@moltzap/client 2026.1001.2 → 2026.1004.0

package/dist/endpoint/mcp/event-schemas.js

@@ -0,0 +1,72 @@
+/** @file Shared schema and ports for the experimental MCP Events edge. */
+import { fromJsonSchema, } from "@modelcontextprotocol/server";
+import { JSONSchema, Schema } from "effect";
+/** Maximum complete UTF-8 callback body accepted by the event transport. */
+export const maximumEventBytes = 256 * 1024;
+/** Callback failures expose no upstream response or destination details. */
+export const callbackReasons = [
+    "connection_refused",
+    "timeout",
+    "tls_error",
+    "http_4xx",
+    "http_5xx",
+    "challenge_failed",
+];
+/** Owner-visible diagnostics omit callback addresses and signing authority. */
+const webhookStatusSchema = Schema.Struct({
+    mode: Schema.Literal("none", "push", "webhook"),
+    id: Schema.optional(Schema.String),
+    refreshBefore: Schema.optional(Schema.String),
+    pendingCount: Schema.optional(Schema.NonNegativeInt),
+    stalled: Schema.optional(Schema.NullOr(Schema.Literal("callback", "terminal"))),
+    lastError: Schema.optional(Schema.NullOr(Schema.Literal(...callbackReasons))),
+});
+/** JSON Schema for the owner-only, secret-free event status tool. */
+export const webhookStatusJsonSchema = JSONSchema.make(webhookStatusSchema, {
+    target: "jsonSchema2020-12",
+});
+const emptyArguments = Schema.Record({
+    key: Schema.String,
+    value: Schema.Never,
+});
+/** An absent cursor has the draft's explicit null meaning. */
+const subscriptionSchema = Schema.Struct({
+    name: Schema.String,
+    arguments: emptyArguments,
+    cursor: Schema.optionalWith(Schema.NullOr(Schema.String), { exact: true }),
+    maxAgeMs: Schema.optionalWith(Schema.NonNegativeInt, { exact: true }),
+});
+/** Catalog pagination uses its own cursor rather than event replay state. */
+const listSchema = Schema.Struct({
+    cursor: Schema.optionalWith(Schema.String, { exact: true }),
+});
+/** Delivery policy checks follow SDK shape validation. */
+const subscribeSchema = Schema.Struct({
+    ...subscriptionSchema.fields,
+    delivery: Schema.Struct({
+        mode: Schema.String,
+        url: Schema.String,
+        secret: Schema.String,
+    }),
+    ttlMs: Schema.optionalWith(Schema.NullOr(Schema.NonNegativeInt), {
+        exact: true,
+    }),
+});
+/** Cleanup identifies the registration without disclosing its signing secret. */
+const unsubscribeSchema = Schema.Struct({
+    name: Schema.String,
+    arguments: emptyArguments,
+    delivery: Schema.Struct({ url: Schema.String }),
+});
+const standard = (schema) => fromJsonSchema(
+// eslint-disable-next-line agent-code-guard/require-assertion-rationale -- Effect emits the JSON Schema object consumed by the pinned official SDK.
+JSONSchema.make(schema, { target: "jsonSchema2020-12" }));
+/** SDK boundary validation keeps schema constructors private. */
+export const eventStreamInput = standard(subscriptionSchema);
+/** The event catalog has its own pagination grammar. */
+export const eventListInput = standard(listSchema);
+/** Callback registration includes the signing authority and lease request. */
+export const eventSubscribeInput = standard(subscribeSchema);
+/** Cleanup uses only the subscription's public key fields. */
+export const eventUnsubscribeInput = standard(unsubscribeSchema);
+//# sourceMappingURL=event-schemas.js.map

package/dist/endpoint/mcp/event-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-schemas.js","sourceRoot":"","sources":["../../../src/endpoint/mcp/event-schemas.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,OAAO,EACL,cAAc,GAGf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAe,UAAU,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACzD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC;AAE5C,4EAA4E;AAC5E,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,oBAAoB;IACpB,SAAS;IACT,WAAW;IACX,UAAU;IACV,UAAU;IACV,kBAAkB;CACV,CAAC;AACX,+EAA+E;AAC/E,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC;IAC/C,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IAClC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IAC7C,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC;IACpD,OAAO,EAAE,MAAM,CAAC,QAAQ,CACtB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CACtD;IACD,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC;CAC9E,CAAC,CAAC;AAKH,qEAAqE;AACrE,MAAM,CAAC,MAAM,uBAAuB,GAAG,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE;IAC1E,MAAM,EAAE,mBAAmB;CAC5B,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;IACnC,GAAG,EAAE,MAAM,CAAC,MAAM;IAClB,KAAK,EAAE,MAAM,CAAC,KAAK;CACpB,CAAC,CAAC;AACH,8DAA8D;AAC9D,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,SAAS,EAAE,cAAc;IACzB,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC1E,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;CACtE,CAAC,CAAC;AACH,6EAA6E;AAC7E,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;CAC5D,CAAC,CAAC;AACH,0DAA0D;AAC1D,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,GAAG,kBAAkB,CAAC,MAAM;IAC5B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,GAAG,EAAE,MAAM,CAAC,MAAM;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;IACF,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE;QAC/D,KAAK,EAAE,IAAI;KACZ,CAAC;CACH,CAAC,CAAC;AACH,iFAAiF;AACjF,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,SAAS,EAAE,cAAc;IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;CAChD,CAAC,CAAC;AAgCH,MAAM,QAAQ,GAAG,CAAO,MAA2B,EAAE,EAAE,CACrD,cAAc;AACZ,oJAAoJ;AACpJ,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAmB,CAC3E,CAAC;AAIJ,iEAAiE;AACjE,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AAC7D,wDAAwD;AACxD,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;AACnD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,mBAAmB,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;AAC7D,8DAA8D;AAC9D,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAAC,iBAAiB,CAAC,CAAC"}

package/dist/endpoint/mcp/event-signing.d.ts

@@ -0,0 +1,62 @@
+/** @file MCP Events signing and callback policy on the Effect HTTP client. */
+import { HttpClient } from "@effect/platform";
+import { Effect, Layer } from "effect";
+/** Closed callback diagnostics, never an upstream body, header or network address. */
+export type WebhookFailureReason = "connection_refused" | "timeout" | "tls_error" | "http_4xx" | "http_5xx" | "challenge_failed";
+declare const WebhookCallbackError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "WebhookCallbackError";
+} & Readonly<A>;
+/** Expected callback failure safe to report in the Events protocol. */
+export declare class WebhookCallbackError extends WebhookCallbackError_base<{
+    readonly reason: WebhookFailureReason;
+    readonly discardOccurrence?: boolean;
+}> {
+}
+/** One immutable event or verification body, signed separately on each attempt. */
+export interface WebhookPost {
+    readonly url: string;
+    readonly secret: string;
+    readonly messageId: string;
+    readonly subscriptionId: string;
+    readonly body: string;
+    readonly timestamp: number;
+}
+/**
+ * Exclude local, mapped, transition, reserved and documentation destinations.
+ * @param address One resolved literal address, never a hostname.
+ * @returns Whether the callback may connect directly to this address.
+ */
+export declare const isPublicWebhookAddress: (address: string) => boolean;
+/**
+ * Validate the URL before either verification or delivery can open a connection.
+ * @param value Callback URL supplied by the authenticated subscriber.
+ * @returns A canonical HTTPS URL without embedded authority or fragments.
+ */
+export declare const webhookUrl: (value: string) => URL | undefined;
+/**
+ * Validate the Standard Webhooks secret without retaining an alternate spelling.
+ * @param secret Client-generated symmetric signing secret.
+ * @returns Whether it contains canonical base64 of 24 through 64 bytes.
+ */
+export declare const validWebhookSecret: (secret: string) => boolean;
+/**
+ * Effect owns sockets, interruption and response decoding. Connection-time DNS
+ * validation retains the original Host and TLS name without a second lookup.
+ * Keep-alive is disabled so each delivery attempts a fresh validated connection.
+ * Redirect following is not installed on this client.
+ */
+export declare const webhookHttpClientLayer: Layer.Layer<HttpClient.HttpClient, never, never>;
+/**
+ * Read only the challenge response, with Effect closing the connection on exit.
+ * @param post Signed verification request with its challenge.
+ * @returns Bounded response text for challenge validation.
+ */
+export declare const readWebhookChallenge: (post: WebhookPost) => Effect.Effect<string, WebhookCallbackError, HttpClient.HttpClient>;
+/**
+ * A 2xx response accepts transport delivery; its body cannot change that receipt.
+ * @param post Exact retained event bytes and current signing metadata.
+ * @returns Completion at successful headers, with Effect closing the response.
+ */
+export declare const sendWebhook: (post: WebhookPost) => Effect.Effect<void, WebhookCallbackError, HttpClient.HttpClient>;
+export {};
+//# sourceMappingURL=event-signing.d.ts.map

package/dist/endpoint/mcp/event-signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-signing.d.ts","sourceRoot":"","sources":["../../../src/endpoint/mcp/event-signing.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,EACL,UAAU,EAIX,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAQ,MAAM,EAAE,KAAK,EAAsB,MAAM,QAAQ,CAAC;AAMjE,sFAAsF;AACtF,MAAM,MAAM,oBAAoB,GAC5B,oBAAoB,GACpB,SAAS,GACT,WAAW,GACX,UAAU,GACV,UAAU,GACV,kBAAkB,CAAC;;;;AAEvB,uEAAuE;AACvE,qBAAa,oBAAqB,SAAQ,0BAExC;IACA,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC,CAAC;CAAG;AAEL,mFAAmF;AACnF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAgCD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,YAAa,MAAM,KAAG,OAOxD,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,UAAU,UAAW,MAAM,KAAG,GAAG,GAAG,SAWhD,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,WAAY,MAAM,KAAG,OAWnD,CAAC;AAkDF;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,kDAIlC,CAAC;AA2EF;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,SACzB,WAAW,KAChB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,UAAU,CAAC,UAAU,CASnB,CAAC;AAElD;;;;GAIG;AACH,eAAO,MAAM,WAAW,SAChB,WAAW,KAChB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,oBAAoB,EAAE,UAAU,CAAC,UAAU,CAG/D,CAAC"}

package/dist/endpoint/mcp/event-signing.js

@@ -0,0 +1,185 @@
+/** @file MCP Events signing and callback policy on the Effect HTTP client. */
+import { HttpClient, HttpClientRequest, HttpIncomingMessage, } from "@effect/platform";
+import { NodeHttpClient } from "@effect/platform-node";
+import { Data, Effect, Layer, Option } from "effect";
+import { createHmac } from "node:crypto";
+import { lookup } from "node:dns";
+import { BlockList, isIP } from "node:net";
+import { maximumEventBytes } from "./event-schemas.js";
+/** Expected callback failure safe to report in the Events protocol. */
+export class WebhookCallbackError extends Data.TaggedError("WebhookCallbackError") {
+}
+/* eslint-disable sonarjs/no-hardcoded-ip -- These are excluded address ranges for callback SSRF defense, never configured endpoints. */
+const blockedV4 = new BlockList();
+for (const [address, prefix] of [
+    ["0.0.0.0", 8],
+    ["10.0.0.0", 8],
+    ["100.64.0.0", 10],
+    ["127.0.0.0", 8],
+    ["169.254.0.0", 16],
+    ["172.16.0.0", 12],
+    ["192.0.0.0", 24],
+    ["192.0.2.0", 24],
+    ["192.88.99.0", 24],
+    ["192.168.0.0", 16],
+    ["198.18.0.0", 15],
+    ["198.51.100.0", 24],
+    ["203.0.113.0", 24],
+    ["224.0.0.0", 4],
+    ["240.0.0.0", 4],
+]) {
+    blockedV4.addSubnet(address, prefix, "ipv4");
+}
+const globalV6 = new BlockList();
+globalV6.addSubnet("2000::", 3, "ipv6");
+const blockedV6 = new BlockList();
+blockedV6.addSubnet("2001::", 23, "ipv6");
+blockedV6.addSubnet("2001:db8::", 32, "ipv6");
+blockedV6.addSubnet("2002::", 16, "ipv6");
+blockedV6.addSubnet("3fff::", 20, "ipv6");
+/* eslint-enable sonarjs/no-hardcoded-ip -- Restore endpoint address checks outside the exclusion table. */
+/**
+ * Exclude local, mapped, transition, reserved and documentation destinations.
+ * @param address One resolved literal address, never a hostname.
+ * @returns Whether the callback may connect directly to this address.
+ */
+export const isPublicWebhookAddress = (address) => {
+    const family = isIP(address);
+    return family === 4
+        ? !blockedV4.check(address, "ipv4")
+        : family === 6 &&
+            globalV6.check(address, "ipv6") &&
+            !blockedV6.check(address, "ipv6");
+};
+/**
+ * Validate the URL before either verification or delivery can open a connection.
+ * @param value Callback URL supplied by the authenticated subscriber.
+ * @returns A canonical HTTPS URL without embedded authority or fragments.
+ */
+export const webhookUrl = (value) => {
+    if (!URL.canParse(value)) {
+        return undefined;
+    }
+    const url = new URL(value);
+    if (url.protocol !== "https:") {
+        return undefined;
+    }
+    return url.username === "" && url.password === "" && url.hash === ""
+        ? url
+        : undefined;
+};
+/**
+ * Validate the Standard Webhooks secret without retaining an alternate spelling.
+ * @param secret Client-generated symmetric signing secret.
+ * @returns Whether it contains canonical base64 of 24 through 64 bytes.
+ */
+export const validWebhookSecret = (secret) => {
+    if (!secret.startsWith("whsec_")) {
+        return false;
+    }
+    const encoded = secret.slice("whsec_".length);
+    const bytes = Buffer.from(encoded, "base64");
+    return (bytes.length >= 24 &&
+        bytes.length <= 64 &&
+        bytes.toString("base64") === encoded);
+};
+/**
+ * Sign the exact retained body with a fresh delivery timestamp.
+ * @param post Immutable message identity and body plus current signing authority.
+ * @returns Standard Webhooks headers and the MCP subscription routing identity.
+ */
+const webhookHeaders = (post) => {
+    const timestamp = String(Math.floor(post.timestamp / 1000));
+    const signature = createHmac("sha256", Buffer.from(post.secret.slice("whsec_".length), "base64"))
+        .update(`${post.messageId}.${timestamp}.${post.body}`)
+        .digest("base64");
+    return {
+        "content-type": "application/json",
+        "webhook-id": post.messageId,
+        "webhook-timestamp": timestamp,
+        "webhook-signature": `v1,${signature}`,
+        "x-mcp-subscription-id": post.subscriptionId,
+    };
+};
+const callbackFailure = (reason) => new WebhookCallbackError({ reason });
+/** Node's connection-time resolver validates every address before selecting one. */
+const publicLookup = (hostname, options, callback) => {
+    lookup(hostname, { all: true, verbatim: true }, (error, addresses) => {
+        if (error !== null) {
+            callback(new Error("Callback address unavailable"), "", 4);
+            return;
+        }
+        const first = addresses[0];
+        if (first === undefined ||
+            !addresses.every(({ address }) => isPublicWebhookAddress(address))) {
+            callback(new Error("Callback address unavailable"), "", 4);
+        }
+        else if (options.all === true) {
+            callback(null, addresses);
+        }
+        else {
+            callback(null, first.address, first.family);
+        }
+    });
+};
+/**
+ * Effect owns sockets, interruption and response decoding. Connection-time DNS
+ * validation retains the original Host and TLS name without a second lookup.
+ * Keep-alive is disabled so each delivery attempts a fresh validated connection.
+ * Redirect following is not installed on this client.
+ */
+export const webhookHttpClientLayer = NodeHttpClient.layerWithoutAgent.pipe(Layer.provide(NodeHttpClient.makeAgentLayer({ keepAlive: false, lookup: publicLookup })));
+const validatePost = (post) => Effect.gen(function* () {
+    const url = webhookUrl(post.url);
+    if (url === undefined ||
+        !validWebhookSecret(post.secret) ||
+        Buffer.byteLength(post.body, "utf8") > maximumEventBytes) {
+        return yield* Effect.fail(callbackFailure("connection_refused"));
+    }
+    const host = url.hostname.replace(/^\[|\]$/gu, "");
+    if (isIP(host) !== 0 && !isPublicWebhookAddress(host)) {
+        return yield* Effect.fail(callbackFailure("connection_refused"));
+    }
+    return url;
+});
+const transportFailure = (cause) => {
+    if (!(cause instanceof Error) ||
+        !("code" in cause) ||
+        typeof cause.code !== "string") {
+        return callbackFailure("connection_refused");
+    }
+    return callbackFailure(cause.code.includes("TLS") || cause.code.includes("CERT")
+        ? "tls_error"
+        : "connection_refused");
+};
+const executeWebhook = (post) => Effect.gen(function* () {
+    const url = yield* validatePost(post);
+    const client = yield* HttpClient.HttpClient;
+    const response = yield* HttpClient.withScope(client)
+        .execute(HttpClientRequest.post(url).pipe(HttpClientRequest.bodyText(post.body, "application/json"), HttpClientRequest.setHeaders(webhookHeaders(post))))
+        .pipe(Effect.mapError((error) => transportFailure(error.cause)));
+    if (response.status < 200 || response.status >= 300) {
+        return yield* Effect.fail(new WebhookCallbackError({
+            reason: response.status >= 500 ? "http_5xx" : "http_4xx",
+            discardOccurrence: response.status === 410 || response.status === 413,
+        }));
+    }
+    return response;
+});
+const boundedCallback = (operation) => Effect.scoped(operation).pipe(Effect.timeoutFail({
+    duration: "5 seconds",
+    onTimeout: () => callbackFailure("timeout"),
+}));
+/**
+ * Read only the challenge response, with Effect closing the connection on exit.
+ * @param post Signed verification request with its challenge.
+ * @returns Bounded response text for challenge validation.
+ */
+export const readWebhookChallenge = (post) => boundedCallback(executeWebhook(post).pipe(Effect.flatMap((response) => response.text), HttpIncomingMessage.withMaxBodySize(Option.some(4096)), Effect.catchTag("ResponseError", () => Effect.fail(callbackFailure("challenge_failed"))))).pipe(Effect.withSpan("readWebhookChallenge"));
+/**
+ * A 2xx response accepts transport delivery; its body cannot change that receipt.
+ * @param post Exact retained event bytes and current signing metadata.
+ * @returns Completion at successful headers, with Effect closing the response.
+ */
+export const sendWebhook = (post) => boundedCallback(executeWebhook(post).pipe(Effect.asVoid)).pipe(Effect.withSpan("sendWebhook"));
+//# sourceMappingURL=event-signing.js.map

package/dist/endpoint/mcp/event-signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-signing.js","sourceRoot":"","sources":["../../../src/endpoint/mcp/event-signing.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,EACL,UAAU,EACV,iBAAiB,EAEjB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAc,MAAM,QAAQ,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAuB,MAAM,UAAU,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAWvD,uEAAuE;AACvE,MAAM,OAAO,oBAAqB,SAAQ,IAAI,CAAC,WAAW,CACxD,sBAAsB,CAItB;CAAG;AAYL,wIAAwI;AACxI,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;AAClC,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI;IAC9B,CAAC,SAAS,EAAE,CAAC,CAAC;IACd,CAAC,UAAU,EAAE,CAAC,CAAC;IACf,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,WAAW,EAAE,CAAC,CAAC;IAChB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,WAAW,EAAE,EAAE,CAAC;IACjB,CAAC,WAAW,EAAE,EAAE,CAAC;IACjB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,cAAc,EAAE,EAAE,CAAC;IACpB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,WAAW,EAAE,CAAC,CAAC;IAChB,CAAC,WAAW,EAAE,CAAC,CAAC;CACkC,EAAE,CAAC;IACrD,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC/C,CAAC;AACD,MAAM,QAAQ,GAAG,IAAI,SAAS,EAAE,CAAC;AACjC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AACxC,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;AAClC,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AAC1C,SAAS,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AAC9C,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AAC1C,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AAC1C,2GAA2G;AAE3G;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,OAAe,EAAW,EAAE;IACjE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,MAAM,KAAK,CAAC;QACjB,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;QACnC,CAAC,CAAC,MAAM,KAAK,CAAC;YACV,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;YAC/B,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAa,EAAmB,EAAE;IAC3D,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE;QAClE,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,MAAc,EAAW,EAAE;IAC5D,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7C,OAAO,CACL,KAAK,CAAC,MAAM,IAAI,EAAE;QAClB,KAAK,CAAC,MAAM,IAAI,EAAE;QAClB,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,OAAO,CACrC,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,cAAc,GAAG,CACrB,IAAiB,EACiB,EAAE;IACpC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,UAAU,CAC1B,QAAQ,EACR,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAC1D;SACE,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;SACrD,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpB,OAAO;QACL,cAAc,EAAE,kBAAkB;QAClC,YAAY,EAAE,IAAI,CAAC,SAAS;QAC5B,mBAAmB,EAAE,SAAS;QAC9B,mBAAmB,EAAE,MAAM,SAAS,EAAE;QACtC,uBAAuB,EAAE,IAAI,CAAC,cAAc;KAC7C,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,MAA4B,EAAE,EAAE,CACvD,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAEvC,oFAAoF;AACpF,MAAM,YAAY,GAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;IACnE,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;QACnE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC3B,IACE,KAAK,KAAK,SAAS;YACnB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,EAClE,CAAC;YACD,QAAQ,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC;aAAM,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,cAAc,CAAC,iBAAiB,CAAC,IAAI,CACzE,KAAK,CAAC,OAAO,CACX,cAAc,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAC1E,CACF,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,IAAiB,EAAE,EAAE,CACzC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,IACE,GAAG,KAAK,SAAS;QACjB,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;QAChC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,iBAAiB,EACxD,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC,CAAC;AACL,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAE,EAAE;IAC1C,IACE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;QACzB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAC9B,CAAC;QACD,OAAO,eAAe,CAAC,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,eAAe,CACpB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACvD,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,oBAAoB,CACzB,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,IAAiB,EAKjB,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC;SACjD,OAAO,CACN,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAC9B,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,EACzD,iBAAiB,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CACnD,CACF;SACA,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,oBAAoB,CAAC;YACvB,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;YACxD,iBAAiB,EAAE,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;SACtE,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC,CAAC;AACL,MAAM,eAAe,GAAG,CACtB,SAIC,EACD,EAAE,CACF,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAC3B,MAAM,CAAC,WAAW,CAAC;IACjB,QAAQ,EAAE,WAAW;IACrB,SAAS,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC;CAC5C,CAAC,CACH,CAAC;AAEJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,IAAiB,EACmD,EAAE,CACtE,eAAe,CACb,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,CACvB,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC3C,mBAAmB,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EACtD,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE,CACpC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC,CACjD,CACF,CACF,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAElD;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,IAAiB,EACiD,EAAE,CACpE,eAAe,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAC5D,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAC/B,CAAC"}

package/dist/endpoint/mcp/events.d.ts

@@ -0,0 +1,45 @@
+/** @file Pinned MCP Events discovery and request-scoped push delivery. */
+import { type McpServer, ProtocolError } from "@modelcontextprotocol/server";
+import { Effect } from "effect";
+import type { InboxSummary } from "../../store/index.js";
+import { type HarnessWebhookEvents, type WebhookStatus } from "./event-schemas.js";
+/** Durable callback delivery shares this consumer boundary. */
+export { makeWebhookEvents } from "./webhook.js";
+/** Owner-only diagnostics use the same closed status schema. */
+export { webhookStatusJsonSchema } from "./event-schemas.js";
+/** Effect HTTP connection policy for callback delivery. */
+export { webhookHttpClientLayer } from "./event-signing.js";
+interface EventsOptions {
+    readonly summary: () => Effect.Effect<InboxSummary, {
+        readonly reason: string;
+    }>;
+    readonly registered: () => boolean;
+    readonly gate: Effect.Semaphore;
+    readonly webhook?: HarnessWebhookEvents;
+    readonly keepAliveMillis?: number;
+    readonly onActiveChange?: (active: boolean) => void;
+}
+/** Official SDK request handlers and the daemon's content-free wakeup edge. */
+export interface HarnessEvents {
+    readonly install: (server: McpServer["server"], principal?: string) => void;
+    readonly hasActiveSubscription: () => boolean;
+    readonly notifyPending: () => boolean;
+    readonly close: Effect.Effect<void>;
+    readonly status: Effect.Effect<WebhookStatus, ProtocolError>;
+    readonly revoke: Effect.Effect<void, ProtocolError>;
+    readonly resume: Effect.Effect<void, ProtocolError>;
+}
+/**
+ * Preserve the draft's protocol errors across the Effect and SDK boundary.
+ * @param operation Validated Events operation.
+ * @param signal Cancellation owned by the MCP request.
+ * @returns The SDK result or a sanitized protocol exception.
+ */
+export declare const runEventOperation: <A, E>(operation: Effect.Effect<A, E>, signal: AbortSignal) => Promise<A>;
+/**
+ * Own one consumer while the official SDK handles request validation and framing.
+ * @param options Classified inbox counters, callback edge and lifecycle.
+ * @returns SDK installers and an explicit close for retained event resources.
+ */
+export declare const makeHarnessEvents: (options: EventsOptions) => Effect.Effect<HarnessEvents>;
+//# sourceMappingURL=events.d.ts.map

package/dist/endpoint/mcp/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../src/endpoint/mcp/events.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,OAAO,EACL,KAAK,SAAS,EACd,aAAa,EAGd,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAmB,MAAM,EAA8B,MAAM,QAAQ,CAAC;AAE7E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAQL,KAAK,oBAAoB,EACzB,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAC;AAM5B,+DAA+D;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,gEAAgE;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,2DAA2D;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAU5D,UAAU,aAAa;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,MAAM,CAAC,MAAM,CACnC,YAAY,EACZ;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAC5B,CAAC;IACF,QAAQ,CAAC,UAAU,EAAE,MAAM,OAAO,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;CACrD;AAED,+EAA+E;AAC/E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5E,QAAQ,CAAC,qBAAqB,EAAE,MAAM,OAAO,CAAC;IAC9C,QAAQ,CAAC,aAAa,EAAE,MAAM,OAAO,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;CACrD;AAwDD;;;;;GAKG;AAEH,eAAO,MAAM,iBAAiB,GAAU,CAAC,EAAE,CAAC,aAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,UACtB,WAAW,eAYpB,CAAC;AAyVF;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,YACnB,aAAa,KACrB,MAAM,CAAC,MAAM,CAAC,aAAa,CA0BiB,CAAC"}