@sentropic/h2a-cli 0.75.0 → 0.79.0

package/dist/runtime/mcp-http/app.js

@@ -1,162 +0,0 @@
-/**
- * EVO-12 hosted MCP HTTP app (Hono) — the self-AS OAuth surface + the
- * bearer-gated Streamable-HTTP MCP endpoint, exposing only the read-only tools.
- * `createHostedApp` is the testable core; the env-driven entrypoint is below.
- */
-import { randomUUID } from "node:crypto";
-import { StreamableHTTPTransport } from "@hono/mcp";
-import { bearerAuth } from "@hono/mcp/auth";
-import { Hono } from "hono";
-import { buildHostedMcpServer } from "./hosted-mcp-server.js";
-import { buildBrokerRoutes } from "./oauth/broker-routes.js";
-import { H2A_HOSTED_OAUTH_SCOPE } from "./oauth/config.js";
-import { buildOAuthRoutes } from "./oauth/hono-oauth-router.js";
-import { rootForSub } from "./oauth/tenancy.js";
-export function createHostedApp(deps) {
-    const app = new Hono();
-    const wwwAuthenticateHeader = `Bearer error="Unauthorized", error_description="Unauthorized", resource_metadata="${deps.oauthConfig.resourceMetadataUrl}"`;
-    app.get("/healthz", (c) => c.json({ ok: true }));
-    app.get("/readyz", (c) => c.json({ ok: true }));
-    // EVO-12 P2 (mode 3): in broker mode, the broker's /authorize + /oidc/callback
-    // are registered FIRST (Hono first-match wins) so /authorize delegates to
-    // 39-auth; /token, /register, well-known still fall through to buildOAuthRoutes.
-    if (deps.oauthConfig.brokerMode && deps.brokerLogin) {
-        app.route("/", buildBrokerRoutes({
-            brokerLogin: deps.brokerLogin,
-            // Gate the claude.ai request BEFORE delegating to 39-auth: the broker has
-            // no consent secret, so an unregistered redirect_uri / missing PKCE must
-            // be rejected here, else an attacker collects the victim's code.
-            validateClaudeaiAuthorize: async (claudeai) => {
-                if (!claudeai.client_id)
-                    return { ok: false, error: "invalid_request", description: "missing client_id" };
-                const client = await deps.oauthProvider.clientsStore.getClient(claudeai.client_id);
-                if (!client)
-                    return { ok: false, error: "invalid_client", description: "unknown client_id" };
-                const registered = client.redirect_uris ?? [];
-                if (!claudeai.redirect_uri || !registered.includes(claudeai.redirect_uri)) {
-                    return { ok: false, error: "invalid_request", description: "redirect_uri is not registered for this client" };
-                }
-                if (claudeai.response_type !== undefined && claudeai.response_type !== "code") {
-                    return { ok: false, error: "unsupported_response_type", description: "only response_type=code is supported" };
-                }
-                if (!claudeai.code_challenge || claudeai.code_challenge_method !== "S256") {
-                    return { ok: false, error: "invalid_request", description: "PKCE code_challenge (S256) is required" };
-                }
-                return { ok: true };
-            },
-            issueClaudeaiCode: async (claudeai, ctx) => {
-                const client = await deps.oauthProvider.clientsStore.getClient(claudeai.client_id);
-                if (!client)
-                    throw new Error("unknown client_id");
-                // Defense-in-depth: re-check the redirect_uri belongs to the client
-                // before minting the code (never trust the carried-through value alone).
-                if (!claudeai.redirect_uri || !(client.redirect_uris ?? []).includes(claudeai.redirect_uri)) {
-                    throw new Error("redirect_uri is not registered for this client");
-                }
-                // Bind the 39-auth subject to the issued code: it rides code→token so
-                // verifyAccessToken restores it and /mcp serves rootForSub(base, sub).
-                const code = await deps.oauthProvider.issueAuthorizationCode(client, {
-                    redirectUri: claudeai.redirect_uri,
-                    codeChallenge: claudeai.code_challenge ?? "",
-                    scopes: [H2A_HOSTED_OAUTH_SCOPE],
-                    ...(claudeai.state ? { state: claudeai.state } : {}),
-                    ...(ctx.sub ? { sub: ctx.sub } : {})
-                });
-                const redirect = new URL(claudeai.redirect_uri);
-                redirect.searchParams.set("code", code);
-                if (claudeai.state)
-                    redirect.searchParams.set("state", claudeai.state);
-                return redirect.href;
-            }
-        }));
-    }
-    // OAuth AS + protected-resource metadata (unauthenticated) at the root.
-    app.route("/", buildOAuthRoutes(deps.oauthProvider, deps.oauthConfig));
-    // Bearer gate for /mcp: valid access token AND the read-only scope.
-    const requireAuth = bearerAuth({
-        verifyToken: async (token) => {
-            try {
-                const info = await deps.oauthProvider.verifyAccessToken(token);
-                return info.scopes.includes(H2A_HOSTED_OAUTH_SCOPE);
-            }
-            catch {
-                return false;
-            }
-        },
-        noAuthenticationHeader: { wwwAuthenticateHeader: () => wwwAuthenticateHeader },
-        invalidAuthenticationHeader: { wwwAuthenticateHeader: () => wwwAuthenticateHeader }
-    });
-    const sessions = new Map();
-    // EVO-12 P2 (mode 3): per-tenant h2a dispatch, cached by root. The underlying
-    // server is reused across sessions/requests of the same tenant; the hosted
-    // read-only wrapper is still built per session.
-    const multiTenant = Boolean(deps.oauthConfig.brokerMode && deps.tenancy);
-    const tenantServers = new Map();
-    const tenantServerFor = (root) => {
-        let server = tenantServers.get(root);
-        if (!server) {
-            server = deps.tenancy.createServer(root);
-            tenantServers.set(root, server);
-        }
-        return server;
-    };
-    /**
-     * Resolve the tenant root for a request from its (already bearer-validated)
-     * access token. Returns undefined in single-tenant mode. Throws if a broker
-     * token carries no `sub` (it is not bound to any tenant → forbidden).
-     */
-    const resolveTenantRoot = async (c) => {
-        if (!multiTenant)
-            return undefined;
-        const header = c.req.header("authorization") ?? "";
-        const token = header.startsWith("Bearer ") ? header.slice("Bearer ".length) : "";
-        const info = await deps.oauthProvider.verifyAccessToken(token);
-        const sub = typeof info.extra?.sub === "string" ? info.extra.sub : undefined;
-        if (!sub)
-            throw new Error("access token is not bound to a tenant");
-        return rootForSub(deps.tenancy.baseRoot, sub);
-    };
-    const forbidden = (c) => c.json({ error: "access_denied", error_description: "token is not bound to this tenant" }, 403);
-    const mcpHandler = async (c) => {
-        let tenantRoot;
-        try {
-            tenantRoot = await resolveTenantRoot(c);
-        }
-        catch {
-            return forbidden(c);
-        }
-        const requestedSessionId = c.req.header("mcp-session-id");
-        let session = requestedSessionId ? sessions.get(requestedSessionId) : undefined;
-        // A session is pinned to the tenant that opened it: a token for another
-        // tenant must not be able to reuse it.
-        if (session && session.tenantRoot !== tenantRoot)
-            return forbidden(c);
-        if (!session) {
-            let created;
-            const transport = new StreamableHTTPTransport({
-                enableJsonResponse: true,
-                sessionIdGenerator: () => randomUUID(),
-                onsessioninitialized: (sessionId) => {
-                    if (created)
-                        sessions.set(sessionId, created);
-                },
-                onsessionclosed: (sessionId) => {
-                    sessions.delete(sessionId);
-                }
-            });
-            created = { transport, ...(tenantRoot !== undefined && { tenantRoot }) };
-            // One SDK server per session, exposing ONLY the read-only allowlist —
-            // backed by the tenant's root in multi-tenant mode, else the single server.
-            const base = tenantRoot !== undefined ? tenantServerFor(tenantRoot) : deps.h2aMcpServer;
-            const server = buildHostedMcpServer(base);
-            await server.connect(transport);
-            session = created;
-        }
-        const res = await session.transport.handleRequest(c);
-        return res ?? c.body(null, 202);
-    };
-    // claude.ai connects at the resource-server URL (/mcp); only /mcp is bearer-gated.
-    app.all("/mcp", requireAuth, mcpHandler);
-    return app;
-}
-//# sourceMappingURL=app.js.map

package/dist/runtime/mcp-http/app.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app.js","sourceRoot":"","sources":["../../../src/runtime/mcp-http/app.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAC;AAG1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAA6B,MAAM,mBAAmB,CAAC;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAEhE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAmChD,MAAM,UAAU,eAAe,CAAC,IAAmB;IACjD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,qBAAqB,GAAG,qFAAqF,IAAI,CAAC,WAAW,CAAC,mBAAmB,GAAG,CAAC;IAE3J,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACjD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEhD,+EAA+E;IAC/E,0EAA0E;IAC1E,iFAAiF;IACjF,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACpD,GAAG,CAAC,KAAK,CACP,GAAG,EACH,iBAAiB,CAAC;YAChB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,0EAA0E;YAC1E,yEAAyE;YACzE,iEAAiE;YACjE,yBAAyB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;gBAC5C,IAAI,CAAC,QAAQ,CAAC,SAAS;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC;gBAC1G,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACnF,IAAI,CAAC,MAAM;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC;gBAC7F,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;gBAC9C,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,gDAAgD,EAAE,CAAC;gBAChH,CAAC;gBACD,IAAI,QAAQ,CAAC,aAAa,KAAK,SAAS,IAAI,QAAQ,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;oBAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC;gBAChH,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,QAAQ,CAAC,qBAAqB,KAAK,MAAM,EAAE,CAAC;oBAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAAC;gBACxG,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;YACD,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE;gBACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACnF,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;gBAClD,oEAAoE;gBACpE,yEAAyE;gBACzE,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC5F,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;gBACpE,CAAC;gBACD,sEAAsE;gBACtE,uEAAuE;gBACvE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,MAAM,EAAE;oBACnE,WAAW,EAAE,QAAQ,CAAC,YAAY;oBAClC,aAAa,EAAE,QAAQ,CAAC,cAAc,IAAI,EAAE;oBAC5C,MAAM,EAAE,CAAC,sBAAsB,CAAC;oBAChC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrC,CAAC,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAChD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACxC,IAAI,QAAQ,CAAC,KAAK;oBAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACvE,OAAO,QAAQ,CAAC,IAAI,CAAC;YACvB,CAAC;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAEvE,oEAAoE;IACpE,MAAM,WAAW,GAAG,UAAU,CAAC;QAC7B,WAAW,EAAE,KAAK,EAAE,KAAa,EAAoB,EAAE;YACrD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBAC/D,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,sBAAsB,EAAE,EAAE,qBAAqB,EAAE,GAAG,EAAE,CAAC,qBAAqB,EAAE;QAC9E,2BAA2B,EAAE,EAAE,qBAAqB,EAAE,GAAG,EAAE,CAAC,qBAAqB,EAAE;KACpF,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEnD,8EAA8E;IAC9E,2EAA2E;IAC3E,gDAAgD;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAqB,CAAC;IACnD,MAAM,eAAe,GAAG,CAAC,IAAY,EAAa,EAAE;QAClD,IAAI,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,CAAC,OAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAC1C,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF;;;;OAIG;IACH,MAAM,iBAAiB,GAAG,KAAK,EAAE,CAAU,EAA+B,EAAE;QAC1E,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7E,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACnE,OAAO,UAAU,CAAC,IAAI,CAAC,OAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,CAAC,CAAU,EAAE,EAAE,CAC/B,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,mCAAmC,EAAE,EAAE,GAAG,CAAC,CAAC;IAElG,MAAM,UAAU,GAAG,KAAK,EAAE,CAAU,EAAE,EAAE;QACtC,IAAI,UAA8B,CAAC;QACnC,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;QAED,MAAM,kBAAkB,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1D,IAAI,OAAO,GAAG,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEhF,wEAAwE;QACxE,uCAAuC;QACvC,IAAI,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU;YAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;QAEtE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,OAAmC,CAAC;YACxC,MAAM,SAAS,GAAG,IAAI,uBAAuB,CAAC;gBAC5C,kBAAkB,EAAE,IAAI;gBACxB,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;gBACtC,oBAAoB,EAAE,CAAC,SAAS,EAAE,EAAE;oBAClC,IAAI,OAAO;wBAAE,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAChD,CAAC;gBACD,eAAe,EAAE,CAAC,SAAS,EAAE,EAAE;oBAC7B,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC7B,CAAC;aACF,CAAC,CAAC;YACH,OAAO,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;YACzE,sEAAsE;YACtE,4EAA4E;YAC5E,MAAM,IAAI,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;YACxF,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC1C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,OAAO,GAAG,OAAO,CAAC;QACpB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC,CAAC;IAEF,mFAAmF;IACnF,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAEzC,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/runtime/mcp-http/hosted-mcp-server.d.ts

@@ -1,14 +0,0 @@
-/**
- * EVO-12 hosted MCP server — wraps the EXISTING in-process h2a tool dispatch
- * (`McpServer.callTool`) behind an SDK `Server`, exposing ONLY the read-only
- * allowlist. `dispatchHostedTool` refuses any non-allowlisted tool name
- * (defense-in-depth: a signing/private-key tool is never reachable here, even
- * if the wire asked for it).
- */
-import { Server } from "@modelcontextprotocol/sdk/server/index.js";
-import { type CallToolResult } from "@modelcontextprotocol/sdk/types.js";
-import type { McpServer } from "../mcp/server.js";
-export declare function dispatchHostedTool(h2a: McpServer, name: string, args: Record<string, unknown> | undefined): CallToolResult;
-/** SDK Server exposing only the read-only allowlist, dispatching to the h2a callTool. */
-export declare function buildHostedMcpServer(h2a: McpServer): Server;
-//# sourceMappingURL=hosted-mcp-server.d.ts.map

package/dist/runtime/mcp-http/hosted-mcp-server.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hosted-mcp-server.d.ts","sourceRoot":"","sources":["../../../src/runtime/mcp-http/hosted-mcp-server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,oCAAoC,CAAC;AAI5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAGlD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GACxC,cAAc,CAYhB;AAED,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAoB3D"}

package/dist/runtime/mcp-http/hosted-mcp-server.js

@@ -1,38 +0,0 @@
-/**
- * EVO-12 hosted MCP server — wraps the EXISTING in-process h2a tool dispatch
- * (`McpServer.callTool`) behind an SDK `Server`, exposing ONLY the read-only
- * allowlist. `dispatchHostedTool` refuses any non-allowlisted tool name
- * (defense-in-depth: a signing/private-key tool is never reachable here, even
- * if the wire asked for it).
- */
-import { Server } from "@modelcontextprotocol/sdk/server/index.js";
-import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
-import { currentCliVersion } from "../upgrade/index.js";
-import { H2A_CLI_MCP_TOOL_DESCRIPTORS } from "../mcp/tools.js";
-import { hostedReadOnlyDescriptors, isHostedReadOnlyTool } from "./readonly-allowlist.js";
-export function dispatchHostedTool(h2a, name, args) {
-    if (!isHostedReadOnlyTool(name)) {
-        return {
-            content: [{ type: "text", text: `tool '${name}' is not exposed on the hosted read-only surface` }],
-            isError: true
-        };
-    }
-    const result = h2a.callTool(name, args);
-    if (result && typeof result === "object" && "error" in result && typeof result.error === "string") {
-        return { content: [{ type: "text", text: result.error }], isError: true };
-    }
-    return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
-}
-/** SDK Server exposing only the read-only allowlist, dispatching to the h2a callTool. */
-export function buildHostedMcpServer(h2a) {
-    const server = new Server({ name: "h2a", version: currentCliVersion() }, { capabilities: { tools: { listChanged: true } } });
-    const announced = hostedReadOnlyDescriptors(H2A_CLI_MCP_TOOL_DESCRIPTORS).map((d) => ({
-        name: d.name,
-        description: d.description,
-        inputSchema: d.inputSchema
-    }));
-    server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: announced }));
-    server.setRequestHandler(CallToolRequestSchema, async (req) => dispatchHostedTool(h2a, req.params.name, req.params.arguments ?? {}));
-    return server;
-}
-//# sourceMappingURL=hosted-mcp-server.js.map

package/dist/runtime/mcp-http/hosted-mcp-server.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hosted-mcp-server.js","sourceRoot":"","sources":["../../../src/runtime/mcp-http/hosted-mcp-server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EACL,qBAAqB,EAErB,sBAAsB,EACvB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAE/D,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE1F,MAAM,UAAU,kBAAkB,CAChC,GAAc,EACd,IAAY,EACZ,IAAyC;IAEzC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,IAAI,kDAAkD,EAAE,CAAC;YAClG,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAClG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAChF,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,oBAAoB,CAAC,GAAc;IACjD,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,EAC7C,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,CACnD,CAAC;IAEF,MAAM,SAAS,GAAG,yBAAyB,CAAC,4BAA4B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpF,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,WAAW,EAAE,CAAC,CAAC,WAAsC;KACtD,CAAC,CAAC,CAAC;IAEJ,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,CAAC,iBAAiB,CACtB,qBAAqB,EACrB,KAAK,EAAE,GAAG,EAA2B,EAAE,CACrC,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CACvE,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/runtime/mcp-http/index.d.ts

@@ -1,18 +0,0 @@
-/**
- * EVO-12 hosted MCP over HTTP + self-AS OAuth (mcp-wave pattern), exposing the
- * h2a read-only tool surface for claude.ai enrollment. Core is dep-free; this
- * lives in @sentropic/h2a-cli.
- */
-export { H2A_HOSTED_READONLY_TOOLS, hostedReadOnlyDescriptors, isHostedReadOnlyTool, toolTakesPrivateKey } from "./readonly-allowlist.js";
-export { buildHostedMcpServer, dispatchHostedTool } from "./hosted-mcp-server.js";
-export { createHostedApp, type HostedAppDeps } from "./app.js";
-export { startHostedServer, buildHostedConfigFromEnv, type HostedEnv, type HostedConfig, type StartedHostedServer } from "./serve.js";
-export { FileOAuthStore } from "./oauth/file-store.js";
-export { SingleTenantOAuthProvider } from "./oauth/single-tenant-provider.js";
-export { buildOAuthRoutes } from "./oauth/hono-oauth-router.js";
-export { buildUpstreamAuthorizeUrl, exchangeUpstreamCode, type H2AUpstreamOidcConfig, type UpstreamFetch, type UpstreamLogin } from "./oauth/oidc-rp.js";
-export { rootForSub } from "./oauth/tenancy.js";
-export { createBrokerLogin, type BrokerLogin, type BrokerLoginDeps, type BrokerStart, type BrokerComplete } from "./oauth/broker-login.js";
-export { buildBrokerRoutes, type BrokerRoutesDeps } from "./oauth/broker-routes.js";
-export { oauthConfigFromEnv, H2A_HOSTED_OAUTH_SCOPE, type H2AHostedOAuthConfig, type H2AHostedOAuthEnv } from "./oauth/config.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/runtime/mcp-http/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/mcp-http/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACzB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EACL,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACpF,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACvB,MAAM,mBAAmB,CAAC"}

package/dist/runtime/mcp-http/index.js

@@ -1,18 +0,0 @@
-/**
- * EVO-12 hosted MCP over HTTP + self-AS OAuth (mcp-wave pattern), exposing the
- * h2a read-only tool surface for claude.ai enrollment. Core is dep-free; this
- * lives in @sentropic/h2a-cli.
- */
-export { H2A_HOSTED_READONLY_TOOLS, hostedReadOnlyDescriptors, isHostedReadOnlyTool, toolTakesPrivateKey } from "./readonly-allowlist.js";
-export { buildHostedMcpServer, dispatchHostedTool } from "./hosted-mcp-server.js";
-export { createHostedApp } from "./app.js";
-export { startHostedServer, buildHostedConfigFromEnv } from "./serve.js";
-export { FileOAuthStore } from "./oauth/file-store.js";
-export { SingleTenantOAuthProvider } from "./oauth/single-tenant-provider.js";
-export { buildOAuthRoutes } from "./oauth/hono-oauth-router.js";
-export { buildUpstreamAuthorizeUrl, exchangeUpstreamCode } from "./oauth/oidc-rp.js";
-export { rootForSub } from "./oauth/tenancy.js";
-export { createBrokerLogin } from "./oauth/broker-login.js";
-export { buildBrokerRoutes } from "./oauth/broker-routes.js";
-export { oauthConfigFromEnv, H2A_HOSTED_OAUTH_SCOPE } from "./oauth/config.js";
-//# sourceMappingURL=index.js.map

package/dist/runtime/mcp-http/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/mcp-http/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAClF,OAAO,EAAE,eAAe,EAAsB,MAAM,UAAU,CAAC;AAC/D,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EAIzB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EAIrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EACL,iBAAiB,EAKlB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAyB,MAAM,0BAA0B,CAAC;AACpF,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EAGvB,MAAM,mBAAmB,CAAC"}

package/dist/runtime/mcp-http/main.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=main.d.ts.map

package/dist/runtime/mcp-http/main.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../../src/runtime/mcp-http/main.ts"],"names":[],"mappings":""}

package/dist/runtime/mcp-http/main.js

@@ -1,14 +0,0 @@
-/**
- * EVO-12 hosted MCP — runnable entrypoint (Docker CMD / `node dist/runtime/mcp-http/main.js`).
- * Reads the deploy env and serves the OAuth-gated read-only MCP over HTTP.
- */
-import { startHostedServer } from "./serve.js";
-startHostedServer()
-    .then((s) => {
-    process.stderr.write(`h2a hosted MCP (EVO-12) listening on :${s.port}\n`);
-})
-    .catch((e) => {
-    process.stderr.write(`h2a hosted MCP failed to start: ${e instanceof Error ? e.message : String(e)}\n`);
-    process.exit(1);
-});
-//# sourceMappingURL=main.js.map

package/dist/runtime/mcp-http/main.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../src/runtime/mcp-http/main.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,iBAAiB,EAAE;KAChB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;IACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;AAC5E,CAAC,CAAC;KACD,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;IACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/runtime/mcp-http/oauth/broker-login.d.ts

@@ -1,50 +0,0 @@
-/**
- * EVO-12 P2 (mode 3) — broker-login state machine. The stateful heart of the
- * gateway: on claude.ai's /authorize, `start()` stores the claude.ai request +
- * a fresh upstream PKCE/state and returns the 39-auth /authorize URL to redirect
- * to; on the /oidc/callback, `complete()` looks the pending entry up by state,
- * exchanges the code at 39-auth for the user's `sub`, and resolves that user's
- * per-tenant root. The hono routes are thin wrappers over this.
- *
- * Deps injected (exchange / pkce / randomState / clock) → unit-testable against
- * a mock IdP, no network. Pending entries are single-use + time-boxed.
- */
-import { type H2AUpstreamOidcConfig, type UpstreamLogin } from "./oidc-rp.js";
-export interface BrokerLoginDeps {
-    readonly config: H2AUpstreamOidcConfig;
-    /** Bound `exchangeUpstreamCode(config, {code, codeVerifier}, fetch)`. */
-    readonly exchange: (code: string, codeVerifier: string) => Promise<UpstreamLogin>;
-    /** Base h2a root; the per-user root is `rootForSub(baseRoot, sub)`. */
-    readonly baseRoot: string;
-    /** Fresh opaque state per login (e.g. `randomToken()`). */
-    readonly randomState: () => string;
-    /** Fresh PKCE pair for the upstream leg. */
-    readonly pkce: () => {
-        verifier: string;
-        challenge: string;
-    };
-    readonly now?: () => number;
-    /** Pending-login TTL (ms). Default 10 min. */
-    readonly maxAgeMs?: number;
-}
-export interface BrokerStart {
-    /** 39-auth /authorize URL to redirect the user to. */
-    readonly redirectUrl: string;
-    /** The upstream state (also the pending-entry key). */
-    readonly state: string;
-}
-export interface BrokerComplete {
-    /** The original claude.ai /authorize request, opaque to the broker — to resume issuing the claude.ai code. */
-    readonly claudeai: unknown;
-    /** The authenticated 39-auth user. */
-    readonly sub: string;
-    /** That user's per-tenant h2a root. */
-    readonly root: string;
-}
-export interface BrokerLogin {
-    start(claudeaiParams: unknown): BrokerStart;
-    complete(state: string, code: string): Promise<BrokerComplete>;
-    pendingCount(): number;
-}
-export declare function createBrokerLogin(deps: BrokerLoginDeps): BrokerLogin;
-//# sourceMappingURL=broker-login.d.ts.map

package/dist/runtime/mcp-http/oauth/broker-login.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"broker-login.d.ts","sourceRoot":"","sources":["../../../../src/runtime/mcp-http/oauth/broker-login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAA6B,KAAK,qBAAqB,EAAE,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAGzG,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAClF,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,WAAW,EAAE,MAAM,MAAM,CAAC;IACnC,4CAA4C;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,sDAAsD;IACtD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,uDAAuD;IACvD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,8GAA8G;IAC9G,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,sCAAsC;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,cAAc,EAAE,OAAO,GAAG,WAAW,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/D,YAAY,IAAI,MAAM,CAAC;CACxB;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,WAAW,CAwBpE"}

package/dist/runtime/mcp-http/oauth/broker-login.js

@@ -1,41 +0,0 @@
-/**
- * EVO-12 P2 (mode 3) — broker-login state machine. The stateful heart of the
- * gateway: on claude.ai's /authorize, `start()` stores the claude.ai request +
- * a fresh upstream PKCE/state and returns the 39-auth /authorize URL to redirect
- * to; on the /oidc/callback, `complete()` looks the pending entry up by state,
- * exchanges the code at 39-auth for the user's `sub`, and resolves that user's
- * per-tenant root. The hono routes are thin wrappers over this.
- *
- * Deps injected (exchange / pkce / randomState / clock) → unit-testable against
- * a mock IdP, no network. Pending entries are single-use + time-boxed.
- */
-import { buildUpstreamAuthorizeUrl } from "./oidc-rp.js";
-import { rootForSub } from "./tenancy.js";
-export function createBrokerLogin(deps) {
-    const now = deps.now ?? Date.now;
-    const maxAgeMs = deps.maxAgeMs ?? 600_000;
-    const pending = new Map();
-    return {
-        start(claudeaiParams) {
-            const { verifier, challenge } = deps.pkce();
-            const state = deps.randomState();
-            pending.set(state, { verifier, claudeai: claudeaiParams, at: now() });
-            return {
-                redirectUrl: buildUpstreamAuthorizeUrl(deps.config, { state, codeChallenge: challenge }),
-                state
-            };
-        },
-        async complete(state, code) {
-            const entry = pending.get(state);
-            if (!entry)
-                throw new Error("broker: unknown state");
-            pending.delete(state); // single-use
-            if (now() - entry.at > maxAgeMs)
-                throw new Error("broker: state expired");
-            const login = await deps.exchange(code, entry.verifier);
-            return { claudeai: entry.claudeai, sub: login.sub, root: rootForSub(deps.baseRoot, login.sub) };
-        },
-        pendingCount: () => pending.size
-    };
-}
-//# sourceMappingURL=broker-login.js.map

package/dist/runtime/mcp-http/oauth/broker-login.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"broker-login.js","sourceRoot":"","sources":["../../../../src/runtime/mcp-http/oauth/broker-login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,yBAAyB,EAAkD,MAAM,cAAc,CAAC;AACzG,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAuC1C,MAAM,UAAU,iBAAiB,CAAC,IAAqB;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+D,CAAC;IACvF,OAAO;QACL,KAAK,CAAC,cAAc;YAClB,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACtE,OAAO;gBACL,WAAW,EAAE,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;gBACxF,KAAK;aACN,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI;YACxB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa;YACpC,IAAI,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,GAAG,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC1E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACxD,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClG,CAAC;QACD,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI;KACjC,CAAC;AACJ,CAAC"}

package/dist/runtime/mcp-http/oauth/broker-routes.d.ts

@@ -1,45 +0,0 @@
-/**
- * EVO-12 P2 (mode 3) — hono routes for the broker login. Thin wrapper over
- * `createBrokerLogin`: `/authorize` starts a login (302 → 39-auth) instead of
- * the single-tenant consent form; `/oidc/callback` completes it (exchange →
- * sub → per-user root) and hands off to the provider to issue the claude.ai
- * authorization code, then 302s back to claude.ai.
- *
- * `issueClaudeaiCode` is injected (the SingleTenantOAuthProvider's code issuance,
- * bound to the resolved user/root) → routes are testable via `app.request` with
- * a mock IdP, no provider/network.
- */
-import { Hono } from "hono";
-import type { BrokerLogin } from "./broker-login.js";
-export interface BrokerRoutesDeps {
-    readonly brokerLogin: BrokerLogin;
-    /**
-     * Issue the claude.ai authorization code for the original request, bound to
-     * the authenticated user/root, and return the claude.ai redirect URL
-     * (`<redirect_uri>?code=…&state=…`).
-     */
-    readonly issueClaudeaiCode: (claudeai: Record<string, string>, ctx: {
-        sub: string;
-        root: string;
-    }) => string | Promise<string>;
-    /**
-     * Validate the claude.ai /authorize request BEFORE delegating to 39-auth. The
-     * single-tenant flow is gated by the consent secret; the broker has none, so
-     * an unvalidated `redirect_uri` would let an attacker craft
-     * `/authorize?client_id=<real>&redirect_uri=https://evil&code_challenge=<theirs>`,
-     * have the victim log in at 39-auth, and collect a code at their URL bound to
-     * the victim's sub. This MUST reject an unregistered redirect_uri / bad PKCE
-     * before the login starts. Returns ok, or an error rendered as 400.
-     */
-    readonly validateClaudeaiAuthorize?: (claudeai: Record<string, string>) => Promise<{
-        ok: true;
-    } | {
-        ok: false;
-        error: string;
-        description: string;
-    }>;
-    /** Callback path registered at 39-auth. Default `/oidc/callback`. */
-    readonly callbackPath?: string;
-}
-export declare function buildBrokerRoutes(deps: BrokerRoutesDeps): Hono;
-//# sourceMappingURL=broker-routes.d.ts.map

package/dist/runtime/mcp-http/oauth/broker-routes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"broker-routes.d.ts","sourceRoot":"","sources":["../../../../src/runtime/mcp-http/oauth/broker-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,EAAE,CAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,GAAG,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAC/B,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B;;;;;;;;OAQG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CACnC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC7B,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/E,qEAAqE;IACrE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CA0C9D"}

package/dist/runtime/mcp-http/oauth/broker-routes.js

@@ -1,54 +0,0 @@
-/**
- * EVO-12 P2 (mode 3) — hono routes for the broker login. Thin wrapper over
- * `createBrokerLogin`: `/authorize` starts a login (302 → 39-auth) instead of
- * the single-tenant consent form; `/oidc/callback` completes it (exchange →
- * sub → per-user root) and hands off to the provider to issue the claude.ai
- * authorization code, then 302s back to claude.ai.
- *
- * `issueClaudeaiCode` is injected (the SingleTenantOAuthProvider's code issuance,
- * bound to the resolved user/root) → routes are testable via `app.request` with
- * a mock IdP, no provider/network.
- */
-import { Hono } from "hono";
-export function buildBrokerRoutes(deps) {
-    const router = new Hono();
-    const callbackPath = deps.callbackPath ?? "/oidc/callback";
-    // claude.ai lands here (DCR+PKCE already done against our self-AS); we redirect
-    // the human to 39-auth to actually log in.
-    router.get("/authorize", async (c) => {
-        c.header("Cache-Control", "no-store");
-        const claudeai = c.req.query();
-        if (deps.validateClaudeaiAuthorize) {
-            const v = await deps.validateClaudeaiAuthorize(claudeai);
-            if (!v.ok) {
-                // reject BEFORE sending the human to 39-auth — never issue a code to an
-                // unregistered redirect_uri.
-                return c.json({ error: v.error, error_description: v.description }, 400);
-            }
-        }
-        const { redirectUrl } = deps.brokerLogin.start(claudeai);
-        return c.redirect(redirectUrl, 302);
-    });
-    // 39-auth redirects back here with code+state; we exchange, resolve the user's
-    // root, issue the claude.ai code, and bounce back to claude.ai.
-    router.get(callbackPath, async (c) => {
-        const code = c.req.query("code");
-        const state = c.req.query("state");
-        if (!code || !state) {
-            return c.json({ error: "invalid_request", error_description: "missing code/state" }, 400);
-        }
-        try {
-            const done = await deps.brokerLogin.complete(state, code);
-            const redirectUrl = await deps.issueClaudeaiCode(done.claudeai, {
-                sub: done.sub,
-                root: done.root
-            });
-            return c.redirect(redirectUrl, 302);
-        }
-        catch (err) {
-            return c.json({ error: "access_denied", error_description: err.message }, 400);
-        }
-    });
-    return router;
-}
-//# sourceMappingURL=broker-routes.js.map

package/dist/runtime/mcp-http/oauth/broker-routes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"broker-routes.js","sourceRoot":"","sources":["../../../../src/runtime/mcp-http/oauth/broker-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AA+B5B,MAAM,UAAU,iBAAiB,CAAC,IAAsB;IACtD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,gBAAgB,CAAC;IAE3D,gFAAgF;IAChF,2CAA2C;IAC3C,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAA4B,CAAC;QACzD,IAAI,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;YACzD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACV,wEAAwE;gBACxE,6BAA6B;gBAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QACD,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,gEAAgE;IAChE,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC1D,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAkC,EAAE;gBACxF,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/runtime/mcp-http/oauth/config.d.ts

@@ -1,49 +0,0 @@
-/**
- * EVO-12 hosted OAuth — runtime config (ported from mcp-wave; decoupled from
- * the Wave env type — takes a plain input object so it is unit-testable).
- *
- * Scope is read-only (`h2a:read`) — the hosted surface exposes only read tools
- * (DEC-116 key custody; see ../readonly-allowlist).
- */
-import type { H2AUpstreamOidcConfig } from "./oidc-rp.js";
-export declare const H2A_HOSTED_OAUTH_SCOPE = "h2a:read";
-export interface H2AHostedOAuthEnv {
-    PUBLIC_BASE_URL: string;
-    OAUTH_ISSUER_URL: string;
-    OAUTH_CONSENT_SECRET?: string;
-    OAUTH_ALLOWED_REDIRECT_URIS: string;
-    OAUTH_ACCESS_TOKEN_TTL_SECONDS: number;
-    OAUTH_REFRESH_TOKEN_TTL_SECONDS: number;
-    OAUTH_AUTH_CODE_TTL_SECONDS: number;
-    H2A_HOSTED_ENROLLMENT_ENABLED?: string;
-    NODE_ENV?: string;
-    H2A_BROKER_MODE?: string;
-    H2A_UPSTREAM_ISSUER?: string;
-    H2A_UPSTREAM_AUTHORIZE_URL?: string;
-    H2A_UPSTREAM_TOKEN_URL?: string;
-    H2A_UPSTREAM_CLIENT_ID?: string;
-    H2A_UPSTREAM_CLIENT_SECRET?: string;
-    H2A_UPSTREAM_REDIRECT_URI?: string;
-    H2A_UPSTREAM_SCOPES?: string;
-}
-export interface H2AHostedOAuthConfig {
-    issuerUrl: URL;
-    publicBaseUrl: URL;
-    resourceServerUrl: URL;
-    resourceMetadataUrl: string;
-    consentSecret: string;
-    enrollmentEnabled: boolean;
-    allowedRedirectUris: readonly string[];
-    accessTokenTtlSeconds: number;
-    refreshTokenTtlSeconds: number;
-    authCodeTtlSeconds: number;
-    nodeEnv: string;
-    /** EVO-12 P2: broker mode (delegate login to 39-auth). */
-    brokerMode: boolean;
-    /** The seeded 39-auth RP config — present iff broker mode. */
-    upstream?: H2AUpstreamOidcConfig;
-}
-export declare function parseOAuthCsv(value: string): string[];
-export declare function parseHostedEnrollmentEnabled(value: string | undefined): boolean;
-export declare function oauthConfigFromEnv(env: H2AHostedOAuthEnv): H2AHostedOAuthConfig;
-//# sourceMappingURL=config.d.ts.map

package/dist/runtime/mcp-http/oauth/config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../../src/runtime/mcp-http/oauth/config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAE1D,eAAO,MAAM,sBAAsB,aAAa,CAAC;AAEjD,MAAM,WAAW,iBAAiB;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,2BAA2B,EAAE,MAAM,CAAC;IACpC,8BAA8B,EAAE,MAAM,CAAC;IACvC,+BAA+B,EAAE,MAAM,CAAC;IACxC,2BAA2B,EAAE,MAAM,CAAC;IACpC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAIlB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,GAAG,CAAC;IACf,aAAa,EAAE,GAAG,CAAC;IACnB,iBAAiB,EAAE,GAAG,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,UAAU,EAAE,OAAO,CAAC;IACpB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAClC;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAKrD;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAG/E;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,GAAG,oBAAoB,CAwB/E"}