@miragon/pulse-widget-shell 0.0.0-stage → 0.22.0

package/dist/profile.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.test.js","sourceRoot":"","sources":["../src/profile.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAChB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAE5D,qFAAqF;AACrF,MAAM,MAAM,GAAG,CAAC,IAA6B,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;AAEnF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAClE,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACtE,MAAM,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,SAAS,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,CAAA;QAC3C,MAAM,CAAC,qBAAqB,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACxF,SAAS,CACV,CAAA;QACD,MAAM,CACJ,qBAAqB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAC7F,CAAC,aAAa,EAAE,CAAA;IACnB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,CAAC,qBAAqB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,CACrF,QAAQ,CACT,CAAA;QACD,6DAA6D;QAC7D,MAAM,CAAC,qBAAqB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CACvF,QAAQ,CACT,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,CAAC,qBAAqB,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,CACtF,qBAAqB,CACtB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,aAAa,EAAE,CAAA;QAC3C,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,qBAAqB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;QAC5E,MAAM,CACJ,qBAAqB,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAChF,CAAC,aAAa,EAAE,CAAA;IACnB,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAClE,MAAM,CAAC,qBAAqB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,CACrF,QAAQ,CACT,CAAA;QACD,MAAM,CAAC,qBAAqB,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,CACtF,SAAS,CACV,CAAA;QACD,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,aAAa,EAAE,CAAA;QAC3C,MAAM,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;IACzD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QACtB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACzE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC,CAAA;IAEF,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QAChG,6EAA6E;QAC7E,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;QAEvE,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;QACnE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACvC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC9C,MAAM,CAAE,QAAQ,CAAC,MAAoB,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;QACnE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC9C,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/request-context.d.ts

@@ -0,0 +1,47 @@
+/** The per-request slice the ctx-less consumers actually need. */
+export interface McpRequestInfo {
+    /** The OAuth caller's id, read off the request's auth like `resolveCaller` does. */
+    authUserId?: string;
+    /**
+     * Declares the request's caller as THE single local user of a transport
+     * without auth (stdio, tests) — it resolves to `ANONYMOUS_PROFILE_KEY`.
+     * Never derived from a request: the HTTP middleware does not set it, so
+     * only code that runs work under [[runWithMcpRequestInfo]] can declare it.
+     */
+    anonymousCaller?: boolean;
+    /** Raw `Authorization` header value, scheme included (e.g. `Bearer …`). */
+    authorization?: string;
+}
+/** The current request's info, or `undefined` outside one (boot, tests, no middleware). */
+export declare function getMcpRequestInfo(): McpRequestInfo | undefined;
+/**
+ * An opaque, stable key for the current request's caller AND the credential
+ * it presents: the OAuth caller's id and the raw `Authorization` header,
+ * hashed, so no credential is kept by whoever stores the key. For a cache
+ * whose answers depend on whose permissions a read ran under: with
+ * passthrough auth the engine answers each caller with that caller's own
+ * permissions, so one caller's answer must never serve another. Two requests
+ * share a key only with the same caller and the same credential; outside a
+ * request (or without either) the key is the empty string.
+ */
+export declare function callerCacheKey(): string;
+/**
+ * Run `fn` under a fixed request info — the test seam, and the only way to
+ * declare an `anonymousCaller` (a transport without auth that serves exactly
+ * one local user).
+ */
+export declare function runWithMcpRequestInfo<T>(info: McpRequestInfo, fn: () => T): T;
+/**
+ * The narrow structural server surface needed here (`server.use("mcp:*", …)`),
+ * so callers can pass an `MCPServer` without this module importing mcp-use.
+ */
+export interface McpMiddlewareHost {
+    use(pattern: "mcp:*", fn: (ctx: unknown, next: () => Promise<void>) => Promise<void>): unknown;
+}
+/**
+ * Install the ambient-request middleware on a server (idempotent). Wraps every
+ * MCP method (`mcp:*`) so tool handlers, app-only feeds, and pipeline steps
+ * all observe the same {@link McpRequestInfo} for the duration of the call.
+ */
+export declare function installMcpRequestContext(server: McpMiddlewareHost): void;
+//# sourceMappingURL=request-context.d.ts.map

package/dist/request-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-context.d.ts","sourceRoot":"","sources":["../src/request-context.ts"],"names":[],"mappings":"AA4BA,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,oFAAoF;IACpF,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAID,2FAA2F;AAC3F,wBAAgB,iBAAiB,IAAI,cAAc,GAAG,SAAS,CAE9D;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAMvC;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAE7E;AA2BD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAA;CAC/F;AAID;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAIxE"}

package/dist/request-context.js

@@ -0,0 +1,85 @@
+/**
+ * Repo-owned ambient MCP request info — for the few consumers that run
+ * WITHOUT a tool-handler `ctx` in hand.
+ *
+ * Since toolkit 2.6 every handler gets mcp-use's `ctx` (registrar handlers as
+ * their third argument, raw `server.tool` callbacks as their second), and
+ * caller identity resolves from it ([[resolveProfileKey]] reads `ctx.auth`
+ * first). What remains ctx-less: pipeline steps (`render-view` /
+ * `refresh-view` hand a step no `ctx`, so a step's saved-default-engine
+ * lookup reads the caller here) and the camunda7 REST client's
+ * passthrough-auth interceptor, which runs deep inside a hey-api call chain
+ * (`resolveMcpBearerToken`). This store carries exactly what those need: the
+ * OAuth caller's id and the raw `Authorization` header — nothing a client can
+ * pick for itself becomes an identity here.
+ *
+ * Fail-closed by construction: outside a request — or when no middleware was
+ * installed — there is no store, and no store means NO identity (saves
+ * refuse, reads fall back to defaults), never a shared record.
+ *
+ * Installed once per server via [[installMcpRequestContext]] (idempotent) —
+ * `createComposedServer` does it right after `createFrameworkApp`. Lives on
+ * the `/server` path only: `node:async_hooks` must never reach the widget
+ * bundle.
+ */
+import { AsyncLocalStorage } from "node:async_hooks";
+import { createHash } from "node:crypto";
+import { resolveCallerId } from "@miragon/mcp-toolkit-core";
+const storage = new AsyncLocalStorage();
+/** The current request's info, or `undefined` outside one (boot, tests, no middleware). */
+export function getMcpRequestInfo() {
+    return storage.getStore();
+}
+/**
+ * An opaque, stable key for the current request's caller AND the credential
+ * it presents: the OAuth caller's id and the raw `Authorization` header,
+ * hashed, so no credential is kept by whoever stores the key. For a cache
+ * whose answers depend on whose permissions a read ran under: with
+ * passthrough auth the engine answers each caller with that caller's own
+ * permissions, so one caller's answer must never serve another. Two requests
+ * share a key only with the same caller and the same credential; outside a
+ * request (or without either) the key is the empty string.
+ */
+export function callerCacheKey() {
+    const info = storage.getStore();
+    if (!info?.authUserId && !info?.authorization)
+        return "";
+    return createHash("sha256")
+        .update(JSON.stringify([info.authUserId ?? null, info.authorization ?? null]))
+        .digest("base64url");
+}
+/**
+ * Run `fn` under a fixed request info — the test seam, and the only way to
+ * declare an `anonymousCaller` (a transport without auth that serves exactly
+ * one local user).
+ */
+export function runWithMcpRequestInfo(info, fn) {
+    return storage.run(info, fn);
+}
+function deriveInfo(ctx) {
+    const header = (name) => {
+        try {
+            return ctx.request?.header(name);
+        }
+        catch {
+            return undefined;
+        }
+    };
+    return {
+        authUserId: resolveCallerId(ctx),
+        authorization: header("Authorization") ?? header("authorization"),
+    };
+}
+const installed = new WeakSet();
+/**
+ * Install the ambient-request middleware on a server (idempotent). Wraps every
+ * MCP method (`mcp:*`) so tool handlers, app-only feeds, and pipeline steps
+ * all observe the same {@link McpRequestInfo} for the duration of the call.
+ */
+export function installMcpRequestContext(server) {
+    if (installed.has(server))
+        return;
+    installed.add(server);
+    server.use("mcp:*", (ctx, next) => storage.run(deriveInfo(ctx), next));
+}
+//# sourceMappingURL=request-context.js.map

package/dist/request-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-context.js","sourceRoot":"","sources":["../src/request-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAiB3D,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAAkB,CAAA;AAEvD,2FAA2F;AAC3F,MAAM,UAAU,iBAAiB;IAC/B,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAA;AAC3B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAA;IAC/B,IAAI,CAAC,IAAI,EAAE,UAAU,IAAI,CAAC,IAAI,EAAE,aAAa;QAAE,OAAO,EAAE,CAAA;IACxD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC;SAC7E,MAAM,CAAC,WAAW,CAAC,CAAA;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAI,IAAoB,EAAE,EAAW;IACxE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;AAC9B,CAAC;AAaD,SAAS,UAAU,CAAC,GAAsB;IACxC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAsB,EAAE;QAClD,IAAI,CAAC;YACH,OAAO,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC,CAAA;IACD,OAAO;QACL,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC;QAChC,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,eAAe,CAAC;KAClE,CAAA;AACH,CAAC;AAUD,MAAM,SAAS,GAAG,IAAI,OAAO,EAAqB,CAAA;AAElD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAyB;IAChE,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAM;IACjC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACrB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAwB,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAC7F,CAAC"}

package/dist/request-context.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=request-context.test.d.ts.map

package/dist/request-context.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-context.test.d.ts","sourceRoot":"","sources":["../src/request-context.test.ts"],"names":[],"mappings":""}

package/dist/request-context.test.js

@@ -0,0 +1,107 @@
+import { describe, expect, it } from "vitest";
+import { callerCacheKey, getMcpRequestInfo, installMcpRequestContext, runWithMcpRequestInfo, } from "./request-context.js";
+/** Minimal server double capturing what `installMcpRequestContext` registers. */
+function fakeServer() {
+    const middlewares = [];
+    const server = {
+        use: (_pattern, fn) => {
+            middlewares.push(fn);
+            return server;
+        },
+    };
+    return { server, middlewares };
+}
+/** What the installed middleware hands the handler for `ctx`. */
+async function seenFor(ctx) {
+    const { server, middlewares } = fakeServer();
+    installMcpRequestContext(server);
+    let seen = "sentinel";
+    await middlewares[0](ctx, async () => {
+        seen = getMcpRequestInfo();
+    });
+    return seen;
+}
+describe("runWithMcpRequestInfo / getMcpRequestInfo", () => {
+    it("is undefined outside a request", () => {
+        expect(getMcpRequestInfo()).toBeUndefined();
+    });
+    it("exposes the info inside the run scope only", () => {
+        const inside = runWithMcpRequestInfo({ anonymousCaller: true }, () => getMcpRequestInfo());
+        expect(inside).toEqual({ anonymousCaller: true });
+        expect(getMcpRequestInfo()).toBeUndefined();
+    });
+});
+/**
+ * The key a per-caller cache partitions by (analytics' BPMN names under
+ * passthrough auth): who calls AND with which credential, never the
+ * credential itself.
+ */
+describe("callerCacheKey", () => {
+    const ALICE = { authUserId: "alice", authorization: "Bearer token-alice" };
+    it("is empty outside a request and for a request without a caller or a credential", () => {
+        expect(callerCacheKey()).toBe("");
+        expect(runWithMcpRequestInfo({ anonymousCaller: true }, callerCacheKey)).toBe("");
+    });
+    it("is stable for one caller and credential, and keeps no credential", () => {
+        const key = runWithMcpRequestInfo(ALICE, callerCacheKey);
+        expect(key).toMatch(/^[\w-]{43}$/);
+        expect(key).not.toContain("token-alice");
+        expect(runWithMcpRequestInfo({ ...ALICE }, callerCacheKey)).toBe(key);
+    });
+    it("tells callers and credentials apart, each on its own", () => {
+        const keys = [
+            ALICE,
+            { ...ALICE, authorization: "Bearer token-alice-2" },
+            { ...ALICE, authUserId: "bob" },
+            { authUserId: "alice" },
+            { authorization: "Bearer token-alice" },
+            // The two parts never run into each other.
+            { authUserId: "alice\nBearer", authorization: "token-alice" },
+        ].map((info) => runWithMcpRequestInfo(info, callerCacheKey));
+        expect(new Set(keys).size).toBe(keys.length);
+        expect(keys).not.toContain("");
+    });
+});
+describe("installMcpRequestContext", () => {
+    it("registers exactly one middleware, even when installed twice", () => {
+        const { server, middlewares } = fakeServer();
+        installMcpRequestContext(server);
+        installMcpRequestContext(server);
+        expect(middlewares).toHaveLength(1);
+    });
+    it("derives the OAuth caller and the Authorization header for downstream handlers", async () => {
+        const headers = { Authorization: "Bearer tok-123" };
+        // The middleware auth shape: the SDK AuthInfo, provider user under `extra`.
+        const ctx = {
+            request: { header: (name) => headers[name] },
+            auth: { token: "tok-123", extra: { user: { id: "user-7" }, payload: { sub: "user-7" } } },
+        };
+        expect(await seenFor(ctx)).toEqual({ authUserId: "user-7", authorization: "Bearer tok-123" });
+    });
+    it("never turns a client-chosen Mcp-Session-Id into an identity", async () => {
+        const headers = {
+            "mcp-session-id": "victim",
+            "Mcp-Session-Id": "victim",
+        };
+        const ctx = {
+            request: { header: (name) => headers[name] },
+            session: { sessionId: "victim" },
+        };
+        expect(await seenFor(ctx)).toEqual({ authUserId: undefined, authorization: undefined });
+    });
+    it("never declares an anonymous caller — only runWithMcpRequestInfo can", async () => {
+        expect(await seenFor({})).toEqual({ authUserId: undefined, authorization: undefined });
+    });
+    it("ignores a non-string auth user id and a throwing header accessor", async () => {
+        const ctx = {
+            request: {
+                header: () => {
+                    throw new Error("no request");
+                },
+            },
+            auth: { extra: { user: { id: 42 } } },
+        };
+        expect(await seenFor(ctx)).toEqual({ authUserId: undefined, authorization: undefined });
+    });
+});
+//# sourceMappingURL=request-context.test.js.map

package/dist/request-context.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-context.test.js","sourceRoot":"","sources":["../src/request-context.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,wBAAwB,EACxB,qBAAqB,GAEtB,MAAM,sBAAsB,CAAA;AAI7B,iFAAiF;AACjF,SAAS,UAAU;IACjB,MAAM,WAAW,GAAiB,EAAE,CAAA;IACpC,MAAM,MAAM,GAAsB;QAChC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE;YACpB,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACpB,OAAO,MAAM,CAAA;QACf,CAAC;KACF,CAAA;IACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;AAChC,CAAC;AAED,iEAAiE;AACjE,KAAK,UAAU,OAAO,CAAC,GAAY;IACjC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,EAAE,CAAA;IAC5C,wBAAwB,CAAC,MAAM,CAAC,CAAA;IAChC,IAAI,IAAI,GAAY,UAAU,CAAA;IAC9B,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;QACnC,IAAI,GAAG,iBAAiB,EAAE,CAAA;IAC5B,CAAC,CAAC,CAAA;IACF,OAAO,IAAI,CAAA;AACb,CAAC;AAED,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,aAAa,EAAE,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAA;QAC1F,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAA;QACjD,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,aAAa,EAAE,CAAA;IAC7C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF;;;;GAIG;AACH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,MAAM,KAAK,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,CAAA;IAE1E,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACjC,MAAM,CAAC,qBAAqB,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACnF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;QACxD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;QACxC,MAAM,CAAC,qBAAqB,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,IAAI,GAAG;YACX,KAAK;YACL,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,sBAAsB,EAAE;YACnD,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE;YAC/B,EAAE,UAAU,EAAE,OAAO,EAAE;YACvB,EAAE,aAAa,EAAE,oBAAoB,EAAE;YACvC,2CAA2C;YAC3C,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE;SAC9D,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAA;QAC5D,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,EAAE,CAAA;QAC5C,wBAAwB,CAAC,MAAM,CAAC,CAAA;QAChC,wBAAwB,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,OAAO,GAA2B,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAA;QAC3E,4EAA4E;QAC5E,MAAM,GAAG,GAAG;YACV,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YACpD,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE;SAC1F,CAAA;QACD,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC,CAAA;IAC/F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,OAAO,GAA2B;YACtC,gBAAgB,EAAE,QAAQ;YAC1B,gBAAgB,EAAE,QAAQ;SAC3B,CAAA;QACD,MAAM,GAAG,GAAG;YACV,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YACpD,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE;SACjC,CAAA;QACD,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAA;IACzF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,CAAC,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAA;IACxF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,GAAG,GAAG;YACV,OAAO,EAAE;gBACP,MAAM,EAAE,GAAG,EAAE;oBACX,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAA;gBAC/B,CAAC;aACF;YACD,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;SACtC,CAAA;QACD,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAA;IACzF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/served-fonts.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Geist and Geist Mono as a composed server serves them — the one contract
+ * between the font route (`installFontAssets`, server path) and the views
+ * that load the faces (`HostDocument`, UI path). Dependency-free, so it is
+ * exported from both `/server` and `/widgets` without pulling node or React
+ * code into the other side.
+ *
+ * Self-hosted on purpose (Miragon design system §4: no CDN, offline-capable,
+ * GDPR-safe): the files come from the `@fontsource-variable/geist(-mono)`
+ * packages, latin subset, variable weight 100–900.
+ */
+/**
+ * Where the server serves the files. The path names the fontsource release
+ * the files come from, so a font update changes every URL and the route can
+ * be cached `immutable`; `served-fonts.test.ts` holds it equal to the
+ * installed packages.
+ */
+export declare const SERVED_FONT_PATH = "/fonts/geist-5.3.0";
+/** The latin variable woff2 files under {@link SERVED_FONT_PATH} (the toolkit's `GEIST_FONT_FILES`). */
+export declare const SERVED_FONT_FILES: {
+    readonly sans: "geist-latin-wght-normal.woff2";
+    readonly mono: "geist-mono-latin-wght-normal.woff2";
+};
+/**
+ * The base URL a view loads the faces from: {@link SERVED_FONT_PATH} on the
+ * origin of the view's public base (mcp-use's `getPublicBaseUrl()`, resolved
+ * per `resources/read`: `MCP_URL`'s origin, else the origin the host read the
+ * view from). The same origin is the one the view's CSP admits in
+ * `resourceDomains`. `undefined` outside a served view document (no base) or
+ * for a base that is no http(s) URL — the view then declares no face and the
+ * host's font renders.
+ *
+ * @example
+ * servedFontBaseUrl("https://mcp.example.com/mcp/_mcp-use/public/")
+ * // "https://mcp.example.com/fonts/geist-5.3.0"
+ */
+export declare function servedFontBaseUrl(publicBase: string | undefined): string | undefined;
+//# sourceMappingURL=served-fonts.d.ts.map

package/dist/served-fonts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"served-fonts.d.ts","sourceRoot":"","sources":["../src/served-fonts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,uBAAuB,CAAA;AAEpD,wGAAwG;AACxG,eAAO,MAAM,iBAAiB;;;CAGpB,CAAA;AAEV;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAUpF"}

package/dist/served-fonts.js

@@ -0,0 +1,51 @@
+/**
+ * Geist and Geist Mono as a composed server serves them — the one contract
+ * between the font route (`installFontAssets`, server path) and the views
+ * that load the faces (`HostDocument`, UI path). Dependency-free, so it is
+ * exported from both `/server` and `/widgets` without pulling node or React
+ * code into the other side.
+ *
+ * Self-hosted on purpose (Miragon design system §4: no CDN, offline-capable,
+ * GDPR-safe): the files come from the `@fontsource-variable/geist(-mono)`
+ * packages, latin subset, variable weight 100–900.
+ */
+/**
+ * Where the server serves the files. The path names the fontsource release
+ * the files come from, so a font update changes every URL and the route can
+ * be cached `immutable`; `served-fonts.test.ts` holds it equal to the
+ * installed packages.
+ */
+export const SERVED_FONT_PATH = "/fonts/geist-5.3.0";
+/** The latin variable woff2 files under {@link SERVED_FONT_PATH} (the toolkit's `GEIST_FONT_FILES`). */
+export const SERVED_FONT_FILES = {
+    sans: "geist-latin-wght-normal.woff2",
+    mono: "geist-mono-latin-wght-normal.woff2",
+};
+/**
+ * The base URL a view loads the faces from: {@link SERVED_FONT_PATH} on the
+ * origin of the view's public base (mcp-use's `getPublicBaseUrl()`, resolved
+ * per `resources/read`: `MCP_URL`'s origin, else the origin the host read the
+ * view from). The same origin is the one the view's CSP admits in
+ * `resourceDomains`. `undefined` outside a served view document (no base) or
+ * for a base that is no http(s) URL — the view then declares no face and the
+ * host's font renders.
+ *
+ * @example
+ * servedFontBaseUrl("https://mcp.example.com/mcp/_mcp-use/public/")
+ * // "https://mcp.example.com/fonts/geist-5.3.0"
+ */
+export function servedFontBaseUrl(publicBase) {
+    if (!publicBase)
+        return undefined;
+    let base;
+    try {
+        base = new URL(publicBase);
+    }
+    catch {
+        return undefined;
+    }
+    if (base.protocol !== "http:" && base.protocol !== "https:")
+        return undefined;
+    return `${base.origin}${SERVED_FONT_PATH}`;
+}
+//# sourceMappingURL=served-fonts.js.map

package/dist/served-fonts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"served-fonts.js","sourceRoot":"","sources":["../src/served-fonts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAAoB,CAAA;AAEpD,wGAAwG;AACxG,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,+BAA+B;IACrC,IAAI,EAAE,oCAAoC;CAClC,CAAA;AAEV;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAA8B;IAC9D,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAA;IACjC,IAAI,IAAS,CAAA;IACb,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAA;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC7E,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAA;AAC5C,CAAC"}

package/dist/served-fonts.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=served-fonts.test.d.ts.map

package/dist/served-fonts.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"served-fonts.test.d.ts","sourceRoot":"","sources":["../src/served-fonts.test.ts"],"names":[],"mappings":""}

package/dist/served-fonts.test.js

@@ -0,0 +1,30 @@
+import { createRequire } from "node:module";
+import { describe, expect, it } from "vitest";
+import { GEIST_FONT_FILES } from "@miragon/mcp-toolkit-ui";
+import { SERVED_FONT_FILES, SERVED_FONT_PATH, servedFontBaseUrl } from "./served-fonts.js";
+const require = createRequire(import.meta.url);
+const versionOf = (name) => require(`${name}/package.json`).version;
+describe("the served-font contract", () => {
+    it("names the installed fontsource release in the path, so a font update is a new URL", () => {
+        // The route is cached `immutable`: bumping the font packages without
+        // moving the path would keep every browser on the old files for a year.
+        for (const name of ["@fontsource-variable/geist", "@fontsource-variable/geist-mono"]) {
+            expect(SERVED_FONT_PATH, name).toBe(`/fonts/geist-${versionOf(name)}`);
+        }
+    });
+    it("serves the files the toolkit's fontFaces() names", () => {
+        expect(SERVED_FONT_FILES).toEqual(GEIST_FONT_FILES);
+    });
+});
+describe("servedFontBaseUrl", () => {
+    it("puts the font path on the origin of the view's public base", () => {
+        expect(servedFontBaseUrl("https://mcp.example.com/mcp/_mcp-use/public/")).toBe("https://mcp.example.com/fonts/geist-5.3.0");
+        expect(servedFontBaseUrl("http://127.0.0.1:8400/mcp/_mcp-use/public/")).toBe("http://127.0.0.1:8400/fonts/geist-5.3.0");
+    });
+    it("declares nothing outside a served view document or for a base that is no http(s) URL", () => {
+        for (const base of [undefined, "", "not a url", "data:text/plain,x", "ftp://files.example/"]) {
+            expect(servedFontBaseUrl(base), String(base)).toBeUndefined();
+        }
+    });
+});
+//# sourceMappingURL=served-fonts.test.js.map

package/dist/served-fonts.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"served-fonts.test.js","sourceRoot":"","sources":["../src/served-fonts.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAE1F,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC9C,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAE,OAAO,CAAC,GAAG,IAAI,eAAe,CAAyB,CAAC,OAAO,CAAA;AAEpG,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,qEAAqE;QACrE,wEAAwE;QACxE,KAAK,MAAM,IAAI,IAAI,CAAC,4BAA4B,EAAE,iCAAiC,CAAC,EAAE,CAAC;YACrF,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACxE,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,iBAAiB,CAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI,CAC5E,2CAA2C,CAC5C,CAAA;QACD,MAAM,CAAC,iBAAiB,CAAC,4CAA4C,CAAC,CAAC,CAAC,IAAI,CAC1E,yCAAyC,CAC1C,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,mBAAmB,EAAE,sBAAsB,CAAC,EAAE,CAAC;YAC7F,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;QAC/D,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/server-locale.d.ts

@@ -0,0 +1,58 @@
+import type { ProfileSource } from "./profile.js";
+/** A locale-bound translate for server summaries: `t(key, params?) => string`. */
+export type ServerT = (key: string, params?: Record<string, unknown>) => string;
+/** The shape of the toolkit's `createTranslator(catalogs)` result. */
+export type Translator = (locale: string, key: string, params?: Record<string, unknown>) => string;
+/**
+ * Resolve the active locale for the in-flight request from the user profile
+ * (`resolveProfileKey` → `language`), falling back to English — also for the
+ * `system` preference: the host locale it follows is a widget-side signal
+ * (`hostContext.locale`) the server never sees. Pass the
+ * tool-handler `ctx` so the lookup resolves the caller exactly like the save
+ * path (`resolveProfileKey`: the OAuth caller from `ctx`) — without it, only
+ * the ambient request info can name the caller.
+ *
+ * Fail-soft on every axis — no store, no key, or a store OUTAGE: with
+ * `DATABASE_URL` the store is a network call, and this runs as the first
+ * `await` of many widget tools — a Postgres hiccup must degrade the summary to
+ * English, never fail a tool whose data comes from the engine/Prometheus.
+ */
+export declare function resolveProfileLocale(store: ProfileSource | undefined, ctx?: unknown): Promise<string>;
+/**
+ * Bind a module's translator to the per-request locale resolution: the module
+ * creates its `localizeFor` once —
+ * `export const localizeFor = createLocalizeFor(translator)` — and tool
+ * handlers localize their model-facing summaries with
+ * `const t = await localizeFor(store, ctx); … summary: t("key", { … })`.
+ */
+export declare function createLocalizeFor(translator: Translator): (store?: ProfileSource, ctx?: unknown) => Promise<ServerT>;
+/** What a show tool needs to word its result: the model summary and the view title. */
+export interface ViewLocale {
+    /** Model summaries: the profile language, English for "system" ({@link createLocalizeFor}). */
+    t: ServerT;
+    /**
+     * The view's title (the host toolbar) in the profile language, or
+     * undefined when the profile says "system": the server never sees the
+     * host's locale, so it sets no title rather than an English one over a
+     * German view, and the widget's own heading names the view in the host's
+     * language (#322 U3).
+     */
+    title: (key: string, params?: Record<string, unknown>) => string | undefined;
+}
+/**
+ * Bind a module's translator to the ONE view-title rule every show tool of
+ * every module follows: `export const viewLocaleOf = createViewLocaleOf(translator)`,
+ * for a handler that already holds the caller's profile language (a settings
+ * view reads the whole record anyway).
+ */
+export declare function createViewLocaleOf(translator: Translator): (language: string | undefined) => ViewLocale;
+/**
+ * `createLocalizeFor` plus the view title, from ONE profile read: a show tool
+ * words its result with
+ * `const { t, title } = await localizeViewFor(store, ctx)`, then
+ * `title: title("key"), summary: t("key", { … })`.
+ * Fail-soft like it: no store, no caller or a store outage reads as "system"
+ * (no title, an English summary).
+ */
+export declare function createLocalizeViewFor(translator: Translator): (store?: ProfileSource, ctx?: unknown) => Promise<ViewLocale>;
+//# sourceMappingURL=server-locale.d.ts.map

package/dist/server-locale.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-locale.d.ts","sourceRoot":"","sources":["../src/server-locale.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAIjD,kFAAkF;AAClF,MAAM,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAA;AAE/E,sEAAsE;AACtE,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAA;AAElG;;;;;;;;;;;;;GAaG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,aAAa,GAAG,SAAS,EAChC,GAAG,CAAC,EAAE,OAAO,GACZ,OAAO,CAAC,MAAM,CAAC,CAKjB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,UAAU,GACrB,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAK5D;AAED,uFAAuF;AACvF,MAAM,WAAW,UAAU;IACzB,+FAA+F;IAC/F,CAAC,EAAE,OAAO,CAAA;IACV;;;;;;OAMG;IACH,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,GAAG,SAAS,CAAA;CAC7E;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,UAAU,GACrB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,KAAK,UAAU,CAM9C;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,UAAU,GACrB,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,CAAC,CAM/D"}

package/dist/server-locale.js

@@ -0,0 +1,64 @@
+import { resolveProfileKey } from "./profile.js";
+import { readProfileAdvisory } from "./profile-advisory.js";
+import { explicitLocale } from "./profile-constants.js";
+/**
+ * Resolve the active locale for the in-flight request from the user profile
+ * (`resolveProfileKey` → `language`), falling back to English — also for the
+ * `system` preference: the host locale it follows is a widget-side signal
+ * (`hostContext.locale`) the server never sees. Pass the
+ * tool-handler `ctx` so the lookup resolves the caller exactly like the save
+ * path (`resolveProfileKey`: the OAuth caller from `ctx`) — without it, only
+ * the ambient request info can name the caller.
+ *
+ * Fail-soft on every axis — no store, no key, or a store OUTAGE: with
+ * `DATABASE_URL` the store is a network call, and this runs as the first
+ * `await` of many widget tools — a Postgres hiccup must degrade the summary to
+ * English, never fail a tool whose data comes from the engine/Prometheus.
+ */
+export async function resolveProfileLocale(store, ctx) {
+    if (!store)
+        return "en";
+    return (explicitLocale((await readProfileAdvisory(store, resolveProfileKey(ctx)))?.language) ?? "en");
+}
+/**
+ * Bind a module's translator to the per-request locale resolution: the module
+ * creates its `localizeFor` once —
+ * `export const localizeFor = createLocalizeFor(translator)` — and tool
+ * handlers localize their model-facing summaries with
+ * `const t = await localizeFor(store, ctx); … summary: t("key", { … })`.
+ */
+export function createLocalizeFor(translator) {
+    return async (store, ctx) => {
+        const locale = await resolveProfileLocale(store, ctx);
+        return (key, params) => translator(locale, key, params);
+    };
+}
+/**
+ * Bind a module's translator to the ONE view-title rule every show tool of
+ * every module follows: `export const viewLocaleOf = createViewLocaleOf(translator)`,
+ * for a handler that already holds the caller's profile language (a settings
+ * view reads the whole record anyway).
+ */
+export function createViewLocaleOf(translator) {
+    return (language) => {
+        const named = explicitLocale(language);
+        const t = (key, params) => translator(named ?? "en", key, params);
+        return { t, title: (key, params) => (named ? t(key, params) : undefined) };
+    };
+}
+/**
+ * `createLocalizeFor` plus the view title, from ONE profile read: a show tool
+ * words its result with
+ * `const { t, title } = await localizeViewFor(store, ctx)`, then
+ * `title: title("key"), summary: t("key", { … })`.
+ * Fail-soft like it: no store, no caller or a store outage reads as "system"
+ * (no title, an English summary).
+ */
+export function createLocalizeViewFor(translator) {
+    const viewLocaleOf = createViewLocaleOf(translator);
+    return async (store, ctx) => {
+        const record = store ? await readProfileAdvisory(store, resolveProfileKey(ctx)) : undefined;
+        return viewLocaleOf(record?.language);
+    };
+}
+//# sourceMappingURL=server-locale.js.map

package/dist/server-locale.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-locale.js","sourceRoot":"","sources":["../src/server-locale.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAEhD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAQvD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAgC,EAChC,GAAa;IAEb,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,OAAO,CACL,cAAc,CAAC,CAAC,MAAM,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,IAAI,CAC7F,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAsB;IAEtB,OAAO,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QACrD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;IACzD,CAAC,CAAA;AACH,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAsB;IAEtB,OAAO,CAAC,QAAQ,EAAE,EAAE;QAClB,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;QACtC,MAAM,CAAC,GAAY,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,IAAI,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;QAC1E,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAA;IAC5E,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAsB;IAEtB,MAAM,YAAY,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAA;IACnD,OAAO,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC3F,OAAO,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACvC,CAAC,CAAA;AACH,CAAC"}

package/dist/server-locale.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=server-locale.test.d.ts.map

package/dist/server-locale.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-locale.test.d.ts","sourceRoot":"","sources":["../src/server-locale.test.ts"],"names":[],"mappings":""}