@remnic/core 9.3.768 → 9.3.770

package/dist/access-http.d.ts

@@ -1,4 +1,4 @@
-import { IncomingMessage } from 'node:http';
+import { IncomingMessage, ServerResponse } from 'node:http';
 import { F as EngramAccessService } from './access-service-CdW6B2qQ.js';
 import { ResolvedIdentity } from './adapters/types.js';
 import { AdapterRegistry } from './adapters/registry.js';
@@ -109,6 +109,24 @@ interface EngramAccessHttpServerOptions {
     authTokens?: string[];
     /** Dynamic token loader — called on each auth check so new/revoked tokens take effect without restart. */
     authTokensGetter?: () => string[];
+    /**
+     * Dynamic token-ENTRY loader ({token, connector} pairs from one coherent
+     * snapshot). Preferred over `authTokensGetter` when a `tokenPathPolicy`
+     * is set: the connector used for the policy decision comes from the SAME
+     * entry that validated, so identity can never lag validation.
+     */
+    authTokenEntriesGetter?: () => ReadonlyArray<{
+        token: string;
+        connector?: string;
+    }>;
+    /**
+     * Optional per-request scope policy for tokens sourced from
+     * `authTokenEntriesGetter`. Return false to deny the (validated) token
+     * for this pathname. Static `authToken`/`authTokens` (operator-supplied)
+     * bypass the policy. Entries whose connector is missing FAIL CLOSED when
+     * a policy is configured.
+     */
+    tokenPathPolicy?: (connector: string, pathname: string | undefined) => boolean;
     principal?: string;
     maxBodyBytes?: number;
     adminConsoleEnabled?: boolean;
@@ -133,6 +151,26 @@ interface EngramAccessHttpServerOptions {
      * existing health behavior.
      */
     readiness?: () => AccessHttpReadinessState;
+    /**
+     * When set, every 401 response includes
+     * `WWW-Authenticate: Bearer resource_metadata="<value>"` so MCP clients
+     * can discover the OAuth 2.0 protected-resource metadata document
+     * (RFC 9728). Must be an absolute http(s) URL; constructor throws on
+     * anything else. Unset → bare `Bearer`.
+     */
+    resourceMetadataUrl?: string;
+    /**
+     * Optional pre-auth request handler (e.g. OAuth facade mounted by
+     * `@remnic/server`). Runs after the admin-console handler and BEFORE
+     * bearer authorization. Return true if the request was fully handled
+     * (response ended). `ctx.authorized` reports whether the request
+     * carries a valid operator bearer token, so the handler can gate
+     * operator-only endpoints without owning token validation.
+     * Errors thrown by the handler flow into the existing error handling.
+     */
+    externalRequestHandler?: (req: IncomingMessage, res: ServerResponse, ctx: {
+        authorized: boolean;
+    }) => Promise<boolean>;
 }
 interface EngramAccessHttpServerStatus {
     running: boolean;
@@ -191,6 +229,8 @@ declare class EngramAccessHttpServer {
     private readonly authToken?;
     private readonly authTokens;
     private readonly authTokensGetter?;
+    private readonly authTokenEntriesGetter?;
+    private readonly tokenPathPolicy?;
     private readonly authenticatedPrincipal?;
     private readonly maxBodyBytes;
     private readonly adminConsoleEnabled;
@@ -200,6 +240,8 @@ declare class EngramAccessHttpServer {
     private readonly trustPrincipalHeader;
     private readonly adapterRegistry;
     private readonly readiness;
+    private readonly resourceMetadataUrl?;
+    private readonly externalRequestHandler?;
     private readonly writeRequestTimestamps;
     private readonly mcpServer;
     private server;
@@ -297,6 +339,14 @@ declare class EngramAccessHttpServer {
     private readRequiredNumberHeader;
     private parseOptionalBooleanHeader;
     private readValidatedBody;
+    /**
+     * Build the WWW-Authenticate challenge string for 401 responses.
+     * When `resourceMetadataUrl` is configured, includes the RFC 9728
+     * `resource_metadata` parameter so MCP clients (e.g. ChatGPT) can
+     * discover the OAuth 2.0 protected-resource metadata document.
+     * Otherwise the bare `Bearer` challenge is returned (unchanged).
+     */
+    private bearerChallenge;
     private isAuthorized;
     private timingSafeStringEqual;
     private encodeSecret;

package/dist/access-http.js

@@ -1,6 +1,6 @@
 import {
   EngramAccessHttpServer
-} from "./chunk-J3UJJZKI.js";
+} from "./chunk-TGROC2UP.js";
 import "./chunk-7WV3F5DQ.js";
 import "./chunk-SEDEKFYQ.js";
 import "./chunk-JBPKEARU.js";
@@ -9,19 +9,20 @@ import "./chunk-J64TK33U.js";
 import "./chunk-RSUYKGGZ.js";
 import "./chunk-42NQ7AVG.js";
 import "./chunk-7RXCMVFQ.js";
-import "./chunk-TVLN5EZZ.js";
+import "./chunk-OP43P53G.js";
 import "./chunk-D24OXEPB.js";
-import "./chunk-4JG55YV3.js";
-import "./chunk-GLERZDM7.js";
-import "./chunk-ZQNCHPTZ.js";
+import "./chunk-SRSPVFSJ.js";
+import "./chunk-2MR3MFQB.js";
+import "./chunk-52TEPNL7.js";
 import "./chunk-YF6FMLBT.js";
+import "./chunk-ZQNCHPTZ.js";
 import "./chunk-EEKDRAWX.js";
 import "./chunk-DJECGBBM.js";
 import "./chunk-35NN3ZFA.js";
+import "./chunk-FTYDWKO6.js";
 import "./chunk-T4WDJPEZ.js";
-import "./chunk-2MR3MFQB.js";
-import "./chunk-MSGPLITO.js";
-import "./chunk-OAREUC7N.js";
+import "./chunk-ZT34X56N.js";
+import "./chunk-EWGMA5W5.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-M5QKGHCR.js";
@@ -38,18 +39,18 @@ import "./chunk-2KK5WNQB.js";
 import "./chunk-SOBJ6NEY.js";
 import "./chunk-6MMONPHM.js";
 import "./chunk-BAVVI5GP.js";
-import "./chunk-CKNAVW34.js";
-import "./chunk-4HYFKIGH.js";
+import "./chunk-7OSULYN2.js";
+import "./chunk-PSNMICC2.js";
+import "./chunk-K2I3AWBR.js";
 import "./chunk-DMKMQTBH.js";
 import "./chunk-CYEPCZN5.js";
 import "./chunk-XG4NBBRW.js";
 import "./chunk-ZZMRXJFY.js";
-import "./chunk-HM6UJPPO.js";
-import "./chunk-K2I3AWBR.js";
 import "./chunk-AER6MT24.js";
+import "./chunk-HM6UJPPO.js";
 import "./chunk-CINZGPSJ.js";
 import "./chunk-EGGE52UU.js";
-import "./chunk-IVFIYAIP.js";
+import "./chunk-QKUWPSU3.js";
 import "./chunk-DCWIQFNA.js";
 import "./chunk-XBZQRZ6G.js";
 import "./chunk-KCQA46NR.js";
@@ -64,26 +65,27 @@ import "./chunk-TQT3USCG.js";
 import "./chunk-EI6V5UXY.js";
 import "./chunk-PNLCEFE4.js";
 import "./chunk-O75CRYGF.js";
-import "./chunk-K5LLP4CY.js";
 import "./chunk-QDW3E4RD.js";
+import "./chunk-K5LLP4CY.js";
 import "./chunk-3ONXXHQO.js";
 import "./chunk-ODPLEWB6.js";
+import "./chunk-ZY2MNJR6.js";
 import "./chunk-EHQ5HO5T.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-DEUNUKTD.js";
-import "./chunk-SQNED75R.js";
-import "./chunk-R3K4CXPR.js";
-import "./chunk-DTTVX6EO.js";
-import "./chunk-M7XQSUBB.js";
+import "./chunk-KYC3RLYJ.js";
+import "./chunk-3JOFWTQD.js";
+import "./chunk-STN5KMSS.js";
 import "./chunk-L2B3EE7B.js";
+import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
+import "./chunk-SVOZFLIQ.js";
 import "./chunk-LTJAMRGI.js";
 import "./chunk-TKZ3AL5V.js";
 import "./chunk-6CIAGZ6X.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-DQC3ZZYM.js";
-import "./chunk-SVOZFLIQ.js";
 import "./chunk-JS2HKKOK.js";
 import "./chunk-AWJ2FHCF.js";
 import "./chunk-42JKGUFJ.js";
@@ -95,30 +97,15 @@ import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-YTU7WKYN.js";
 import "./chunk-AAD2ZS6P.js";
+import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
 import "./chunk-W5H6ZRPT.js";
-import "./chunk-G7D6GZ5J.js";
 import "./chunk-VUA4S7P6.js";
 import "./chunk-IQVQJJL7.js";
 import "./chunk-L2EXJQJP.js";
 import "./chunk-VL7DP3OW.js";
 import "./chunk-RGMVMVMF.js";
 import "./chunk-N7RWREIQ.js";
-import "./chunk-ZY2MNJR6.js";
-import "./chunk-PE6XR4GG.js";
-import "./chunk-U3PN77QT.js";
-import "./chunk-VSF7AAGE.js";
-import "./chunk-OEHCMALU.js";
-import "./chunk-PHK3HARR.js";
-import "./chunk-5GKPFL3S.js";
-import "./chunk-4DJQYKMN.js";
-import "./chunk-EYIEWJNI.js";
-import "./chunk-JUC24CTX.js";
-import "./chunk-6MKAMLQL.js";
-import "./chunk-JAKIDQB2.js";
-import "./chunk-TBBDFYXW.js";
-import "./chunk-ZBJMUXZH.js";
-import "./chunk-NU3CSQ4H.js";
 import "./chunk-FLVL4L3L.js";
 import "./chunk-WEHSQBFR.js";
 import "./chunk-437S3G37.js";
@@ -129,6 +116,16 @@ import "./chunk-FP2373TW.js";
 import "./chunk-Z2YFLXHU.js";
 import "./chunk-I4WBNM3M.js";
 import "./chunk-SOAU2OE2.js";
+import "./chunk-PE6XR4GG.js";
+import "./chunk-U3PN77QT.js";
+import "./chunk-VSF7AAGE.js";
+import "./chunk-OEHCMALU.js";
+import "./chunk-PHK3HARR.js";
+import "./chunk-5GKPFL3S.js";
+import "./chunk-4DJQYKMN.js";
+import "./chunk-EYIEWJNI.js";
+import "./chunk-JUC24CTX.js";
+import "./chunk-NU3CSQ4H.js";
 import "./chunk-X64YLC24.js";
 import "./chunk-UI3NYK34.js";
 import "./chunk-GCGJW34D.js";
@@ -136,13 +133,18 @@ import "./chunk-J2HSAU72.js";
 import "./chunk-A6XUJE5D.js";
 import "./chunk-P7FMDTKL.js";
 import "./chunk-VS2IYZRU.js";
+import "./chunk-6MKAMLQL.js";
+import "./chunk-JAKIDQB2.js";
+import "./chunk-TBBDFYXW.js";
+import "./chunk-ZBJMUXZH.js";
+import "./chunk-VFUEZZBS.js";
 import "./chunk-PVGDJXVK.js";
 import "./chunk-A2IYSXDQ.js";
 import "./chunk-LPSF4OQH.js";
 import "./chunk-TVVEYCNW.js";
 import "./chunk-RFYAYKTD.js";
 import "./chunk-LBLXEFWK.js";
-import "./chunk-VFUEZZBS.js";
+import "./chunk-RANHFI3P.js";
 import "./chunk-PZ5AY32C.js";
 export {
   EngramAccessHttpServer

package/dist/access-identity-continuity-surface.js

@@ -1,6 +1,6 @@
 import {
   AccessIdentityContinuitySurface
-} from "./chunk-OAREUC7N.js";
+} from "./chunk-EWGMA5W5.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-M5QKGHCR.js";
@@ -17,18 +17,18 @@ import "./chunk-2KK5WNQB.js";
 import "./chunk-SOBJ6NEY.js";
 import "./chunk-6MMONPHM.js";
 import "./chunk-BAVVI5GP.js";
-import "./chunk-CKNAVW34.js";
-import "./chunk-4HYFKIGH.js";
+import "./chunk-7OSULYN2.js";
+import "./chunk-PSNMICC2.js";
+import "./chunk-K2I3AWBR.js";
 import "./chunk-DMKMQTBH.js";
 import "./chunk-CYEPCZN5.js";
 import "./chunk-XG4NBBRW.js";
 import "./chunk-ZZMRXJFY.js";
-import "./chunk-HM6UJPPO.js";
-import "./chunk-K2I3AWBR.js";
 import "./chunk-AER6MT24.js";
+import "./chunk-HM6UJPPO.js";
 import "./chunk-CINZGPSJ.js";
 import "./chunk-EGGE52UU.js";
-import "./chunk-IVFIYAIP.js";
+import "./chunk-QKUWPSU3.js";
 import "./chunk-DCWIQFNA.js";
 import "./chunk-XBZQRZ6G.js";
 import "./chunk-KCQA46NR.js";
@@ -43,26 +43,27 @@ import "./chunk-TQT3USCG.js";
 import "./chunk-EI6V5UXY.js";
 import "./chunk-PNLCEFE4.js";
 import "./chunk-O75CRYGF.js";
-import "./chunk-K5LLP4CY.js";
 import "./chunk-QDW3E4RD.js";
+import "./chunk-K5LLP4CY.js";
 import "./chunk-3ONXXHQO.js";
 import "./chunk-ODPLEWB6.js";
+import "./chunk-ZY2MNJR6.js";
 import "./chunk-EHQ5HO5T.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-DEUNUKTD.js";
-import "./chunk-SQNED75R.js";
-import "./chunk-R3K4CXPR.js";
-import "./chunk-DTTVX6EO.js";
-import "./chunk-M7XQSUBB.js";
+import "./chunk-KYC3RLYJ.js";
+import "./chunk-3JOFWTQD.js";
+import "./chunk-STN5KMSS.js";
 import "./chunk-L2B3EE7B.js";
+import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
+import "./chunk-SVOZFLIQ.js";
 import "./chunk-LTJAMRGI.js";
 import "./chunk-TKZ3AL5V.js";
 import "./chunk-6CIAGZ6X.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-DQC3ZZYM.js";
-import "./chunk-SVOZFLIQ.js";
 import "./chunk-JS2HKKOK.js";
 import "./chunk-AWJ2FHCF.js";
 import "./chunk-42JKGUFJ.js";
@@ -74,30 +75,15 @@ import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-YTU7WKYN.js";
 import "./chunk-AAD2ZS6P.js";
+import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
 import "./chunk-W5H6ZRPT.js";
-import "./chunk-G7D6GZ5J.js";
 import "./chunk-VUA4S7P6.js";
 import "./chunk-IQVQJJL7.js";
 import "./chunk-L2EXJQJP.js";
 import "./chunk-VL7DP3OW.js";
 import "./chunk-RGMVMVMF.js";
 import "./chunk-N7RWREIQ.js";
-import "./chunk-ZY2MNJR6.js";
-import "./chunk-PE6XR4GG.js";
-import "./chunk-U3PN77QT.js";
-import "./chunk-VSF7AAGE.js";
-import "./chunk-OEHCMALU.js";
-import "./chunk-PHK3HARR.js";
-import "./chunk-5GKPFL3S.js";
-import "./chunk-4DJQYKMN.js";
-import "./chunk-EYIEWJNI.js";
-import "./chunk-JUC24CTX.js";
-import "./chunk-6MKAMLQL.js";
-import "./chunk-JAKIDQB2.js";
-import "./chunk-TBBDFYXW.js";
-import "./chunk-ZBJMUXZH.js";
-import "./chunk-NU3CSQ4H.js";
 import "./chunk-FLVL4L3L.js";
 import "./chunk-WEHSQBFR.js";
 import "./chunk-437S3G37.js";
@@ -108,6 +94,16 @@ import "./chunk-FP2373TW.js";
 import "./chunk-Z2YFLXHU.js";
 import "./chunk-I4WBNM3M.js";
 import "./chunk-SOAU2OE2.js";
+import "./chunk-PE6XR4GG.js";
+import "./chunk-U3PN77QT.js";
+import "./chunk-VSF7AAGE.js";
+import "./chunk-OEHCMALU.js";
+import "./chunk-PHK3HARR.js";
+import "./chunk-5GKPFL3S.js";
+import "./chunk-4DJQYKMN.js";
+import "./chunk-EYIEWJNI.js";
+import "./chunk-JUC24CTX.js";
+import "./chunk-NU3CSQ4H.js";
 import "./chunk-X64YLC24.js";
 import "./chunk-UI3NYK34.js";
 import "./chunk-GCGJW34D.js";
@@ -115,13 +111,17 @@ import "./chunk-J2HSAU72.js";
 import "./chunk-A6XUJE5D.js";
 import "./chunk-P7FMDTKL.js";
 import "./chunk-VS2IYZRU.js";
+import "./chunk-6MKAMLQL.js";
+import "./chunk-JAKIDQB2.js";
+import "./chunk-TBBDFYXW.js";
+import "./chunk-ZBJMUXZH.js";
+import "./chunk-VFUEZZBS.js";
 import "./chunk-PVGDJXVK.js";
 import "./chunk-A2IYSXDQ.js";
 import "./chunk-LPSF4OQH.js";
 import "./chunk-TVVEYCNW.js";
 import "./chunk-RFYAYKTD.js";
 import "./chunk-LBLXEFWK.js";
-import "./chunk-VFUEZZBS.js";
 import "./chunk-PZ5AY32C.js";
 export {
   AccessIdentityContinuitySurface

package/dist/access-lcm-surface.js

@@ -1,6 +1,6 @@
 import {
   AccessLcmSurface
-} from "./chunk-OAREUC7N.js";
+} from "./chunk-EWGMA5W5.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-M5QKGHCR.js";
@@ -17,18 +17,18 @@ import "./chunk-2KK5WNQB.js";
 import "./chunk-SOBJ6NEY.js";
 import "./chunk-6MMONPHM.js";
 import "./chunk-BAVVI5GP.js";
-import "./chunk-CKNAVW34.js";
-import "./chunk-4HYFKIGH.js";
+import "./chunk-7OSULYN2.js";
+import "./chunk-PSNMICC2.js";
+import "./chunk-K2I3AWBR.js";
 import "./chunk-DMKMQTBH.js";
 import "./chunk-CYEPCZN5.js";
 import "./chunk-XG4NBBRW.js";
 import "./chunk-ZZMRXJFY.js";
-import "./chunk-HM6UJPPO.js";
-import "./chunk-K2I3AWBR.js";
 import "./chunk-AER6MT24.js";
+import "./chunk-HM6UJPPO.js";
 import "./chunk-CINZGPSJ.js";
 import "./chunk-EGGE52UU.js";
-import "./chunk-IVFIYAIP.js";
+import "./chunk-QKUWPSU3.js";
 import "./chunk-DCWIQFNA.js";
 import "./chunk-XBZQRZ6G.js";
 import "./chunk-KCQA46NR.js";
@@ -43,26 +43,27 @@ import "./chunk-TQT3USCG.js";
 import "./chunk-EI6V5UXY.js";
 import "./chunk-PNLCEFE4.js";
 import "./chunk-O75CRYGF.js";
-import "./chunk-K5LLP4CY.js";
 import "./chunk-QDW3E4RD.js";
+import "./chunk-K5LLP4CY.js";
 import "./chunk-3ONXXHQO.js";
 import "./chunk-ODPLEWB6.js";
+import "./chunk-ZY2MNJR6.js";
 import "./chunk-EHQ5HO5T.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-DEUNUKTD.js";
-import "./chunk-SQNED75R.js";
-import "./chunk-R3K4CXPR.js";
-import "./chunk-DTTVX6EO.js";
-import "./chunk-M7XQSUBB.js";
+import "./chunk-KYC3RLYJ.js";
+import "./chunk-3JOFWTQD.js";
+import "./chunk-STN5KMSS.js";
 import "./chunk-L2B3EE7B.js";
+import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
+import "./chunk-SVOZFLIQ.js";
 import "./chunk-LTJAMRGI.js";
 import "./chunk-TKZ3AL5V.js";
 import "./chunk-6CIAGZ6X.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-DQC3ZZYM.js";
-import "./chunk-SVOZFLIQ.js";
 import "./chunk-JS2HKKOK.js";
 import "./chunk-AWJ2FHCF.js";
 import "./chunk-42JKGUFJ.js";
@@ -74,30 +75,15 @@ import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-YTU7WKYN.js";
 import "./chunk-AAD2ZS6P.js";
+import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
 import "./chunk-W5H6ZRPT.js";
-import "./chunk-G7D6GZ5J.js";
 import "./chunk-VUA4S7P6.js";
 import "./chunk-IQVQJJL7.js";
 import "./chunk-L2EXJQJP.js";
 import "./chunk-VL7DP3OW.js";
 import "./chunk-RGMVMVMF.js";
 import "./chunk-N7RWREIQ.js";
-import "./chunk-ZY2MNJR6.js";
-import "./chunk-PE6XR4GG.js";
-import "./chunk-U3PN77QT.js";
-import "./chunk-VSF7AAGE.js";
-import "./chunk-OEHCMALU.js";
-import "./chunk-PHK3HARR.js";
-import "./chunk-5GKPFL3S.js";
-import "./chunk-4DJQYKMN.js";
-import "./chunk-EYIEWJNI.js";
-import "./chunk-JUC24CTX.js";
-import "./chunk-6MKAMLQL.js";
-import "./chunk-JAKIDQB2.js";
-import "./chunk-TBBDFYXW.js";
-import "./chunk-ZBJMUXZH.js";
-import "./chunk-NU3CSQ4H.js";
 import "./chunk-FLVL4L3L.js";
 import "./chunk-WEHSQBFR.js";
 import "./chunk-437S3G37.js";
@@ -108,6 +94,16 @@ import "./chunk-FP2373TW.js";
 import "./chunk-Z2YFLXHU.js";
 import "./chunk-I4WBNM3M.js";
 import "./chunk-SOAU2OE2.js";
+import "./chunk-PE6XR4GG.js";
+import "./chunk-U3PN77QT.js";
+import "./chunk-VSF7AAGE.js";
+import "./chunk-OEHCMALU.js";
+import "./chunk-PHK3HARR.js";
+import "./chunk-5GKPFL3S.js";
+import "./chunk-4DJQYKMN.js";
+import "./chunk-EYIEWJNI.js";
+import "./chunk-JUC24CTX.js";
+import "./chunk-NU3CSQ4H.js";
 import "./chunk-X64YLC24.js";
 import "./chunk-UI3NYK34.js";
 import "./chunk-GCGJW34D.js";
@@ -115,13 +111,17 @@ import "./chunk-J2HSAU72.js";
 import "./chunk-A6XUJE5D.js";
 import "./chunk-P7FMDTKL.js";
 import "./chunk-VS2IYZRU.js";
+import "./chunk-6MKAMLQL.js";
+import "./chunk-JAKIDQB2.js";
+import "./chunk-TBBDFYXW.js";
+import "./chunk-ZBJMUXZH.js";
+import "./chunk-VFUEZZBS.js";
 import "./chunk-PVGDJXVK.js";
 import "./chunk-A2IYSXDQ.js";
 import "./chunk-LPSF4OQH.js";
 import "./chunk-TVVEYCNW.js";
 import "./chunk-RFYAYKTD.js";
 import "./chunk-LBLXEFWK.js";
-import "./chunk-VFUEZZBS.js";
 import "./chunk-PZ5AY32C.js";
 export {
   AccessLcmSurface

package/dist/access-mcp.d.ts

@@ -113,6 +113,12 @@ type McpRequestOptions = {
      */
     enforceWriteQuota?: () => void | Promise<void>;
 };
+/**
+ * MCP protocol versions this server understands, ordered newest → oldest.
+ * Exported so the HTTP transport can validate the `MCP-Protocol-Version`
+ * header and reject requests advertising an unknown version.
+ */
+declare const MCP_SUPPORTED_PROTOCOL_VERSIONS: readonly string[];
 declare class EngramMcpServer {
     private readonly service;
     private buffer;
@@ -226,4 +232,4 @@ declare class EngramMcpServer {
     private callTool;
 }
 
-export { EngramMcpServer };
+export { EngramMcpServer, MCP_SUPPORTED_PROTOCOL_VERSIONS };