@portel/photon 1.32.6 → 1.33.1

package/dist/tsx-compiler.js.map

@@ -1 +1 @@
-{"version":3,"file":"tsx-compiler.js","sourceRoot":"","sources":["../src/tsx-compiler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,OAAO,MAAM,aAAa,CAAC;AACvC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,8EAA8E;AAC9E,+EAA+E;AAC/E,wEAAwE;AAExE,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkDnB,CAAC,IAAI,EAAE,CAAC;AAET,mEAAmE;AACnE,IAAI,YAAY,GAAkB,IAAI,CAAC;AACvC,SAAS,cAAc;IACrB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;QAC9E,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,gDAAgD;AAChD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA6C,CAAC;AAEnE;;;GAGG;AACH,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,wBAAwB;IACxD,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAClD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC/C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,MAAM;QACrD,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAEzB,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,IAAI,IAAI,CAAC;YACZ,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;iBAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBACzB,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBAChC,QAAQ,GAAG,KAAK,CAAC;gBACjB,WAAW,GAAG,EAAE,CAAC;YACnB,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,QAAQ,GAAG,IAAI,CAAC;YAChB,WAAW,GAAG,IAAI,CAAC;YACnB,GAAG,IAAI,IAAI,CAAC;YACZ,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YAChD,GAAG,IAAI,IAAI,CAAC;YACZ,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,CAAC,IAAI,CAAC,CAAC;YACP,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;gBAAE,CAAC,EAAE,CAAC;YACzE,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,GAAG,IAAI,IAAI,CAAC;IACd,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,sBAAsB,CAAC,YAAoB;IAClD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QACtE,MAAM,oBAAoB,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACxF,MAAM,eAAe,GAAG,oBAAoB,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAC1D,OAAO,mEAAmE,CAAC,IAAI,CAC7E,eAAe,CAChB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,QAAgB,EAAE,YAAqB;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAErC,MAAM,cAAc,GAAG,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAEnF,OAAO;QACL,WAAW,EAAE,CAAC,QAAQ,CAAC;QACvB,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,QAAQ;QAChB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,+DAA+D;QAC/D,GAAG,CAAC,CAAC,cAAc;YACjB,CAAC,CAAC;gBACE,GAAG,EAAE,WAAW;gBAChB,UAAU,EAAE,GAAG;gBACf,WAAW,EAAE,UAAU;gBACvB,MAAM,EAAE,CAAC,cAAc,EAAE,CAAC;aAC3B;YACH,CAAC,CAAC;YACE,wEAAwE;aACzE,CAAC;QACN,SAAS,EAAE;YACT,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC;SACnD;QACD,QAAQ,EAAE,QAAQ;KACnB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO;;;;;;;;;;EAUP,EAAE;;;QAGI,CAAC;AACT,CAAC;AAED;;;;;GAKG;AACH,SAAS,wBAAwB,CAAC,OAAe;IAC/C,IACE,sFAAsF,CAAC,IAAI,CACzF,OAAO,CACR,EACD,CAAC;QACD,OAAO,CACL,sEAAsE;YACtE,yCAAyC;YACzC,qCAAqC;YACrC,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,QAAgB,EAAE,KAAc;IACjD,MAAM,UAAU,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,wBAAwB,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;IAChF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3F,OAAO;;;;;;;;;;;;;;oBAcW,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;OACpC,OAAO;;QAEN,CAAC;AACT,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE1D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;QACzE,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;QAC/C,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IACrD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9C,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;IACxC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE1D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;QACvE,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;QAC/C,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;AACH,CAAC"}
+{"version":3,"file":"tsx-compiler.js","sourceRoot":"","sources":["../src/tsx-compiler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,8EAA8E;AAC9E,0EAA0E;AAC1E,0EAA0E;AAC1E,mEAAmE;AACnE,EAAE;AACF,uDAAuD;AACvD,yEAAyE;AACzE,yEAAyE;AACzE,uEAAuE;AACvE,0BAA0B;AAC1B,uEAAuE;AACvE,wEAAwE;AACxE,oEAAoE;AACpE,0CAA0C;AAC1C,wEAAwE;AACxE,mDAAmD;AACnD,yEAAyE;AACzE,wDAAwD;AACxD,0EAA0E;AAC1E,qEAAqE;AACrE,uCAAuC;AAEvC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwVnB,CAAC,IAAI,EAAE,CAAC;AAET,mEAAmE;AACnE,IAAI,YAAY,GAAkB,IAAI,CAAC;AACvC,SAAS,cAAc;IACrB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;QAC9E,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AA+BD,yEAAyE;AACzE,yEAAyE;AACzE,+CAA+C;AAC/C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgD,CAAC;AAEtE,6DAA6D;AAC7D,SAAS,aAAa,CAAC,QAAyD;IAC9E,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,qEAAqE;QACrE,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACxD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uEAAuE;AACvE,SAAS,eAAe,CAAC,MAAgB;IACvC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,CAAC,CAAC,oCAAoC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+DAA+D;AAC/D,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClG,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,mEAAmE;AACnE,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,MAAM;SACV,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,GAAG,EAAE,cAAc,OAAO,CAAC,OAAO,EAAE,CAAC;SAC5C,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,QAAgB,EAAE,EAAU,EAAE,MAAgB;IACxE,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAClC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IAC7F,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,GAAG,IAAI,IAAI,IAAI,KAAK,CAAC;IACxC,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAClD,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC9C,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7B,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC1F,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAClF,CAAC;AAED,iEAAiE;AACjE,SAAS,WAAW,CAAC,QAAgB,EAAE,KAAc;IACnD,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACxC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IACD,OAAO;QACL,IAAI,EAAE,EAAE;QACR,UAAU,EAAE,EAAE;QACd,IAAI;QACJ,EAAE,EAAE,EAAE;QACN,GAAG;QACH,QAAQ;QACR,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;KACjC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,wBAAwB;IACxD,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAClD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC/C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,MAAM;QACrD,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAEzB,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,IAAI,IAAI,CAAC;YACZ,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;iBAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBACzB,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBAChC,QAAQ,GAAG,KAAK,CAAC;gBACjB,WAAW,GAAG,EAAE,CAAC;YACnB,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,QAAQ,GAAG,IAAI,CAAC;YAChB,WAAW,GAAG,IAAI,CAAC;YACnB,GAAG,IAAI,IAAI,CAAC;YACZ,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YAChD,GAAG,IAAI,IAAI,CAAC;YACZ,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,CAAC,IAAI,CAAC,CAAC;YACP,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;gBAAE,CAAC,EAAE,CAAC;YACzE,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,GAAG,IAAI,IAAI,CAAC;IACd,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,sBAAsB,CAAC,YAAoB;IAClD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QACtE,MAAM,oBAAoB,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACxF,MAAM,eAAe,GAAG,oBAAoB,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAC1D,OAAO,mEAAmE,CAAC,IAAI,CAC7E,eAAe,CAChB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,QAAgB,EAAE,YAAqB;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAErC,MAAM,cAAc,GAAG,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAEnF,OAAO;QACL,WAAW,EAAE,CAAC,QAAQ,CAAC;QACvB,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,KAAK;QACZ,oEAAoE;QACpE,gEAAgE;QAChE,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,QAAQ;QAChB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,+DAA+D;QAC/D,GAAG,CAAC,CAAC,cAAc;YACjB,CAAC,CAAC;gBACE,GAAG,EAAE,WAAW;gBAChB,UAAU,EAAE,GAAG;gBACf,WAAW,EAAE,UAAU;gBACvB,MAAM,EAAE,CAAC,cAAc,EAAE,CAAC;aAC3B;YACH,CAAC,CAAC;YACE,wEAAwE;aACzE,CAAC;QACN,SAAS,EAAE;YACT,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC;SACnD;QACD,QAAQ,EAAE,QAAQ;KACnB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,UAAkB;IACpC,OAAO;;;;;;;;;+BASsB,UAAU;;QAEjC,CAAC;AACT,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,EAAU;IACnC,OAAO;;;;;;;;;;EAUP,EAAE;;;QAGI,CAAC;AACT,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,MAAM,oBAAoB,GAAG,qCAAqC,CAAC;AAC1E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAAG,UAAU,CAAC;AASlD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,MAAmB,EAAE,QAAgB;IACnE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QACzC,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,WAAW;YAC3B,eAAe,EAAE,uBAAuB;SACzC,CAAC;QACF,0EAA0E;QAC1E,IAAI,MAAM,CAAC,IAAI;YAAE,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC;QACtD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;QACpD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,MAAM,CAAC,EAAE;YACf,OAAO,EAAE;gBACP,cAAc,EAAE,gCAAgC;gBAChD,eAAe,EAAE,oBAAoB;aACtC;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,SAAS,wBAAwB,CAAC,OAAe;IAC/C,IACE,sFAAsF,CAAC,IAAI,CACzF,OAAO,CACR,EACD,CAAC;QACD,OAAO,CACL,sEAAsE;YACtE,yCAAyC;YACzC,qCAAqC;YACrC,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,QAAgB,EAAE,KAAc;IACjD,MAAM,UAAU,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,wBAAwB,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;IAChF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3F,OAAO;;;;;;;;;;;;;;oBAcW,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;OACpC,OAAO;;QAEN,CAAC;AACT,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE1D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;QACzE,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;QAC/C,OAAO,kBAAkB,CAAC,QAAQ,EAAE,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IACrD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;YACrC,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC1C,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE1D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;QACvE,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;QAC/C,OAAO,kBAAkB,CAAC,QAAQ,EAAE,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@portel/photon",
-  "version": "1.32.6",
+  "version": "1.33.1",
   "description": "You focus on the business logic. We'll enable the rest. Build MCP servers and CLI tools in a single TypeScript file.",
   "type": "module",
   "packageManager": "bun@1.2.20",

package/templates/cloudflare/worker.ts.template

@@ -20,6 +20,10 @@ interface Env {
 
 const DEV_MODE = __DEV_MODE__;
 const HOST_PHOTON_NAME = '__HOST_PHOTON_NAME__';
+const MCP_AUTH_MODE = __MCP_AUTH_MODE__;
+const MCP_JWT_ISSUER = __MCP_JWT_ISSUER__;
+const MCP_JWT_AUDIENCE = __MCP_JWT_AUDIENCE__;
+const MCP_JWT_JWKS = __MCP_JWT_JWKS__;
 
 /**
  * Photon name → Worker env binding name. Generated at deploy time from the
@@ -31,9 +35,25 @@ const PHOTON_BINDINGS: Record<string, string> = __PHOTON_BINDINGS_MAP__;
 const CORS_HEADERS = {
   'Access-Control-Allow-Origin': '*',
   'Access-Control-Allow-Methods': 'POST, GET, OPTIONS',
-  'Access-Control-Allow-Headers': 'Content-Type, Mcp-Session-Id, X-Photon-Instance',
+  'Access-Control-Allow-Headers': 'Content-Type, Authorization, Mcp-Session-Id, X-Photon-Instance',
 };
 
+/**
+ * Precompiled .tsx UI manifest (uiId → asset descriptor). Generated at
+ * deploy time so `GET /api/ui/<id>` serves the cache-busting shell and
+ * the content-hashed bundle from the [assets] binding, matching the
+ * local server and Beam contract. Empty when the deploy has no .tsx UI.
+ */
+const UI_ASSET_MANIFEST: Record<string, { base: string; js: string; hash: string }> =
+  __UI_ASSET_MANIFEST__;
+
+/**
+ * Photon companion-folder assets embedded at deploy time for synchronous
+ * `this.assets(subpath, { load })` parity with the local runtime. Files are
+ * keyed by photon name and normalized relative path.
+ */
+const PHOTON_ASSET_CONTENTS: Record<string, Record<string, string>> = __PHOTON_ASSET_CONTENTS__;
+
 // ════════════════════════════════════════════════════════════════════════════
 // Memory proxy — ctx.storage backing for this.memory
 // ════════════════════════════════════════════════════════════════════════════
@@ -222,6 +242,14 @@ function createScheduleProvider(ctx: DurableObjectState, photonId: string) {
       if (ok) await rescheduleAlarm(ctx);
       return ok;
     },
+    async cancelByName(name: string): Promise<boolean> {
+      const task = await this.getByName(name);
+      if (!task) return false;
+      return this.cancel(task.id);
+    },
+    async has(name: string): Promise<boolean> {
+      return (await this.getByName(name)) !== null;
+    },
     async update(
       id: string,
       updates: Partial<
@@ -239,6 +267,28 @@ function createScheduleProvider(ctx: DurableObjectState, photonId: string) {
       await rescheduleAlarm(ctx);
       return next;
     },
+    async pause(id: string): Promise<ScheduledTask> {
+      const cur = await ctx.storage.get<ScheduledTask>(SCHEDULE_PREFIX + id);
+      if (!cur) throw new Error(`Schedule ${id} not found`);
+      if (cur.status !== 'active') {
+        throw new Error(`Cannot pause task with status '${cur.status}'. Only active tasks can be paused.`);
+      }
+      const next: ScheduledTask = { ...cur, status: 'paused' };
+      await ctx.storage.put(SCHEDULE_PREFIX + id, next);
+      await rescheduleAlarm(ctx);
+      return next;
+    },
+    async resume(id: string): Promise<ScheduledTask> {
+      const cur = await ctx.storage.get<ScheduledTask>(SCHEDULE_PREFIX + id);
+      if (!cur) throw new Error(`Schedule ${id} not found`);
+      if (cur.status !== 'paused') {
+        throw new Error(`Cannot resume task with status '${cur.status}'. Only paused tasks can be resumed.`);
+      }
+      const next: ScheduledTask = { ...cur, status: 'active' };
+      await ctx.storage.put(SCHEDULE_PREFIX + id, next);
+      await rescheduleAlarm(ctx);
+      return next;
+    },
   };
 }
 
@@ -529,6 +579,13 @@ function withCfCapabilities(
     configurable: false,
   });
 
+  Object.defineProperty(instance, 'assets', {
+    value: createAssetsProvider(photonName),
+    writable: false,
+    enumerable: false,
+    configurable: false,
+  });
+
   Object.defineProperty(instance, 'callerCwd', {
     get() {
       return undefined;
@@ -537,6 +594,22 @@ function withCfCapabilities(
     configurable: false,
   });
 
+  Object.defineProperty(instance, 'caller', {
+    get() {
+      return (
+        mcpAuthContext.getStore()?.caller ?? {
+          id: 'anonymous',
+          name: undefined,
+          anonymous: true,
+          scope: undefined,
+          claims: {},
+        }
+      );
+    },
+    enumerable: false,
+    configurable: false,
+  });
+
   // Worker env exposed to the photon for direct binding access — Workers AI
   // (`env.AI.run('@cf/...', ...)`), KV, R2, queues, secrets. Photons that
   // want to stay CF-portable should branch on `(this as any).env?.AI` and
@@ -603,6 +676,43 @@ function withCfCapabilities(
   return instance;
 }
 
+function createAssetsProvider(photonName: string) {
+  return (subpath: string, options?: boolean | { load?: boolean; encoding?: string | null }) => {
+    const normalized = typeof options === 'boolean' ? { load: options } : (options ?? {});
+    const assetPath = normalizeAssetPath(subpath);
+    if (!normalized.load) return `/${photonName}/${assetPath}`;
+
+    const encoded = PHOTON_ASSET_CONTENTS[photonName]?.[assetPath];
+    if (encoded === undefined) {
+      throw new Error(`Asset not found: ${assetPath}`);
+    }
+
+    const bytes = base64ToBytes(encoded);
+    if (normalized.encoding === null) return bytes;
+    const encoding = !normalized.encoding || normalized.encoding === 'utf8' ? 'utf-8' : normalized.encoding;
+    return new TextDecoder(encoding).decode(bytes);
+  };
+}
+
+function normalizeAssetPath(subpath: string): string {
+  const clean = String(subpath)
+    .replace(/\\/g, '/')
+    .replace(/^\/+/, '')
+    .split('/')
+    .filter((part) => part && part !== '.');
+  if (clean.some((part) => part === '..')) {
+    throw new Error(`Invalid asset path: ${subpath}`);
+  }
+  return clean.join('/');
+}
+
+function base64ToBytes(value: string): Uint8Array {
+  const binary = atob(value);
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i += 1) bytes[i] = binary.charCodeAt(i);
+  return bytes;
+}
+
 // ════════════════════════════════════════════════════════════════════════════
 // Server-initiated MCP requests — sample / confirm / elicit
 // ════════════════════════════════════════════════════════════════════════════
@@ -643,7 +753,7 @@ const requestContext = new AsyncLocalStorage<RequestContext>();
  * value for the dispatched method. The flag is scoped to the single
  * `tools/call` invocation, not the DO lifetime.
  */
-const mcpAuthContext = new AsyncLocalStorage<{ authed: boolean }>();
+const mcpAuthContext = new AsyncLocalStorage<{ authed: boolean; caller?: any }>();
 
 /**
  * Constant-time string comparison to avoid leaking the bearer through
@@ -689,6 +799,153 @@ function checkMcpBearer(
   return { enforced: true, ok: true };
 }
 
+type McpAuthResult =
+  | { enforced: false; ok: true; authed: false }
+  | { enforced: true; ok: true; authed: true; caller?: any }
+  | { enforced: true; ok: false; status: number; code: number; message: string; reason: string; wwwAuthenticate: string };
+
+function bearerTokenFromRequest(request: Request): string | null {
+  const header = request.headers.get('Authorization') ?? '';
+  const match = header.match(/^Bearer\s+(.+)$/i);
+  return match ? match[1].trim() : null;
+}
+
+function base64UrlDecode(input: string): string {
+  const normalized = input.replace(/-/g, '+').replace(/_/g, '/');
+  const padded = normalized + '='.repeat((4 - (normalized.length % 4)) % 4);
+  return atob(padded);
+}
+
+function base64UrlBytes(input: string): Uint8Array {
+  const binary = base64UrlDecode(input);
+  const out = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++) out[i] = binary.charCodeAt(i);
+  return out;
+}
+
+function parseJwtPart(part: string): any | null {
+  try {
+    return JSON.parse(base64UrlDecode(part));
+  } catch {
+    return null;
+  }
+}
+
+async function verifyMcpJwt(
+  request: Request,
+  requiredScopes: string[] = []
+): Promise<McpAuthResult> {
+  if (MCP_AUTH_MODE !== 'jwt') {
+    return { enforced: false, ok: true, authed: false };
+  }
+  if (!MCP_JWT_ISSUER || !MCP_JWT_AUDIENCE || !MCP_JWT_JWKS?.keys?.length) {
+    return jwtReject('missing_token');
+  }
+  const token = bearerTokenFromRequest(request);
+  if (!token) return jwtReject('missing_token');
+  const parts = token.split('.');
+  if (parts.length !== 3) return jwtReject('malformed_token');
+  const header = parseJwtPart(parts[0]);
+  const claims = parseJwtPart(parts[1]);
+  if (!header || !claims) return jwtReject('malformed_token');
+  if (header.alg !== 'ES256') return jwtReject('unsupported_alg');
+  const kid = typeof header.kid === 'string' ? header.kid : '';
+  const jwk = MCP_JWT_JWKS.keys.find((key: any) => key?.kid === kid);
+  if (!kid || !jwk) return jwtReject('unknown_kid');
+
+  let verified = false;
+  try {
+    const key = await crypto.subtle.importKey(
+      'jwk',
+      jwk,
+      { name: 'ECDSA', namedCurve: 'P-256' },
+      false,
+      ['verify']
+    );
+    verified = await crypto.subtle.verify(
+      { name: 'ECDSA', hash: 'SHA-256' },
+      key,
+      base64UrlBytes(parts[2]),
+      new TextEncoder().encode(`${parts[0]}.${parts[1]}`)
+    );
+  } catch {
+    verified = false;
+  }
+  if (!verified) return jwtReject('bad_signature');
+  if (claims.iss !== MCP_JWT_ISSUER) return jwtReject('wrong_issuer');
+  const audMatches = Array.isArray(claims.aud)
+    ? claims.aud.includes(MCP_JWT_AUDIENCE)
+    : claims.aud === MCP_JWT_AUDIENCE;
+  if (!audMatches) return jwtReject('wrong_audience');
+  const now = Math.floor(Date.now() / 1000);
+  const skew = 60;
+  if (typeof claims.exp !== 'number' || claims.exp < now - skew) return jwtReject('expired_token');
+  if (typeof claims.nbf === 'number' && claims.nbf > now + skew) {
+    return jwtReject('token_not_yet_valid');
+  }
+  if (typeof claims.iat === 'number' && claims.iat > now + skew) {
+    return jwtReject('token_not_yet_valid');
+  }
+  const granted = new Set(String(claims.scope ?? '').split(/\s+/).filter(Boolean));
+  const missing = requiredScopes.find((scope) => !granted.has(scope));
+  if (missing) return jwtReject('insufficient_scope', requiredScopes);
+  return {
+    enforced: true,
+    ok: true,
+    authed: true,
+    caller: {
+      id: String(claims.sub ?? 'unknown'),
+      name: typeof claims.name === 'string' ? claims.name : undefined,
+      anonymous: false,
+      scope: typeof claims.scope === 'string' ? claims.scope : undefined,
+      claims,
+    },
+  };
+}
+
+function jwtReject(reason: string, scopes: string[] = []): McpAuthResult {
+  const insufficient = reason === 'insufficient_scope';
+  const scopePart = insufficient && scopes.length > 0 ? `, scope="${scopes.join(' ')}"` : '';
+  return {
+    enforced: true,
+    ok: false,
+    status: insufficient ? 403 : 401,
+    code: insufficient ? -32003 : -32001,
+    message: insufficient ? 'Forbidden' : 'Unauthorized',
+    reason,
+    wwwAuthenticate: `Bearer realm="photon", error="${insufficient ? 'insufficient_scope' : 'invalid_token'}"${scopePart}`,
+  };
+}
+
+async function checkMcpAuth(
+  request: Request,
+  env: Env,
+  method: string,
+  toolDefinitions: any[],
+  body: any
+): Promise<McpAuthResult> {
+  const requiresAuth = method !== '' && !MCP_METHODS_BYPASSING_BEARER.has(method);
+  if (!requiresAuth) return { enforced: false, ok: true, authed: false };
+  if (MCP_AUTH_MODE === 'jwt') {
+    const toolName = body?.method === 'tools/call' ? body?.params?.name : undefined;
+    const tool = toolDefinitions.find((t: any) => t.name === toolName);
+    return verifyMcpJwt(request, Array.isArray(tool?.scopes) ? tool.scopes : []);
+  }
+  if (MCP_AUTH_MODE === 'open') return { enforced: false, ok: true, authed: false };
+  const bearer = checkMcpBearer(request, env);
+  if (!bearer.enforced) return { enforced: false, ok: true, authed: false };
+  if (bearer.ok) return { enforced: true, ok: true, authed: true };
+  return {
+    enforced: true,
+    ok: false,
+    status: 401,
+    code: -32001,
+    message: 'Unauthorized',
+    reason: bearer.reason ?? 'Authorization: Bearer <token> header missing',
+    wwwAuthenticate: 'Bearer realm="photon"',
+  };
+}
+
 /**
  * Methods that may pass through `/mcp` without a bearer because they
  * don't dispatch into user code. `tools/list` advertises the catalog,
@@ -1021,10 +1278,17 @@ abstract class BasePhotonDO extends DurableObject<Env> {
   constructor(ctx: DurableObjectState, env: Env) {
     super(ctx, env);
     this.instanceName = ctx.id.name ?? 'default';
-    this.photon = withCfCapabilities(this.createPhoton(), ctx, env, this.photonName);
+  }
+
+  protected getPhoton(): any {
+    if (!this.photon) {
+      this.photon = withCfCapabilities(this.createPhoton(), this.ctx, this.env, this.photonName);
+    }
+    return this.photon;
   }
 
   async fetch(request: Request): Promise<Response> {
+    this.getPhoton();
     const url = new URL(request.url);
 
     // Internal cross-photon call — invoked by sibling DOs via this.call.
@@ -1121,27 +1385,6 @@ abstract class BasePhotonDO extends DurableObject<Env> {
           headers: { 'Content-Type': 'text/html' },
         });
       }
-      if (url.pathname === '/api/tools') {
-        return Response.json({ tools: this.toolDefinitions }, { headers: CORS_HEADERS });
-      }
-      if (url.pathname === '/api/call' && request.method === 'POST') {
-        const { tool, args } = (await request.json()) as { tool: string; args: any };
-        try {
-          const fn = (this.photon as any)[tool];
-          if (typeof fn !== 'function') {
-            throw new Error(`Unknown tool: ${tool}`);
-          }
-          const toolDef = this.toolDefinitions.find((t: any) => t.name === tool);
-          const callArgs = spreadArgs(toolDef, args || {});
-          const result = await fn.call(this.photon, ...callArgs);
-          return Response.json({ success: true, data: result }, { headers: CORS_HEADERS });
-        } catch (error: any) {
-          return Response.json(
-            { success: false, error: error.message },
-            { status: 500, headers: CORS_HEADERS }
-          );
-        }
-      }
     }
 
     // @get / @post HTTP routes — dispatch to photon method, bypass MCP.
@@ -1218,6 +1461,57 @@ abstract class BasePhotonDO extends DurableObject<Env> {
     // companion folder, so the typeof guard keeps non-asset deploys
     // quiet (no extra fetch round-trip when the binding is absent).
     const assets = (this.env as any).ASSETS as { fetch: (req: Request) => Promise<Response> } | undefined;
+
+    // Precompiled .tsx UI: GET /api/ui/<id>[/<rest>]. Serve the shell
+    // (revalidated, ETag) and the hashed bundle (immutable) from the
+    // [assets] binding so the cache contract matches local + Beam.
+    if (assets && request.method === 'GET') {
+      const uiMatch = url.pathname.match(/^\/api\/ui\/([^/]+)(?:\/(.*))?$/);
+      if (uiMatch) {
+        const entry = UI_ASSET_MANIFEST[uiMatch[1]];
+        if (entry) {
+          const rest = (uiMatch[2] || '').replace(/^\/+/, '');
+          const isBundle = rest === entry.js;
+          const assetPath = isBundle
+            ? `${entry.base}/${entry.js}`
+            : `${entry.base}/index.html`;
+          if (!isBundle) {
+            const inm = request.headers.get('if-none-match');
+            if (inm && inm === `"${entry.hash}"`) {
+              return new Response(null, {
+                status: 304,
+                headers: { ETag: `"${entry.hash}"`, ...CORS_HEADERS },
+              });
+            }
+          }
+          const assetResponse = await assets.fetch(
+            new Request(new URL(assetPath, url.origin).toString())
+          );
+          if (assetResponse.status === 200) {
+            const headers = new Headers(assetResponse.headers);
+            for (const [k, v] of Object.entries(CORS_HEADERS)) headers.set(k, v);
+            if (isBundle) {
+              headers.set('Content-Type', 'text/javascript; charset=utf-8');
+              headers.set('Cache-Control', 'public, max-age=31536000, immutable');
+              return new Response(assetResponse.body, { status: 200, headers });
+            }
+            headers.set('Content-Type', 'text/html');
+            headers.set('Cache-Control', 'no-cache');
+            headers.set('ETag', `"${entry.hash}"`);
+            // The shell references the bundle relatively (`./<hash>.js`).
+            // The document URL `/api/ui/<id>` has no trailing slash, so
+            // pin it to the absolute route the bundle branch serves.
+            const shellHtml = (await assetResponse.text()).replace(
+              `src="./${entry.js}"`,
+              `src="/api/ui/${uiMatch[1]}/${entry.js}"`
+            );
+            headers.delete('Content-Length');
+            return new Response(shellHtml, { status: 200, headers });
+          }
+        }
+      }
+    }
+
     if (assets && request.method === 'GET') {
       const assetResponse = await assets.fetch(request);
       if (assetResponse.status !== 404) return assetResponse;
@@ -1268,39 +1562,36 @@ abstract class BasePhotonDO extends DurableObject<Env> {
       return new Response(null, { status: 204, headers: CORS_HEADERS });
     }
 
-    // Bearer auth gate. When `PHOTON_MCP_BEARER` is set on the deployed
-    // Worker (e.g. via `wrangler secret put PHOTON_MCP_BEARER`), every
-    // method that dispatches into user code requires a matching
-    // `Authorization: Bearer <token>` header. Discovery + handshake
-    // methods (tools/list, initialize, ping, notifications/*) pass
-    // through unauthed so MCP clients can complete capability
-    // negotiation before authenticating. When the secret is unset the
-    // gate is a no-op so existing deployments keep working.
     const method = typeof body?.method === 'string' ? body.method : '';
-    const authResult = checkMcpBearer(request, (this as any).env);
-    const requiresAuth = method !== '' && !MCP_METHODS_BYPASSING_BEARER.has(method);
-    if (authResult.enforced && requiresAuth && !authResult.ok) {
+    const authResult = await checkMcpAuth(
+      request,
+      (this as any).env,
+      method,
+      this.toolDefinitions,
+      body
+    );
+    if (authResult.enforced && !authResult.ok) {
       return new Response(
         JSON.stringify({
           jsonrpc: '2.0',
           id: body?.id ?? null,
           error: {
-            code: -32001,
-            message: 'Unauthorized',
-            data: { reason: (authResult as { reason: string }).reason },
+            code: authResult.code,
+            message: authResult.message,
+            data: { reason: authResult.reason },
           },
         }),
         {
-          status: 401,
+          status: authResult.status,
           headers: {
             'Content-Type': 'application/json',
-            'WWW-Authenticate': 'Bearer realm="photon"',
+            'WWW-Authenticate': authResult.wwwAuthenticate,
             ...CORS_HEADERS,
           },
         }
       );
     }
-    const authed = authResult.enforced ? authResult.ok === true : false;
+    const authContext = { authed: authResult.authed === true, caller: authResult.caller };
 
     // Tool calls from clients that signal SSE support get a streamed
     // response so this.sample / this.confirm / this.elicit can push
@@ -1309,10 +1600,10 @@ abstract class BasePhotonDO extends DurableObject<Env> {
     const accept = request.headers.get('Accept') ?? '';
     const wantsSse = accept.includes('text/event-stream');
     if (body?.method === 'tools/call' && wantsSse) {
-      return mcpAuthContext.run({ authed }, () => this._streamToolCall(body));
+      return mcpAuthContext.run(authContext, () => this._streamToolCall(body));
     }
 
-    const result = await mcpAuthContext.run({ authed }, () =>
+    const result = await mcpAuthContext.run(authContext, () =>
       handleMCPRequest(body, this.photon, this.photonName, this.toolDefinitions)
     );
     return Response.json(result, { headers: CORS_HEADERS });
@@ -1325,6 +1616,7 @@ abstract class BasePhotonDO extends DurableObject<Env> {
    * (which arrive as separate POST /mcp requests routed by `_handleMcpPost`).
    */
   private _streamToolCall(rpcRequest: any): Response {
+    this.getPhoton();
     const { readable, writable } = new TransformStream();
     const writer = writable.getWriter();
     const encoder = new TextEncoder();
@@ -1393,6 +1685,7 @@ abstract class BasePhotonDO extends DurableObject<Env> {
    * Per-task errors move that task to status='error' without blocking others.
    */
   async alarm(): Promise<void> {
+    this.getPhoton();
     const tasks = await listSchedules(this.ctx);
     const now = Date.now();
     for (const task of tasks) {
@@ -1481,7 +1774,7 @@ export default {
           'Access-Control-Allow-Origin': '*',
           'Access-Control-Allow-Methods': 'GET, POST, DELETE, OPTIONS',
           'Access-Control-Allow-Headers':
-            'Content-Type, Mcp-Session-Id, X-Photon-Instance, Upgrade',
+            'Content-Type, Authorization, Mcp-Session-Id, X-Photon-Instance, Upgrade',
         },
       });
     }
@@ -1545,6 +1838,12 @@ function getPlaygroundHTML(photonName: string, toolDefinitions: any[]): string {
         <h3>Parameters</h3>
         <div id="params"></div>
         <button class="btn" id="call" disabled>Call Tool</button>
+        <div style="margin-top: 10px; font-size: 12px; color: var(--muted);">
+          <a href="#" id="set-token" style="color: var(--muted); text-decoration: underline;">Set token</a>
+          &middot;
+          <a href="#" id="clear-token" style="color: var(--muted); text-decoration: underline;">Clear token</a>
+          <span id="token-status" style="margin-left: 8px;"></span>
+        </div>
       </div>
       <div class="panel">
         <h3>Response</h3>
@@ -1620,11 +1919,23 @@ function getPlaygroundHTML(photonName: string, toolDefinitions: any[]): string {
       document.getElementById('response').textContent = 'Calling...';
 
       try {
-        const res = await fetch('/api/call', {
+        const headers = { 'Content-Type': 'application/json' };
+        const token = localStorage.getItem('photon_mcp_token');
+        if (token) headers['Authorization'] = 'Bearer ' + token;
+        const res = await fetch('/mcp', {
           method: 'POST',
-          headers: { 'Content-Type': 'application/json' },
-          body: JSON.stringify({ tool: selectedTool.name, args })
+          headers,
+          body: JSON.stringify({
+            jsonrpc: '2.0',
+            id: Date.now(),
+            method: 'tools/call',
+            params: { name: selectedTool.name, arguments: args }
+          })
         });
+        if (res.status === 401 || res.status === 403) {
+          document.getElementById('response').textContent = "Auth required. Click 'Set token' to paste an MCP token.";
+          return;
+        }
         const data = await res.json();
         document.getElementById('response').textContent = JSON.stringify(data, null, 2);
       } catch (e) {
@@ -1632,6 +1943,22 @@ function getPlaygroundHTML(photonName: string, toolDefinitions: any[]): string {
       }
     };
 
+    function updateTokenStatus() {
+      const el = document.getElementById('token-status');
+      el.textContent = localStorage.getItem('photon_mcp_token') ? '(token set)' : '(no token)';
+    }
+    document.getElementById('set-token').onclick = (e) => {
+      e.preventDefault();
+      const t = prompt('Paste MCP bearer/JWT token (stored in this browser only):');
+      if (t) { localStorage.setItem('photon_mcp_token', t.trim()); updateTokenStatus(); }
+    };
+    document.getElementById('clear-token').onclick = (e) => {
+      e.preventDefault();
+      localStorage.removeItem('photon_mcp_token');
+      updateTokenStatus();
+    };
+    updateTokenStatus();
+
     renderTools();
   </script>
 </body>