@sonordev/site-kit 6.3.5 → 6.4.0

package/dist/llms/revalidate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"revalidate.d.ts","sourceRoot":"","sources":["../../src/llms/revalidate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,KAAK,gBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,KAAK,IAAI,CAAA;AAExE;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;IACR,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,2EAA2E;IAC3E,cAAc,CAAC,EAAE,gBAAgB,CAAA;CAClC,GACA,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA6CzC"}
+{"version":3,"file":"revalidate.d.ts","sourceRoot":"","sources":["../../src/llms/revalidate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,KAAK,gBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,KAAK,IAAI,CAAA;AAExE;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;IACR,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,2EAA2E;IAC3E,cAAc,CAAC,EAAE,gBAAgB,CAAA;CAClC,GACA,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA6CzC"}

package/dist/llms/seo-revalidate.d.ts

@@ -0,0 +1,105 @@
+/**
+ * @sonordev/site-kit/llms - Sonor's SEO revalidation webhook
+ *
+ * When a title, description or schema changes in Sonor (a dashboard edit or an
+ * approved SEO ledger action), Sonor POSTs the affected paths and cache tags to
+ * the site, authenticated with the project key. This handler regenerates those
+ * pages, the sitemap and both llms files without a rebuild.
+ *
+ * Single source of truth for the fleet's `/api/seo-revalidate` handler. It
+ * replaced per-site copies in heinrich-law-nextjs and wirsch-law-nextjs
+ * (`lib/seo-revalidation.ts`), and agency-site-kit's portfolio
+ * `createRevalidateHandler` is built on it (`extraPaths` + `extendPayload`);
+ * don't fork it back into a site or package.
+ *
+ * @example
+ * ```ts
+ * // app/api/seo-revalidate/route.ts
+ * import { revalidatePath, revalidateTag } from 'next/cache'
+ * import { createSeoRevalidationHandler } from '@sonordev/site-kit/llms'
+ *
+ * export const runtime = 'nodejs'
+ *
+ * export async function POST(request: Request) {
+ *   return createSeoRevalidationHandler({
+ *     secret: process.env.SONOR_API_KEY || '',
+ *     revalidatePath,
+ *     revalidateTag,
+ *     publicationBasePath: '/insights', // only for sites with a publication
+ *   })(request)
+ * }
+ * ```
+ *
+ * Contract (POST, `Authorization: Bearer <SONOR_API_KEY>`, JSON):
+ * `{ paths?: string[], path?: string, tags?: string[], tag?: string, revalidateAll?: boolean }`
+ */
+/** Largest webhook body accepted, in bytes. Sonor's payloads are a few hundred. */
+export declare const SEO_REVALIDATION_MAX_BODY_BYTES: number;
+/** Most paths or tags one webhook call may name. */
+export declare const SEO_REVALIDATION_MAX_ITEMS = 100;
+/**
+ * The prefix Sonor projects configured before publication routing still send
+ * article URLs under. See `publicationBasePath`.
+ */
+export declare const LEGACY_PUBLICATION_PATH = "/blog";
+export interface SeoRevalidationHandlerOptions {
+    /**
+     * The project key Sonor signs the webhook with (`SONOR_API_KEY`), or a
+     * getter read on every call. Empty or missing refuses every call.
+     */
+    secret: string | (() => string | undefined);
+    /** Next's `revalidatePath` from `next/cache`. */
+    revalidatePath: (path: string, type?: 'page' | 'layout') => void;
+    /** Next's `revalidateTag` from `next/cache`. Called with `{ expire: 0 }` so tagged fetches expire now. */
+    revalidateTag: (tag: string, profile: {
+        expire: number;
+    }) => void;
+    /**
+     * Where the site's publication (articles) lives, e.g. `/insights`. Set it
+     * only when the site has one. The publication index and its RSS/Atom feeds
+     * are then refreshed on every call, and legacy `/blog/...` paths Sonor sends
+     * are refreshed at both the alias and the matching URL under this root.
+     */
+    publicationBasePath?: string;
+    /**
+     * Local paths regenerated on every call, next to `/sitemap.xml` (e.g. a
+     * portfolio hub like `/work`). Validated like payload paths.
+     */
+    extraPaths?: string[];
+    /**
+     * Extend the validated payload from fields of the raw body this handler
+     * doesn't read. agency-site-kit maps portfolio `slug`/`slugs` to detail
+     * paths and names a default tag this way. The result is validated again,
+     * so an extension can't widen what a caller may revalidate; a throw is a 400.
+     */
+    extendPayload?: (payload: SeoRevalidationPayload, body: Record<string, unknown>) => SeoRevalidationPayload;
+}
+export interface SeoRevalidationPayload {
+    /** Local paths to regenerate, deduped. */
+    paths: string[];
+    /** Cache tags to expire, deduped. */
+    tags: string[];
+    /** Regenerate everything (the root layout). */
+    revalidateAll: boolean;
+}
+/**
+ * Validate a webhook body. Throws on anything malformed, so a bad payload is
+ * refused whole rather than half-applied.
+ */
+export declare function parseSeoRevalidationPayload(value: unknown): SeoRevalidationPayload;
+/**
+ * Create the POST handler for Sonor's SEO revalidation webhook.
+ *
+ * - 401 unless `Authorization: Bearer <secret>` matches (constant time). The
+ *   `?secret=` query form `createLlmsRevalidateHandler` accepts is not
+ *   honoured here: keys don't belong in URLs.
+ * - 413 past 16 KB, 400 on any path or tag that fails validation. Nothing is
+ *   revalidated in either case.
+ * - Otherwise regenerates the named pages (or the root layout for a full or
+ *   tag-only `seo` refresh), `/sitemap.xml`, `/llms.txt`, `/llms-full.txt`,
+ *   `extraPaths` and, with `publicationBasePath`, the publication index and
+ *   feeds; then expires the named cache tags. `extendPayload` runs before any
+ *   of that, and its result is validated like the body.
+ */
+export declare function createSeoRevalidationHandler({ secret: secretOption, revalidatePath, revalidateTag, publicationBasePath, extraPaths: extraPathsOption, extendPayload, }: SeoRevalidationHandlerOptions): (request: Request) => Promise<Response>;
+//# sourceMappingURL=seo-revalidate.d.ts.map

package/dist/llms/seo-revalidate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seo-revalidate.d.ts","sourceRoot":"","sources":["../../src/llms/seo-revalidate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAKH,mFAAmF;AACnF,eAAO,MAAM,+BAA+B,QAAY,CAAA;AAExD,oDAAoD;AACpD,eAAO,MAAM,0BAA0B,MAAM,CAAA;AAE7C;;;GAGG;AACH,eAAO,MAAM,uBAAuB,UAAU,CAAA;AAE9C,MAAM,WAAW,6BAA6B;IAC5C;;;OAGG;IACH,MAAM,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAA;IAC3C,iDAAiD;IACjD,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,KAAK,IAAI,CAAA;IAChE,0GAA0G;IAC1G,aAAa,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAA;IACjE;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,sBAAsB,CAAA;CAC3G;AAED,MAAM,WAAW,sBAAsB;IACrC,0CAA0C;IAC1C,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,qCAAqC;IACrC,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,+CAA+C;IAC/C,aAAa,EAAE,OAAO,CAAA;CACvB;AA+BD;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CAmBlF;AAoBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,4BAA4B,CAAC,EAC3C,MAAM,EAAE,YAAY,EACpB,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,UAAU,EAAE,gBAAgB,EAC5B,aAAa,GACd,EAAE,6BAA6B,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA6DzE"}

package/dist/maps/index.js

@@ -1,9 +1,9 @@
 'use client';
 'use strict';
 
-var chunkID4RGBQT_js = require('../chunk-ID4RGBQT.js');
-require('../chunk-BVSTYFFI.js');
-require('../chunk-LSB3CWSB.js');
+var chunkC7J4XLBN_js = require('../chunk-C7J4XLBN.js');
+require('../chunk-U5NFIHLY.js');
+require('../chunk-CIB3RHNZ.js');
 require('../chunk-SNAQBZPT.js');
 var react = require('react');
 var reactGoogleMaps = require('@vis.gl/react-google-maps');
@@ -141,7 +141,7 @@ async function fetchMapsConfig() {
   const { apiUrl, apiKey } = getApiConfig();
   if (apiKey) {
     try {
-      const res = await chunkID4RGBQT_js.sonorFetch(
+      const res = await chunkC7J4XLBN_js.sonorFetch(
         `${apiUrl}/api/public/maps/config`,
         { headers: { "Content-Type": "application/json" } },
         { apiKey }
@@ -181,7 +181,7 @@ async function fetchNearbyPlaces(params) {
     });
     if (params.radius) searchParams.set("radius", String(params.radius));
     if (params.limit) searchParams.set("limit", String(params.limit));
-    const res = await chunkID4RGBQT_js.sonorFetch(
+    const res = await chunkC7J4XLBN_js.sonorFetch(
       `${apiUrl}/api/public/maps/nearby-places?${searchParams}`,
       { headers: { "Content-Type": "application/json" } },
       { apiKey }

package/dist/maps/index.mjs

@@ -1,7 +1,7 @@
 'use client';
-import { sonorFetch } from '../chunk-HTCMZAXW.mjs';
-import '../chunk-QMVBKSTZ.mjs';
-import '../chunk-7JGD5TUI.mjs';
+import { sonorFetch } from '../chunk-5T3J24K4.mjs';
+import '../chunk-YRKWJCML.mjs';
+import '../chunk-K3PVUXKB.mjs';
 import '../chunk-BEXTDHO4.mjs';
 import { useState, useCallback, useEffect } from 'react';
 import { APIProvider, Map as Map$1, AdvancedMarker, Pin, InfoWindow } from '@vis.gl/react-google-maps';

package/dist/mcp/transport.d.ts

@@ -0,0 +1,166 @@
+/**
+ * @sonordev/site-kit/mcp/transport — the rate-limited public MCP relay
+ *
+ * Netlify rate-limits a native function (declarative `config.rateLimit`), never
+ * a Next.js route handler. So a public MCP endpoint on Netlify takes this path:
+ *
+ *   agent ─► /api/mcp            netlify/functions/mcp.mjs, rate-limited
+ *              │                 createNetlifyMcpRelay: signs the request
+ *              │                 (HMAC-SHA256 of MCP_TRANSPORT_SECRET over a label)
+ *              ▼
+ *            https://<deploy-id>--<site>.netlify.app/api/mcp-internal
+ *              │                 createMcpInternalRoute: 403 unless signed,
+ *              ▼                 then dispatches to the /api/mcp handlers
+ *            app/api/mcp/route.ts  protectMcpHandlers(createMcpHandler(...))
+ *
+ * In production the function owns /api/mcp, and the Next route behind it
+ * refuses unsigned calls too, so no request reaches a tool without passing
+ * the rate limit. The relay targets the deploy permalink, so a request is
+ * answered by the same immutable deploy that received it, and the base URL
+ * comes from the platform (`context`), never from a client header.
+ *
+ * Single source of truth for the relay. It replaced per-site copies in
+ * upforge-nextjs and wirsch-law-nextjs (`lib/mcp/transport-auth.ts`, the
+ * `protect()` wrapper, the `/api/mcp-internal` relay and the function body);
+ * don't fork it back into a site.
+ *
+ * Node only (`crypto`), and deliberately not re-exported from the
+ * `@sonordev/site-kit/mcp` barrel so that barrel stays runtime-neutral.
+ * Nothing here imports `server-only`: the Netlify function runs in plain Node,
+ * where `server-only` throws on import.
+ *
+ * Setup: `MCP_TRANSPORT_SECRET` (`openssl rand -hex 32`) in every deploy
+ * context, Functions scope. See the module README for the three files.
+ */
+/** Env var holding the relay's HMAC key. */
+export declare const MCP_TRANSPORT_SECRET_ENV = "MCP_TRANSPORT_SECRET";
+/** Default request header carrying the signature (and the response marker). */
+export declare const DEFAULT_MCP_TRANSPORT_HEADER = "x-site-mcp-transport";
+/** Default HMAC message. Changing it invalidates every signature at once. */
+export declare const DEFAULT_MCP_TRANSPORT_LABEL = "site-mcp-transport-v1";
+/** Path of the signed Next route the function relays to. */
+export declare const MCP_INTERNAL_PATH = "/api/mcp-internal";
+/** Value of the marker header on every relayed response. Release checks assert it. */
+export declare const MCP_RELAY_MARKER = "netlify-rate-limited-v1";
+/** Largest POST body the relay forwards (tool arguments), in bytes. */
+export declare const MCP_RELAY_MAX_BODY_BYTES: number;
+/** Upstream timeout. Under Netlify's 60 s synchronous function limit, so the 502 is ours. */
+export declare const MCP_RELAY_TIMEOUT_MS = 55000;
+/** Methods the MCP wire uses. Anything else gets a 405. */
+export declare const MCP_RELAY_METHODS: readonly ['GET', 'POST', 'OPTIONS', 'DELETE'];
+export interface McpTransportOptions {
+    /**
+     * Request header that carries the signature. The relay also stamps it on
+     * responses with {@link MCP_RELAY_MARKER}. Must match between the function
+     * and the Next routes. Default {@link DEFAULT_MCP_TRANSPORT_HEADER}.
+     */
+    header?: string;
+    /**
+     * HMAC message. Must match between the function and the Next routes.
+     * Default {@link DEFAULT_MCP_TRANSPORT_LABEL}.
+     */
+    label?: string;
+    /**
+     * The HMAC key, or a getter for it. Default: `MCP_TRANSPORT_SECRET`, read on
+     * every request (`Netlify.env` when present, else `process.env`).
+     */
+    secret?: string | (() => string | undefined);
+}
+export type McpRouteHandler = (request: Request) => Response | Promise<Response>;
+/** The four method handlers an MCP route exports (what `createMcpHandler` returns). */
+export interface McpRouteHandlerSet {
+    GET: McpRouteHandler;
+    POST: McpRouteHandler;
+    DELETE: McpRouteHandler;
+    OPTIONS: McpRouteHandler;
+}
+export interface ProtectMcpHandlersOptions extends McpTransportOptions {
+    /**
+     * Refuse unsigned requests. Default: `NODE_ENV === 'production'`, read per
+     * request, so `next dev` still answers a local MCP client directly.
+     */
+    enforce?: boolean | (() => boolean);
+}
+export interface NetlifyMcpRelayOptions extends McpTransportOptions {
+    /** The signed Next route, on the same deploy. Default {@link MCP_INTERNAL_PATH}. */
+    internalPath?: string;
+    /** Error text for the 502 when the upstream fails or times out. */
+    timeoutMessage?: string;
+}
+/** The parts of Netlify's function `context` the relay reads. */
+export interface NetlifyRelayContext {
+    deploy?: {
+        id?: string;
+    };
+    site?: {
+        name?: string;
+        url?: string;
+    };
+}
+/** The signature a relayed request carries: hex HMAC-SHA256 of `label` under `secret`. */
+export declare function signMcpTransport(secret: string, label?: string): string;
+/**
+ * True when the request came through the rate-limited relay: its transport
+ * header holds the HMAC of `label` under `MCP_TRANSPORT_SECRET`, compared in
+ * constant time. False when the secret is unset.
+ */
+export declare function hasMcpTransportAuthorization(request: Request, options?: McpTransportOptions): boolean;
+/**
+ * Wrap the `/api/mcp` handlers so, in production, they answer only relayed
+ * (signed) requests. The public path is the function's; this closes the Next
+ * handler behind it so nothing can skip the rate limit.
+ *
+ * @example
+ * ```ts
+ * // app/api/mcp/route.ts
+ * export const { POST, GET, DELETE, OPTIONS } = protectMcpHandlers(
+ *   createMcpHandler({ server: mcpServer, baseUrl: SITE_URL, allowedOrigins: '*' }),
+ * )
+ * ```
+ */
+export declare function protectMcpHandlers(handlers: McpRouteHandlerSet, options?: ProtectMcpHandlersOptions): McpRouteHandlerSet;
+/**
+ * Handlers for `/api/mcp-internal`, the relay's target. 403 without a valid
+ * signature in every environment, then dispatch by method to the `/api/mcp`
+ * handlers.
+ *
+ * @example
+ * ```ts
+ * // app/api/mcp-internal/route.ts
+ * import * as mcp from '../mcp/route'
+ * export const { POST, GET, DELETE, OPTIONS } = createMcpInternalRoute(mcp)
+ * ```
+ */
+export declare function createMcpInternalRoute(handlers: McpRouteHandlerSet, options?: McpTransportOptions): McpRouteHandlerSet;
+/**
+ * The default export for `netlify/functions/mcp.mjs`. Signs the request and
+ * relays it to {@link MCP_INTERNAL_PATH} on the same deploy.
+ *
+ * - 503 when `MCP_TRANSPORT_SECRET` is unset; 405 for methods MCP doesn't use.
+ * - Strips `host` and `content-length`, overwrites any client-sent transport
+ *   header with the real signature.
+ * - POST bodies over 64 KB get a 413 and are never forwarded.
+ * - `redirect: 'error'` and a 55 s timeout; any upstream failure is a 502.
+ * - Responses drop the encoding/length headers fetch already undid, and gain
+ *   `Cache-Control: no-store` plus the transport header set to
+ *   {@link MCP_RELAY_MARKER}.
+ *
+ * The function file must still declare its own literal `config`: Netlify
+ * reads `path` and `rateLimit` statically from that file, so they can't come
+ * from an import.
+ *
+ * @example
+ * ```js
+ * // netlify/functions/mcp.mjs
+ * import { createNetlifyMcpRelay } from '@sonordev/site-kit/mcp/transport'
+ *
+ * export default createNetlifyMcpRelay()
+ *
+ * export const config = {
+ *   path: '/api/mcp',
+ *   rateLimit: { windowSize: 60, windowLimit: 60, aggregateBy: ['ip', 'domain'] },
+ * }
+ * ```
+ */
+export declare function createNetlifyMcpRelay(options?: NetlifyMcpRelayOptions): (request: Request, context: NetlifyRelayContext) => Promise<Response>;
+//# sourceMappingURL=transport.d.ts.map

package/dist/mcp/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/mcp/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AASH,4CAA4C;AAC5C,eAAO,MAAM,wBAAwB,yBAAyB,CAAA;AAE9D,+EAA+E;AAC/E,eAAO,MAAM,4BAA4B,yBAAyB,CAAA;AAElE,6EAA6E;AAC7E,eAAO,MAAM,2BAA2B,0BAA0B,CAAA;AAElE,4DAA4D;AAC5D,eAAO,MAAM,iBAAiB,sBAAsB,CAAA;AAEpD,sFAAsF;AACtF,eAAO,MAAM,gBAAgB,4BAA4B,CAAA;AAEzD,uEAAuE;AACvE,eAAO,MAAM,wBAAwB,QAAY,CAAA;AAEjD,6FAA6F;AAC7F,eAAO,MAAM,oBAAoB,QAAS,CAAA;AAE1C,2DAA2D;AAC3D,eAAO,MAAM,iBAAiB,YAAI,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAU,CAAA;AAM9E,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAA;CAC7C;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEhF,uFAAuF;AACvF,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,eAAe,CAAA;IACpB,IAAI,EAAE,eAAe,CAAA;IACrB,MAAM,EAAE,eAAe,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;CACzB;AAED,MAAM,WAAW,yBAA0B,SAAQ,mBAAmB;IACpE;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,CAAA;CACpC;AAED,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IACjE,oFAAoF;IACpF,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,iEAAiE;AACjE,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACxB,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACvC;AA6BD,0FAA0F;AAC1F,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAE,MAAoC,GAAG,MAAM,CAEpG;AAUD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAEzG;AAYD;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,GAAE,yBAA8B,GACtC,kBAAkB,CAgBpB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,GAAE,mBAAwB,GAChC,kBAAkB,CAkBpB;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,sBAA2B,GACnC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAmDvE"}

package/dist/mcp/transport.js

@@ -0,0 +1,137 @@
+'use strict';
+
+var chunkYMZNEDFP_js = require('../chunk-YMZNEDFP.js');
+require('../chunk-SNAQBZPT.js');
+var crypto = require('crypto');
+
+var MCP_TRANSPORT_SECRET_ENV = "MCP_TRANSPORT_SECRET";
+var DEFAULT_MCP_TRANSPORT_HEADER = "x-site-mcp-transport";
+var DEFAULT_MCP_TRANSPORT_LABEL = "site-mcp-transport-v1";
+var MCP_INTERNAL_PATH = "/api/mcp-internal";
+var MCP_RELAY_MARKER = "netlify-rate-limited-v1";
+var MCP_RELAY_MAX_BODY_BYTES = 64 * 1024;
+var MCP_RELAY_TIMEOUT_MS = 55e3;
+var MCP_RELAY_METHODS = ["GET", "POST", "OPTIONS", "DELETE"];
+function resolveTransport(options = {}) {
+  const header = (options.header ?? DEFAULT_MCP_TRANSPORT_HEADER).toLowerCase();
+  const label = options.label ?? DEFAULT_MCP_TRANSPORT_LABEL;
+  if (!/^[a-z0-9-]+$/.test(header)) {
+    throw new TypeError(`@sonordev/site-kit/mcp/transport: invalid header name ${JSON.stringify(options.header)}`);
+  }
+  if (!label) throw new TypeError("@sonordev/site-kit/mcp/transport: label must not be empty");
+  return { header, label, secret: options.secret };
+}
+function readSecret(secret) {
+  if (typeof secret === "function") return secret();
+  if (secret !== void 0) return secret;
+  const netlify = globalThis.Netlify;
+  return netlify?.env?.get(MCP_TRANSPORT_SECRET_ENV) || process.env[MCP_TRANSPORT_SECRET_ENV];
+}
+function signMcpTransport(secret, label = DEFAULT_MCP_TRANSPORT_LABEL) {
+  return crypto.createHmac("sha256", secret).update(label).digest("hex");
+}
+function verify(request, transport) {
+  const key = readSecret(transport.secret);
+  const supplied = request.headers.get(transport.header) || "";
+  if (!key || !/^[a-f0-9]{64}$/.test(supplied)) return false;
+  const expected = crypto.createHmac("sha256", key).update(transport.label).digest();
+  return crypto.timingSafeEqual(expected, Buffer.from(supplied, "hex"));
+}
+function hasMcpTransportAuthorization(request, options = {}) {
+  return verify(request, resolveTransport(options));
+}
+function isEnforced(enforce) {
+  if (typeof enforce === "function") return enforce();
+  if (enforce !== void 0) return enforce;
+  return process.env.NODE_ENV === "production";
+}
+function protectMcpHandlers(handlers, options = {}) {
+  const transport = resolveTransport(options);
+  const protect = (handler) => (request) => {
+    if (isEnforced(options.enforce) && !verify(request, transport)) {
+      return Response.json({ error: "Use the public MCP endpoint" }, { status: 403 });
+    }
+    return handler(request);
+  };
+  return {
+    GET: protect(handlers.GET),
+    POST: protect(handlers.POST),
+    DELETE: protect(handlers.DELETE),
+    OPTIONS: protect(handlers.OPTIONS)
+  };
+}
+function createMcpInternalRoute(handlers, options = {}) {
+  const transport = resolveTransport(options);
+  const relay = (request) => {
+    if (!verify(request, transport)) return Response.json({ error: "Forbidden" }, { status: 403 });
+    switch (request.method) {
+      case "GET":
+        return handlers.GET(request);
+      case "POST":
+        return handlers.POST(request);
+      case "DELETE":
+        return handlers.DELETE(request);
+      case "OPTIONS":
+        return handlers.OPTIONS(request);
+      default:
+        return new Response(null, { status: 405 });
+    }
+  };
+  return { GET: relay, POST: relay, DELETE: relay, OPTIONS: relay };
+}
+function createNetlifyMcpRelay(options = {}) {
+  const transport = resolveTransport(options);
+  const internalPath = options.internalPath ?? MCP_INTERNAL_PATH;
+  const timeoutMessage = options.timeoutMessage ?? "MCP request timed out. Try again.";
+  const unavailable = () => Response.json({ error: "MCP is temporarily unavailable" }, { status: 503 });
+  return async function relayMcp(request, context) {
+    const key = readSecret(transport.secret);
+    if (!key) return unavailable();
+    if (!MCP_RELAY_METHODS.includes(request.method)) return new Response(null, { status: 405 });
+    const base = context?.deploy?.id && context.site?.name ? `https://${context.deploy.id}--${context.site.name}.netlify.app` : context?.site?.url;
+    if (!base) return unavailable();
+    const target = new URL(internalPath, base);
+    const headers = new Headers(request.headers);
+    headers.delete("host");
+    headers.delete("content-length");
+    headers.set(transport.header, signMcpTransport(key, transport.label));
+    let body;
+    if (request.method === "POST") {
+      const bytes = await chunkYMZNEDFP_js.readCappedBody(request, MCP_RELAY_MAX_BODY_BYTES);
+      if (!bytes) return Response.json({ error: "Tool arguments are too large" }, { status: 413 });
+      body = bytes;
+    }
+    try {
+      const response = await fetch(target, {
+        method: request.method,
+        headers,
+        body,
+        redirect: "error",
+        signal: AbortSignal.timeout(MCP_RELAY_TIMEOUT_MS)
+      });
+      const outgoing = new Headers(response.headers);
+      for (const name of ["content-encoding", "content-length", "transfer-encoding"]) outgoing.delete(name);
+      outgoing.set("Cache-Control", "no-store");
+      outgoing.set(transport.header, MCP_RELAY_MARKER);
+      return new Response(response.body, { status: response.status, headers: outgoing });
+    } catch {
+      return Response.json({ error: timeoutMessage }, { status: 502 });
+    }
+  };
+}
+
+exports.DEFAULT_MCP_TRANSPORT_HEADER = DEFAULT_MCP_TRANSPORT_HEADER;
+exports.DEFAULT_MCP_TRANSPORT_LABEL = DEFAULT_MCP_TRANSPORT_LABEL;
+exports.MCP_INTERNAL_PATH = MCP_INTERNAL_PATH;
+exports.MCP_RELAY_MARKER = MCP_RELAY_MARKER;
+exports.MCP_RELAY_MAX_BODY_BYTES = MCP_RELAY_MAX_BODY_BYTES;
+exports.MCP_RELAY_METHODS = MCP_RELAY_METHODS;
+exports.MCP_RELAY_TIMEOUT_MS = MCP_RELAY_TIMEOUT_MS;
+exports.MCP_TRANSPORT_SECRET_ENV = MCP_TRANSPORT_SECRET_ENV;
+exports.createMcpInternalRoute = createMcpInternalRoute;
+exports.createNetlifyMcpRelay = createNetlifyMcpRelay;
+exports.hasMcpTransportAuthorization = hasMcpTransportAuthorization;
+exports.protectMcpHandlers = protectMcpHandlers;
+exports.signMcpTransport = signMcpTransport;
+//# sourceMappingURL=transport.js.map
+//# sourceMappingURL=transport.js.map

package/dist/mcp/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/mcp/transport.ts"],"names":["createHmac","timingSafeEqual","readCappedBody"],"mappings":";;;;;;AA2CO,IAAM,wBAAA,GAA2B;AAGjC,IAAM,4BAAA,GAA+B;AAGrC,IAAM,2BAAA,GAA8B;AAGpC,IAAM,iBAAA,GAAoB;AAG1B,IAAM,gBAAA,GAAmB;AAGzB,IAAM,2BAA2B,EAAA,GAAK;AAGtC,IAAM,oBAAA,GAAuB;AAG7B,IAAM,iBAAA,GAAoB,CAAC,KAAA,EAAO,MAAA,EAAQ,WAAW,QAAQ;AAkEpE,SAAS,gBAAA,CAAiB,OAAA,GAA+B,EAAC,EAAsB;AAC9E,EAAA,MAAM,MAAA,GAAA,CAAU,OAAA,CAAQ,MAAA,IAAU,4BAAA,EAA8B,WAAA,EAAY;AAC5E,EAAA,MAAM,KAAA,GAAQ,QAAQ,KAAA,IAAS,2BAAA;AAC/B,EAAA,IAAI,CAAC,cAAA,CAAe,IAAA,CAAK,MAAM,CAAA,EAAG;AAChC,IAAA,MAAM,IAAI,UAAU,CAAA,sDAAA,EAAyD,IAAA,CAAK,UAAU,OAAA,CAAQ,MAAM,CAAC,CAAA,CAAE,CAAA;AAAA,EAC/G;AACA,EAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,UAAU,2DAA2D,CAAA;AAC3F,EAAA,OAAO,EAAE,MAAA,EAAQ,KAAA,EAAO,MAAA,EAAQ,QAAQ,MAAA,EAAO;AACjD;AAEA,SAAS,WAAW,MAAA,EAA2D;AAC7E,EAAA,IAAI,OAAO,MAAA,KAAW,UAAA,EAAY,OAAO,MAAA,EAAO;AAChD,EAAA,IAAI,MAAA,KAAW,QAAW,OAAO,MAAA;AACjC,EAAA,MAAM,UAAW,UAAA,CAAiF,OAAA;AAClG,EAAA,OAAO,SAAS,GAAA,EAAK,GAAA,CAAI,wBAAwB,CAAA,IAAK,OAAA,CAAQ,IAAI,wBAAwB,CAAA;AAC5F;AAGO,SAAS,gBAAA,CAAiB,MAAA,EAAgB,KAAA,GAAgB,2BAAA,EAAqC;AACpG,EAAA,OAAOA,iBAAA,CAAW,UAAU,MAAM,CAAA,CAAE,OAAO,KAAK,CAAA,CAAE,OAAO,KAAK,CAAA;AAChE;AAEA,SAAS,MAAA,CAAO,SAAkB,SAAA,EAAuC;AACvE,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,SAAA,CAAU,MAAM,CAAA;AACvC,EAAA,MAAM,WAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,SAAA,CAAU,MAAM,CAAA,IAAK,EAAA;AAC1D,EAAA,IAAI,CAAC,GAAA,IAAO,CAAC,iBAAiB,IAAA,CAAK,QAAQ,GAAG,OAAO,KAAA;AACrD,EAAA,MAAM,QAAA,GAAWA,kBAAW,QAAA,EAAU,GAAG,EAAE,MAAA,CAAO,SAAA,CAAU,KAAK,CAAA,CAAE,MAAA,EAAO;AAC1E,EAAA,OAAOC,uBAAgB,QAAA,EAAU,MAAA,CAAO,IAAA,CAAK,QAAA,EAAU,KAAK,CAAC,CAAA;AAC/D;AAOO,SAAS,4BAAA,CAA6B,OAAA,EAAkB,OAAA,GAA+B,EAAC,EAAY;AACzG,EAAA,OAAO,MAAA,CAAO,OAAA,EAAS,gBAAA,CAAiB,OAAO,CAAC,CAAA;AAClD;AAMA,SAAS,WAAW,OAAA,EAAwD;AAC1E,EAAA,IAAI,OAAO,OAAA,KAAY,UAAA,EAAY,OAAO,OAAA,EAAQ;AAClD,EAAA,IAAI,OAAA,KAAY,QAAW,OAAO,OAAA;AAClC,EAAA,OAAO,OAAA,CAAQ,IAAI,QAAA,KAAa,YAAA;AAClC;AAeO,SAAS,kBAAA,CACd,QAAA,EACA,OAAA,GAAqC,EAAC,EAClB;AACpB,EAAA,MAAM,SAAA,GAAY,iBAAiB,OAAO,CAAA;AAC1C,EAAA,MAAM,OAAA,GACJ,CAAC,OAAA,KACD,CAAC,OAAA,KAAY;AACX,IAAA,IAAI,UAAA,CAAW,QAAQ,OAAO,CAAA,IAAK,CAAC,MAAA,CAAO,OAAA,EAAS,SAAS,CAAA,EAAG;AAC9D,MAAA,OAAO,QAAA,CAAS,KAAK,EAAE,KAAA,EAAO,+BAA8B,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,IAChF;AACA,IAAA,OAAO,QAAQ,OAAO,CAAA;AAAA,EACxB,CAAA;AACF,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAA;AAAA,IACzB,IAAA,EAAM,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAA;AAAA,IAC3B,MAAA,EAAQ,OAAA,CAAQ,QAAA,CAAS,MAAM,CAAA;AAAA,IAC/B,OAAA,EAAS,OAAA,CAAQ,QAAA,CAAS,OAAO;AAAA,GACnC;AACF;AAcO,SAAS,sBAAA,CACd,QAAA,EACA,OAAA,GAA+B,EAAC,EACZ;AACpB,EAAA,MAAM,SAAA,GAAY,iBAAiB,OAAO,CAAA;AAC1C,EAAA,MAAM,KAAA,GAAyB,CAAC,OAAA,KAAY;AAC1C,IAAA,IAAI,CAAC,MAAA,CAAO,OAAA,EAAS,SAAS,GAAG,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,OAAO,WAAA,EAAY,EAAG,EAAE,MAAA,EAAQ,KAAK,CAAA;AAC7F,IAAA,QAAQ,QAAQ,MAAA;AAAQ,MACtB,KAAK,KAAA;AACH,QAAA,OAAO,QAAA,CAAS,IAAI,OAAO,CAAA;AAAA,MAC7B,KAAK,MAAA;AACH,QAAA,OAAO,QAAA,CAAS,KAAK,OAAO,CAAA;AAAA,MAC9B,KAAK,QAAA;AACH,QAAA,OAAO,QAAA,CAAS,OAAO,OAAO,CAAA;AAAA,MAChC,KAAK,SAAA;AACH,QAAA,OAAO,QAAA,CAAS,QAAQ,OAAO,CAAA;AAAA,MACjC;AACE,QAAA,OAAO,IAAI,QAAA,CAAS,IAAA,EAAM,EAAE,MAAA,EAAQ,KAAK,CAAA;AAAA;AAC7C,EACF,CAAA;AACA,EAAA,OAAO,EAAE,KAAK,KAAA,EAAO,IAAA,EAAM,OAAO,MAAA,EAAQ,KAAA,EAAO,SAAS,KAAA,EAAM;AAClE;AAoCO,SAAS,qBAAA,CACd,OAAA,GAAkC,EAAC,EACoC;AACvE,EAAA,MAAM,SAAA,GAAY,iBAAiB,OAAO,CAAA;AAC1C,EAAA,MAAM,YAAA,GAAe,QAAQ,YAAA,IAAgB,iBAAA;AAC7C,EAAA,MAAM,cAAA,GAAiB,QAAQ,cAAA,IAAkB,mCAAA;AACjD,EAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,IAAA,CAAK,EAAE,KAAA,EAAO,gCAAA,EAAiC,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAEpG,EAAA,OAAO,eAAe,QAAA,CAAS,OAAA,EAAS,OAAA,EAAS;AAC/C,IAAA,MAAM,GAAA,GAAM,UAAA,CAAW,SAAA,CAAU,MAAM,CAAA;AACvC,IAAA,IAAI,CAAC,GAAA,EAAK,OAAO,WAAA,EAAY;AAC7B,IAAA,IAAI,CAAE,iBAAA,CAAwC,QAAA,CAAS,OAAA,CAAQ,MAAM,CAAA,EAAG,OAAO,IAAI,QAAA,CAAS,IAAA,EAAM,EAAE,MAAA,EAAQ,KAAK,CAAA;AAIjH,IAAA,MAAM,OACJ,OAAA,EAAS,MAAA,EAAQ,EAAA,IAAM,OAAA,CAAQ,MAAM,IAAA,GACjC,CAAA,QAAA,EAAW,OAAA,CAAQ,MAAA,CAAO,EAAE,CAAA,EAAA,EAAK,OAAA,CAAQ,KAAK,IAAI,CAAA,YAAA,CAAA,GAClD,SAAS,IAAA,EAAM,GAAA;AACrB,IAAA,IAAI,CAAC,IAAA,EAAM,OAAO,WAAA,EAAY;AAC9B,IAAA,MAAM,MAAA,GAAS,IAAI,GAAA,CAAI,YAAA,EAAc,IAAI,CAAA;AAEzC,IAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ,OAAA,CAAQ,OAAO,CAAA;AAC3C,IAAA,OAAA,CAAQ,OAAO,MAAM,CAAA;AACrB,IAAA,OAAA,CAAQ,OAAO,gBAAgB,CAAA;AAE/B,IAAA,OAAA,CAAQ,IAAI,SAAA,CAAU,MAAA,EAAQ,iBAAiB,GAAA,EAAK,SAAA,CAAU,KAAK,CAAC,CAAA;AAEpE,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI,OAAA,CAAQ,WAAW,MAAA,EAAQ;AAC7B,MAAA,MAAM,KAAA,GAAQ,MAAMC,+BAAA,CAAe,OAAA,EAAS,wBAAwB,CAAA;AACpE,MAAA,IAAI,CAAC,KAAA,EAAO,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,KAAA,EAAO,8BAAA,EAA+B,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAC3F,MAAA,IAAA,GAAO,KAAA;AAAA,IACT;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,MAAA,EAAQ;AAAA,QACnC,QAAQ,OAAA,CAAQ,MAAA;AAAA,QAChB,OAAA;AAAA,QACA,IAAA;AAAA,QACA,QAAA,EAAU,OAAA;AAAA,QACV,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,oBAAoB;AAAA,OACjD,CAAA;AACD,MAAA,MAAM,QAAA,GAAW,IAAI,OAAA,CAAQ,QAAA,CAAS,OAAO,CAAA;AAE7C,MAAA,KAAA,MAAW,IAAA,IAAQ,CAAC,kBAAA,EAAoB,gBAAA,EAAkB,mBAAmB,CAAA,EAAG,QAAA,CAAS,OAAO,IAAI,CAAA;AACpG,MAAA,QAAA,CAAS,GAAA,CAAI,iBAAiB,UAAU,CAAA;AACxC,MAAA,QAAA,CAAS,GAAA,CAAI,SAAA,CAAU,MAAA,EAAQ,gBAAgB,CAAA;AAC/C,MAAA,OAAO,IAAI,QAAA,CAAS,QAAA,CAAS,IAAA,EAAM,EAAE,QAAQ,QAAA,CAAS,MAAA,EAAQ,OAAA,EAAS,QAAA,EAAU,CAAA;AAAA,IACnF,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,QAAA,CAAS,KAAK,EAAE,KAAA,EAAO,gBAAe,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,IACjE;AAAA,EACF,CAAA;AACF","file":"transport.js","sourcesContent":["/**\n * @sonordev/site-kit/mcp/transport — the rate-limited public MCP relay\n *\n * Netlify rate-limits a native function (declarative `config.rateLimit`), never\n * a Next.js route handler. So a public MCP endpoint on Netlify takes this path:\n *\n *   agent ─► /api/mcp            netlify/functions/mcp.mjs, rate-limited\n *              │                 createNetlifyMcpRelay: signs the request\n *              │                 (HMAC-SHA256 of MCP_TRANSPORT_SECRET over a label)\n *              ▼\n *            https://<deploy-id>--<site>.netlify.app/api/mcp-internal\n *              │                 createMcpInternalRoute: 403 unless signed,\n *              ▼                 then dispatches to the /api/mcp handlers\n *            app/api/mcp/route.ts  protectMcpHandlers(createMcpHandler(...))\n *\n * In production the function owns /api/mcp, and the Next route behind it\n * refuses unsigned calls too, so no request reaches a tool without passing\n * the rate limit. The relay targets the deploy permalink, so a request is\n * answered by the same immutable deploy that received it, and the base URL\n * comes from the platform (`context`), never from a client header.\n *\n * Single source of truth for the relay. It replaced per-site copies in\n * upforge-nextjs and wirsch-law-nextjs (`lib/mcp/transport-auth.ts`, the\n * `protect()` wrapper, the `/api/mcp-internal` relay and the function body);\n * don't fork it back into a site.\n *\n * Node only (`crypto`), and deliberately not re-exported from the\n * `@sonordev/site-kit/mcp` barrel so that barrel stays runtime-neutral.\n * Nothing here imports `server-only`: the Netlify function runs in plain Node,\n * where `server-only` throws on import.\n *\n * Setup: `MCP_TRANSPORT_SECRET` (`openssl rand -hex 32`) in every deploy\n * context, Functions scope. See the module README for the three files.\n */\n\nimport { createHmac, timingSafeEqual } from 'crypto'\nimport { readCappedBody } from '../shared/request-guards'\n\n// ============================================\n// Constants\n// ============================================\n\n/** Env var holding the relay's HMAC key. */\nexport const MCP_TRANSPORT_SECRET_ENV = 'MCP_TRANSPORT_SECRET'\n\n/** Default request header carrying the signature (and the response marker). */\nexport const DEFAULT_MCP_TRANSPORT_HEADER = 'x-site-mcp-transport'\n\n/** Default HMAC message. Changing it invalidates every signature at once. */\nexport const DEFAULT_MCP_TRANSPORT_LABEL = 'site-mcp-transport-v1'\n\n/** Path of the signed Next route the function relays to. */\nexport const MCP_INTERNAL_PATH = '/api/mcp-internal'\n\n/** Value of the marker header on every relayed response. Release checks assert it. */\nexport const MCP_RELAY_MARKER = 'netlify-rate-limited-v1'\n\n/** Largest POST body the relay forwards (tool arguments), in bytes. */\nexport const MCP_RELAY_MAX_BODY_BYTES = 64 * 1024\n\n/** Upstream timeout. Under Netlify's 60 s synchronous function limit, so the 502 is ours. */\nexport const MCP_RELAY_TIMEOUT_MS = 55_000\n\n/** Methods the MCP wire uses. Anything else gets a 405. */\nexport const MCP_RELAY_METHODS = ['GET', 'POST', 'OPTIONS', 'DELETE'] as const\n\n// ============================================\n// Types\n// ============================================\n\nexport interface McpTransportOptions {\n  /**\n   * Request header that carries the signature. The relay also stamps it on\n   * responses with {@link MCP_RELAY_MARKER}. Must match between the function\n   * and the Next routes. Default {@link DEFAULT_MCP_TRANSPORT_HEADER}.\n   */\n  header?: string\n  /**\n   * HMAC message. Must match between the function and the Next routes.\n   * Default {@link DEFAULT_MCP_TRANSPORT_LABEL}.\n   */\n  label?: string\n  /**\n   * The HMAC key, or a getter for it. Default: `MCP_TRANSPORT_SECRET`, read on\n   * every request (`Netlify.env` when present, else `process.env`).\n   */\n  secret?: string | (() => string | undefined)\n}\n\nexport type McpRouteHandler = (request: Request) => Response | Promise<Response>\n\n/** The four method handlers an MCP route exports (what `createMcpHandler` returns). */\nexport interface McpRouteHandlerSet {\n  GET: McpRouteHandler\n  POST: McpRouteHandler\n  DELETE: McpRouteHandler\n  OPTIONS: McpRouteHandler\n}\n\nexport interface ProtectMcpHandlersOptions extends McpTransportOptions {\n  /**\n   * Refuse unsigned requests. Default: `NODE_ENV === 'production'`, read per\n   * request, so `next dev` still answers a local MCP client directly.\n   */\n  enforce?: boolean | (() => boolean)\n}\n\nexport interface NetlifyMcpRelayOptions extends McpTransportOptions {\n  /** The signed Next route, on the same deploy. Default {@link MCP_INTERNAL_PATH}. */\n  internalPath?: string\n  /** Error text for the 502 when the upstream fails or times out. */\n  timeoutMessage?: string\n}\n\n/** The parts of Netlify's function `context` the relay reads. */\nexport interface NetlifyRelayContext {\n  deploy?: { id?: string }\n  site?: { name?: string; url?: string }\n}\n\ninterface ResolvedTransport {\n  header: string\n  label: string\n  secret: McpTransportOptions['secret']\n}\n\n// ============================================\n// Signing\n// ============================================\n\nfunction resolveTransport(options: McpTransportOptions = {}): ResolvedTransport {\n  const header = (options.header ?? DEFAULT_MCP_TRANSPORT_HEADER).toLowerCase()\n  const label = options.label ?? DEFAULT_MCP_TRANSPORT_LABEL\n  if (!/^[a-z0-9-]+$/.test(header)) {\n    throw new TypeError(`@sonordev/site-kit/mcp/transport: invalid header name ${JSON.stringify(options.header)}`)\n  }\n  if (!label) throw new TypeError('@sonordev/site-kit/mcp/transport: label must not be empty')\n  return { header, label, secret: options.secret }\n}\n\nfunction readSecret(secret: McpTransportOptions['secret']): string | undefined {\n  if (typeof secret === 'function') return secret()\n  if (secret !== undefined) return secret\n  const netlify = (globalThis as { Netlify?: { env?: { get(name: string): string | undefined } } }).Netlify\n  return netlify?.env?.get(MCP_TRANSPORT_SECRET_ENV) || process.env[MCP_TRANSPORT_SECRET_ENV]\n}\n\n/** The signature a relayed request carries: hex HMAC-SHA256 of `label` under `secret`. */\nexport function signMcpTransport(secret: string, label: string = DEFAULT_MCP_TRANSPORT_LABEL): string {\n  return createHmac('sha256', secret).update(label).digest('hex')\n}\n\nfunction verify(request: Request, transport: ResolvedTransport): boolean {\n  const key = readSecret(transport.secret)\n  const supplied = request.headers.get(transport.header) || ''\n  if (!key || !/^[a-f0-9]{64}$/.test(supplied)) return false\n  const expected = createHmac('sha256', key).update(transport.label).digest()\n  return timingSafeEqual(expected, Buffer.from(supplied, 'hex'))\n}\n\n/**\n * True when the request came through the rate-limited relay: its transport\n * header holds the HMAC of `label` under `MCP_TRANSPORT_SECRET`, compared in\n * constant time. False when the secret is unset.\n */\nexport function hasMcpTransportAuthorization(request: Request, options: McpTransportOptions = {}): boolean {\n  return verify(request, resolveTransport(options))\n}\n\n// ============================================\n// Next.js routes\n// ============================================\n\nfunction isEnforced(enforce: ProtectMcpHandlersOptions['enforce']): boolean {\n  if (typeof enforce === 'function') return enforce()\n  if (enforce !== undefined) return enforce\n  return process.env.NODE_ENV === 'production'\n}\n\n/**\n * Wrap the `/api/mcp` handlers so, in production, they answer only relayed\n * (signed) requests. The public path is the function's; this closes the Next\n * handler behind it so nothing can skip the rate limit.\n *\n * @example\n * ```ts\n * // app/api/mcp/route.ts\n * export const { POST, GET, DELETE, OPTIONS } = protectMcpHandlers(\n *   createMcpHandler({ server: mcpServer, baseUrl: SITE_URL, allowedOrigins: '*' }),\n * )\n * ```\n */\nexport function protectMcpHandlers(\n  handlers: McpRouteHandlerSet,\n  options: ProtectMcpHandlersOptions = {},\n): McpRouteHandlerSet {\n  const transport = resolveTransport(options)\n  const protect =\n    (handler: McpRouteHandler): McpRouteHandler =>\n    (request) => {\n      if (isEnforced(options.enforce) && !verify(request, transport)) {\n        return Response.json({ error: 'Use the public MCP endpoint' }, { status: 403 })\n      }\n      return handler(request)\n    }\n  return {\n    GET: protect(handlers.GET),\n    POST: protect(handlers.POST),\n    DELETE: protect(handlers.DELETE),\n    OPTIONS: protect(handlers.OPTIONS),\n  }\n}\n\n/**\n * Handlers for `/api/mcp-internal`, the relay's target. 403 without a valid\n * signature in every environment, then dispatch by method to the `/api/mcp`\n * handlers.\n *\n * @example\n * ```ts\n * // app/api/mcp-internal/route.ts\n * import * as mcp from '../mcp/route'\n * export const { POST, GET, DELETE, OPTIONS } = createMcpInternalRoute(mcp)\n * ```\n */\nexport function createMcpInternalRoute(\n  handlers: McpRouteHandlerSet,\n  options: McpTransportOptions = {},\n): McpRouteHandlerSet {\n  const transport = resolveTransport(options)\n  const relay: McpRouteHandler = (request) => {\n    if (!verify(request, transport)) return Response.json({ error: 'Forbidden' }, { status: 403 })\n    switch (request.method) {\n      case 'GET':\n        return handlers.GET(request)\n      case 'POST':\n        return handlers.POST(request)\n      case 'DELETE':\n        return handlers.DELETE(request)\n      case 'OPTIONS':\n        return handlers.OPTIONS(request)\n      default:\n        return new Response(null, { status: 405 })\n    }\n  }\n  return { GET: relay, POST: relay, DELETE: relay, OPTIONS: relay }\n}\n\n// ============================================\n// Netlify function\n// ============================================\n\n/**\n * The default export for `netlify/functions/mcp.mjs`. Signs the request and\n * relays it to {@link MCP_INTERNAL_PATH} on the same deploy.\n *\n * - 503 when `MCP_TRANSPORT_SECRET` is unset; 405 for methods MCP doesn't use.\n * - Strips `host` and `content-length`, overwrites any client-sent transport\n *   header with the real signature.\n * - POST bodies over 64 KB get a 413 and are never forwarded.\n * - `redirect: 'error'` and a 55 s timeout; any upstream failure is a 502.\n * - Responses drop the encoding/length headers fetch already undid, and gain\n *   `Cache-Control: no-store` plus the transport header set to\n *   {@link MCP_RELAY_MARKER}.\n *\n * The function file must still declare its own literal `config`: Netlify\n * reads `path` and `rateLimit` statically from that file, so they can't come\n * from an import.\n *\n * @example\n * ```js\n * // netlify/functions/mcp.mjs\n * import { createNetlifyMcpRelay } from '@sonordev/site-kit/mcp/transport'\n *\n * export default createNetlifyMcpRelay()\n *\n * export const config = {\n *   path: '/api/mcp',\n *   rateLimit: { windowSize: 60, windowLimit: 60, aggregateBy: ['ip', 'domain'] },\n * }\n * ```\n */\nexport function createNetlifyMcpRelay(\n  options: NetlifyMcpRelayOptions = {},\n): (request: Request, context: NetlifyRelayContext) => Promise<Response> {\n  const transport = resolveTransport(options)\n  const internalPath = options.internalPath ?? MCP_INTERNAL_PATH\n  const timeoutMessage = options.timeoutMessage ?? 'MCP request timed out. Try again.'\n  const unavailable = () => Response.json({ error: 'MCP is temporarily unavailable' }, { status: 503 })\n\n  return async function relayMcp(request, context) {\n    const key = readSecret(transport.secret)\n    if (!key) return unavailable()\n    if (!(MCP_RELAY_METHODS as readonly string[]).includes(request.method)) return new Response(null, { status: 405 })\n\n    // context is platform-provided, never a client-controlled forwarding URL.\n    // The deploy permalink keeps the relay on the deploy that took the call.\n    const base =\n      context?.deploy?.id && context.site?.name\n        ? `https://${context.deploy.id}--${context.site.name}.netlify.app`\n        : context?.site?.url\n    if (!base) return unavailable()\n    const target = new URL(internalPath, base)\n\n    const headers = new Headers(request.headers)\n    headers.delete('host')\n    headers.delete('content-length')\n    // set, not append: overwrite anything a client sent under this name.\n    headers.set(transport.header, signMcpTransport(key, transport.label))\n\n    let body: Uint8Array<ArrayBuffer> | undefined\n    if (request.method === 'POST') {\n      const bytes = await readCappedBody(request, MCP_RELAY_MAX_BODY_BYTES)\n      if (!bytes) return Response.json({ error: 'Tool arguments are too large' }, { status: 413 })\n      body = bytes\n    }\n\n    try {\n      const response = await fetch(target, {\n        method: request.method,\n        headers,\n        body,\n        redirect: 'error',\n        signal: AbortSignal.timeout(MCP_RELAY_TIMEOUT_MS),\n      })\n      const outgoing = new Headers(response.headers)\n      // fetch decodes the upstream body; its compression/length headers no longer apply.\n      for (const name of ['content-encoding', 'content-length', 'transfer-encoding']) outgoing.delete(name)\n      outgoing.set('Cache-Control', 'no-store')\n      outgoing.set(transport.header, MCP_RELAY_MARKER)\n      return new Response(response.body, { status: response.status, headers: outgoing })\n    } catch {\n      return Response.json({ error: timeoutMessage }, { status: 502 })\n    }\n  }\n}\n"]}

package/dist/mcp/transport.mjs

@@ -0,0 +1,123 @@
+import { readCappedBody } from '../chunk-Z2URIOKG.mjs';
+import '../chunk-BEXTDHO4.mjs';
+import { createHmac, timingSafeEqual } from 'crypto';
+
+var MCP_TRANSPORT_SECRET_ENV = "MCP_TRANSPORT_SECRET";
+var DEFAULT_MCP_TRANSPORT_HEADER = "x-site-mcp-transport";
+var DEFAULT_MCP_TRANSPORT_LABEL = "site-mcp-transport-v1";
+var MCP_INTERNAL_PATH = "/api/mcp-internal";
+var MCP_RELAY_MARKER = "netlify-rate-limited-v1";
+var MCP_RELAY_MAX_BODY_BYTES = 64 * 1024;
+var MCP_RELAY_TIMEOUT_MS = 55e3;
+var MCP_RELAY_METHODS = ["GET", "POST", "OPTIONS", "DELETE"];
+function resolveTransport(options = {}) {
+  const header = (options.header ?? DEFAULT_MCP_TRANSPORT_HEADER).toLowerCase();
+  const label = options.label ?? DEFAULT_MCP_TRANSPORT_LABEL;
+  if (!/^[a-z0-9-]+$/.test(header)) {
+    throw new TypeError(`@sonordev/site-kit/mcp/transport: invalid header name ${JSON.stringify(options.header)}`);
+  }
+  if (!label) throw new TypeError("@sonordev/site-kit/mcp/transport: label must not be empty");
+  return { header, label, secret: options.secret };
+}
+function readSecret(secret) {
+  if (typeof secret === "function") return secret();
+  if (secret !== void 0) return secret;
+  const netlify = globalThis.Netlify;
+  return netlify?.env?.get(MCP_TRANSPORT_SECRET_ENV) || process.env[MCP_TRANSPORT_SECRET_ENV];
+}
+function signMcpTransport(secret, label = DEFAULT_MCP_TRANSPORT_LABEL) {
+  return createHmac("sha256", secret).update(label).digest("hex");
+}
+function verify(request, transport) {
+  const key = readSecret(transport.secret);
+  const supplied = request.headers.get(transport.header) || "";
+  if (!key || !/^[a-f0-9]{64}$/.test(supplied)) return false;
+  const expected = createHmac("sha256", key).update(transport.label).digest();
+  return timingSafeEqual(expected, Buffer.from(supplied, "hex"));
+}
+function hasMcpTransportAuthorization(request, options = {}) {
+  return verify(request, resolveTransport(options));
+}
+function isEnforced(enforce) {
+  if (typeof enforce === "function") return enforce();
+  if (enforce !== void 0) return enforce;
+  return process.env.NODE_ENV === "production";
+}
+function protectMcpHandlers(handlers, options = {}) {
+  const transport = resolveTransport(options);
+  const protect = (handler) => (request) => {
+    if (isEnforced(options.enforce) && !verify(request, transport)) {
+      return Response.json({ error: "Use the public MCP endpoint" }, { status: 403 });
+    }
+    return handler(request);
+  };
+  return {
+    GET: protect(handlers.GET),
+    POST: protect(handlers.POST),
+    DELETE: protect(handlers.DELETE),
+    OPTIONS: protect(handlers.OPTIONS)
+  };
+}
+function createMcpInternalRoute(handlers, options = {}) {
+  const transport = resolveTransport(options);
+  const relay = (request) => {
+    if (!verify(request, transport)) return Response.json({ error: "Forbidden" }, { status: 403 });
+    switch (request.method) {
+      case "GET":
+        return handlers.GET(request);
+      case "POST":
+        return handlers.POST(request);
+      case "DELETE":
+        return handlers.DELETE(request);
+      case "OPTIONS":
+        return handlers.OPTIONS(request);
+      default:
+        return new Response(null, { status: 405 });
+    }
+  };
+  return { GET: relay, POST: relay, DELETE: relay, OPTIONS: relay };
+}
+function createNetlifyMcpRelay(options = {}) {
+  const transport = resolveTransport(options);
+  const internalPath = options.internalPath ?? MCP_INTERNAL_PATH;
+  const timeoutMessage = options.timeoutMessage ?? "MCP request timed out. Try again.";
+  const unavailable = () => Response.json({ error: "MCP is temporarily unavailable" }, { status: 503 });
+  return async function relayMcp(request, context) {
+    const key = readSecret(transport.secret);
+    if (!key) return unavailable();
+    if (!MCP_RELAY_METHODS.includes(request.method)) return new Response(null, { status: 405 });
+    const base = context?.deploy?.id && context.site?.name ? `https://${context.deploy.id}--${context.site.name}.netlify.app` : context?.site?.url;
+    if (!base) return unavailable();
+    const target = new URL(internalPath, base);
+    const headers = new Headers(request.headers);
+    headers.delete("host");
+    headers.delete("content-length");
+    headers.set(transport.header, signMcpTransport(key, transport.label));
+    let body;
+    if (request.method === "POST") {
+      const bytes = await readCappedBody(request, MCP_RELAY_MAX_BODY_BYTES);
+      if (!bytes) return Response.json({ error: "Tool arguments are too large" }, { status: 413 });
+      body = bytes;
+    }
+    try {
+      const response = await fetch(target, {
+        method: request.method,
+        headers,
+        body,
+        redirect: "error",
+        signal: AbortSignal.timeout(MCP_RELAY_TIMEOUT_MS)
+      });
+      const outgoing = new Headers(response.headers);
+      for (const name of ["content-encoding", "content-length", "transfer-encoding"]) outgoing.delete(name);
+      outgoing.set("Cache-Control", "no-store");
+      outgoing.set(transport.header, MCP_RELAY_MARKER);
+      return new Response(response.body, { status: response.status, headers: outgoing });
+    } catch {
+      return Response.json({ error: timeoutMessage }, { status: 502 });
+    }
+  };
+}
+
+export { DEFAULT_MCP_TRANSPORT_HEADER, DEFAULT_MCP_TRANSPORT_LABEL, MCP_INTERNAL_PATH, MCP_RELAY_MARKER, MCP_RELAY_MAX_BODY_BYTES, MCP_RELAY_METHODS, MCP_RELAY_TIMEOUT_MS, MCP_TRANSPORT_SECRET_ENV, createMcpInternalRoute, createNetlifyMcpRelay, hasMcpTransportAuthorization, protectMcpHandlers, signMcpTransport };
+//# sourceMappingURL=transport.mjs.map
+//# sourceMappingURL=transport.mjs.map