@miragon/pulse-widget-shell 0.24.1 → 0.25.0

package/dist/font-assets.test.js

@@ -1,123 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { FONT_CACHE_CONTROL, fontAssetsCsp, fontResponse, installFontAssets, loadServedFonts, servedFontPaths, } from "./font-assets.js";
-import { SERVED_FONT_FILES } from "./served-fonts.js";
-/** A woff2 file starts with the signature `wOF2`. */
-const WOFF2_SIGNATURE = [0x77, 0x4f, 0x46, 0x32];
-/** Records `server.get(path, handler)` like the health suite's fake host. */
-function fakeHost() {
-    const routes = new Map();
-    const host = {
-        get: (path, handler) => {
-            routes.set(path, handler);
-        },
-    };
-    return { host, routes };
-}
-afterEach(() => {
-    vi.restoreAllMocks();
-});
-describe("loadServedFonts", () => {
-    it("reads Geist and Geist Mono (latin, variable) from the fontsource packages", () => {
-        const fonts = loadServedFonts();
-        expect(fonts.map((font) => font.file)).toEqual([
-            "geist-latin-wght-normal.woff2",
-            "geist-mono-latin-wght-normal.woff2",
-        ]);
-        for (const { file, body } of fonts) {
-            expect([...body.subarray(0, 4)], file).toEqual(WOFF2_SIGNATURE);
-            // Latin subsets, not the full families: tens of KB, not hundreds.
-            expect(body.byteLength, file).toBeGreaterThan(10_000);
-            expect(body.byteLength, file).toBeLessThan(60_000);
-        }
-    });
-    it("finds each served file in its fontsource package under the name the views load", () => {
-        const paths = servedFontPaths();
-        expect(Object.keys(paths)).toEqual(Object.values(SERVED_FONT_FILES));
-        expect(paths[SERVED_FONT_FILES.sans]).toMatch(/@fontsource-variable\/geist\/files\/geist-latin-wght-normal\.woff2$/);
-        expect(paths[SERVED_FONT_FILES.mono]).toMatch(/@fontsource-variable\/geist-mono\/files\/geist-mono-latin-wght-normal\.woff2$/);
-    });
-    it("reads the files it is pointed at and fails loudly on a missing one", () => {
-        expect(() => loadServedFonts(() => ({ "x.woff2": "/nonexistent/x.woff2" }))).toThrow(/ENOENT/);
-    });
-});
-describe("fontResponse", () => {
-    it("answers woff2, cached immutable for a year, readable from any origin", async () => {
-        const body = new Uint8Array([0x77, 0x4f, 0x46, 0x32, 1, 2]);
-        const res = fontResponse(body);
-        expect(res.status).toBe(200);
-        expect(Object.fromEntries(res.headers)).toEqual({
-            "content-type": "font/woff2",
-            "content-length": "6",
-            "cache-control": "public, max-age=31536000, immutable",
-            "access-control-allow-origin": "*",
-            "cross-origin-resource-policy": "cross-origin",
-            "x-content-type-options": "nosniff",
-        });
-        expect(FONT_CACHE_CONTROL).toBe("public, max-age=31536000, immutable");
-        expect(new Uint8Array(await res.arrayBuffer())).toEqual(body);
-    });
-});
-describe("installFontAssets", () => {
-    it("registers one GET route per file under the versioned font path", async () => {
-        const { host, routes } = fakeHost();
-        const installed = installFontAssets(host);
-        expect(installed).toEqual([
-            "/fonts/geist-5.3.0/geist-latin-wght-normal.woff2",
-            "/fonts/geist-5.3.0/geist-mono-latin-wght-normal.woff2",
-        ]);
-        expect([...routes.keys()]).toEqual(installed);
-        // A fresh Response per request: a body can be read only once.
-        const handler = routes.get(installed[0]);
-        const first = await handler({});
-        const second = await handler({});
-        expect(first).not.toBe(second);
-        expect((await first.arrayBuffer()).byteLength).toBe((await second.arrayBuffer()).byteLength);
-    });
-    it("serves what the loader returns under the path it is given", async () => {
-        const { host, routes } = fakeHost();
-        const fonts = [{ file: "x.woff2", body: new Uint8Array([1, 2, 3]) }];
-        expect(installFontAssets(host, { path: "/assets", load: () => fonts })).toEqual([
-            "/assets/x.woff2",
-        ]);
-        const res = await routes.get("/assets/x.woff2")({});
-        expect(new Uint8Array(await res.arrayBuffer())).toEqual(new Uint8Array([1, 2, 3]));
-    });
-    it("boots on without the route when the files cannot be read — the views use the host's font", () => {
-        const warn = vi.spyOn(console, "warn").mockImplementation(() => { });
-        const { host, routes } = fakeHost();
-        const failure = new Error("ENOENT");
-        const installed = installFontAssets(host, {
-            label: "edge",
-            load: () => {
-                throw failure;
-            },
-        });
-        expect(installed).toEqual([]);
-        expect(routes.size).toBe(0);
-        expect(warn).toHaveBeenCalledWith("[edge] Geist is not served (views use the host's font):", failure);
-    });
-    it("labels its warning `fonts` by default", () => {
-        const warn = vi.spyOn(console, "warn").mockImplementation(() => { });
-        installFontAssets(fakeHost().host, {
-            load: () => {
-                throw new Error("x");
-            },
-        });
-        expect(warn).toHaveBeenCalledWith(expect.stringMatching(/^\[fonts\] /), expect.any(Error));
-    });
-});
-describe("fontAssetsCsp", () => {
-    it("admits MCP_URL's origin in resourceDomains — the origin the views load fonts from", () => {
-        expect(fontAssetsCsp({ MCP_URL: "https://mcp.example.com/mcp" })).toEqual({
-            resourceDomains: ["https://mcp.example.com"],
-        });
-        expect(fontAssetsCsp({ MCP_URL: "  http://10.0.0.7:8400/  " })).toEqual({
-            resourceDomains: ["http://10.0.0.7:8400"],
-        });
-    });
-    it("declares nothing without MCP_URL: mcp-use appends the request-resolved origin itself", () => {
-        expect(fontAssetsCsp({})).toBeUndefined();
-        expect(fontAssetsCsp({ MCP_URL: "  " })).toBeUndefined();
-    });
-});
-//# sourceMappingURL=font-assets.test.js.map

package/dist/font-assets.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"font-assets.test.js","sourceRoot":"","sources":["../src/font-assets.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC5D,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,eAAe,GAEhB,MAAM,kBAAkB,CAAA;AAEzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAErD,qDAAqD;AACrD,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;AAEhD,6EAA6E;AAC7E,SAAS,QAAQ;IACf,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0D,CAAA;IAChF,MAAM,IAAI,GAAkB;QAC1B,GAAG,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;YACrB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC3B,CAAC;KACF,CAAA;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AACzB,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,eAAe,EAAE,CAAA;AACtB,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,KAAK,GAAG,eAAe,EAAE,CAAA;QAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7C,+BAA+B;YAC/B,oCAAoC;SACrC,CAAC,CAAA;QACF,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC;YACnC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;YAC/D,kEAAkE;YAClE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;YACrD,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QACpD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,KAAK,GAAG,eAAe,EAAE,CAAA;QAC/B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAA;QACpE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAC3C,qEAAqE,CACtE,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAC3C,+EAA+E,CAChF,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAChG,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC3D,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9C,cAAc,EAAE,YAAY;YAC5B,gBAAgB,EAAE,GAAG;YACrB,eAAe,EAAE,qCAAqC;YACtD,6BAA6B,EAAE,GAAG;YAClC,8BAA8B,EAAE,cAAc;YAC9C,wBAAwB,EAAE,SAAS;SACpC,CAAC,CAAA;QACF,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;QACtE,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAA;QACnC,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;QACzC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACxB,kDAAkD;YAClD,uDAAuD;SACxD,CAAC,CAAA;QACF,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAC7C,8DAA8D;QAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAE,CAAA;QACzC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,CAAA;QAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,CAAA;QAChC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC9B,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAA;QACnC,MAAM,KAAK,GAAgB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACjF,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9E,iBAAiB;SAClB,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAE,CAAC,EAAE,CAAC,CAAA;QACpD,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0FAA0F,EAAE,GAAG,EAAE;QAClG,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACnE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAA;QACnC,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,EAAE;YACxC,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,GAAG,EAAE;gBACT,MAAM,OAAO,CAAA;YACf,CAAC;SACF,CAAC,CAAA;QACF,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAC/B,yDAAyD,EACzD,OAAO,CACR,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACnE,iBAAiB,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE;YACjC,IAAI,EAAE,GAAG,EAAE;gBACT,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAA;YACtB,CAAC;SACF,CAAC,CAAA;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;IAC5F,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACxE,eAAe,EAAE,CAAC,yBAAyB,CAAC;SAC7C,CAAC,CAAA;QACF,MAAM,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACtE,eAAe,EAAE,CAAC,sBAAsB,CAAC;SAC1C,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;QACzC,MAAM,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;IAC1D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/health.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=health.test.d.ts.map

package/dist/health.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"health.test.d.ts","sourceRoot":"","sources":["../src/health.test.ts"],"names":[],"mappings":""}

package/dist/health.test.js

@@ -1,140 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { installHealthEndpoints } from "./health.js";
-function install(options) {
-    const routes = new Map();
-    const server = {
-        get: (path, handler) => routes.set(path, handler),
-    };
-    installHealthEndpoints(server, options);
-    const call = async (path) => {
-        const handler = routes.get(path);
-        if (!handler)
-            throw new Error(`no route registered for ${path}`);
-        const res = await handler({});
-        return { status: res.status, body: (await res.json()), headers: res.headers };
-    };
-    return { routes, call };
-}
-describe("installHealthEndpoints", () => {
-    afterEach(() => {
-        vi.restoreAllMocks();
-    });
-    it("registers live, ready and the bare prefix", () => {
-        const { routes } = install();
-        expect([...routes.keys()].sort()).toEqual(["/health", "/health/live", "/health/ready"]);
-    });
-    it("honors a custom prefix", () => {
-        const { routes } = install({ path: "/healthz" });
-        expect([...routes.keys()].sort()).toEqual(["/healthz", "/healthz/live", "/healthz/ready"]);
-    });
-    it("live answers up without running any readiness check", async () => {
-        const check = vi.fn();
-        const { call } = install({ readiness: { db: check } });
-        const res = await call("/health/live");
-        expect(res.status).toBe(200);
-        expect(res.body).toEqual({ status: "up" });
-        expect(check).not.toHaveBeenCalled();
-    });
-    it("marks probe responses uncacheable JSON", async () => {
-        const { call } = install();
-        const res = await call("/health/live");
-        expect(res.headers.get("cache-control")).toBe("no-store");
-        expect(res.headers.get("content-type")).toBe("application/json; charset=utf-8");
-    });
-    it("ready is up with no checks configured", async () => {
-        const { call } = install();
-        const res = await call("/health/ready");
-        expect(res.status).toBe(200);
-        expect(res.body).toEqual({ status: "up", checks: {} });
-    });
-    it("ready is up when every check passes (sync and async)", async () => {
-        const { call } = install({ readiness: { db: async () => { }, disk: () => { } } });
-        const res = await call("/health/ready");
-        expect(res.status).toBe(200);
-        expect(res.body).toEqual({ status: "up", checks: { db: "up", disk: "up" } });
-    });
-    it("ready is 503 naming the failing check, and logs the reason instead of exposing it", async () => {
-        const warn = vi.spyOn(console, "warn").mockImplementation(() => undefined);
-        const { call } = install({
-            label: "test-app",
-            readiness: {
-                db: async () => {
-                    throw new Error("connect ECONNREFUSED");
-                },
-                disk: () => { },
-            },
-        });
-        const res = await call("/health/ready");
-        expect(res.status).toBe(503);
-        expect(res.body).toEqual({ status: "down", checks: { db: "down", disk: "up" } });
-        expect(JSON.stringify(res.body)).not.toContain("ECONNREFUSED");
-        expect(warn).toHaveBeenCalledOnce();
-        expect(warn.mock.calls[0][0]).toBe('[test-app] readiness check "db" failed:');
-        expect(String(warn.mock.calls[0][1])).toContain("ECONNREFUSED");
-    });
-    it("treats a synchronous throw like a rejection", async () => {
-        vi.spyOn(console, "warn").mockImplementation(() => undefined);
-        const { call } = install({
-            readiness: {
-                boom: () => {
-                    throw new Error("sync");
-                },
-            },
-        });
-        const res = await call("/health/ready");
-        expect(res.status).toBe(503);
-        expect(res.body).toEqual({ status: "down", checks: { boom: "down" } });
-    });
-    it("fails a check that exceeds the timeout instead of hanging the probe", async () => {
-        const warn = vi.spyOn(console, "warn").mockImplementation(() => undefined);
-        const { call } = install({
-            timeoutMs: 10,
-            readiness: { hung: () => new Promise(() => { }) },
-        });
-        const res = await call("/health/ready");
-        expect(res.status).toBe(503);
-        expect(res.body).toEqual({ status: "down", checks: { hung: "down" } });
-        expect(String(warn.mock.calls[0][1])).toContain("timed out after 10ms");
-    });
-    it("answers 503 draining once the host drains — without running the checks — while live stays up", async () => {
-        const check = vi.fn();
-        let draining = false;
-        const { call } = install({ readiness: { db: check }, draining: () => draining });
-        expect((await call("/health/ready")).status).toBe(200);
-        draining = true;
-        const ready = await call("/health/ready");
-        expect(ready.status).toBe(503);
-        expect(ready.body).toEqual({ status: "draining", checks: {} });
-        expect((await call("/health")).status).toBe(503);
-        expect(check).toHaveBeenCalledTimes(1);
-        expect((await call("/health/live")).status).toBe(200);
-    });
-    it("reports draining for a probe that was in flight when the drain began", async () => {
-        let draining = false;
-        const { call } = install({
-            readiness: {
-                db: () => {
-                    draining = true;
-                },
-            },
-            draining: () => draining,
-        });
-        const res = await call("/health/ready");
-        expect(res.status).toBe(503);
-        expect(res.body).toEqual({ status: "draining", checks: { db: "up" } });
-    });
-    it("the bare prefix aliases readiness", async () => {
-        vi.spyOn(console, "warn").mockImplementation(() => undefined);
-        const { call } = install({
-            readiness: {
-                db: async () => {
-                    throw new Error("down");
-                },
-            },
-        });
-        const res = await call("/health");
-        expect(res.status).toBe(503);
-        expect(res.body).toEqual({ status: "down", checks: { db: "down" } });
-    });
-});
-//# sourceMappingURL=health.test.js.map

package/dist/health.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"health.test.js","sourceRoot":"","sources":["../src/health.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC5D,OAAO,EAAE,sBAAsB,EAA0C,MAAM,aAAa,CAAA;AAI5F,SAAS,OAAO,CAAC,OAAuB;IACtC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAA;IACzC,MAAM,MAAM,GAAkB;QAC5B,GAAG,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;KAClD,CAAA;IACD,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACvC,MAAM,IAAI,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAA;QAChE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,CAAA;QAC7B,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAA;IAC1F,CAAC,CAAA;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;AACzB,CAAC;AAED,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAA;QAC5B,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC,CAAA;IACzF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;QAChD,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAA;IAC5F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;QACrB,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;QACtD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,CAAA;QACtC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAA;QAC1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,CAAA;QACtC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACzD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;IACjF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAA;QAC1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,CAAA;QACvC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAC/E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,CAAA;QACvC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC1E,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;YACvB,KAAK,EAAE,UAAU;YACjB,SAAS,EAAE;gBACT,EAAE,EAAE,KAAK,IAAI,EAAE;oBACb,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;gBACzC,CAAC;gBACD,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;aACf;SACF,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,CAAA;QACvC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;QAChF,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QAC9D,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,CAAA;QACnC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAA;QAC7E,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;YACvB,SAAS,EAAE;gBACT,IAAI,EAAE,GAAG,EAAE;oBACT,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAA;gBACzB,CAAC;aACF;SACF,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,CAAA;QACvC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC1E,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;YACvB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,GAAG,EAAE,GAAE,CAAC,CAAC,EAAE;SACvD,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,CAAA;QACvC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;QACtE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;QAC5G,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;QACrB,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAA;QAChF,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAEtD,QAAQ,GAAG,IAAI,CAAA;QACf,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,CAAA;QACzC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;QAC9D,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACtC,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;YACvB,SAAS,EAAE;gBACT,EAAE,EAAE,GAAG,EAAE;oBACP,QAAQ,GAAG,IAAI,CAAA;gBACjB,CAAC;aACF;YACD,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ;SACzB,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,CAAA;QACvC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;YACvB,SAAS,EAAE;gBACT,EAAE,EAAE,KAAK,IAAI,EAAE;oBACb,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAA;gBACzB,CAAC;aACF;SACF,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAA;QACjC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;IACtE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/host-boot.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=host-boot.test.d.ts.map

package/dist/host-boot.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"host-boot.test.d.ts","sourceRoot":"","sources":["../src/host-boot.test.ts"],"names":[],"mappings":""}

package/dist/host-boot.test.js

@@ -1,59 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { requestLogLevelWarning, resolvePort, swallowDevCliViewsPrime, toolCallOutcome, toolNameOf, } from "./host-boot.js";
-describe("resolvePort", () => {
-    it("falls back to the default when PORT is unset", () => {
-        expect(resolvePort({ env: {} })).toBe(8400);
-    });
-    it("falls back on an empty or whitespace-only assignment (env_file `PORT=`)", () => {
-        expect(resolvePort({ env: { PORT: "" } })).toBe(8400);
-        expect(resolvePort({ env: { PORT: "   " } })).toBe(8400);
-    });
-    it("parses an explicit port and honors a custom fallback", () => {
-        expect(resolvePort({ env: { PORT: "9000" } })).toBe(9000);
-        expect(resolvePort({ env: {}, fallback: 1234 })).toBe(1234);
-    });
-    it.each(["abc", "0", "65536", "-1", "80.5"])("rejects %j", (value) => {
-        expect(() => resolvePort({ env: { PORT: value } })).toThrow(`invalid PORT "${value}" — expected an integer 1-65535`);
-    });
-    it("prefixes the host label onto the error", () => {
-        expect(() => resolvePort({ env: { PORT: "abc" }, label: "test-app" })).toThrow(`[test-app] invalid PORT "abc" — expected an integer 1-65535`);
-    });
-});
-describe("swallowDevCliViewsPrime", () => {
-    it("does nothing outside the dev CLI", () => {
-        const server = {};
-        swallowDevCliViewsPrime(server, {});
-        expect("__primeViews" in server).toBe(false);
-    });
-    it("replaces __primeViews with a no-op under the dev CLI", () => {
-        const server = {
-            __primeViews: () => {
-                throw new Error("double prime");
-            },
-        };
-        swallowDevCliViewsPrime(server, { MCP_USE_DEV_CLI: "1" });
-        expect(() => server.__primeViews?.()).not.toThrow();
-    });
-});
-describe("requestLogLevelWarning", () => {
-    it("stays silent at mcp-use's default level or when unset", () => {
-        expect(requestLogLevelWarning({})).toBeUndefined();
-        expect(requestLogLevelWarning({ MCP_USE_LOG_LEVEL: "info" })).toBeUndefined();
-    });
-    it("warns that debug logs tool inputs and outputs", () => {
-        expect(requestLogLevelWarning({ MCP_USE_LOG_LEVEL: " DEBUG " })).toMatch(/^MCP_USE_LOG_LEVEL=debug — mcp-use logs tool inputs and outputs/);
-    });
-    it("warns that trace logs full requests, bearer tokens included", () => {
-        expect(requestLogLevelWarning({ MCP_USE_LOG_LEVEL: "trace" })).toContain("bearer tokens");
-    });
-});
-describe("toolCallOutcome / toolNameOf", () => {
-    it("reads an isError result as error and a missing tool name as unknown", () => {
-        expect(toolCallOutcome({ isError: true })).toBe("error");
-        expect(toolCallOutcome({ content: [] })).toBe("ok");
-        expect(toolCallOutcome(undefined)).toBe("ok");
-        expect(toolNameOf({ params: { name: "notes_list_notes" } })).toBe("notes_list_notes");
-        expect(toolNameOf({})).toBe("unknown");
-    });
-});
-//# sourceMappingURL=host-boot.test.js.map

package/dist/host-boot.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"host-boot.test.js","sourceRoot":"","sources":["../src/host-boot.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,sBAAsB,EACtB,WAAW,EACX,uBAAuB,EACvB,eAAe,EACf,UAAU,GACX,MAAM,gBAAgB,CAAA;AAEvB,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrD,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzD,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE;QACnE,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CACzD,iBAAiB,KAAK,iCAAiC,CACxD,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAC5E,6DAA6D,CAC9D,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,EAAE,CAAA;QACjB,uBAAuB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,MAAM,GAAkC;YAC5C,YAAY,EAAE,GAAG,EAAE;gBACjB,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAA;YACjC,CAAC;SACF,CAAA;QACD,uBAAuB,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAA;QACzD,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACrD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;QAClD,MAAM,CAAC,sBAAsB,CAAC,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;IAC/E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,sBAAsB,CAAC,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CACtE,iEAAiE,CAClE,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,sBAAsB,CAAC,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;IAC3F,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACxD,MAAM,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnD,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7C,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACrF,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/http-edge.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=http-edge.test.d.ts.map

package/dist/http-edge.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"http-edge.test.d.ts","sourceRoot":"","sources":["../src/http-edge.test.ts"],"names":[],"mappings":""}

package/dist/http-edge.test.js

@@ -1,255 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { DEFAULT_MAX_BODY_BYTES, describeHttpEdgePolicy, edgeRejection, hostRejection, IN_FLIGHT_BODY_MULTIPLE, installHttpEdgeGuard, jsonRpcErrorBody, originRejection, resolveHttpEdgePolicy, } from "./http-edge.js";
-const LOCAL = ["localhost", "127.0.0.1", "[::1]"];
-describe("resolveHttpEdgePolicy", () => {
-    it("defaults to localhost-class only, a 4 MiB cap, a 16 MiB in-flight budget and an open /metrics", () => {
-        expect(resolveHttpEdgePolicy({})).toEqual({
-            allowedHosts: LOCAL,
-            allowedOrigins: LOCAL,
-            maxBodyBytes: 4 * 1024 * 1024,
-            maxInFlightBodyBytes: 16 * 1024 * 1024,
-        });
-        expect(DEFAULT_MAX_BODY_BYTES).toBe(4194304);
-        expect(IN_FLIGHT_BODY_MULTIPLE).toBe(4);
-    });
-    it("scales the in-flight budget with MCP_MAX_BODY_BYTES", () => {
-        expect(resolveHttpEdgePolicy({ MCP_MAX_BODY_BYTES: "1000" }).maxInFlightBodyBytes).toBe(4000);
-    });
-    it("derives the host and the origin from MCP_URL", () => {
-        const policy = resolveHttpEdgePolicy({ MCP_URL: "https://MCP.example.com:8443/base" });
-        expect(policy.allowedHosts).toEqual([...LOCAL, "mcp.example.com"]);
-        expect(policy.allowedOrigins).toEqual([...LOCAL, "https://mcp.example.com:8443"]);
-    });
-    it("adds the comma lists, normalized and de-duplicated", () => {
-        const policy = resolveHttpEdgePolicy({
-            MCP_URL: "https://mcp.example.com",
-            MCP_ALLOWED_HOSTS: " Internal.svc:8400 , mcp.example.com,,https://gw.example.com/x ",
-            MCP_ALLOWED_ORIGINS: "https://App.example.com/, app2.example.com",
-        });
-        expect(policy.allowedHosts).toEqual([
-            ...LOCAL,
-            "mcp.example.com",
-            "internal.svc",
-            "gw.example.com",
-        ]);
-        expect(policy.allowedOrigins).toEqual([
-            ...LOCAL,
-            "https://mcp.example.com",
-            "https://app.example.com",
-            "app2.example.com",
-        ]);
-    });
-    it("treats * as an explicit opt-out of that check", () => {
-        const policy = resolveHttpEdgePolicy({ MCP_ALLOWED_HOSTS: "*", MCP_ALLOWED_ORIGINS: "a.com,*" });
-        expect(policy.allowedHosts).toBe("*");
-        expect(policy.allowedOrigins).toBe("*");
-    });
-    it("reads the body cap and the metrics token", () => {
-        const policy = resolveHttpEdgePolicy({
-            MCP_MAX_BODY_BYTES: " 1024 ",
-            MCP_METRICS_TOKEN: " s3cret ",
-        });
-        expect(policy.maxBodyBytes).toBe(1024);
-        expect(policy.metricsToken).toBe("s3cret");
-        expect(resolveHttpEdgePolicy({ MCP_METRICS_TOKEN: "  " })).not.toHaveProperty("metricsToken");
-    });
-    it.each([
-        [{ MCP_URL: "not a url" }, /MCP_URL "not a url" is not an absolute URL/],
-        [{ MCP_URL: "ftp://mcp.example.com" }, /must be an http\(s\) URL/],
-        [{ MCP_MAX_BODY_BYTES: "4MB" }, /MCP_MAX_BODY_BYTES "4MB" must be a positive integer/],
-        [{ MCP_MAX_BODY_BYTES: "0" }, /must be a positive integer/],
-        [{ MCP_MAX_BODY_BYTES: "1.5" }, /must be a positive integer/],
-        [{ MCP_ALLOWED_HOSTS: "bad host" }, /MCP_ALLOWED_HOSTS: "bad host" is not a hostname/],
-        [{ MCP_ALLOWED_ORIGINS: "https://" }, /MCP_ALLOWED_ORIGINS: "https:\/\/" is not an origin/],
-        [{ MCP_ALLOWED_ORIGINS: "data://x" }, /is not an origin/],
-    ])("fails the boot on %j", (env, message) => {
-        expect(() => resolveHttpEdgePolicy(env)).toThrow(message);
-    });
-});
-describe("describeHttpEdgePolicy", () => {
-    it("states hosts, origins, the cap and the metrics protection in one line", () => {
-        expect(describeHttpEdgePolicy(resolveHttpEdgePolicy({ MCP_URL: "https://mcp.example.com", MCP_METRICS_TOKEN: "t" }))).toBe("HTTP edge — hosts: localhost, 127.0.0.1, [::1], mcp.example.com; " +
-            "origins: localhost, 127.0.0.1, [::1], https://mcp.example.com; " +
-            "max body 4 MiB (16 MiB in flight); /metrics token-protected");
-        expect(describeHttpEdgePolicy(resolveHttpEdgePolicy({
-            MCP_ALLOWED_HOSTS: "*",
-            MCP_ALLOWED_ORIGINS: "*",
-            MCP_MAX_BODY_BYTES: "1572864",
-        }))).toBe("HTTP edge — hosts: any (validation off); origins: any (validation off); " +
-            "max body 1.5 MiB (6 MiB in flight); /metrics open");
-    });
-    it.each([
-        ["1048576", "max body 1 MiB (4 MiB in flight);"],
-        ["1024", "max body 1 KiB (4 KiB in flight);"],
-        ["2560", "max body 2.5 KiB (10 KiB in flight);"],
-        ["1023", "max body 1023 bytes (4 KiB in flight);"],
-        ["640", "max body 640 bytes (2.5 KiB in flight);"],
-        ["255", "max body 255 bytes (1020 bytes in flight);"],
-    ])("formats a %s-byte cap readably", (bytes, expected) => {
-        expect(describeHttpEdgePolicy(resolveHttpEdgePolicy({ MCP_MAX_BODY_BYTES: bytes }))).toContain(expected);
-    });
-});
-const policy = resolveHttpEdgePolicy({
-    MCP_URL: "https://mcp.example.com",
-    MCP_ALLOWED_ORIGINS: "https://app.example.com,tools.example.com",
-});
-describe("hostRejection", () => {
-    it.each([
-        "localhost",
-        "localhost:8400",
-        "127.0.0.1:1",
-        "[::1]:8400",
-        "mcp.example.com",
-        "MCP.EXAMPLE.COM:443",
-    ])("admits %s", (host) => {
-        expect(hostRejection(host, policy)).toBeUndefined();
-    });
-    it("rejects a foreign host (port-agnostic) and points at the remedy", () => {
-        const reason = hostRejection("attacker.example:8400", policy);
-        expect(reason).toContain('Host "attacker.example" is not allowed');
-        expect(reason).toContain("MCP_URL");
-        expect(reason).toContain("MCP_ALLOWED_HOSTS");
-        // An IP that happens to reach the server is still not "ours".
-        expect(hostRejection("10.0.0.7:8400", policy)).toBeDefined();
-    });
-    it("rejects a missing or unparsable Host", () => {
-        expect(hostRejection(undefined, policy)).toBe("missing Host header");
-        expect(hostRejection("", policy)).toBe("missing Host header");
-        expect(hostRejection("a b", policy)).toBe('invalid Host header "a b"');
-    });
-    it("admits anything when Host validation is off", () => {
-        expect(hostRejection("attacker.example", { ...policy, allowedHosts: "*" })).toBeUndefined();
-        expect(hostRejection(undefined, { ...policy, allowedHosts: "*" })).toBeUndefined();
-    });
-});
-describe("originRejection", () => {
-    it("admits requests without an Origin (non-browser MCP clients)", () => {
-        expect(originRejection(undefined, "POST", policy)).toBeUndefined();
-        expect(originRejection("", "POST", policy)).toBeUndefined();
-    });
-    it("skips the safe methods, whatever the origin", () => {
-        expect(originRejection("https://attacker.example", "GET", policy)).toBeUndefined();
-        expect(originRejection("null", "HEAD", policy)).toBeUndefined();
-    });
-    it.each([
-        "http://localhost:6274",
-        "https://127.0.0.1",
-        "http://[::1]:3000",
-        "https://mcp.example.com",
-        "https://app.example.com",
-        "http://tools.example.com:9000",
-    ])("admits %s", (origin) => {
-        expect(originRejection(origin, "POST", policy)).toBeUndefined();
-    });
-    it.each([
-        "https://attacker.example",
-        "http://app.example.com", // exact origin: scheme counts
-        "https://app.example.com:8443", // and so does the port
-        "https://mcp.example.com.attacker.example",
-        "null",
-        "not a url",
-    ])("rejects %s on a POST", (origin) => {
-        const reason = originRejection(origin, "POST", policy);
-        expect(reason).toContain(`Origin "${origin}" is not allowed`);
-        expect(reason).toContain("MCP_ALLOWED_ORIGINS");
-    });
-    it("admits anything when Origin validation is off", () => {
-        expect(originRejection("https://attacker.example", "POST", { ...policy, allowedOrigins: "*" })).toBeUndefined();
-    });
-});
-describe("edgeRejection", () => {
-    const request = (overrides = {}) => ({
-        method: "POST",
-        path: "/mcp",
-        host: "mcp.example.com",
-        origin: undefined,
-        ...overrides,
-    });
-    it("passes a request whose Host and Origin are allowed", () => {
-        expect(edgeRejection(request({ origin: "https://app.example.com" }), policy)).toBeUndefined();
-    });
-    it("reports the Host before the Origin", () => {
-        const reason = edgeRejection(request({ host: "attacker.example", origin: "https://attacker.example" }), policy);
-        expect(reason).toMatch(/^Host "attacker\.example" is not allowed/);
-    });
-    it("reports a foreign Origin when the Host passes", () => {
-        const reason = edgeRejection(request({ origin: "https://attacker.example" }), policy);
-        expect(reason).toMatch(/^Origin "https:\/\/attacker\.example" is not allowed/);
-    });
-    it("passes the exempt path prefixes whatever their headers", () => {
-        const foreign = { host: "10.0.0.7", origin: "https://attacker.example" };
-        expect(edgeRejection(request({ path: "/metrics", ...foreign }), policy, ["/metrics"])).toBe(undefined);
-        expect(edgeRejection(request({ path: "/metrics2", ...foreign }), policy, ["/metrics"])).toBeDefined();
-    });
-});
-describe("jsonRpcErrorBody", () => {
-    it("is a JSON-RPC error with a null id", () => {
-        expect(JSON.parse(jsonRpcErrorBody("nope"))).toEqual({
-            jsonrpc: "2.0",
-            error: { code: -32000, message: "nope" },
-            id: null,
-        });
-    });
-});
-describe("installHttpEdgeGuard", () => {
-    function install(edge, exemptPaths) {
-        let middleware;
-        const host = {
-            use: (path, handler) => {
-                expect(path).toBe("*");
-                middleware = handler;
-            },
-        };
-        installHttpEdgeGuard(host, edge, exemptPaths ? { exemptPaths } : undefined);
-        return async (method, path, headers) => {
-            const ctx = {
-                req: { method, path, header: (name) => headers[name] },
-            };
-            let passed = false;
-            const response = await middleware(ctx, () => {
-                passed = true;
-                return Promise.resolve();
-            });
-            return { passed, response: response ?? undefined };
-        };
-    }
-    it("passes allowed requests through", async () => {
-        const run = install(policy);
-        const result = await run("POST", "/mcp", {
-            host: "mcp.example.com",
-            origin: "https://app.example.com",
-        });
-        expect(result).toEqual({ passed: true, response: undefined });
-    });
-    it("answers 403 with a JSON-RPC body for a foreign Host, before the route runs", async () => {
-        const run = install(policy);
-        const { passed, response } = await run("POST", "/mcp", { host: "attacker.example" });
-        expect(passed).toBe(false);
-        expect(response?.status).toBe(403);
-        expect(response?.headers.get("content-type")).toBe("application/json");
-        const body = (await response.json());
-        expect(body.error.message).toMatch(/^Forbidden: Host "attacker\.example" is not allowed/);
-    });
-    it("answers 403 for a foreign Origin even when the Host is fine", async () => {
-        const run = install(policy);
-        const { passed, response } = await run("POST", "/mcp", {
-            host: "localhost:8400",
-            origin: "https://attacker.example",
-        });
-        expect(passed).toBe(false);
-        expect(response?.status).toBe(403);
-    });
-    it("exempts the listed path prefixes (probes reach the container by IP)", async () => {
-        const run = install(policy, ["/health"]);
-        for (const path of ["/health", "/health/ready"]) {
-            expect((await run("GET", path, { host: "10.0.0.7:8400" })).passed, path).toBe(true);
-        }
-        expect((await run("GET", "/healthz", { host: "10.0.0.7:8400" })).passed).toBe(false);
-        expect((await run("GET", "/mcp", { host: "10.0.0.7:8400" })).passed).toBe(false);
-    });
-    it("guards every path when nothing is exempt", async () => {
-        const run = install(policy);
-        expect((await run("GET", "/health", { host: "10.0.0.7" })).passed).toBe(false);
-    });
-});
-//# sourceMappingURL=http-edge.test.js.map