@procedures/client 0.0.0-stage → 0.1.0

package/dist/server/browser-guard.js

@@ -0,0 +1,103 @@
+/**
+ * Checks of requests that a web browser can send to a procedure server.
+ *
+ * A server serves its whole registry, often with `shell.*` in it, and a web page that the user
+ * opens can send requests to `127.0.0.1`. Before, the HTTP server transport read any request
+ * body as JSON, so a "simple" cross-site POST (`Content-Type: text/plain`, no CORS preflight)
+ * ran any procedure, and the WebSocket server accepted a connection from any page
+ * (cross-site WebSocket hijacking). The checks here are on by default in both transports:
+ *
+ * - A connection that arrives on a loopback address must name a loopback host in its `Host`
+ *   header. A DNS rebinding attack sends the name of the attacker's site.
+ * - A browser request (an `Origin` header) must come from the server's own origin, or from an
+ *   origin in `allowedOrigins`.
+ * - A request that the browser marks `Sec-Fetch-Site: cross-site` or `same-site` and that has
+ *   no allowed origin is refused (an image tag or a form sends no `Origin` for a GET).
+ * - HTTP only: a procedure call by GET or HEAD is refused unless `allowGet` is true, and a
+ *   request body must be JSON.
+ */
+const LOOPBACK_NAMES = new Set(["localhost", "127.0.0.1", "::1", "[::1]"]);
+/** True for a host name or a bind address that only this computer can reach. */
+export function isLoopbackHost(host) {
+    return LOOPBACK_NAMES.has(host.toLowerCase());
+}
+/** True for a local socket address on the loopback interface (IPv4, IPv6, or IPv4 in IPv6). */
+export function isLoopbackAddress(address) {
+    if (!address)
+        return false;
+    const plain = address.startsWith("::ffff:") ? address.slice("::ffff:".length) : address;
+    return plain === "::1" || plain.startsWith("127.");
+}
+/** The name of a Host header without its port: "localhost:3000" gives "localhost", "[::1]:80" gives "[::1]". */
+export function hostNameOf(header) {
+    if (!header)
+        return "";
+    if (header.startsWith("["))
+        return header.slice(0, header.indexOf("]") + 1).toLowerCase();
+    return (header.split(":")[0] ?? "").toLowerCase();
+}
+function originAllowedBy(origin, allowed) {
+    if (allowed === "*")
+        return true;
+    if (typeof allowed === "function")
+        return allowed(origin);
+    return (allowed ?? []).includes(origin);
+}
+/** True when the origin is the origin of the server that the request names in its Host header. */
+function sameOrigin(origin, hostHeader) {
+    if (!hostHeader)
+        return false;
+    try {
+        return new URL(origin).host.toLowerCase() === hostHeader.toLowerCase();
+    }
+    catch {
+        return false;
+    }
+}
+/** True for a media type of JSON: `application/json` or a `+json` type. */
+function isJsonType(contentType) {
+    const type = (contentType ?? "").split(";")[0].trim().toLowerCase();
+    return type === "application/json" || type.endsWith("+json");
+}
+/** True when the request has a body: a `Content-Length` above 0, or a chunked body. */
+function hasBody(headers) {
+    const length = Number(headers["content-length"] ?? 0);
+    return length > 0 || headers["transfer-encoding"] !== undefined;
+}
+/**
+ * The checks of the host, the origin and the fetch site, for HTTP and WebSocket requests.
+ * `http` adds the checks of the method and the body.
+ */
+export function checkBrowserRequest(req, options = {}, http = false) {
+    const { headers } = req;
+    // DNS rebinding: a request on a loopback address must name a loopback host
+    if (options.allowedHosts !== "*" && isLoopbackAddress(req.socket?.localAddress)) {
+        const name = hostNameOf(headers.host);
+        if (!LOOPBACK_NAMES.has(name) && !(options.allowedHosts ?? []).includes(name)) {
+            return { ok: false, status: 403, code: "FORBIDDEN_HOST", message: `Forbidden: the host "${name}" is not allowed` };
+        }
+    }
+    const origin = typeof headers.origin === "string" ? headers.origin : undefined;
+    if (origin !== undefined) {
+        if (!sameOrigin(origin, headers.host) && !originAllowedBy(origin, options.allowedOrigins)) {
+            return { ok: false, status: 403, code: "FORBIDDEN_ORIGIN", message: `Forbidden: the origin "${origin}" is not allowed` };
+        }
+    }
+    else {
+        const site = headers["sec-fetch-site"];
+        if ((site === "cross-site" || site === "same-site") && options.allowedOrigins !== "*") {
+            return { ok: false, status: 403, code: "FORBIDDEN_ORIGIN", message: "Forbidden: a request from another site" };
+        }
+    }
+    if (http) {
+        const method = (req.method ?? "GET").toUpperCase();
+        if ((method === "GET" || method === "HEAD") && !options.allowGet) {
+            return { ok: false, status: 405, code: "METHOD_NOT_ALLOWED", message: "Call a procedure with POST" };
+        }
+        if (hasBody(headers) && !isJsonType(headers["content-type"])) {
+            return { ok: false, status: 415, code: "UNSUPPORTED_MEDIA_TYPE", message: "The request body must be JSON (Content-Type: application/json)" };
+        }
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=browser-guard.js.map

package/dist/server/browser-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-guard.js","sourceRoot":"","sources":["../../src/server/browser-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAoC3E,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACxF,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,gHAAgH;AAChH,MAAM,UAAU,UAAU,CAAC,MAA0B;IACnD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,OAA8C;IACrF,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,OAAO,OAAO,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,kGAAkG;AAClG,SAAS,UAAU,CAAC,MAAc,EAAE,UAA8B;IAChE,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,SAAS,UAAU,CAAC,WAA+B;IACjD,MAAM,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrE,OAAO,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,uFAAuF;AACvF,SAAS,OAAO,CAAC,OAA4B;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,OAAO,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,mBAAmB,CAAC,KAAK,SAAS,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAmB,EACnB,OAAO,GAAwB,EAAE,EACjC,IAAI,GAAG,KAAK;IAEZ,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAExB,2EAA2E;IAC3E,IAAI,OAAO,CAAC,YAAY,KAAK,GAAG,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,wBAAwB,IAAI,kBAAkB,EAAE,CAAC;QACrH,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YAC1F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,0BAA0B,MAAM,kBAAkB,EAAE,CAAC;QAC3H,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,WAAW,CAAC,IAAI,OAAO,CAAC,cAAc,KAAK,GAAG,EAAE,CAAC;YACtF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;QACjH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;QACvG,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,gEAAgE,EAAE,CAAC;QAC/I,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/server/host-policy.d.ts

@@ -0,0 +1,59 @@
+/**
+ * The policy of a host: one place that builds what a server lets its callers do (roadmap 2.3).
+ *
+ * The three hosts (the MCP dev-tools server, the `server` CLI, the warm server of `mark`) each
+ * built their own expose rule, call rule, time limit and token. `hostPolicy()` builds them from
+ * one set of options, and `procedureServerOptions()` gives them to a `ProcedureServer`.
+ *
+ * - `expose`: the procedures that callers reach. Patterns: an exact key (`git.status`), a prefix
+ *   (`git.*`) or `*`. A tool surface: namespaces and the keys to leave out. Without it: every
+ *   procedure.
+ * - `strictCalls`: a procedure of code that declares no `metadata.calls` calls only exposed
+ *   procedures (a host for an outside caller sets it).
+ * - `timeoutMs`: the time limit of each call from a caller (not of its nested calls).
+ * - `token`, `browser`: the checks of the network transports (`client-server` applies them).
+ */
+import type { ProcedurePath } from "../procedures/types.js";
+import type { Interceptor } from "../procedures/invoke.js";
+import type { BrowserGuardOptions } from "./browser-guard.js";
+import type { ProcedureRegistry } from "../procedures/registry.js";
+import type { ProcedureServerOptions } from "./procedure-server.js";
+/** The procedures of a host that are tools: namespaces (first path segments), less some keys. */
+export interface ToolSurface {
+    namespaces: readonly string[];
+    exclude?: readonly string[] | undefined;
+}
+/** The rule of a list of patterns: an exact key (`git.status`), a prefix (`git.*`) or `*`. */
+export declare function exposePatterns(patterns: readonly string[]): (path: ProcedurePath) => boolean;
+/** The rule of a tool surface: the namespaces, less the excluded keys. */
+export declare function surfaceRule(surface: ToolSurface): (path: ProcedurePath) => boolean;
+/** The options of `hostPolicy()`. */
+export interface HostPolicyOptions {
+    /** The procedures that callers reach. Without it: every procedure of the registry. */
+    expose?: readonly string[] | ToolSurface | ((path: ProcedurePath) => boolean) | undefined;
+    /** Keys that callers do not reach, also when `expose` matches them. */
+    exclude?: readonly string[] | undefined;
+    /** A procedure of code with no `metadata.calls` calls only exposed procedures. */
+    strictCalls?: boolean | undefined;
+    /** The time limit of each call from a caller, in milliseconds. 0 or no value: no limit. */
+    timeoutMs?: number | undefined;
+    /** More interceptors, after the policy's own (tracing, metrics). */
+    interceptors?: readonly Interceptor[] | undefined;
+    /** The token that each network request must send (HTTP and WebSocket transports). */
+    token?: string | undefined;
+    /** The browser checks of the network transports (`allowedOrigins`, `allowedHosts`, `allowGet`). */
+    browser?: BrowserGuardOptions | undefined;
+}
+/** What a host lets its callers do. */
+export interface HostPolicy {
+    readonly expose: ((path: ProcedurePath) => boolean) | undefined;
+    readonly strictCalls: boolean;
+    readonly interceptors: readonly Interceptor[];
+    readonly token: string | undefined;
+    readonly browser: BrowserGuardOptions;
+}
+/** This function builds the policy of a host from its options. */
+export declare function hostPolicy(options?: HostPolicyOptions): HostPolicy;
+/** The options of a `ProcedureServer` that serves a registry under a policy. */
+export declare function procedureServerOptions(policy: HostPolicy, registry?: ProcedureRegistry): ProcedureServerOptions;
+//# sourceMappingURL=host-policy.d.ts.map

package/dist/server/host-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-policy.d.ts","sourceRoot":"","sources":["../../src/server/host-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEpE,iGAAiG;AACjG,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACzC;AAED,8FAA8F;AAC9F,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAc5F;AAED,0EAA0E;AAC1E,wBAAgB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAIlF;AAED,qCAAqC;AACrC,MAAM,WAAW,iBAAiB;IAChC,sFAAsF;IACtF,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,WAAW,GAAG,CAAC,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,GAAG,SAAS,CAAC;IAC1F,uEAAuE;IACvE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACxC,kFAAkF;IAClF,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAClC,2FAA2F;IAC3F,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,oEAAoE;IACpE,YAAY,CAAC,EAAE,SAAS,WAAW,EAAE,GAAG,SAAS,CAAC;IAClD,qFAAqF;IACrF,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,mGAAmG;IACnG,OAAO,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CAC3C;AAED,uCAAuC;AACvC,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,SAAS,WAAW,EAAE,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;CACvC;AAiBD,kEAAkE;AAClE,wBAAgB,UAAU,CAAC,OAAO,GAAE,iBAAsB,GAAG,UAAU,CAatE;AAED,gFAAgF;AAChF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,sBAAsB,CAQ/G"}

package/dist/server/host-policy.js

@@ -0,0 +1,82 @@
+/**
+ * The policy of a host: one place that builds what a server lets its callers do (roadmap 2.3).
+ *
+ * The three hosts (the MCP dev-tools server, the `server` CLI, the warm server of `mark`) each
+ * built their own expose rule, call rule, time limit and token. `hostPolicy()` builds them from
+ * one set of options, and `procedureServerOptions()` gives them to a `ProcedureServer`.
+ *
+ * - `expose`: the procedures that callers reach. Patterns: an exact key (`git.status`), a prefix
+ *   (`git.*`) or `*`. A tool surface: namespaces and the keys to leave out. Without it: every
+ *   procedure.
+ * - `strictCalls`: a procedure of code that declares no `metadata.calls` calls only exposed
+ *   procedures (a host for an outside caller sets it).
+ * - `timeoutMs`: the time limit of each call from a caller (not of its nested calls).
+ * - `token`, `browser`: the checks of the network transports (`client-server` applies them).
+ */
+import { timeoutInterceptor } from "../procedures/interceptors.js";
+/** The rule of a list of patterns: an exact key (`git.status`), a prefix (`git.*`) or `*`. */
+export function exposePatterns(patterns) {
+    const exact = new Set();
+    const prefixes = [];
+    let all = false;
+    for (const pattern of patterns) {
+        if (pattern === "*")
+            all = true;
+        else if (pattern.endsWith(".*"))
+            prefixes.push(pattern.slice(0, -1));
+        else
+            exact.add(pattern);
+    }
+    return (path) => {
+        if (all)
+            return true;
+        const key = path.join(".");
+        return exact.has(key) || prefixes.some((prefix) => key.startsWith(prefix));
+    };
+}
+/** The rule of a tool surface: the namespaces, less the excluded keys. */
+export function surfaceRule(surface) {
+    const namespaces = new Set(surface.namespaces);
+    const excluded = new Set(surface.exclude ?? []);
+    return (path) => namespaces.has(path[0] ?? "") && !excluded.has(path.join("."));
+}
+function exposeOf(options) {
+    const { expose } = options;
+    const rule = expose === undefined
+        ? undefined
+        : typeof expose === "function"
+            ? expose
+            : Array.isArray(expose)
+                ? exposePatterns(expose)
+                : surfaceRule(expose);
+    const excluded = new Set(options.exclude ?? []);
+    if (excluded.size === 0)
+        return rule;
+    return (path) => !excluded.has(path.join(".")) && (rule ? rule(path) : true);
+}
+/** This function builds the policy of a host from its options. */
+export function hostPolicy(options = {}) {
+    const interceptors = [];
+    if (options.timeoutMs !== undefined && options.timeoutMs > 0) {
+        interceptors.push(timeoutInterceptor({ ms: options.timeoutMs }));
+    }
+    interceptors.push(...(options.interceptors ?? []));
+    return {
+        expose: exposeOf(options),
+        strictCalls: options.strictCalls ?? false,
+        interceptors,
+        token: options.token,
+        browser: options.browser ?? {},
+    };
+}
+/** The options of a `ProcedureServer` that serves a registry under a policy. */
+export function procedureServerOptions(policy, registry) {
+    return {
+        autoRegister: true,
+        ...(registry ? { registry } : {}),
+        ...(policy.expose ? { expose: policy.expose } : {}),
+        strictCalls: policy.strictCalls,
+        ...(policy.interceptors.length > 0 ? { interceptors: policy.interceptors } : {}),
+    };
+}
+//# sourceMappingURL=host-policy.js.map

package/dist/server/host-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-policy.js","sourceRoot":"","sources":["../../src/server/host-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAWnE,8FAA8F;AAC9F,MAAM,UAAU,cAAc,CAAC,QAA2B;IACxD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,GAAG;YAAE,GAAG,GAAG,IAAI,CAAC;aAC3B,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;;YAChE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7E,CAAC,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,WAAW,CAAC,OAAoB;IAC9C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAClF,CAAC;AA6BD,SAAS,QAAQ,CAAC,OAA0B;IAC1C,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC3B,MAAM,IAAI,GACR,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,OAAO,MAAM,KAAK,UAAU;YAC5B,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACrB,CAAC,CAAC,cAAc,CAAC,MAA2B,CAAC;gBAC7C,CAAC,CAAC,WAAW,CAAC,MAAqB,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC/E,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,UAAU,CAAC,OAAO,GAAsB,EAAE;IACxD,MAAM,YAAY,GAAkB,EAAE,CAAC;IACvC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;QAC7D,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC;QACzB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK;QACzC,YAAY;QACZ,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;KAC/B,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,sBAAsB,CAAC,MAAkB,EAAE,QAA4B;IACrF,OAAO;QACL,YAAY,EAAE,IAAI;QAClB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjF,CAAC;AACJ,CAAC"}

package/dist/server/index.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Universal Server
+ *
+ * Protocol-agnostic RPC server architecture.
+ * Mirrors the universal client for symmetrical design.
+ *
+ * Features:
+ * - Protocol-agnostic (HTTP, WebSocket, gRPC via adapters)
+ * - Unified RPC format internally
+ * - Middleware support
+ * - Handler registry with pattern matching
+ * - Graceful shutdown
+ *
+ * @example
+ * ```typescript
+ * import { Server, HttpServerTransport } from "@common/server";
+ *
+ * const server = new Server();
+ *
+ * // Register handlers
+ * server.register(
+ *   { service: "users", operation: "get" },
+ *   async (req) => ({
+ *     id: req.id,
+ *     status: { type: "success", code: 200 },
+ *     payload: { id: req.payload.id, name: "John" },
+ *     metadata: {}
+ *   })
+ * );
+ *
+ * // Add HTTP transport
+ * const httpTransport = new HttpServerTransport(server, { port: 3000 });
+ * await httpTransport.start();
+ * ```
+ */
+export { Server } from "./server.js";
+export type { ServerOptions } from "./server.js";
+export { ProcedureServer, createProcedureServer } from "./procedure-server.js";
+export type { ProcedureServerOptions, StorageConfig } from "./procedure-server.js";
+export { pathToMethod, methodToPath } from "./method.js";
+export { HandlerNotFoundError, ServerError, type ServerRequest, type ServerResponse, type ServerHandler, type ServerMiddleware, type ServerContext, type ServerRunner, type ServerTransport, } from "./types.js";
+export { HttpServerTransport, defaultServerUrlStrategy, rpcServerUrlStrategy, } from "../adapters/http/server/index.js";
+export type { HttpServerTransportOptions, HttpUrlStrategy, } from "../adapters/http/server/index.js";
+export { WebSocketServerTransport } from "../adapters/websocket/server/index.js";
+export type { WebSocketServerTransportOptions, WebSocketAuthHandler, WebSocketConnectionHandler, WebSocketMessage, } from "../adapters/websocket/server/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC/E,YAAY,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,eAAe,GACrB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,0BAA0B,EAC1B,eAAe,GAChB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,YAAY,EACV,+BAA+B,EAC/B,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,uCAAuC,CAAC"}

package/dist/server/index.js

@@ -0,0 +1,42 @@
+/**
+ * Universal Server
+ *
+ * Protocol-agnostic RPC server architecture.
+ * Mirrors the universal client for symmetrical design.
+ *
+ * Features:
+ * - Protocol-agnostic (HTTP, WebSocket, gRPC via adapters)
+ * - Unified RPC format internally
+ * - Middleware support
+ * - Handler registry with pattern matching
+ * - Graceful shutdown
+ *
+ * @example
+ * ```typescript
+ * import { Server, HttpServerTransport } from "@common/server";
+ *
+ * const server = new Server();
+ *
+ * // Register handlers
+ * server.register(
+ *   { service: "users", operation: "get" },
+ *   async (req) => ({
+ *     id: req.id,
+ *     status: { type: "success", code: 200 },
+ *     payload: { id: req.payload.id, name: "John" },
+ *     metadata: {}
+ *   })
+ * );
+ *
+ * // Add HTTP transport
+ * const httpTransport = new HttpServerTransport(server, { port: 3000 });
+ * await httpTransport.start();
+ * ```
+ */
+export { Server } from "./server.js";
+export { ProcedureServer, createProcedureServer } from "./procedure-server.js";
+export { pathToMethod, methodToPath } from "./method.js";
+export { HandlerNotFoundError, ServerError, } from "./types.js";
+export { HttpServerTransport, defaultServerUrlStrategy, rpcServerUrlStrategy, } from "../adapters/http/server/index.js";
+export { WebSocketServerTransport } from "../adapters/websocket/server/index.js";
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE/E,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EACL,oBAAoB,EACpB,WAAW,GAQZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,kCAAkC,CAAC;AAK1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC"}

package/dist/server/method.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The one mapping between a procedure path and a transport method.
+ *
+ * A path `["docker", "compose", "up"]` is the method `{ service: "docker.compose", operation: "up" }`:
+ * the last segment is the operation, and the other segments are the service. Before, some hosts
+ * sent `{ service: "docker", operation: "compose.up" }` and others the form above, and the
+ * server matched methods exactly, so a 3-segment procedure was not found through a warm server
+ * (deep dive architecture review 3.3).
+ *
+ * `methodToPath` splits both the service and the operation on ".", so it reads both forms.
+ */
+import type { Method } from "../client/types.js";
+import type { ProcedurePath } from "../procedures/types.js";
+/**
+ * This function gives the transport method of a procedure path. A path needs at least two
+ * segments, because a method has a service and an operation.
+ */
+export declare function pathToMethod(path: readonly string[]): Method;
+/**
+ * This function gives the procedure path of a transport method. It accepts both encodings:
+ * `{ service: "a.b", operation: "c" }` and `{ service: "a", operation: "b.c" }` give `["a", "b", "c"]`.
+ */
+export declare function methodToPath(method: Pick<Method, "service" | "operation">): ProcedurePath;
+//# sourceMappingURL=method.d.ts.map

package/dist/server/method.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"method.d.ts","sourceRoot":"","sources":["../../src/server/method.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE5D;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAK5D;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,CAAC,GAAG,aAAa,CAEzF"}

package/dist/server/method.js

@@ -0,0 +1,29 @@
+/**
+ * The one mapping between a procedure path and a transport method.
+ *
+ * A path `["docker", "compose", "up"]` is the method `{ service: "docker.compose", operation: "up" }`:
+ * the last segment is the operation, and the other segments are the service. Before, some hosts
+ * sent `{ service: "docker", operation: "compose.up" }` and others the form above, and the
+ * server matched methods exactly, so a 3-segment procedure was not found through a warm server
+ * (deep dive architecture review 3.3).
+ *
+ * `methodToPath` splits both the service and the operation on ".", so it reads both forms.
+ */
+/**
+ * This function gives the transport method of a procedure path. A path needs at least two
+ * segments, because a method has a service and an operation.
+ */
+export function pathToMethod(path) {
+    if (path.length < 2) {
+        throw new Error(`Invalid procedure path (it needs two segments or more): ${path.join(".")}`);
+    }
+    return { service: path.slice(0, -1).join("."), operation: path[path.length - 1] };
+}
+/**
+ * This function gives the procedure path of a transport method. It accepts both encodings:
+ * `{ service: "a.b", operation: "c" }` and `{ service: "a", operation: "b.c" }` give `["a", "b", "c"]`.
+ */
+export function methodToPath(method) {
+    return [...method.service.split("."), ...method.operation.split(".")].filter((segment) => segment !== "");
+}
+//# sourceMappingURL=method.js.map

package/dist/server/method.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"method.js","sourceRoot":"","sources":["../../src/server/method.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAuB;IAClD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,2DAA2D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,EAAE,CAAC;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAA6C;IACxE,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;AAC5G,CAAC"}

package/dist/server/procedure-server.d.ts

@@ -0,0 +1,212 @@
+/**
+ * Procedure Server
+ *
+ * Server implementation with procedure auto-registration and repository pattern.
+ * Integrates with ProcedureRegistry and CollectionStorage backends.
+ */
+import { Server, type ServerOptions } from "./server.js";
+import type { Method, ServerHandler, ServerResponse } from "./types.js";
+import type { AnyProcedure, ProcedurePath, RepositoryProvider, ProcedureModule } from "../procedures/types.js";
+import { ProcedureRegistry } from "../procedures/registry.js";
+import { type Interceptor } from "../procedures/invoke.js";
+import type { CollectionStorage } from "../procedures/collection/storage.js";
+/**
+ * Storage configuration for a collection.
+ */
+export interface StorageConfig<T = unknown> {
+    /** Storage backend instance */
+    storage: CollectionStorage<T>;
+    /** Collection name (for mapping) */
+    name: string;
+}
+/**
+ * Options for ProcedureServer.
+ */
+export interface ProcedureServerOptions extends ServerOptions {
+    /** Procedure registry to use (defaults to global) */
+    registry?: ProcedureRegistry;
+    /** Whether to auto-register all procedures from registry */
+    autoRegister?: boolean;
+    /** Collections to configure with storage backends */
+    collections?: Record<string, CollectionStorage<unknown>>;
+    /**
+     * The procedures that the callers of this server can reach. `registerFromRegistry()` registers
+     * only these procedures. A data-driven procedure (control flow, `eval`, a procedure that
+     * `procedure.define` made) can call only these procedures too, because its caller chooses
+     * what it calls. A procedure of code calls the procedures of its `metadata.calls`
+     * (`docker.run` declares `shell.run`) and the exposed ones. Without this rule, the server
+     * exposes every procedure. See `procedures/policy.ts` (deep dive MCP-3).
+     */
+    expose?: ((path: ProcedurePath) => boolean) | undefined;
+    /**
+     * True: a procedure of code without `metadata.calls` can call only the exposed procedures.
+     * A server for an outside caller (the MCP server of the dev tools) sets it.
+     */
+    strictCalls?: boolean | undefined;
+    /**
+     * The interceptors of each request and its nested calls, the outermost first: policy,
+     * tracing, timeouts, metrics (see `procedures/interceptors.ts`).
+     */
+    interceptors?: readonly Interceptor[] | undefined;
+}
+/**
+ * The error response of a failed invocation. An invocation error keeps its code
+ * (VALIDATION_ERROR, NOT_EXPOSED, ABORTED and so on). An error of the handler is HANDLER_ERROR.
+ */
+export declare function errorResponse(id: string, error: unknown): ServerResponse<unknown>;
+/**
+ * Server with procedure auto-registration and repository pattern.
+ *
+ * Features:
+ * - Auto-registers handlers from procedure definitions
+ * - Repository pattern for storage backend injection
+ * - Collection storage configuration per-collection
+ * - Integrates with ProcedureRegistry
+ *
+ * @example
+ * ```typescript
+ * const server = new ProcedureServer({
+ *   collections: {
+ *     users: new ApiStorage(remoteClient, { service: 'users' }),
+ *     cache: new InMemoryStorage(),
+ *   }
+ * });
+ *
+ * // Register collection procedures
+ * server.registerCollectionProcedures('users');
+ *
+ * // Or auto-register all from registry
+ * server.registerFromRegistry();
+ *
+ * await server.start();
+ * ```
+ */
+export declare class ProcedureServer extends Server implements RepositoryProvider {
+    private readonly procedureRegistry;
+    private readonly storages;
+    /** The procedures that `registerProcedure` pinned, by key */
+    private readonly pinnedProcedures;
+    /**
+     * True after `registerFromRegistry()`: the server serves each procedure of the registry that
+     * has a handler and passes the expose rule, looked up when the request arrives (deep dive
+     * TRN-13). Before, the server copied the registry at startup: a later registration was not
+     * found, and an override or an unregistration was not seen.
+     */
+    private servesRegistry;
+    private readonly expose;
+    private readonly strictCalls;
+    private readonly interceptors;
+    constructor(options?: ProcedureServerOptions);
+    /**
+     * Get storage for a collection.
+     *
+     * @param collection - Collection name
+     * @returns Storage instance
+     * @throws Error if collection not configured
+     */
+    getStorage<T>(collection: string): CollectionStorage<T>;
+    /**
+     * Check if a collection is configured.
+     *
+     * @param collection - Collection name
+     */
+    hasCollection(collection: string): boolean;
+    /**
+     * Configure storage for a collection.
+     *
+     * @param name - Collection name
+     * @param storage - Storage backend
+     * @returns this (for chaining)
+     */
+    useStorage<T>(name: string, storage: CollectionStorage<T>): this;
+    /**
+     * Configure multiple storages at once.
+     *
+     * @param storages - Map of collection names to storage backends
+     * @returns this (for chaining)
+     */
+    useStorages(storages: Record<string, CollectionStorage<unknown>>): this;
+    /**
+     * Get all configured collection names.
+     */
+    getCollectionNames(): string[];
+    /**
+     * Register a procedure as a server handler. The server keeps this procedure object. A
+     * procedure of the registry at the same path comes first when the server serves the registry.
+     *
+     * @param procedure - Procedure definition
+     */
+    registerProcedure(procedure: AnyProcedure): void;
+    /**
+     * Register multiple procedures.
+     *
+     * @param procedures - Array of procedures
+     */
+    registerProcedures(procedures: AnyProcedure[]): void;
+    /**
+     * Register a procedure module.
+     *
+     * @param module - Module with procedures array
+     */
+    registerModule(module: ProcedureModule): void;
+    /**
+     * Serve the procedures of the registry. The server looks up each request in the registry when
+     * the request arrives, so a later registration, an override or an unregistration takes effect
+     * at once. A procedure without a handler (a stub synced from storage, BUGS-2026-07 H14/H28) or
+     * outside the expose rule is not served.
+     */
+    registerFromRegistry(): void;
+    /**
+     * The procedure that answers a method, or undefined. The registry comes first (when the server
+     * serves it), then the pinned procedures.
+     */
+    private resolveProcedure;
+    /**
+     * The handlers that `register()` added come first (exact or pattern matches). Then the server
+     * looks up the procedure of the method.
+     */
+    protected findHandler(method: Method): ServerHandler | null;
+    /** Run a procedure for a request. */
+    private invoke;
+    /**
+     * Register collection procedures for a specific collection.
+     * Creates standard CRUD procedures using the configured storage.
+     *
+     * @param collectionName - Collection name
+     */
+    registerCollectionProcedures(collectionName: string): void;
+    /** The paths that the server serves now. */
+    private servedKeys;
+    /**
+     * Get count of the procedures that the server serves now.
+     */
+    get procedureCount(): number;
+    /**
+     * Check if the server serves a procedure now.
+     *
+     * @param path - Procedure path
+     */
+    /**
+     * The registry that this server serves. A face of the server (the MCP transport) lists its
+     * tools from it: with an explicit registry (`createRegistry()`), the global registry is not the
+     * server's.
+     */
+    getRegistry(): ProcedureRegistry;
+    hasProcedure(path: ProcedurePath): boolean;
+    /**
+     * Close all storage backends.
+     */
+    closeStorages(): Promise<void>;
+    /**
+     * Stop server and close storages.
+     */
+    stop(): Promise<void>;
+}
+/**
+ * Create a procedure server with common configuration.
+ *
+ * @param options - Server options
+ * @returns Configured ProcedureServer
+ */
+export declare function createProcedureServer(options?: ProcedureServerOptions): ProcedureServer;
+//# sourceMappingURL=procedure-server.d.ts.map

package/dist/server/procedure-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"procedure-server.d.ts","sourceRoot":"","sources":["../../src/server/procedure-server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,EAAE,aAAa,EAAiB,cAAc,EAAE,MAAM,YAAY,CAAC;AAEvF,OAAO,KAAK,EACV,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,eAAe,EAChB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,iBAAiB,EAAsB,MAAM,2BAA2B,CAAC;AAElF,OAAO,EAAoC,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC7F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAM7E;;GAEG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,OAAO;IACxC,+BAA+B;IAC/B,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC9B,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,sBAAuB,SAAQ,aAAa;IAC3D,qDAAqD;IACrD,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAE7B,4DAA4D;IAC5D,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IAEzD;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,GAAG,SAAS,CAAC;IAExD;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAElC;;;OAGG;IACH,YAAY,CAAC,EAAE,SAAS,WAAW,EAAE,GAAG,SAAS,CAAC;CACnD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAcjF;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,eAAgB,SAAQ,MAAO,YAAW,kBAAkB;IACvE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;IACtD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiD;IAC1E,6DAA6D;IAC7D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmC;IACpE;;;;;OAKG;IACH,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiD;IACxE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAU;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IAEtD,YAAY,OAAO,GAAE,sBAA2B,EAmB/C;IAMD;;;;;;OAMG;IACH,UAAU,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAMtD;IAED;;;;OAIG;IACH,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAEzC;IAMD;;;;;;OAMG;IACH,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,IAAI,CAG/D;IAED;;;;;OAKG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAKtE;IAED;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE,CAE7B;IAMD;;;;;OAKG;IACH,iBAAiB,CAAC,SAAS,EAAE,YAAY,GAAG,IAAI,CAQ/C;IAED;;;;OAIG;IACH,kBAAkB,CAAC,UAAU,EAAE,YAAY,EAAE,GAAG,IAAI,CAInD;IAED;;;;OAIG;IACH,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAE5C;IAED;;;;;OAKG;IACH,oBAAoB,IAAI,IAAI,CAE3B;IAED;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAWxB;;;OAGG;IACH,UAAmB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAKnE;IAED,qCAAqC;YACvB,MAAM;IAsBpB;;;;;OAKG;IACH,4BAA4B,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAUzD;IAMD,4CAA4C;IAC5C,OAAO,CAAC,UAAU;IAYlB;;OAEG;IACH,IAAI,cAAc,IAAI,MAAM,CAE3B;IAED;;;;OAIG;IACH;;;;OAIG;IACH,WAAW,IAAI,iBAAiB,CAE/B;IAED,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAEzC;IAED;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAKnC;IAED;;OAEG;IACY,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAGnC;CACF;AAMD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,sBAA2B,GACnC,eAAe,CAEjB"}