@polyxd/mcp 0.4.0

package/dist/check.js

@@ -0,0 +1,214 @@
+/**
+ * Validation and static verification, reported for a model that has to fix what it wrote: each
+ * issue carries its JSON Pointer, the component it is in, and a hint saying what to change.
+ */
+import { validateDocument, directionRules } from "@polyxd/spec/browser";
+import { staticAudit } from "@polyxd/verifier/static";
+import { componentDefinitions, componentNamed, exampleDirections } from "./spec.js";
+/** The document with host data merged in: data given separately wins over the document's own. */
+export function withData(document, data) {
+    if (data === undefined || !document || typeof document !== "object" || Array.isArray(document))
+        return document;
+    return { ...document, data };
+}
+function valueAt(doc, pointer) {
+    let cur = doc;
+    for (const part of pointer.replace(/^\//, "").split("/").filter(Boolean)) {
+        if (cur === null || typeof cur !== "object")
+            return undefined;
+        cur = cur[part.replace(/~1/g, "/").replace(/~0/g, "~")];
+    }
+    return cur;
+}
+function componentAt(doc, pointer) {
+    const m = /^\/components\/(\d+)/.exec(pointer);
+    if (!m)
+        return undefined;
+    const c = valueAt(doc, `/components/${m[1]}`);
+    if (!c || typeof c !== "object")
+        return undefined;
+    // No keys set to undefined: the reports are tool results, checked against the tools' output schemas.
+    return { ...(typeof c.id === "string" ? { id: c.id } : {}), ...(typeof c.component === "string" ? { type: c.component } : {}) };
+}
+function distance(a, b) {
+    const d = Array.from({ length: a.length + 1 }, (_, i) => [i, ...Array(b.length).fill(0)]);
+    for (let j = 1; j <= b.length; j++)
+        d[0][j] = j;
+    for (let i = 1; i <= a.length; i++) {
+        for (let j = 1; j <= b.length; j++) {
+            d[i][j] = Math.min(d[i - 1][j] + 1, d[i][j - 1] + 1, d[i - 1][j - 1] + (a[i - 1] === b[j - 1] ? 0 : 1));
+            // A swapped pair of letters is one typo, not two.
+            if (i > 1 && j > 1 && a[i - 1] === b[j - 2] && a[i - 2] === b[j - 1])
+                d[i][j] = Math.min(d[i][j], d[i - 2][j - 2] + 1);
+        }
+    }
+    return d[a.length][b.length];
+}
+function closest(word, options) {
+    const lower = word.toLowerCase();
+    const scored = options.map((o) => ({ o, d: o.toLowerCase().includes(lower) || lower.includes(o.toLowerCase()) ? 1 : distance(lower, o.toLowerCase()) }));
+    scored.sort((a, b) => a.d - b.d);
+    return scored[0] && scored[0].d <= Math.max(2, Math.floor(word.length / 3)) ? scored[0].o : undefined;
+}
+const generated = () => componentDefinitions().filter((c) => !c.shell).map((c) => c.name);
+const propsOf = (type) => {
+    const def = type ? componentNamed(type) : undefined;
+    return def ? Object.keys(def.props).map((p) => (def.required.includes(p) ? `${p}*` : p)).join(", ") : undefined;
+};
+/** A hint for each kind of issue the validator and the verifier report. */
+export function hintFor(doc, issue) {
+    const { message, at } = issue;
+    const type = componentAt(doc, at)?.type;
+    let m = null;
+    if (issue.code === "data:missing-path")
+        return "Add the value to data at this pointer, or point at a field the data has. A binding that reads nothing shows a blank.";
+    if (/unknown or missing component type/.test(message) || (m = /unknown component "(.+)"/.exec(message))) {
+        const given = valueAt(doc, at)?.component ?? m?.[1];
+        const guess = typeof given === "string" ? closest(given, generated()) : undefined;
+        return `${guess ? `Did you mean "${guess}"? ` : ""}Set "component" to one of: ${generated().join(", ")}.`;
+    }
+    if ((m = /unknown property "(.+)"/.exec(message))) {
+        const props = propsOf(type);
+        return `Remove "${m[1]}".${props ? ` ${type} takes: ${props} (* = required).` : ""}`;
+    }
+    if ((m = /must have required property '(.+)'/.exec(message))) {
+        const props = propsOf(type);
+        return `Add "${m[1]}".${props ? ` ${type} takes: ${props} (* = required).` : ""} polyxd_components gives the full definition.`;
+    }
+    if (/must be equal to one of the allowed values/.test(message))
+        return "Use one of the values the component's definition lists (polyxd_components).";
+    if (/must be (string|number|boolean|object|array|integer)/.test(message))
+        return "Check the prop's type in the component's definition (polyxd_components); a bound value is {\"path\": \"/pointer\"}.";
+    if (/duplicate id/.test(message))
+        return "Give every component its own id.";
+    if (/^root .* is not a component id/.test(message))
+        return "Set \"root\" to the id of the outermost component.";
+    if (/references unknown component/.test(message))
+        return "Add a component with that id to \"components\", or remove the reference. Children are id strings, never nested objects.";
+    if (/references itself|^cycle:/.test(message))
+        return "A component cannot contain itself; break the loop.";
+    if (/must reference/.test(message))
+        return "Point this prop at a component of the kind it names.";
+    if (/already has parent/.test(message))
+        return "A component can appear in one place only. Make a copy with a new id for the second place.";
+    if (/is not a renderer action/.test(message))
+        return "Names starting with \"ui.\" are reserved for the renderer. Name your action \"domain.verb\", like \"task.save\".";
+    if (/placeholders are only for search/.test(message))
+        return "Remove the placeholder; put guidance in \"help\" instead.";
+    if (/needs alt text/.test(message))
+        return "Add \"alt\", or set \"decorative\": true if the image carries no information.";
+    if (/not reachable from root/.test(message))
+        return "Add its id to a parent's children, or remove the component.";
+    if (/primary actions? visible at once/.test(message))
+        return "Keep one primary action per view: set \"emphasis\": \"secondary\" on the others, or move them to another step.";
+    if (/must point at a list/.test(message))
+        return "Point at an array in data.";
+    if (/relative path .* used outside a repeated item/.test(message))
+        return "Start the path with \"/\" to read from the top of data. Relative paths are only for inside a Collection, Table, Chart or Comparison item.";
+    if (/inputs? per view|more than \d+ inputs/.test(message))
+        return "Split the inputs across Steps, at most 6 per view.";
+    return undefined;
+}
+/** Reads an absolute JSON Pointer ("/a/0/b") in data; anything else is undefined. */
+function readPointer(data, pointer) {
+    if (!pointer.startsWith("/"))
+        return undefined;
+    let at = data;
+    for (const raw of pointer.slice(1).split("/")) {
+        const key = raw.replace(/~1/g, "/").replace(/~0/g, "~");
+        if (at == null || typeof at !== "object")
+            return undefined;
+        at = at[key];
+    }
+    return at;
+}
+/**
+ * A "percent" format takes a fraction (0.12 is 12%). Models often write the percentage itself, which
+ * shows as "1,200%". Warn wherever a percent-formatted value, literal or bound by an absolute path, is
+ * bigger than 1.5: a real 150%+ is rare, a mistaken 12 is common.
+ */
+function percentWarnings(doc) {
+    const out = [];
+    const components = Array.isArray(doc?.components) ? doc.components : [];
+    const visit = (node, pointer, component) => {
+        if (!node || typeof node !== "object")
+            return;
+        if (node.format?.type === "percent" && "value" in node) {
+            const v = node.value;
+            const n = typeof v === "number" ? v : v && typeof v.path === "string" ? readPointer(doc.data, v.path) : undefined;
+            if (typeof n === "number" && Math.abs(n) > 1.5) {
+                const shown = new Intl.NumberFormat("en-GB", { style: "percent", maximumFractionDigits: 1 }).format(n);
+                out.push({
+                    severity: "warning",
+                    pointer: `${pointer}/value`,
+                    ...(component ? { component } : {}),
+                    message: `a "percent" format shows ${n} as "${shown}"`,
+                    hint: `"percent" takes a fraction. For ${n}%, store ${Number((n / 100).toFixed(6))}${typeof v === "number" ? "" : ` at ${v.path}`}.`,
+                });
+            }
+        }
+        for (const [k, child] of Object.entries(node))
+            if (child && typeof child === "object" && k !== "format")
+                visit(child, `${pointer}/${k}`, component);
+    };
+    components.forEach((c, i) => {
+        const component = { ...(typeof c?.id === "string" ? { id: c.id } : {}), ...(typeof c?.component === "string" ? { type: c.component } : {}) };
+        visit(c, `/components/${i}`, Object.keys(component).length ? component : undefined);
+    });
+    return out;
+}
+export function validate(document, data) {
+    const doc = withData(document, data);
+    const result = validateDocument(doc);
+    const issues = result.issues.map((i) => {
+        const component = componentAt(doc, i.at);
+        const hint = hintFor(doc, i);
+        return { severity: i.severity, pointer: i.at, ...(component ? { component } : {}), message: i.message, ...(hint ? { hint } : {}) };
+    });
+    issues.push(...percentWarnings(doc));
+    const errors = issues.filter((i) => i.severity === "error").length;
+    return { valid: errors === 0, errors, warnings: issues.length - errors, issues };
+}
+const where = (i) => `${i.pointer}${i.component?.id || i.component?.type ? ` (${[i.component.type, i.component.id && `"${i.component.id}"`].filter(Boolean).join(" ")})` : ""}`;
+export function formatValidation(r) {
+    const head = r.valid
+        ? `Valid${r.warnings ? `, with ${r.warnings} warning${r.warnings === 1 ? "" : "s"}` : ""}.`
+        : `Not valid: ${r.errors} error${r.errors === 1 ? "" : "s"}${r.warnings ? ` and ${r.warnings} warning${r.warnings === 1 ? "" : "s"}` : ""}. Fix the errors and validate again.`;
+    const lines = r.issues.map((i) => `- ${i.severity} at ${where(i)}: ${i.message}${i.hint ? `\n  Fix: ${i.hint}` : ""}`);
+    return [head, ...lines].join("\n");
+}
+/** A Design Direction by example name, or the object itself. */
+export function resolveDirection(direction) {
+    if (typeof direction !== "string")
+        return direction;
+    const found = exampleDirections().find((d) => d.name === direction);
+    if (!found)
+        throw new Error(`No example Design Direction named "${direction}". Known: ${exampleDirections().map((d) => d.name).join(", ")}. Or pass the direction object itself.`);
+    return JSON.parse(found.json);
+}
+export function verify(document, opts = {}) {
+    const doc = withData(document, opts.data);
+    const direction = opts.direction === undefined ? undefined : resolveDirection(opts.direction);
+    const rules = direction ? directionRules(direction) : undefined;
+    const findings = staticAudit(doc, { rules, emphasisBudget: direction?.profile?.emphasisBudget, registry: opts.registry }).map((f) => {
+        // Findings from the validator carry "<pointer>: <message>"; the same hints apply.
+        const m = /^(\/[^:]*|\/): (.*)$/.exec(f.message);
+        const hint = m ? hintFor(doc, { at: m[1], message: m[2], code: f.check }) : undefined;
+        // A direction passed as an object is not schema-checked, so its rules' severities are taken as error or warning.
+        const severity = f.severity === "error" ? "error" : "warning";
+        return { severity, check: f.check, message: f.message, ...(hint ? { hint } : {}) };
+    });
+    const errors = findings.filter((f) => f.severity === "error").length;
+    const name = typeof direction?.name === "string" ? direction.name : undefined;
+    return { errors, warnings: findings.length - errors, findings, ...(name ? { direction: name } : {}), rules: rules?.length ?? 0 };
+}
+export function formatVerify(r) {
+    const scope = r.direction ? ` against Design Direction "${r.direction}" (${r.rules} rules)` : "";
+    const head = r.errors
+        ? `Fails${scope}: ${r.errors} error${r.errors === 1 ? "" : "s"}, ${r.warnings} warning${r.warnings === 1 ? "" : "s"}.`
+        : `Passes${scope}: no errors${r.warnings ? `, ${r.warnings} warning${r.warnings === 1 ? "" : "s"}` : ""}.`;
+    const lines = r.findings.map((f) => `- ${f.severity} [${f.check}] ${f.message}${f.hint ? `\n  Fix: ${f.hint}` : ""}`);
+    const note = "These are the document checks. Rendered checks (accessibility, layout, agent tasks) need a browser: save the document, run `npx playwright install chromium` once, then `npx -p @polyxd/verifier -p playwright polyxd-verify <file>`.";
+    return [head, ...lines, note].join("\n");
+}
+//# sourceMappingURL=check.js.map

package/dist/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAoBpF,iGAAiG;AACjG,MAAM,UAAU,QAAQ,CAAC,QAAiB,EAAE,IAAc;IACxD,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChH,OAAO,EAAE,GAAI,QAAmB,EAAE,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,OAAO,CAAC,GAAY,EAAE,OAAe;IAC5C,IAAI,GAAG,GAAQ,GAAG,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACzE,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC9D,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,GAAY,EAAE,OAAe;IAChD,MAAM,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAQ,CAAC;IACrD,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClD,qGAAqG;IACrG,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAClI,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxG,kDAAkD;YAClD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,OAAiB;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACzJ,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACxG,CAAC;AAED,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC1F,MAAM,OAAO,GAAG,CAAC,IAAa,EAAE,EAAE;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAClH,CAAC,CAAC;AAEF,2EAA2E;AAC3E,MAAM,UAAU,OAAO,CAAC,GAAY,EAAE,KAAqD;IACzF,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC;IACxC,IAAI,CAAC,GAA2B,IAAI,CAAC;IACrC,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB;QAAE,OAAO,sHAAsH,CAAC;IACtK,IAAI,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACxG,MAAM,KAAK,GAAI,OAAO,CAAC,GAAG,EAAE,EAAE,CAAS,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,iBAAiB,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,8BAA8B,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAC5G,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,WAAW,KAAK,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,WAAW,KAAK,kBAAkB,CAAC,CAAC,CAAC,EAAE,+CAA+C,CAAC;IACjI,CAAC;IACD,IAAI,4CAA4C,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,6EAA6E,CAAC;IACrJ,IAAI,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,qHAAqH,CAAC;IACvM,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,kCAAkC,CAAC;IAC5E,IAAI,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,oDAAoD,CAAC;IAChH,IAAI,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,yHAAyH,CAAC;IACnL,IAAI,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,oDAAoD,CAAC;IAC3G,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,sDAAsD,CAAC;IAClG,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,2FAA2F,CAAC;IAC3I,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,kHAAkH,CAAC;IACxK,IAAI,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,2DAA2D,CAAC;IACzH,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,+EAA+E,CAAC;IAC3H,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,6DAA6D,CAAC;IAClH,IAAI,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,gHAAgH,CAAC;IAC9K,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,4BAA4B,CAAC;IAC9E,IAAI,+CAA+C,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,2IAA2I,CAAC;IACtN,IAAI,uCAAuC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,oDAAoD,CAAC;IACvH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,qFAAqF;AACrF,SAAS,WAAW,CAAC,IAAa,EAAE,OAAe;IACjD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,EAAE,GAAQ,IAAI,CAAC;IACnB,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACxD,IAAI,EAAE,IAAI,IAAI,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC3D,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,GAAQ;IAC/B,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,MAAM,UAAU,GAAc,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,KAAK,GAAG,CAAC,IAAS,EAAE,OAAe,EAAE,SAAqC,EAAE,EAAE;QAClF,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC9C,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACvD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;YACrB,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClH,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;gBAC/C,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACvG,GAAG,CAAC,IAAI,CAAC;oBACP,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,GAAG,OAAO,QAAQ;oBAC3B,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnC,OAAO,EAAE,4BAA4B,CAAC,QAAQ,KAAK,GAAG;oBACtD,IAAI,EAAE,mCAAmC,CAAC,YAAY,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,GAAG;iBACrI,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,QAAQ;gBAAE,KAAK,CAAC,KAAK,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACtJ,CAAC,CAAC;IACF,UAAU,CAAC,OAAO,CAAC,CAAC,CAAM,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,SAAS,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7I,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,QAAiB,EAAE,IAAc;IACxD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAiB,EAAE;QACpD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC7B,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrI,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IACnE,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC;AACnF,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,CAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAE/L,MAAM,UAAU,gBAAgB,CAAC,CAAmB;IAClD,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK;QAClB,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,QAAQ,WAAW,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;QAC3F,CAAC,CAAC,cAAc,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,WAAW,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,sCAAsC,CAAC;IAClL,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,QAAQ,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvH,OAAO,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAUD,gEAAgE;AAChE,MAAM,UAAU,gBAAgB,CAAC,SAAkB;IACjD,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACpD,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACpE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,SAAS,aAAa,iBAAiB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACnL,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,QAAiB,EAAE,IAAI,GAAgE,EAAE;IAC9G,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9F,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAe,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACzI,kFAAkF;QAClF,MAAM,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,iHAAiH;QACjH,MAAM,QAAQ,GAAwB,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IACrE,MAAM,IAAI,GAAG,OAAO,SAAS,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;AACnI,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAe;IAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACjG,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM;QACnB,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,WAAW,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG;QACtH,CAAC,CAAC,SAAS,KAAK,cAAc,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,WAAW,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;IAC7G,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtH,MAAM,IAAI,GAAG,uOAAuO,CAAC;IACrP,OAAO,CAAC,IAAI,EAAE,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,34 @@
+import { type ServerOptions } from "./server.ts";
+export { VERSION } from "./server.ts";
+/** Everything logged about a request. */
+export interface RequestLog {
+    method: string;
+    path: string;
+    status: number;
+    ms: number;
+}
+export interface HttpHandlerOptions extends ServerOptions {
+    /** The largest request body accepted, in bytes. Larger is answered 413. Default 1 MiB. */
+    maxBodyBytes?: number;
+    /** How long a request may take before it is answered 504. Default 15 seconds. */
+    timeoutMs?: number;
+    /** Decides whether a request may go ahead; false answers 429. Called for every request except CORS preflights. */
+    rateLimit?: (request: Request) => boolean | Promise<boolean>;
+    /** Where the one line per request goes. Default: JSON on the console. */
+    log?: (entry: RequestLog) => void;
+}
+export declare const DEFAULT_MAX_BODY_BYTES: number;
+export declare const DEFAULT_TIMEOUT_MS = 15000;
+/** The Streamable HTTP endpoint, with its safeguards. Serve it at one path (`/mcp`). */
+export declare function createHttpHandler(options: HttpHandlerOptions): (request: Request) => Promise<Response>;
+/**
+ * A fixed-window rate limit held in memory: at most `limit` requests per `windowMs` for each key
+ * (by default the client's IP from `CF-Connecting-IP`). Best effort: each process, or each Worker
+ * isolate, counts on its own, so a client spread over several isolates gets more. Use it where the
+ * platform has nothing better; apps/mcp uses Cloudflare's rate limiting binding and falls back to this.
+ */
+export declare function rateLimiter(options: {
+    limit: number;
+    windowMs: number;
+    key?: (request: Request) => string;
+}): (request: Request) => boolean;

package/dist/http.js

@@ -0,0 +1,198 @@
+/**
+ * The Polyxd MCP server over Streamable HTTP, as a web-standard `(Request) => Promise<Response>`
+ * handler: what `https://mcp.polyxd.com/mcp` runs (apps/mcp), and what any runtime with `fetch`
+ * types (Workers, Deno, Bun) can serve.
+ *
+ * The transport is the SDK's own `createMcpHandler`. It is stateless: every request gets a fresh
+ * server from `createServer`, nothing is kept between requests, and there are no sessions. The
+ * tools are pure functions of their arguments, so there is nothing a session would hold. For
+ * 2025-era clients (`initialize`, then JSON-RPC over POST) GET and DELETE answer 405, which is what
+ * the spec asks of a server that offers no standalone stream and no sessions. 2026-07-28 clients,
+ * which put the protocol version in every request, are served too.
+ *
+ * Around it sit the safeguards a public server without authentication needs:
+ *
+ * - a body limit, checked on Content-Length before anything is read and again by the SDK as it reads;
+ * - a per-request timeout, answered with a JSON-RPC error rather than a hung connection;
+ * - an optional rate limit, which the caller keys (apps/mcp keys it on the client's IP);
+ * - CORS for browser-based clients such as the MCP Inspector. Every origin may call: the server
+ *   holds no credentials and no one's data, so there is nothing for another origin to reach that
+ *   it could not fetch itself. (The spec's Origin check exists to stop DNS rebinding against
+ *   servers on a private network or localhost; this one is public by design.)
+ * - one log line per request: method, path, status and duration. Nothing else, ever: not a body,
+ *   a header, a query string, an IP address or an error message (which can quote the body).
+ */
+import { createMcpHandler } from "@modelcontextprotocol/server";
+import { createServer } from "./server.js";
+export { VERSION } from "./server.js";
+export const DEFAULT_MAX_BODY_BYTES = 1024 * 1024;
+export const DEFAULT_TIMEOUT_MS = 15_000;
+const ALLOW_METHODS = "GET, POST, DELETE, OPTIONS";
+/** Asked for when a preflight names no headers; otherwise the preflight's own list is allowed (it includes 2026's Mcp-Param-* headers). */
+const ALLOW_HEADERS = "Content-Type, Accept, Authorization, Last-Event-ID, Mcp-Session-Id, Mcp-Protocol-Version, Mcp-Method, Mcp-Name";
+const EXPOSE_HEADERS = "Mcp-Session-Id, Mcp-Protocol-Version";
+/** A JSON-RPC error with no request id, for failures before the request reached the server. */
+function rpcError(status, code, message, headers = {}) {
+    return new Response(JSON.stringify({ jsonrpc: "2.0", id: null, error: { code, message } }), {
+        status,
+        headers: { "content-type": "application/json", ...headers },
+    });
+}
+/** The JSON-RPC messages in a request body (one, or a batch), or none when it is not JSON. Read from a clone, within the body limit. */
+async function requestMessages(request) {
+    try {
+        const parsed = JSON.parse(await request.text());
+        return Array.isArray(parsed) ? parsed : [parsed];
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * The response body, cut off at the deadline. An SSE answer still owed a result gets a JSON-RPC
+ * error for each request instead (`lateEvents`), so the client hears why rather than seeing the
+ * stream stop; any other body just errors.
+ */
+function holdToDeadline(body, expired, on, lateEvents) {
+    const reader = body.getReader();
+    return new ReadableStream({
+        async pull(controller) {
+            const next = await Promise.race([reader.read(), expired]);
+            if (next === "expired") {
+                on.expire();
+                void reader.cancel().catch(() => { });
+                if (lateEvents) {
+                    controller.enqueue(new TextEncoder().encode(lateEvents));
+                    controller.close();
+                }
+                else
+                    controller.error(new DOMException("The request took too long", "TimeoutError"));
+            }
+            else if (next.done) {
+                on.end();
+                controller.close();
+            }
+            else
+                controller.enqueue(next.value);
+        },
+        cancel(reason) {
+            on.end();
+            return reader.cancel(reason);
+        },
+    });
+}
+function withCors(response) {
+    const headers = new Headers(response.headers);
+    headers.set("access-control-allow-origin", "*");
+    headers.set("access-control-expose-headers", EXPOSE_HEADERS);
+    if (response.status === 405 && !headers.has("allow"))
+        headers.set("allow", "POST, OPTIONS");
+    return new Response(response.body, { status: response.status, statusText: response.statusText, headers });
+}
+function preflight(request) {
+    return new Response(null, {
+        status: 204,
+        headers: {
+            "access-control-allow-origin": "*",
+            "access-control-allow-methods": ALLOW_METHODS,
+            "access-control-allow-headers": request.headers.get("access-control-request-headers") || ALLOW_HEADERS,
+            "access-control-max-age": "86400",
+            vary: "Access-Control-Request-Headers",
+        },
+    });
+}
+/** The Streamable HTTP endpoint, with its safeguards. Serve it at one path (`/mcp`). */
+export function createHttpHandler(options) {
+    const maxBodyBytes = options.maxBodyBytes ?? DEFAULT_MAX_BODY_BYTES;
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const log = options.log ?? ((entry) => console.log(JSON.stringify(entry)));
+    const mcp = createMcpHandler(() => createServer(options), {
+        legacy: "stateless",
+        maxRequestBodySize: maxBodyBytes,
+        // The tools never change, so a client listening for list changes hears nothing; keep few such streams open.
+        maxSubscriptions: 64,
+        // Errors are not logged: their messages can quote what the client sent, and the request's own
+        // line already carries the status that says it failed.
+        onerror: () => { },
+    });
+    async function serve(request) {
+        if (request.method === "OPTIONS")
+            return preflight(request);
+        if (options.rateLimit && !(await options.rateLimit(request))) {
+            return rpcError(429, -32000, "Too many requests from this address. Wait a minute and try again.", { "retry-after": "60" });
+        }
+        const length = Number(request.headers.get("content-length") ?? 0);
+        if (length > maxBodyBytes)
+            return rpcError(413, -32600, `The request body is larger than ${maxBodyBytes} bytes.`, { connection: "close" });
+        // The deadline covers the whole answer, not just its headers: a 2025-era answer is an SSE
+        // stream whose headers go out before the result is ready.
+        const timeout = new AbortController();
+        const signal = AbortSignal.any([request.signal, timeout.signal]);
+        const peek = request.method === "POST" ? request.clone() : undefined;
+        let timer;
+        const expired = new Promise((resolve) => (timer = setTimeout(() => resolve("expired"), timeoutMs)));
+        // A body nobody reads never clears its deadline; in Node, don't let that keep the process up.
+        timer?.unref?.();
+        const expire = () => timeout.abort(new DOMException("The request took too long", "TimeoutError"));
+        const late = `The server did not answer within ${timeoutMs} ms.`;
+        try {
+            const response = await Promise.race([mcp.fetch(new Request(request, { signal })), expired]);
+            if (response === "expired") {
+                expire();
+                void peek?.body?.cancel();
+                return rpcError(504, -32603, late);
+            }
+            const sse = (response.headers.get("content-type") ?? "").includes("text/event-stream");
+            // Only a stream needs the request's ids, and the SDK only streams for a body it accepted, so this read stays within the limit.
+            if (!sse)
+                void peek?.body?.cancel();
+            const messages = sse && peek ? await requestMessages(peek) : [];
+            // A subscriptions/listen stream is meant to stay open.
+            if (!response.body || (sse && messages.some((m) => m?.method === "subscriptions/listen"))) {
+                clearTimeout(timer);
+                return response;
+            }
+            const ids = messages.filter((m) => m && m.id !== undefined && typeof m.method === "string").map((m) => m.id);
+            const lateEvents = sse ? ids.map((id) => `\n\nevent: message\ndata: ${JSON.stringify({ jsonrpc: "2.0", id, error: { code: -32603, message: late } })}\n\n`).join("") : "";
+            const body = holdToDeadline(response.body, expired, { end: () => clearTimeout(timer), expire }, lateEvents);
+            return new Response(body, { status: response.status, statusText: response.statusText, headers: response.headers });
+        }
+        catch {
+            clearTimeout(timer);
+            return rpcError(500, -32603, "The server failed to handle the request.");
+        }
+    }
+    return async (request) => {
+        const started = Date.now();
+        const response = withCors(await serve(request));
+        log({ method: request.method, path: new URL(request.url).pathname.slice(0, 200), status: response.status, ms: Date.now() - started });
+        return response;
+    };
+}
+/**
+ * A fixed-window rate limit held in memory: at most `limit` requests per `windowMs` for each key
+ * (by default the client's IP from `CF-Connecting-IP`). Best effort: each process, or each Worker
+ * isolate, counts on its own, so a client spread over several isolates gets more. Use it where the
+ * platform has nothing better; apps/mcp uses Cloudflare's rate limiting binding and falls back to this.
+ */
+export function rateLimiter(options) {
+    const key = options.key ?? ((request) => request.headers.get("cf-connecting-ip") ?? "unknown");
+    const windows = new Map();
+    return (request) => {
+        const now = Date.now();
+        // Forget finished windows now and then, so the map cannot grow without bound.
+        if (windows.size > 10_000)
+            for (const [k, w] of windows)
+                if (now - w.start >= options.windowMs)
+                    windows.delete(k);
+        const k = key(request);
+        const w = windows.get(k);
+        if (!w || now - w.start >= options.windowMs) {
+            windows.set(k, { start: now, count: 1 });
+            return true;
+        }
+        w.count++;
+        return w.count <= options.limit;
+    };
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAsB,MAAM,aAAa,CAAC;AAE/D,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAqBtC,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,IAAI,CAAC;AAClD,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAEzC,MAAM,aAAa,GAAG,4BAA4B,CAAC;AACnD,2IAA2I;AAC3I,MAAM,aAAa,GAAG,gHAAgH,CAAC;AACvI,MAAM,cAAc,GAAG,sCAAsC,CAAC;AAE9D,+FAA+F;AAC/F,SAAS,QAAQ,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe,EAAE,OAAO,GAA2B,EAAE;IACnG,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE;QAC1F,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE;KAC5D,CAAC,CAAC;AACL,CAAC;AAED,wIAAwI;AACxI,KAAK,UAAU,eAAe,CAAC,OAAgB;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,IAAgC,EAAE,OAA2B,EAAE,EAA2C,EAAE,UAAkB;IACpJ,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,OAAO,IAAI,cAAc,CAAa;QACpC,KAAK,CAAC,IAAI,CAAC,UAAU;YACnB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,EAAE,CAAC,MAAM,EAAE,CAAC;gBACZ,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACrC,IAAI,UAAU,EAAE,CAAC;oBACf,UAAU,CAAC,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;oBACzD,UAAU,CAAC,KAAK,EAAE,CAAC;gBACrB,CAAC;;oBAAM,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,2BAA2B,EAAE,cAAc,CAAC,CAAC,CAAC;YACzF,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACrB,EAAE,CAAC,GAAG,EAAE,CAAC;gBACT,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;;gBAAM,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,CAAC,MAAM;YACX,EAAE,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,QAAkB;IAClC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,cAAc,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC5F,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5G,CAAC;AAED,SAAS,SAAS,CAAC,OAAgB;IACjC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,6BAA6B,EAAE,GAAG;YAClC,8BAA8B,EAAE,aAAa;YAC7C,8BAA8B,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,IAAI,aAAa;YACtG,wBAAwB,EAAE,OAAO;YACjC,IAAI,EAAE,gCAAgC;SACvC;KACF,CAAC,CAAC;AACL,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACpE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,KAAiB,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE;QACxD,MAAM,EAAE,WAAW;QACnB,kBAAkB,EAAE,YAAY;QAChC,4GAA4G;QAC5G,gBAAgB,EAAE,EAAE;QACpB,8FAA8F;QAC9F,uDAAuD;QACvD,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;KAClB,CAAC,CAAC;IAEH,KAAK,UAAU,KAAK,CAAC,OAAgB;QACnC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC7D,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,mEAAmE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7H,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,IAAI,MAAM,GAAG,YAAY;YAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,mCAAmC,YAAY,SAAS,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAE3I,0FAA0F;QAC1F,0DAA0D;QAC1D,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,IAAI,KAAgD,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QAC/G,8FAA8F;QAC7F,KAA4C,EAAE,KAAK,EAAE,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,2BAA2B,EAAE,cAAc,CAAC,CAAC,CAAC;QAClG,MAAM,IAAI,GAAG,oCAAoC,SAAS,MAAM,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5F,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,EAAE,CAAC;gBACT,KAAK,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC1B,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;YACD,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YACvF,+HAA+H;YAC/H,IAAI,CAAC,GAAG;gBAAE,KAAK,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,uDAAuD;YACvD,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,sBAAsB,CAAC,CAAC,EAAE,CAAC;gBAC1F,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7G,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1K,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC;YAC5G,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QACrH,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,0CAA0C,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAChD,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QACtI,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,OAAgF;IAC1G,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,OAAgB,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,SAAS,CAAC,CAAC;IACxG,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4C,CAAC;IACpE,OAAO,CAAC,OAAO,EAAE,EAAE;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,8EAA8E;QAC9E,IAAI,OAAO,CAAC,IAAI,GAAG,MAAM;YAAE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;gBAAE,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,QAAQ;oBAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClH,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,CAAC,CAAC,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAClC,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+import type { McpServer } from "@modelcontextprotocol/server";
+import { type ServerOptions } from "./server.ts";
+import { viewHTML } from "./view-file.ts";
+/** The Polyxd MCP server, its MCP App page read from dist/view.html unless you pass `viewHtml`. */
+export declare function createServer(options?: Partial<ServerOptions>): McpServer;
+export { viewHTML };
+export { appResourceMeta, VERSION, VIEW_URI, VIEW_MIME_TYPE, DEFAULT_PACK, WIDGET_DOMAIN, type ServerOptions } from "./server.ts";
+export { createHttpHandler, rateLimiter, type HttpHandlerOptions, type RequestLog } from "./http.ts";
+export { validate, verify, formatValidation, formatVerify, hintFor, type ReportedIssue, type ValidationReport, type VerifyReport } from "./check.ts";
+export { guide, MCP_NOTES, SYSTEM_PROMPT, SPEC_VERSION } from "./prompt.ts";
+export { PACKS, type Pack } from "./packs.generated.ts";
+export { componentDefinitions, exampleDocuments, exampleDirections, type ComponentDefinition, type Example } from "./spec.ts";

package/dist/index.js

@@ -0,0 +1,14 @@
+import { createServer as createServerWith } from "./server.js";
+import { viewHTML } from "./view-file.js";
+/** The Polyxd MCP server, its MCP App page read from dist/view.html unless you pass `viewHtml`. */
+export function createServer(options = {}) {
+    return createServerWith({ viewHtml: viewHTML, ...options });
+}
+export { viewHTML };
+export { appResourceMeta, VERSION, VIEW_URI, VIEW_MIME_TYPE, DEFAULT_PACK, WIDGET_DOMAIN } from "./server.js";
+export { createHttpHandler, rateLimiter } from "./http.js";
+export { validate, verify, formatValidation, formatVerify, hintFor } from "./check.js";
+export { guide, MCP_NOTES, SYSTEM_PROMPT, SPEC_VERSION } from "./prompt.js";
+export { PACKS } from "./packs.generated.js";
+export { componentDefinitions, exampleDocuments, exampleDirections } from "./spec.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAAsB,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,mGAAmG;AACnG,MAAM,UAAU,YAAY,CAAC,OAAO,GAA2B,EAAE;IAC/D,OAAO,gBAAgB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,OAAO,EAAE,QAAQ,EAAE,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAsB,MAAM,aAAa,CAAC;AAClI,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAA4C,MAAM,WAAW,CAAC;AACrG,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,OAAO,EAAgE,MAAM,YAAY,CAAC;AACrJ,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,KAAK,EAAa,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,iBAAiB,EAA0C,MAAM,WAAW,CAAC"}