@miragon/pulse-widget-shell 0.24.2 → 0.25.0

package/dist/metrics.js

@@ -1,24 +1,8 @@
 /**
- * Prometheus metrics for composed-server hosts (server path only): a scrape
- * endpoint (pull — a ServiceMonitor target, unlike the engine's OTLP push)
- * fed by three sources:
- *
- * - `mcp:tools/call` middleware → per-tool call counter + duration histogram.
- *   Tool names are a finite catalogue, so the `tool` label stays bounded;
- *   arguments, users and sessions are never labels (cardinality + PII). It
- *   counts the calls that reached a tool's handler: the SDK refuses an unknown
- *   tool or arguments that fail the input schema before that, so those show
- *   only in mcp-use's request log (and as `/mcp` requests below).
- * - hono `*` middleware → HTTP request counter + duration histogram. The
- *   `route` label is folded onto the known route set (`other` for the rest)
- *   because request paths are caller-controlled.
- * - prom-client's default collectors → process/event-loop/heap gauges under
- *   their standard names (`process_*`, `nodejs_*`), which the stock Node.js
- *   Grafana dashboards expect — deliberately NOT prefixed.
- *
- * Outside mcp-use's OAuth gate like the health probes (scoped to the MCP base
- * path): set `token` (the composed server's `MCP_METRICS_TOKEN`) to require
- * `Authorization: Bearer <token>`, or front `/metrics` with network policy.
+ * Labels stay bounded: tool names are a finite catalogue, routes fold onto known ones (paths are
+ * caller-controlled); never arguments, users or sessions. Calls refused by the SDK before the handler
+ * show only in mcp-use's request log. Default collectors keep their standard unprefixed names for
+ * stock Grafana dashboards. Outside the OAuth gate: set `token` or front it with network policy.
  */
 import { createHash, timingSafeEqual } from "node:crypto";
 import { collectDefaultMetrics, Counter, Histogram, Registry } from "prom-client";
@@ -26,27 +10,16 @@ import { toolCallOutcome, toolNameOf } from "./host-boot.js";
 const DEFAULT_ROUTES = ["/mcp", "/health", "/metrics", "/.well-known", "/fonts"];
 const DURATION_BUCKETS = [0.01, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10, 30];
 const digest = (value) => createHash("sha256").update(value).digest();
-/** Constant-time `Authorization: Bearer <token>` check (hashing equalizes the lengths). */
+/** Hashing equalizes the lengths for a constant-time compare. */
 export function bearerMatches(authorization, token) {
     const match = /^Bearer\s+(.+)$/i.exec(authorization?.trim() ?? "");
     return match !== null && timingSafeEqual(digest(match[1]), digest(token));
 }
-/** The `Authorization` header from a hono-shaped route ctx (structural, like the other ports). */
 const authorizationOf = (ctx) => ctx?.req?.header?.("authorization");
-/** Exact match or a sub-path of a known route keeps its label; anything else folds into `other`. */
 export function routeLabel(path, routes = DEFAULT_ROUTES) {
     return routes.find((route) => path === route || path.startsWith(`${route}/`)) ?? "other";
 }
-/**
- * Register the collectors and the scrape route. Returns the registry so a
- * host can add its own instruments or serve it elsewhere.
- *
- * Call it BEFORE registering routes that should be counted — the health
- * probes included: hono runs handlers in registration order and stops at the
- * first response, so a route registered earlier never reaches the `*`
- * middleware. The MCP transport and the OAuth discovery routes are mounted
- * by `listen()`, i.e. always after this.
- */
+/** Call BEFORE registering routes to count: hono stops at the first response in registration order. */
 export function installMetrics(server, options = {}) {
     const { path = "/metrics", prefix = "mcp_", defaultMetrics = true, routes = DEFAULT_ROUTES, registry = new Registry(), token, } = options;
     if (defaultMetrics)
@@ -80,7 +53,7 @@ export function installMetrics(server, options = {}) {
     server.use("mcp:tools/call", async (ctx, next) => {
         const tool = toolNameOf(ctx);
         const stop = toolDuration.startTimer({ tool });
-        // A throwing handler never reaches the assignment below — it stays `error`.
+        // A throwing handler never reaches the assignment below.
         let outcome = "error";
         try {
             const result = await next();
@@ -96,8 +69,7 @@ export function installMetrics(server, options = {}) {
         const method = ctx.req.method;
         const route = routeLabel(ctx.req.path, routes);
         const stop = httpDuration.startTimer({ method, route });
-        // hono routes handler errors through its error handler (c.res = 500), so
-        // `next()` normally resolves; the fallback covers an error escaping it.
+        // hono routes handler errors to c.res = 500; the fallback covers an error escaping `next()`.
         let status = "500";
         try {
             await next();

package/dist/metrics.js.map

@@ -1 +1 @@
-{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../src/metrics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EAAE,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEjF,OAAO,EAAE,eAAe,EAAE,UAAU,EAA+B,MAAM,gBAAgB,CAAA;AAiCzF,MAAM,cAAc,GAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAA;AACnG,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;AAExE,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAA;AAErF,2FAA2F;AAC3F,MAAM,UAAU,aAAa,CAAC,aAAiC,EAAE,KAAa;IAC5E,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAClE,OAAO,KAAK,KAAK,IAAI,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;AAC3E,CAAC;AAED,kGAAkG;AAClG,MAAM,eAAe,GAAG,CAAC,GAAY,EAAsB,EAAE,CAC1D,GAA2E,EAAE,GAAG,EAAE,MAAM,EAAE,CACzF,eAAe,CAChB,CAAA;AAEH,oGAAoG;AACpG,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,SAA4B,cAAc;IACjF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,IAAI,OAAO,CAAA;AAC1F,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,MAAmB,EAAE,UAA0B,EAAE;IAC9E,MAAM,EACJ,IAAI,GAAG,UAAU,EACjB,MAAM,GAAG,MAAM,EACf,cAAc,GAAG,IAAI,EACrB,MAAM,GAAG,cAAc,EACvB,QAAQ,GAAG,IAAI,QAAQ,EAAE,EACzB,KAAK,GACN,GAAG,OAAO,CAAA;IACX,IAAI,cAAc;QAAE,qBAAqB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;IAEjE,MAAM,SAAS,GAAG,IAAI,OAAO,CAAC;QAC5B,IAAI,EAAE,GAAG,MAAM,kBAAkB;QACjC,IAAI,EAAE,8DAA8D;QACpE,UAAU,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;QAC/B,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB,CAAC,CAAA;IACF,MAAM,YAAY,GAAG,IAAI,SAAS,CAAC;QACjC,IAAI,EAAE,GAAG,MAAM,4BAA4B;QAC3C,IAAI,EAAE,6CAA6C;QACnD,UAAU,EAAE,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,gBAAgB;QACzB,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB,CAAC,CAAA;IACF,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC;QAC/B,IAAI,EAAE,GAAG,MAAM,qBAAqB;QACpC,IAAI,EAAE,iDAAiD;QACvD,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;QACzC,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB,CAAC,CAAA;IACF,MAAM,YAAY,GAAG,IAAI,SAAS,CAAC;QACjC,IAAI,EAAE,GAAG,MAAM,+BAA+B;QAC9C,IAAI,EAAE,uDAAuD;QAC7D,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC/B,OAAO,EAAE,gBAAgB;QACzB,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9C,4EAA4E;QAC5E,IAAI,OAAO,GAAG,OAAO,CAAA;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAA;YAC3B,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;YACjC,OAAO,MAAM,CAAA;QACf,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,CAAA;YACN,SAAS,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;QAClC,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAA;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC9C,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;QACvD,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,MAAM,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC;YACH,MAAM,IAAI,EAAE,CAAA;YACZ,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACjC,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,CAAA;YACN,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAE;gBACpC,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,eAAe,EAAE,UAAU,EAAE;aACvF,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,EAAE;YAC5C,OAAO,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE;SAC/E,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAA;AACjB,CAAC"}
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../src/metrics.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EAAE,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEjF,OAAO,EAAE,eAAe,EAAE,UAAU,EAA+B,MAAM,gBAAgB,CAAA;AA2BzF,MAAM,cAAc,GAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAA;AACnG,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;AAExE,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAA;AAErF,iEAAiE;AACjE,MAAM,UAAU,aAAa,CAAC,aAAiC,EAAE,KAAa;IAC5E,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAClE,OAAO,KAAK,KAAK,IAAI,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;AAC3E,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,GAAY,EAAsB,EAAE,CAC1D,GAA2E,EAAE,GAAG,EAAE,MAAM,EAAE,CACzF,eAAe,CAChB,CAAA;AAEH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,SAA4B,cAAc;IACjF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,IAAI,OAAO,CAAA;AAC1F,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,cAAc,CAAC,MAAmB,EAAE,UAA0B,EAAE;IAC9E,MAAM,EACJ,IAAI,GAAG,UAAU,EACjB,MAAM,GAAG,MAAM,EACf,cAAc,GAAG,IAAI,EACrB,MAAM,GAAG,cAAc,EACvB,QAAQ,GAAG,IAAI,QAAQ,EAAE,EACzB,KAAK,GACN,GAAG,OAAO,CAAA;IACX,IAAI,cAAc;QAAE,qBAAqB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;IAEjE,MAAM,SAAS,GAAG,IAAI,OAAO,CAAC;QAC5B,IAAI,EAAE,GAAG,MAAM,kBAAkB;QACjC,IAAI,EAAE,8DAA8D;QACpE,UAAU,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;QAC/B,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB,CAAC,CAAA;IACF,MAAM,YAAY,GAAG,IAAI,SAAS,CAAC;QACjC,IAAI,EAAE,GAAG,MAAM,4BAA4B;QAC3C,IAAI,EAAE,6CAA6C;QACnD,UAAU,EAAE,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,gBAAgB;QACzB,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB,CAAC,CAAA;IACF,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC;QAC/B,IAAI,EAAE,GAAG,MAAM,qBAAqB;QACpC,IAAI,EAAE,iDAAiD;QACvD,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;QACzC,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB,CAAC,CAAA;IACF,MAAM,YAAY,GAAG,IAAI,SAAS,CAAC;QACjC,IAAI,EAAE,GAAG,MAAM,+BAA+B;QAC9C,IAAI,EAAE,uDAAuD;QAC7D,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC/B,OAAO,EAAE,gBAAgB;QACzB,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9C,yDAAyD;QACzD,IAAI,OAAO,GAAG,OAAO,CAAA;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAA;YAC3B,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;YACjC,OAAO,MAAM,CAAA;QACf,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,CAAA;YACN,SAAS,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;QAClC,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAA;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC9C,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;QACvD,6FAA6F;QAC7F,IAAI,MAAM,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC;YACH,MAAM,IAAI,EAAE,CAAA;YACZ,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACjC,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,CAAA;YACN,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAE;gBACpC,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,eAAe,EAAE,UAAU,EAAE;aACvF,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,EAAE;YAC5C,OAAO,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE;SAC/E,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/dist/node-listener.d.ts

@@ -1,61 +1,29 @@
 /**
- * The Node `http` listener of a composed server (production path only):
- * mcp-use's public `toNodeHandler` bridge behind the edge's admission checks.
- *
- * Why: mcp-use 2's Node bridge reads every non-GET body into ONE string
- * before any middleware runs, and its JSON middleware then parses it — into a
- * heap graph up to ~20× the body — all before the OAuth gate. So before a
- * body reaches the bridge:
- *
- * 1. a request the edge guard refuses anyway (foreign `Host`/`Origin`) has
- *    its body discarded unread; the app still answers — and counts — the 403;
- * 2. a body over the cap gets 413 as soon as the declared `Content-Length` or
- *    the bytes actually received exceed it;
- * 3. a body that would push the bytes held across in-flight requests over the
- *    budget gets 503 + `Retry-After`. A request holds its share until its
- *    response closes, so the budget also bounds the parse after the hand-off.
- *
- * A refused upload is drained without keeping a byte and cut after a grace.
+ * mcp-use 2's Node bridge buffers every non-GET body into one string and parses it (up to ~20× on
+ * the heap) before the OAuth gate. So before the bridge: a guard-refused request's body is discarded
+ * unread, an over-cap body gets 413, and a body past the in-flight budget gets 503 + `Retry-After`.
  * `mcp-use dev` serves through its own listener and is NOT capped.
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
-/** The fetch face the bridge drives — `MCPServer` satisfies it structurally. */
+/** `MCPServer` satisfies it structurally. */
 export interface FetchTarget {
     fetch: (request: Request) => Promise<Response>;
 }
 export interface BodyLimitedListenerOptions {
-    /** Body cap in bytes; larger requests get 413 before they are buffered. */
     maxBodyBytes: number;
-    /**
-     * Body bytes held across all requests whose response is still open; a body
-     * that would exceed it gets 503 (default {@link IN_FLIGHT_BODY_MULTIPLE} × the cap).
-     */
     maxInFlightBodyBytes?: number;
-    /**
-     * Requests the app refuses whatever their body (the Host/Origin guard):
-     * their body is discarded unread and the app answers them bodiless.
-     */
+    /** Requests the guard refuses whatever their body: discarded unread, answered bodiless. */
     refusedBeforeBody?: (req: IncomingMessage) => boolean;
-    /** How long the remainder of a refused upload is discarded before the socket is cut (default 2000 ms). */
+    /** Grace before the socket of a refused upload is cut (default 2000 ms). */
     discardGraceMs?: number;
-    /** Observes bridge errors (the client still gets a JSON-RPC 500). */
+    /** The client still gets a JSON-RPC 500. */
     onError?: (error: Error) => void;
 }
-/** A Node request listener that also tells the shutdown path what is still in flight. */
 export interface BodyLimitedListener {
     (req: IncomingMessage, res: ServerResponse): void;
-    /** Requests whose response has not closed yet. */
     readonly inFlight: number;
-    /** Body bytes those requests hold against the in-flight budget. */
     readonly heldBodyBytes: number;
-    /** Resolves once no request is in flight (immediately when idle). */
     idle(): Promise<void>;
 }
-/**
- * Build the listener: bodies of non-GET/HEAD requests are admitted against the
- * cap (413) and the in-flight budget (503), bodies of requests the guard
- * refuses are never read, everything else goes through mcp-use's
- * `toNodeHandler` unchanged. Pass it to `http.createServer`.
- */
 export declare function createBodyLimitedListener(target: FetchTarget, { maxBodyBytes, maxInFlightBodyBytes, refusedBeforeBody, discardGraceMs, onError, }: BodyLimitedListenerOptions): BodyLimitedListener;
 //# sourceMappingURL=node-listener.d.ts.map

package/dist/node-listener.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-listener.d.ts","sourceRoot":"","sources":["../src/node-listener.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAKhE,gFAAgF;AAChF,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;CAC/C;AAED,MAAM,WAAW,0BAA0B;IACzC,2EAA2E;IAC3E,YAAY,EAAE,MAAM,CAAA;IACpB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAA;IACrD,0GAA0G;IAC1G,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,qEAAqE;IACrE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;CACjC;AAED,yFAAyF;AACzF,MAAM,WAAW,mBAAmB;IAClC,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,IAAI,CAAA;IACjD,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,mEAAmE;IACnE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,qEAAqE;IACrE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AA8FD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,WAAW,EACnB,EACE,YAAY,EACZ,oBAA6D,EAC7D,iBAAiB,EACjB,cAAqB,EACrB,OAAO,GACR,EAAE,0BAA0B,GAC5B,mBAAmB,CA2FrB"}
+{"version":3,"file":"node-listener.d.ts","sourceRoot":"","sources":["../src/node-listener.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAKhE,6CAA6C;AAC7C,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;CAC/C;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAA;IACpB,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,2FAA2F;IAC3F,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAA;IACrD,4EAA4E;IAC5E,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,4CAA4C;IAC5C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,IAAI,CAAA;IACjD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAyFD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,WAAW,EACnB,EACE,YAAY,EACZ,oBAA6D,EAC7D,iBAAiB,EACjB,cAAqB,EACrB,OAAO,GACR,EAAE,0BAA0B,GAC5B,mBAAmB,CAyFrB"}

package/dist/node-listener.js

@@ -1,7 +1,6 @@
 import { Readable } from "node:stream";
 import { toNodeHandler } from "mcp-use/node";
 import { IN_FLIGHT_BODY_MULTIPLE, jsonRpcErrorBody } from "./http-edge.js";
-/** Read the body while it stays under the cap and the budget; stop (without buffering) the moment it does not. */
 function readCapped(req, limit, share) {
     return new Promise((resolve) => {
         const chunks = [];
@@ -32,14 +31,12 @@ function readCapped(req, limit, share) {
         req.once("close", () => settle(req.complete ? { kind: "body", chunks } : { kind: "aborted" }));
     });
 }
-/** The bounded body, replayed to the bridge as the async-iterable request it expects. */
 function replay(req, chunks, headers = req.headers) {
     return Object.assign(Readable.from(chunks), { method: req.method, url: req.url, headers });
 }
 /**
- * The request without its body. The body headers go too: nothing may wait for
- * bytes, and mcp-use's JSON middleware — which runs BEFORE the guard — would
- * answer an empty `application/json` body 400 instead of letting the guard 403.
+ * The body headers go too: mcp-use's JSON middleware runs BEFORE the guard and would answer an empty
+ * `application/json` body 400 instead of letting the guard 403.
  */
 function bodiless(req) {
     const headers = { ...req.headers };
@@ -57,19 +54,12 @@ function refuse(req, res, { status, message, headers = {} }, graceMs) {
         connection: "close",
     });
     res.end(body);
-    // Drain (never keep) what the client is still sending so it can read the
-    // answer instead of a reset, and cut the connection once the grace is up.
+    // Drain so the client reads the answer instead of a reset; cut once the grace is up.
     req.resume();
     const timer = setTimeout(() => req.socket.destroy(), graceMs);
     timer.unref();
     req.socket.once("close", () => clearTimeout(timer));
 }
-/**
- * Build the listener: bodies of non-GET/HEAD requests are admitted against the
- * cap (413) and the in-flight budget (503), bodies of requests the guard
- * refuses are never read, everything else goes through mcp-use's
- * `toNodeHandler` unchanged. Pass it to `http.createServer`.
- */
 export function createBodyLimitedListener(target, { maxBodyBytes, maxInFlightBodyBytes = IN_FLIGHT_BODY_MULTIPLE * maxBodyBytes, refusedBeforeBody, discardGraceMs = 2000, onError, }) {
     const bridge = toNodeHandler({ fetch: (request) => target.fetch(request) }, onError ? { onerror: onError } : {});
     const tooLarge = {
@@ -78,7 +68,7 @@ export function createBodyLimitedListener(target, { maxBodyBytes, maxInFlightBod
     };
     const busy = {
         status: 503,
-        message: `Server busy: request bodies in flight would exceed ${maxInFlightBodyBytes} bytes — retry shortly.`,
+        message: `Server busy: request bodies in flight would exceed ${maxInFlightBodyBytes} bytes. Retry shortly.`,
         headers: { "retry-after": "1" },
     };
     let inFlight = 0;
@@ -117,7 +107,7 @@ export function createBodyLimitedListener(target, { maxBodyBytes, maxInFlightBod
         if (method === "GET" || method === "HEAD")
             return bridge(req, res);
         if (refusedBeforeBody?.(req)) {
-            // Discard the body unread; the app's guard answers (and counts) the 403.
+            // The app's guard answers (and counts) the 403.
             req.resume();
             res.setHeader("connection", "close");
             return bridge(bodiless(req), res);
@@ -132,15 +122,13 @@ export function createBodyLimitedListener(target, { maxBodyBytes, maxInFlightBod
             return refuse(req, res, tooLarge, discardGraceMs);
         if (read.kind === "busy")
             return refuse(req, res, busy, discardGraceMs);
-        // A client that went away mid-upload has nobody left to answer.
         if (read.kind === "aborted")
             return;
         return bridge(replay(req, read.chunks), res);
     };
     const listener = (req, res) => {
         inFlight += 1;
-        // The share exists before the first await, so its release is registered
-        // even for a client that disconnects at once.
+        // Created before the first await, so a client that disconnects at once still releases it.
         const share = budgetShare();
         res.once("close", () => {
             share.release();

package/dist/node-listener.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-listener.js","sourceRoot":"","sources":["../src/node-listener.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,aAAa,EAAgC,MAAM,cAAc,CAAA;AAC1E,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAkD1E,kHAAkH;AAClH,SAAS,UAAU,CAAC,GAAoB,EAAE,KAAa,EAAE,KAAkB;IACzE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,MAAM,GAAG,CAAC,MAAgB,EAAQ,EAAE;YACxC,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACvB,OAAO,CAAC,MAAM,CAAC,CAAA;QACjB,CAAC,CAAA;QACD,MAAM,IAAI,GAAG,CAAC,IAA0B,EAAQ,EAAE;YAChD,GAAG,CAAC,KAAK,EAAE,CAAA;YACX,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QAClB,CAAC,CAAA;QACD,MAAM,MAAM,GAAG,CAAC,KAAa,EAAQ,EAAE;YACrC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAA;YACpB,IAAI,IAAI,GAAG,KAAK;gBAAE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAA;YAC1C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAA;YAC1C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC,CAAA;QACD,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACtB,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;QACvD,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;QACpD,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;IAChG,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,yFAAyF;AACzF,SAAS,MAAM,CACb,GAAoB,EACpB,MAAgB,EAChB,UAAsC,GAAG,CAAC,OAAO;IAEjD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;AAC5F,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,GAAoB;IACpC,MAAM,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAA;IAClC,KAAK,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,cAAc,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAC/F,OAAO,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,CAAA;AACjC,CAAC;AAQD,SAAS,MAAM,CACb,GAAoB,EACpB,GAAmB,EACnB,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,EAAW,EAC1C,OAAe;IAEf,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAA;IACnD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,GAAG,OAAO;QACV,cAAc,EAAE,kBAAkB;QAClC,gBAAgB,EAAE,IAAI,CAAC,MAAM;QAC7B,UAAU,EAAE,OAAO;KACpB,CAAC,CAAA;IACF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACb,yEAAyE;IACzE,0EAA0E;IAC1E,GAAG,CAAC,MAAM,EAAE,CAAA;IACZ,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAA;IAC7D,KAAK,CAAC,KAAK,EAAE,CAAA;IACb,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAAmB,EACnB,EACE,YAAY,EACZ,oBAAoB,GAAG,uBAAuB,GAAG,YAAY,EAC7D,iBAAiB,EACjB,cAAc,GAAG,IAAI,EACrB,OAAO,GACoB;IAE7B,MAAM,MAAM,GAAG,aAAa,CAC1B,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAC7C,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CACpC,CAAA;IACD,MAAM,QAAQ,GAAY;QACxB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,+CAA+C,YAAY,8BAA8B;KACnG,CAAA;IACD,MAAM,IAAI,GAAY;QACpB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,sDAAsD,oBAAoB,yBAAyB;QAC5G,OAAO,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE;KAChC,CAAA;IACD,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,aAAa,GAAG,CAAC,CAAA;IACrB,IAAI,OAAO,GAAsB,EAAE,CAAA;IACnC,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,QAAQ,IAAI,CAAC,CAAA;QACb,IAAI,QAAQ,GAAG,CAAC;YAAE,OAAM;QACxB,MAAM,KAAK,GAAG,OAAO,CAAA;QACrB,OAAO,GAAG,EAAE,CAAA;QACZ,KAAK,MAAM,OAAO,IAAI,KAAK;YAAE,OAAO,EAAE,CAAA;IACxC,CAAC,CAAA;IACD,MAAM,WAAW,GAAG,GAAgB,EAAE;QACpC,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,OAAO;YACL,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;gBACd,MAAM,KAAK,GAAG,KAAK,GAAG,IAAI,CAAA;gBAC1B,IAAI,KAAK,IAAI,CAAC;oBAAE,OAAO,IAAI,CAAA;gBAC3B,IAAI,aAAa,GAAG,KAAK,GAAG,oBAAoB;oBAAE,OAAO,KAAK,CAAA;gBAC9D,aAAa,IAAI,KAAK,CAAA;gBACtB,IAAI,GAAG,KAAK,CAAA;gBACZ,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO,EAAE,GAAG,EAAE;gBACZ,aAAa,IAAI,IAAI,CAAA;gBACrB,IAAI,GAAG,CAAC,CAAA;YACV,CAAC;SACF,CAAA;IACH,CAAC,CAAA;IAED,MAAM,KAAK,GAAG,KAAK,EACjB,GAAoB,EACpB,GAAmB,EACnB,KAAkB,EACH,EAAE;QACjB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;QAClD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QAClE,IAAI,iBAAiB,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,yEAAyE;YACzE,GAAG,CAAC,MAAM,EAAE,CAAA;YACZ,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;YACpC,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;QACnC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAA;QACtD,IAAI,QAAQ,GAAG,YAAY;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAA;QAC9E,IAAI,QAAQ,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,CAAC,CAAA;QACxF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,CAAA;QACvD,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAA;QAChF,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,CAAC,CAAA;QACvE,gEAAgE;QAChE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAM;QACnC,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAA;IAC9C,CAAC,CAAA;IAED,MAAM,QAAQ,GAAG,CAAC,GAAoB,EAAE,GAAmB,EAAQ,EAAE;QACnE,QAAQ,IAAI,CAAC,CAAA;QACb,wEAAwE;QACxE,8CAA8C;QAC9C,MAAM,KAAK,GAAG,WAAW,EAAE,CAAA;QAC3B,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,KAAK,CAAC,OAAO,EAAE,CAAA;YACf,MAAM,EAAE,CAAA;QACV,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC9C,OAAO,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACpE,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;YACxC,GAAG,CAAC,GAAG,EAAE,CAAA;QACX,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,0EAA0E;IAC1E,OAAO,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE;QACvC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE;QACnD,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE;QAC7D,IAAI,EAAE;YACJ,KAAK,EAAE,GAAkB,EAAE,CACzB,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;SAC7F;KACF,CAAwB,CAAA;AAC3B,CAAC"}
+{"version":3,"file":"node-listener.js","sourceRoot":"","sources":["../src/node-listener.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,aAAa,EAAgC,MAAM,cAAc,CAAA;AAC1E,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAqC1E,SAAS,UAAU,CAAC,GAAoB,EAAE,KAAa,EAAE,KAAkB;IACzE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,MAAM,GAAG,CAAC,MAAgB,EAAQ,EAAE;YACxC,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACvB,OAAO,CAAC,MAAM,CAAC,CAAA;QACjB,CAAC,CAAA;QACD,MAAM,IAAI,GAAG,CAAC,IAA0B,EAAQ,EAAE;YAChD,GAAG,CAAC,KAAK,EAAE,CAAA;YACX,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QAClB,CAAC,CAAA;QACD,MAAM,MAAM,GAAG,CAAC,KAAa,EAAQ,EAAE;YACrC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAA;YACpB,IAAI,IAAI,GAAG,KAAK;gBAAE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAA;YAC1C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAA;YAC1C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC,CAAA;QACD,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACtB,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;QACvD,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;QACpD,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;IAChG,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,MAAM,CACb,GAAoB,EACpB,MAAgB,EAChB,UAAsC,GAAG,CAAC,OAAO;IAEjD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;AAC5F,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,GAAoB;IACpC,MAAM,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAA;IAClC,KAAK,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,cAAc,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAC/F,OAAO,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,CAAA;AACjC,CAAC;AAQD,SAAS,MAAM,CACb,GAAoB,EACpB,GAAmB,EACnB,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,EAAW,EAC1C,OAAe;IAEf,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAA;IACnD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,GAAG,OAAO;QACV,cAAc,EAAE,kBAAkB;QAClC,gBAAgB,EAAE,IAAI,CAAC,MAAM;QAC7B,UAAU,EAAE,OAAO;KACpB,CAAC,CAAA;IACF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACb,qFAAqF;IACrF,GAAG,CAAC,MAAM,EAAE,CAAA;IACZ,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAA;IAC7D,KAAK,CAAC,KAAK,EAAE,CAAA;IACb,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;AACrD,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAAmB,EACnB,EACE,YAAY,EACZ,oBAAoB,GAAG,uBAAuB,GAAG,YAAY,EAC7D,iBAAiB,EACjB,cAAc,GAAG,IAAI,EACrB,OAAO,GACoB;IAE7B,MAAM,MAAM,GAAG,aAAa,CAC1B,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAC7C,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CACpC,CAAA;IACD,MAAM,QAAQ,GAAY;QACxB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,+CAA+C,YAAY,8BAA8B;KACnG,CAAA;IACD,MAAM,IAAI,GAAY;QACpB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,sDAAsD,oBAAoB,wBAAwB;QAC3G,OAAO,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE;KAChC,CAAA;IACD,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,aAAa,GAAG,CAAC,CAAA;IACrB,IAAI,OAAO,GAAsB,EAAE,CAAA;IACnC,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,QAAQ,IAAI,CAAC,CAAA;QACb,IAAI,QAAQ,GAAG,CAAC;YAAE,OAAM;QACxB,MAAM,KAAK,GAAG,OAAO,CAAA;QACrB,OAAO,GAAG,EAAE,CAAA;QACZ,KAAK,MAAM,OAAO,IAAI,KAAK;YAAE,OAAO,EAAE,CAAA;IACxC,CAAC,CAAA;IACD,MAAM,WAAW,GAAG,GAAgB,EAAE;QACpC,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,OAAO;YACL,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;gBACd,MAAM,KAAK,GAAG,KAAK,GAAG,IAAI,CAAA;gBAC1B,IAAI,KAAK,IAAI,CAAC;oBAAE,OAAO,IAAI,CAAA;gBAC3B,IAAI,aAAa,GAAG,KAAK,GAAG,oBAAoB;oBAAE,OAAO,KAAK,CAAA;gBAC9D,aAAa,IAAI,KAAK,CAAA;gBACtB,IAAI,GAAG,KAAK,CAAA;gBACZ,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO,EAAE,GAAG,EAAE;gBACZ,aAAa,IAAI,IAAI,CAAA;gBACrB,IAAI,GAAG,CAAC,CAAA;YACV,CAAC;SACF,CAAA;IACH,CAAC,CAAA;IAED,MAAM,KAAK,GAAG,KAAK,EACjB,GAAoB,EACpB,GAAmB,EACnB,KAAkB,EACH,EAAE;QACjB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;QAClD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QAClE,IAAI,iBAAiB,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,gDAAgD;YAChD,GAAG,CAAC,MAAM,EAAE,CAAA;YACZ,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;YACpC,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;QACnC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAA;QACtD,IAAI,QAAQ,GAAG,YAAY;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAA;QAC9E,IAAI,QAAQ,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,CAAC,CAAA;QACxF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,CAAA;QACvD,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAA;QAChF,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,CAAC,CAAA;QACvE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAM;QACnC,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAA;IAC9C,CAAC,CAAA;IAED,MAAM,QAAQ,GAAG,CAAC,GAAoB,EAAE,GAAmB,EAAQ,EAAE;QACnE,QAAQ,IAAI,CAAC,CAAA;QACb,0FAA0F;QAC1F,MAAM,KAAK,GAAG,WAAW,EAAE,CAAA;QAC3B,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,KAAK,CAAC,OAAO,EAAE,CAAA;YACf,MAAM,EAAE,CAAA;QACV,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC9C,OAAO,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACpE,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;YACxC,GAAG,CAAC,GAAG,EAAE,CAAA;QACX,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,0EAA0E;IAC1E,OAAO,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE;QACvC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE;QACnD,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE;QAC7D,IAAI,EAAE;YACJ,KAAK,EAAE,GAAkB,EAAE,CACzB,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;SAC7F;KACF,CAAwB,CAAA;AAC3B,CAAC"}

package/dist/oauth-env.d.ts

@@ -1,42 +1,22 @@
 /**
- * `MCP_OAUTH` → the OAuth provider a composition root installs. Every root —
- * the stock server, the composed-server template, a customer fork — wires it
- * the SAME way:
+ * mcp-use's own provider variables (`MCP_USE_OAUTH_*`) → the OAuth provider the boot installs.
+ * mcp-use validates the bearer token and the RFC 8707 audience (`MCP_URL`) and serves discovery;
+ * the server never mints tokens. It is the ONLY caller-identity source, and it raises every
+ * module's no-suffix toolset to its standard set. A gateway that terminates auth in front is
+ * invisible here: identity arrives only through this OAuth.
  *
- * ```ts
- * const oauth = oauthFromEnv({ env, label })   // boot-time parse + warning
- * createComposedServer({ …, oauth })           // installs it, decides toolsets
- * const APP_ENV_VARS = [...OAUTH_ENV_VARS, …]  // known to the typo warner
- * ```
- *
- * With a provider the server is an OAuth resource server: mcp-use validates
- * the bearer token on every `/mcp` request (401 + `WWW-Authenticate`
- * otherwise) against the IdP's JWKS, checks the RFC 8707 resource audience
- * (the server's canonical MCP URL, `MCP_URL`) and serves the `.well-known`
- * discovery metadata; the server never mints tokens. It is also the ONLY
- * caller-identity source: per-user settings and dashboards exist only with it
- * (`resolveProfileKey`), and an installed provider raises every module's
- * no-suffix toolset from the read-only floor to its standard set. A gateway
- * that terminates auth in front of the server is invisible here — identity
- * reaches the server only through this OAuth.
- *
- * Server path only (`@miragon/pulse-widget-shell/server`).
+ * mcp-use has no provider selector, so the boot picks the one provider whose variables are set.
+ * A deployment that asked for auth never comes up without it: the retired JSON variable
+ * (`MCP_OAUTH`), a variable this server does not read, two providers or an incomplete one fail
+ * the boot, naming the variables.
  */
 import type { OAuthProvider } from "mcp-use/oauth";
-/** The env vars {@link oauthFromEnv} reads — spread them into the root's known-var list. */
-export declare const OAUTH_ENV_VARS: readonly ["MCP_OAUTH"];
-export interface OAuthFromEnvOptions {
-    /** Defaults to `process.env`. */
-    env?: NodeJS.ProcessEnv;
-    /** Log prefix, e.g. `pulse`. */
-    label?: string;
-}
+/** The variables the boot reads for OAuth: every provider's, nothing else. */
+export declare const OAUTH_ENV_VARS: readonly string[];
 /**
- * Builds the mcp-use OAuth provider from `MCP_OAUTH` (`keycloak` or `auth0`).
- * Unset or blank → `undefined` plus ONE boot warning naming what that means:
- * an unauthenticated endpoint, read-only defaults, and no saved settings.
- * Invalid JSON, schema violations and stray `MCP_USE_OAUTH_*` fallbacks throw:
- * a deployment that asked for auth must never silently come up without it.
+ * No provider's variables → `undefined` plus ONE boot warning (prefixed with `label`). The retired
+ * variable, a variable this server does not read, two providers, an incomplete or an invalid one
+ * throw: a deployment that asked for auth must never come up without it.
  */
-export declare function oauthFromEnv(options?: OAuthFromEnvOptions): OAuthProvider<unknown> | undefined;
+export declare function oauthFromEnv(env: NodeJS.ProcessEnv, label: string): OAuthProvider<unknown> | undefined;
 //# sourceMappingURL=oauth-env.d.ts.map

package/dist/oauth-env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-env.d.ts","sourceRoot":"","sources":["../src/oauth-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAKlD,4FAA4F;AAC5F,eAAO,MAAM,cAAc,wBAAyB,CAAA;AA2BpD,MAAM,WAAW,mBAAmB;IAClC,iCAAiC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACvB,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAaD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,OAAO,GAAE,mBAAwB,GAChC,aAAa,CAAC,OAAO,CAAC,GAAG,SAAS,CA2CpC"}
+{"version":3,"file":"oauth-env.d.ts","sourceRoot":"","sources":["../src/oauth-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAqDlD,8EAA8E;AAC9E,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAAoD,CAAA;AAkHhG;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,KAAK,EAAE,MAAM,GACZ,aAAa,CAAC,OAAO,CAAC,GAAG,SAAS,CAWpC"}

package/dist/oauth-env.js

@@ -1,78 +1,138 @@
 import { oauthAuth0Provider } from "mcp-use/oauth/auth0";
+import { oauthBetterAuthProvider } from "mcp-use/oauth/better-auth";
+import { oauthConvexProvider } from "mcp-use/oauth/convex";
 import { oauthKeycloakProvider } from "mcp-use/oauth/keycloak";
-import { z } from "zod";
-/** The env vars {@link oauthFromEnv} reads — spread them into the root's known-var list. */
-export const OAUTH_ENV_VARS = ["MCP_OAUTH"];
-const keycloakSchema = z.strictObject({
-    provider: z.literal("keycloak"),
-    serverUrl: z.url(),
-    realm: z.string().min(1),
-});
-const auth0Schema = z.strictObject({
-    provider: z.literal("auth0"),
-    // Bare hostname, no scheme/path — the form mcp-use's provider builds the
-    // issuer from; a scheme-prefixed value would only 401 at the first call.
-    domain: z
-        .string()
-        .min(1)
-        .refine((d) => !d.includes("://") && !d.includes("/"), {
-        message: 'domain must be a bare hostname, e.g. "tenant.eu.auth0.com" (no scheme, no path)',
-    }),
-});
+import { oauthWorkOSProvider } from "mcp-use/oauth/workos";
 /**
- * Strict on purpose: a key the server does not honor (an `audience`, a
- * client secret) fails the boot instead of being dropped silently — a
- * deployment that asked for a check must never come up without it.
+ * Since mcp-use 2.7 `setup(host)` makes `OAuthProvider<TUser>` invariant, so typed providers no
+ * longer widen. Sound: every user went through the provider's `mapAuthInfo` and is read structurally.
  */
-const oauthConfigSchema = z.discriminatedUnion("provider", [keycloakSchema, auth0Schema]);
+const withUnknownUser = (provider) => provider;
 /**
- * The provider in the `unknown` user slot `createComposedServer` takes. Since
- * mcp-use 2.7 the provider's optional `setup(host)` hook takes the user type
- * in parameter position, which makes `OAuthProvider<TUser>` invariant — a
- * Keycloak- or Auth0-typed provider no longer widens on its own. Sound: every
- * user the host hands out went through the provider's own `mapAuthInfo`, and
- * every consumer reads it structurally (`resolveCaller`).
+ * The providers whose factory takes exactly these variables, verifies a JWT over issuer, JWKS and
+ * the RFC 8707 resource, and maps the token's `sub` to `user.id` (what `callerUserId` reads).
  */
-const withUnknownUser = (provider) => provider;
+const PROVIDERS = [
+    {
+        name: "Keycloak",
+        variables: ["MCP_USE_OAUTH_KEYCLOAK_SERVER_URL", "MCP_USE_OAUTH_KEYCLOAK_REALM"],
+        build: ([serverUrl, realm]) => withUnknownUser(oauthKeycloakProvider({ serverUrl, realm })),
+    },
+    {
+        name: "Auth0",
+        variables: ["MCP_USE_OAUTH_AUTH0_DOMAIN"],
+        build: ([domain]) => withUnknownUser(oauthAuth0Provider({ domain })),
+    },
+    {
+        name: "WorkOS",
+        variables: ["MCP_USE_OAUTH_WORKOS_SUBDOMAIN"],
+        build: ([subdomain]) => withUnknownUser(oauthWorkOSProvider({ subdomain })),
+    },
+    {
+        name: "Better Auth",
+        variables: ["MCP_USE_OAUTH_BETTER_AUTH_URL"],
+        build: ([authURL]) => withUnknownUser(oauthBetterAuthProvider({ authURL })),
+    },
+    {
+        name: "Convex",
+        variables: ["MCP_USE_OAUTH_CONVEX_AUTH_URL"],
+        build: ([authURL]) => withUnknownUser(oauthConvexProvider({ authURL })),
+    },
+];
+/** The variables the boot reads for OAuth: every provider's, nothing else. */
+export const OAUTH_ENV_VARS = PROVIDERS.flatMap(({ variables }) => variables);
+/** mcp-use's own switch for logging JWT verification failures; it changes no verdict. */
+const DEBUG_VARIABLE = "MCP_USE_OAUTH_DEBUG";
+/** The retired JSON variable and its look-alikes (the likeliest migration typo). */
+const RETIRED = /^MCP_OAUTH(?:_|$)/;
+/** mcp-use's namespace, which the env typo warner leaves alone. */
+const MCP_USE = "MCP_USE_";
+/** What names OAuth in a variable: the word, or a provider's segment (`KEYCLOAK`, `AUTH0`, …). */
+const OAUTH_WORDS = ["OAUTH", ...new Set(OAUTH_ENV_VARS.map((name) => name.split("_")[3]))];
+const sortedList = (names) => [...names].sort().join(", ");
+/** "is"/"it" for one name, "are"/"them" for several. */
+const grammar = (count) => count === 1 ? { verb: "is", pronoun: "it" } : { verb: "are", pronoun: "them" };
+const joinAlternatives = (items) => `${items.slice(0, -1).join(", ")} or ${items[items.length - 1]}`;
+const PROVIDER_LIST = joinAlternatives(PROVIDERS.map(({ name, variables }) => `${name} (${variables.join(", ")})`));
+const presentNames = (env, matches) => Object.keys(env).filter((name) => env[name] !== undefined && matches(name));
+/** A table variable counts as set only with a value; blank is unset. */
+const valueOf = (env, name) => env[name]?.trim() || undefined;
+function refuseRetired(env) {
+    const retired = presentNames(env, (name) => RETIRED.test(name));
+    if (retired.length === 0)
+        return;
+    const { verb, pronoun } = grammar(retired.length);
+    throw new Error(`${sortedList(retired)} ${verb} no longer read, so the server does not start without the OAuth it asks for. ` +
+        `Unset ${pronoun} and set one provider's MCP_USE_OAUTH_* variables instead: ` +
+        `{"provider":"keycloak",…} becomes MCP_USE_OAUTH_KEYCLOAK_SERVER_URL and MCP_USE_OAUTH_KEYCLOAK_REALM, ` +
+        `{"provider":"auth0",…} becomes MCP_USE_OAUTH_AUTH0_DOMAIN.`);
+}
 /**
- * Builds the mcp-use OAuth provider from `MCP_OAUTH` (`keycloak` or `auth0`).
- * Unset or blank → `undefined` plus ONE boot warning naming what that means:
- * an unauthenticated endpoint, read-only defaults, and no saved settings.
- * Invalid JSON, schema violations and stray `MCP_USE_OAUTH_*` fallbacks throw:
- * a deployment that asked for auth must never silently come up without it.
+ * An `MCP_USE_*` name the boot does not read that asks for OAuth: any other `MCP_USE_OAUTH_*`, or
+ * one naming OAuth or a provider under a misspelled prefix (`MCP_USE_OAUH_KEYCLOAK_REALM`), which
+ * the typo warner never sees, since it leaves all of mcp-use's namespace alone.
  */
-export function oauthFromEnv(options = {}) {
-    const { env = process.env, label = "oauth" } = options;
-    const raw = env.MCP_OAUTH?.trim();
-    if (!raw) {
-        console.warn(`[${label}] MCP_OAUTH is unset — there is no caller identity: modules without an explicit toolset run read-only, and user settings cannot be saved. Set MCP_OAUTH, or widen with MCP_ACTIVE_MODULES=<module>:<toolset> (anyone who reaches this port gets that surface).`);
-        return undefined;
+function unread(name) {
+    if (!name.startsWith(MCP_USE) || name === DEBUG_VARIABLE || OAUTH_ENV_VARS.includes(name)) {
+        return false;
     }
-    let json;
-    try {
-        json = JSON.parse(raw);
+    const rest = name.slice(MCP_USE.length);
+    return OAUTH_WORDS.some((word) => rest.includes(word));
+}
+/**
+ * Reads `process.env` too: mcp-use's Keycloak and Auth0 factories read their `…_AUDIENCE` from
+ * `process.env` whatever the code passes, so a root that hands the boot another `env` object
+ * must not get a moved audience silently. A blank value counts: mcp-use would take it too.
+ */
+function refuseUnread(env) {
+    const names = new Set([...presentNames(env, unread), ...presentNames(process.env, unread)]);
+    if (names.size === 0)
+        return;
+    const { verb, pronoun } = grammar(names.size);
+    throw new Error(`${sortedList(names)} ${verb} not read by this server, so it does not start. ` +
+        `Unset ${pronoun}: the server reads one provider's variables, ${PROVIDER_LIST}, ` +
+        `and takes the token audience from MCP_URL (RFC 8707).`);
+}
+/** The one provider the env asks for, or `undefined` for none; two or an incomplete one throw. */
+function requestedProvider(env) {
+    const requested = PROVIDERS.map((provider) => ({
+        provider,
+        values: provider.variables.map((name) => valueOf(env, name)),
+    })).filter(({ values }) => values.some(Boolean));
+    if (requested.length > 1) {
+        const described = requested.map(({ provider, values }) => `${provider.name} (${provider.variables.filter((_, i) => values[i]).join(", ")})`);
+        throw new Error(`OAuth variables of more than one provider are set: ${described.join(", ")}. Keep the variables of one provider and unset the others.`);
     }
-    catch {
-        throw new Error(`MCP_OAUTH is not valid JSON. Expected e.g. {"provider":"keycloak","serverUrl":"https://kc.example.com","realm":"my-realm"}`);
+    if (requested.length === 0)
+        return undefined;
+    const [{ provider, values }] = requested;
+    const missing = provider.variables.filter((_, i) => !values[i]);
+    if (missing.length > 0) {
+        throw new Error(`${provider.name} OAuth needs ${provider.variables.join(" and ")}, but ${missing.join(" and ")} ${grammar(missing.length).verb} unset.`);
     }
-    const parsed = oauthConfigSchema.safeParse(json);
-    if (!parsed.success) {
-        throw new Error(`MCP_OAUTH is invalid:\n${z.prettifyError(parsed.error)}`);
+    return { provider, values: values };
+}
+function build({ provider, values }) {
+    try {
+        return provider.build(values);
     }
-    // mcp-use's provider factories silently fall back to their own
-    // MCP_USE_OAUTH_* variables for omitted fields — read from `process.env`,
-    // whatever `env` this call was handed. MCP_OAUTH is the single config
-    // surface: fail fast on strays.
-    const strays = Object.keys(process.env).filter((k) => k.startsWith("MCP_USE_OAUTH_"));
-    if (strays.length > 0) {
-        throw new Error(`MCP_OAUTH is the single OAuth config surface — unset ${strays.join(", ")} (mcp-use would silently use them as fallbacks for omitted fields).`);
+    catch (error) {
+        throw new Error(`${provider.name} OAuth (${provider.variables.join(", ")}) is invalid: ${error.message}`, { cause: error });
     }
-    const config = parsed.data;
-    switch (config.provider) {
-        case "keycloak":
-            return withUnknownUser(oauthKeycloakProvider({ serverUrl: config.serverUrl, realm: config.realm }));
-        case "auth0":
-            return withUnknownUser(oauthAuth0Provider({ domain: config.domain }));
+}
+/**
+ * No provider's variables → `undefined` plus ONE boot warning (prefixed with `label`). The retired
+ * variable, a variable this server does not read, two providers, an incomplete or an invalid one
+ * throw: a deployment that asked for auth must never come up without it.
+ */
+export function oauthFromEnv(env, label) {
+    refuseRetired(env);
+    refuseUnread(env);
+    const requested = requestedProvider(env);
+    if (!requested) {
+        console.warn(`[${label}] No OAuth provider is configured (MCP_USE_OAUTH_*), so there is no caller identity: modules without an explicit toolset run read-only. Set one provider's MCP_USE_OAUTH_* variables, or widen with MCP_ACTIVE_MODULES=<module>:<toolset> (anyone who reaches this port gets that surface).`);
+        return undefined;
     }
+    return build(requested);
 }
 //# sourceMappingURL=oauth-env.js.map

package/dist/oauth-env.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-env.js","sourceRoot":"","sources":["../src/oauth-env.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,4FAA4F;AAC5F,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,WAAW,CAAU,CAAA;AAEpD,MAAM,cAAc,GAAG,CAAC,CAAC,YAAY,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzB,CAAC,CAAA;AAEF,MAAM,WAAW,GAAG,CAAC,CAAC,YAAY,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC5B,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;QACrD,OAAO,EAAE,iFAAiF;KAC3F,CAAC;CACL,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,CAAC,CAAC,kBAAkB,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CAAA;AASzF;;;;;;;GAOG;AACH,MAAM,eAAe,GAAG,CAAQ,QAA8B,EAA0B,EAAE,CACxF,QAA6C,CAAA;AAE/C;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAC1B,UAA+B,EAAE;IAEjC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,GAAG,OAAO,EAAE,GAAG,OAAO,CAAA;IACtD,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,CAAA;IACjC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,IAAI,CACV,IAAI,KAAK,gQAAgQ,CAC1Q,CAAA;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,IAAI,IAAa,CAAA;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,4HAA4H,CAC7H,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC5E,CAAC;IAED,+DAA+D;IAC/D,0EAA0E;IAC1E,sEAAsE;IACtE,gCAAgC;IAChC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAA;IACrF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,wDAAwD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qEAAqE,CAC/I,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAA;IAC1B,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,KAAK,UAAU;YACb,OAAO,eAAe,CACpB,qBAAqB,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAC5E,CAAA;QACH,KAAK,OAAO;YACV,OAAO,eAAe,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IACzE,CAAC;AACH,CAAC"}
+{"version":3,"file":"oauth-env.js","sourceRoot":"","sources":["../src/oauth-env.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAA;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAE1D;;;GAGG;AACH,MAAM,eAAe,GAAG,CAAQ,QAA8B,EAA0B,EAAE,CACxF,QAA6C,CAAA;AAS/C;;;GAGG;AACH,MAAM,SAAS,GAA4B;IACzC;QACE,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,CAAC,mCAAmC,EAAE,8BAA8B,CAAC;QAChF,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;KAC5F;IACD;QACE,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,CAAC,4BAA4B,CAAC;QACzC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;KACrE;IACD;QACE,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,CAAC,gCAAgC,CAAC;QAC7C,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;KAC5E;IACD;QACE,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,CAAC,+BAA+B,CAAC;QAC5C,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,uBAAuB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;KAC5E;IACD;QACE,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,CAAC,+BAA+B,CAAC;QAC5C,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;KACxE;CACF,CAAA;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,cAAc,GAAsB,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CAAA;AAEhG,yFAAyF;AACzF,MAAM,cAAc,GAAG,qBAAqB,CAAA;AAC5C,oFAAoF;AACpF,MAAM,OAAO,GAAG,mBAAmB,CAAA;AACnC,mEAAmE;AACnE,MAAM,OAAO,GAAG,UAAU,CAAA;AAC1B,kGAAkG;AAClG,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAE3F,MAAM,UAAU,GAAG,CAAC,KAAuB,EAAU,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAEpF,wDAAwD;AACxD,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE,CAChC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;AAEhF,MAAM,gBAAgB,GAAG,CAAC,KAAwB,EAAU,EAAE,CAC5D,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAA;AAElE,MAAM,aAAa,GAAG,gBAAgB,CACpC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAC5E,CAAA;AAED,MAAM,YAAY,GAAG,CAAC,GAAsB,EAAE,OAAkC,EAAY,EAAE,CAC5F,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;AAE7E,wEAAwE;AACxE,MAAM,OAAO,GAAG,CAAC,GAAsB,EAAE,IAAY,EAAsB,EAAE,CAC3E,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAA;AAEhC,SAAS,aAAa,CAAC,GAAsB;IAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAChC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACjD,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,+EAA+E;QAC3G,SAAS,OAAO,6DAA6D;QAC7E,wGAAwG;QACxG,4DAA4D,CAC/D,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,cAAc,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1F,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACvC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;AACxD,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,GAAsB;IAC1C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;IAC3F,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,OAAM;IAC5B,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC7C,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,kDAAkD;QAC5E,SAAS,OAAO,gDAAgD,aAAa,IAAI;QACjF,uDAAuD,CAC1D,CAAA;AACH,CAAC;AAOD,kGAAkG;AAClG,SAAS,iBAAiB,CAAC,GAAsB;IAC/C,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7C,QAAQ;QACR,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;KAC7D,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IAChD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAC7B,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CACvB,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACpF,CAAA;QACD,MAAM,IAAI,KAAK,CACb,sDAAsD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,4DAA4D,CACvI,CAAA;IACH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAC5C,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,GAAG,SAAS,CAAA;IACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,CAAC,IAAI,gBAAgB,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,SAAS,CACxI,CAAA;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAkB,EAAE,CAAA;AACjD,CAAC;AAED,SAAS,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAa;IAC5C,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,CAAC,IAAI,WAAW,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAkB,KAAe,CAAC,OAAO,EAAE,EACnG,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,GAAsB,EACtB,KAAa;IAEb,aAAa,CAAC,GAAG,CAAC,CAAA;IAClB,YAAY,CAAC,GAAG,CAAC,CAAA;IACjB,MAAM,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CACV,IAAI,KAAK,6RAA6R,CACvS,CAAA;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,KAAK,CAAC,SAAS,CAAC,CAAA;AACzB,CAAC"}

package/dist/protocol/bpmn-names.d.ts

@@ -0,0 +1,19 @@
+/**
+ * One BPMN name reader for server and browser, so no two modules name a process differently.
+ * The Camunda Modeler names the POOL, not the process, and writes `&`, line breaks etc. as numeric
+ * character references; a reader that missed either would show the key or the raw reference.
+ */
+export interface BpmnNames {
+    /** Else the name of the pool that holds it. */
+    name: string | null;
+    elements: Record<string, string>;
+}
+export interface BpmnModelNames {
+    processes: Record<string, string>;
+    elements: Record<string, string>;
+}
+/** A document that is not BPMN yields no names, never an error. */
+export declare function readBpmnNames(xml: string): BpmnModelNames;
+export declare function bpmnProcessNameOf(names: BpmnModelNames, processDefinitionKey: string): string | null;
+export declare function parseBpmnNames(xml: string, processDefinitionKey: string): BpmnNames;
+//# sourceMappingURL=bpmn-names.d.ts.map

package/dist/protocol/bpmn-names.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bpmn-names.d.ts","sourceRoot":"","sources":["../../src/protocol/bpmn-names.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,SAAS;IACxB,+CAA+C;IAC/C,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACjC;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACjC;AAoFD,mEAAmE;AACnE,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAqBzD;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,cAAc,EACrB,oBAAoB,EAAE,MAAM,GAC3B,MAAM,GAAG,IAAI,CAIf;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAGnF"}