@particle-academy/agent-integrations 0.44.0 → 0.46.0

package/dist/{types-C4NaIW6B.d.cts → types-EcElKOlk.d.cts}

@@ -1,4 +1,4 @@
-import { T as ToolHost } from './tool-host-BpEBqf5u.cjs';
+import { T as ToolHost } from './tool-host-LVBgCN5m.cjs';
 
 /**
  * Bridge — registers a cohesive set of MCP tools/resources for a single

package/dist/undo/index.d.cts

@@ -1,7 +1,7 @@
 import * as _particle_academy_fancy_auto_common from '@particle-academy/fancy-auto-common';
 export { UndoEntry, clearStack, pushUndoEntry, readHistory, redoOne, resetAllUndoStacks, undoOne } from '@particle-academy/fancy-auto-common';
-import { T as ToolHost } from '../tool-host-BpEBqf5u.cjs';
-import '../types-C58ZXs4K.cjs';
+import { T as ToolHost } from '../tool-host-LVBgCN5m.cjs';
+import '../types-C2DtnHIn.cjs';
 
 type UndoToolsOptions = {
     /** Default agent id when the caller doesn't pass one. */

package/dist/undo/index.d.ts

@@ -1,7 +1,7 @@
 import * as _particle_academy_fancy_auto_common from '@particle-academy/fancy-auto-common';
 export { UndoEntry, clearStack, pushUndoEntry, readHistory, redoOne, resetAllUndoStacks, undoOne } from '@particle-academy/fancy-auto-common';
-import { T as ToolHost } from '../tool-host-xY5F-eqG.js';
-import '../types-C58ZXs4K.js';
+import { T as ToolHost } from '../tool-host-Wo0pkY83.js';
+import '../types-C2DtnHIn.js';
 
 type UndoToolsOptions = {
     /** Default agent id when the caller doesn't pass one. */

package/dist/undo.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/mcp/server.ts","../src/undo/undo-tools.ts","../src/undo/use-undo-stack.ts"],"names":["undoOne","redoOne","readHistory","useState","useEffect","useCallback"],"mappings":";;;;;;;;AAsLO,SAAS,UAAA,CAAW,MAAc,UAAA,EAAkC;AACzE,EAAA,OAAO;AAAA,IACL,SAAS,CAAC,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA;AAAA,IAChC,GAAI,UAAA,KAAe,MAAA,GAAY,EAAE,iBAAA,EAAmB,UAAA,KAAe;AAAC,GACtE;AACF;AAEO,SAAS,YAAY,IAAA,EAA8B;AACxD,EAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,CAAA,EAAG,OAAA,EAAS,IAAA,EAAK;AAC5D;;;AClLA,IAAM,cAAA,uBAAqB,OAAA,EAAkB;AAMtC,SAAS,yBAAA,CAA0B,IAAA,EAAgB,OAAA,GAA4B,EAAC,EAAS;AAC9F,EAAA,IAAI,cAAA,CAAe,GAAA,CAAI,IAAI,CAAA,EAAG;AAC9B,EAAA,cAAA,CAAe,IAAI,IAAI,CAAA;AACvB,EAAA,iBAAA,CAAkB,MAAM,OAAO,CAAA;AACjC;AAMO,SAAS,iBAAA,CAAkB,IAAA,EAAgB,OAAA,GAA4B,EAAC,EAAe;AAC5F,EAAA,MAAM,YAAA,GAAe,QAAQ,cAAA,IAAkB,OAAA;AAC/C,EAAA,MAAM,YAA+B,EAAC;AACtC,EAAA,MAAM,OAAA,GAAU,CAAC,IAAA,KACf,OAAO,MAAM,OAAA,KAAY,QAAA,GAAW,KAAK,OAAA,GAAU,YAAA;AAErD,EAAA,SAAA,CAAU,IAAA;AAAA,IACR,IAAA,CAAK,YAAA;AAAA,MACH;AAAA,QACE,IAAA,EAAM,YAAA;AAAA,QACN,WAAA,EAAa,8FAAA;AAAA,QACb,WAAA,EAAa;AAAA,UACX,IAAA,EAAM,QAAA;AAAA,UACN,YAAY,EAAE,OAAA,EAAS,EAAE,IAAA,EAAM,UAAS,EAAE;AAAA,UAC1C,oBAAA,EAAsB;AAAA;AACxB,OACF;AAAA,MACA,OAAO,IAAA,KAAS;AACd,QAAA,MAAM,KAAA,GAAQ,MAAMA,uBAAA,CAAQ,OAAA,CAAQ,IAAI,CAAC,CAAA;AACzC,QAAA,IAAI,CAAC,KAAA,EAAO,OAAO,WAAA,CAAY,kBAAkB,CAAA;AACjD,QAAA,OAAO,UAAA,CAAW,CAAA,OAAA,EAAU,KAAA,CAAM,KAAK,CAAA,CAAA,EAAI,EAAE,KAAA,EAAO,SAAA,CAAU,KAAK,CAAA,EAAG,CAAA;AAAA,MACxE;AAAA;AACF,GACF;AAEA,EAAA,SAAA,CAAU,IAAA;AAAA,IACR,IAAA,CAAK,YAAA;AAAA,MACH;AAAA,QACE,IAAA,EAAM,YAAA;AAAA,QACN,WAAA,EAAa,uCAAA;AAAA,QACb,WAAA,EAAa;AAAA,UACX,IAAA,EAAM,QAAA;AAAA,UACN,YAAY,EAAE,OAAA,EAAS,EAAE,IAAA,EAAM,UAAS,EAAE;AAAA,UAC1C,oBAAA,EAAsB;AAAA;AACxB,OACF;AAAA,MACA,OAAO,IAAA,KAAS;AACd,QAAA,MAAM,KAAA,GAAQ,MAAMC,uBAAA,CAAQ,OAAA,CAAQ,IAAI,CAAC,CAAA;AACzC,QAAA,IAAI,CAAC,KAAA,EAAO,OAAO,WAAA,CAAY,kBAAkB,CAAA;AACjD,QAAA,OAAO,UAAA,CAAW,CAAA,OAAA,EAAU,KAAA,CAAM,KAAK,CAAA,CAAA,EAAI,EAAE,KAAA,EAAO,SAAA,CAAU,KAAK,CAAA,EAAG,CAAA;AAAA,MACxE;AAAA;AACF,GACF;AAEA,EAAA,SAAA,CAAU,IAAA;AAAA,IACR,IAAA,CAAK,YAAA;AAAA,MACH;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,WAAA,EAAa,yFAAA;AAAA,QACb,WAAA,EAAa;AAAA,UACX,IAAA,EAAM,QAAA;AAAA,UACN,YAAY,EAAE,OAAA,EAAS,EAAE,IAAA,EAAM,UAAS,EAAE;AAAA,UAC1C,oBAAA,EAAsB;AAAA;AACxB,OACF;AAAA,MACA,OAAO,IAAA,KAAS;AACd,QAAA,MAAM,UAAUC,2BAAA,CAAY,OAAA,CAAQ,IAAI,CAAC,CAAA,CAAE,IAAI,SAAS,CAAA;AACxD,QAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,GAAG,IAAI,IAAA,CAAK,CAAA,CAAE,SAAS,CAAA,CAAE,WAAA,EAAa,CAAA,CAAA,EAAI,CAAA,CAAE,QAAQ,CAAA,CAAA,EAAI,CAAA,CAAE,MAAM,CAAA,EAAA,EAAK,CAAA,CAAE,KAAK,CAAA,CAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA;AACzH,QAAA,OAAO,UAAA,CAAW,IAAA,IAAQ,SAAA,EAAW,OAAO,CAAA;AAAA,MAC9C;AAAA;AACF,GACF;AAEA,EAAA,OAAO,MAAM,SAAA,CAAU,OAAA,CAAQ,CAAC,CAAA,KAAM,GAAG,CAAA;AAC3C;AAEA,SAAS,UAAU,KAAA,EAAyC;AAC1D,EAAA,OAAO;AAAA,IACL,WAAW,KAAA,CAAM,SAAA;AAAA,IACjB,UAAU,KAAA,CAAM,QAAA;AAAA,IAChB,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,OAAO,KAAA,CAAM;AAAA,GACf;AACF;AC7FO,SAAS,YAAA,CAAa,OAAA,EAAiB,UAAA,GAAa,GAAA,EAAK;AAC9D,EAAA,MAAM,CAAC,SAAS,UAAU,CAAA,GAAIC,eAAS,MAAMD,2BAAA,CAAY,OAAO,CAAC,CAAA;AAEjE,EAAAE,eAAA,CAAU,MAAM;AACd,IAAA,IAAI,SAAA,GAAY,KAAA;AAChB,IAAA,MAAM,OAAO,MAAM;AACjB,MAAA,IAAI,SAAA,EAAW;AACf,MAAA,UAAA,CAAWF,2BAAA,CAAY,OAAO,CAAC,CAAA;AAAA,IACjC,CAAA;AACA,IAAA,MAAM,EAAA,GAAK,WAAA,CAAY,IAAA,EAAM,UAAU,CAAA;AACvC,IAAA,IAAA,EAAK;AACL,IAAA,OAAO,MAAM;AAAE,MAAA,SAAA,GAAY,IAAA;AAAM,MAAA,aAAA,CAAc,EAAE,CAAA;AAAA,IAAG,CAAA;AAAA,EACtD,CAAA,EAAG,CAAC,OAAA,EAAS,UAAU,CAAC,CAAA;AAExB,EAAA,MAAM,OAAA,GAAUG,iBAAA,CAAY,MAAM,UAAA,CAAWH,2BAAA,CAAY,OAAO,CAAC,CAAA,EAAG,CAAC,OAAO,CAAC,CAAA;AAC7E,EAAA,OAAO,EAAE,SAAS,OAAA,EAAQ;AAC5B","file":"undo.cjs","sourcesContent":["import {\n  type CallToolResult,\n  type JsonObject,\n  type JsonRpcMessage,\n  type JsonRpcRequest,\n  type JsonRpcId,\n  type RegisteredTool,\n  type ServerCapabilities,\n  type ServerInfo,\n  type ToolDefinition,\n  type ToolHandler,\n  JSONRPC_INTERNAL_ERROR,\n  JSONRPC_INVALID_PARAMS,\n  JSONRPC_METHOD_NOT_FOUND,\n  MCP_PROTOCOL_VERSION,\n} from \"./types\";\nimport { ToolRegistry } from \"./tool-host\";\n\nexport type McpServerOptions = {\n  info: ServerInfo;\n  /** Defaults to { tools: { listChanged: true } } */\n  capabilities?: ServerCapabilities;\n  /** Free-text instructions surfaced to clients during initialize. */\n  instructions?: string;\n};\n\nexport type Transport = {\n  /** Called by the server when it has a message to deliver to the client. */\n  send: (message: JsonRpcMessage) => void;\n  /** Called by the server when it's torn down so the transport can clean up. */\n  close?: () => void;\n};\n\n/**\n * MicroMcpServer — protocol-level MCP server, transport-agnostic.\n *\n * Use it like:\n *\n *   const server = new MicroMcpServer({ info: { name: \"session\", version: \"0.1\" } });\n *   server.registerTool({ name: \"...\", inputSchema: { type: \"object\" } }, async (args) => ({...}));\n *   const transport = new InProcessTransport();\n *   server.attach(transport);\n *   transport.deliver({ ... }); // client → server frames\n *\n * The same server can serve multiple transports (e.g. an in-process agent\n * AND a relayed external client) by attaching each one.\n */\nexport class MicroMcpServer extends ToolRegistry {\n  private transports = new Set<Transport>();\n  private notifyListChangedScheduled = false;\n\n  readonly info: ServerInfo;\n  readonly capabilities: ServerCapabilities;\n  readonly instructions?: string;\n\n  constructor(options: McpServerOptions) {\n    super();\n    this.info = options.info;\n    this.capabilities = options.capabilities ?? { tools: { listChanged: true } };\n    this.instructions = options.instructions;\n  }\n\n  attach(transport: Transport): () => void {\n    this.transports.add(transport);\n    return () => this.detach(transport);\n  }\n\n  detach(transport: Transport): void {\n    if (this.transports.delete(transport)) {\n      transport.close?.();\n    }\n  }\n\n  unregisterTool(name: string): void {\n    if (this.tools.delete(name)) {\n      this.scheduleListChangedNotification();\n    }\n  }\n\n  protected onToolsChanged(): void {\n    this.scheduleListChangedNotification();\n  }\n\n  /**\n   * Receive a JSON-RPC frame from a client (called by the transport).\n   * The transport is responsible for sending the response back.\n   */\n  async receive(transport: Transport, message: JsonRpcMessage): Promise<void> {\n    if (!(\"method\" in message)) return; // It's a response, not a request — ignore.\n\n    const isNotification = !(\"id\" in message);\n    if (isNotification) {\n      // Notifications are fire-and-forget. We ignore unknown methods.\n      return;\n    }\n\n    const request = message as JsonRpcRequest;\n    try {\n      const result = await this.handle(request, transport);\n      transport.send({ jsonrpc: \"2.0\", id: request.id, result });\n    } catch (err) {\n      transport.send({\n        jsonrpc: \"2.0\",\n        id: request.id,\n        error: this.toRpcError(err),\n      });\n    }\n  }\n\n  private async handle(request: JsonRpcRequest, transport: Transport): Promise<any> {\n    const { method, params } = request;\n    switch (method) {\n      case \"initialize\":\n        return {\n          protocolVersion: MCP_PROTOCOL_VERSION,\n          capabilities: this.capabilities,\n          serverInfo: this.info,\n          ...(this.instructions ? { instructions: this.instructions } : {}),\n        };\n\n      case \"tools/list\":\n        return { tools: this.listTools() };\n\n      case \"tools/call\": {\n        const name = params?.name;\n        const args = (params?.arguments ?? {}) as JsonObject;\n        if (typeof name !== \"string\") {\n          throw rpcError(JSONRPC_INVALID_PARAMS, \"tools/call requires `name`\");\n        }\n        const tool = this.tools.get(name);\n        if (!tool) {\n          throw rpcError(JSONRPC_METHOD_NOT_FOUND, this.missingToolMessage(name));\n        }\n        const result = await tool.handler(args, { transport });\n        return result satisfies CallToolResult;\n      }\n\n      case \"ping\":\n        return {};\n\n      default:\n        throw rpcError(JSONRPC_METHOD_NOT_FOUND, `Unsupported method: ${method}`);\n    }\n  }\n\n  private scheduleListChangedNotification(): void {\n    if (this.notifyListChangedScheduled) return;\n    this.notifyListChangedScheduled = true;\n    queueMicrotask(() => {\n      this.notifyListChangedScheduled = false;\n      this.broadcast({ jsonrpc: \"2.0\", method: \"notifications/tools/list_changed\" });\n    });\n  }\n\n  /** Send an application notification to every client, or one attached transport. */\n  notify(message: JsonRpcMessage, transport?: Transport): void {\n    if (transport) transport.send(message);\n    else this.broadcast(message);\n  }\n\n  private broadcast(message: JsonRpcMessage): void {\n    for (const t of this.transports) t.send(message);\n  }\n\n  private toRpcError(err: unknown): { code: number; message: string; data?: any } {\n    if (err && typeof err === \"object\" && \"code\" in err && \"message\" in err) {\n      return err as any;\n    }\n    return {\n      code: JSONRPC_INTERNAL_ERROR,\n      message: err instanceof Error ? err.message : String(err),\n    };\n  }\n}\n\nexport function rpcError(code: number, message: string, data?: any) {\n  return { code, message, ...(data !== undefined ? { data } : {}) };\n}\n\n/**\n * Helper to build a CallToolResult from a string or structured value.\n */\nexport function textResult(text: string, structured?: any): CallToolResult {\n  return {\n    content: [{ type: \"text\", text }],\n    ...(structured !== undefined ? { structuredContent: structured } : {}),\n  };\n}\n\nexport function errorResult(text: string): CallToolResult {\n  return { content: [{ type: \"text\", text }], isError: true };\n}\n\n// Internal helper so the JsonRpcId import isn't dropped by tsup\ntype _KeepIdImport = JsonRpcId;\n","import { textResult, errorResult } from \"../mcp/server\";\nimport type { ToolHost } from \"../mcp/tool-host\";\nimport { readHistory, redoOne, undoOne } from \"./undo-stack\";\n\nexport type UndoToolsOptions = {\n  /** Default agent id when the caller doesn't pass one. */\n  defaultAgentId?: string;\n};\n\n/**\n * Idempotent tracker so multiple bridges on the same server only register\n * agent_undo / agent_redo / agent_history once.\n */\nconst installedHosts = new WeakSet<ToolHost>();\n\n/**\n * ensureUndoToolsRegistered — bridges call this on construction. Safe to\n * call repeatedly with the same server; subsequent calls are no-ops.\n */\nexport function ensureUndoToolsRegistered(host: ToolHost, options: UndoToolsOptions = {}): void {\n  if (installedHosts.has(host)) return;\n  installedHosts.add(host);\n  registerUndoTools(host, options);\n}\n\n/**\n * registerUndoTools — add agent_undo / agent_redo / agent_history to the\n * server. Returns a disposer that unregisters all three.\n */\nexport function registerUndoTools(host: ToolHost, options: UndoToolsOptions = {}): () => void {\n  const defaultAgent = options.defaultAgentId ?? \"agent\";\n  const disposers: Array<() => void> = [];\n  const agentOf = (args: any): string =>\n    typeof args?.agentId === \"string\" ? args.agentId : defaultAgent;\n\n  disposers.push(\n    host.registerTool(\n      {\n        name: \"agent_undo\",\n        description: \"Undo the most recent action on the agent's stack. Optional agentId targets a specific agent.\",\n        inputSchema: {\n          type: \"object\",\n          properties: { agentId: { type: \"string\" } },\n          additionalProperties: false,\n        },\n      },\n      async (args) => {\n        const entry = await undoOne(agentOf(args));\n        if (!entry) return errorResult(\"Nothing to undo.\");\n        return textResult(`Undid: ${entry.label}`, { entry: serialize(entry) });\n      },\n    ),\n  );\n\n  disposers.push(\n    host.registerTool(\n      {\n        name: \"agent_redo\",\n        description: \"Redo the most recently undone action.\",\n        inputSchema: {\n          type: \"object\",\n          properties: { agentId: { type: \"string\" } },\n          additionalProperties: false,\n        },\n      },\n      async (args) => {\n        const entry = await redoOne(agentOf(args));\n        if (!entry) return errorResult(\"Nothing to redo.\");\n        return textResult(`Redid: ${entry.label}`, { entry: serialize(entry) });\n      },\n    ),\n  );\n\n  disposers.push(\n    host.registerTool(\n      {\n        name: \"agent_history\",\n        description: \"List the agent's undo stack (oldest first). Useful for understanding what's reversible.\",\n        inputSchema: {\n          type: \"object\",\n          properties: { agentId: { type: \"string\" } },\n          additionalProperties: false,\n        },\n      },\n      async (args) => {\n        const history = readHistory(agentOf(args)).map(serialize);\n        const text = history.map((e) => `${new Date(e.timestamp).toISOString()} ${e.bridgeId} ${e.action}: ${e.label}`).join(\"\\n\");\n        return textResult(text || \"(empty)\", history);\n      },\n    ),\n  );\n\n  return () => disposers.forEach((d) => d());\n}\n\nfunction serialize(entry: import(\"./undo-stack\").UndoEntry) {\n  return {\n    timestamp: entry.timestamp,\n    bridgeId: entry.bridgeId,\n    action: entry.action,\n    label: entry.label,\n  };\n}\n","import { useState, useEffect, useCallback } from \"react\";\nimport { readHistory } from \"./undo-stack\";\n\n/**\n * useUndoStack — minimal React snapshot of an agent's history. Polls every\n * `intervalMs` (default 500). Use this to render an inline \"agent timeline\"\n * in a sidebar or activity panel. No subscription model in v1 — keeping it\n * simple; bridge mutations are infrequent enough that polling is fine.\n */\nexport function useUndoStack(agentId: string, intervalMs = 500) {\n  const [history, setHistory] = useState(() => readHistory(agentId));\n\n  useEffect(() => {\n    let cancelled = false;\n    const tick = () => {\n      if (cancelled) return;\n      setHistory(readHistory(agentId));\n    };\n    const id = setInterval(tick, intervalMs);\n    tick();\n    return () => { cancelled = true; clearInterval(id); };\n  }, [agentId, intervalMs]);\n\n  const refresh = useCallback(() => setHistory(readHistory(agentId)), [agentId]);\n  return { history, refresh };\n}\n"]}
+{"version":3,"sources":["../src/mcp/server.ts","../src/undo/undo-tools.ts","../src/undo/use-undo-stack.ts"],"names":["undoOne","redoOne","readHistory","useState","useEffect","useCallback"],"mappings":";;;;;;;;AAoOO,SAAS,UAAA,CAAW,MAAc,UAAA,EAAkC;AACzE,EAAA,OAAO;AAAA,IACL,SAAS,CAAC,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA;AAAA,IAChC,GAAI,UAAA,KAAe,MAAA,GAAY,EAAE,iBAAA,EAAmB,UAAA,KAAe;AAAC,GACtE;AACF;AAEO,SAAS,YAAY,IAAA,EAA8B;AACxD,EAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,CAAA,EAAG,OAAA,EAAS,IAAA,EAAK;AAC5D;;;AChOA,IAAM,cAAA,uBAAqB,OAAA,EAAkB;AAMtC,SAAS,yBAAA,CAA0B,IAAA,EAAgB,OAAA,GAA4B,EAAC,EAAS;AAC9F,EAAA,IAAI,cAAA,CAAe,GAAA,CAAI,IAAI,CAAA,EAAG;AAC9B,EAAA,cAAA,CAAe,IAAI,IAAI,CAAA;AACvB,EAAA,iBAAA,CAAkB,MAAM,OAAO,CAAA;AACjC;AAMO,SAAS,iBAAA,CAAkB,IAAA,EAAgB,OAAA,GAA4B,EAAC,EAAe;AAC5F,EAAA,MAAM,YAAA,GAAe,QAAQ,cAAA,IAAkB,OAAA;AAC/C,EAAA,MAAM,YAA+B,EAAC;AACtC,EAAA,MAAM,OAAA,GAAU,CAAC,IAAA,KACf,OAAO,MAAM,OAAA,KAAY,QAAA,GAAW,KAAK,OAAA,GAAU,YAAA;AAErD,EAAA,SAAA,CAAU,IAAA;AAAA,IACR,IAAA,CAAK,YAAA;AAAA,MACH;AAAA,QACE,IAAA,EAAM,YAAA;AAAA,QACN,WAAA,EAAa,8FAAA;AAAA,QACb,WAAA,EAAa;AAAA,UACX,IAAA,EAAM,QAAA;AAAA,UACN,YAAY,EAAE,OAAA,EAAS,EAAE,IAAA,EAAM,UAAS,EAAE;AAAA,UAC1C,oBAAA,EAAsB;AAAA;AACxB,OACF;AAAA,MACA,OAAO,IAAA,KAAS;AACd,QAAA,MAAM,KAAA,GAAQ,MAAMA,uBAAA,CAAQ,OAAA,CAAQ,IAAI,CAAC,CAAA;AACzC,QAAA,IAAI,CAAC,KAAA,EAAO,OAAO,WAAA,CAAY,kBAAkB,CAAA;AACjD,QAAA,OAAO,UAAA,CAAW,CAAA,OAAA,EAAU,KAAA,CAAM,KAAK,CAAA,CAAA,EAAI,EAAE,KAAA,EAAO,SAAA,CAAU,KAAK,CAAA,EAAG,CAAA;AAAA,MACxE;AAAA;AACF,GACF;AAEA,EAAA,SAAA,CAAU,IAAA;AAAA,IACR,IAAA,CAAK,YAAA;AAAA,MACH;AAAA,QACE,IAAA,EAAM,YAAA;AAAA,QACN,WAAA,EAAa,uCAAA;AAAA,QACb,WAAA,EAAa;AAAA,UACX,IAAA,EAAM,QAAA;AAAA,UACN,YAAY,EAAE,OAAA,EAAS,EAAE,IAAA,EAAM,UAAS,EAAE;AAAA,UAC1C,oBAAA,EAAsB;AAAA;AACxB,OACF;AAAA,MACA,OAAO,IAAA,KAAS;AACd,QAAA,MAAM,KAAA,GAAQ,MAAMC,uBAAA,CAAQ,OAAA,CAAQ,IAAI,CAAC,CAAA;AACzC,QAAA,IAAI,CAAC,KAAA,EAAO,OAAO,WAAA,CAAY,kBAAkB,CAAA;AACjD,QAAA,OAAO,UAAA,CAAW,CAAA,OAAA,EAAU,KAAA,CAAM,KAAK,CAAA,CAAA,EAAI,EAAE,KAAA,EAAO,SAAA,CAAU,KAAK,CAAA,EAAG,CAAA;AAAA,MACxE;AAAA;AACF,GACF;AAEA,EAAA,SAAA,CAAU,IAAA;AAAA,IACR,IAAA,CAAK,YAAA;AAAA,MACH;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,WAAA,EAAa,yFAAA;AAAA,QACb,WAAA,EAAa;AAAA,UACX,IAAA,EAAM,QAAA;AAAA,UACN,YAAY,EAAE,OAAA,EAAS,EAAE,IAAA,EAAM,UAAS,EAAE;AAAA,UAC1C,oBAAA,EAAsB;AAAA;AACxB,OACF;AAAA,MACA,OAAO,IAAA,KAAS;AACd,QAAA,MAAM,UAAUC,2BAAA,CAAY,OAAA,CAAQ,IAAI,CAAC,CAAA,CAAE,IAAI,SAAS,CAAA;AACxD,QAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,GAAG,IAAI,IAAA,CAAK,CAAA,CAAE,SAAS,CAAA,CAAE,WAAA,EAAa,CAAA,CAAA,EAAI,CAAA,CAAE,QAAQ,CAAA,CAAA,EAAI,CAAA,CAAE,MAAM,CAAA,EAAA,EAAK,CAAA,CAAE,KAAK,CAAA,CAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA;AACzH,QAAA,OAAO,UAAA,CAAW,IAAA,IAAQ,SAAA,EAAW,OAAO,CAAA;AAAA,MAC9C;AAAA;AACF,GACF;AAEA,EAAA,OAAO,MAAM,SAAA,CAAU,OAAA,CAAQ,CAAC,CAAA,KAAM,GAAG,CAAA;AAC3C;AAEA,SAAS,UAAU,KAAA,EAAyC;AAC1D,EAAA,OAAO;AAAA,IACL,WAAW,KAAA,CAAM,SAAA;AAAA,IACjB,UAAU,KAAA,CAAM,QAAA;AAAA,IAChB,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,OAAO,KAAA,CAAM;AAAA,GACf;AACF;AC7FO,SAAS,YAAA,CAAa,OAAA,EAAiB,UAAA,GAAa,GAAA,EAAK;AAC9D,EAAA,MAAM,CAAC,SAAS,UAAU,CAAA,GAAIC,eAAS,MAAMD,2BAAA,CAAY,OAAO,CAAC,CAAA;AAEjE,EAAAE,eAAA,CAAU,MAAM;AACd,IAAA,IAAI,SAAA,GAAY,KAAA;AAChB,IAAA,MAAM,OAAO,MAAM;AACjB,MAAA,IAAI,SAAA,EAAW;AACf,MAAA,UAAA,CAAWF,2BAAA,CAAY,OAAO,CAAC,CAAA;AAAA,IACjC,CAAA;AACA,IAAA,MAAM,EAAA,GAAK,WAAA,CAAY,IAAA,EAAM,UAAU,CAAA;AACvC,IAAA,IAAA,EAAK;AACL,IAAA,OAAO,MAAM;AAAE,MAAA,SAAA,GAAY,IAAA;AAAM,MAAA,aAAA,CAAc,EAAE,CAAA;AAAA,IAAG,CAAA;AAAA,EACtD,CAAA,EAAG,CAAC,OAAA,EAAS,UAAU,CAAC,CAAA;AAExB,EAAA,MAAM,OAAA,GAAUG,iBAAA,CAAY,MAAM,UAAA,CAAWH,2BAAA,CAAY,OAAO,CAAC,CAAA,EAAG,CAAC,OAAO,CAAC,CAAA;AAC7E,EAAA,OAAO,EAAE,SAAS,OAAA,EAAQ;AAC5B","file":"undo.cjs","sourcesContent":["import {\n  type CallToolResult,\n  type JsonObject,\n  type JsonRpcMessage,\n  type JsonRpcRequest,\n  type JsonRpcId,\n  type RegisteredTool,\n  type ServerCapabilities,\n  type ServerInfo,\n  type ToolDefinition,\n  type ToolHandler,\n  JSONRPC_INTERNAL_ERROR,\n  JSONRPC_INVALID_PARAMS,\n  JSONRPC_METHOD_NOT_FOUND,\n  MCP_PROTOCOL_VERSION,\n} from \"./types\";\nimport { ToolRegistry } from \"./tool-host\";\n\nexport type McpServerOptions = {\n  info: ServerInfo;\n  /** Defaults to { tools: { listChanged: true } } */\n  capabilities?: ServerCapabilities;\n  /** Free-text instructions surfaced to clients during initialize. */\n  instructions?: string;\n  /**\n   * The protocol revisions this server speaks, NEWEST FIRST.\n   *\n   * `initialize` echoes the client's requested revision when it is in this\n   * list, and answers the first entry otherwise — the spec's rule, which leaves\n   * the client to decide whether it can live with the answer.\n   *\n   * Defaults to `[MCP_PROTOCOL_VERSION]`: one revision, answered whatever the\n   * client asks, which is exactly what this server did before the option\n   * existed. Only list a revision the tools you register are correct under.\n   */\n  protocolVersions?: readonly string[];\n};\n\nexport type Transport = {\n  /** Called by the server when it has a message to deliver to the client. */\n  send: (message: JsonRpcMessage) => void;\n  /** Called by the server when it's torn down so the transport can clean up. */\n  close?: () => void;\n};\n\n/**\n * MicroMcpServer — protocol-level MCP server, transport-agnostic.\n *\n * Use it like:\n *\n *   const server = new MicroMcpServer({ info: { name: \"session\", version: \"0.1\" } });\n *   server.registerTool({ name: \"...\", inputSchema: { type: \"object\" } }, async (args) => ({...}));\n *   const transport = new InProcessTransport();\n *   server.attach(transport);\n *   transport.deliver({ ... }); // client → server frames\n *\n * The same server can serve multiple transports (e.g. an in-process agent\n * AND a relayed external client) by attaching each one.\n */\nexport class MicroMcpServer extends ToolRegistry {\n  private transports = new Set<Transport>();\n  /**\n   * Transports owed a `tools/list_changed` at the end of this tick. Empty when\n   * none is scheduled. See {@link scheduleListChangedNotification}.\n   */\n  private listChangedOwed = new Set<Transport>();\n\n  readonly info: ServerInfo;\n  readonly capabilities: ServerCapabilities;\n  readonly instructions?: string;\n  readonly protocolVersions: readonly string[];\n\n  constructor(options: McpServerOptions) {\n    super();\n    this.info = options.info;\n    this.capabilities = options.capabilities ?? { tools: { listChanged: true } };\n    this.instructions = options.instructions;\n    if (options.protocolVersions && options.protocolVersions.length === 0) {\n      // No answer exists for a client's initialize. Fail here, next to the\n      // mistake, rather than in a handshake nobody is watching.\n      throw new Error(\"MicroMcpServer: protocolVersions is empty — a server must speak at least one protocol revision.\");\n    }\n    this.protocolVersions = options.protocolVersions ? [...options.protocolVersions] : [MCP_PROTOCOL_VERSION];\n  }\n\n  attach(transport: Transport): () => void {\n    this.transports.add(transport);\n    return () => this.detach(transport);\n  }\n\n  detach(transport: Transport): void {\n    if (this.transports.delete(transport)) {\n      transport.close?.();\n    }\n  }\n\n  unregisterTool(name: string): void {\n    if (this.tools.delete(name)) {\n      this.scheduleListChangedNotification();\n    }\n  }\n\n  protected onToolsChanged(): void {\n    this.scheduleListChangedNotification();\n  }\n\n  /**\n   * Receive a JSON-RPC frame from a client (called by the transport).\n   * The transport is responsible for sending the response back.\n   */\n  async receive(transport: Transport, message: JsonRpcMessage): Promise<void> {\n    if (!(\"method\" in message)) return; // It's a response, not a request — ignore.\n\n    const isNotification = !(\"id\" in message);\n    if (isNotification) {\n      // Notifications are fire-and-forget. We ignore unknown methods.\n      return;\n    }\n\n    const request = message as JsonRpcRequest;\n    try {\n      const result = await this.handle(request, transport);\n      transport.send({ jsonrpc: \"2.0\", id: request.id, result });\n    } catch (err) {\n      transport.send({\n        jsonrpc: \"2.0\",\n        id: request.id,\n        error: this.toRpcError(err),\n      });\n    }\n  }\n\n  private async handle(request: JsonRpcRequest, transport: Transport): Promise<any> {\n    const { method, params } = request;\n    switch (method) {\n      case \"initialize\":\n        return {\n          protocolVersion: this.negotiate(params?.protocolVersion),\n          capabilities: this.capabilities,\n          serverInfo: this.info,\n          ...(this.instructions ? { instructions: this.instructions } : {}),\n        };\n\n      case \"tools/list\":\n        return { tools: this.listTools() };\n\n      case \"tools/call\": {\n        const name = params?.name;\n        const args = (params?.arguments ?? {}) as JsonObject;\n        if (typeof name !== \"string\") {\n          throw rpcError(JSONRPC_INVALID_PARAMS, \"tools/call requires `name`\");\n        }\n        const tool = this.tools.get(name);\n        if (!tool) {\n          throw rpcError(JSONRPC_METHOD_NOT_FOUND, this.missingToolMessage(name));\n        }\n        const result = await tool.handler(args, { transport });\n        return result satisfies CallToolResult;\n      }\n\n      case \"ping\":\n        return {};\n\n      default:\n        throw rpcError(JSONRPC_METHOD_NOT_FOUND, `Unsupported method: ${method}`);\n    }\n  }\n\n  /** The revision to answer `initialize` with: the one asked for if spoken, else the newest. */\n  private negotiate(requested: unknown): string {\n    return typeof requested === \"string\" && this.protocolVersions.includes(requested)\n      ? requested\n      : this.protocolVersions[0];\n  }\n\n  /**\n   * Tell the transports that SAW the old tool list that it changed.\n   *\n   * Changes in one tick coalesce into one notification. The recipients are the\n   * transports attached at the moment of a change, not at the moment the\n   * notification goes out: a transport attached afterwards never had the old\n   * list, so \"your list is stale\" is noise to it — and on stdio, where a host\n   * builds the server and attaches stdin/stdout in the same tick, it was the\n   * first frame a client received, before it had even sent `initialize`.\n   */\n  private scheduleListChangedNotification(): void {\n    if (this.transports.size === 0) return;\n    const scheduled = this.listChangedOwed.size > 0;\n    for (const t of this.transports) this.listChangedOwed.add(t);\n    if (scheduled) return;\n    queueMicrotask(() => {\n      const owed = this.listChangedOwed;\n      this.listChangedOwed = new Set();\n      for (const t of owed) {\n        // Detached since the change: it is not listening any more.\n        if (this.transports.has(t)) t.send({ jsonrpc: \"2.0\", method: \"notifications/tools/list_changed\" });\n      }\n    });\n  }\n\n  /** Send an application notification to every client, or one attached transport. */\n  notify(message: JsonRpcMessage, transport?: Transport): void {\n    if (transport) transport.send(message);\n    else this.broadcast(message);\n  }\n\n  private broadcast(message: JsonRpcMessage): void {\n    for (const t of this.transports) t.send(message);\n  }\n\n  private toRpcError(err: unknown): { code: number; message: string; data?: any } {\n    if (err && typeof err === \"object\" && \"code\" in err && \"message\" in err) {\n      return err as any;\n    }\n    return {\n      code: JSONRPC_INTERNAL_ERROR,\n      message: err instanceof Error ? err.message : String(err),\n    };\n  }\n}\n\nexport function rpcError(code: number, message: string, data?: any) {\n  return { code, message, ...(data !== undefined ? { data } : {}) };\n}\n\n/**\n * Helper to build a CallToolResult from a string or structured value.\n */\nexport function textResult(text: string, structured?: any): CallToolResult {\n  return {\n    content: [{ type: \"text\", text }],\n    ...(structured !== undefined ? { structuredContent: structured } : {}),\n  };\n}\n\nexport function errorResult(text: string): CallToolResult {\n  return { content: [{ type: \"text\", text }], isError: true };\n}\n\n// Internal helper so the JsonRpcId import isn't dropped by tsup\ntype _KeepIdImport = JsonRpcId;\n","import { textResult, errorResult } from \"../mcp/server\";\nimport type { ToolHost } from \"../mcp/tool-host\";\nimport { readHistory, redoOne, undoOne } from \"./undo-stack\";\n\nexport type UndoToolsOptions = {\n  /** Default agent id when the caller doesn't pass one. */\n  defaultAgentId?: string;\n};\n\n/**\n * Idempotent tracker so multiple bridges on the same server only register\n * agent_undo / agent_redo / agent_history once.\n */\nconst installedHosts = new WeakSet<ToolHost>();\n\n/**\n * ensureUndoToolsRegistered — bridges call this on construction. Safe to\n * call repeatedly with the same server; subsequent calls are no-ops.\n */\nexport function ensureUndoToolsRegistered(host: ToolHost, options: UndoToolsOptions = {}): void {\n  if (installedHosts.has(host)) return;\n  installedHosts.add(host);\n  registerUndoTools(host, options);\n}\n\n/**\n * registerUndoTools — add agent_undo / agent_redo / agent_history to the\n * server. Returns a disposer that unregisters all three.\n */\nexport function registerUndoTools(host: ToolHost, options: UndoToolsOptions = {}): () => void {\n  const defaultAgent = options.defaultAgentId ?? \"agent\";\n  const disposers: Array<() => void> = [];\n  const agentOf = (args: any): string =>\n    typeof args?.agentId === \"string\" ? args.agentId : defaultAgent;\n\n  disposers.push(\n    host.registerTool(\n      {\n        name: \"agent_undo\",\n        description: \"Undo the most recent action on the agent's stack. Optional agentId targets a specific agent.\",\n        inputSchema: {\n          type: \"object\",\n          properties: { agentId: { type: \"string\" } },\n          additionalProperties: false,\n        },\n      },\n      async (args) => {\n        const entry = await undoOne(agentOf(args));\n        if (!entry) return errorResult(\"Nothing to undo.\");\n        return textResult(`Undid: ${entry.label}`, { entry: serialize(entry) });\n      },\n    ),\n  );\n\n  disposers.push(\n    host.registerTool(\n      {\n        name: \"agent_redo\",\n        description: \"Redo the most recently undone action.\",\n        inputSchema: {\n          type: \"object\",\n          properties: { agentId: { type: \"string\" } },\n          additionalProperties: false,\n        },\n      },\n      async (args) => {\n        const entry = await redoOne(agentOf(args));\n        if (!entry) return errorResult(\"Nothing to redo.\");\n        return textResult(`Redid: ${entry.label}`, { entry: serialize(entry) });\n      },\n    ),\n  );\n\n  disposers.push(\n    host.registerTool(\n      {\n        name: \"agent_history\",\n        description: \"List the agent's undo stack (oldest first). Useful for understanding what's reversible.\",\n        inputSchema: {\n          type: \"object\",\n          properties: { agentId: { type: \"string\" } },\n          additionalProperties: false,\n        },\n      },\n      async (args) => {\n        const history = readHistory(agentOf(args)).map(serialize);\n        const text = history.map((e) => `${new Date(e.timestamp).toISOString()} ${e.bridgeId} ${e.action}: ${e.label}`).join(\"\\n\");\n        return textResult(text || \"(empty)\", history);\n      },\n    ),\n  );\n\n  return () => disposers.forEach((d) => d());\n}\n\nfunction serialize(entry: import(\"./undo-stack\").UndoEntry) {\n  return {\n    timestamp: entry.timestamp,\n    bridgeId: entry.bridgeId,\n    action: entry.action,\n    label: entry.label,\n  };\n}\n","import { useState, useEffect, useCallback } from \"react\";\nimport { readHistory } from \"./undo-stack\";\n\n/**\n * useUndoStack — minimal React snapshot of an agent's history. Polls every\n * `intervalMs` (default 500). Use this to render an inline \"agent timeline\"\n * in a sidebar or activity panel. No subscription model in v1 — keeping it\n * simple; bridge mutations are infrequent enough that polling is fine.\n */\nexport function useUndoStack(agentId: string, intervalMs = 500) {\n  const [history, setHistory] = useState(() => readHistory(agentId));\n\n  useEffect(() => {\n    let cancelled = false;\n    const tick = () => {\n      if (cancelled) return;\n      setHistory(readHistory(agentId));\n    };\n    const id = setInterval(tick, intervalMs);\n    tick();\n    return () => { cancelled = true; clearInterval(id); };\n  }, [agentId, intervalMs]);\n\n  const refresh = useCallback(() => setHistory(readHistory(agentId)), [agentId]);\n  return { history, refresh };\n}\n"]}

package/dist/undo.js

@@ -1,5 +1,5 @@
-export { useUndoStack } from './chunk-WEXMZMJH.js';
-export { clearStack, ensureUndoToolsRegistered, pushUndoEntry, readHistory, redoOne, registerUndoTools, resetAllUndoStacks, undoOne } from './chunk-HVDHT7DM.js';
-import './chunk-QJYRWEXD.js';
+export { useUndoStack } from './chunk-3WVXAB3D.js';
+export { clearStack, ensureUndoToolsRegistered, pushUndoEntry, readHistory, redoOne, registerUndoTools, resetAllUndoStacks, undoOne } from './chunk-R4XXOGQH.js';
+import './chunk-CZV3WUW5.js';
 //# sourceMappingURL=undo.js.map
 //# sourceMappingURL=undo.js.map

package/docs/relay-protocol.md

@@ -42,9 +42,43 @@ The agent side connects to the same Reverb channel via your auth bridge and read
 
 For direct peer connections (no server hop), open a data channel and pipe frames through it.
 
-### SSE + POST tunnel
+### SSE + POST tunnel (the HTTP relay)
 
-The browser opens a long-lived `EventSource` to a relay service (e.g. a Cloudflare Worker) that also accepts `POST /mcp/{session}` from external agents. The relay forwards each request as an SSE event and accepts responses via a paired POST endpoint.
+What the bundled Node relay (`agent-integrations-relay`, see
+[relay-server.md](./relay-server.md)) and the PHP relay in px-ui-sandbox both
+serve. Every route sits under the relay's base URL, with the session id as the
+first path segment:
+
+```
+POST {base}/register                                   { session, token }
+POST {base}/{session}/inbox?token=…[&client=…]         agent → page   (a JSON-RPC frame)
+POST {base}/{session}/outbox?token=…                   page  → agent  (a JSON-RPC frame)
+GET  {base}/{session}/events?token=…&direction=…[&client=…]   receive leg, SSE
+GET  {base}/{session}/poll?token=…&direction=…&wait=…&subscriber=…[&client=…]
+                                                       receive leg, long-poll
+POST {base}/{session}/unregister?token=…
+```
+
+`direction` names the queue a subscriber READS: the page reads `inbound` (what
+agents sent it) and an agent reads `outbound` (what the page answered).
+
+**Two receive legs, one queue model.** `events` is one long-lived SSE stream of
+`event: mcp
+data: <frame>
+
+`. `poll` is a series of short requests, each
+answering `{ "subscriber": "<id>", "frames": ["<frame>", …] }` as soon as a frame
+is queued or the `wait` window (ms, at most 25000) runs out; the client echoes
+`subscriber` back on the next poll to keep reading the same queue. Use `poll`
+behind a CDN: Cloudflare's HTTP/3 edge resets long-lived SSE streams
+(`net::ERR_QUIC_PROTOCOL_ERROR`), and short requests pass.
+[`@particle-academy/fancy-cf-relay`](https://github.com/Particle-Academy/fancy-cf-relay)
+picks between the two automatically in the browser; `mcp-relay-client` polls.
+
+**A session that has ended answers `410`** (`{"error":"session_gone"}`, or an
+`event: error` / `data: session_gone` SSE body on `events`) on every session
+route. `401` means a wrong or missing token on a live session. An SSE leg open
+when its session ends is closed by the relay.
 
 ## Multiple clients, and who sees a reply
 
@@ -54,10 +88,12 @@ Identify yourself with a `client` query parameter on BOTH your subscription and
 your posts — the same value on each:
 
 ```
-GET  /sse/{session}?token=…&client=worker-7
-POST /inbound/{session}?token=…&client=worker-7
+GET  {base}/{session}/events?token=…&direction=outbound&client=worker-7
+POST {base}/{session}/inbox?token=…&client=worker-7
 ```
 
+A long-poll subscriber labels itself the same way: `GET {base}/{session}/poll?…&client=worker-7`.
+
 The broker records which client sent each JSON-RPC request id and delivers the
 matching response to that client alone. Notifications (frames with no `id`)
 still reach every subscriber, because presence, activity and server-pushed state
@@ -79,7 +115,7 @@ response then reaches nobody rather than everyone. Fail closed.
 Fixed in 0.44.0. Reported by the Prism harness, composing two separate answers
 about fan-out and token semantics.
 
-## Multiple clients
+## Multiple transports on one server
 
 A single `MicroMcpServer` can have multiple transports attached at once (e.g. an in-page agent **and** an external relay). Each receives all server-pushed notifications; tool-call replies go back on the transport that originated the call.
 

package/docs/relay-server.md

@@ -37,6 +37,15 @@ are wrong". The broker reports them separately:
 `410` rather than `404`: the session existed and is now over, which is what the
 status means, and it separates "this is finished" from "you have the wrong URL".
 
+The table holds for **every** session route — `inbox`, `outbox`, `poll` and
+`events`. The POST routes and `poll` answer JSON (`{"error":"session_gone"}`);
+`events` answers the same status with an SSE body, `event: error` /
+`data: session_gone`. A browser's `EventSource` treats a `410` (or `401`) as
+final and stops reconnecting. An SSE stream that is OPEN when its session ends
+is closed by the relay, so its client reconnects and gets the `410`.
+(Before 0.46.0 `events` still answered `401` for a gone session, and an open
+stream stayed open.)
+
 Two deliberate choices:
 
 - **A wrong token on a live session is never `session_gone`.** Answering
@@ -90,27 +99,62 @@ curl -X POST -H 'content-type: application/json' \
   http://localhost:8787/register
 ```
 
-CLI flags (or matching env vars `PORT`, `HOST`, `PREFIX`, `TTL_MS`, `CORS_ALLOW_ORIGIN`):
+CLI flags and their env vars:
 
-| Flag | Default | What |
-|---|---|---|
-| `--port <n>` | `8787` | Listen port. |
-| `--host <addr>` | `0.0.0.0` | Bind address. |
-| `--prefix <path>` | `""` | URL path prefix (e.g. `/mcp-relay`) when behind a reverse proxy. |
-| `--ttl-ms <n>` | `14_400_000` (4h) | Session inactivity timeout. |
-| `--cors <origin>` | `*` | `Access-Control-Allow-Origin` header value. |
+| Flag | Env var | Default | What |
+|---|---|---|---|
+| `--port <n>` | `PORT` | `8787` | Listen port. |
+| `--host <addr>` | `HOST` | `127.0.0.1` | Bind address. Loopback since 0.30.0: `register` is unauthenticated and a session token reaches every tool the page exposes, so the port should only be reachable through your proxy. `--host 0.0.0.0` exposes it and prints a warning. (The Dockerfile sets `HOST=0.0.0.0`, which is what a container needs; publish the port only to your proxy.) |
+| `--prefix <path>` | `PREFIX` | `""` | URL path prefix (e.g. `/mcp-relay`) when behind a reverse proxy. |
+| `--ttl-ms <n>` | `TTL_MS` | `14_400_000` (4h) | Session inactivity timeout. |
+| `--cors <origins>` | `CORS_ALLOW_ORIGIN` | `*` | Browser origins allowed to read responses: `*`, or a comma-separated list (see below). May be repeated. |
+
+**Precedence: flag, then env var, then default — for every setting.** A flag is
+what the person starting the process typed; an env var is often set by a
+platform (Forge sets `PORT`), so the explicit one wins. When a flag overrides an
+env var set to something different, the relay says so at startup:
+
+```
+[relay] WARNING: CORS_ALLOW_ORIGIN=https://b.example is ignored: --cors https://a.example was passed, and a flag wins over its env var.
+```
+
+So if your start script passes `--cors`, change the start script, not the env
+var. An env var set to the empty string counts as unset. The startup line names
+where the CORS policy came from: `cors=https://a.example from --cors`.
+
+### CORS: `*` or a list
+
+`Access-Control-Allow-Origin` holds ONE origin or `*`, so a list is enforced per
+request:
+
+- `--cors "https://example.com,https://www.example.com"` (or `--cors` twice):
+  a request whose `Origin` is listed gets that origin echoed back, every
+  response carries `Vary: Origin`, and an unlisted origin gets **no**
+  `Access-Control-Allow-Origin` at all — never `null`, which is what sandboxed
+  iframes and `file://` pages send.
+- `--cors "*"` (the default) sends `*`.
+- Entries are normalised to what a browser sends (`HTTPS://Example.com:443/` →
+  `https://example.com`). `*` mixed with origins, an empty list, `null`, or an
+  entry with a path is refused at startup with exit code 2.
+
+Before 0.46.0 the value was sent verbatim, so a comma-separated list produced a
+header no browser accepts.
 
 ### 2. Embed in an existing Node HTTP framework
 
 ```ts
 import { createNodeRelay } from "@particle-academy/agent-integrations/relay-server";
 
-const relay = createNodeRelay({ pathPrefix: "/mcp-relay", corsAllowOrigin: "*" });
+const relay = createNodeRelay({
+  pathPrefix: "/mcp-relay",
+  corsAllowOrigin: "https://example.com,https://www.example.com", // or "*"
+});
 
 app.post("/mcp-relay/register",         (req, res) => relay.register(req, res));
 app.post("/mcp-relay/:s/inbox",         (req, res) => relay.inbox(req, res));
 app.post("/mcp-relay/:s/outbox",        (req, res) => relay.outbox(req, res));
 app.get ("/mcp-relay/:s/events",        (req, res) => relay.events(req, res));
+app.get ("/mcp-relay/:s/poll",          (req, res) => relay.poll(req, res));
 app.post("/mcp-relay/:s/unregister",    (req, res) => relay.unregister(req, res));
 
 // Or a single fall-through handler for routers that don't need per-route control:
@@ -151,7 +195,7 @@ Forge supports both Node sites and standalone daemons, either fits.
    ```
    .
    ├── package.json   (just "scripts": { "start": "agent-integrations-relay --port 8787" }
-   │                   and "dependencies": { "@particle-academy/agent-integrations": "^0.6.1" })
+   │                   and "dependencies": { "@particle-academy/agent-integrations": ">=0.46.0 <2.0" })
    └── README.md
    ```
 4. Deploy script:
@@ -160,7 +204,7 @@ Forge supports both Node sites and standalone daemons, either fits.
    npm install --omit=dev
    ```
 5. In **Daemons** (sidebar), add:
-   - **Command:** `npx agent-integrations-relay --port 8787 --cors https://your-site.example`
+   - **Command:** `npx agent-integrations-relay --port 8787 --cors "https://your-site.example,https://www.your-site.example"`
    - **Directory:** `$FORGE_SITE_PATH`
    - **User:** `forge`
    Daemon auto-restarts on crash.
@@ -279,7 +323,7 @@ After=network.target
 Type=simple
 User=relay
 WorkingDirectory=/opt/relay
-ExecStart=/usr/bin/npx agent-integrations-relay --port 8787 --cors https://your-site.example
+ExecStart=/usr/bin/npx agent-integrations-relay --port 8787 --cors "https://your-site.example,https://www.your-site.example"
 Restart=on-failure
 RestartSec=5
 Environment=NODE_ENV=production
@@ -319,11 +363,39 @@ curl -X POST -H 'content-type: application/json' \
 
 # 4. SSE stream — should hang open + emit keepalive comments every 15s
 curl -N "$RELAY/smoke-001/events?token=abcdef0123456789abcdef0123456789&direction=inbound"
+
+# 5. Long-poll — returns {"subscriber":"…","frames":[…]} at once with wait=0
+curl "$RELAY/smoke-001/poll?token=abcdef0123456789abcdef0123456789&direction=inbound&wait=0"
+
+# 6. CORS — a listed origin is echoed back; an unlisted one gets no allow-origin header
+curl -si -X OPTIONS -H 'Origin: https://your-site.example' $RELAY/register | grep -i '^access-control-allow-origin\|^vary'
 ```
 
 If `curl -N` returns immediately, your proxy is buffering. Re-check
 `proxy_buffering off` (Nginx) or the equivalent on your edge.
 
+## Behind Cloudflare (or any CDN that resets long streams)
+
+Cloudflare's HTTP/3 (QUIC) edge resets long-lived SSE streams — the browser logs
+`net::ERR_QUIC_PROTOCOL_ERROR` and the `events` leg never holds. Short requests
+are unaffected, so the relay also serves a **long-poll** receive leg,
+`GET {prefix}/{session}/poll`, which carries the same frames:
+
+- In the browser, `SseRelayTransport` uses
+  [`@particle-academy/fancy-cf-relay`](https://github.com/Particle-Academy/fancy-cf-relay)
+  when it is installed: it detects Cloudflare from the `cf-ray` header and polls
+  there, and falls back to polling anywhere SSE fails early. Install it
+  (`npm i @particle-academy/fancy-cf-relay`) for any relay behind a CDN.
+- Agents on [`mcp-relay-client`](https://github.com/Particle-Academy/mcp-relay-client)
+  poll already.
+
+A parked poll costs nothing on Node's event loop, so the relay allows the full
+25-second window; the park returns early the moment a frame is queued. The
+contract is the PHP relay's (px-ui-sandbox `AgentRelayController::poll`), and
+the Node relay's tests mirror its PHP tests case for case. (The poll route is new
+in 0.46.0; before it, a Node relay behind Cloudflare HTTP/3 had no working
+receive leg.)
+
 ## Hooking into your demo site
 
 Set the relay base URL in your demo's environment. For a Laravel host (like
@@ -365,14 +437,25 @@ Same shape every consumer expects:
 POST  {prefix}/register                    body: { session, token } → { ok }
 POST  {prefix}/{session}/inbox?token=…     body: JSON-RPC frame      → { ok }
 POST  {prefix}/{session}/outbox?token=…    body: JSON-RPC frame      → { ok }
-GET   {prefix}/{session}/events?token=…&direction=inbound|outbound
+GET   {prefix}/{session}/events?token=…&direction=inbound|outbound[&client=…]
                                            SSE stream of `event: mcp\ndata: …\n\n`
+GET   {prefix}/{session}/poll?token=…&direction=inbound|outbound&wait=<ms>&subscriber=<id>[&client=…]
+                                           → { subscriber, frames: ["<frame>", …] }
 POST  {prefix}/{session}/unregister?token=…                            → { ok }
 GET   {prefix}/                            healthcheck → 200
 ```
 
-The browser opens an `inbound` SSE subscription; external agents open `outbound`.
-Both POST JSON-RPC frames at their own direction's inbox/outbox.
+The browser subscribes `inbound`; external agents subscribe `outbound` — over
+`events` or `poll`. The browser POSTs its frames to `outbox`, agents to `inbox`.
+
+`poll`: the first call (no `subscriber`) is handed a 16-hex-digit id; echo it back
+on every later poll to keep reading the same queue. `wait` is the park window in
+ms, clamped to 0–25000, default 20000. Frames queue between polls, so none is
+lost in the gap; a poller that stops for 60 s (`pollIdleMs`) is dropped, and for
+an agent the page is sent `notifications/peer_left`.
+
+A session that has ended answers `410` on every session route; a wrong or
+missing token answers `401` — see [When a session is gone](#when-a-session-is-gone).
 
 ## Replacing the in-memory store
 
@@ -399,3 +482,7 @@ extending the broker or running an instance per session-id-prefix.
 - **Payload caps** — individual frames are rejected past 256 KB.
 - The relay carries opaque frames; auth is your session token. Tighter access
   control (per-IP rate limit, allowlist) belongs in your reverse proxy layer.
+- **CORS is not access control.** An origin list stops other sites' pages from
+  READING relay responses; it does not stop a request from being sent, and
+  non-browser clients ignore it entirely. The session token is still the only
+  authority.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@particle-academy/agent-integrations",
-  "version": "0.44.0",
+  "version": "0.46.0",
   "description": "MCP-driven agent presence in collab sessions: per-session micro-MCP server, pluggable bridges to fancy-* packages, and agent UX components (panel + on-canvas cursor).",
   "repository": {
     "type": "git",
@@ -37,6 +37,16 @@
         "default": "./dist/mcp.cjs"
       }
     },
+    "./mcp/stdio": {
+      "import": {
+        "types": "./dist/mcp/stdio.d.ts",
+        "default": "./dist/mcp-stdio.js"
+      },
+      "require": {
+        "types": "./dist/mcp/stdio.d.cts",
+        "default": "./dist/mcp-stdio.cjs"
+      }
+    },
     "./bridges/whiteboard": {
       "import": {
         "types": "./dist/bridges/whiteboard.d.ts",
@@ -422,6 +432,12 @@
     },
     "@particle-academy/fancy-cf-relay": {
       "optional": true
+    },
+    "react": {
+      "optional": true
+    },
+    "react-dom": {
+      "optional": true
     }
   },
   "devDependencies": {
@@ -435,6 +451,7 @@
     "@particle-academy/fancy-sheets": "^0.9.0",
     "@particle-academy/fancy-slides": "^0.15.0",
     "@particle-academy/fancy-whiteboard": "^0.2.0",
+    "@particle-academy/react-fancy": "^5.26.0",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/react": "^16.0.0",
     "@types/node": "^22.0.0",
@@ -448,7 +465,7 @@
     "tsup": "^8.0.0",
     "typescript": "^5.7.0",
     "typescript-eslint": "^8.65.0",
-    "vitest": "^3.0.0"
+    "vitest": "^4.1.11"
   },
   "publishConfig": {
     "access": "public"

package/dist/chunk-OZBUPO4K.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/relay-server/core.ts","../src/relay-server/node.ts"],"names":["next","ok"],"mappings":";;;;AAgEA,IAAM,cAAN,MAAmC;AAAA,EAAnC,WAAA,GAAA;AACE,IAAA,IAAA,CAAQ,QAAA,uBAAe,GAAA,EAAqB;AAAA,EAAA;AAAA,EAC5C,WAAW,CAAA,EAAY;AAAE,IAAA,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,CAAA,CAAE,EAAA,EAAI,CAAC,CAAA;AAAA,EAAG;AAAA,EACrD,WAAW,EAAA,EAAY;AAAE,IAAA,OAAO,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,EAAE,CAAA;AAAA,EAAG;AAAA,EACvD,cAAc,EAAA,EAAY;AAAE,IAAA,IAAA,CAAK,QAAA,CAAS,OAAO,EAAE,CAAA;AAAA,EAAG;AAAA,EACtD,kBAAkB,MAAA,EAAgB;AAChC,IAAA,MAAM,MAAgB,EAAC;AACvB,IAAA,KAAA,MAAW,CAAC,EAAA,EAAI,CAAC,CAAA,IAAK,IAAA,CAAK,QAAA,EAAU,IAAI,CAAA,CAAE,QAAA,GAAW,MAAA,EAAQ,GAAA,CAAI,IAAA,CAAK,EAAE,CAAA;AACzE,IAAA,OAAO,GAAA;AAAA,EACT;AACF,CAAA;AAEA,IAAM,kBAAA,GAAqB,uBAAA;AAEpB,IAAM,cAAN,MAAkB;AAAA,EAUvB,WAAA,CAAY,IAAA,GAA2B,EAAC,EAAG;AAN3C;AAAA,IAAA,IAAA,CAAQ,IAAA,uBAA8D,GAAA,EAAI;AAG1E;AAAA,IAAA,IAAA,CAAQ,OAAA,uBAAgD,GAAA,EAAI;AAI1D,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA,CAAK,KAAA,IAAS,CAAA,GAAI,KAAK,EAAA,GAAK,GAAA;AACzC,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA,CAAK,KAAA,IAAS,IAAI,WAAA,EAAY;AAC3C,IAAA,MAAM,IAAA,GAAO,KAAK,cAAA,IAAkB,GAAA;AACpC,IAAA,IAAI,OAAO,CAAA,EAAG;AACZ,MAAA,IAAA,CAAK,SAAS,WAAA,CAAY,MAAM,IAAA,CAAK,IAAA,IAAQ,IAAI,CAAA;AAEjD,MAAA,IAAI,OAAQ,IAAA,CAAK,MAAA,CAAkC,KAAA,KAAU,UAAA,EAAY;AACvE,QAAC,IAAA,CAAK,OAAiC,KAAA,EAAM;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AAAA,EAEA,OAAA,GAAU;AACR,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,aAAA,CAAc,IAAA,CAAK,MAAM,CAAA;AAC1C,IAAA,IAAA,CAAK,KAAK,KAAA,EAAM;AAChB,IAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AAAA,EACrB;AAAA;AAAA;AAAA,EAIA,QAAA,CAAS,IAAY,KAAA,EAA6D;AAChF,IAAA,IAAI,CAAC,kBAAA,CAAmB,IAAA,CAAK,EAAE,CAAA,SAAU,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,oBAAA,EAAqB;AACnF,IAAA,IAAI,OAAO,UAAU,QAAA,IAAY,KAAA,CAAM,SAAS,EAAA,IAAM,KAAA,CAAM,SAAS,GAAA,EAAK;AACxE,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,eAAA,EAAgB;AAAA,IAC9C;AACA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,UAAA,CAAW,EAAE,CAAA;AACzC,IAAA,MAAM,IAAA,GAAO,UAAU,KAAK,CAAA;AAC5B,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,SAAA,EAAW,IAAI,CAAA,EAAG,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,eAAA,EAAgB;AAC/F,MAAA,QAAA,CAAS,QAAA,GAAW,KAAK,GAAA,EAAI;AAC7B,MAAA,IAAA,CAAK,KAAA,CAAM,WAAW,QAAQ,CAAA;AAC9B,MAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AAAA,IACpB;AACA,IAAA,IAAA,CAAK,KAAA,CAAM,UAAA,CAAW,EAAE,EAAA,EAAI,SAAA,EAAW,MAAM,QAAA,EAAU,IAAA,CAAK,GAAA,EAAI,EAAG,CAAA;AACnE,IAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AAAA,EACpB;AAAA,EAEA,UAAA,CAAW,IAAY,KAAA,EAAwB;AAC7C,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,EAAA,EAAI,KAAK,GAAG,OAAO,KAAA;AACtC,IAAA,IAAA,CAAK,KAAA,CAAM,cAAc,EAAE,CAAA;AAC3B,IAAA,IAAA,CAAK,IAAA,CAAK,OAAO,EAAE,CAAA;AACnB,IAAA,IAAA,CAAK,OAAA,CAAQ,OAAO,EAAE,CAAA;AACtB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAyBA,KAAA,CAAM,IAAY,KAAA,EAAuF;AACvG,IAAA,IAAI,CAAC,MAAM,CAAC,KAAA,SAAc,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,eAAA,EAAgB;AAE/D,IAAA,MAAM,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,UAAA,CAAW,EAAE,CAAA;AAClC,IAAA,IAAI,CAAC,CAAA,EAAG,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,cAAA,EAAe;AAEnD,IAAA,IAAI,CAAC,kBAAA,CAAmB,CAAA,CAAE,WAAW,SAAA,CAAU,KAAK,CAAC,CAAA,EAAG;AACtD,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,eAAA,EAAgB;AAAA,IAC9C;AAEA,IAAA,CAAA,CAAE,QAAA,GAAW,KAAK,GAAA,EAAI;AACtB,IAAA,IAAA,CAAK,KAAA,CAAM,WAAW,CAAC,CAAA;AACvB,IAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,QAAA,CAAS,IAAY,KAAA,EAAwB;AAC3C,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,EAAA,EAAI,KAAK,CAAA,CAAE,EAAA;AAAA,EAC/B;AAAA;AAAA,EAGA,YAAY,EAAA,EAAkB;AAC5B,IAAA,IAAA,CAAK,KAAA,CAAM,cAAc,EAAE,CAAA;AAC3B,IAAA,IAAA,CAAK,IAAA,CAAK,OAAO,EAAE,CAAA;AACnB,IAAA,IAAA,CAAK,OAAA,CAAQ,OAAO,EAAE,CAAA;AAAA,EACxB;AAAA;AAAA,EAGA,MAAM,EAAA,EAAY,KAAA,EAAe,OAAA,EAAiB,IAAA,GAA4B,EAAC,EAAY;AACzF,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,EAAA,EAAI,KAAK,GAAG,OAAO,KAAA;AACtC,IAAA,IAAI,CAAC,IAAA,CAAK,OAAA,CAAQ,OAAO,GAAG,OAAO,KAAA;AAGnC,IAAA,IAAI,IAAA,CAAK,WAAW,MAAA,EAAW;AAC7B,MAAA,IAAA,CAAK,cAAA,CAAe,EAAA,EAAI,OAAA,EAAS,IAAA,CAAK,MAAM,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAA,CAAK,MAAA,CAAO,EAAA,EAAI,SAAA,EAAW,OAAO,CAAA;AAClC,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAGA,MAAA,CAAO,EAAA,EAAY,KAAA,EAAe,OAAA,EAA0B;AAC1D,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,EAAA,EAAI,KAAK,GAAG,OAAO,KAAA;AACtC,IAAA,IAAI,CAAC,IAAA,CAAK,OAAA,CAAQ,OAAO,GAAG,OAAO,KAAA;AAcnC,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,SAAA,CAAU,EAAA,EAAI,OAAO,CAAA;AAEzC,IAAA,IAAI,WAAW,IAAA,EAAM;AACnB,MAAA,IAAA,CAAK,MAAA,CAAO,EAAA,EAAI,UAAA,EAAY,OAAO,CAAA;AACnC,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,IAAA,CAAK,QAAA,CAAS,EAAA,EAAI,UAAA,EAAY,OAAA,EAAS,MAAM,CAAA;AAC7C,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,UAAU,EAAA,EAAY,KAAA,EAAe,SAAA,EAAsB,IAAA,GAA4B,EAAC,EAAoB;AAC1G,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,EAAA,EAAI,KAAK,CAAA,EAAG,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,eAAA,EAAgB;AAC3E,IAAA,MAAM,YAAA,GAAe,WAAA,CAAY,CAAC,CAAA,CAAE,SAAS,KAAK,CAAA;AAClD,IAAA,MAAM,UAAA,GAAyB;AAAA,MAC7B,EAAA,EAAI,YAAA;AAAA,MACJ,SAAA;AAAA,MACA,OAAO,EAAC;AAAA,MACR,WAAA,EAAa,IAAA;AAAA,MACb,QAAQ,IAAA,CAAK;AAAA,KACf;AACA,IAAA,IAAA,CAAK,WAAW,EAAA,EAAI,SAAS,CAAA,CAAE,GAAA,CAAI,cAAc,UAAU,CAAA;AAI3D,IAAA,IAAI,cAAc,UAAA,EAAY;AAC5B,MAAA,IAAA,CAAK,MAAA;AAAA,QACH,EAAA;AAAA,QACA,SAAA;AAAA,QACA,KAAK,SAAA,CAAU;AAAA,UACb,OAAA,EAAS,KAAA;AAAA,UACT,MAAA,EAAQ,2BAAA;AAAA,UACR,QAAQ,EAAE,YAAA,EAAc,EAAA,EAAI,IAAA,CAAK,KAAI;AAAE,SACxC;AAAA,OACH;AAAA,IACF;AAEA,IAAA,MAAM,cAAc,MAAM;AACxB,MAAA,IAAA,CAAK,UAAA,CAAW,EAAA,EAAI,SAAS,CAAA,CAAE,OAAO,YAAY,CAAA;AAClD,MAAA,IAAI,cAAc,UAAA,EAAY;AAC5B,QAAA,IAAA,CAAK,MAAA;AAAA,UACH,EAAA;AAAA,UACA,SAAA;AAAA,UACA,KAAK,SAAA,CAAU;AAAA,YACb,OAAA,EAAS,KAAA;AAAA,YACT,MAAA,EAAQ,yBAAA;AAAA,YACR,QAAQ,EAAE,YAAA,EAAc,EAAA,EAAI,IAAA,CAAK,KAAI;AAAE,WACxC;AAAA,SACH;AAAA,MACF;AAAA,IACF,CAAA;AAIA,IAAA,MAAM,SAAS,mBAAuE;AACpF,MAAA,OAAO,IAAA,EAAM;AACX,QAAA,IAAI,IAAA,CAAK,KAAA,CAAM,MAAA,GAAS,CAAA,EAAG;AACzB,UAAA,MAAMA,KAAAA,GAAO,IAAA,CAAK,KAAA,CAAM,KAAA,EAAM;AAC9B,UAAA,IAAIA,KAAAA,KAAS,QAAW,MAAMA,KAAAA;AAC9B,UAAA;AAAA,QACF;AACA,QAAA,MAAM,IAAA,GAAO,MAAM,IAAI,OAAA,CAAuB,CAAC,OAAA,KAAY;AACzD,UAAA,IAAA,CAAK,WAAA,GAAc,OAAA;AAAA,QACrB,CAAC,CAAA;AACD,QAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AACnB,QAAA,IAAI,SAAS,IAAA,EAAM;AACnB,QAAA,MAAM,IAAA;AAAA,MACR;AAAA,IACF,CAAA,CAAE,KAAK,UAAU,CAAA;AAEjB,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,IAAA;AAAA,MACJ,YAAA;AAAA,MACA,QAAQ,MAAA,EAAO;AAAA,MACf,aAAa,MAAM;AAEjB,QAAA,UAAA,CAAW,cAAc,IAAI,CAAA;AAC7B,QAAA,WAAA,EAAY;AAAA,MACd;AAAA,KACF;AAAA,EACF;AAAA;AAAA,EAIQ,UAAA,CAAW,WAAmB,SAAA,EAA+C;AACnF,IAAA,IAAI,SAAA,GAAY,IAAA,CAAK,IAAA,CAAK,GAAA,CAAI,SAAS,CAAA;AACvC,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,SAAA,uBAAgB,GAAA,EAAI;AACpB,MAAA,IAAA,CAAK,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,SAAS,CAAA;AAAA,IACpC;AACA,IAAA,IAAI,KAAA,GAAQ,SAAA,CAAU,GAAA,CAAI,SAAS,CAAA;AACnC,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,KAAA,uBAAY,GAAA,EAAI;AAChB,MAAA,SAAA,CAAU,GAAA,CAAI,WAAW,KAAK,CAAA;AAAA,IAChC;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,cAAA,CAAe,SAAA,EAAmB,OAAA,EAAiB,MAAA,EAAsB;AAC/E,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,UAAA,CAAW,OAAO,CAAA;AACrC,IAAA,IAAI,CAAC,KAAA,IAAS,KAAA,CAAM,EAAA,KAAO,MAAA,IAAa,KAAA,CAAM,EAAA,KAAO,IAAA,IAAQ,OAAO,KAAA,CAAM,MAAA,KAAW,QAAA,EAAU;AAC7F,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,IAAA,GAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA;AACrC,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,IAAA,uBAAW,GAAA,EAAI;AACf,MAAA,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,SAAA,EAAW,IAAI,CAAA;AAAA,IAClC;AAMA,IAAA,IAAI,IAAA,CAAK,QAAQ,GAAA,EAAM;AACrB,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,IAAA,EAAK,CAAE,IAAA,EAAK;AAChC,MAAA,IAAI,CAAC,MAAA,CAAO,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,OAAO,KAAK,CAAA;AAAA,IAC5C;AAEA,IAAA,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,EAAE,GAAG,MAAM,CAAA;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASQ,SAAA,CAAU,WAAmB,OAAA,EAAgC;AACnE,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,UAAA,CAAW,OAAO,CAAA;AAGrC,IAAA,IAAI,CAAC,KAAA,IAAS,KAAA,CAAM,EAAA,KAAO,MAAA,IAAa,KAAA,CAAM,EAAA,KAAO,IAAA,IAAQ,OAAO,KAAA,CAAM,MAAA,KAAW,QAAA,EAAU;AAC7F,MAAA,OAAO,IAAA;AAAA,IACT;AAYA,IAAA,IAAI,CAAC,IAAA,CAAK,uBAAA,CAAwB,SAAS,CAAA,EAAG;AAC5C,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA;AACvC,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,KAAA,CAAM,EAAE,CAAA;AAC3B,IAAA,MAAM,MAAA,GAAS,IAAA,EAAM,GAAA,CAAI,GAAG,CAAA;AAK5B,IAAA,IAAA,EAAM,OAAO,GAAG,CAAA;AAEhB,IAAA,OAAO,MAAA,IAAU,EAAA;AAAA,EACnB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,wBAAwB,SAAA,EAA4B;AAC1D,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,CAAK,GAAA,CAAI,SAAS,CAAA;AACpC,IAAA,IAAI,CAAC,MAAM,OAAO,KAAA;AAElB,IAAA,KAAA,MAAW,GAAA,IAAO,IAAA,CAAK,MAAA,EAAO,EAAG;AAC/B,MAAA,KAAA,MAAW,GAAA,IAAO,GAAA,CAAI,MAAA,EAAO,EAAG;AAC9B,QAAA,IAAI,GAAA,CAAI,MAAA,KAAW,MAAA,EAAW,OAAO,IAAA;AAAA,MACvC;AAAA,IACF;AAEA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEQ,WAAW,OAAA,EAA4D;AAC7E,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAC1C,MAAA,OAAO,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,GAAY,MAAA,GAAgD,IAAA;AAAA,IACjG,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAAA;AAAA,EAGQ,QAAA,CAAS,SAAA,EAAmB,SAAA,EAAsB,OAAA,EAAiB,MAAA,EAAgB;AACzF,IAAA,MAAM,MAAM,IAAA,CAAK,IAAA,CAAK,IAAI,SAAS,CAAA,EAAG,IAAI,SAAS,CAAA;AACnD,IAAA,IAAI,CAAC,GAAA,EAAK;AAEV,IAAA,KAAA,MAAW,GAAA,IAAO,GAAA,CAAI,MAAA,EAAO,EAAG;AAC9B,MAAA,IAAI,GAAA,CAAI,WAAW,MAAA,EAAQ;AAC3B,MAAA,GAAA,CAAI,KAAA,CAAM,KAAK,OAAO,CAAA;AACtB,MAAA,GAAA,CAAI,WAAA,GAAc,GAAA,CAAI,KAAA,CAAM,KAAA,MAAW,IAAI,CAAA;AAAA,IAC7C;AAAA,EACF;AAAA,EAEQ,MAAA,CAAO,SAAA,EAAmB,SAAA,EAAsB,OAAA,EAAiB;AACvE,IAAA,MAAM,MAAM,IAAA,CAAK,IAAA,CAAK,IAAI,SAAS,CAAA,EAAG,IAAI,SAAS,CAAA;AACnD,IAAA,IAAI,CAAC,GAAA,EAAK;AACV,IAAA,KAAA,MAAW,GAAA,IAAO,GAAA,CAAI,MAAA,EAAO,EAAG;AAC9B,MAAA,GAAA,CAAI,KAAA,CAAM,KAAK,OAAO,CAAA;AACtB,MAAA,GAAA,CAAI,WAAA,GAAc,GAAA,CAAI,KAAA,CAAM,KAAA,MAAW,IAAI,CAAA;AAAA,IAC7C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYQ,QAAQ,OAAA,EAA0B;AACxC,IAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,KAAA;AACjC,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAA,GAAS,IAAA,CAAK,MAAM,OAAO,CAAA;AAAA,IAC7B,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,GAAI,MAAA,GAAS,CAAC,MAAM,CAAA;AACvD,IAAA,OAAO,MAAA,CAAO,MAAA,GAAS,CAAA,IAAK,MAAA,CAAO,KAAA,CAAM,CAAC,CAAA,KAAM,IAAA,CAAK,YAAA,CAAa,CAAC,CAAC,CAAA;AAAA,EACtE;AAAA,EAEQ,aAAa,CAAA,EAAqB;AACxC,IAAA,IAAI,CAAC,KAAK,OAAO,CAAA,KAAM,YAAY,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG,OAAO,KAAA;AAC5D,IAAA,MAAM,CAAA,GAAI,CAAA;AACV,IAAA,IAAI,CAAA,CAAE,OAAA,KAAY,KAAA,EAAO,OAAO,KAAA;AAChC,IAAA,MAAM,SAAS,OAAO,CAAA,CAAE,MAAA,KAAW,QAAA,GAAW,EAAE,MAAA,GAAS,MAAA;AAEzD,IAAA,IAAI,MAAA,KAAW,2BAAA,IAA+B,MAAA,KAAW,yBAAA,EAA2B,OAAO,KAAA;AAC3F,IAAA,IAAI,MAAA,KAAW,QAAW,OAAO,IAAA;AAEjC,IAAA,MAAM,YAAY,QAAA,IAAY,CAAA;AAC9B,IAAA,MAAM,WAAW,OAAA,IAAW,CAAA;AAC5B,IAAA,OAAO,IAAA,IAAQ,KAAK,SAAA,KAAc,QAAA;AAAA,EACpC;AAAA,EAEQ,IAAA,GAAO;AACb,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,KAAA;AACjC,IAAA,KAAA,MAAW,EAAA,IAAM,IAAA,CAAK,KAAA,CAAM,iBAAA,CAAkB,MAAM,CAAA,EAAG;AACrD,MAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,CAAK,GAAA,CAAI,EAAE,CAAA;AAC7B,MAAA,IAAI,IAAA,EAAM;AACR,QAAA,KAAA,MAAW,GAAA,IAAO,IAAA,CAAK,MAAA,EAAO,EAAG;AAC/B,UAAA,KAAA,MAAW,OAAO,GAAA,CAAI,MAAA,EAAO,EAAG,GAAA,CAAI,cAAc,IAAI,CAAA;AAAA,QACxD;AAAA,MACF;AACA,MAAA,IAAA,CAAK,IAAA,CAAK,OAAO,EAAE,CAAA;AACrB,MAAA,IAAA,CAAK,OAAA,CAAQ,OAAO,EAAE,CAAA;AACpB,MAAA,IAAA,CAAK,KAAA,CAAM,cAAc,EAAE,CAAA;AAAA,IAC7B;AAAA,EACF;AACF;AAWA,SAAS,UAAU,KAAA,EAAuB;AACxC,EAAA,OAAO,WAAW,QAAQ,CAAA,CAAE,OAAO,KAAK,CAAA,CAAE,OAAO,KAAK,CAAA;AACxD;AAEA,SAAS,kBAAA,CAAmB,GAAW,CAAA,EAAoB;AACzD,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ,OAAO,KAAA;AAClC,EAAA,OAAO,eAAA,CAAgB,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,KAAK,GAAG,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,KAAK,CAAC,CAAA;AACrE;ACvcO,SAAS,eAAA,CAAgB,IAAA,GAAyB,EAAC,EAAc;AACtE,EAAA,MAAM,MAAA,GAAS,IAAI,WAAA,CAAY,IAAI,CAAA;AACnC,EAAA,MAAM,UAAU,IAAA,CAAK,UAAA,IAAc,EAAA,EAAI,OAAA,CAAQ,OAAO,EAAE,CAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAK,eAAA,IAAmB,GAAA;AAErC,EAAA,MAAM,iBAAiB,IAAA,CAAK,cAAA;AAE5B,EAAA,SAAS,cAAA,CAAe,KAAqB,GAAA,EAAuB;AAClE,IAAA,IAAI,cAAA,IAAkB,eAAe,MAAA,EAAQ;AAG3C,MAAA,MAAM,MAAA,GAAS,KAAK,OAAA,CAAQ,MAAA;AAC5B,MAAA,GAAA,CAAI,SAAA,CAAU,+BAA+B,MAAA,IAAU,cAAA,CAAe,SAAS,MAAM,CAAA,GAAI,SAAS,MAAM,CAAA;AACxG,MAAA,GAAA,CAAI,SAAA,CAAU,QAAQ,QAAQ,CAAA;AAAA,IAChC,CAAA,MAAO;AACL,MAAA,GAAA,CAAI,SAAA,CAAU,+BAA+B,IAAI,CAAA;AAAA,IACnD;AACA,IAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,oBAAoB,CAAA;AAElE,IAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,mDAAmD,CAAA;AACjG,IAAA,GAAA,CAAI,SAAA,CAAU,0BAA0B,OAAO,CAAA;AAAA,EACjD;AAEA,EAAA,SAAS,SAAS,GAAA,EAAuC;AACvD,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,SAAmB,EAAC;AAC1B,MAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,MAAA,GAAA,CAAI,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAChC,QAAA,KAAA,IAAS,KAAA,CAAM,MAAA;AAEf,QAAA,IAAI,KAAA,GAAQ,MAAM,IAAA,EAAM;AACtB,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,mBAAmB,CAAC,CAAA;AACrC,UAAA,GAAA,CAAI,OAAA,EAAQ;AACZ,UAAA;AAAA,QACF;AACA,QAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,MACnB,CAAC,CAAA;AACD,MAAA,GAAA,CAAI,EAAA,CAAG,KAAA,EAAO,MAAM,OAAA,CAAQ,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA,CAAE,QAAA,CAAS,MAAM,CAAC,CAAC,CAAA;AACnE,MAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM,CAAA;AAAA,IACxB,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,SAAS,IAAA,CAAK,GAAA,EAAqB,MAAA,EAAgB,IAAA,EAAqB;AACtE,IAAA,GAAA,CAAI,UAAA,GAAa,MAAA;AACjB,IAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,kBAAkB,CAAA;AAChD,IAAA,GAAA,CAAI,GAAA,CAAI,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,EAC9B;AAEA,EAAA,SAAS,SAAS,GAAA,EAAuC;AACvD,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,IAAA,IAAQ,GAAA;AACjC,IAAA,MAAM,CAAA,GAAI,IAAI,GAAA,CAAI,GAAA,CAAI,OAAO,GAAA,EAAK,CAAA,OAAA,EAAU,IAAI,CAAA,CAAE,CAAA;AAClD,IAAA,OAAO,CAAA,CAAE,YAAA;AAAA,EACX;AAEA,EAAA,SAAS,YAAY,GAAA,EAA8B;AACjD,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,IAAA,IAAQ,GAAA;AACjC,IAAA,MAAM,CAAA,GAAI,IAAI,GAAA,CAAI,GAAA,CAAI,OAAO,GAAA,EAAK,CAAA,OAAA,EAAU,IAAI,CAAA,CAAE,CAAA;AAClD,IAAA,OAAO,CAAA,CAAE,QAAA;AAAA,EACX;AAEA,EAAA,MAAM,QAAA,GAAwB,OAAO,GAAA,EAAK,GAAA,KAAQ;AAChD,IAAA,cAAA,CAAe,KAAK,GAAG,CAAA;AACvB,IAAA,IAAI,GAAA,CAAI,WAAW,SAAA,EAAW;AAAE,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AAAK,MAAA,OAAO,IAAI,GAAA,EAAI;AAAA,IAAG;AACxE,IAAA,IAAI,GAAA,CAAI,MAAA,KAAW,MAAA,EAAQ,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,oBAAA,EAAsB,CAAA;AAChF,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AAAE,MAAA,IAAA,GAAO,MAAM,SAAS,GAAG,CAAA;AAAA,IAAG,SAAS,CAAA,EAAG;AAC5C,MAAA,OAAO,IAAA,CAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,aAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,eAAA,EAAiB,CAAA;AAAA,IACnF;AACA,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AAAE,MAAA,MAAA,GAAS,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,IAAG,CAAA,CAAA,MAAQ;AAAE,MAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,gBAAgB,CAAA;AAAA,IAAG;AAC7F,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAK,UAAU,EAAC;AACvC,IAAA,IAAI,OAAO,OAAA,KAAY,QAAA,IAAY,OAAO,UAAU,QAAA,EAAU;AAC5D,MAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,kBAAkB,CAAA;AAAA,IACnD;AACA,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,QAAA,CAAS,OAAA,EAAS,KAAK,CAAA;AAC7C,IAAA,IAAI,CAAC,MAAA,CAAO,EAAA,EAAI,OAAO,IAAA,CAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,MAAA,CAAO,MAAA,EAAQ,CAAA;AAC9D,IAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,EACpC,CAAA;AAKA,EAAA,SAAS,mBACP,SAAA,EACa;AACb,IAAA,OAAO,OAAO,KAAK,GAAA,KAAQ;AACzB,MAAA,cAAA,CAAe,KAAK,GAAG,CAAA;AACvB,MAAA,IAAI,GAAA,CAAI,WAAW,SAAA,EAAW;AAAE,QAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AAAK,QAAA,OAAO,IAAI,GAAA,EAAI;AAAA,MAAG;AACxE,MAAA,IAAI,GAAA,CAAI,MAAA,KAAW,MAAA,EAAQ,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,oBAAA,EAAsB,CAAA;AAChF,MAAA,MAAM,OAAA,GAAU,cAAA,CAAe,GAAA,EAAK,MAAM,CAAA;AAC1C,MAAA,IAAI,CAAC,SAAS,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,iBAAA,EAAmB,CAAA;AAChE,MAAA,MAAM,QAAQ,QAAA,CAAS,GAAG,CAAA,CAAE,GAAA,CAAI,OAAO,CAAA,IAAK,EAAA;AAE5C,MAAA,IAAI,cAAc,YAAA,EAAc;AAK9B,QAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,OAAA,EAAS,KAAK,CAAA;AACzC,QAAA,IAAI,CAAC,KAAA,CAAM,EAAA,IAAM,KAAA,CAAM,WAAW,cAAA,EAAgB;AAChD,UAAA,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,IAAI,IAAA,EAAM,WAAA,EAAa,MAAM,CAAA;AAAA,QACvD;AAEA,QAAA,MAAMC,GAAAA,GAAK,MAAA,CAAO,UAAA,CAAW,OAAA,EAAS,KAAK,CAAA;AAC3C,QAAA,OAAO,IAAA,CAAK,GAAA,EAAKA,GAAAA,GAAK,GAAA,GAAM,GAAA,EAAKA,GAAAA,GAAK,EAAE,EAAA,EAAI,IAAA,EAAK,GAAI,EAAE,KAAA,EAAO,iBAAiB,CAAA;AAAA,MACjF;AAEA,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AAAE,QAAA,IAAA,GAAO,MAAM,SAAS,GAAG,CAAA;AAAA,MAAG,SAAS,CAAA,EAAG;AAC5C,QAAA,OAAO,IAAA,CAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,aAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,eAAA,EAAiB,CAAA;AAAA,MACnF;AAaA,MAAA,MAAM,IAAA,GAAO,MAAA,CAAO,KAAA,CAAM,OAAA,EAAS,KAAK,CAAA;AACxC,MAAA,IAAI,CAAC,IAAA,CAAK,EAAA,IAAM,IAAA,CAAK,WAAW,cAAA,EAAgB;AAC9C,QAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,gBAAgB,CAAA;AAAA,MACjD;AAKA,MAAA,MAAM,SAAS,QAAA,CAAS,GAAG,CAAA,CAAE,GAAA,CAAI,QAAQ,CAAA,IAAK,MAAA;AAE9C,MAAA,MAAM,KAAK,SAAA,KAAc,SAAA,GACrB,MAAA,CAAO,KAAA,CAAM,SAAS,KAAA,EAAO,IAAA,EAAM,EAAE,MAAA,EAAQ,CAAA,GAC7C,MAAA,CAAO,MAAA,CAAO,OAAA,EAAS,OAAO,IAAI,CAAA;AACtC,MAAA,OAAO,IAAA,CAAK,GAAA,EAAK,EAAA,GAAK,GAAA,GAAM,GAAA,EAAK,EAAA,GAAK,EAAE,EAAA,EAAI,IAAA,EAAK,GAAI,EAAE,KAAA,EAAO,0BAA0B,CAAA;AAAA,IAC1F,CAAA;AAAA,EACF;AAEA,EAAA,MAAM,KAAA,GAAQ,mBAAmB,SAAS,CAAA;AAC1C,EAAA,MAAM,MAAA,GAAS,mBAAmB,UAAU,CAAA;AAC5C,EAAA,MAAM,UAAA,GAAa,mBAAmB,YAAY,CAAA;AAElD,EAAA,MAAM,MAAA,GAAsB,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC9C,IAAA,cAAA,CAAe,KAAK,GAAG,CAAA;AACvB,IAAA,IAAI,GAAA,CAAI,WAAW,SAAA,EAAW;AAAE,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AAAK,MAAA,OAAO,IAAI,GAAA,EAAI;AAAA,IAAG;AACxE,IAAA,IAAI,GAAA,CAAI,MAAA,KAAW,KAAA,EAAO,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,oBAAA,EAAsB,CAAA;AAC/E,IAAA,MAAM,OAAA,GAAU,cAAA,CAAe,GAAA,EAAK,MAAM,CAAA;AAC1C,IAAA,IAAI,CAAC,SAAS,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,iBAAA,EAAmB,CAAA;AAChE,IAAA,MAAM,CAAA,GAAI,SAAS,GAAG,CAAA;AACtB,IAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,GAAA,CAAI,OAAO,CAAA,IAAK,EAAA;AAChC,IAAA,MAAM,YAAY,CAAA,CAAE,GAAA,CAAI,WAAW,CAAA,KAAM,aAAa,UAAA,GAAa,SAAA;AAMnE,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,SAAA,CAAU,OAAA,EAAS,OAAO,SAAA,EAAW;AAAA,MACtD,QAAQ,QAAA,CAAS,GAAG,CAAA,CAAE,GAAA,CAAI,QAAQ,CAAA,IAAK;AAAA,KACxC,CAAA;AACD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,mBAAmB,CAAA;AACjD,MAAA,GAAA,CAAI,KAAA,CAAM,CAAA;AAAA,MAAA,EAAuB,IAAI,MAAM;;AAAA,CAAM,CAAA;AACjD,MAAA,OAAO,IAAI,GAAA,EAAI;AAAA,IACjB;AAEA,IAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,IAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,mBAAmB,CAAA;AACjD,IAAA,GAAA,CAAI,SAAA,CAAU,iBAAiB,UAAU,CAAA;AACzC,IAAA,GAAA,CAAI,SAAA,CAAU,cAAc,YAAY,CAAA;AACxC,IAAA,GAAA,CAAI,SAAA,CAAU,qBAAqB,IAAI,CAAA;AACvC,IAAA,GAAA,CAAI,MAAM,iBAAiB,CAAA;AAC3B,IAAA,KAAA,CAAM,GAAG,CAAA;AAET,IAAA,IAAI,SAAA,GAAmD,YAAY,MAAM;AACvE,MAAA,GAAA,CAAI,MAAM,iBAAiB,CAAA;AAC3B,MAAA,KAAA,CAAM,GAAG,CAAA;AAAA,IACX,GAAG,IAAM,CAAA;AACT,IAAA,IAAI,SAAA,IAAa,OAAQ,SAAA,CAAqC,KAAA,KAAU,UAAA,EAAY;AAClF,MAAC,UAAoC,KAAA,EAAM;AAAA,IAC7C;AAEA,IAAA,MAAM,UAAU,MAAM;AACpB,MAAA,IAAI,SAAA,EAAW;AAAE,QAAA,aAAA,CAAc,SAAS,CAAA;AAAG,QAAA,SAAA,GAAY,IAAA;AAAA,MAAM;AAC7D,MAAA,GAAA,CAAI,WAAA,EAAY;AAAA,IAClB,CAAA;AACA,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,OAAO,CAAA;AACvB,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,OAAO,CAAA;AAEvB,IAAA,IAAI;AACF,MAAA,WAAA,MAAiB,KAAA,IAAS,IAAI,MAAA,EAAQ;AACpC,QAAA,GAAA,CAAI,KAAA,CAAM,CAAA;AAAA,MAAA,EAAqB,KAAK;;AAAA,CAAM,CAAA;AAC1C,QAAA,KAAA,CAAM,GAAG,CAAA;AAAA,MACX;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER,CAAA,SAAE;AACA,MAAA,OAAA,EAAQ;AACR,MAAA,GAAA,CAAI,GAAA,EAAI;AAAA,IACV;AAAA,EACF,CAAA;AAMA,EAAA,MAAM,OAAA,GAAuB,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC/C,IAAA,MAAM,QAAA,GAAW,YAAY,GAAG,CAAA;AAChC,IAAA,IAAI,CAAC,QAAA,CAAS,UAAA,CAAW,MAAA,GAAS,GAAG,CAAA,EAAG;AACtC,MAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,aAAa,CAAA;AAAA,IAC9C;AACA,IAAA,MAAM,IAAA,GAAO,QAAA,CAAS,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA;AACzC,IAAA,IAAI,IAAA,KAAS,WAAA,EAAa,OAAO,QAAA,CAAS,KAAK,GAAG,CAAA;AAClD,IAAA,MAAM,CAAA,GAAI,6DAAA,CAA8D,IAAA,CAAK,IAAI,CAAA;AACjF,IAAA,IAAI,CAAC,GAAG,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,WAAA,EAAa,CAAA;AACpD,IAAA,MAAM,KAAA,GAAQ,EAAE,CAAC,CAAA;AACjB,IAAA,IAAI,KAAA,KAAU,OAAA,EAAS,OAAO,KAAA,CAAM,KAAK,GAAG,CAAA;AAC5C,IAAA,IAAI,KAAA,KAAU,QAAA,EAAU,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AAC9C,IAAA,IAAI,KAAA,KAAU,QAAA,EAAU,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AAC9C,IAAA,IAAI,KAAA,KAAU,YAAA,EAAc,OAAO,UAAA,CAAW,KAAK,GAAG,CAAA;AACtD,IAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,aAAa,CAAA;AAAA,EAC9C,CAAA;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,OAAA,EAAS,UAAU,KAAA,EAAO,MAAA,EAAQ,QAAQ,UAAA,EAAW;AACxE;AAEA,SAAS,cAAA,CAAe,KAAsB,MAAA,EAA+B;AAC3E,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,IAAA,IAAQ,GAAA;AACjC,EAAA,MAAM,CAAA,GAAI,IAAI,GAAA,CAAI,GAAA,CAAI,OAAO,GAAA,EAAK,CAAA,OAAA,EAAU,IAAI,CAAA,CAAE,CAAA;AAClD,EAAA,MAAM,OAAO,CAAA,CAAE,QAAA;AACf,EAAA,IAAI,UAAU,CAAC,IAAA,CAAK,WAAW,MAAA,GAAS,GAAG,GAAG,OAAO,IAAA;AACrD,EAAA,MAAM,OAAO,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,IAAA;AAClD,EAAA,MAAM,CAAA,GAAI,4BAAA,CAA6B,IAAA,CAAK,IAAI,CAAA;AAChD,EAAA,OAAO,CAAA,GAAI,CAAA,CAAE,CAAC,CAAA,GAAI,IAAA;AACpB;AAEA,SAAS,MAAM,GAAA,EAAqB;AAGlC,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,CAAA,CAAE,KAAA,IAAQ;AACZ","file":"chunk-OZBUPO4K.js","sourcesContent":["import { createHash, randomBytes, timingSafeEqual } from \"node:crypto\";\n\n/**\n * RelayBroker — pure logic for the SSE+POST tunnel described in\n * docs/relay-protocol.md, hostable in any Node-compatible runtime\n * (Node, Bun, Deno-with-Node-compat, Cloudflare Workers via the Web\n * standards subset). No HTTP framework opinions; this class just\n * stores sessions, validates tokens, enqueues frames, and produces\n * SSE event payloads ready to flush.\n *\n *   const broker = new RelayBroker();\n *   const reg     = broker.register(\"session-id\", \"token\");      // ok / error\n *   broker.inbox(\"session-id\", \"token\", '{\"jsonrpc\":\"2.0\",…}');  // enqueue inbound\n *   const sub = broker.subscribe(\"session-id\", \"token\", \"inbound\");\n *   for await (const payload of sub.frames()) yield encodeSse(payload);\n *\n * Storage is an in-memory Map by default — fine for a single relay\n * process. To run multiple instances behind a load balancer, swap\n * `MemoryStore` for a Redis-backed equivalent (same Store interface).\n */\n\nexport type Direction = \"inbound\" | \"outbound\";\n\nexport type Session = {\n  id: string;\n  /** SHA-256 hex of the original token. Compared with timing-safe equals. */\n  tokenHash: string;\n  /** Last touched (ms since epoch). Used for TTL cleanup. */\n  lastSeen: number;\n};\n\nexport type Subscriber = {\n  id: string;\n  direction: Direction;\n  queue: string[];\n  resolveNext: ((frame: string | null) => void) | null;\n  /**\n   * The caller-supplied client label, when one was given.\n   *\n   * Used to route a RESPONSE back to whoever asked. Without it the broker\n   * cannot tell two holders of one bearer token apart, and every reply goes to\n   * every subscriber -- so a second token holder passively receives the results\n   * of everyone else's tool calls without making one.\n   */\n  client?: string;\n};\n\nexport type RelayBrokerOptions = {\n  /** Sessions auto-expire after this many ms of inactivity. Default 4h. */\n  ttlMs?: number;\n  /** Cleanup tick interval in ms. Default 60 000. */\n  reapIntervalMs?: number;\n  /** Bring-your-own storage layer (redis, etc.). Defaults to in-memory. */\n  store?: Store;\n};\n\nexport interface Store {\n  putSession(s: Session): void;\n  getSession(id: string): Session | undefined;\n  deleteSession(id: string): void;\n  /** Used by the reap tick — return ids whose lastSeen < cutoff. */\n  expiredSessionIds(cutoff: number): string[];\n}\n\nclass MemoryStore implements Store {\n  private sessions = new Map<string, Session>();\n  putSession(s: Session) { this.sessions.set(s.id, s); }\n  getSession(id: string) { return this.sessions.get(id); }\n  deleteSession(id: string) { this.sessions.delete(id); }\n  expiredSessionIds(cutoff: number) {\n    const out: string[] = [];\n    for (const [id, s] of this.sessions) if (s.lastSeen < cutoff) out.push(id);\n    return out;\n  }\n}\n\nconst SESSION_ID_PATTERN = /^[A-Za-z0-9_-]{4,64}$/;\n\nexport class RelayBroker {\n  private readonly ttlMs: number;\n  private readonly store: Store;\n  /** Per-session, per-direction subscriber list. */\n  private subs: Map<string, Map<string, Map<string, Subscriber>>> = new Map();\n\n  /** Per-session map of JSON-RPC request id -> the client that asked. */\n  private callers: Map<string, Map<string, string>> = new Map();\n  private reaper?: ReturnType<typeof setInterval>;\n\n  constructor(opts: RelayBrokerOptions = {}) {\n    this.ttlMs = opts.ttlMs ?? 4 * 60 * 60 * 1000; // 4h\n    this.store = opts.store ?? new MemoryStore();\n    const tick = opts.reapIntervalMs ?? 60_000;\n    if (tick > 0) {\n      this.reaper = setInterval(() => this.reap(), tick);\n      // Don't keep the process alive just for the reaper.\n      if (typeof (this.reaper as { unref?: () => void }).unref === \"function\") {\n        (this.reaper as { unref: () => void }).unref();\n      }\n    }\n  }\n\n  dispose() {\n    if (this.reaper) clearInterval(this.reaper);\n    this.subs.clear();\n    this.callers.clear();\n  }\n\n  /** Register a session id + token. Idempotent — same id+token re-registers,\n   *  different token fails. */\n  register(id: string, token: string): { ok: true } | { ok: false; reason: string } {\n    if (!SESSION_ID_PATTERN.test(id)) return { ok: false, reason: \"invalid_session_id\" };\n    if (typeof token !== \"string\" || token.length < 16 || token.length > 128) {\n      return { ok: false, reason: \"invalid_token\" };\n    }\n    const existing = this.store.getSession(id);\n    const hash = sha256Hex(token);\n    if (existing) {\n      if (!timingSafeEqualHex(existing.tokenHash, hash)) return { ok: false, reason: \"session_taken\" };\n      existing.lastSeen = Date.now();\n      this.store.putSession(existing);\n      return { ok: true };\n    }\n    this.store.putSession({ id, tokenHash: hash, lastSeen: Date.now() });\n    return { ok: true };\n  }\n\n  unregister(id: string, token: string): boolean {\n    if (!this.validate(id, token)) return false;\n    this.store.deleteSession(id);\n    this.subs.delete(id);\n    this.callers.delete(id);\n    return true;\n  }\n\n  /**\n   * Validate an authenticated touch, saying WHY when it fails.\n   *\n   * `session_gone` and `invalid_token` are different facts and a client acts on\n   * them differently. A gone session means the page has closed or the TTL has\n   * elapsed — the NORMAL end of a relay lifecycle, since the browser is the\n   * server and no state persists across restarts. A bad token means the caller\n   * is wrong.\n   *\n   * They were collapsed into one boolean and reported as `invalid_token`, so an\n   * agent holding a perfectly good token against a closed page was told its\n   * credentials were wrong. Not a missing signal — an actively misleading one,\n   * which sends the reader to debug an auth path that was never the problem.\n   *\n   * Missing credentials stay `invalid_token`: a request that never named a\n   * session has not discovered a dead one.\n   *\n   * The reason is deliberately NOT widened to cover a wrong token on a live\n   * session — answering `session_gone` there would tell an unauthenticated\n   * caller which sessions exist.\n   *\n   * Requested by the Prism harness while designing a non-Node relay client.\n   */\n  check(id: string, token: string): { ok: true } | { ok: false; reason: \"invalid_token\" | \"session_gone\" } {\n    if (!id || !token) return { ok: false, reason: \"invalid_token\" };\n\n    const s = this.store.getSession(id);\n    if (!s) return { ok: false, reason: \"session_gone\" };\n\n    if (!timingSafeEqualHex(s.tokenHash, sha256Hex(token))) {\n      return { ok: false, reason: \"invalid_token\" };\n    }\n\n    s.lastSeen = Date.now();\n    this.store.putSession(s);\n    return { ok: true };\n  }\n\n  /**\n   * Validate an authenticated touch and slide the TTL forward.\n   *\n   * Kept as-is for existing callers; `check()` is the one that says why.\n   */\n  validate(id: string, token: string): boolean {\n    return this.check(id, token).ok;\n  }\n\n  /** Drop a session — the page closed, or a test needs it gone. */\n  dropSession(id: string): void {\n    this.store.deleteSession(id);\n    this.subs.delete(id);\n    this.callers.delete(id);\n  }\n\n  /** Push a frame onto the inbound queue (external agent → browser). */\n  inbox(id: string, token: string, payload: string, opts: { client?: string } = {}): boolean {\n    if (!this.validate(id, token)) return false;\n    if (!this.isFrame(payload)) return false;\n\n    // Remember WHO asked, so the reply can go back to them alone.\n    if (opts.client !== undefined) {\n      this.rememberCaller(id, payload, opts.client);\n    }\n\n    this.fanOut(id, \"inbound\", payload);\n    return true;\n  }\n\n  /** Push a frame onto the outbound queue (browser server → external agents). */\n  outbox(id: string, token: string, payload: string): boolean {\n    if (!this.validate(id, token)) return false;\n    if (!this.isFrame(payload)) return false;\n\n    // A RESPONSE goes to the caller. A NOTIFICATION goes to everyone.\n    //\n    // `relay-protocol.md` has always said \"tool-call replies go back on the\n    // transport that originated the call\"; the relay broadcast them instead.\n    // Combined with a bearer token that carries no per-agent identity, that\n    // meant a second token holder passively received the results of everyone\n    // else's calls -- turning a share link from \"you may act here\" into \"you\n    // may watch everyone acting here\", which nobody chose.\n    //\n    // Notifications stay broadcast: presence, activity and server-pushed state\n    // answer nobody and are meant for every attached client. Narrowing those\n    // would break the collaboration this exists to serve.\n    const target = this.callerFor(id, payload);\n\n    if (target === null) {\n      this.fanOut(id, \"outbound\", payload);\n      return true;\n    }\n\n    this.fanOutTo(id, \"outbound\", payload, target);\n    return true;\n  }\n\n  /**\n   * Subscribe to a session's queue for one direction. Returns an iterable\n   * the caller (an HTTP handler) pumps as SSE.\n   */\n  subscribe(id: string, token: string, direction: Direction, opts: { client?: string } = {}): SubscribeResult {\n    if (!this.validate(id, token)) return { ok: false, reason: \"invalid_token\" };\n    const subscriberId = randomBytes(8).toString(\"hex\");\n    const subscriber: Subscriber = {\n      id: subscriberId,\n      direction,\n      queue: [],\n      resolveNext: null,\n      client: opts.client,\n    };\n    this.getDirSubs(id, direction).set(subscriberId, subscriber);\n\n    // Notify the inbound side (= browser) that an outbound subscriber\n    // (= external agent) just connected.\n    if (direction === \"outbound\") {\n      this.fanOut(\n        id,\n        \"inbound\",\n        JSON.stringify({\n          jsonrpc: \"2.0\",\n          method: \"notifications/peer_joined\",\n          params: { subscriberId, ts: Date.now() },\n        }),\n      );\n    }\n\n    const unsubscribe = () => {\n      this.getDirSubs(id, direction).delete(subscriberId);\n      if (direction === \"outbound\") {\n        this.fanOut(\n          id,\n          \"inbound\",\n          JSON.stringify({\n            jsonrpc: \"2.0\",\n            method: \"notifications/peer_left\",\n            params: { subscriberId, ts: Date.now() },\n          }),\n        );\n      }\n    };\n\n    /** Async generator the HTTP handler drains. Yields raw frame payloads;\n     *  the handler is responsible for SSE framing (`event: mcp\\ndata: …`). */\n    const frames = async function* (this: Subscriber): AsyncGenerator<string, void, void> {\n      while (true) {\n        if (this.queue.length > 0) {\n          const next = this.queue.shift();\n          if (next !== undefined) yield next;\n          continue;\n        }\n        const next = await new Promise<string | null>((resolve) => {\n          this.resolveNext = resolve;\n        });\n        this.resolveNext = null;\n        if (next === null) return;\n        yield next;\n      }\n    }.bind(subscriber);\n\n    return {\n      ok: true,\n      subscriberId,\n      frames: frames(),\n      unsubscribe: () => {\n        // Wake the generator and let it return cleanly.\n        subscriber.resolveNext?.(null);\n        unsubscribe();\n      },\n    };\n  }\n\n  // ────────────────────────────────────────────────────────────── internals\n\n  private getDirSubs(sessionId: string, direction: Direction): Map<string, Subscriber> {\n    let bySession = this.subs.get(sessionId);\n    if (!bySession) {\n      bySession = new Map();\n      this.subs.set(sessionId, bySession);\n    }\n    let byDir = bySession.get(direction);\n    if (!byDir) {\n      byDir = new Map();\n      bySession.set(direction, byDir);\n    }\n    return byDir;\n  }\n\n  /**\n   * Record which client asked, keyed by JSON-RPC id.\n   *\n   * Only for REQUESTS — a frame with both an `id` and a `method`. A\n   * notification answers nobody and a response is not a question.\n   */\n  private rememberCaller(sessionId: string, payload: string, client: string): void {\n    const frame = this.parseFrame(payload);\n    if (!frame || frame.id === undefined || frame.id === null || typeof frame.method !== \"string\") {\n      return;\n    }\n\n    let byId = this.callers.get(sessionId);\n    if (!byId) {\n      byId = new Map();\n      this.callers.set(sessionId, byId);\n    }\n\n    // BOUNDED. A session that asks for hours must not grow this without limit,\n    // and an unanswered request would otherwise sit here forever. Oldest out\n    // first; losing the oldest correlation degrades to \"delivered to nobody\",\n    // which fails closed rather than open.\n    if (byId.size >= 1000) {\n      const oldest = byId.keys().next();\n      if (!oldest.done) byId.delete(oldest.value);\n    }\n\n    byId.set(String(frame.id), client);\n  }\n\n  /**\n   * The client a RESPONSE belongs to, or `null` when the frame is a broadcast.\n   *\n   * Returns the empty string for a response whose id nobody is recorded as\n   * having asked — routed to NOBODY rather than to everyone. Broadcasting an\n   * uncorrelated reply \"just in case\" is precisely the leak being closed.\n   */\n  private callerFor(sessionId: string, payload: string): string | null {\n    const frame = this.parseFrame(payload);\n\n    // Not a response: no id, or it carries a method (a request/notification).\n    if (!frame || frame.id === undefined || frame.id === null || typeof frame.method === \"string\") {\n      return null;\n    }\n\n    // LEGACY MODE is decided by whether any subscriber IDENTIFIED ITSELF, not\n    // by whether a correlation happens to have been recorded yet.\n    //\n    // Keying on the correlation map was wrong in a way a test caught: a\n    // labelled client that has subscribed but not yet asked leaves the map\n    // empty, and an unsolicited response would then broadcast to everyone --\n    // the leak reopening in the window before the first call.\n    //\n    // If nobody labelled themselves, every client is legacy and broadcast is\n    // the only thing that can work; narrowing would break them in silence.\n    if (!this.anyIdentifiedSubscriber(sessionId)) {\n      return null;\n    }\n\n    const byId = this.callers.get(sessionId);\n    const key = String(frame.id);\n    const client = byId?.get(key);\n\n    // CONSUMED. Correlation is not a standing subscription: leaving it would\n    // let a replayed frame with the same id be delivered again, and would make\n    // the map a slow leak on a long session.\n    byId?.delete(key);\n\n    return client ?? \"\";\n  }\n\n  /**\n   * Has any subscriber on this session told the broker who it is?\n   *\n   * The discriminator between a scoped session and a legacy one. Checked across\n   * BOTH directions: the page subscribes inbound and rarely labels itself, so\n   * asking only about the outbound side would misread a scoped session whose\n   * agents have not yet attached.\n   */\n  private anyIdentifiedSubscriber(sessionId: string): boolean {\n    const dirs = this.subs.get(sessionId);\n    if (!dirs) return false;\n\n    for (const dir of dirs.values()) {\n      for (const sub of dir.values()) {\n        if (sub.client !== undefined) return true;\n      }\n    }\n\n    return false;\n  }\n\n  private parseFrame(payload: string): { id?: unknown; method?: unknown } | null {\n    try {\n      const parsed: unknown = JSON.parse(payload);\n      return parsed && typeof parsed === \"object\" ? (parsed as { id?: unknown; method?: unknown }) : null;\n    } catch {\n      return null;\n    }\n  }\n\n  /** Deliver to the subscribers of one client only. */\n  private fanOutTo(sessionId: string, direction: Direction, payload: string, client: string) {\n    const dir = this.subs.get(sessionId)?.get(direction);\n    if (!dir) return;\n\n    for (const sub of dir.values()) {\n      if (sub.client !== client) continue;\n      sub.queue.push(payload);\n      sub.resolveNext?.(sub.queue.shift() ?? null);\n    }\n  }\n\n  private fanOut(sessionId: string, direction: Direction, payload: string) {\n    const dir = this.subs.get(sessionId)?.get(direction);\n    if (!dir) return;\n    for (const sub of dir.values()) {\n      sub.queue.push(payload);\n      sub.resolveNext?.(sub.queue.shift() ?? null);\n    }\n  }\n\n  /**\n   * Validate that a peer-supplied payload is a well-formed JSON-RPC 2.0 frame\n   * (or batch) before it is fanned out. Previously this was a substring match on\n   * `\"jsonrpc\"`, which let any token holder inject spoofed frames — a forged\n   * `notifications/peer_joined` / `peer_left` (broker-reserved presence control),\n   * a fake `notifications/agent_activity {source:\"user\"}` (\"human took control\"),\n   * or a forged response with a matching id. We now parse + shape-check, and\n   * reject the broker-reserved control methods (the broker emits those itself,\n   * never a peer).\n   */\n  private isFrame(payload: string): boolean {\n    if (payload.length === 0) return false;\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(payload);\n    } catch {\n      return false;\n    }\n    const frames = Array.isArray(parsed) ? parsed : [parsed];\n    return frames.length > 0 && frames.every((f) => this.isValidFrame(f));\n  }\n\n  private isValidFrame(f: unknown): boolean {\n    if (!f || typeof f !== \"object\" || Array.isArray(f)) return false;\n    const o = f as Record<string, unknown>;\n    if (o.jsonrpc !== \"2.0\") return false;\n    const method = typeof o.method === \"string\" ? o.method : undefined;\n    // Broker-reserved control frames may never arrive from a peer.\n    if (method === \"notifications/peer_joined\" || method === \"notifications/peer_left\") return false;\n    if (method !== undefined) return true; // request or notification\n    // Response: needs an id and exactly one of result / error.\n    const hasResult = \"result\" in o;\n    const hasError = \"error\" in o;\n    return \"id\" in o && hasResult !== hasError;\n  }\n\n  private reap() {\n    const cutoff = Date.now() - this.ttlMs;\n    for (const id of this.store.expiredSessionIds(cutoff)) {\n      const dirs = this.subs.get(id);\n      if (dirs) {\n        for (const dir of dirs.values()) {\n          for (const sub of dir.values()) sub.resolveNext?.(null);\n        }\n      }\n      this.subs.delete(id);\n    this.callers.delete(id);\n      this.store.deleteSession(id);\n    }\n  }\n}\n\nexport type SubscribeResult =\n  | { ok: false; reason: string }\n  | {\n      ok: true;\n      subscriberId: string;\n      frames: AsyncGenerator<string, void, void>;\n      unsubscribe: () => void;\n    };\n\nfunction sha256Hex(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\nfunction timingSafeEqualHex(a: string, b: string): boolean {\n  if (a.length !== b.length) return false;\n  return timingSafeEqual(Buffer.from(a, \"hex\"), Buffer.from(b, \"hex\"));\n}\n","import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { URL } from \"node:url\";\nimport { RelayBroker, type RelayBrokerOptions } from \"./core\";\n\n/**\n * Node HTTP adapter for {@link RelayBroker}. Returns a single request\n * handler plus per-route handlers, so you can either drop it into\n * `http.createServer(...)` directly or mount the individual handlers\n * onto your existing Node HTTP framework (Express, Hono w/ node-adapter,\n * native http).\n *\n *   const relay = createNodeRelay({ pathPrefix: \"/mcp-relay\" });\n *   http.createServer(relay.handler).listen(8787);\n *\n *   // Or piecemeal:\n *   app.post(\"/mcp-relay/register\",       relay.register);\n *   app.post(\"/mcp-relay/:s/inbox\",       relay.inbox);\n *   app.post(\"/mcp-relay/:s/outbox\",      relay.outbox);\n *   app.get (\"/mcp-relay/:s/events\",      relay.events);\n *   app.post(\"/mcp-relay/:s/unregister\",  relay.unregister);\n */\n\nexport type NodeRelayOptions = RelayBrokerOptions & {\n  /** URL path prefix (without trailing slash). Default `\"\"` — handlers\n   *  expect paths like `/register`, `/{id}/inbox`, etc. directly. */\n  pathPrefix?: string;\n  /** Comma-separated origins (or `*`) for CORS. Default `*` — relays\n   *  are typically called cross-origin from the demo host. */\n  corsAllowOrigin?: string;\n  /**\n   * Strict browser-origin allow-list. When set, only these Origins get a\n   * matching `Access-Control-Allow-Origin` (the request's own Origin is\n   * reflected, never `*`), which blunts DNS-rebinding + hostile cross-origin\n   * pages from reading relay responses. Recommended for any browser-facing\n   * deployment. When unset, `corsAllowOrigin` (default `*`) is used and the\n   * session token is the only auth — pair that with a loopback bind.\n   */\n  allowedOrigins?: string[];\n};\n\nexport type NodeHandler = (req: IncomingMessage, res: ServerResponse) => unknown | Promise<unknown>;\n\nexport type NodeRelay = {\n  broker: RelayBroker;\n  /** Single-handler shape — routes internally based on method + URL. */\n  handler: NodeHandler;\n  /** Per-route handlers. Each handler ignores the URL prefix and\n   *  acts on the path remainder, so you can mount them under any\n   *  prefix in your existing app. */\n  register: NodeHandler;\n  inbox: NodeHandler;\n  outbox: NodeHandler;\n  events: NodeHandler;\n  unregister: NodeHandler;\n};\n\nexport function createNodeRelay(opts: NodeRelayOptions = {}): NodeRelay {\n  const broker = new RelayBroker(opts);\n  const prefix = (opts.pathPrefix ?? \"\").replace(/\\/$/, \"\");\n  const cors = opts.corsAllowOrigin ?? \"*\";\n\n  const allowedOrigins = opts.allowedOrigins;\n\n  function setCorsHeaders(res: ServerResponse, req?: IncomingMessage) {\n    if (allowedOrigins && allowedOrigins.length) {\n      // Strict mode: reflect the request Origin only when it's allow-listed;\n      // otherwise emit an origin that no browser will match.\n      const origin = req?.headers.origin;\n      res.setHeader(\"access-control-allow-origin\", origin && allowedOrigins.includes(origin) ? origin : \"null\");\n      res.setHeader(\"vary\", \"origin\");\n    } else {\n      res.setHeader(\"access-control-allow-origin\", cors);\n    }\n    res.setHeader(\"access-control-allow-methods\", \"GET, POST, OPTIONS\");\n    // `authorization` is forward-compat for a header-borne session token.\n    res.setHeader(\"access-control-allow-headers\", \"content-type, x-csrf-token, accept, authorization\");\n    res.setHeader(\"access-control-max-age\", \"86400\");\n  }\n\n  function readBody(req: IncomingMessage): Promise<string> {\n    return new Promise((resolve, reject) => {\n      const chunks: Buffer[] = [];\n      let bytes = 0;\n      req.on(\"data\", (chunk: Buffer) => {\n        bytes += chunk.length;\n        // Cap individual frames at 256 KB — protect against runaway payloads.\n        if (bytes > 256 * 1024) {\n          reject(new Error(\"payload_too_large\"));\n          req.destroy();\n          return;\n        }\n        chunks.push(chunk);\n      });\n      req.on(\"end\", () => resolve(Buffer.concat(chunks).toString(\"utf8\")));\n      req.on(\"error\", reject);\n    });\n  }\n\n  function json(res: ServerResponse, status: number, body: unknown): void {\n    res.statusCode = status;\n    res.setHeader(\"content-type\", \"application/json\");\n    res.end(JSON.stringify(body));\n  }\n\n  function getQuery(req: IncomingMessage): URLSearchParams {\n    const host = req.headers.host || \"x\";\n    const u = new URL(req.url || \"/\", `http://${host}`);\n    return u.searchParams;\n  }\n\n  function getPathname(req: IncomingMessage): string {\n    const host = req.headers.host || \"x\";\n    const u = new URL(req.url || \"/\", `http://${host}`);\n    return u.pathname;\n  }\n\n  const register: NodeHandler = async (req, res) => {\n    setCorsHeaders(res, req);\n    if (req.method === \"OPTIONS\") { res.statusCode = 204; return res.end(); }\n    if (req.method !== \"POST\") return json(res, 405, { error: \"method_not_allowed\" });\n    let body: string;\n    try { body = await readBody(req); } catch (e) {\n      return json(res, 413, { error: e instanceof Error ? e.message : \"payload_error\" });\n    }\n    let parsed: unknown;\n    try { parsed = JSON.parse(body); } catch { return json(res, 400, { error: \"invalid_json\" }); }\n    const { session, token } = (parsed ?? {}) as { session?: string; token?: string };\n    if (typeof session !== \"string\" || typeof token !== \"string\") {\n      return json(res, 400, { error: \"missing_fields\" });\n    }\n    const result = broker.register(session, token);\n    if (!result.ok) return json(res, 401, { error: result.reason });\n    return json(res, 200, { ok: true });\n  };\n\n  /** Handler for endpoints with a `{session}` segment. The path matcher\n   *  caller passes the session id explicitly so this works mounted under\n   *  any route shape. */\n  function makeSessionHandler(\n    direction: Direction | \"unregister\",\n  ): NodeHandler {\n    return async (req, res) => {\n      setCorsHeaders(res, req);\n      if (req.method === \"OPTIONS\") { res.statusCode = 204; return res.end(); }\n      if (req.method !== \"POST\") return json(res, 405, { error: \"method_not_allowed\" });\n      const session = extractSession(req, prefix);\n      if (!session) return json(res, 400, { error: \"missing_session\" });\n      const token = getQuery(req).get(\"token\") ?? \"\";\n\n      if (direction === \"unregister\") {\n        // Unregistering a session that is already gone is a SUCCESS, not an\n        // auth failure. The caller wanted it gone and it is gone; reporting\n        // `invalid_token` for a correct token would make a clean shutdown look\n        // like a broken one, and a client retrying it would loop.\n        const state = broker.check(session, token);\n        if (!state.ok && state.reason === \"session_gone\") {\n          return json(res, 200, { ok: true, alreadyGone: true });\n        }\n\n        const ok = broker.unregister(session, token);\n        return json(res, ok ? 200 : 401, ok ? { ok: true } : { error: \"invalid_token\" });\n      }\n\n      let body: string;\n      try { body = await readBody(req); } catch (e) {\n        return json(res, 413, { error: e instanceof Error ? e.message : \"payload_error\" });\n      }\n      // A GONE SESSION IS REPORTED AS ITSELF, with 410, before the frame is\n      // even considered.\n      //\n      // Every failure here used to come back as `401 invalid_token_or_frame`,\n      // so an agent whose page had simply closed was told its credentials or\n      // its JSON were wrong. A relay session ending is the NORMAL end of a\n      // lifecycle -- the browser is the server and nothing persists -- so it is\n      // the one outcome a server-side client must be able to recognise.\n      //\n      // 410 Gone rather than 404: the session existed and is now over, which is\n      // exactly what the status means, and it distinguishes \"this is finished\"\n      // from \"you have the wrong URL\".\n      const auth = broker.check(session, token);\n      if (!auth.ok && auth.reason === \"session_gone\") {\n        return json(res, 410, { error: \"session_gone\" });\n      }\n\n      // `client` identifies WHICH agent is calling, so its reply can be routed\n      // back to it alone. Optional: a client that sends none gets the legacy\n      // broadcast, which is the only thing that can work for it.\n      const client = getQuery(req).get(\"client\") ?? undefined;\n\n      const ok = direction === \"inbound\"\n        ? broker.inbox(session, token, body, { client })\n        : broker.outbox(session, token, body);\n      return json(res, ok ? 200 : 401, ok ? { ok: true } : { error: \"invalid_token_or_frame\" });\n    };\n  }\n\n  const inbox = makeSessionHandler(\"inbound\");\n  const outbox = makeSessionHandler(\"outbound\");\n  const unregister = makeSessionHandler(\"unregister\");\n\n  const events: NodeHandler = async (req, res) => {\n    setCorsHeaders(res, req);\n    if (req.method === \"OPTIONS\") { res.statusCode = 204; return res.end(); }\n    if (req.method !== \"GET\") return json(res, 405, { error: \"method_not_allowed\" });\n    const session = extractSession(req, prefix);\n    if (!session) return json(res, 400, { error: \"missing_session\" });\n    const q = getQuery(req);\n    const token = q.get(\"token\") ?? \"\";\n    const direction = q.get(\"direction\") === \"outbound\" ? \"outbound\" : \"inbound\";\n\n    // The SAME `client` the agent posts under, so a reply can find its way\n    // back. An agent that subscribes with a label and posts without one (or\n    // vice versa) simply does not correlate and its replies go nowhere -- which\n    // fails closed, and is the right way round for a leak fix.\n    const sub = broker.subscribe(session, token, direction, {\n      client: getQuery(req).get(\"client\") ?? undefined,\n    });\n    if (!sub.ok) {\n      res.statusCode = 401;\n      res.setHeader(\"content-type\", \"text/event-stream\");\n      res.write(`event: error\\ndata: ${sub.reason}\\n\\n`);\n      return res.end();\n    }\n\n    res.statusCode = 200;\n    res.setHeader(\"content-type\", \"text/event-stream\");\n    res.setHeader(\"cache-control\", \"no-cache\");\n    res.setHeader(\"connection\", \"keep-alive\");\n    res.setHeader(\"x-accel-buffering\", \"no\");\n    res.write(\"retry: 2000\\n\\n\");\n    flush(res);\n\n    let heartbeat: ReturnType<typeof setInterval> | null = setInterval(() => {\n      res.write(\": keepalive\\n\\n\");\n      flush(res);\n    }, 15_000);\n    if (heartbeat && typeof (heartbeat as { unref?: () => void }).unref === \"function\") {\n      (heartbeat as { unref: () => void }).unref();\n    }\n\n    const cleanup = () => {\n      if (heartbeat) { clearInterval(heartbeat); heartbeat = null; }\n      sub.unsubscribe();\n    };\n    req.on(\"close\", cleanup);\n    req.on(\"error\", cleanup);\n\n    try {\n      for await (const frame of sub.frames) {\n        res.write(`event: mcp\\ndata: ${frame}\\n\\n`);\n        flush(res);\n      }\n    } catch {\n      /* stream ended */\n    } finally {\n      cleanup();\n      res.end();\n    }\n  };\n\n  /**\n   * Single handler — routes based on method + path. Useful for mounting\n   * via `http.createServer(relay.handler)` without an Express layer.\n   */\n  const handler: NodeHandler = async (req, res) => {\n    const pathname = getPathname(req);\n    if (!pathname.startsWith(prefix + \"/\")) {\n      return json(res, 404, { error: \"not_found\" });\n    }\n    const rest = pathname.slice(prefix.length); // \"/register\", \"/<id>/inbox\", etc.\n    if (rest === \"/register\") return register(req, res);\n    const m = /^\\/([A-Za-z0-9_-]{4,64})\\/(inbox|outbox|events|unregister)$/.exec(rest);\n    if (!m) return json(res, 404, { error: \"not_found\" });\n    const route = m[2];\n    if (route === \"inbox\") return inbox(req, res);\n    if (route === \"outbox\") return outbox(req, res);\n    if (route === \"events\") return events(req, res);\n    if (route === \"unregister\") return unregister(req, res);\n    return json(res, 404, { error: \"not_found\" });\n  };\n\n  return { broker, handler, register, inbox, outbox, events, unregister };\n}\n\nfunction extractSession(req: IncomingMessage, prefix: string): string | null {\n  const host = req.headers.host || \"x\";\n  const u = new URL(req.url || \"/\", `http://${host}`);\n  const path = u.pathname;\n  if (prefix && !path.startsWith(prefix + \"/\")) return null;\n  const rest = prefix ? path.slice(prefix.length) : path;\n  const m = /^\\/([A-Za-z0-9_-]{4,64})\\//.exec(rest);\n  return m ? m[1] : null;\n}\n\nfunction flush(res: ServerResponse) {\n  // Node doesn't expose explicit flush, but write returns false when buffered;\n  // explicit flushHeaders + write is enough for SSE in practice.\n  const r = res as { flush?: () => void };\n  r.flush?.();\n}\n\ntype Direction = \"inbound\" | \"outbound\";\n"]}

package/dist/chunk-QJYRWEXD.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/mcp/types.ts","../src/mcp/tool-host.ts","../src/mcp/server.ts"],"names":[],"mappings":";AA+CO,IAAM,mBAAA,GAAsB;AAC5B,IAAM,uBAAA,GAA0B;AAChC,IAAM,wBAAA,GAA2B;AACjC,IAAM,sBAAA,GAAyB;AAC/B,IAAM,sBAAA,GAAyB;AA2D/B,IAAM,oBAAA,GAAuB;;;ACtD7B,IAAM,eAAN,MAAuC;AAAA,EAAvC,WAAA,GAAA;AACL,IAAA,IAAA,CAAmB,KAAA,uBAAY,GAAA,EAA4B;AAgB3D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,IAAA,CAAmB,SAAA,uBAAgB,GAAA,EAAY;AAAA,EAAA;AAAA,EAE/C,YAAA,CAAa,YAA4B,OAAA,EAAkC;AACzE,IAAA,IAAA,CAAK,MAAM,GAAA,CAAI,UAAA,CAAW,MAAM,EAAE,UAAA,EAAY,SAAS,CAAA;AAEvD,IAAA,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,UAAA,CAAW,IAAI,CAAA;AACrC,IAAA,IAAA,CAAK,cAAA,EAAe;AACpB,IAAA,OAAO,MAAM;AACX,MAAA,IAAI,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,UAAA,CAAW,IAAI,CAAA,EAAG;AACtC,QAAA,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,UAAA,CAAW,IAAI,CAAA;AAClC,QAAA,IAAA,CAAK,cAAA,EAAe;AAAA,MACtB;AAAA,IACF,CAAA;AAAA,EACF;AAAA;AAAA,EAGU,mBAAmB,IAAA,EAAsB;AACjD,IAAA,OAAO,IAAA,CAAK,UAAU,GAAA,CAAI,IAAI,IAC1B,CAAA,MAAA,EAAS,IAAI,CAAA,kJAAA,CAAA,GAEb,CAAA,cAAA,EAAiB,IAAI,CAAA,CAAA;AAAA,EAC3B;AAAA,EAEA,QAAQ,IAAA,EAAqC;AAC3C,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA,IAAK,IAAA;AAAA,EACjC;AAAA,EAEA,SAAA,GAA8B;AAC5B,IAAA,OAAO,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,MAAA,EAAQ,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,UAAU,CAAA;AAAA,EAChE;AAAA,EAEA,MAAM,QAAA,CAAS,IAAA,EAAc,IAAA,GAAmB,EAAC,EAA4B;AAC3E,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAChC,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,MAAM,IAAI,KAAA,CAAM,IAAA,CAAK,kBAAA,CAAmB,IAAI,CAAC,CAAA;AAAA,IAC/C;AACA,IAAA,OAAO,IAAA,CAAK,QAAQ,IAAI,CAAA;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMU,cAAA,GAAuB;AAAA,EAAC;AACpC;;;ACtEO,IAAM,cAAA,GAAN,cAA6B,YAAA,CAAa;AAAA,EAQ/C,YAAY,OAAA,EAA2B;AACrC,IAAA,KAAA,EAAM;AARR,IAAA,IAAA,CAAQ,UAAA,uBAAiB,GAAA,EAAe;AACxC,IAAA,IAAA,CAAQ,0BAAA,GAA6B,KAAA;AAQnC,IAAA,IAAA,CAAK,OAAO,OAAA,CAAQ,IAAA;AACpB,IAAA,IAAA,CAAK,YAAA,GAAe,QAAQ,YAAA,IAAgB,EAAE,OAAO,EAAE,WAAA,EAAa,MAAK,EAAE;AAC3E,IAAA,IAAA,CAAK,eAAe,OAAA,CAAQ,YAAA;AAAA,EAC9B;AAAA,EAEA,OAAO,SAAA,EAAkC;AACvC,IAAA,IAAA,CAAK,UAAA,CAAW,IAAI,SAAS,CAAA;AAC7B,IAAA,OAAO,MAAM,IAAA,CAAK,MAAA,CAAO,SAAS,CAAA;AAAA,EACpC;AAAA,EAEA,OAAO,SAAA,EAA4B;AACjC,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,MAAA,CAAO,SAAS,CAAA,EAAG;AACrC,MAAA,SAAA,CAAU,KAAA,IAAQ;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,eAAe,IAAA,EAAoB;AACjC,IAAA,IAAI,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,IAAI,CAAA,EAAG;AAC3B,MAAA,IAAA,CAAK,+BAAA,EAAgC;AAAA,IACvC;AAAA,EACF;AAAA,EAEU,cAAA,GAAuB;AAC/B,IAAA,IAAA,CAAK,+BAAA,EAAgC;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,OAAA,CAAQ,SAAA,EAAsB,OAAA,EAAwC;AAC1E,IAAA,IAAI,EAAE,YAAY,OAAA,CAAA,EAAU;AAE5B,IAAA,MAAM,cAAA,GAAiB,EAAE,IAAA,IAAQ,OAAA,CAAA;AACjC,IAAA,IAAI,cAAA,EAAgB;AAElB,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,OAAA,GAAU,OAAA;AAChB,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,MAAA,CAAO,SAAS,SAAS,CAAA;AACnD,MAAA,SAAA,CAAU,IAAA,CAAK,EAAE,OAAA,EAAS,KAAA,EAAO,IAAI,OAAA,CAAQ,EAAA,EAAI,QAAQ,CAAA;AAAA,IAC3D,SAAS,GAAA,EAAK;AACZ,MAAA,SAAA,CAAU,IAAA,CAAK;AAAA,QACb,OAAA,EAAS,KAAA;AAAA,QACT,IAAI,OAAA,CAAQ,EAAA;AAAA,QACZ,KAAA,EAAO,IAAA,CAAK,UAAA,CAAW,GAAG;AAAA,OAC3B,CAAA;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,MAAA,CAAO,OAAA,EAAyB,SAAA,EAAoC;AAChF,IAAA,MAAM,EAAE,MAAA,EAAQ,MAAA,EAAO,GAAI,OAAA;AAC3B,IAAA,QAAQ,MAAA;AAAQ,MACd,KAAK,YAAA;AACH,QAAA,OAAO;AAAA,UACL,eAAA,EAAiB,oBAAA;AAAA,UACjB,cAAc,IAAA,CAAK,YAAA;AAAA,UACnB,YAAY,IAAA,CAAK,IAAA;AAAA,UACjB,GAAI,KAAK,YAAA,GAAe,EAAE,cAAc,IAAA,CAAK,YAAA,KAAiB;AAAC,SACjE;AAAA,MAEF,KAAK,YAAA;AACH,QAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,SAAA,EAAU,EAAE;AAAA,MAEnC,KAAK,YAAA,EAAc;AACjB,QAAA,MAAM,OAAO,MAAA,EAAQ,IAAA;AACrB,QAAA,MAAM,IAAA,GAAQ,MAAA,EAAQ,SAAA,IAAa,EAAC;AACpC,QAAA,IAAI,OAAO,SAAS,QAAA,EAAU;AAC5B,UAAA,MAAM,QAAA,CAAS,wBAAwB,4BAA4B,CAAA;AAAA,QACrE;AACA,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAChC,QAAA,IAAI,CAAC,IAAA,EAAM;AACT,UAAA,MAAM,QAAA,CAAS,wBAAA,EAA0B,IAAA,CAAK,kBAAA,CAAmB,IAAI,CAAC,CAAA;AAAA,QACxE;AACA,QAAA,MAAM,SAAS,MAAM,IAAA,CAAK,QAAQ,IAAA,EAAM,EAAE,WAAW,CAAA;AACrD,QAAA,OAAO,MAAA;AAAA,MACT;AAAA,MAEA,KAAK,MAAA;AACH,QAAA,OAAO,EAAC;AAAA,MAEV;AACE,QAAA,MAAM,QAAA,CAAS,wBAAA,EAA0B,CAAA,oBAAA,EAAuB,MAAM,CAAA,CAAE,CAAA;AAAA;AAC5E,EACF;AAAA,EAEQ,+BAAA,GAAwC;AAC9C,IAAA,IAAI,KAAK,0BAAA,EAA4B;AACrC,IAAA,IAAA,CAAK,0BAAA,GAA6B,IAAA;AAClC,IAAA,cAAA,CAAe,MAAM;AACnB,MAAA,IAAA,CAAK,0BAAA,GAA6B,KAAA;AAClC,MAAA,IAAA,CAAK,UAAU,EAAE,OAAA,EAAS,KAAA,EAAO,MAAA,EAAQ,oCAAoC,CAAA;AAAA,IAC/E,CAAC,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAA,CAAO,SAAyB,SAAA,EAA6B;AAC3D,IAAA,IAAI,SAAA,EAAW,SAAA,CAAU,IAAA,CAAK,OAAO,CAAA;AAAA,SAChC,IAAA,CAAK,UAAU,OAAO,CAAA;AAAA,EAC7B;AAAA,EAEQ,UAAU,OAAA,EAA+B;AAC/C,IAAA,KAAA,MAAW,CAAA,IAAK,IAAA,CAAK,UAAA,EAAY,CAAA,CAAE,KAAK,OAAO,CAAA;AAAA,EACjD;AAAA,EAEQ,WAAW,GAAA,EAA6D;AAC9E,IAAA,IAAI,OAAO,OAAO,GAAA,KAAQ,YAAY,MAAA,IAAU,GAAA,IAAO,aAAa,GAAA,EAAK;AACvE,MAAA,OAAO,GAAA;AAAA,IACT;AACA,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,sBAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KAC1D;AAAA,EACF;AACF;AAEO,SAAS,QAAA,CAAS,IAAA,EAAc,OAAA,EAAiB,IAAA,EAAY;AAClE,EAAA,OAAO,EAAE,IAAA,EAAM,OAAA,EAAS,GAAI,IAAA,KAAS,SAAY,EAAE,IAAA,EAAK,GAAI,EAAC,EAAG;AAClE;AAKO,SAAS,UAAA,CAAW,MAAc,UAAA,EAAkC;AACzE,EAAA,OAAO;AAAA,IACL,SAAS,CAAC,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA;AAAA,IAChC,GAAI,UAAA,KAAe,MAAA,GAAY,EAAE,iBAAA,EAAmB,UAAA,KAAe;AAAC,GACtE;AACF;AAEO,SAAS,YAAY,IAAA,EAA8B;AACxD,EAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,CAAA,EAAG,OAAA,EAAS,IAAA,EAAK;AAC5D","file":"chunk-QJYRWEXD.js","sourcesContent":["/**\n * Minimal MCP (Model Context Protocol) types — covers the subset this\n * package implements: initialize, tools/list, tools/call, plus JSON-RPC.\n *\n * Aligned with the public MCP spec but trimmed to v0.1 needs. See\n * https://spec.modelcontextprotocol.io/ for the full surface.\n */\n\nexport type JsonValue =\n  | string\n  | number\n  | boolean\n  | null\n  | { [key: string]: JsonValue }\n  | JsonValue[];\n\nexport type JsonObject = { [key: string]: JsonValue };\n\nexport type JsonRpcId = string | number | null;\n\nexport type JsonRpcRequest = {\n  jsonrpc: \"2.0\";\n  id: JsonRpcId;\n  method: string;\n  params?: JsonObject;\n};\n\nexport type JsonRpcNotification = {\n  jsonrpc: \"2.0\";\n  method: string;\n  params?: JsonObject;\n};\n\nexport type JsonRpcSuccess = {\n  jsonrpc: \"2.0\";\n  id: JsonRpcId;\n  result: JsonValue;\n};\n\nexport type JsonRpcError = {\n  jsonrpc: \"2.0\";\n  id: JsonRpcId;\n  error: { code: number; message: string; data?: JsonValue };\n};\n\nexport type JsonRpcMessage = JsonRpcRequest | JsonRpcNotification | JsonRpcSuccess | JsonRpcError;\n\nexport const JSONRPC_PARSE_ERROR = -32700;\nexport const JSONRPC_INVALID_REQUEST = -32600;\nexport const JSONRPC_METHOD_NOT_FOUND = -32601;\nexport const JSONRPC_INVALID_PARAMS = -32602;\nexport const JSONRPC_INTERNAL_ERROR = -32603;\n\nexport type ServerCapabilities = {\n  tools?: { listChanged?: boolean };\n  resources?: { listChanged?: boolean; subscribe?: boolean };\n  prompts?: { listChanged?: boolean };\n  logging?: Record<string, never>;\n  experimental?: Record<string, JsonValue>;\n};\n\nexport type ServerInfo = {\n  name: string;\n  version: string;\n  title?: string;\n};\n\nexport type InitializeResult = {\n  protocolVersion: string;\n  capabilities: ServerCapabilities;\n  serverInfo: ServerInfo;\n  instructions?: string;\n};\n\nexport type ToolInputSchema = {\n  type: \"object\";\n  properties?: Record<string, JsonValue>;\n  required?: string[];\n  additionalProperties?: boolean;\n};\n\nexport type ToolDefinition = {\n  name: string;\n  title?: string;\n  description?: string;\n  inputSchema: ToolInputSchema;\n};\n\nexport type ContentBlock =\n  | { type: \"text\"; text: string }\n  | { type: \"image\"; data: string; mimeType: string }\n  | { type: \"resource\"; resource: { uri: string; text?: string; mimeType?: string } };\n\nexport type CallToolResult = {\n  content: ContentBlock[];\n  isError?: boolean;\n  /** Structured tool output — non-spec but useful for typed bridges. */\n  structuredContent?: JsonValue;\n};\n\n/** Handler signature for a tool registered on the MicroMcpServer. */\nexport type ToolCallContext = { transport?: unknown };\nexport type ToolHandler = (args: JsonObject, context?: ToolCallContext) => Promise<CallToolResult> | CallToolResult;\n\n/** Internal record kept by the server. */\nexport type RegisteredTool = {\n  definition: ToolDefinition;\n  handler: ToolHandler;\n};\n\nexport const MCP_PROTOCOL_VERSION = \"2025-06-18\";\n","import type {\n  CallToolResult,\n  JsonObject,\n  RegisteredTool,\n  ToolDefinition,\n  ToolHandler,\n} from \"./types\";\n\n/**\n * ToolHost — the minimal surface a bridge needs to register its tools.\n *\n * Bridges (whiteboard, flow, sheets, code, charts, screens, scene, form)\n * speak only through this interface. The MCP server implements it\n * alongside its transport / JSON-RPC duties, and the standalone\n * {@link ToolRegistry} implements it for in-process agents that don't\n * need any of MCP's wire framing.\n *\n * Net effect: every bridge works equally well behind an MCP server\n * (browser ↔ external agents over SSE) or behind a plain registry\n * (in-process agent calling `host.callTool(\"sheet_set_cell\", { … })`).\n */\nexport interface ToolHost {\n  /** Register a tool. Returns a disposer that unregisters it. */\n  registerTool(definition: ToolDefinition, handler: ToolHandler): () => void;\n\n  /** Look up an already-registered tool's definition + handler, or null. */\n  getTool(name: string): RegisteredTool | null;\n\n  /** Snapshot of all currently-registered tool definitions. */\n  listTools(): ToolDefinition[];\n\n  /**\n   * Invoke a registered tool directly, bypassing any transport layer.\n   * Throws if no tool is registered under `name`.\n   *\n   * This is the single entry point in-process agents use to drive the\n   * surface — no JSON-RPC framing, no transport plumbing.\n   */\n  callTool(name: string, args?: JsonObject): Promise<CallToolResult>;\n}\n\n/**\n * Standalone in-memory ToolHost. Use this when no MCP server is needed —\n * e.g. an in-process agent that just wants to register the same bridges\n * and call them directly.\n *\n * Example:\n *\n *   const host = new ToolRegistry();\n *   registerSheetsBridge(host, { adapter });\n *   const result = await host.callTool(\"sheet_set_cell\", { address: \"B3\", value: 42 });\n *\n * Pair with a MicroMcpServer in the same app to expose the same tools\n * to remote agents over SSE while in-process agents still get\n * zero-overhead direct calls.\n */\nexport class ToolRegistry implements ToolHost {\n  protected readonly tools = new Map<string, RegisteredTool>();\n\n  /**\n   * Tools that existed and were withdrawn, kept so a call that races an unmount\n   * can say WHICH thing happened.\n   *\n   * The tool surface is dynamic by design — \"site tools always, page tools while\n   * mounted\" — so an agent deciding to call a tool while the human navigates\n   * away is normal traffic, not an edge case. Reporting that as `Unknown tool`\n   * is the least useful thing available: it reads as \"the agent is broken\" or\n   * \"you asked for something imaginary\", when the truth is \"that surface just\n   * closed\".\n   *\n   * Names only. Nothing about the handler is retained, so this cannot keep a\n   * disposed surface alive.\n   */\n  protected readonly withdrawn = new Set<string>();\n\n  registerTool(definition: ToolDefinition, handler: ToolHandler): () => void {\n    this.tools.set(definition.name, { definition, handler });\n    // A remounted surface must stop apologising for a previous unmount.\n    this.withdrawn.delete(definition.name);\n    this.onToolsChanged();\n    return () => {\n      if (this.tools.delete(definition.name)) {\n        this.withdrawn.add(definition.name);\n        this.onToolsChanged();\n      }\n    };\n  }\n\n  /** Why `name` is not callable, phrased for whoever has to act on it. */\n  protected missingToolMessage(name: string): string {\n    return this.withdrawn.has(name)\n      ? `Tool \"${name}\" was withdrawn: the surface it targets is no longer mounted. `\n        + `Call tools/list for the current surface — the site-wide tools remain available.`\n      : `Unknown tool: ${name}`;\n  }\n\n  getTool(name: string): RegisteredTool | null {\n    return this.tools.get(name) ?? null;\n  }\n\n  listTools(): ToolDefinition[] {\n    return Array.from(this.tools.values()).map((t) => t.definition);\n  }\n\n  async callTool(name: string, args: JsonObject = {}): Promise<CallToolResult> {\n    const tool = this.tools.get(name);\n    if (!tool) {\n      throw new Error(this.missingToolMessage(name));\n    }\n    return tool.handler(args);\n  }\n\n  /**\n   * Hook for subclasses (e.g. MicroMcpServer) to notify subscribers\n   * when the tool catalog changes. Default no-op.\n   */\n  protected onToolsChanged(): void {}\n}\n","import {\n  type CallToolResult,\n  type JsonObject,\n  type JsonRpcMessage,\n  type JsonRpcRequest,\n  type JsonRpcId,\n  type RegisteredTool,\n  type ServerCapabilities,\n  type ServerInfo,\n  type ToolDefinition,\n  type ToolHandler,\n  JSONRPC_INTERNAL_ERROR,\n  JSONRPC_INVALID_PARAMS,\n  JSONRPC_METHOD_NOT_FOUND,\n  MCP_PROTOCOL_VERSION,\n} from \"./types\";\nimport { ToolRegistry } from \"./tool-host\";\n\nexport type McpServerOptions = {\n  info: ServerInfo;\n  /** Defaults to { tools: { listChanged: true } } */\n  capabilities?: ServerCapabilities;\n  /** Free-text instructions surfaced to clients during initialize. */\n  instructions?: string;\n};\n\nexport type Transport = {\n  /** Called by the server when it has a message to deliver to the client. */\n  send: (message: JsonRpcMessage) => void;\n  /** Called by the server when it's torn down so the transport can clean up. */\n  close?: () => void;\n};\n\n/**\n * MicroMcpServer — protocol-level MCP server, transport-agnostic.\n *\n * Use it like:\n *\n *   const server = new MicroMcpServer({ info: { name: \"session\", version: \"0.1\" } });\n *   server.registerTool({ name: \"...\", inputSchema: { type: \"object\" } }, async (args) => ({...}));\n *   const transport = new InProcessTransport();\n *   server.attach(transport);\n *   transport.deliver({ ... }); // client → server frames\n *\n * The same server can serve multiple transports (e.g. an in-process agent\n * AND a relayed external client) by attaching each one.\n */\nexport class MicroMcpServer extends ToolRegistry {\n  private transports = new Set<Transport>();\n  private notifyListChangedScheduled = false;\n\n  readonly info: ServerInfo;\n  readonly capabilities: ServerCapabilities;\n  readonly instructions?: string;\n\n  constructor(options: McpServerOptions) {\n    super();\n    this.info = options.info;\n    this.capabilities = options.capabilities ?? { tools: { listChanged: true } };\n    this.instructions = options.instructions;\n  }\n\n  attach(transport: Transport): () => void {\n    this.transports.add(transport);\n    return () => this.detach(transport);\n  }\n\n  detach(transport: Transport): void {\n    if (this.transports.delete(transport)) {\n      transport.close?.();\n    }\n  }\n\n  unregisterTool(name: string): void {\n    if (this.tools.delete(name)) {\n      this.scheduleListChangedNotification();\n    }\n  }\n\n  protected onToolsChanged(): void {\n    this.scheduleListChangedNotification();\n  }\n\n  /**\n   * Receive a JSON-RPC frame from a client (called by the transport).\n   * The transport is responsible for sending the response back.\n   */\n  async receive(transport: Transport, message: JsonRpcMessage): Promise<void> {\n    if (!(\"method\" in message)) return; // It's a response, not a request — ignore.\n\n    const isNotification = !(\"id\" in message);\n    if (isNotification) {\n      // Notifications are fire-and-forget. We ignore unknown methods.\n      return;\n    }\n\n    const request = message as JsonRpcRequest;\n    try {\n      const result = await this.handle(request, transport);\n      transport.send({ jsonrpc: \"2.0\", id: request.id, result });\n    } catch (err) {\n      transport.send({\n        jsonrpc: \"2.0\",\n        id: request.id,\n        error: this.toRpcError(err),\n      });\n    }\n  }\n\n  private async handle(request: JsonRpcRequest, transport: Transport): Promise<any> {\n    const { method, params } = request;\n    switch (method) {\n      case \"initialize\":\n        return {\n          protocolVersion: MCP_PROTOCOL_VERSION,\n          capabilities: this.capabilities,\n          serverInfo: this.info,\n          ...(this.instructions ? { instructions: this.instructions } : {}),\n        };\n\n      case \"tools/list\":\n        return { tools: this.listTools() };\n\n      case \"tools/call\": {\n        const name = params?.name;\n        const args = (params?.arguments ?? {}) as JsonObject;\n        if (typeof name !== \"string\") {\n          throw rpcError(JSONRPC_INVALID_PARAMS, \"tools/call requires `name`\");\n        }\n        const tool = this.tools.get(name);\n        if (!tool) {\n          throw rpcError(JSONRPC_METHOD_NOT_FOUND, this.missingToolMessage(name));\n        }\n        const result = await tool.handler(args, { transport });\n        return result satisfies CallToolResult;\n      }\n\n      case \"ping\":\n        return {};\n\n      default:\n        throw rpcError(JSONRPC_METHOD_NOT_FOUND, `Unsupported method: ${method}`);\n    }\n  }\n\n  private scheduleListChangedNotification(): void {\n    if (this.notifyListChangedScheduled) return;\n    this.notifyListChangedScheduled = true;\n    queueMicrotask(() => {\n      this.notifyListChangedScheduled = false;\n      this.broadcast({ jsonrpc: \"2.0\", method: \"notifications/tools/list_changed\" });\n    });\n  }\n\n  /** Send an application notification to every client, or one attached transport. */\n  notify(message: JsonRpcMessage, transport?: Transport): void {\n    if (transport) transport.send(message);\n    else this.broadcast(message);\n  }\n\n  private broadcast(message: JsonRpcMessage): void {\n    for (const t of this.transports) t.send(message);\n  }\n\n  private toRpcError(err: unknown): { code: number; message: string; data?: any } {\n    if (err && typeof err === \"object\" && \"code\" in err && \"message\" in err) {\n      return err as any;\n    }\n    return {\n      code: JSONRPC_INTERNAL_ERROR,\n      message: err instanceof Error ? err.message : String(err),\n    };\n  }\n}\n\nexport function rpcError(code: number, message: string, data?: any) {\n  return { code, message, ...(data !== undefined ? { data } : {}) };\n}\n\n/**\n * Helper to build a CallToolResult from a string or structured value.\n */\nexport function textResult(text: string, structured?: any): CallToolResult {\n  return {\n    content: [{ type: \"text\", text }],\n    ...(structured !== undefined ? { structuredContent: structured } : {}),\n  };\n}\n\nexport function errorResult(text: string): CallToolResult {\n  return { content: [{ type: \"text\", text }], isError: true };\n}\n\n// Internal helper so the JsonRpcId import isn't dropped by tsup\ntype _KeepIdImport = JsonRpcId;\n"]}