating a collision (see `loadApps`); a no-op for
+     * unknown ids.
+     */
+    unregister(stepId: string): void;
+    getAll(): PipelineStepDefinition[];
+    getKeyContracts(): KeyContract[];
+}
+//# sourceMappingURL=step-registry.d.ts.map

package/dist/registry/step-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"step-registry.d.ts","sourceRoot":"","sources":["../../src/registry/step-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AAE9D,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,+DAA+D;IAC/D,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB;;;;OAIG;IACH,oBAAoB,EAAE,MAAM,EAAE,CAAA;CAC/B;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAA4C;IAEzD,QAAQ,CAAC,IAAI,EAAE,sBAAsB,GAAG,IAAI;IAO5C,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS;IAIvD;;;;OAIG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAIhC,MAAM,IAAI,sBAAsB,EAAE;IAIlC,eAAe,IAAI,WAAW,EAAE;CA4BjC"}

package/dist/registry/step-registry.js

@@ -0,0 +1,53 @@
+export class StepRegistry {
+    steps = new Map();
+    register(step) {
+        if (this.steps.has(step.id)) {
+            throw new Error(`Step ID collision: "${step.id}" is already registered`);
+        }
+        this.steps.set(step.id, step);
+    }
+    get(stepId) {
+        return this.steps.get(stepId);
+    }
+    /**
+     * Remove a previously-registered step. Used to roll back a partially loaded
+     * module when isolating a collision (see `loadApps`); a no-op for
+     * unknown ids.
+     */
+    unregister(stepId) {
+        this.steps.delete(stepId);
+    }
+    getAll() {
+        return [...this.steps.values()];
+    }
+    getKeyContracts() {
+        const producers = new Map();
+        const consumers = new Map();
+        const optionalConsumers = new Map();
+        for (const step of this.steps.values()) {
+            for (const key of step.produces) {
+                if (!producers.has(key))
+                    producers.set(key, []);
+                producers.get(key).push(step.id);
+            }
+            for (const key of step.requires) {
+                if (!consumers.has(key))
+                    consumers.set(key, []);
+                consumers.get(key).push(step.id);
+            }
+            for (const decl of step.optionalKeys ?? []) {
+                if (!optionalConsumers.has(decl.key))
+                    optionalConsumers.set(decl.key, []);
+                optionalConsumers.get(decl.key).push(step.id);
+            }
+        }
+        const allKeys = new Set([...producers.keys(), ...consumers.keys(), ...optionalConsumers.keys()]);
+        return [...allKeys].map((key) => ({
+            key,
+            producedBy: producers.get(key) ?? [],
+            consumedBy: consumers.get(key) ?? [],
+            optionallyConsumedBy: optionalConsumers.get(key) ?? [],
+        }));
+    }
+}
+//# sourceMappingURL=step-registry.js.map

package/dist/registry/step-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"step-registry.js","sourceRoot":"","sources":["../../src/registry/step-registry.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,YAAY;IACf,KAAK,GAAG,IAAI,GAAG,EAAkC,CAAA;IAEzD,QAAQ,CAAC,IAA4B;QACnC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,EAAE,yBAAyB,CAAC,CAAA;QAC1E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;IAC/B,CAAC;IAED,GAAG,CAAC,MAAc;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC/B,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,MAAc;QACvB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC3B,CAAC;IAED,MAAM;QACJ,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;IACjC,CAAC;IAED,eAAe;QACb,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAA;QAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAA;QAC7C,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAoB,CAAA;QAErD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAChC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;gBAC/C,SAAS,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACnC,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAChC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;gBAC/C,SAAS,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACnC,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;gBAC3C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;oBAAE,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;gBACzE,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAChD,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QAChG,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAChC,GAAG;YACH,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE;YACpC,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE;YACpC,oBAAoB,EAAE,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE;SACvD,CAAC,CAAC,CAAA;IACL,CAAC;CACF"}

package/dist/registry/widget-registry.d.ts

@@ -0,0 +1,15 @@
+import type { WidgetDefinition } from "../types/widget.js";
+export declare class WidgetRegistry {
+    private widgets;
+    register(widget: WidgetDefinition): void;
+    get(widgetId: string): WidgetDefinition | undefined;
+    /**
+     * Remove a previously-registered widget. Used to roll back a partially
+     * loaded module when isolating a collision (see `loadApps`); a
+     * no-op for unknown ids.
+     */
+    unregister(widgetId: string): void;
+    findByRequiredKeys(availableKeys: string[]): WidgetDefinition[];
+    getAll(): WidgetDefinition[];
+}
+//# sourceMappingURL=widget-registry.d.ts.map

package/dist/registry/widget-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"widget-registry.d.ts","sourceRoot":"","sources":["../../src/registry/widget-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAE1D,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAAsC;IAErD,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAOxC,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAInD;;;;OAIG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAIlC,kBAAkB,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,gBAAgB,EAAE;IAK/D,MAAM,IAAI,gBAAgB,EAAE;CAG7B"}

package/dist/registry/widget-registry.js

@@ -0,0 +1,28 @@
+export class WidgetRegistry {
+    widgets = new Map();
+    register(widget) {
+        if (this.widgets.has(widget.id)) {
+            throw new Error(`Widget ID collision: "${widget.id}" is already registered`);
+        }
+        this.widgets.set(widget.id, widget);
+    }
+    get(widgetId) {
+        return this.widgets.get(widgetId);
+    }
+    /**
+     * Remove a previously-registered widget. Used to roll back a partially
+     * loaded module when isolating a collision (see `loadApps`); a
+     * no-op for unknown ids.
+     */
+    unregister(widgetId) {
+        this.widgets.delete(widgetId);
+    }
+    findByRequiredKeys(availableKeys) {
+        const keySet = new Set(availableKeys);
+        return [...this.widgets.values()].filter((w) => w.requires.every((key) => keySet.has(key)));
+    }
+    getAll() {
+        return [...this.widgets.values()];
+    }
+}
+//# sourceMappingURL=widget-registry.js.map

package/dist/registry/widget-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"widget-registry.js","sourceRoot":"","sources":["../../src/registry/widget-registry.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,cAAc;IACjB,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAA;IAErD,QAAQ,CAAC,MAAwB;QAC/B,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,CAAC,EAAE,yBAAyB,CAAC,CAAA;QAC9E,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IACrC,CAAC;IAED,GAAG,CAAC,QAAgB;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACnC,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,QAAgB;QACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC/B,CAAC;IAED,kBAAkB,CAAC,aAAuB;QACxC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAA;QACrC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC7F,CAAC;IAED,MAAM;QACJ,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACnC,CAAC;CACF"}

package/dist/rest/client.d.ts

@@ -0,0 +1,3 @@
+import type { RestClient, RestClientConfig } from "./types.js";
+export declare function createRestClient(config: RestClientConfig): RestClient;
+//# sourceMappingURL=client.d.ts.map

package/dist/rest/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/rest/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAIV,UAAU,EACV,gBAAgB,EAEjB,MAAM,YAAY,CAAA;AAcnB,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,UAAU,CAmErE"}