@obov/mext 0.5.0 → 0.6.0

package/dist/config.js

@@ -6,14 +6,16 @@ var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExte
     }
     return path;
 };
+import { approvalConfigProblem } from "./approval.js";
 import { existsSync } from "node:fs";
 import { join, resolve } from "node:path";
 import { pathToFileURL } from "node:url";
+import { auditConfigProblem } from "./audit.js";
 import { isSegment } from "./ids.js";
-import { localPrincipal } from "./principal.js";
+import { assertCallerFields, callerFieldsProblem, localPrincipal } from "./principal.js";
 import { stateProblem } from "./state.js";
 export const CONFIG_FILE = "mext.config.ts";
-const CONFIG_KEYS = ["commandsDir", "app", "auth", "tools", "server", "oauth", "localPrincipal", "cli", "mcp", "secret", "state", "resourcesDir", "routesDir", "promptsDir"];
+const CONFIG_KEYS = ["commandsDir", "app", "auth", "tools", "server", "oauth", "localPrincipal", "cli", "mcp", "secret", "state", "resourcesDir", "routesDir", "promptsDir", "audit", "approval", "types"];
 /** secret 최소 길이 (바이트, HMAC-SHA256 키) */
 export const SECRET_MIN_BYTES = 32;
 /** secret 환경변수 */
@@ -52,12 +54,19 @@ export function resolvePromptsDir(cwd, config) {
 export function resolveRoutesDir(cwd, config) {
     return resolve(cwd, config.routesDir ?? "routes");
 }
-/** 로컬 실행 주체: config.localPrincipal (값 · 함수) 또는 localPrincipal() */
-export async function resolveLocalPrincipal(config) {
+/**
+ * 로컬 실행 주체: config.localPrincipal (값 · 함수) 또는 localPrincipal().
+ * surface = 어댑터 기본 표면 (함수 인자). 함수 결과의 actor · surface 형식 오류 = TypeError
+ */
+export async function resolveLocalPrincipal(config, surface = "cli") {
     const p = config.localPrincipal;
     if (p === undefined)
         return localPrincipal();
-    return typeof p === "function" ? await p() : p;
+    if (typeof p !== "function")
+        return p;
+    const principal = await p({ surface });
+    assertCallerFields(principal, "localPrincipal");
+    return principal;
 }
 /**
  * 서버 비밀: config.secret > MEXT_SECRET > undefined (프로세스별 임의 키).
@@ -73,7 +82,7 @@ export function resolveSecret(config, env = process.env) {
         throw new TypeError(`${SECRET_ENV} must be at least ${SECRET_MIN_BYTES} bytes`);
     return value;
 }
-/** 서버 선언 (모든 transport): config.mcp 의 name · instructions · capabilities + secret (requestStateKey) + state. onConnect 는 stdio 만 따로 */
+/** 서버 선언 (모든 transport): config.mcp 의 name · instructions · capabilities + secret (requestStateKey) + state + audit. onConnect 는 stdio 만 따로 */
 export function mcpDeclarations(config, env = process.env) {
     const mcp = config.mcp;
     const secret = resolveSecret(config, env);
@@ -83,6 +92,8 @@ export function mcpDeclarations(config, env = process.env) {
         ...(mcp?.capabilities !== undefined ? { capabilities: mcp.capabilities } : {}),
         ...(secret !== undefined ? { requestStateKey: secret } : {}),
         ...(config.state !== undefined ? { state: config.state } : {}),
+        ...(config.audit !== undefined ? { audit: config.audit } : {}),
+        ...(config.approval !== undefined ? { approval: config.approval } : {}),
     };
 }
 /** stdio 옵션 = 선언 + onConnect */
@@ -132,6 +143,9 @@ function validateConfig(value) {
         fail("routesDir must be a string");
     if (c.promptsDir !== undefined && typeof c.promptsDir !== "string")
         fail("promptsDir must be a string");
+    if (c.types !== undefined && typeof c.types !== "boolean" && (typeof c.types !== "string" || !c.types.endsWith(".ts"))) {
+        fail('types must be true or a .ts file path (e.g. "./mext.gen.ts")');
+    }
     if (c.app !== undefined && typeof c.app !== "function")
         fail("app must be a function");
     if (c.auth !== undefined && typeof c.auth !== "function")
@@ -159,6 +173,16 @@ function validateConfig(value) {
         if (problem !== undefined)
             fail(problem);
     }
+    if (c.audit !== undefined) {
+        const problem = auditConfigProblem(c.audit);
+        if (problem !== undefined)
+            fail(problem);
+    }
+    if (c.approval !== undefined) {
+        const problem = approvalConfigProblem(c.approval);
+        if (problem !== undefined)
+            fail(problem);
+    }
     if (c.cli !== undefined)
         validateCli(c.cli, fail);
     if (c.mcp !== undefined)
@@ -251,6 +275,7 @@ function isPrincipal(value) {
         p !== null &&
         typeof p.id === "string" &&
         (p.kind === "local" || p.kind === "token" || p.kind === "anonymous") &&
-        Array.isArray(p.scopes));
+        Array.isArray(p.scopes) &&
+        callerFieldsProblem(p) === undefined);
 }
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAGxC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAEpC,OAAO,EAAE,cAAc,EAAkB,MAAM,gBAAgB,CAAA;AAC/D,OAAO,EAAE,YAAY,EAAkB,MAAM,YAAY,CAAA;AAwGzD,MAAM,CAAC,MAAM,WAAW,GAAG,gBAAgB,CAAA;AAE3C,MAAM,WAAW,GAAsB,CAAC,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,CAAC,CAAA;AAE/L,wCAAwC;AACxC,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAClC,kBAAkB;AAClB,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAA;AACvC,MAAM,QAAQ,GAAsB,CAAC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;AACrG,MAAM,QAAQ,GAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;AAC3G,uCAAuC;AACvC,MAAM,CAAC,MAAM,oBAAoB,GAAsB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;AACzF,iCAAiC;AACjC,MAAM,CAAC,MAAM,0BAA0B,GAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AAE5E,wBAAwB;AACxB,MAAM,UAAU,YAAY,CAAC,MAAkB;IAC7C,OAAO,MAAM,CAAA;AACf,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAG,GAAW,OAAO,CAAC,GAAG,EAAE;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAA;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAA;IAChC,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,kCAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAC,CAA0B,CAAA;IAC7E,OAAO,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;AACpC,CAAC;AAED,sBAAsB;AACtB,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,MAAkB;IAChE,OAAO,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,IAAI,UAAU,CAAC,CAAA;AACvD,CAAC;AAED,uBAAuB;AACvB,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,MAAkB;IACjE,OAAO,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,YAAY,IAAI,WAAW,CAAC,CAAA;AACzD,CAAC;AAED,qBAAqB;AACrB,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,MAAkB;IAC/D,OAAO,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS,CAAC,CAAA;AACrD,CAAC;AAED,oBAAoB;AACpB,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,MAAkB;IAC9D,OAAO,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAA;AACnD,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAAkB;IAC5D,MAAM,CAAC,GAAG,MAAM,CAAC,cAAc,CAAA;IAC/B,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,cAAc,EAAE,CAAA;IAC5C,OAAO,OAAO,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAkB,EAAE,GAAG,GAAuC,OAAO,CAAC,GAAG;IACrG,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAA;IACrD,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,CAAA;IAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IACzD,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,gBAAgB;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,UAAU,qBAAqB,gBAAgB,QAAQ,CAAC,CAAA;IAChI,OAAO,KAAK,CAAA;AACd,CAAC;AAED,uIAAuI;AACvI,MAAM,UAAU,eAAe,CAC7B,MAAkB,EAClB,GAAG,GAAuC,OAAO,CAAC,GAAG;IAErD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA;IACtB,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzC,OAAO;QACL,GAAG,CAAC,GAAG,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,GAAG,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,GAAG,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAA;AACH,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,oBAAoB,CAClC,MAAkB,EAClB,GAAG,GAAuC,OAAO,CAAC,GAAG;IAErD,OAAO;QACL,GAAG,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAA;AACH,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,MAAkB;IAClE,OAAO,MAAM,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;AACvF,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAW,EAAE,MAAkB;IACzE,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAC9C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,WAAW,gCAAgC,MAAM,CAAC,GAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAC9G,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,kCAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAC,CAA0B,CAAA;IAC7E,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,MAAM,CAAC,GAAI,CAAC,MAAM,yDAAyD,CAAC,CAAA;IAC1I,OAAO,GAAG,CAAC,OAA4B,CAAA;AACzC,CAAC;AAED,kCAAkC;AAClC,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAkB;IAChD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAE,EAAc,CAAA;AAC1D,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,IAAI,GAAG,CAAC,OAAe,EAAS,EAAE;QACtC,MAAM,IAAI,SAAS,CAAC,GAAG,WAAW,KAAK,OAAO,EAAE,CAAC,CAAA;IACnD,CAAC,CAAA;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,IAAI,CAAC,yEAAyE,CAAC,CAAA;IACxF,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAA;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IACtE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,cAAc,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACpG,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;QAAE,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAC1G,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ;QAAE,IAAI,CAAC,+BAA+B,CAAC,CAAA;IAC7G,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAAE,IAAI,CAAC,4BAA4B,CAAC,CAAA;IACpG,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAAE,IAAI,CAAC,6BAA6B,CAAC,CAAA;IACvG,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,UAAU;QAAE,IAAI,CAAC,wBAAwB,CAAC,CAAA;IACtF,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,UAAU;QAAE,IAAI,CAAC,yBAAyB,CAAC,CAAA;IACzF,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACnG,IAAI,CAAC,+CAA+C,CAAC,CAAA;IACvD,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC;QAAE,IAAI,CAAC,0BAA0B,CAAC,CAAA;IACnH,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAkD,CAAA;QAC9D,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzH,IAAI,CAAC,8DAA8D,CAAC,CAAA;QACtE,CAAC;IACH,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,CAAC,cAAc,CAAA;IAC3B,IAAI,EAAE,KAAK,SAAS,IAAI,OAAO,EAAE,KAAK,UAAU,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;QACrE,IAAI,CAAC,yEAAyE,CAAC,CAAA;IACjF,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,gBAAgB,CAAC,EAAE,CAAC;QAC/G,IAAI,CAAC,uCAAuC,gBAAgB,QAAQ,CAAC,CAAA;IACvE,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;QACrC,IAAI,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IAC1C,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;QAAE,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACjD,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;QAAE,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACjD,OAAO,CAAe,CAAA;AACxB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAgC;IACnE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,uBAAuB,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,KAAgC,CAAA;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IACrE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,kBAAkB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACxG,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QAAE,IAAI,CAAC,qCAAqC,CAAC,CAAA;IACnI,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ;QAAE,IAAI,CAAC,mCAAmC,CAAC,CAAA;IACrH,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,UAAU;QAAE,IAAI,CAAC,kCAAkC,CAAC,CAAA;IAChH,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,IAAI,CAAC,yCAAyC,CAAC,CAAA;IACvI,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,IAAI,CAAC,uDAAuD,CAAC,CAAA;QACnG,MAAM,IAAI,GAAG,GAAG,CAAC,YAAuC,CAAA;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,cAAc,CAAC,CAAA;QACnE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,oDAAoD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACnG,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAA;QAC7B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,iDAAiD,CAAC,CAAA;YAChF,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;gBACtE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;oBAAE,IAAI,CAAC,kCAAkC,GAAG,sBAAsB,CAAC,CAAA;YAC1F,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAgC;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,sCAAsC,CAAC,CAAA;IACrH,MAAM,GAAG,GAAG,KAAgC,CAAA;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IACrE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,kBAAkB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACxG,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,IAAI,CAAC,kDAAkD,CAAC,CAAA;IAChH,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,6BAA6B,CAAC,CAAA;IAClG,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAA;QACzF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,qCAAqC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAA;IAC3J,CAAC;SAAM,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,6FAA6F,CAAC,CAAA;IACrG,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QAC9G,IAAI,CAAC,yEAAyE,CAAC,CAAA;IACjF,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAChG,IAAI,CAAC,wCAAwC,CAAC,CAAA;IAChD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,gCAAgC,CAAC,CAAA;IAC3G,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC7F,IAAI,CAAC,2DAA2D,CAAC,CAAA;IACnE,CAAC;AACH,CAAC;AAED,kCAAkC;AAClC,MAAM,QAAQ,GAAG,sDAAsD,CAAA;AAEvE,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAC9C,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;QACd,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,CAAC,GAAG,KAAkC,CAAA;IAC5C,OAAO,CACL,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACV,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QACxB,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;QACpE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CACxB,CAAA;AACH,CAAC","sourcesContent":["import { existsSync } from \"node:fs\"\nimport { join, resolve } from \"node:path\"\nimport { pathToFileURL } from \"node:url\"\nimport type { CliErrorFormatter } from \"./cli/output.ts\"\nimport type { MextApp } from \"./command.ts\"\nimport { isSegment } from \"./ids.ts\"\nimport type { OAuthResourceOptions } from \"./mcp/http.ts\"\nimport { localPrincipal, type Principal } from \"./principal.ts\"\nimport { stateProblem, type MextState } from \"./state.ts\"\n\n/** mext.config.ts 의 default export */\nexport interface MextConfig {\n  /** 명령어 폴더. 설정 파일 위치 (cwd) 기준. 기본 \"commands\" */\n  commandsDir?: string\n  /** MCP 자원 폴더 (§12.3). 설정 파일 위치 (cwd) 기준. 기본 \"resources\". 폴더 없음 = 자원 없음 */\n  resourcesDir?: string\n  /** MCP 프롬프트 폴더 (§12.3). 설정 파일 위치 (cwd) 기준. 기본 \"prompts\". 폴더 없음 = 프롬프트 없음 */\n  promptsDir?: string\n  /** ctx.app 팩토리. 실행 프로세스당 1회 */\n  app?: () => MextApp | Promise<MextApp>\n  /** HTTP 전용. 요청마다 Authorization 헤더로 주체 생성. 잘못된 토큰 = unauthenticated() throw */\n  auth?: (req: { authorization: string | undefined }) => Principal | Promise<Principal>\n  /** MCP 노출 방식. 기본 \"execute\". command = 명령어별 도구 (§12.2) */\n  tools?: \"execute\" | \"split\" | \"command\"\n  server?: { host?: string; port?: number; allowedOrigins?: string[] }\n  /** HTTP 전용. OAuth 보호 자원 메타데이터 (인가 서버 위치). mext login · MCP 클라이언트의 discovery */\n  oauth?: OAuthResourceOptions\n  /** 로컬 실행 (mext run · stdio) 주체. 기본 localPrincipal() */\n  localPrincipal?: Principal | (() => Principal | Promise<Principal>)\n  /** 고객 CLI (mext build → .mext/cli/). 없으면 고객 CLI 를 만들지 않는다 */\n  cli?: CliConfig\n  /** MCP 서버 선언 (serverInfo.name · instructions · capabilities) · stdio 서버 발신 알림 (§6) */\n  mcp?: McpConfig\n  /**\n   * 서버 비밀 (32바이트 이상). MRTR requestState 서명 키 (§12.1). 미지정 = MEXT_SECRET 환경변수, 둘 다 없으면 프로세스별 임의 키.\n   * 다중 인스턴스 · 재시작을 넘는 ctx.ask 재시도에 필요\n   */\n  secret?: string\n  /**\n   * 도입 프로젝트가 주입하는 저장소 · 메시지 버스 (§12.1). 없으면 stateless.\n   * 단일 프로세스 = memoryState(), 다중 인스턴스 = 도입 프로젝트가 구현한 { store, bus }\n   */\n  state?: MextState\n  /** HTTP 경로 폴더 (§12.4). 설정 파일 위치 (cwd) 기준. 기본 \"routes\". 폴더 없음 = route 없음 */\n  routesDir?: string\n}\n\n/** mext.config.ts 의 mcp (§6 서버 선언 · 서버 발신 알림) */\nexport interface McpConfig {\n  /** serverInfo.name. 기본 \"mext\" */\n  name?: string\n  /** initialize · server/discover 결과 instructions */\n  instructions?: string\n  /** 서버 capabilities 에 병합. experimental 만 (예: { experimental: { \"claude/channel\": {} } }) */\n  capabilities?: McpCapabilities\n  /**\n   * stdio 전용. 연결 하나에 1회 (2025 = notifications/initialized 후, 2026-07-28 = 연결 직후).\n   * 반환 함수 = 연결 종료 시 cleanup. HTTP 는 stateless 라 호출하지 않는다\n   */\n  onConnect?: McpConnectHandler\n  /**\n   * stdio 프로토콜. auto = 2026-07-28 · 2025 모두, legacy = 2025 만 (server/discover 거부).\n   * Claude Code channel 은 2025 연결에서만 알림을 전달. 기본 = experimental[\"claude/channel\"] 선언 시 legacy, 그 외 auto\n   */\n  stdioEra?: \"auto\" | \"legacy\"\n}\n\nexport interface McpCapabilities {\n  experimental?: Record<string, object>\n}\n\n/** stdio 연결. notify = 요청과 무관한 서버 발신 알림 */\nexport interface McpConnection {\n  /** 협상된 프로토콜 era */\n  readonly era: \"legacy\" | \"modern\"\n  /** 연결 종료 후 호출 = reject */\n  notify(method: string, params?: Record<string, unknown>): Promise<void>\n  /**\n   * 클라이언트 발신 알림 수신 (예: notifications/claude/channel/permission_request).\n   * SDK 가 처리하는 사양 알림 (initialized · cancelled 등) 은 대상 아님. 같은 method 재등록 = 교체. 반환 = 해제\n   */\n  onNotification(method: string, handler: (params: Record<string, unknown>) => void | Promise<void>): () => void\n}\n\nexport type McpConnectHandler = (\n  conn: McpConnection,\n) => void | (() => void | Promise<void>) | Promise<void | (() => void | Promise<void>)>\n\n/** mext.config.ts 의 cli (§5 고객 CLI 설정) */\nexport interface CliConfig {\n  /** 실행 파일 이름 (kebab-case). 환경변수 접두 (MYAPP_TOKEN · MYAPP_URL) · 설정 폴더 (~/.config/<bin>) */\n  bin: string\n  /** 서버 MCP 엔드포인트 (http(s)). 실행 시 <BIN>_URL 환경변수가 있으면 그 값. local 이면 없음 */\n  url?: string\n  /** npm 패키지 이름. 기본 = bin */\n  packageName?: string\n  /** 고객 CLI 버전 (--version · clientInfo). 기본 = 도입 프로젝트 package.json version */\n  version?: string\n  /** true = 번들 형태 (내장 manifest, 기본), false = 범용 형태 (help · 스키마를 서버에서 조회) */\n  manifest?: boolean\n  /**\n   * 오류 출력 · exit code 커스텀 모듈 (도입 프로젝트 루트 기준 경로). default export = CliErrorFormatter.\n   * 고객 CLI bin.js 에 번들, mext run (로컬) 이 import. @obov/mext 는 타입만 import (값 import = 번들 포함)\n   */\n  errors?: string\n  /**\n   * true = 로컬 bin (§5). mext build → .mext/bin.js (핸들러를 사용자 PC 에서 실행, .mext/cli/ 없음).\n   * 도입 프로젝트 package.json bin { \"<bin>\": \".mext/bin.js\" }. url · packageName · manifest 와 함께 쓸 수 없음\n   */\n  local?: boolean\n}\n\nexport const CONFIG_FILE = \"mext.config.ts\"\n\nconst CONFIG_KEYS: readonly string[] = [\"commandsDir\", \"app\", \"auth\", \"tools\", \"server\", \"oauth\", \"localPrincipal\", \"cli\", \"mcp\", \"secret\", \"state\", \"resourcesDir\", \"routesDir\", \"promptsDir\"]\n\n/** secret 최소 길이 (바이트, HMAC-SHA256 키) */\nexport const SECRET_MIN_BYTES = 32\n/** secret 환경변수 */\nexport const SECRET_ENV = \"MEXT_SECRET\"\nconst MCP_KEYS: readonly string[] = [\"name\", \"instructions\", \"capabilities\", \"onConnect\", \"stdioEra\"]\nconst CLI_KEYS: readonly string[] = [\"bin\", \"url\", \"packageName\", \"version\", \"manifest\", \"errors\", \"local\"]\n/** 고객 CLI 의 내장 명령 (루트 세그먼트로 쓸 수 없음) */\nexport const CLI_BUILTIN_COMMANDS: readonly string[] = [\"help\", \"login\", \"logout\", \"mcp\"]\n/** 로컬 bin (cli.local) 의 내장 명령 */\nexport const LOCAL_BIN_BUILTIN_COMMANDS: readonly string[] = [\"help\", \"mcp\"]\n\n/** 타입 도우미. 값은 그대로 반환 */\nexport function defineConfig(config: MextConfig): MextConfig {\n  return config\n}\n\n/** cwd 의 mext.config.ts 를 import. 없으면 {}. 형식이 틀리면 TypeError (모르는 키 포함) */\nexport async function loadConfig(cwd: string = process.cwd()): Promise<MextConfig> {\n  const file = join(resolve(cwd), CONFIG_FILE)\n  if (!existsSync(file)) return {}\n  const mod = (await import(pathToFileURL(file).href)) as { default?: unknown }\n  return validateConfig(mod.default)\n}\n\n/** commands/ 절대 경로 */\nexport function resolveCommandsDir(cwd: string, config: MextConfig): string {\n  return resolve(cwd, config.commandsDir ?? \"commands\")\n}\n\n/** resources/ 절대 경로 */\nexport function resolveResourcesDir(cwd: string, config: MextConfig): string {\n  return resolve(cwd, config.resourcesDir ?? \"resources\")\n}\n\n/** prompts/ 절대 경로 */\nexport function resolvePromptsDir(cwd: string, config: MextConfig): string {\n  return resolve(cwd, config.promptsDir ?? \"prompts\")\n}\n\n/** routes/ 절대 경로 */\nexport function resolveRoutesDir(cwd: string, config: MextConfig): string {\n  return resolve(cwd, config.routesDir ?? \"routes\")\n}\n\n/** 로컬 실행 주체: config.localPrincipal (값 · 함수) 또는 localPrincipal() */\nexport async function resolveLocalPrincipal(config: MextConfig): Promise<Principal> {\n  const p = config.localPrincipal\n  if (p === undefined) return localPrincipal()\n  return typeof p === \"function\" ? await p() : p\n}\n\n/**\n * 서버 비밀: config.secret > MEXT_SECRET > undefined (프로세스별 임의 키).\n * 환경변수 값이 짧으면 TypeError (config.secret 은 설정 로드 시 검사)\n */\nexport function resolveSecret(config: MextConfig, env: Record<string, string | undefined> = process.env): string | undefined {\n  if (config.secret !== undefined) return config.secret\n  const value = env[SECRET_ENV]\n  if (value === undefined || value === \"\") return undefined\n  if (Buffer.byteLength(value) < SECRET_MIN_BYTES) throw new TypeError(`${SECRET_ENV} must be at least ${SECRET_MIN_BYTES} bytes`)\n  return value\n}\n\n/** 서버 선언 (모든 transport): config.mcp 의 name · instructions · capabilities + secret (requestStateKey) + state. onConnect 는 stdio 만 따로 */\nexport function mcpDeclarations(\n  config: MextConfig,\n  env: Record<string, string | undefined> = process.env,\n): { name?: string; instructions?: string; capabilities?: McpCapabilities; requestStateKey?: string; state?: MextState } {\n  const mcp = config.mcp\n  const secret = resolveSecret(config, env)\n  return {\n    ...(mcp?.name !== undefined ? { name: mcp.name } : {}),\n    ...(mcp?.instructions !== undefined ? { instructions: mcp.instructions } : {}),\n    ...(mcp?.capabilities !== undefined ? { capabilities: mcp.capabilities } : {}),\n    ...(secret !== undefined ? { requestStateKey: secret } : {}),\n    ...(config.state !== undefined ? { state: config.state } : {}),\n  }\n}\n\n/** stdio 옵션 = 선언 + onConnect */\nexport function mcpStdioDeclarations(\n  config: MextConfig,\n  env: Record<string, string | undefined> = process.env,\n): ReturnType<typeof mcpDeclarations> & { onConnect?: McpConnectHandler; era?: \"auto\" | \"legacy\" } {\n  return {\n    ...mcpDeclarations(config, env),\n    ...(config.mcp?.onConnect ? { onConnect: config.mcp.onConnect } : {}),\n    ...(config.mcp?.stdioEra ? { era: config.mcp.stdioEra } : {}),\n  }\n}\n\n/** cli.errors 절대 경로 (없으면 undefined) */\nexport function resolveCliErrorsPath(cwd: string, config: MextConfig): string | undefined {\n  return config.cli?.errors === undefined ? undefined : resolve(cwd, config.cli.errors)\n}\n\n/** cli.errors 모듈의 default export (함수). 파일 없음 · default 가 함수 아님 = TypeError */\nexport async function loadCliErrorFormatter(cwd: string, config: MextConfig): Promise<CliErrorFormatter | undefined> {\n  const file = resolveCliErrorsPath(cwd, config)\n  if (file === undefined) return undefined\n  if (!existsSync(file)) throw new TypeError(`${CONFIG_FILE}: cli.errors file not found: ${config.cli!.errors}`)\n  const mod = (await import(pathToFileURL(file).href)) as { default?: unknown }\n  if (typeof mod.default !== \"function\") throw new TypeError(`${config.cli!.errors}: default export must be a function (CliErrorFormatter)`)\n  return mod.default as CliErrorFormatter\n}\n\n/** ctx.app: config.app() 또는 {} */\nexport async function createApp(config: MextConfig): Promise<MextApp> {\n  return config.app ? await config.app() : ({} as MextApp)\n}\n\nfunction validateConfig(value: unknown): MextConfig {\n  const fail = (message: string): never => {\n    throw new TypeError(`${CONFIG_FILE}: ${message}`)\n  }\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    return fail(\"default export must be an object (export default defineConfig({ ... }))\")\n  }\n  const c = value as Record<string, unknown>\n  const unknown = Object.keys(c).filter((k) => !CONFIG_KEYS.includes(k))\n  if (unknown.length > 0) fail(`unknown key${unknown.length === 1 ? \"\" : \"s\"}: ${unknown.join(\", \")}`)\n  if (c.commandsDir !== undefined && typeof c.commandsDir !== \"string\") fail(\"commandsDir must be a string\")\n  if (c.resourcesDir !== undefined && typeof c.resourcesDir !== \"string\") fail(\"resourcesDir must be a string\")\n  if (c.routesDir !== undefined && typeof c.routesDir !== \"string\") fail(\"routesDir must be a string\")\n  if (c.promptsDir !== undefined && typeof c.promptsDir !== \"string\") fail(\"promptsDir must be a string\")\n  if (c.app !== undefined && typeof c.app !== \"function\") fail(\"app must be a function\")\n  if (c.auth !== undefined && typeof c.auth !== \"function\") fail(\"auth must be a function\")\n  if (c.tools !== undefined && c.tools !== \"execute\" && c.tools !== \"split\" && c.tools !== \"command\") {\n    fail('tools must be \"execute\", \"split\" or \"command\"')\n  }\n  if (c.server !== undefined && (typeof c.server !== \"object\" || c.server === null)) fail(\"server must be an object\")\n  if (c.oauth !== undefined) {\n    const o = c.oauth as { authorizationServers?: unknown } | null\n    if (typeof o !== \"object\" || o === null || !Array.isArray(o.authorizationServers) || o.authorizationServers.length === 0) {\n      fail(\"oauth.authorizationServers must be a non-empty array of URLs\")\n    }\n  }\n  const lp = c.localPrincipal\n  if (lp !== undefined && typeof lp !== \"function\" && !isPrincipal(lp)) {\n    fail(\"localPrincipal must be a Principal ({ id, kind, scopes }) or a function\")\n  }\n  if (c.secret !== undefined && (typeof c.secret !== \"string\" || Buffer.byteLength(c.secret) < SECRET_MIN_BYTES)) {\n    fail(`secret must be a string of at least ${SECRET_MIN_BYTES} bytes`)\n  }\n  if (c.state !== undefined) {\n    const problem = stateProblem(c.state)\n    if (problem !== undefined) fail(problem)\n  }\n  if (c.cli !== undefined) validateCli(c.cli, fail)\n  if (c.mcp !== undefined) validateMcp(c.mcp, fail)\n  return c as MextConfig\n}\n\nfunction validateMcp(value: unknown, fail: (message: string) => never): void {\n  if (!isPlainObject(value)) fail(\"mcp must be an object\")\n  const mcp = value as Record<string, unknown>\n  const unknown = Object.keys(mcp).filter((k) => !MCP_KEYS.includes(k))\n  if (unknown.length > 0) fail(`unknown mcp key${unknown.length === 1 ? \"\" : \"s\"}: ${unknown.join(\", \")}`)\n  if (mcp.name !== undefined && (typeof mcp.name !== \"string\" || mcp.name.trim() === \"\")) fail(\"mcp.name must be a non-empty string\")\n  if (mcp.instructions !== undefined && typeof mcp.instructions !== \"string\") fail(\"mcp.instructions must be a string\")\n  if (mcp.onConnect !== undefined && typeof mcp.onConnect !== \"function\") fail(\"mcp.onConnect must be a function\")\n  if (mcp.stdioEra !== undefined && mcp.stdioEra !== \"auto\" && mcp.stdioEra !== \"legacy\") fail('mcp.stdioEra must be \"auto\" or \"legacy\"')\n  if (mcp.capabilities !== undefined) {\n    if (!isPlainObject(mcp.capabilities)) fail(\"mcp.capabilities must be an object ({ experimental })\")\n    const caps = mcp.capabilities as Record<string, unknown>\n    const other = Object.keys(caps).filter((k) => k !== \"experimental\")\n    if (other.length > 0) fail(`mcp.capabilities supports only experimental (got ${other.join(\", \")})`)\n    const exp = caps.experimental\n    if (exp !== undefined) {\n      if (!isPlainObject(exp)) fail(\"mcp.capabilities.experimental must be an object\")\n      for (const [key, v] of Object.entries(exp as Record<string, unknown>)) {\n        if (!isPlainObject(v)) fail(`mcp.capabilities.experimental[\"${key}\"] must be an object`)\n      }\n    }\n  }\n}\n\nfunction isPlainObject(value: unknown): boolean {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n\nfunction validateCli(value: unknown, fail: (message: string) => never): void {\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) fail(\"cli must be an object ({ bin, url })\")\n  const cli = value as Record<string, unknown>\n  const unknown = Object.keys(cli).filter((k) => !CLI_KEYS.includes(k))\n  if (unknown.length > 0) fail(`unknown cli key${unknown.length === 1 ? \"\" : \"s\"}: ${unknown.join(\", \")}`)\n  if (typeof cli.bin !== \"string\" || !isSegment(cli.bin)) fail('cli.bin must be a kebab-case name (e.g. \"myapp\")')\n  if (cli.local !== undefined && typeof cli.local !== \"boolean\") fail(\"cli.local must be a boolean\")\n  if (cli.local === true) {\n    const remoteOnly = [\"url\", \"packageName\", \"manifest\"].filter((k) => cli[k] !== undefined)\n    if (remoteOnly.length > 0) fail(`cli.local cannot be combined with ${remoteOnly.map((k) => `cli.${k}`).join(\", \")} (local bin runs handlers, no server)`)\n  } else if (typeof cli.url !== \"string\" || !isHttpUrl(cli.url)) {\n    fail(\"cli.url must be an http(s) URL of the MCP endpoint (or set cli.local: true for a local bin)\")\n  }\n  if (cli.packageName !== undefined && (typeof cli.packageName !== \"string\" || !NPM_NAME.test(cli.packageName))) {\n    fail('cli.packageName must be an npm package name (e.g. \"@example/myapp-cli\")')\n  }\n  if (cli.version !== undefined && (typeof cli.version !== \"string\" || cli.version.trim() === \"\")) {\n    fail(\"cli.version must be a non-empty string\")\n  }\n  if (cli.manifest !== undefined && typeof cli.manifest !== \"boolean\") fail(\"cli.manifest must be a boolean\")\n  if (cli.errors !== undefined && (typeof cli.errors !== \"string\" || cli.errors.trim() === \"\")) {\n    fail('cli.errors must be a module path (e.g. \"./cli-errors.ts\")')\n  }\n}\n\n/** npm 패키지 이름 (소문자 · scope 선택) */\nconst NPM_NAME = /^(?:@[a-z0-9][a-z0-9._~-]*\\/)?[a-z0-9][a-z0-9._~-]*$/\n\nfunction isHttpUrl(value: string): boolean {\n  if (!/^https?:\\/\\//i.test(value)) return false\n  try {\n    new URL(value)\n    return true\n  } catch {\n    return false\n  }\n}\n\nfunction isPrincipal(value: unknown): value is Principal {\n  const p = value as Partial<Principal> | null\n  return (\n    typeof p === \"object\" &&\n    p !== null &&\n    typeof p.id === \"string\" &&\n    (p.kind === \"local\" || p.kind === \"token\" || p.kind === \"anonymous\") &&\n    Array.isArray(p.scopes)\n  )\n}\n"]}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;;;;;;AAAA,OAAO,EAAE,qBAAqB,EAAuB,MAAM,eAAe,CAAA;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,kBAAkB,EAAoB,MAAM,YAAY,CAAA;AAGjE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAEpC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,cAAc,EAAkB,MAAM,gBAAgB,CAAA;AACxG,OAAO,EAAE,YAAY,EAAkB,MAAM,YAAY,CAAA;AAoIzD,MAAM,CAAC,MAAM,WAAW,GAAG,gBAAgB,CAAA;AAE3C,MAAM,WAAW,GAAsB,CAAC,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;AAE7N,wCAAwC;AACxC,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAClC,kBAAkB;AAClB,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAA;AACvC,MAAM,QAAQ,GAAsB,CAAC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;AACrG,MAAM,QAAQ,GAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;AAC3G,uCAAuC;AACvC,MAAM,CAAC,MAAM,oBAAoB,GAAsB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;AACzF,iCAAiC;AACjC,MAAM,CAAC,MAAM,0BAA0B,GAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AAE5E,wBAAwB;AACxB,MAAM,UAAU,YAAY,CAAC,MAAkB;IAC7C,OAAO,MAAM,CAAA;AACf,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAG,GAAW,OAAO,CAAC,GAAG,EAAE;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAA;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAA;IAChC,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,kCAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAC,CAA0B,CAAA;IAC7E,OAAO,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;AACpC,CAAC;AAED,sBAAsB;AACtB,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,MAAkB;IAChE,OAAO,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,IAAI,UAAU,CAAC,CAAA;AACvD,CAAC;AAED,uBAAuB;AACvB,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,MAAkB;IACjE,OAAO,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,YAAY,IAAI,WAAW,CAAC,CAAA;AACzD,CAAC;AAED,qBAAqB;AACrB,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,MAAkB;IAC/D,OAAO,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS,CAAC,CAAA;AACrD,CAAC;AAED,oBAAoB;AACpB,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,MAAkB;IAC9D,OAAO,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAA;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAAkB,EAAE,OAAO,GAAqC,KAAK;IAC/G,MAAM,CAAC,GAAG,MAAM,CAAC,cAAc,CAAA;IAC/B,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,cAAc,EAAE,CAAA;IAC5C,IAAI,OAAO,CAAC,KAAK,UAAU;QAAE,OAAO,CAAC,CAAA;IACrC,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IACtC,kBAAkB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAA;IAC/C,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAkB,EAAE,GAAG,GAAuC,OAAO,CAAC,GAAG;IACrG,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAA;IACrD,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,CAAA;IAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IACzD,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,gBAAgB;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,UAAU,qBAAqB,gBAAgB,QAAQ,CAAC,CAAA;IAChI,OAAO,KAAK,CAAA;AACd,CAAC;AAED,+IAA+I;AAC/I,MAAM,UAAU,eAAe,CAC7B,MAAkB,EAClB,GAAG,GAAuC,OAAO,CAAC,GAAG;IAErD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA;IACtB,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzC,OAAO;QACL,GAAG,CAAC,GAAG,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,GAAG,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,GAAG,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAA;AACH,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,oBAAoB,CAClC,MAAkB,EAClB,GAAG,GAAuC,OAAO,CAAC,GAAG;IAErD,OAAO;QACL,GAAG,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAA;AACH,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,MAAkB;IAClE,OAAO,MAAM,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;AACvF,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAW,EAAE,MAAkB;IACzE,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAC9C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,WAAW,gCAAgC,MAAM,CAAC,GAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAC9G,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,kCAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAC,CAA0B,CAAA;IAC7E,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,MAAM,CAAC,GAAI,CAAC,MAAM,yDAAyD,CAAC,CAAA;IAC1I,OAAO,GAAG,CAAC,OAA4B,CAAA;AACzC,CAAC;AAED,kCAAkC;AAClC,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAkB;IAChD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAE,EAAc,CAAA;AAC1D,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,IAAI,GAAG,CAAC,OAAe,EAAS,EAAE;QACtC,MAAM,IAAI,SAAS,CAAC,GAAG,WAAW,KAAK,OAAO,EAAE,CAAC,CAAA;IACnD,CAAC,CAAA;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,IAAI,CAAC,yEAAyE,CAAC,CAAA;IACxF,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAA;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IACtE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,cAAc,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACpG,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;QAAE,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAC1G,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ;QAAE,IAAI,CAAC,+BAA+B,CAAC,CAAA;IAC7G,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAAE,IAAI,CAAC,4BAA4B,CAAC,CAAA;IACpG,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAAE,IAAI,CAAC,6BAA6B,CAAC,CAAA;IACvG,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACvH,IAAI,CAAC,8DAA8D,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,UAAU;QAAE,IAAI,CAAC,wBAAwB,CAAC,CAAA;IACtF,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,UAAU;QAAE,IAAI,CAAC,yBAAyB,CAAC,CAAA;IACzF,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACnG,IAAI,CAAC,+CAA+C,CAAC,CAAA;IACvD,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC;QAAE,IAAI,CAAC,0BAA0B,CAAC,CAAA;IACnH,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAkD,CAAA;QAC9D,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzH,IAAI,CAAC,8DAA8D,CAAC,CAAA;QACtE,CAAC;IACH,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,CAAC,cAAc,CAAA;IAC3B,IAAI,EAAE,KAAK,SAAS,IAAI,OAAO,EAAE,KAAK,UAAU,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;QACrE,IAAI,CAAC,yEAAyE,CAAC,CAAA;IACjF,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,gBAAgB,CAAC,EAAE,CAAC;QAC/G,IAAI,CAAC,uCAAuC,gBAAgB,QAAQ,CAAC,CAAA;IACvE,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;QACrC,IAAI,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IAC1C,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;QAC3C,IAAI,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IAC1C,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,qBAAqB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;QACjD,IAAI,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IAC1C,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;QAAE,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACjD,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;QAAE,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACjD,OAAO,CAAe,CAAA;AACxB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAgC;IACnE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,uBAAuB,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,KAAgC,CAAA;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IACrE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,kBAAkB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACxG,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QAAE,IAAI,CAAC,qCAAqC,CAAC,CAAA;IACnI,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ;QAAE,IAAI,CAAC,mCAAmC,CAAC,CAAA;IACrH,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,UAAU;QAAE,IAAI,CAAC,kCAAkC,CAAC,CAAA;IAChH,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,IAAI,CAAC,yCAAyC,CAAC,CAAA;IACvI,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,IAAI,CAAC,uDAAuD,CAAC,CAAA;QACnG,MAAM,IAAI,GAAG,GAAG,CAAC,YAAuC,CAAA;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,cAAc,CAAC,CAAA;QACnE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,oDAAoD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACnG,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAA;QAC7B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,iDAAiD,CAAC,CAAA;YAChF,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;gBACtE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;oBAAE,IAAI,CAAC,kCAAkC,GAAG,sBAAsB,CAAC,CAAA;YAC1F,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAgC;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,sCAAsC,CAAC,CAAA;IACrH,MAAM,GAAG,GAAG,KAAgC,CAAA;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IACrE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,kBAAkB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACxG,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,IAAI,CAAC,kDAAkD,CAAC,CAAA;IAChH,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,6BAA6B,CAAC,CAAA;IAClG,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAA;QACzF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,qCAAqC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAA;IAC3J,CAAC;SAAM,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,6FAA6F,CAAC,CAAA;IACrG,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QAC9G,IAAI,CAAC,yEAAyE,CAAC,CAAA;IACjF,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAChG,IAAI,CAAC,wCAAwC,CAAC,CAAA;IAChD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,gCAAgC,CAAC,CAAA;IAC3G,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC7F,IAAI,CAAC,2DAA2D,CAAC,CAAA;IACnE,CAAC;AACH,CAAC;AAED,kCAAkC;AAClC,MAAM,QAAQ,GAAG,sDAAsD,CAAA;AAEvE,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAC9C,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;QACd,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,CAAC,GAAG,KAAkC,CAAA;IAC5C,OAAO,CACL,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACV,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QACxB,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;QACpE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACvB,mBAAmB,CAAC,CAAC,CAAC,KAAK,SAAS,CACrC,CAAA;AACH,CAAC","sourcesContent":["import { approvalConfigProblem, type ApprovalConfig } from \"./approval.ts\"\nimport { existsSync } from \"node:fs\"\nimport { join, resolve } from \"node:path\"\nimport { pathToFileURL } from \"node:url\"\nimport { auditConfigProblem, type AuditConfig } from \"./audit.ts\"\nimport type { CliErrorFormatter } from \"./cli/output.ts\"\nimport type { MextApp } from \"./command.ts\"\nimport { isSegment } from \"./ids.ts\"\nimport type { McpAuthRequest, OAuthResourceOptions } from \"./mcp/http.ts\"\nimport { assertCallerFields, callerFieldsProblem, localPrincipal, type Principal } from \"./principal.ts\"\nimport { stateProblem, type MextState } from \"./state.ts\"\n\n/** mext.config.ts 의 default export */\nexport interface MextConfig {\n  /** 명령어 폴더. 설정 파일 위치 (cwd) 기준. 기본 \"commands\" */\n  commandsDir?: string\n  /** MCP 자원 폴더 (§12.3). 설정 파일 위치 (cwd) 기준. 기본 \"resources\". 폴더 없음 = 자원 없음 */\n  resourcesDir?: string\n  /** MCP 프롬프트 폴더 (§12.3). 설정 파일 위치 (cwd) 기준. 기본 \"prompts\". 폴더 없음 = 프롬프트 없음 */\n  promptsDir?: string\n  /**\n   * 명령어 타입 생성 파일 (specs/client.md §4). true = ./mext.gen.ts, 문자열 = 그 경로 (프로젝트 루트 기준).\n   * 있으면 mext dev · mext build 가 생성한다. 없음 · false = 만들지 않는다 (mext types 는 설정 없이도 동작)\n   */\n  types?: boolean | string\n  /** ctx.app 팩토리. 실행 프로세스당 1회 */\n  app?: () => MextApp | Promise<MextApp>\n  /**\n   * HTTP 전용. 요청마다 주체 생성. 잘못된 토큰 = unauthenticated() throw.\n   * req = { authorization, headers, surface, client } (McpAuthRequest). client 는 자가 신고 값 (판정 근거 아님).\n   * 반환 Principal 의 actor · surface 가 ctx.caller 의 행위자 · 논리 표면을 정한다 (spec §4)\n   */\n  auth?: (req: McpAuthRequest) => Principal | Promise<Principal>\n  /** MCP 노출 방식. 기본 \"execute\". command = 명령어별 도구 (§12.2) */\n  tools?: \"execute\" | \"split\" | \"command\"\n  server?: { host?: string; port?: number; allowedOrigins?: string[] }\n  /** HTTP 전용. OAuth 보호 자원 메타데이터 (인가 서버 위치). mext login · MCP 클라이언트의 discovery */\n  oauth?: OAuthResourceOptions\n  /**\n   * 로컬 실행 (mext run · 로컬 bin · stdio) 주체. 기본 localPrincipal().\n   * 함수 인자 surface = 어댑터 기본 표면 (mext run · 로컬 bin = \"cli\", stdio = \"stdio\"): 표면별로 actor 를 다르게 정할 수 있다\n   */\n  localPrincipal?: Principal | ((req: LocalPrincipalRequest) => Principal | Promise<Principal>)\n  /** 고객 CLI (mext build → .mext/cli/). 없으면 고객 CLI 를 만들지 않는다 */\n  cli?: CliConfig\n  /** MCP 서버 선언 (serverInfo.name · instructions · capabilities) · stdio 서버 발신 알림 (§6) */\n  mcp?: McpConfig\n  /**\n   * 서버 비밀 (32바이트 이상). MRTR requestState 서명 키 (§12.1). 미지정 = MEXT_SECRET 환경변수, 둘 다 없으면 프로세스별 임의 키.\n   * 다중 인스턴스 · 재시작을 넘는 ctx.ask 재시도에 필요\n   */\n  secret?: string\n  /**\n   * 도입 프로젝트가 주입하는 저장소 · 메시지 버스 (§12.1). 없으면 stateless.\n   * 단일 프로세스 = memoryState(), 다중 인스턴스 = 도입 프로젝트가 구현한 { store, bus }\n   */\n  state?: MextState\n  /** HTTP 경로 폴더 (§12.4). 설정 파일 위치 (cwd) 기준. 기본 \"routes\". 폴더 없음 = route 없음 */\n  routesDir?: string\n  /**\n   * 감사 (§11.1). sink = 변경 명령어 호출 1건마다 AuditEvent 1건 (모든 어댑터). 없으면 감사 없음.\n   * mext 는 저장소에 의존하지 않는다: 저장 · 조회는 sink 가 한다\n   */\n  audit?: AuditConfig\n  /**\n   * 승인의 표면별 확인 방식 (§4 승인). 없으면 모든 표면 ask (ctx.ask 확인 = requiresConfirmation 의 기존 동작).\n   * surfaces: { web: \"client\" } = web 표면은 클라이언트가 확인받고 요청에 확인 표시를 싣는다\n   */\n  approval?: ApprovalConfig\n}\n\n/** localPrincipal 함수의 인자 */\nexport interface LocalPrincipalRequest {\n  /** 어댑터 기본 표면. mext run · 로컬 bin = \"cli\", stdio (mext dev --stdio · mext start --stdio · <bin> mcp serve) = \"stdio\" */\n  surface: \"cli\" | \"stdio\"\n}\n\n/** mext.config.ts 의 mcp (§6 서버 선언 · 서버 발신 알림) */\nexport interface McpConfig {\n  /** serverInfo.name. 기본 \"mext\" */\n  name?: string\n  /** initialize · server/discover 결과 instructions */\n  instructions?: string\n  /** 서버 capabilities 에 병합. experimental 만 (예: { experimental: { \"claude/channel\": {} } }) */\n  capabilities?: McpCapabilities\n  /**\n   * stdio 전용. 연결 하나에 1회 (2025 = notifications/initialized 후, 2026-07-28 = 연결 직후).\n   * 반환 함수 = 연결 종료 시 cleanup. HTTP 는 stateless 라 호출하지 않는다\n   */\n  onConnect?: McpConnectHandler\n  /**\n   * stdio 프로토콜. auto = 2026-07-28 · 2025 모두, legacy = 2025 만 (server/discover 거부).\n   * Claude Code channel 은 2025 연결에서만 알림을 전달. 기본 = experimental[\"claude/channel\"] 선언 시 legacy, 그 외 auto\n   */\n  stdioEra?: \"auto\" | \"legacy\"\n}\n\nexport interface McpCapabilities {\n  experimental?: Record<string, object>\n}\n\n/** stdio 연결. notify = 요청과 무관한 서버 발신 알림 */\nexport interface McpConnection {\n  /** 협상된 프로토콜 era */\n  readonly era: \"legacy\" | \"modern\"\n  /** 연결 종료 후 호출 = reject */\n  notify(method: string, params?: Record<string, unknown>): Promise<void>\n  /**\n   * 클라이언트 발신 알림 수신 (예: notifications/claude/channel/permission_request).\n   * SDK 가 처리하는 사양 알림 (initialized · cancelled 등) 은 대상 아님. 같은 method 재등록 = 교체. 반환 = 해제\n   */\n  onNotification(method: string, handler: (params: Record<string, unknown>) => void | Promise<void>): () => void\n}\n\nexport type McpConnectHandler = (\n  conn: McpConnection,\n) => void | (() => void | Promise<void>) | Promise<void | (() => void | Promise<void>)>\n\n/** mext.config.ts 의 cli (§5 고객 CLI 설정) */\nexport interface CliConfig {\n  /** 실행 파일 이름 (kebab-case). 환경변수 접두 (MYAPP_TOKEN · MYAPP_URL) · 설정 폴더 (~/.config/<bin>) */\n  bin: string\n  /** 서버 MCP 엔드포인트 (http(s)). 실행 시 <BIN>_URL 환경변수가 있으면 그 값. local 이면 없음 */\n  url?: string\n  /** npm 패키지 이름. 기본 = bin */\n  packageName?: string\n  /** 고객 CLI 버전 (--version · clientInfo). 기본 = 도입 프로젝트 package.json version */\n  version?: string\n  /** true = 번들 형태 (내장 manifest, 기본), false = 범용 형태 (help · 스키마를 서버에서 조회) */\n  manifest?: boolean\n  /**\n   * 오류 출력 · exit code 커스텀 모듈 (도입 프로젝트 루트 기준 경로). default export = CliErrorFormatter.\n   * 고객 CLI bin.js 에 번들, mext run (로컬) 이 import. @obov/mext 는 타입만 import (값 import = 번들 포함)\n   */\n  errors?: string\n  /**\n   * true = 로컬 bin (§5). mext build → .mext/bin.js (핸들러를 사용자 PC 에서 실행, .mext/cli/ 없음).\n   * 도입 프로젝트 package.json bin { \"<bin>\": \".mext/bin.js\" }. url · packageName · manifest 와 함께 쓸 수 없음\n   */\n  local?: boolean\n}\n\nexport const CONFIG_FILE = \"mext.config.ts\"\n\nconst CONFIG_KEYS: readonly string[] = [\"commandsDir\", \"app\", \"auth\", \"tools\", \"server\", \"oauth\", \"localPrincipal\", \"cli\", \"mcp\", \"secret\", \"state\", \"resourcesDir\", \"routesDir\", \"promptsDir\", \"audit\", \"approval\", \"types\"]\n\n/** secret 최소 길이 (바이트, HMAC-SHA256 키) */\nexport const SECRET_MIN_BYTES = 32\n/** secret 환경변수 */\nexport const SECRET_ENV = \"MEXT_SECRET\"\nconst MCP_KEYS: readonly string[] = [\"name\", \"instructions\", \"capabilities\", \"onConnect\", \"stdioEra\"]\nconst CLI_KEYS: readonly string[] = [\"bin\", \"url\", \"packageName\", \"version\", \"manifest\", \"errors\", \"local\"]\n/** 고객 CLI 의 내장 명령 (루트 세그먼트로 쓸 수 없음) */\nexport const CLI_BUILTIN_COMMANDS: readonly string[] = [\"help\", \"login\", \"logout\", \"mcp\"]\n/** 로컬 bin (cli.local) 의 내장 명령 */\nexport const LOCAL_BIN_BUILTIN_COMMANDS: readonly string[] = [\"help\", \"mcp\"]\n\n/** 타입 도우미. 값은 그대로 반환 */\nexport function defineConfig(config: MextConfig): MextConfig {\n  return config\n}\n\n/** cwd 의 mext.config.ts 를 import. 없으면 {}. 형식이 틀리면 TypeError (모르는 키 포함) */\nexport async function loadConfig(cwd: string = process.cwd()): Promise<MextConfig> {\n  const file = join(resolve(cwd), CONFIG_FILE)\n  if (!existsSync(file)) return {}\n  const mod = (await import(pathToFileURL(file).href)) as { default?: unknown }\n  return validateConfig(mod.default)\n}\n\n/** commands/ 절대 경로 */\nexport function resolveCommandsDir(cwd: string, config: MextConfig): string {\n  return resolve(cwd, config.commandsDir ?? \"commands\")\n}\n\n/** resources/ 절대 경로 */\nexport function resolveResourcesDir(cwd: string, config: MextConfig): string {\n  return resolve(cwd, config.resourcesDir ?? \"resources\")\n}\n\n/** prompts/ 절대 경로 */\nexport function resolvePromptsDir(cwd: string, config: MextConfig): string {\n  return resolve(cwd, config.promptsDir ?? \"prompts\")\n}\n\n/** routes/ 절대 경로 */\nexport function resolveRoutesDir(cwd: string, config: MextConfig): string {\n  return resolve(cwd, config.routesDir ?? \"routes\")\n}\n\n/**\n * 로컬 실행 주체: config.localPrincipal (값 · 함수) 또는 localPrincipal().\n * surface = 어댑터 기본 표면 (함수 인자). 함수 결과의 actor · surface 형식 오류 = TypeError\n */\nexport async function resolveLocalPrincipal(config: MextConfig, surface: LocalPrincipalRequest[\"surface\"] = \"cli\"): Promise<Principal> {\n  const p = config.localPrincipal\n  if (p === undefined) return localPrincipal()\n  if (typeof p !== \"function\") return p\n  const principal = await p({ surface })\n  assertCallerFields(principal, \"localPrincipal\")\n  return principal\n}\n\n/**\n * 서버 비밀: config.secret > MEXT_SECRET > undefined (프로세스별 임의 키).\n * 환경변수 값이 짧으면 TypeError (config.secret 은 설정 로드 시 검사)\n */\nexport function resolveSecret(config: MextConfig, env: Record<string, string | undefined> = process.env): string | undefined {\n  if (config.secret !== undefined) return config.secret\n  const value = env[SECRET_ENV]\n  if (value === undefined || value === \"\") return undefined\n  if (Buffer.byteLength(value) < SECRET_MIN_BYTES) throw new TypeError(`${SECRET_ENV} must be at least ${SECRET_MIN_BYTES} bytes`)\n  return value\n}\n\n/** 서버 선언 (모든 transport): config.mcp 의 name · instructions · capabilities + secret (requestStateKey) + state + audit. onConnect 는 stdio 만 따로 */\nexport function mcpDeclarations(\n  config: MextConfig,\n  env: Record<string, string | undefined> = process.env,\n): { name?: string; instructions?: string; capabilities?: McpCapabilities; requestStateKey?: string; state?: MextState; audit?: AuditConfig; approval?: ApprovalConfig } {\n  const mcp = config.mcp\n  const secret = resolveSecret(config, env)\n  return {\n    ...(mcp?.name !== undefined ? { name: mcp.name } : {}),\n    ...(mcp?.instructions !== undefined ? { instructions: mcp.instructions } : {}),\n    ...(mcp?.capabilities !== undefined ? { capabilities: mcp.capabilities } : {}),\n    ...(secret !== undefined ? { requestStateKey: secret } : {}),\n    ...(config.state !== undefined ? { state: config.state } : {}),\n    ...(config.audit !== undefined ? { audit: config.audit } : {}),\n    ...(config.approval !== undefined ? { approval: config.approval } : {}),\n  }\n}\n\n/** stdio 옵션 = 선언 + onConnect */\nexport function mcpStdioDeclarations(\n  config: MextConfig,\n  env: Record<string, string | undefined> = process.env,\n): ReturnType<typeof mcpDeclarations> & { onConnect?: McpConnectHandler; era?: \"auto\" | \"legacy\" } {\n  return {\n    ...mcpDeclarations(config, env),\n    ...(config.mcp?.onConnect ? { onConnect: config.mcp.onConnect } : {}),\n    ...(config.mcp?.stdioEra ? { era: config.mcp.stdioEra } : {}),\n  }\n}\n\n/** cli.errors 절대 경로 (없으면 undefined) */\nexport function resolveCliErrorsPath(cwd: string, config: MextConfig): string | undefined {\n  return config.cli?.errors === undefined ? undefined : resolve(cwd, config.cli.errors)\n}\n\n/** cli.errors 모듈의 default export (함수). 파일 없음 · default 가 함수 아님 = TypeError */\nexport async function loadCliErrorFormatter(cwd: string, config: MextConfig): Promise<CliErrorFormatter | undefined> {\n  const file = resolveCliErrorsPath(cwd, config)\n  if (file === undefined) return undefined\n  if (!existsSync(file)) throw new TypeError(`${CONFIG_FILE}: cli.errors file not found: ${config.cli!.errors}`)\n  const mod = (await import(pathToFileURL(file).href)) as { default?: unknown }\n  if (typeof mod.default !== \"function\") throw new TypeError(`${config.cli!.errors}: default export must be a function (CliErrorFormatter)`)\n  return mod.default as CliErrorFormatter\n}\n\n/** ctx.app: config.app() 또는 {} */\nexport async function createApp(config: MextConfig): Promise<MextApp> {\n  return config.app ? await config.app() : ({} as MextApp)\n}\n\nfunction validateConfig(value: unknown): MextConfig {\n  const fail = (message: string): never => {\n    throw new TypeError(`${CONFIG_FILE}: ${message}`)\n  }\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    return fail(\"default export must be an object (export default defineConfig({ ... }))\")\n  }\n  const c = value as Record<string, unknown>\n  const unknown = Object.keys(c).filter((k) => !CONFIG_KEYS.includes(k))\n  if (unknown.length > 0) fail(`unknown key${unknown.length === 1 ? \"\" : \"s\"}: ${unknown.join(\", \")}`)\n  if (c.commandsDir !== undefined && typeof c.commandsDir !== \"string\") fail(\"commandsDir must be a string\")\n  if (c.resourcesDir !== undefined && typeof c.resourcesDir !== \"string\") fail(\"resourcesDir must be a string\")\n  if (c.routesDir !== undefined && typeof c.routesDir !== \"string\") fail(\"routesDir must be a string\")\n  if (c.promptsDir !== undefined && typeof c.promptsDir !== \"string\") fail(\"promptsDir must be a string\")\n  if (c.types !== undefined && typeof c.types !== \"boolean\" && (typeof c.types !== \"string\" || !c.types.endsWith(\".ts\"))) {\n    fail('types must be true or a .ts file path (e.g. \"./mext.gen.ts\")')\n  }\n  if (c.app !== undefined && typeof c.app !== \"function\") fail(\"app must be a function\")\n  if (c.auth !== undefined && typeof c.auth !== \"function\") fail(\"auth must be a function\")\n  if (c.tools !== undefined && c.tools !== \"execute\" && c.tools !== \"split\" && c.tools !== \"command\") {\n    fail('tools must be \"execute\", \"split\" or \"command\"')\n  }\n  if (c.server !== undefined && (typeof c.server !== \"object\" || c.server === null)) fail(\"server must be an object\")\n  if (c.oauth !== undefined) {\n    const o = c.oauth as { authorizationServers?: unknown } | null\n    if (typeof o !== \"object\" || o === null || !Array.isArray(o.authorizationServers) || o.authorizationServers.length === 0) {\n      fail(\"oauth.authorizationServers must be a non-empty array of URLs\")\n    }\n  }\n  const lp = c.localPrincipal\n  if (lp !== undefined && typeof lp !== \"function\" && !isPrincipal(lp)) {\n    fail(\"localPrincipal must be a Principal ({ id, kind, scopes }) or a function\")\n  }\n  if (c.secret !== undefined && (typeof c.secret !== \"string\" || Buffer.byteLength(c.secret) < SECRET_MIN_BYTES)) {\n    fail(`secret must be a string of at least ${SECRET_MIN_BYTES} bytes`)\n  }\n  if (c.state !== undefined) {\n    const problem = stateProblem(c.state)\n    if (problem !== undefined) fail(problem)\n  }\n  if (c.audit !== undefined) {\n    const problem = auditConfigProblem(c.audit)\n    if (problem !== undefined) fail(problem)\n  }\n  if (c.approval !== undefined) {\n    const problem = approvalConfigProblem(c.approval)\n    if (problem !== undefined) fail(problem)\n  }\n  if (c.cli !== undefined) validateCli(c.cli, fail)\n  if (c.mcp !== undefined) validateMcp(c.mcp, fail)\n  return c as MextConfig\n}\n\nfunction validateMcp(value: unknown, fail: (message: string) => never): void {\n  if (!isPlainObject(value)) fail(\"mcp must be an object\")\n  const mcp = value as Record<string, unknown>\n  const unknown = Object.keys(mcp).filter((k) => !MCP_KEYS.includes(k))\n  if (unknown.length > 0) fail(`unknown mcp key${unknown.length === 1 ? \"\" : \"s\"}: ${unknown.join(\", \")}`)\n  if (mcp.name !== undefined && (typeof mcp.name !== \"string\" || mcp.name.trim() === \"\")) fail(\"mcp.name must be a non-empty string\")\n  if (mcp.instructions !== undefined && typeof mcp.instructions !== \"string\") fail(\"mcp.instructions must be a string\")\n  if (mcp.onConnect !== undefined && typeof mcp.onConnect !== \"function\") fail(\"mcp.onConnect must be a function\")\n  if (mcp.stdioEra !== undefined && mcp.stdioEra !== \"auto\" && mcp.stdioEra !== \"legacy\") fail('mcp.stdioEra must be \"auto\" or \"legacy\"')\n  if (mcp.capabilities !== undefined) {\n    if (!isPlainObject(mcp.capabilities)) fail(\"mcp.capabilities must be an object ({ experimental })\")\n    const caps = mcp.capabilities as Record<string, unknown>\n    const other = Object.keys(caps).filter((k) => k !== \"experimental\")\n    if (other.length > 0) fail(`mcp.capabilities supports only experimental (got ${other.join(\", \")})`)\n    const exp = caps.experimental\n    if (exp !== undefined) {\n      if (!isPlainObject(exp)) fail(\"mcp.capabilities.experimental must be an object\")\n      for (const [key, v] of Object.entries(exp as Record<string, unknown>)) {\n        if (!isPlainObject(v)) fail(`mcp.capabilities.experimental[\"${key}\"] must be an object`)\n      }\n    }\n  }\n}\n\nfunction isPlainObject(value: unknown): boolean {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n\nfunction validateCli(value: unknown, fail: (message: string) => never): void {\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) fail(\"cli must be an object ({ bin, url })\")\n  const cli = value as Record<string, unknown>\n  const unknown = Object.keys(cli).filter((k) => !CLI_KEYS.includes(k))\n  if (unknown.length > 0) fail(`unknown cli key${unknown.length === 1 ? \"\" : \"s\"}: ${unknown.join(\", \")}`)\n  if (typeof cli.bin !== \"string\" || !isSegment(cli.bin)) fail('cli.bin must be a kebab-case name (e.g. \"myapp\")')\n  if (cli.local !== undefined && typeof cli.local !== \"boolean\") fail(\"cli.local must be a boolean\")\n  if (cli.local === true) {\n    const remoteOnly = [\"url\", \"packageName\", \"manifest\"].filter((k) => cli[k] !== undefined)\n    if (remoteOnly.length > 0) fail(`cli.local cannot be combined with ${remoteOnly.map((k) => `cli.${k}`).join(\", \")} (local bin runs handlers, no server)`)\n  } else if (typeof cli.url !== \"string\" || !isHttpUrl(cli.url)) {\n    fail(\"cli.url must be an http(s) URL of the MCP endpoint (or set cli.local: true for a local bin)\")\n  }\n  if (cli.packageName !== undefined && (typeof cli.packageName !== \"string\" || !NPM_NAME.test(cli.packageName))) {\n    fail('cli.packageName must be an npm package name (e.g. \"@example/myapp-cli\")')\n  }\n  if (cli.version !== undefined && (typeof cli.version !== \"string\" || cli.version.trim() === \"\")) {\n    fail(\"cli.version must be a non-empty string\")\n  }\n  if (cli.manifest !== undefined && typeof cli.manifest !== \"boolean\") fail(\"cli.manifest must be a boolean\")\n  if (cli.errors !== undefined && (typeof cli.errors !== \"string\" || cli.errors.trim() === \"\")) {\n    fail('cli.errors must be a module path (e.g. \"./cli-errors.ts\")')\n  }\n}\n\n/** npm 패키지 이름 (소문자 · scope 선택) */\nconst NPM_NAME = /^(?:@[a-z0-9][a-z0-9._~-]*\\/)?[a-z0-9][a-z0-9._~-]*$/\n\nfunction isHttpUrl(value: string): boolean {\n  if (!/^https?:\\/\\//i.test(value)) return false\n  try {\n    new URL(value)\n    return true\n  } catch {\n    return false\n  }\n}\n\nfunction isPrincipal(value: unknown): value is Principal {\n  const p = value as Partial<Principal> | null\n  return (\n    typeof p === \"object\" &&\n    p !== null &&\n    typeof p.id === \"string\" &&\n    (p.kind === \"local\" || p.kind === \"token\" || p.kind === \"anonymous\") &&\n    Array.isArray(p.scopes) &&\n    callerFieldsProblem(p) === undefined\n  )\n}\n"]}

package/dist/errors.d.ts

@@ -11,7 +11,7 @@ export declare class MextBuildError extends Error {
     readonly issues: readonly BuildIssue[];
     constructor(issues: readonly BuildIssue[]);
 }
-export type MextErrorCode = "UNKNOWN_COMMAND" | "INVALID_ARGUMENT" | "UNAUTHENTICATED" | "PERMISSION_DENIED" | "INPUT_UNAVAILABLE" | "INPUT_DECLINED";
+export type MextErrorCode = "UNKNOWN_COMMAND" | "INVALID_ARGUMENT" | "UNAUTHENTICATED" | "PERMISSION_DENIED" | "INPUT_UNAVAILABLE" | "INPUT_DECLINED" | "APPROVAL_REQUIRED";
 export interface ArgumentIssue {
     /** 점 구분 경로. "" = 입력 전체 */
     path: string;
@@ -42,11 +42,25 @@ export interface MextErrorDetails {
     };
     PERMISSION_DENIED: {
         command: string;
-        /** anonymous = 인증 없는 주체의 readOnly 외 명령어 · read_only = readOnly 전용 호출 (split query) · scope = scopes 부족 */
-        reason: "anonymous" | "read_only" | "scope";
+        /**
+         * anonymous = 인증 없는 주체의 readOnly 외 명령어 · read_only = readOnly 전용 호출 (split query) · scope = scopes 부족 ·
+         * authorize = 명령어의 authorize 가드가 거부 (spec §4)
+         */
+        reason: "anonymous" | "read_only" | "scope" | "authorize";
         required_scopes: string[];
         held_scopes: string[];
     };
+    /**
+     * 사람의 승인 없이 실행할 수 없는 호출 (needsApproval · requiresConfirmation, spec §4 승인). PERMISSION_DENIED 와 달리 사람이 확인하면 실행된다.
+     * unconfirmed = client 방식 표면인데 요청에 확인 표시가 없다 (확인받고 meta_key 에 { confirmed: true } 를 실어 다시 호출).
+     * human_required = 이 호출자는 승인할 수 없다 (행위자가 agent · client 방식 표면에서 human 이 아님). 사람이 사람 표면에서 실행해야 한다
+     */
+    APPROVAL_REQUIRED: {
+        command: string;
+        reason: "unconfirmed" | "human_required";
+        /** reason unconfirmed: 확인 표시를 싣는 요청 params._meta 키 ("dev.mext/approval") */
+        meta_key?: string;
+    };
     /** ctx.ask 를 처리할 수 없는 실행 환경 (TTY 없는 CLI 등) */
     INPUT_UNAVAILABLE: {
         command: string;
@@ -74,6 +88,10 @@ export declare function isMextError<C extends MextErrorCode>(error: unknown, cod
 export declare function unauthenticated(reason: MextErrorDetails["UNAUTHENTICATED"]["reason"]): MextError<"UNAUTHENTICATED">;
 /** ctx.ask 거절. AskHandler 가 input 요청 거절 · 취소에 던진다. invoke 는 requiresConfirmation 확인 거절에 던진다 */
 export declare function inputDeclined(command: string, kind: "confirm" | "input"): MextError<"INPUT_DECLINED">;
+/** 승인 부족 (§4 승인). agent = 서버가 정한 행위자가 agent */
+export declare function approvalRequired(command: string, reason: MextErrorDetails["APPROVAL_REQUIRED"]["reason"], options?: {
+    agent?: boolean;
+}): MextError<"APPROVAL_REQUIRED">;
 /** mext 가 쓰는 오류 code. CommandError 로 만들 수 없다 */
 export declare const RESERVED_ERROR_CODES: readonly string[];
 /**

package/dist/errors.js

@@ -1,3 +1,4 @@
+import { APPROVAL_META_KEY } from "./mcp/constants.js";
 /** 스캔 · Registry 생성의 빌드 오류. 발견한 문제를 모두 모아 한 번에 던진다 */
 export class MextBuildError extends Error {
     issues;
@@ -35,6 +36,17 @@ export function inputDeclined(command, kind) {
     const message = kind === "confirm" ? `${command} was not confirmed and did not run.` : `${command} requested input, but it was declined.`;
     return new MextError("INPUT_DECLINED", message, { command, kind });
 }
+/** 승인 부족 (§4 승인). agent = 서버가 정한 행위자가 agent */
+export function approvalRequired(command, reason, options = {}) {
+    if (reason === "unconfirmed") {
+        const key = APPROVAL_META_KEY;
+        return new MextError("APPROVAL_REQUIRED", `${command} needs approval. Confirm with the person, then call again with _meta["${key}"] = { "confirmed": true }.`, { command, reason, meta_key: key });
+    }
+    const message = options.agent
+        ? `${command} needs approval from a person. An agent cannot approve it; a person has to run it.`
+        : `${command} needs approval from a person, and this caller is not identified as one.`;
+    return new MextError("APPROVAL_REQUIRED", message, { command, reason });
+}
 /** mext 가 쓰는 오류 code. CommandError 로 만들 수 없다 */
 export const RESERVED_ERROR_CODES = [
     "UNKNOWN_COMMAND",
@@ -43,6 +55,7 @@ export const RESERVED_ERROR_CODES = [
     "PERMISSION_DENIED",
     "INPUT_UNAVAILABLE",
     "INPUT_DECLINED",
+    "APPROVAL_REQUIRED",
     "EXECUTION_ERROR",
     "EXECUTION_FAILED",
     "INTERRUPTED",

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AA4BA,sDAAsD;AACtD,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,MAAM,CAAuB;IAEtC,YAAY,MAA6B;QACvC,KAAK,CACH,sBAAsB,MAAM,CAAC,MAAM,SAAS,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK;YAC7E,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACzF,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAA;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AA2DD,qDAAqD;AACrD,MAAM,OAAO,SAAmD,SAAQ,KAAK;IAClE,IAAI,CAAG;IACP,OAAO,CAAqB;IAErC,YAAY,IAAO,EAAE,OAAe,EAAE,OAA4B;QAChE,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,WAAW,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;IACpE,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAA0B,KAAc,EAAE,IAAQ;IAC3E,OAAO,KAAK,YAAY,SAAS,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AAClF,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,eAAe,CAAC,MAAqD;IACnF,MAAM,OAAO,GAAG,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,+BAA+B,CAAA;IACzG,OAAO,IAAI,SAAS,CAAC,iBAAiB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;AAC9D,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,IAAyB;IACtE,MAAM,OAAO,GACX,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,qCAAqC,CAAC,CAAC,CAAC,GAAG,OAAO,wCAAwC,CAAA;IAC3H,OAAO,IAAI,SAAS,CAAC,gBAAgB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;AACpE,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,iBAAiB;IACjB,kBAAkB;IAClB,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;IACnB,gBAAgB;IAChB,iBAAiB;IACjB,kBAAkB;IAClB,aAAa;IACb,aAAa;IACb,cAAc;CACf,CAAA;AAED,MAAM,UAAU,GAAG,mBAAmB,CAAA;AAEtC;;;GAGG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAQ;IACZ,OAAO,CAAyB;IAEzC,YAAY,IAAY,EAAE,OAAe,EAAE,OAAO,GAA4B,EAAE;QAC9E,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,SAAS,CAAC,mDAAmD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACjG,CAAC;QACD,IAAI,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,IAAI,uBAAuB,CAAC,CAAA;QAC/G,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAA;QAC/D,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;IACpE,CAAC;CACF;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,KAAK,YAAY,YAAY,CAAA;AACtC,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,KAAK,YAAY,SAAS,IAAI,KAAK,YAAY,YAAY,CAAA;AACpE,CAAC","sourcesContent":["export type BuildIssueCode =\n  | \"COMMANDS_DIR_MISSING\"\n  | \"PATH_COLLISION\"\n  | \"DUPLICATE_ID\"\n  | \"INVALID_SEGMENT\"\n  | \"INVALID_ALIAS\"\n  | \"RESERVED_ID\"\n  | \"ROOT_INDEX\"\n  | \"INVALID_COMMAND\"\n  | \"LOAD_FAILED\"\n  | \"SCHEMA_UNREPRESENTABLE\"\n  | \"CLI_UNCONVERTIBLE\"\n  | \"BUNDLE_FAILED\"\n  | \"INVALID_CONFIG\"\n  | \"INVALID_RESOURCE\"\n  | \"INVALID_PROMPT\"\n  | \"ROUTE_CONFLICT\"\n  | \"DUPLICATE_ROUTE\"\n  | \"INVALID_ROUTE\"\n\nexport interface BuildIssue {\n  code: BuildIssueCode\n  message: string\n  /** commands/ 기준 상대 경로 (posix) */\n  file?: string\n  id?: string\n}\n\n/** 스캔 · Registry 생성의 빌드 오류. 발견한 문제를 모두 모아 한 번에 던진다 */\nexport class MextBuildError extends Error {\n  readonly issues: readonly BuildIssue[]\n\n  constructor(issues: readonly BuildIssue[]) {\n    super(\n      `mext build failed (${issues.length} issue${issues.length === 1 ? \"\" : \"s\"})\\n` +\n        issues.map((i) => `  ${i.code}${i.file ? ` ${i.file}` : \"\"}: ${i.message}`).join(\"\\n\"),\n    )\n    this.name = \"MextBuildError\"\n    this.issues = issues\n  }\n}\n\nexport type MextErrorCode =\n  | \"UNKNOWN_COMMAND\"\n  | \"INVALID_ARGUMENT\"\n  | \"UNAUTHENTICATED\"\n  | \"PERMISSION_DENIED\"\n  | \"INPUT_UNAVAILABLE\"\n  | \"INPUT_DECLINED\"\n\nexport interface ArgumentIssue {\n  /** 점 구분 경로. \"\" = 입력 전체 */\n  path: string\n  code: string\n  message: string\n}\n\nexport interface MextErrorDetails {\n  UNKNOWN_COMMAND: {\n    command: string\n    /** 유사 정식 ID (가까운 순) */\n    suggested: string[]\n    /** 다음에 볼 help 대상. \"help\" (루트) · \"help users\" (네임스페이스) */\n    usage: string\n  }\n  INVALID_ARGUMENT: {\n    command: string\n    /** 원본 입력에 없는 필수 필드 경로 */\n    missing_fields: string[]\n    issues: ArgumentIssue[]\n    /** input JSON Schema 2020-12 */\n    expected_schema: Record<string, unknown>\n    examples: unknown[]\n  }\n  UNAUTHENTICATED: {\n    reason: \"missing_token\" | \"invalid_token\"\n    /** CLI 원격 실행: 토큰 발급 명령 (mext login --url <url>) */\n    login?: string\n  }\n  PERMISSION_DENIED: {\n    command: string\n    /** anonymous = 인증 없는 주체의 readOnly 외 명령어 · read_only = readOnly 전용 호출 (split query) · scope = scopes 부족 */\n    reason: \"anonymous\" | \"read_only\" | \"scope\"\n    required_scopes: string[]\n    held_scopes: string[]\n  }\n  /** ctx.ask 를 처리할 수 없는 실행 환경 (TTY 없는 CLI 등) */\n  INPUT_UNAVAILABLE: {\n    command: string\n    /** url 요청 (ctx.ask kind url) 의 URL. 사용자가 직접 열고 다시 실행 */\n    url?: string\n  }\n  /** ctx.ask 거절 · 취소. confirm = requiresConfirmation 확인 거절 (실행 안 함), input = 입력 요청 거절 */\n  INPUT_DECLINED: {\n    command: string\n    kind: \"confirm\" | \"input\"\n  }\n}\n\n/** 구조화 오류. 어댑터는 code 로 분기하고 toJSON() 을 응답 본문으로 쓴다 */\nexport class MextError<C extends MextErrorCode = MextErrorCode> extends Error {\n  readonly code: C\n  readonly details: MextErrorDetails[C]\n\n  constructor(code: C, message: string, details: MextErrorDetails[C]) {\n    super(message)\n    this.name = \"MextError\"\n    this.code = code\n    this.details = details\n  }\n\n  toJSON(): { code: C; message: string } & MextErrorDetails[C] {\n    return { code: this.code, message: this.message, ...this.details }\n  }\n}\n\nexport function isMextError<C extends MextErrorCode>(error: unknown, code?: C): error is MextError<C> {\n  return error instanceof MextError && (code === undefined || error.code === code)\n}\n\n/** auth 단계에서 어댑터가 던지는 오류. anonymous 로 낮추지 않는다 */\nexport function unauthenticated(reason: MextErrorDetails[\"UNAUTHENTICATED\"][\"reason\"]): MextError<\"UNAUTHENTICATED\"> {\n  const message = reason === \"missing_token\" ? \"Authentication required.\" : \"Invalid authentication token.\"\n  return new MextError(\"UNAUTHENTICATED\", message, { reason })\n}\n\n/** ctx.ask 거절. AskHandler 가 input 요청 거절 · 취소에 던진다. invoke 는 requiresConfirmation 확인 거절에 던진다 */\nexport function inputDeclined(command: string, kind: \"confirm\" | \"input\"): MextError<\"INPUT_DECLINED\"> {\n  const message =\n    kind === \"confirm\" ? `${command} was not confirmed and did not run.` : `${command} requested input, but it was declined.`\n  return new MextError(\"INPUT_DECLINED\", message, { command, kind })\n}\n\n/** mext 가 쓰는 오류 code. CommandError 로 만들 수 없다 */\nexport const RESERVED_ERROR_CODES: readonly string[] = [\n  \"UNKNOWN_COMMAND\",\n  \"INVALID_ARGUMENT\",\n  \"UNAUTHENTICATED\",\n  \"PERMISSION_DENIED\",\n  \"INPUT_UNAVAILABLE\",\n  \"INPUT_DECLINED\",\n  \"EXECUTION_ERROR\",\n  \"EXECUTION_FAILED\",\n  \"INTERRUPTED\",\n  \"BUILD_ERROR\",\n  \"REMOTE_ERROR\",\n]\n\nconst ERROR_CODE = /^[A-Z][A-Z0-9_]*$/\n\n/**\n * 핸들러 정의 오류 (§4). 응답 본문 = { code, message, ...details } (MCP structuredContent.error · CLI --json).\n * code = 대문자 스네이크, mext 예약 code 불가 (TypeError). onCommandError 에 보고하지 않는다 (의도된 오류)\n */\nexport class CommandError extends Error {\n  readonly code: string\n  readonly details: Record<string, unknown>\n\n  constructor(code: string, message: string, details: Record<string, unknown> = {}) {\n    if (typeof code !== \"string\" || !ERROR_CODE.test(code)) {\n      throw new TypeError(`CommandError code must be UPPER_SNAKE_CASE (got ${JSON.stringify(code)})`)\n    }\n    if (RESERVED_ERROR_CODES.includes(code)) throw new TypeError(`CommandError code \"${code}\" is reserved by mext`)\n    if (typeof details !== \"object\" || details === null || Array.isArray(details)) {\n      throw new TypeError(\"CommandError details must be an object\")\n    }\n    super(message)\n    this.name = \"CommandError\"\n    this.code = code\n    this.details = details\n  }\n\n  toJSON(): { code: string; message: string } & Record<string, unknown> {\n    return { ...this.details, code: this.code, message: this.message }\n  }\n}\n\nexport function isCommandError(error: unknown): error is CommandError {\n  return error instanceof CommandError\n}\n\n/** 응답 본문으로 그대로 보내는 오류 (MextError · CommandError) */\nexport function isDeclaredError(error: unknown): error is MextError | CommandError {\n  return error instanceof MextError || error instanceof CommandError\n}\n"]}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AA6BtD,sDAAsD;AACtD,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,MAAM,CAAuB;IAEtC,YAAY,MAA6B;QACvC,KAAK,CACH,sBAAsB,MAAM,CAAC,MAAM,SAAS,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK;YAC7E,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACzF,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAA;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AA0ED,qDAAqD;AACrD,MAAM,OAAO,SAAmD,SAAQ,KAAK;IAClE,IAAI,CAAG;IACP,OAAO,CAAqB;IAErC,YAAY,IAAO,EAAE,OAAe,EAAE,OAA4B;QAChE,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,WAAW,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;IACpE,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAA0B,KAAc,EAAE,IAAQ;IAC3E,OAAO,KAAK,YAAY,SAAS,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AAClF,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,eAAe,CAAC,MAAqD;IACnF,MAAM,OAAO,GAAG,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,+BAA+B,CAAA;IACzG,OAAO,IAAI,SAAS,CAAC,iBAAiB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;AAC9D,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,IAAyB;IACtE,MAAM,OAAO,GACX,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,qCAAqC,CAAC,CAAC,CAAC,GAAG,OAAO,wCAAwC,CAAA;IAC3H,OAAO,IAAI,SAAS,CAAC,gBAAgB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;AACpE,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,MAAuD,EACvD,OAAO,GAAwB,EAAE;IAEjC,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,iBAAiB,CAAA;QAC7B,OAAO,IAAI,SAAS,CAClB,mBAAmB,EACnB,GAAG,OAAO,yEAAyE,GAAG,6BAA6B,EACnH,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CACnC,CAAA;IACH,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK;QAC3B,CAAC,CAAC,GAAG,OAAO,oFAAoF;QAChG,CAAC,CAAC,GAAG,OAAO,0EAA0E,CAAA;IACxF,OAAO,IAAI,SAAS,CAAC,mBAAmB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;AACzE,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,iBAAiB;IACjB,kBAAkB;IAClB,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;IACnB,gBAAgB;IAChB,mBAAmB;IACnB,iBAAiB;IACjB,kBAAkB;IAClB,aAAa;IACb,aAAa;IACb,cAAc;CACf,CAAA;AAED,MAAM,UAAU,GAAG,mBAAmB,CAAA;AAEtC;;;GAGG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAQ;IACZ,OAAO,CAAyB;IAEzC,YAAY,IAAY,EAAE,OAAe,EAAE,OAAO,GAA4B,EAAE;QAC9E,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,SAAS,CAAC,mDAAmD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACjG,CAAC;QACD,IAAI,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,IAAI,uBAAuB,CAAC,CAAA;QAC/G,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAA;QAC/D,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;IACpE,CAAC;CACF;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,KAAK,YAAY,YAAY,CAAA;AACtC,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,KAAK,YAAY,SAAS,IAAI,KAAK,YAAY,YAAY,CAAA;AACpE,CAAC","sourcesContent":["import { APPROVAL_META_KEY } from \"./mcp/constants.ts\"\nexport type BuildIssueCode =\n  | \"COMMANDS_DIR_MISSING\"\n  | \"PATH_COLLISION\"\n  | \"DUPLICATE_ID\"\n  | \"INVALID_SEGMENT\"\n  | \"INVALID_ALIAS\"\n  | \"RESERVED_ID\"\n  | \"ROOT_INDEX\"\n  | \"INVALID_COMMAND\"\n  | \"LOAD_FAILED\"\n  | \"SCHEMA_UNREPRESENTABLE\"\n  | \"CLI_UNCONVERTIBLE\"\n  | \"BUNDLE_FAILED\"\n  | \"INVALID_CONFIG\"\n  | \"INVALID_RESOURCE\"\n  | \"INVALID_PROMPT\"\n  | \"ROUTE_CONFLICT\"\n  | \"DUPLICATE_ROUTE\"\n  | \"INVALID_ROUTE\"\n\nexport interface BuildIssue {\n  code: BuildIssueCode\n  message: string\n  /** commands/ 기준 상대 경로 (posix) */\n  file?: string\n  id?: string\n}\n\n/** 스캔 · Registry 생성의 빌드 오류. 발견한 문제를 모두 모아 한 번에 던진다 */\nexport class MextBuildError extends Error {\n  readonly issues: readonly BuildIssue[]\n\n  constructor(issues: readonly BuildIssue[]) {\n    super(\n      `mext build failed (${issues.length} issue${issues.length === 1 ? \"\" : \"s\"})\\n` +\n        issues.map((i) => `  ${i.code}${i.file ? ` ${i.file}` : \"\"}: ${i.message}`).join(\"\\n\"),\n    )\n    this.name = \"MextBuildError\"\n    this.issues = issues\n  }\n}\n\nexport type MextErrorCode =\n  | \"UNKNOWN_COMMAND\"\n  | \"INVALID_ARGUMENT\"\n  | \"UNAUTHENTICATED\"\n  | \"PERMISSION_DENIED\"\n  | \"INPUT_UNAVAILABLE\"\n  | \"INPUT_DECLINED\"\n  | \"APPROVAL_REQUIRED\"\n\nexport interface ArgumentIssue {\n  /** 점 구분 경로. \"\" = 입력 전체 */\n  path: string\n  code: string\n  message: string\n}\n\nexport interface MextErrorDetails {\n  UNKNOWN_COMMAND: {\n    command: string\n    /** 유사 정식 ID (가까운 순) */\n    suggested: string[]\n    /** 다음에 볼 help 대상. \"help\" (루트) · \"help users\" (네임스페이스) */\n    usage: string\n  }\n  INVALID_ARGUMENT: {\n    command: string\n    /** 원본 입력에 없는 필수 필드 경로 */\n    missing_fields: string[]\n    issues: ArgumentIssue[]\n    /** input JSON Schema 2020-12 */\n    expected_schema: Record<string, unknown>\n    examples: unknown[]\n  }\n  UNAUTHENTICATED: {\n    reason: \"missing_token\" | \"invalid_token\"\n    /** CLI 원격 실행: 토큰 발급 명령 (mext login --url <url>) */\n    login?: string\n  }\n  PERMISSION_DENIED: {\n    command: string\n    /**\n     * anonymous = 인증 없는 주체의 readOnly 외 명령어 · read_only = readOnly 전용 호출 (split query) · scope = scopes 부족 ·\n     * authorize = 명령어의 authorize 가드가 거부 (spec §4)\n     */\n    reason: \"anonymous\" | \"read_only\" | \"scope\" | \"authorize\"\n    required_scopes: string[]\n    held_scopes: string[]\n  }\n  /**\n   * 사람의 승인 없이 실행할 수 없는 호출 (needsApproval · requiresConfirmation, spec §4 승인). PERMISSION_DENIED 와 달리 사람이 확인하면 실행된다.\n   * unconfirmed = client 방식 표면인데 요청에 확인 표시가 없다 (확인받고 meta_key 에 { confirmed: true } 를 실어 다시 호출).\n   * human_required = 이 호출자는 승인할 수 없다 (행위자가 agent · client 방식 표면에서 human 이 아님). 사람이 사람 표면에서 실행해야 한다\n   */\n  APPROVAL_REQUIRED: {\n    command: string\n    reason: \"unconfirmed\" | \"human_required\"\n    /** reason unconfirmed: 확인 표시를 싣는 요청 params._meta 키 (\"dev.mext/approval\") */\n    meta_key?: string\n  }\n  /** ctx.ask 를 처리할 수 없는 실행 환경 (TTY 없는 CLI 등) */\n  INPUT_UNAVAILABLE: {\n    command: string\n    /** url 요청 (ctx.ask kind url) 의 URL. 사용자가 직접 열고 다시 실행 */\n    url?: string\n  }\n  /** ctx.ask 거절 · 취소. confirm = requiresConfirmation 확인 거절 (실행 안 함), input = 입력 요청 거절 */\n  INPUT_DECLINED: {\n    command: string\n    kind: \"confirm\" | \"input\"\n  }\n}\n\n/** 구조화 오류. 어댑터는 code 로 분기하고 toJSON() 을 응답 본문으로 쓴다 */\nexport class MextError<C extends MextErrorCode = MextErrorCode> extends Error {\n  readonly code: C\n  readonly details: MextErrorDetails[C]\n\n  constructor(code: C, message: string, details: MextErrorDetails[C]) {\n    super(message)\n    this.name = \"MextError\"\n    this.code = code\n    this.details = details\n  }\n\n  toJSON(): { code: C; message: string } & MextErrorDetails[C] {\n    return { code: this.code, message: this.message, ...this.details }\n  }\n}\n\nexport function isMextError<C extends MextErrorCode>(error: unknown, code?: C): error is MextError<C> {\n  return error instanceof MextError && (code === undefined || error.code === code)\n}\n\n/** auth 단계에서 어댑터가 던지는 오류. anonymous 로 낮추지 않는다 */\nexport function unauthenticated(reason: MextErrorDetails[\"UNAUTHENTICATED\"][\"reason\"]): MextError<\"UNAUTHENTICATED\"> {\n  const message = reason === \"missing_token\" ? \"Authentication required.\" : \"Invalid authentication token.\"\n  return new MextError(\"UNAUTHENTICATED\", message, { reason })\n}\n\n/** ctx.ask 거절. AskHandler 가 input 요청 거절 · 취소에 던진다. invoke 는 requiresConfirmation 확인 거절에 던진다 */\nexport function inputDeclined(command: string, kind: \"confirm\" | \"input\"): MextError<\"INPUT_DECLINED\"> {\n  const message =\n    kind === \"confirm\" ? `${command} was not confirmed and did not run.` : `${command} requested input, but it was declined.`\n  return new MextError(\"INPUT_DECLINED\", message, { command, kind })\n}\n\n/** 승인 부족 (§4 승인). agent = 서버가 정한 행위자가 agent */\nexport function approvalRequired(\n  command: string,\n  reason: MextErrorDetails[\"APPROVAL_REQUIRED\"][\"reason\"],\n  options: { agent?: boolean } = {},\n): MextError<\"APPROVAL_REQUIRED\"> {\n  if (reason === \"unconfirmed\") {\n    const key = APPROVAL_META_KEY\n    return new MextError(\n      \"APPROVAL_REQUIRED\",\n      `${command} needs approval. Confirm with the person, then call again with _meta[\"${key}\"] = { \"confirmed\": true }.`,\n      { command, reason, meta_key: key },\n    )\n  }\n  const message = options.agent\n    ? `${command} needs approval from a person. An agent cannot approve it; a person has to run it.`\n    : `${command} needs approval from a person, and this caller is not identified as one.`\n  return new MextError(\"APPROVAL_REQUIRED\", message, { command, reason })\n}\n\n/** mext 가 쓰는 오류 code. CommandError 로 만들 수 없다 */\nexport const RESERVED_ERROR_CODES: readonly string[] = [\n  \"UNKNOWN_COMMAND\",\n  \"INVALID_ARGUMENT\",\n  \"UNAUTHENTICATED\",\n  \"PERMISSION_DENIED\",\n  \"INPUT_UNAVAILABLE\",\n  \"INPUT_DECLINED\",\n  \"APPROVAL_REQUIRED\",\n  \"EXECUTION_ERROR\",\n  \"EXECUTION_FAILED\",\n  \"INTERRUPTED\",\n  \"BUILD_ERROR\",\n  \"REMOTE_ERROR\",\n]\n\nconst ERROR_CODE = /^[A-Z][A-Z0-9_]*$/\n\n/**\n * 핸들러 정의 오류 (§4). 응답 본문 = { code, message, ...details } (MCP structuredContent.error · CLI --json).\n * code = 대문자 스네이크, mext 예약 code 불가 (TypeError). onCommandError 에 보고하지 않는다 (의도된 오류)\n */\nexport class CommandError extends Error {\n  readonly code: string\n  readonly details: Record<string, unknown>\n\n  constructor(code: string, message: string, details: Record<string, unknown> = {}) {\n    if (typeof code !== \"string\" || !ERROR_CODE.test(code)) {\n      throw new TypeError(`CommandError code must be UPPER_SNAKE_CASE (got ${JSON.stringify(code)})`)\n    }\n    if (RESERVED_ERROR_CODES.includes(code)) throw new TypeError(`CommandError code \"${code}\" is reserved by mext`)\n    if (typeof details !== \"object\" || details === null || Array.isArray(details)) {\n      throw new TypeError(\"CommandError details must be an object\")\n    }\n    super(message)\n    this.name = \"CommandError\"\n    this.code = code\n    this.details = details\n  }\n\n  toJSON(): { code: string; message: string } & Record<string, unknown> {\n    return { ...this.details, code: this.code, message: this.message }\n  }\n}\n\nexport function isCommandError(error: unknown): error is CommandError {\n  return error instanceof CommandError\n}\n\n/** 응답 본문으로 그대로 보내는 오류 (MextError · CommandError) */\nexport function isDeclaredError(error: unknown): error is MextError | CommandError {\n  return error instanceof MextError || error instanceof CommandError\n}\n"]}

package/dist/expose.d.ts

@@ -0,0 +1,9 @@
+import { type Surface } from "./caller.ts";
+import { type Registry } from "./registry.ts";
+/** expose 를 쓰는 명령어가 하나라도 있는지. false = 표면과 무관하게 같은 목록 (보기 = 원본) */
+export declare function hasExposure(registry: Registry): boolean;
+/**
+ * surface 에서 보이는 Registry. 숨길 명령어가 없으면 registry 그대로 (같은 객체).
+ * 같은 숨김 집합 = 같은 보기 객체 (도구 목록 · manifestHash 를 보기별로 1회 계산할 수 있다)
+ */
+export declare function exposedRegistry(registry: Registry, surface: Surface): Registry;

package/dist/expose.js

@@ -0,0 +1,52 @@
+import { isExposedOn } from "./caller.js";
+import { filterRegistry } from "./registry.js";
+/**
+ * 표면별 노출 (defineCommand expose, spec §4) 의 Registry 보기.
+ * 숨긴 명령어 = 그 표면에서 없는 명령어: 보기에는 명령어 · 별칭 · (남은 명령어가 없는) 네임스페이스가 없다.
+ * help · tools/list · UNKNOWN_COMMAND (suggested · usage) · invoke 가 모두 보기를 쓰므로 없는 ID 와 구분되지 않는다.
+ * 판정 입력 = 서버가 정한 표면 (surfaceOf(principal, transport)) 만
+ */
+const rules = new WeakMap();
+const views = new WeakMap();
+/** expose 를 쓰는 명령어가 하나라도 있는지. false = 표면과 무관하게 같은 목록 (보기 = 원본) */
+export function hasExposure(registry) {
+    let value = rules.get(registry);
+    if (value === undefined) {
+        value = false;
+        for (const entry of registry.commands.values()) {
+            if (entry.command.expose !== undefined) {
+                value = true;
+                break;
+            }
+        }
+        rules.set(registry, value);
+    }
+    return value;
+}
+/**
+ * surface 에서 보이는 Registry. 숨길 명령어가 없으면 registry 그대로 (같은 객체).
+ * 같은 숨김 집합 = 같은 보기 객체 (도구 목록 · manifestHash 를 보기별로 1회 계산할 수 있다)
+ */
+export function exposedRegistry(registry, surface) {
+    if (!hasExposure(registry))
+        return registry;
+    const hidden = [];
+    for (const entry of registry.commands.values()) {
+        if (!isExposedOn(entry.command.expose, surface))
+            hidden.push(entry.id);
+    }
+    if (hidden.length === 0)
+        return registry;
+    let cache = views.get(registry);
+    if (!cache)
+        views.set(registry, (cache = new Map()));
+    const key = hidden.join("\n");
+    let view = cache.get(key);
+    if (!view) {
+        const set = new Set(hidden);
+        view = filterRegistry(registry, (entry) => !set.has(entry.id));
+        cache.set(key, view);
+    }
+    return view;
+}
+//# sourceMappingURL=expose.js.map

package/dist/expose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expose.js","sourceRoot":"","sources":["../src/expose.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAgB,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,cAAc,EAAiB,MAAM,eAAe,CAAA;AAE7D;;;;;GAKG;AAEH,MAAM,KAAK,GAAG,IAAI,OAAO,EAAqB,CAAA;AAC9C,MAAM,KAAK,GAAG,IAAI,OAAO,EAAmC,CAAA;AAE5D,kEAAkE;AAClE,MAAM,UAAU,WAAW,CAAC,QAAkB;IAC5C,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,KAAK,GAAG,KAAK,CAAA;QACb,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvC,KAAK,GAAG,IAAI,CAAA;gBACZ,MAAK;YACP,CAAC;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC5B,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAkB,EAAE,OAAgB;IAClE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC3C,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/C,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IACxC,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC/B,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAA;IACpD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7B,IAAI,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACzB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;QAC3B,IAAI,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;QAC9D,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACtB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC","sourcesContent":["import { isExposedOn, type Surface } from \"./caller.ts\"\nimport { filterRegistry, type Registry } from \"./registry.ts\"\n\n/**\n * 표면별 노출 (defineCommand expose, spec §4) 의 Registry 보기.\n * 숨긴 명령어 = 그 표면에서 없는 명령어: 보기에는 명령어 · 별칭 · (남은 명령어가 없는) 네임스페이스가 없다.\n * help · tools/list · UNKNOWN_COMMAND (suggested · usage) · invoke 가 모두 보기를 쓰므로 없는 ID 와 구분되지 않는다.\n * 판정 입력 = 서버가 정한 표면 (surfaceOf(principal, transport)) 만\n */\n\nconst rules = new WeakMap<Registry, boolean>()\nconst views = new WeakMap<Registry, Map<string, Registry>>()\n\n/** expose 를 쓰는 명령어가 하나라도 있는지. false = 표면과 무관하게 같은 목록 (보기 = 원본) */\nexport function hasExposure(registry: Registry): boolean {\n  let value = rules.get(registry)\n  if (value === undefined) {\n    value = false\n    for (const entry of registry.commands.values()) {\n      if (entry.command.expose !== undefined) {\n        value = true\n        break\n      }\n    }\n    rules.set(registry, value)\n  }\n  return value\n}\n\n/**\n * surface 에서 보이는 Registry. 숨길 명령어가 없으면 registry 그대로 (같은 객체).\n * 같은 숨김 집합 = 같은 보기 객체 (도구 목록 · manifestHash 를 보기별로 1회 계산할 수 있다)\n */\nexport function exposedRegistry(registry: Registry, surface: Surface): Registry {\n  if (!hasExposure(registry)) return registry\n  const hidden: string[] = []\n  for (const entry of registry.commands.values()) {\n    if (!isExposedOn(entry.command.expose, surface)) hidden.push(entry.id)\n  }\n  if (hidden.length === 0) return registry\n  let cache = views.get(registry)\n  if (!cache) views.set(registry, (cache = new Map()))\n  const key = hidden.join(\"\\n\")\n  let view = cache.get(key)\n  if (!view) {\n    const set = new Set(hidden)\n    view = filterRegistry(registry, (entry) => !set.has(entry.id))\n    cache.set(key, view)\n  }\n  return view\n}\n"]}

package/dist/index.d.ts

@@ -1,19 +1,26 @@
 export { VERSION } from "./version.ts";
 export { DEFAULT_TASK_TTL_MS, defineCommand, isCommand } from "./command.ts";
-export type { Ask, AskRequest, Command, CommandContext, CommandDefinition, ConfirmRequest, InputRequest, InputSchema, MextApp, ProgressUpdate, TaskOptions, UrlRequest, } from "./command.ts";
+export type { Ask, AskRequest, Command, CommandAudit, CommandContext, CommandDefinition, ConfirmRequest, InputRequest, InputSchema, MextApp, ProgressUpdate, TaskOptions, UrlRequest, } from "./command.ts";
 export { collectResources, collectResourceSet, createLazyResourceSet, createResourceSet, defineResource, describeResource, isResource, loadResourceSet, matchResource, parseUriTemplate, resourceEntries, withResources, } from "./resource.ts";
 export type { LazyResourceInput, ManifestResource, RegisteredResource, Resource, ResourceCompleteContext, ResourceCompleter, ResourceContext, ResourceDefinition, ResourceInput, ResourceListItem, ResourceSet, ResourceVariables, UriTemplatePattern, } from "./resource.ts";
 export { collectPrompts, collectPromptSet, createLazyPromptSet, createPromptSet, definePrompt, describePrompt, isPrompt, loadPromptSet, promptArguments, withPrompts, } from "./prompt.ts";
 export type { LazyPromptInput, ManifestPrompt, Prompt, PromptArgs, PromptArgument, PromptCompleteContext, PromptCompleter, PromptContext, PromptDefinition, PromptInput, PromptMessage, PromptResult, PromptSet, RegisteredPrompt, } from "./prompt.ts";
 export { ANONYMOUS, hasScope, localPrincipal } from "./principal.ts";
-export type { Principal } from "./principal.ts";
-export { CommandError, inputDeclined, isCommandError, isMextError, MextBuildError, MextError, RESERVED_ERROR_CODES, unauthenticated, } from "./errors.ts";
+export type { Actor, ActorKind, Principal } from "./principal.ts";
+export { ANY_SURFACE, callerOf, defaultSurface, isExposedOn, surfaceOf } from "./caller.ts";
+export type { BuiltinSurface, Caller, Exposure, ReportedClient, Surface } from "./caller.ts";
+export { exposedRegistry, hasExposure } from "./expose.ts";
+export { approvalModeOf, isApprovalMark } from "./approval.ts";
+export type { ApprovalConfig, ApprovalMode, ApprovalSignal } from "./approval.ts";
+export { auditHidden, startAudit } from "./audit.ts";
+export type { AuditConfig, AuditContext, AuditEvent, AuditOutcome, AuditTarget, AuditTrail } from "./audit.ts";
+export { CommandError, approvalRequired, inputDeclined, isCommandError, isMextError, MextBuildError, MextError, RESERVED_ERROR_CODES, unauthenticated, } from "./errors.ts";
 export type { ArgumentIssue, BuildIssue, BuildIssueCode, MextErrorCode, MextErrorDetails } from "./errors.ts";
 export { authorize, confirmationMessage, createContext, findCommand, invalidArgument, invoke, OutputValidationError, parseInput } from "./invoke.ts";
 export type { AskHandler, AskHandlerRequest, DetachedExecution, InvokeOptions, InvokeResult } from "./invoke.ts";
 export { findInstrumentation, INSTRUMENTATION_FILE, loadInstrumentation, loadProjectInstrumentation, } from "./instrumentation.ts";
-export type { CommandErrorInfo, Instrumentation, InstrumentationModule, LoadInstrumentationOptions, OtelApi, Transport, } from "./instrumentation.ts";
-export { collectRegistry, createLazyRegistry, createRegistry, loadCommand, resolveCommand } from "./registry.ts";
+export type { CommandErrorInfo, Instrumentation, InstrumentationModule, LoadInstrumentationOptions, OtelApi, TraceIds, Transport, } from "./instrumentation.ts";
+export { collectRegistry, createLazyRegistry, createRegistry, filterRegistry, loadCommand, resolveCommand } from "./registry.ts";
 export type { JsonSchema, LazyCommandInput, NamespaceInfo, RegisteredCommand, Registry, RegistryCommandInput, RegistryInput, RegistryNamespaceInput, } from "./registry.ts";
 export { collectCommands, loadRegistry, scanCommands, walkCommands } from "./scan.ts";
 export type { ScannedFile, ScanResult } from "./scan.ts";
@@ -26,6 +33,8 @@ export { BUILD_DIR, BUILD_MANIFEST_FILE, buildProject, HANDLER_JS, RolldownUnava
 export type { BuildOptions, BuildResult, BuildWarning, RolldownModule, RolldownOutputItem } from "./build.ts";
 export { formatBuildSummary, runBuild } from "./cli/build.ts";
 export { mextVersion } from "./version.ts";
+export { renderTypes, resolveTypesPath, TYPES_FILE, writeTypes } from "./typegen.ts";
+export type { WriteTypesResult } from "./typegen.ts";
 export * from "./mcp/index.ts";
 export { CLI_BUILTIN_COMMANDS, CONFIG_FILE, createApp, defineConfig, loadConfig, resolveCommandsDir, resolveLocalPrincipal } from "./config.ts";
 export { resolveResourcesDir } from "./config.ts";
@@ -33,7 +42,7 @@ export { resolvePromptsDir } from "./config.ts";
 export { resolveRoutesDir } from "./config.ts";
 export { memoryState } from "./state.ts";
 export type { MemoryStateOptions, MextBus, MextState, MextStore } from "./state.ts";
-export type { CliConfig, McpCapabilities, McpConfig, McpConnectHandler, McpConnection, MextConfig } from "./config.ts";
+export type { CliConfig, LocalPrincipalRequest, McpCapabilities, McpConfig, McpConnectHandler, McpConnection, MextConfig } from "./config.ts";
 export { buildCustomerCli, CLI_BIN_FILE, CLI_DIR, customerCliIssues } from "./build-cli.ts";
 export type { BuildCustomerCliOptions, CustomerCliBuild } from "./build-cli.ts";
 export { runCustomerCli } from "./client/main.ts";

package/dist/index.js

@@ -3,16 +3,21 @@ export { DEFAULT_TASK_TTL_MS, defineCommand, isCommand } from "./command.js";
 export { collectResources, collectResourceSet, createLazyResourceSet, createResourceSet, defineResource, describeResource, isResource, loadResourceSet, matchResource, parseUriTemplate, resourceEntries, withResources, } from "./resource.js";
 export { collectPrompts, collectPromptSet, createLazyPromptSet, createPromptSet, definePrompt, describePrompt, isPrompt, loadPromptSet, promptArguments, withPrompts, } from "./prompt.js";
 export { ANONYMOUS, hasScope, localPrincipal } from "./principal.js";
-export { CommandError, inputDeclined, isCommandError, isMextError, MextBuildError, MextError, RESERVED_ERROR_CODES, unauthenticated, } from "./errors.js";
+export { ANY_SURFACE, callerOf, defaultSurface, isExposedOn, surfaceOf } from "./caller.js";
+export { exposedRegistry, hasExposure } from "./expose.js";
+export { approvalModeOf, isApprovalMark } from "./approval.js";
+export { auditHidden, startAudit } from "./audit.js";
+export { CommandError, approvalRequired, inputDeclined, isCommandError, isMextError, MextBuildError, MextError, RESERVED_ERROR_CODES, unauthenticated, } from "./errors.js";
 export { authorize, confirmationMessage, createContext, findCommand, invalidArgument, invoke, OutputValidationError, parseInput } from "./invoke.js";
 export { findInstrumentation, INSTRUMENTATION_FILE, loadInstrumentation, loadProjectInstrumentation, } from "./instrumentation.js";
-export { collectRegistry, createLazyRegistry, createRegistry, loadCommand, resolveCommand } from "./registry.js";
+export { collectRegistry, createLazyRegistry, createRegistry, filterRegistry, loadCommand, resolveCommand } from "./registry.js";
 export { collectCommands, loadRegistry, scanCommands, walkCommands } from "./scan.js";
 export { buildManifest, describeCommand, generateManifest, MANIFEST_SCHEMA_VERSION, manifestHash } from "./manifest.js";
 export { collectRoutes, loadRoutes, ROUTE_METHODS, walkRoutes } from "./route.js";
 export { BUILD_DIR, BUILD_MANIFEST_FILE, buildProject, HANDLER_JS, RolldownUnavailableError, SERVER_JS, START_ENTRY } from "./build.js";
 export { formatBuildSummary, runBuild } from "./cli/build.js";
 export { mextVersion } from "./version.js";
+export { renderTypes, resolveTypesPath, TYPES_FILE, writeTypes } from "./typegen.js";
 export * from "./mcp/index.js";
 export { CLI_BUILTIN_COMMANDS, CONFIG_FILE, createApp, defineConfig, loadConfig, resolveCommandsDir, resolveLocalPrincipal } from "./config.js";
 export { resolveResourcesDir } from "./config.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAe5E,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,aAAa,GACd,MAAM,eAAe,CAAA;AAgBtB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,aAAa,EACb,eAAe,EACf,WAAW,GACZ,MAAM,aAAa,CAAA;AAiBpB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAEpE,OAAO,EACL,YAAY,EACZ,aAAa,EACb,cAAc,EACd,WAAW,EACX,cAAc,EACd,SAAS,EACT,oBAAoB,EACpB,eAAe,GAChB,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAEpJ,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,sBAAsB,CAAA;AAS7B,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAWhH,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAErF,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAGvH,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEjF,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,YAAY,EAAE,UAAU,EAAE,wBAAwB,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAEvI,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,cAAc,gBAAgB,CAAA;AAC9B,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAC/I,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAGxC,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAE3F,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEjD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAEnE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAE9C,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAGnD,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAE/H,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,eAAe,CAAA;AAEtB,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9F,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAE/D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,cAAc,mBAAmB,CAAA;AACjC,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA","sourcesContent":["export { VERSION } from \"./version.ts\"\n\nexport { DEFAULT_TASK_TTL_MS, defineCommand, isCommand } from \"./command.ts\"\nexport type {\n  Ask,\n  AskRequest,\n  Command,\n  CommandContext,\n  CommandDefinition,\n  ConfirmRequest,\n  InputRequest,\n  InputSchema,\n  MextApp,\n  ProgressUpdate,\n  TaskOptions,\n  UrlRequest,\n} from \"./command.ts\"\nexport {\n  collectResources,\n  collectResourceSet,\n  createLazyResourceSet,\n  createResourceSet,\n  defineResource,\n  describeResource,\n  isResource,\n  loadResourceSet,\n  matchResource,\n  parseUriTemplate,\n  resourceEntries,\n  withResources,\n} from \"./resource.ts\"\nexport type {\n  LazyResourceInput,\n  ManifestResource,\n  RegisteredResource,\n  Resource,\n  ResourceCompleteContext,\n  ResourceCompleter,\n  ResourceContext,\n  ResourceDefinition,\n  ResourceInput,\n  ResourceListItem,\n  ResourceSet,\n  ResourceVariables,\n  UriTemplatePattern,\n} from \"./resource.ts\"\nexport {\n  collectPrompts,\n  collectPromptSet,\n  createLazyPromptSet,\n  createPromptSet,\n  definePrompt,\n  describePrompt,\n  isPrompt,\n  loadPromptSet,\n  promptArguments,\n  withPrompts,\n} from \"./prompt.ts\"\nexport type {\n  LazyPromptInput,\n  ManifestPrompt,\n  Prompt,\n  PromptArgs,\n  PromptArgument,\n  PromptCompleteContext,\n  PromptCompleter,\n  PromptContext,\n  PromptDefinition,\n  PromptInput,\n  PromptMessage,\n  PromptResult,\n  PromptSet,\n  RegisteredPrompt,\n} from \"./prompt.ts\"\nexport { ANONYMOUS, hasScope, localPrincipal } from \"./principal.ts\"\nexport type { Principal } from \"./principal.ts\"\nexport {\n  CommandError,\n  inputDeclined,\n  isCommandError,\n  isMextError,\n  MextBuildError,\n  MextError,\n  RESERVED_ERROR_CODES,\n  unauthenticated,\n} from \"./errors.ts\"\nexport type { ArgumentIssue, BuildIssue, BuildIssueCode, MextErrorCode, MextErrorDetails } from \"./errors.ts\"\nexport { authorize, confirmationMessage, createContext, findCommand, invalidArgument, invoke, OutputValidationError, parseInput } from \"./invoke.ts\"\nexport type { AskHandler, AskHandlerRequest, DetachedExecution, InvokeOptions, InvokeResult } from \"./invoke.ts\"\nexport {\n  findInstrumentation,\n  INSTRUMENTATION_FILE,\n  loadInstrumentation,\n  loadProjectInstrumentation,\n} from \"./instrumentation.ts\"\nexport type {\n  CommandErrorInfo,\n  Instrumentation,\n  InstrumentationModule,\n  LoadInstrumentationOptions,\n  OtelApi,\n  Transport,\n} from \"./instrumentation.ts\"\nexport { collectRegistry, createLazyRegistry, createRegistry, loadCommand, resolveCommand } from \"./registry.ts\"\nexport type {\n  JsonSchema,\n  LazyCommandInput,\n  NamespaceInfo,\n  RegisteredCommand,\n  Registry,\n  RegistryCommandInput,\n  RegistryInput,\n  RegistryNamespaceInput,\n} from \"./registry.ts\"\nexport { collectCommands, loadRegistry, scanCommands, walkCommands } from \"./scan.ts\"\nexport type { ScannedFile, ScanResult } from \"./scan.ts\"\nexport { buildManifest, describeCommand, generateManifest, MANIFEST_SCHEMA_VERSION, manifestHash } from \"./manifest.ts\"\nexport type { BuildManifest, BuildManifestCommand, BuildManifestResource, BuildManifestRoute, Manifest, ManifestCommand, ManifestNamespace } from \"./manifest.ts\"\nexport type { BuildManifestPrompt } from \"./manifest.ts\"\nexport { collectRoutes, loadRoutes, ROUTE_METHODS, walkRoutes } from \"./route.ts\"\nexport type { RouteContext, RouteEntry, RouteHandler, RouteMethod, RouteModule, ScannedRoute } from \"./route.ts\"\nexport { BUILD_DIR, BUILD_MANIFEST_FILE, buildProject, HANDLER_JS, RolldownUnavailableError, SERVER_JS, START_ENTRY } from \"./build.ts\"\nexport type { BuildOptions, BuildResult, BuildWarning, RolldownModule, RolldownOutputItem } from \"./build.ts\"\nexport { formatBuildSummary, runBuild } from \"./cli/build.ts\"\nexport { mextVersion } from \"./version.ts\"\nexport * from \"./mcp/index.ts\"\nexport { CLI_BUILTIN_COMMANDS, CONFIG_FILE, createApp, defineConfig, loadConfig, resolveCommandsDir, resolveLocalPrincipal } from \"./config.ts\"\nexport { resolveResourcesDir } from \"./config.ts\"\nexport { resolvePromptsDir } from \"./config.ts\"\nexport { resolveRoutesDir } from \"./config.ts\"\nexport { memoryState } from \"./state.ts\"\nexport type { MemoryStateOptions, MextBus, MextState, MextStore } from \"./state.ts\"\nexport type { CliConfig, McpCapabilities, McpConfig, McpConnectHandler, McpConnection, MextConfig } from \"./config.ts\"\nexport { buildCustomerCli, CLI_BIN_FILE, CLI_DIR, customerCliIssues } from \"./build-cli.ts\"\nexport type { BuildCustomerCliOptions, CustomerCliBuild } from \"./build-cli.ts\"\nexport { runCustomerCli } from \"./client/main.ts\"\nexport type { CustomerCliConfig } from \"./client/main.ts\"\nexport { clientManifest, manifestHelp } from \"./client/manifest.ts\"\nexport type { ClientManifest, ClientManifestCommand } from \"./client/manifest.ts\"\nexport { runRemote } from \"./client/runner.ts\"\nexport type { HelpSource, RemoteRunOptions } from \"./client/runner.ts\"\nexport { runCli, SUBCOMMANDS } from \"./cli/main.ts\"\nexport type { CliSubcommand } from \"./cli/main.ts\"\nexport type { CliIo, CliWriter } from \"./cli/io.ts\"\nexport { analyzeInput, assertCliConvertible, cliBuildIssues, cliSpec, parseArgs, RESERVED_FLAGS, toKebab } from \"./cli/args.ts\"\nexport type { CliField, CliSpec, FieldKind, ParseArgsOptions, ParsedArgs, Primitive, ScalarKind } from \"./cli/args.ts\"\nexport {\n  cliPath,\n  formatInvocation,\n  renderCommandHelp,\n  renderHelp,\n  renderNamespaceHelp,\n  resolveHelpTarget,\n} from \"./cli/help.ts\"\nexport type { HelpOptions, HelpTarget } from \"./cli/help.ts\"\nexport { errorJson, exitCodeOf, formatError, formatJson, formatResult } from \"./cli/output.ts\"\nexport type { CliErrorFormatter, CliErrorInfo, CliErrorOutput } from \"./cli/output.ts\"\nexport { loginCommand, resolveServerUrl } from \"./cli/login.ts\"\nexport type { AuthCommandOptions } from \"./cli/login.ts\"\nexport { logoutCommand } from \"./cli/logout.ts\"\nexport * from \"./remote/index.ts\"\nexport { cliSpecFromJsonSchema, defineCliSpec } from \"./cli/args.ts\"\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAgB5E,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,aAAa,GACd,MAAM,eAAe,CAAA;AAgBtB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,aAAa,EACb,eAAe,EACf,WAAW,GACZ,MAAM,aAAa,CAAA;AAiBpB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAEpE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAE3F,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAC1D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9D,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEpD,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,WAAW,EACX,cAAc,EACd,SAAS,EACT,oBAAoB,EACpB,eAAe,GAChB,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAEpJ,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,sBAAsB,CAAA;AAU7B,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAWhI,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAErF,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAGvH,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEjF,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,YAAY,EAAE,UAAU,EAAE,wBAAwB,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAEvI,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAEpF,cAAc,gBAAgB,CAAA;AAC9B,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAC/I,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAGxC,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAE3F,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEjD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAEnE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAE9C,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAGnD,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAE/H,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,eAAe,CAAA;AAEtB,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9F,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAE/D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,cAAc,mBAAmB,CAAA;AACjC,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA","sourcesContent":["export { VERSION } from \"./version.ts\"\n\nexport { DEFAULT_TASK_TTL_MS, defineCommand, isCommand } from \"./command.ts\"\nexport type {\n  Ask,\n  AskRequest,\n  Command,\n  CommandAudit,\n  CommandContext,\n  CommandDefinition,\n  ConfirmRequest,\n  InputRequest,\n  InputSchema,\n  MextApp,\n  ProgressUpdate,\n  TaskOptions,\n  UrlRequest,\n} from \"./command.ts\"\nexport {\n  collectResources,\n  collectResourceSet,\n  createLazyResourceSet,\n  createResourceSet,\n  defineResource,\n  describeResource,\n  isResource,\n  loadResourceSet,\n  matchResource,\n  parseUriTemplate,\n  resourceEntries,\n  withResources,\n} from \"./resource.ts\"\nexport type {\n  LazyResourceInput,\n  ManifestResource,\n  RegisteredResource,\n  Resource,\n  ResourceCompleteContext,\n  ResourceCompleter,\n  ResourceContext,\n  ResourceDefinition,\n  ResourceInput,\n  ResourceListItem,\n  ResourceSet,\n  ResourceVariables,\n  UriTemplatePattern,\n} from \"./resource.ts\"\nexport {\n  collectPrompts,\n  collectPromptSet,\n  createLazyPromptSet,\n  createPromptSet,\n  definePrompt,\n  describePrompt,\n  isPrompt,\n  loadPromptSet,\n  promptArguments,\n  withPrompts,\n} from \"./prompt.ts\"\nexport type {\n  LazyPromptInput,\n  ManifestPrompt,\n  Prompt,\n  PromptArgs,\n  PromptArgument,\n  PromptCompleteContext,\n  PromptCompleter,\n  PromptContext,\n  PromptDefinition,\n  PromptInput,\n  PromptMessage,\n  PromptResult,\n  PromptSet,\n  RegisteredPrompt,\n} from \"./prompt.ts\"\nexport { ANONYMOUS, hasScope, localPrincipal } from \"./principal.ts\"\nexport type { Actor, ActorKind, Principal } from \"./principal.ts\"\nexport { ANY_SURFACE, callerOf, defaultSurface, isExposedOn, surfaceOf } from \"./caller.ts\"\nexport type { BuiltinSurface, Caller, Exposure, ReportedClient, Surface } from \"./caller.ts\"\nexport { exposedRegistry, hasExposure } from \"./expose.ts\"\nexport { approvalModeOf, isApprovalMark } from \"./approval.ts\"\nexport type { ApprovalConfig, ApprovalMode, ApprovalSignal } from \"./approval.ts\"\nexport { auditHidden, startAudit } from \"./audit.ts\"\nexport type { AuditConfig, AuditContext, AuditEvent, AuditOutcome, AuditTarget, AuditTrail } from \"./audit.ts\"\nexport {\n  CommandError,\n  approvalRequired,\n  inputDeclined,\n  isCommandError,\n  isMextError,\n  MextBuildError,\n  MextError,\n  RESERVED_ERROR_CODES,\n  unauthenticated,\n} from \"./errors.ts\"\nexport type { ArgumentIssue, BuildIssue, BuildIssueCode, MextErrorCode, MextErrorDetails } from \"./errors.ts\"\nexport { authorize, confirmationMessage, createContext, findCommand, invalidArgument, invoke, OutputValidationError, parseInput } from \"./invoke.ts\"\nexport type { AskHandler, AskHandlerRequest, DetachedExecution, InvokeOptions, InvokeResult } from \"./invoke.ts\"\nexport {\n  findInstrumentation,\n  INSTRUMENTATION_FILE,\n  loadInstrumentation,\n  loadProjectInstrumentation,\n} from \"./instrumentation.ts\"\nexport type {\n  CommandErrorInfo,\n  Instrumentation,\n  InstrumentationModule,\n  LoadInstrumentationOptions,\n  OtelApi,\n  TraceIds,\n  Transport,\n} from \"./instrumentation.ts\"\nexport { collectRegistry, createLazyRegistry, createRegistry, filterRegistry, loadCommand, resolveCommand } from \"./registry.ts\"\nexport type {\n  JsonSchema,\n  LazyCommandInput,\n  NamespaceInfo,\n  RegisteredCommand,\n  Registry,\n  RegistryCommandInput,\n  RegistryInput,\n  RegistryNamespaceInput,\n} from \"./registry.ts\"\nexport { collectCommands, loadRegistry, scanCommands, walkCommands } from \"./scan.ts\"\nexport type { ScannedFile, ScanResult } from \"./scan.ts\"\nexport { buildManifest, describeCommand, generateManifest, MANIFEST_SCHEMA_VERSION, manifestHash } from \"./manifest.ts\"\nexport type { BuildManifest, BuildManifestCommand, BuildManifestResource, BuildManifestRoute, Manifest, ManifestCommand, ManifestNamespace } from \"./manifest.ts\"\nexport type { BuildManifestPrompt } from \"./manifest.ts\"\nexport { collectRoutes, loadRoutes, ROUTE_METHODS, walkRoutes } from \"./route.ts\"\nexport type { RouteContext, RouteEntry, RouteHandler, RouteMethod, RouteModule, ScannedRoute } from \"./route.ts\"\nexport { BUILD_DIR, BUILD_MANIFEST_FILE, buildProject, HANDLER_JS, RolldownUnavailableError, SERVER_JS, START_ENTRY } from \"./build.ts\"\nexport type { BuildOptions, BuildResult, BuildWarning, RolldownModule, RolldownOutputItem } from \"./build.ts\"\nexport { formatBuildSummary, runBuild } from \"./cli/build.ts\"\nexport { mextVersion } from \"./version.ts\"\nexport { renderTypes, resolveTypesPath, TYPES_FILE, writeTypes } from \"./typegen.ts\"\nexport type { WriteTypesResult } from \"./typegen.ts\"\nexport * from \"./mcp/index.ts\"\nexport { CLI_BUILTIN_COMMANDS, CONFIG_FILE, createApp, defineConfig, loadConfig, resolveCommandsDir, resolveLocalPrincipal } from \"./config.ts\"\nexport { resolveResourcesDir } from \"./config.ts\"\nexport { resolvePromptsDir } from \"./config.ts\"\nexport { resolveRoutesDir } from \"./config.ts\"\nexport { memoryState } from \"./state.ts\"\nexport type { MemoryStateOptions, MextBus, MextState, MextStore } from \"./state.ts\"\nexport type { CliConfig, LocalPrincipalRequest, McpCapabilities, McpConfig, McpConnectHandler, McpConnection, MextConfig } from \"./config.ts\"\nexport { buildCustomerCli, CLI_BIN_FILE, CLI_DIR, customerCliIssues } from \"./build-cli.ts\"\nexport type { BuildCustomerCliOptions, CustomerCliBuild } from \"./build-cli.ts\"\nexport { runCustomerCli } from \"./client/main.ts\"\nexport type { CustomerCliConfig } from \"./client/main.ts\"\nexport { clientManifest, manifestHelp } from \"./client/manifest.ts\"\nexport type { ClientManifest, ClientManifestCommand } from \"./client/manifest.ts\"\nexport { runRemote } from \"./client/runner.ts\"\nexport type { HelpSource, RemoteRunOptions } from \"./client/runner.ts\"\nexport { runCli, SUBCOMMANDS } from \"./cli/main.ts\"\nexport type { CliSubcommand } from \"./cli/main.ts\"\nexport type { CliIo, CliWriter } from \"./cli/io.ts\"\nexport { analyzeInput, assertCliConvertible, cliBuildIssues, cliSpec, parseArgs, RESERVED_FLAGS, toKebab } from \"./cli/args.ts\"\nexport type { CliField, CliSpec, FieldKind, ParseArgsOptions, ParsedArgs, Primitive, ScalarKind } from \"./cli/args.ts\"\nexport {\n  cliPath,\n  formatInvocation,\n  renderCommandHelp,\n  renderHelp,\n  renderNamespaceHelp,\n  resolveHelpTarget,\n} from \"./cli/help.ts\"\nexport type { HelpOptions, HelpTarget } from \"./cli/help.ts\"\nexport { errorJson, exitCodeOf, formatError, formatJson, formatResult } from \"./cli/output.ts\"\nexport type { CliErrorFormatter, CliErrorInfo, CliErrorOutput } from \"./cli/output.ts\"\nexport { loginCommand, resolveServerUrl } from \"./cli/login.ts\"\nexport type { AuthCommandOptions } from \"./cli/login.ts\"\nexport { logoutCommand } from \"./cli/logout.ts\"\nexport * from \"./remote/index.ts\"\nexport { cliSpecFromJsonSchema, defineCliSpec } from \"./cli/args.ts\"\n"]}