@sonordev/site-kit 6.3.6 → 6.4.0

package/dist/mcp/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/mcp/transport.ts"],"names":["createHmac","timingSafeEqual","readCappedBody"],"mappings":";;;;;;AA2CO,IAAM,wBAAA,GAA2B;AAGjC,IAAM,4BAAA,GAA+B;AAGrC,IAAM,2BAAA,GAA8B;AAGpC,IAAM,iBAAA,GAAoB;AAG1B,IAAM,gBAAA,GAAmB;AAGzB,IAAM,2BAA2B,EAAA,GAAK;AAGtC,IAAM,oBAAA,GAAuB;AAG7B,IAAM,iBAAA,GAAoB,CAAC,KAAA,EAAO,MAAA,EAAQ,WAAW,QAAQ;AAkEpE,SAAS,gBAAA,CAAiB,OAAA,GAA+B,EAAC,EAAsB;AAC9E,EAAA,MAAM,MAAA,GAAA,CAAU,OAAA,CAAQ,MAAA,IAAU,4BAAA,EAA8B,WAAA,EAAY;AAC5E,EAAA,MAAM,KAAA,GAAQ,QAAQ,KAAA,IAAS,2BAAA;AAC/B,EAAA,IAAI,CAAC,cAAA,CAAe,IAAA,CAAK,MAAM,CAAA,EAAG;AAChC,IAAA,MAAM,IAAI,UAAU,CAAA,sDAAA,EAAyD,IAAA,CAAK,UAAU,OAAA,CAAQ,MAAM,CAAC,CAAA,CAAE,CAAA;AAAA,EAC/G;AACA,EAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,UAAU,2DAA2D,CAAA;AAC3F,EAAA,OAAO,EAAE,MAAA,EAAQ,KAAA,EAAO,MAAA,EAAQ,QAAQ,MAAA,EAAO;AACjD;AAEA,SAAS,WAAW,MAAA,EAA2D;AAC7E,EAAA,IAAI,OAAO,MAAA,KAAW,UAAA,EAAY,OAAO,MAAA,EAAO;AAChD,EAAA,IAAI,MAAA,KAAW,QAAW,OAAO,MAAA;AACjC,EAAA,MAAM,UAAW,UAAA,CAAiF,OAAA;AAClG,EAAA,OAAO,SAAS,GAAA,EAAK,GAAA,CAAI,wBAAwB,CAAA,IAAK,OAAA,CAAQ,IAAI,wBAAwB,CAAA;AAC5F;AAGO,SAAS,gBAAA,CAAiB,MAAA,EAAgB,KAAA,GAAgB,2BAAA,EAAqC;AACpG,EAAA,OAAOA,iBAAA,CAAW,UAAU,MAAM,CAAA,CAAE,OAAO,KAAK,CAAA,CAAE,OAAO,KAAK,CAAA;AAChE;AAEA,SAAS,MAAA,CAAO,SAAkB,SAAA,EAAuC;AACvE,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,SAAA,CAAU,MAAM,CAAA;AACvC,EAAA,MAAM,WAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,SAAA,CAAU,MAAM,CAAA,IAAK,EAAA;AAC1D,EAAA,IAAI,CAAC,GAAA,IAAO,CAAC,iBAAiB,IAAA,CAAK,QAAQ,GAAG,OAAO,KAAA;AACrD,EAAA,MAAM,QAAA,GAAWA,kBAAW,QAAA,EAAU,GAAG,EAAE,MAAA,CAAO,SAAA,CAAU,KAAK,CAAA,CAAE,MAAA,EAAO;AAC1E,EAAA,OAAOC,uBAAgB,QAAA,EAAU,MAAA,CAAO,IAAA,CAAK,QAAA,EAAU,KAAK,CAAC,CAAA;AAC/D;AAOO,SAAS,4BAAA,CAA6B,OAAA,EAAkB,OAAA,GAA+B,EAAC,EAAY;AACzG,EAAA,OAAO,MAAA,CAAO,OAAA,EAAS,gBAAA,CAAiB,OAAO,CAAC,CAAA;AAClD;AAMA,SAAS,WAAW,OAAA,EAAwD;AAC1E,EAAA,IAAI,OAAO,OAAA,KAAY,UAAA,EAAY,OAAO,OAAA,EAAQ;AAClD,EAAA,IAAI,OAAA,KAAY,QAAW,OAAO,OAAA;AAClC,EAAA,OAAO,OAAA,CAAQ,IAAI,QAAA,KAAa,YAAA;AAClC;AAeO,SAAS,kBAAA,CACd,QAAA,EACA,OAAA,GAAqC,EAAC,EAClB;AACpB,EAAA,MAAM,SAAA,GAAY,iBAAiB,OAAO,CAAA;AAC1C,EAAA,MAAM,OAAA,GACJ,CAAC,OAAA,KACD,CAAC,OAAA,KAAY;AACX,IAAA,IAAI,UAAA,CAAW,QAAQ,OAAO,CAAA,IAAK,CAAC,MAAA,CAAO,OAAA,EAAS,SAAS,CAAA,EAAG;AAC9D,MAAA,OAAO,QAAA,CAAS,KAAK,EAAE,KAAA,EAAO,+BAA8B,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,IAChF;AACA,IAAA,OAAO,QAAQ,OAAO,CAAA;AAAA,EACxB,CAAA;AACF,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAA;AAAA,IACzB,IAAA,EAAM,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAA;AAAA,IAC3B,MAAA,EAAQ,OAAA,CAAQ,QAAA,CAAS,MAAM,CAAA;AAAA,IAC/B,OAAA,EAAS,OAAA,CAAQ,QAAA,CAAS,OAAO;AAAA,GACnC;AACF;AAcO,SAAS,sBAAA,CACd,QAAA,EACA,OAAA,GAA+B,EAAC,EACZ;AACpB,EAAA,MAAM,SAAA,GAAY,iBAAiB,OAAO,CAAA;AAC1C,EAAA,MAAM,KAAA,GAAyB,CAAC,OAAA,KAAY;AAC1C,IAAA,IAAI,CAAC,MAAA,CAAO,OAAA,EAAS,SAAS,GAAG,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,OAAO,WAAA,EAAY,EAAG,EAAE,MAAA,EAAQ,KAAK,CAAA;AAC7F,IAAA,QAAQ,QAAQ,MAAA;AAAQ,MACtB,KAAK,KAAA;AACH,QAAA,OAAO,QAAA,CAAS,IAAI,OAAO,CAAA;AAAA,MAC7B,KAAK,MAAA;AACH,QAAA,OAAO,QAAA,CAAS,KAAK,OAAO,CAAA;AAAA,MAC9B,KAAK,QAAA;AACH,QAAA,OAAO,QAAA,CAAS,OAAO,OAAO,CAAA;AAAA,MAChC,KAAK,SAAA;AACH,QAAA,OAAO,QAAA,CAAS,QAAQ,OAAO,CAAA;AAAA,MACjC;AACE,QAAA,OAAO,IAAI,QAAA,CAAS,IAAA,EAAM,EAAE,MAAA,EAAQ,KAAK,CAAA;AAAA;AAC7C,EACF,CAAA;AACA,EAAA,OAAO,EAAE,KAAK,KAAA,EAAO,IAAA,EAAM,OAAO,MAAA,EAAQ,KAAA,EAAO,SAAS,KAAA,EAAM;AAClE;AAoCO,SAAS,qBAAA,CACd,OAAA,GAAkC,EAAC,EACoC;AACvE,EAAA,MAAM,SAAA,GAAY,iBAAiB,OAAO,CAAA;AAC1C,EAAA,MAAM,YAAA,GAAe,QAAQ,YAAA,IAAgB,iBAAA;AAC7C,EAAA,MAAM,cAAA,GAAiB,QAAQ,cAAA,IAAkB,mCAAA;AACjD,EAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,IAAA,CAAK,EAAE,KAAA,EAAO,gCAAA,EAAiC,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAEpG,EAAA,OAAO,eAAe,QAAA,CAAS,OAAA,EAAS,OAAA,EAAS;AAC/C,IAAA,MAAM,GAAA,GAAM,UAAA,CAAW,SAAA,CAAU,MAAM,CAAA;AACvC,IAAA,IAAI,CAAC,GAAA,EAAK,OAAO,WAAA,EAAY;AAC7B,IAAA,IAAI,CAAE,iBAAA,CAAwC,QAAA,CAAS,OAAA,CAAQ,MAAM,CAAA,EAAG,OAAO,IAAI,QAAA,CAAS,IAAA,EAAM,EAAE,MAAA,EAAQ,KAAK,CAAA;AAIjH,IAAA,MAAM,OACJ,OAAA,EAAS,MAAA,EAAQ,EAAA,IAAM,OAAA,CAAQ,MAAM,IAAA,GACjC,CAAA,QAAA,EAAW,OAAA,CAAQ,MAAA,CAAO,EAAE,CAAA,EAAA,EAAK,OAAA,CAAQ,KAAK,IAAI,CAAA,YAAA,CAAA,GAClD,SAAS,IAAA,EAAM,GAAA;AACrB,IAAA,IAAI,CAAC,IAAA,EAAM,OAAO,WAAA,EAAY;AAC9B,IAAA,MAAM,MAAA,GAAS,IAAI,GAAA,CAAI,YAAA,EAAc,IAAI,CAAA;AAEzC,IAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ,OAAA,CAAQ,OAAO,CAAA;AAC3C,IAAA,OAAA,CAAQ,OAAO,MAAM,CAAA;AACrB,IAAA,OAAA,CAAQ,OAAO,gBAAgB,CAAA;AAE/B,IAAA,OAAA,CAAQ,IAAI,SAAA,CAAU,MAAA,EAAQ,iBAAiB,GAAA,EAAK,SAAA,CAAU,KAAK,CAAC,CAAA;AAEpE,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI,OAAA,CAAQ,WAAW,MAAA,EAAQ;AAC7B,MAAA,MAAM,KAAA,GAAQ,MAAMC,+BAAA,CAAe,OAAA,EAAS,wBAAwB,CAAA;AACpE,MAAA,IAAI,CAAC,KAAA,EAAO,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,KAAA,EAAO,8BAAA,EAA+B,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAC3F,MAAA,IAAA,GAAO,KAAA;AAAA,IACT;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,MAAA,EAAQ;AAAA,QACnC,QAAQ,OAAA,CAAQ,MAAA;AAAA,QAChB,OAAA;AAAA,QACA,IAAA;AAAA,QACA,QAAA,EAAU,OAAA;AAAA,QACV,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,oBAAoB;AAAA,OACjD,CAAA;AACD,MAAA,MAAM,QAAA,GAAW,IAAI,OAAA,CAAQ,QAAA,CAAS,OAAO,CAAA;AAE7C,MAAA,KAAA,MAAW,IAAA,IAAQ,CAAC,kBAAA,EAAoB,gBAAA,EAAkB,mBAAmB,CAAA,EAAG,QAAA,CAAS,OAAO,IAAI,CAAA;AACpG,MAAA,QAAA,CAAS,GAAA,CAAI,iBAAiB,UAAU,CAAA;AACxC,MAAA,QAAA,CAAS,GAAA,CAAI,SAAA,CAAU,MAAA,EAAQ,gBAAgB,CAAA;AAC/C,MAAA,OAAO,IAAI,QAAA,CAAS,QAAA,CAAS,IAAA,EAAM,EAAE,QAAQ,QAAA,CAAS,MAAA,EAAQ,OAAA,EAAS,QAAA,EAAU,CAAA;AAAA,IACnF,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,QAAA,CAAS,KAAK,EAAE,KAAA,EAAO,gBAAe,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,IACjE;AAAA,EACF,CAAA;AACF","file":"transport.js","sourcesContent":["/**\n * @sonordev/site-kit/mcp/transport — the rate-limited public MCP relay\n *\n * Netlify rate-limits a native function (declarative `config.rateLimit`), never\n * a Next.js route handler. So a public MCP endpoint on Netlify takes this path:\n *\n *   agent ─► /api/mcp            netlify/functions/mcp.mjs, rate-limited\n *              │                 createNetlifyMcpRelay: signs the request\n *              │                 (HMAC-SHA256 of MCP_TRANSPORT_SECRET over a label)\n *              ▼\n *            https://<deploy-id>--<site>.netlify.app/api/mcp-internal\n *              │                 createMcpInternalRoute: 403 unless signed,\n *              ▼                 then dispatches to the /api/mcp handlers\n *            app/api/mcp/route.ts  protectMcpHandlers(createMcpHandler(...))\n *\n * In production the function owns /api/mcp, and the Next route behind it\n * refuses unsigned calls too, so no request reaches a tool without passing\n * the rate limit. The relay targets the deploy permalink, so a request is\n * answered by the same immutable deploy that received it, and the base URL\n * comes from the platform (`context`), never from a client header.\n *\n * Single source of truth for the relay. It replaced per-site copies in\n * upforge-nextjs and wirsch-law-nextjs (`lib/mcp/transport-auth.ts`, the\n * `protect()` wrapper, the `/api/mcp-internal` relay and the function body);\n * don't fork it back into a site.\n *\n * Node only (`crypto`), and deliberately not re-exported from the\n * `@sonordev/site-kit/mcp` barrel so that barrel stays runtime-neutral.\n * Nothing here imports `server-only`: the Netlify function runs in plain Node,\n * where `server-only` throws on import.\n *\n * Setup: `MCP_TRANSPORT_SECRET` (`openssl rand -hex 32`) in every deploy\n * context, Functions scope. See the module README for the three files.\n */\n\nimport { createHmac, timingSafeEqual } from 'crypto'\nimport { readCappedBody } from '../shared/request-guards'\n\n// ============================================\n// Constants\n// ============================================\n\n/** Env var holding the relay's HMAC key. */\nexport const MCP_TRANSPORT_SECRET_ENV = 'MCP_TRANSPORT_SECRET'\n\n/** Default request header carrying the signature (and the response marker). */\nexport const DEFAULT_MCP_TRANSPORT_HEADER = 'x-site-mcp-transport'\n\n/** Default HMAC message. Changing it invalidates every signature at once. */\nexport const DEFAULT_MCP_TRANSPORT_LABEL = 'site-mcp-transport-v1'\n\n/** Path of the signed Next route the function relays to. */\nexport const MCP_INTERNAL_PATH = '/api/mcp-internal'\n\n/** Value of the marker header on every relayed response. Release checks assert it. */\nexport const MCP_RELAY_MARKER = 'netlify-rate-limited-v1'\n\n/** Largest POST body the relay forwards (tool arguments), in bytes. */\nexport const MCP_RELAY_MAX_BODY_BYTES = 64 * 1024\n\n/** Upstream timeout. Under Netlify's 60 s synchronous function limit, so the 502 is ours. */\nexport const MCP_RELAY_TIMEOUT_MS = 55_000\n\n/** Methods the MCP wire uses. Anything else gets a 405. */\nexport const MCP_RELAY_METHODS = ['GET', 'POST', 'OPTIONS', 'DELETE'] as const\n\n// ============================================\n// Types\n// ============================================\n\nexport interface McpTransportOptions {\n  /**\n   * Request header that carries the signature. The relay also stamps it on\n   * responses with {@link MCP_RELAY_MARKER}. Must match between the function\n   * and the Next routes. Default {@link DEFAULT_MCP_TRANSPORT_HEADER}.\n   */\n  header?: string\n  /**\n   * HMAC message. Must match between the function and the Next routes.\n   * Default {@link DEFAULT_MCP_TRANSPORT_LABEL}.\n   */\n  label?: string\n  /**\n   * The HMAC key, or a getter for it. Default: `MCP_TRANSPORT_SECRET`, read on\n   * every request (`Netlify.env` when present, else `process.env`).\n   */\n  secret?: string | (() => string | undefined)\n}\n\nexport type McpRouteHandler = (request: Request) => Response | Promise<Response>\n\n/** The four method handlers an MCP route exports (what `createMcpHandler` returns). */\nexport interface McpRouteHandlerSet {\n  GET: McpRouteHandler\n  POST: McpRouteHandler\n  DELETE: McpRouteHandler\n  OPTIONS: McpRouteHandler\n}\n\nexport interface ProtectMcpHandlersOptions extends McpTransportOptions {\n  /**\n   * Refuse unsigned requests. Default: `NODE_ENV === 'production'`, read per\n   * request, so `next dev` still answers a local MCP client directly.\n   */\n  enforce?: boolean | (() => boolean)\n}\n\nexport interface NetlifyMcpRelayOptions extends McpTransportOptions {\n  /** The signed Next route, on the same deploy. Default {@link MCP_INTERNAL_PATH}. */\n  internalPath?: string\n  /** Error text for the 502 when the upstream fails or times out. */\n  timeoutMessage?: string\n}\n\n/** The parts of Netlify's function `context` the relay reads. */\nexport interface NetlifyRelayContext {\n  deploy?: { id?: string }\n  site?: { name?: string; url?: string }\n}\n\ninterface ResolvedTransport {\n  header: string\n  label: string\n  secret: McpTransportOptions['secret']\n}\n\n// ============================================\n// Signing\n// ============================================\n\nfunction resolveTransport(options: McpTransportOptions = {}): ResolvedTransport {\n  const header = (options.header ?? DEFAULT_MCP_TRANSPORT_HEADER).toLowerCase()\n  const label = options.label ?? DEFAULT_MCP_TRANSPORT_LABEL\n  if (!/^[a-z0-9-]+$/.test(header)) {\n    throw new TypeError(`@sonordev/site-kit/mcp/transport: invalid header name ${JSON.stringify(options.header)}`)\n  }\n  if (!label) throw new TypeError('@sonordev/site-kit/mcp/transport: label must not be empty')\n  return { header, label, secret: options.secret }\n}\n\nfunction readSecret(secret: McpTransportOptions['secret']): string | undefined {\n  if (typeof secret === 'function') return secret()\n  if (secret !== undefined) return secret\n  const netlify = (globalThis as { Netlify?: { env?: { get(name: string): string | undefined } } }).Netlify\n  return netlify?.env?.get(MCP_TRANSPORT_SECRET_ENV) || process.env[MCP_TRANSPORT_SECRET_ENV]\n}\n\n/** The signature a relayed request carries: hex HMAC-SHA256 of `label` under `secret`. */\nexport function signMcpTransport(secret: string, label: string = DEFAULT_MCP_TRANSPORT_LABEL): string {\n  return createHmac('sha256', secret).update(label).digest('hex')\n}\n\nfunction verify(request: Request, transport: ResolvedTransport): boolean {\n  const key = readSecret(transport.secret)\n  const supplied = request.headers.get(transport.header) || ''\n  if (!key || !/^[a-f0-9]{64}$/.test(supplied)) return false\n  const expected = createHmac('sha256', key).update(transport.label).digest()\n  return timingSafeEqual(expected, Buffer.from(supplied, 'hex'))\n}\n\n/**\n * True when the request came through the rate-limited relay: its transport\n * header holds the HMAC of `label` under `MCP_TRANSPORT_SECRET`, compared in\n * constant time. False when the secret is unset.\n */\nexport function hasMcpTransportAuthorization(request: Request, options: McpTransportOptions = {}): boolean {\n  return verify(request, resolveTransport(options))\n}\n\n// ============================================\n// Next.js routes\n// ============================================\n\nfunction isEnforced(enforce: ProtectMcpHandlersOptions['enforce']): boolean {\n  if (typeof enforce === 'function') return enforce()\n  if (enforce !== undefined) return enforce\n  return process.env.NODE_ENV === 'production'\n}\n\n/**\n * Wrap the `/api/mcp` handlers so, in production, they answer only relayed\n * (signed) requests. The public path is the function's; this closes the Next\n * handler behind it so nothing can skip the rate limit.\n *\n * @example\n * ```ts\n * // app/api/mcp/route.ts\n * export const { POST, GET, DELETE, OPTIONS } = protectMcpHandlers(\n *   createMcpHandler({ server: mcpServer, baseUrl: SITE_URL, allowedOrigins: '*' }),\n * )\n * ```\n */\nexport function protectMcpHandlers(\n  handlers: McpRouteHandlerSet,\n  options: ProtectMcpHandlersOptions = {},\n): McpRouteHandlerSet {\n  const transport = resolveTransport(options)\n  const protect =\n    (handler: McpRouteHandler): McpRouteHandler =>\n    (request) => {\n      if (isEnforced(options.enforce) && !verify(request, transport)) {\n        return Response.json({ error: 'Use the public MCP endpoint' }, { status: 403 })\n      }\n      return handler(request)\n    }\n  return {\n    GET: protect(handlers.GET),\n    POST: protect(handlers.POST),\n    DELETE: protect(handlers.DELETE),\n    OPTIONS: protect(handlers.OPTIONS),\n  }\n}\n\n/**\n * Handlers for `/api/mcp-internal`, the relay's target. 403 without a valid\n * signature in every environment, then dispatch by method to the `/api/mcp`\n * handlers.\n *\n * @example\n * ```ts\n * // app/api/mcp-internal/route.ts\n * import * as mcp from '../mcp/route'\n * export const { POST, GET, DELETE, OPTIONS } = createMcpInternalRoute(mcp)\n * ```\n */\nexport function createMcpInternalRoute(\n  handlers: McpRouteHandlerSet,\n  options: McpTransportOptions = {},\n): McpRouteHandlerSet {\n  const transport = resolveTransport(options)\n  const relay: McpRouteHandler = (request) => {\n    if (!verify(request, transport)) return Response.json({ error: 'Forbidden' }, { status: 403 })\n    switch (request.method) {\n      case 'GET':\n        return handlers.GET(request)\n      case 'POST':\n        return handlers.POST(request)\n      case 'DELETE':\n        return handlers.DELETE(request)\n      case 'OPTIONS':\n        return handlers.OPTIONS(request)\n      default:\n        return new Response(null, { status: 405 })\n    }\n  }\n  return { GET: relay, POST: relay, DELETE: relay, OPTIONS: relay }\n}\n\n// ============================================\n// Netlify function\n// ============================================\n\n/**\n * The default export for `netlify/functions/mcp.mjs`. Signs the request and\n * relays it to {@link MCP_INTERNAL_PATH} on the same deploy.\n *\n * - 503 when `MCP_TRANSPORT_SECRET` is unset; 405 for methods MCP doesn't use.\n * - Strips `host` and `content-length`, overwrites any client-sent transport\n *   header with the real signature.\n * - POST bodies over 64 KB get a 413 and are never forwarded.\n * - `redirect: 'error'` and a 55 s timeout; any upstream failure is a 502.\n * - Responses drop the encoding/length headers fetch already undid, and gain\n *   `Cache-Control: no-store` plus the transport header set to\n *   {@link MCP_RELAY_MARKER}.\n *\n * The function file must still declare its own literal `config`: Netlify\n * reads `path` and `rateLimit` statically from that file, so they can't come\n * from an import.\n *\n * @example\n * ```js\n * // netlify/functions/mcp.mjs\n * import { createNetlifyMcpRelay } from '@sonordev/site-kit/mcp/transport'\n *\n * export default createNetlifyMcpRelay()\n *\n * export const config = {\n *   path: '/api/mcp',\n *   rateLimit: { windowSize: 60, windowLimit: 60, aggregateBy: ['ip', 'domain'] },\n * }\n * ```\n */\nexport function createNetlifyMcpRelay(\n  options: NetlifyMcpRelayOptions = {},\n): (request: Request, context: NetlifyRelayContext) => Promise<Response> {\n  const transport = resolveTransport(options)\n  const internalPath = options.internalPath ?? MCP_INTERNAL_PATH\n  const timeoutMessage = options.timeoutMessage ?? 'MCP request timed out. Try again.'\n  const unavailable = () => Response.json({ error: 'MCP is temporarily unavailable' }, { status: 503 })\n\n  return async function relayMcp(request, context) {\n    const key = readSecret(transport.secret)\n    if (!key) return unavailable()\n    if (!(MCP_RELAY_METHODS as readonly string[]).includes(request.method)) return new Response(null, { status: 405 })\n\n    // context is platform-provided, never a client-controlled forwarding URL.\n    // The deploy permalink keeps the relay on the deploy that took the call.\n    const base =\n      context?.deploy?.id && context.site?.name\n        ? `https://${context.deploy.id}--${context.site.name}.netlify.app`\n        : context?.site?.url\n    if (!base) return unavailable()\n    const target = new URL(internalPath, base)\n\n    const headers = new Headers(request.headers)\n    headers.delete('host')\n    headers.delete('content-length')\n    // set, not append: overwrite anything a client sent under this name.\n    headers.set(transport.header, signMcpTransport(key, transport.label))\n\n    let body: Uint8Array<ArrayBuffer> | undefined\n    if (request.method === 'POST') {\n      const bytes = await readCappedBody(request, MCP_RELAY_MAX_BODY_BYTES)\n      if (!bytes) return Response.json({ error: 'Tool arguments are too large' }, { status: 413 })\n      body = bytes\n    }\n\n    try {\n      const response = await fetch(target, {\n        method: request.method,\n        headers,\n        body,\n        redirect: 'error',\n        signal: AbortSignal.timeout(MCP_RELAY_TIMEOUT_MS),\n      })\n      const outgoing = new Headers(response.headers)\n      // fetch decodes the upstream body; its compression/length headers no longer apply.\n      for (const name of ['content-encoding', 'content-length', 'transfer-encoding']) outgoing.delete(name)\n      outgoing.set('Cache-Control', 'no-store')\n      outgoing.set(transport.header, MCP_RELAY_MARKER)\n      return new Response(response.body, { status: response.status, headers: outgoing })\n    } catch {\n      return Response.json({ error: timeoutMessage }, { status: 502 })\n    }\n  }\n}\n"]}

package/dist/mcp/transport.mjs

@@ -0,0 +1,123 @@
+import { readCappedBody } from '../chunk-Z2URIOKG.mjs';
+import '../chunk-BEXTDHO4.mjs';
+import { createHmac, timingSafeEqual } from 'crypto';
+
+var MCP_TRANSPORT_SECRET_ENV = "MCP_TRANSPORT_SECRET";
+var DEFAULT_MCP_TRANSPORT_HEADER = "x-site-mcp-transport";
+var DEFAULT_MCP_TRANSPORT_LABEL = "site-mcp-transport-v1";
+var MCP_INTERNAL_PATH = "/api/mcp-internal";
+var MCP_RELAY_MARKER = "netlify-rate-limited-v1";
+var MCP_RELAY_MAX_BODY_BYTES = 64 * 1024;
+var MCP_RELAY_TIMEOUT_MS = 55e3;
+var MCP_RELAY_METHODS = ["GET", "POST", "OPTIONS", "DELETE"];
+function resolveTransport(options = {}) {
+  const header = (options.header ?? DEFAULT_MCP_TRANSPORT_HEADER).toLowerCase();
+  const label = options.label ?? DEFAULT_MCP_TRANSPORT_LABEL;
+  if (!/^[a-z0-9-]+$/.test(header)) {
+    throw new TypeError(`@sonordev/site-kit/mcp/transport: invalid header name ${JSON.stringify(options.header)}`);
+  }
+  if (!label) throw new TypeError("@sonordev/site-kit/mcp/transport: label must not be empty");
+  return { header, label, secret: options.secret };
+}
+function readSecret(secret) {
+  if (typeof secret === "function") return secret();
+  if (secret !== void 0) return secret;
+  const netlify = globalThis.Netlify;
+  return netlify?.env?.get(MCP_TRANSPORT_SECRET_ENV) || process.env[MCP_TRANSPORT_SECRET_ENV];
+}
+function signMcpTransport(secret, label = DEFAULT_MCP_TRANSPORT_LABEL) {
+  return createHmac("sha256", secret).update(label).digest("hex");
+}
+function verify(request, transport) {
+  const key = readSecret(transport.secret);
+  const supplied = request.headers.get(transport.header) || "";
+  if (!key || !/^[a-f0-9]{64}$/.test(supplied)) return false;
+  const expected = createHmac("sha256", key).update(transport.label).digest();
+  return timingSafeEqual(expected, Buffer.from(supplied, "hex"));
+}
+function hasMcpTransportAuthorization(request, options = {}) {
+  return verify(request, resolveTransport(options));
+}
+function isEnforced(enforce) {
+  if (typeof enforce === "function") return enforce();
+  if (enforce !== void 0) return enforce;
+  return process.env.NODE_ENV === "production";
+}
+function protectMcpHandlers(handlers, options = {}) {
+  const transport = resolveTransport(options);
+  const protect = (handler) => (request) => {
+    if (isEnforced(options.enforce) && !verify(request, transport)) {
+      return Response.json({ error: "Use the public MCP endpoint" }, { status: 403 });
+    }
+    return handler(request);
+  };
+  return {
+    GET: protect(handlers.GET),
+    POST: protect(handlers.POST),
+    DELETE: protect(handlers.DELETE),
+    OPTIONS: protect(handlers.OPTIONS)
+  };
+}
+function createMcpInternalRoute(handlers, options = {}) {
+  const transport = resolveTransport(options);
+  const relay = (request) => {
+    if (!verify(request, transport)) return Response.json({ error: "Forbidden" }, { status: 403 });
+    switch (request.method) {
+      case "GET":
+        return handlers.GET(request);
+      case "POST":
+        return handlers.POST(request);
+      case "DELETE":
+        return handlers.DELETE(request);
+      case "OPTIONS":
+        return handlers.OPTIONS(request);
+      default:
+        return new Response(null, { status: 405 });
+    }
+  };
+  return { GET: relay, POST: relay, DELETE: relay, OPTIONS: relay };
+}
+function createNetlifyMcpRelay(options = {}) {
+  const transport = resolveTransport(options);
+  const internalPath = options.internalPath ?? MCP_INTERNAL_PATH;
+  const timeoutMessage = options.timeoutMessage ?? "MCP request timed out. Try again.";
+  const unavailable = () => Response.json({ error: "MCP is temporarily unavailable" }, { status: 503 });
+  return async function relayMcp(request, context) {
+    const key = readSecret(transport.secret);
+    if (!key) return unavailable();
+    if (!MCP_RELAY_METHODS.includes(request.method)) return new Response(null, { status: 405 });
+    const base = context?.deploy?.id && context.site?.name ? `https://${context.deploy.id}--${context.site.name}.netlify.app` : context?.site?.url;
+    if (!base) return unavailable();
+    const target = new URL(internalPath, base);
+    const headers = new Headers(request.headers);
+    headers.delete("host");
+    headers.delete("content-length");
+    headers.set(transport.header, signMcpTransport(key, transport.label));
+    let body;
+    if (request.method === "POST") {
+      const bytes = await readCappedBody(request, MCP_RELAY_MAX_BODY_BYTES);
+      if (!bytes) return Response.json({ error: "Tool arguments are too large" }, { status: 413 });
+      body = bytes;
+    }
+    try {
+      const response = await fetch(target, {
+        method: request.method,
+        headers,
+        body,
+        redirect: "error",
+        signal: AbortSignal.timeout(MCP_RELAY_TIMEOUT_MS)
+      });
+      const outgoing = new Headers(response.headers);
+      for (const name of ["content-encoding", "content-length", "transfer-encoding"]) outgoing.delete(name);
+      outgoing.set("Cache-Control", "no-store");
+      outgoing.set(transport.header, MCP_RELAY_MARKER);
+      return new Response(response.body, { status: response.status, headers: outgoing });
+    } catch {
+      return Response.json({ error: timeoutMessage }, { status: 502 });
+    }
+  };
+}
+
+export { DEFAULT_MCP_TRANSPORT_HEADER, DEFAULT_MCP_TRANSPORT_LABEL, MCP_INTERNAL_PATH, MCP_RELAY_MARKER, MCP_RELAY_MAX_BODY_BYTES, MCP_RELAY_METHODS, MCP_RELAY_TIMEOUT_MS, MCP_TRANSPORT_SECRET_ENV, createMcpInternalRoute, createNetlifyMcpRelay, hasMcpTransportAuthorization, protectMcpHandlers, signMcpTransport };
+//# sourceMappingURL=transport.mjs.map
+//# sourceMappingURL=transport.mjs.map

package/dist/mcp/transport.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/mcp/transport.ts"],"names":[],"mappings":";;;;AA2CO,IAAM,wBAAA,GAA2B;AAGjC,IAAM,4BAAA,GAA+B;AAGrC,IAAM,2BAAA,GAA8B;AAGpC,IAAM,iBAAA,GAAoB;AAG1B,IAAM,gBAAA,GAAmB;AAGzB,IAAM,2BAA2B,EAAA,GAAK;AAGtC,IAAM,oBAAA,GAAuB;AAG7B,IAAM,iBAAA,GAAoB,CAAC,KAAA,EAAO,MAAA,EAAQ,WAAW,QAAQ;AAkEpE,SAAS,gBAAA,CAAiB,OAAA,GAA+B,EAAC,EAAsB;AAC9E,EAAA,MAAM,MAAA,GAAA,CAAU,OAAA,CAAQ,MAAA,IAAU,4BAAA,EAA8B,WAAA,EAAY;AAC5E,EAAA,MAAM,KAAA,GAAQ,QAAQ,KAAA,IAAS,2BAAA;AAC/B,EAAA,IAAI,CAAC,cAAA,CAAe,IAAA,CAAK,MAAM,CAAA,EAAG;AAChC,IAAA,MAAM,IAAI,UAAU,CAAA,sDAAA,EAAyD,IAAA,CAAK,UAAU,OAAA,CAAQ,MAAM,CAAC,CAAA,CAAE,CAAA;AAAA,EAC/G;AACA,EAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,UAAU,2DAA2D,CAAA;AAC3F,EAAA,OAAO,EAAE,MAAA,EAAQ,KAAA,EAAO,MAAA,EAAQ,QAAQ,MAAA,EAAO;AACjD;AAEA,SAAS,WAAW,MAAA,EAA2D;AAC7E,EAAA,IAAI,OAAO,MAAA,KAAW,UAAA,EAAY,OAAO,MAAA,EAAO;AAChD,EAAA,IAAI,MAAA,KAAW,QAAW,OAAO,MAAA;AACjC,EAAA,MAAM,UAAW,UAAA,CAAiF,OAAA;AAClG,EAAA,OAAO,SAAS,GAAA,EAAK,GAAA,CAAI,wBAAwB,CAAA,IAAK,OAAA,CAAQ,IAAI,wBAAwB,CAAA;AAC5F;AAGO,SAAS,gBAAA,CAAiB,MAAA,EAAgB,KAAA,GAAgB,2BAAA,EAAqC;AACpG,EAAA,OAAO,UAAA,CAAW,UAAU,MAAM,CAAA,CAAE,OAAO,KAAK,CAAA,CAAE,OAAO,KAAK,CAAA;AAChE;AAEA,SAAS,MAAA,CAAO,SAAkB,SAAA,EAAuC;AACvE,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,SAAA,CAAU,MAAM,CAAA;AACvC,EAAA,MAAM,WAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,SAAA,CAAU,MAAM,CAAA,IAAK,EAAA;AAC1D,EAAA,IAAI,CAAC,GAAA,IAAO,CAAC,iBAAiB,IAAA,CAAK,QAAQ,GAAG,OAAO,KAAA;AACrD,EAAA,MAAM,QAAA,GAAW,WAAW,QAAA,EAAU,GAAG,EAAE,MAAA,CAAO,SAAA,CAAU,KAAK,CAAA,CAAE,MAAA,EAAO;AAC1E,EAAA,OAAO,gBAAgB,QAAA,EAAU,MAAA,CAAO,IAAA,CAAK,QAAA,EAAU,KAAK,CAAC,CAAA;AAC/D;AAOO,SAAS,4BAAA,CAA6B,OAAA,EAAkB,OAAA,GAA+B,EAAC,EAAY;AACzG,EAAA,OAAO,MAAA,CAAO,OAAA,EAAS,gBAAA,CAAiB,OAAO,CAAC,CAAA;AAClD;AAMA,SAAS,WAAW,OAAA,EAAwD;AAC1E,EAAA,IAAI,OAAO,OAAA,KAAY,UAAA,EAAY,OAAO,OAAA,EAAQ;AAClD,EAAA,IAAI,OAAA,KAAY,QAAW,OAAO,OAAA;AAClC,EAAA,OAAO,OAAA,CAAQ,IAAI,QAAA,KAAa,YAAA;AAClC;AAeO,SAAS,kBAAA,CACd,QAAA,EACA,OAAA,GAAqC,EAAC,EAClB;AACpB,EAAA,MAAM,SAAA,GAAY,iBAAiB,OAAO,CAAA;AAC1C,EAAA,MAAM,OAAA,GACJ,CAAC,OAAA,KACD,CAAC,OAAA,KAAY;AACX,IAAA,IAAI,UAAA,CAAW,QAAQ,OAAO,CAAA,IAAK,CAAC,MAAA,CAAO,OAAA,EAAS,SAAS,CAAA,EAAG;AAC9D,MAAA,OAAO,QAAA,CAAS,KAAK,EAAE,KAAA,EAAO,+BAA8B,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,IAChF;AACA,IAAA,OAAO,QAAQ,OAAO,CAAA;AAAA,EACxB,CAAA;AACF,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAA;AAAA,IACzB,IAAA,EAAM,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAA;AAAA,IAC3B,MAAA,EAAQ,OAAA,CAAQ,QAAA,CAAS,MAAM,CAAA;AAAA,IAC/B,OAAA,EAAS,OAAA,CAAQ,QAAA,CAAS,OAAO;AAAA,GACnC;AACF;AAcO,SAAS,sBAAA,CACd,QAAA,EACA,OAAA,GAA+B,EAAC,EACZ;AACpB,EAAA,MAAM,SAAA,GAAY,iBAAiB,OAAO,CAAA;AAC1C,EAAA,MAAM,KAAA,GAAyB,CAAC,OAAA,KAAY;AAC1C,IAAA,IAAI,CAAC,MAAA,CAAO,OAAA,EAAS,SAAS,GAAG,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,OAAO,WAAA,EAAY,EAAG,EAAE,MAAA,EAAQ,KAAK,CAAA;AAC7F,IAAA,QAAQ,QAAQ,MAAA;AAAQ,MACtB,KAAK,KAAA;AACH,QAAA,OAAO,QAAA,CAAS,IAAI,OAAO,CAAA;AAAA,MAC7B,KAAK,MAAA;AACH,QAAA,OAAO,QAAA,CAAS,KAAK,OAAO,CAAA;AAAA,MAC9B,KAAK,QAAA;AACH,QAAA,OAAO,QAAA,CAAS,OAAO,OAAO,CAAA;AAAA,MAChC,KAAK,SAAA;AACH,QAAA,OAAO,QAAA,CAAS,QAAQ,OAAO,CAAA;AAAA,MACjC;AACE,QAAA,OAAO,IAAI,QAAA,CAAS,IAAA,EAAM,EAAE,MAAA,EAAQ,KAAK,CAAA;AAAA;AAC7C,EACF,CAAA;AACA,EAAA,OAAO,EAAE,KAAK,KAAA,EAAO,IAAA,EAAM,OAAO,MAAA,EAAQ,KAAA,EAAO,SAAS,KAAA,EAAM;AAClE;AAoCO,SAAS,qBAAA,CACd,OAAA,GAAkC,EAAC,EACoC;AACvE,EAAA,MAAM,SAAA,GAAY,iBAAiB,OAAO,CAAA;AAC1C,EAAA,MAAM,YAAA,GAAe,QAAQ,YAAA,IAAgB,iBAAA;AAC7C,EAAA,MAAM,cAAA,GAAiB,QAAQ,cAAA,IAAkB,mCAAA;AACjD,EAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,IAAA,CAAK,EAAE,KAAA,EAAO,gCAAA,EAAiC,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAEpG,EAAA,OAAO,eAAe,QAAA,CAAS,OAAA,EAAS,OAAA,EAAS;AAC/C,IAAA,MAAM,GAAA,GAAM,UAAA,CAAW,SAAA,CAAU,MAAM,CAAA;AACvC,IAAA,IAAI,CAAC,GAAA,EAAK,OAAO,WAAA,EAAY;AAC7B,IAAA,IAAI,CAAE,iBAAA,CAAwC,QAAA,CAAS,OAAA,CAAQ,MAAM,CAAA,EAAG,OAAO,IAAI,QAAA,CAAS,IAAA,EAAM,EAAE,MAAA,EAAQ,KAAK,CAAA;AAIjH,IAAA,MAAM,OACJ,OAAA,EAAS,MAAA,EAAQ,EAAA,IAAM,OAAA,CAAQ,MAAM,IAAA,GACjC,CAAA,QAAA,EAAW,OAAA,CAAQ,MAAA,CAAO,EAAE,CAAA,EAAA,EAAK,OAAA,CAAQ,KAAK,IAAI,CAAA,YAAA,CAAA,GAClD,SAAS,IAAA,EAAM,GAAA;AACrB,IAAA,IAAI,CAAC,IAAA,EAAM,OAAO,WAAA,EAAY;AAC9B,IAAA,MAAM,MAAA,GAAS,IAAI,GAAA,CAAI,YAAA,EAAc,IAAI,CAAA;AAEzC,IAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ,OAAA,CAAQ,OAAO,CAAA;AAC3C,IAAA,OAAA,CAAQ,OAAO,MAAM,CAAA;AACrB,IAAA,OAAA,CAAQ,OAAO,gBAAgB,CAAA;AAE/B,IAAA,OAAA,CAAQ,IAAI,SAAA,CAAU,MAAA,EAAQ,iBAAiB,GAAA,EAAK,SAAA,CAAU,KAAK,CAAC,CAAA;AAEpE,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI,OAAA,CAAQ,WAAW,MAAA,EAAQ;AAC7B,MAAA,MAAM,KAAA,GAAQ,MAAM,cAAA,CAAe,OAAA,EAAS,wBAAwB,CAAA;AACpE,MAAA,IAAI,CAAC,KAAA,EAAO,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,KAAA,EAAO,8BAAA,EAA+B,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAC3F,MAAA,IAAA,GAAO,KAAA;AAAA,IACT;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,MAAA,EAAQ;AAAA,QACnC,QAAQ,OAAA,CAAQ,MAAA;AAAA,QAChB,OAAA;AAAA,QACA,IAAA;AAAA,QACA,QAAA,EAAU,OAAA;AAAA,QACV,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,oBAAoB;AAAA,OACjD,CAAA;AACD,MAAA,MAAM,QAAA,GAAW,IAAI,OAAA,CAAQ,QAAA,CAAS,OAAO,CAAA;AAE7C,MAAA,KAAA,MAAW,IAAA,IAAQ,CAAC,kBAAA,EAAoB,gBAAA,EAAkB,mBAAmB,CAAA,EAAG,QAAA,CAAS,OAAO,IAAI,CAAA;AACpG,MAAA,QAAA,CAAS,GAAA,CAAI,iBAAiB,UAAU,CAAA;AACxC,MAAA,QAAA,CAAS,GAAA,CAAI,SAAA,CAAU,MAAA,EAAQ,gBAAgB,CAAA;AAC/C,MAAA,OAAO,IAAI,QAAA,CAAS,QAAA,CAAS,IAAA,EAAM,EAAE,QAAQ,QAAA,CAAS,MAAA,EAAQ,OAAA,EAAS,QAAA,EAAU,CAAA;AAAA,IACnF,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,QAAA,CAAS,KAAK,EAAE,KAAA,EAAO,gBAAe,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,IACjE;AAAA,EACF,CAAA;AACF","file":"transport.mjs","sourcesContent":["/**\n * @sonordev/site-kit/mcp/transport — the rate-limited public MCP relay\n *\n * Netlify rate-limits a native function (declarative `config.rateLimit`), never\n * a Next.js route handler. So a public MCP endpoint on Netlify takes this path:\n *\n *   agent ─► /api/mcp            netlify/functions/mcp.mjs, rate-limited\n *              │                 createNetlifyMcpRelay: signs the request\n *              │                 (HMAC-SHA256 of MCP_TRANSPORT_SECRET over a label)\n *              ▼\n *            https://<deploy-id>--<site>.netlify.app/api/mcp-internal\n *              │                 createMcpInternalRoute: 403 unless signed,\n *              ▼                 then dispatches to the /api/mcp handlers\n *            app/api/mcp/route.ts  protectMcpHandlers(createMcpHandler(...))\n *\n * In production the function owns /api/mcp, and the Next route behind it\n * refuses unsigned calls too, so no request reaches a tool without passing\n * the rate limit. The relay targets the deploy permalink, so a request is\n * answered by the same immutable deploy that received it, and the base URL\n * comes from the platform (`context`), never from a client header.\n *\n * Single source of truth for the relay. It replaced per-site copies in\n * upforge-nextjs and wirsch-law-nextjs (`lib/mcp/transport-auth.ts`, the\n * `protect()` wrapper, the `/api/mcp-internal` relay and the function body);\n * don't fork it back into a site.\n *\n * Node only (`crypto`), and deliberately not re-exported from the\n * `@sonordev/site-kit/mcp` barrel so that barrel stays runtime-neutral.\n * Nothing here imports `server-only`: the Netlify function runs in plain Node,\n * where `server-only` throws on import.\n *\n * Setup: `MCP_TRANSPORT_SECRET` (`openssl rand -hex 32`) in every deploy\n * context, Functions scope. See the module README for the three files.\n */\n\nimport { createHmac, timingSafeEqual } from 'crypto'\nimport { readCappedBody } from '../shared/request-guards'\n\n// ============================================\n// Constants\n// ============================================\n\n/** Env var holding the relay's HMAC key. */\nexport const MCP_TRANSPORT_SECRET_ENV = 'MCP_TRANSPORT_SECRET'\n\n/** Default request header carrying the signature (and the response marker). */\nexport const DEFAULT_MCP_TRANSPORT_HEADER = 'x-site-mcp-transport'\n\n/** Default HMAC message. Changing it invalidates every signature at once. */\nexport const DEFAULT_MCP_TRANSPORT_LABEL = 'site-mcp-transport-v1'\n\n/** Path of the signed Next route the function relays to. */\nexport const MCP_INTERNAL_PATH = '/api/mcp-internal'\n\n/** Value of the marker header on every relayed response. Release checks assert it. */\nexport const MCP_RELAY_MARKER = 'netlify-rate-limited-v1'\n\n/** Largest POST body the relay forwards (tool arguments), in bytes. */\nexport const MCP_RELAY_MAX_BODY_BYTES = 64 * 1024\n\n/** Upstream timeout. Under Netlify's 60 s synchronous function limit, so the 502 is ours. */\nexport const MCP_RELAY_TIMEOUT_MS = 55_000\n\n/** Methods the MCP wire uses. Anything else gets a 405. */\nexport const MCP_RELAY_METHODS = ['GET', 'POST', 'OPTIONS', 'DELETE'] as const\n\n// ============================================\n// Types\n// ============================================\n\nexport interface McpTransportOptions {\n  /**\n   * Request header that carries the signature. The relay also stamps it on\n   * responses with {@link MCP_RELAY_MARKER}. Must match between the function\n   * and the Next routes. Default {@link DEFAULT_MCP_TRANSPORT_HEADER}.\n   */\n  header?: string\n  /**\n   * HMAC message. Must match between the function and the Next routes.\n   * Default {@link DEFAULT_MCP_TRANSPORT_LABEL}.\n   */\n  label?: string\n  /**\n   * The HMAC key, or a getter for it. Default: `MCP_TRANSPORT_SECRET`, read on\n   * every request (`Netlify.env` when present, else `process.env`).\n   */\n  secret?: string | (() => string | undefined)\n}\n\nexport type McpRouteHandler = (request: Request) => Response | Promise<Response>\n\n/** The four method handlers an MCP route exports (what `createMcpHandler` returns). */\nexport interface McpRouteHandlerSet {\n  GET: McpRouteHandler\n  POST: McpRouteHandler\n  DELETE: McpRouteHandler\n  OPTIONS: McpRouteHandler\n}\n\nexport interface ProtectMcpHandlersOptions extends McpTransportOptions {\n  /**\n   * Refuse unsigned requests. Default: `NODE_ENV === 'production'`, read per\n   * request, so `next dev` still answers a local MCP client directly.\n   */\n  enforce?: boolean | (() => boolean)\n}\n\nexport interface NetlifyMcpRelayOptions extends McpTransportOptions {\n  /** The signed Next route, on the same deploy. Default {@link MCP_INTERNAL_PATH}. */\n  internalPath?: string\n  /** Error text for the 502 when the upstream fails or times out. */\n  timeoutMessage?: string\n}\n\n/** The parts of Netlify's function `context` the relay reads. */\nexport interface NetlifyRelayContext {\n  deploy?: { id?: string }\n  site?: { name?: string; url?: string }\n}\n\ninterface ResolvedTransport {\n  header: string\n  label: string\n  secret: McpTransportOptions['secret']\n}\n\n// ============================================\n// Signing\n// ============================================\n\nfunction resolveTransport(options: McpTransportOptions = {}): ResolvedTransport {\n  const header = (options.header ?? DEFAULT_MCP_TRANSPORT_HEADER).toLowerCase()\n  const label = options.label ?? DEFAULT_MCP_TRANSPORT_LABEL\n  if (!/^[a-z0-9-]+$/.test(header)) {\n    throw new TypeError(`@sonordev/site-kit/mcp/transport: invalid header name ${JSON.stringify(options.header)}`)\n  }\n  if (!label) throw new TypeError('@sonordev/site-kit/mcp/transport: label must not be empty')\n  return { header, label, secret: options.secret }\n}\n\nfunction readSecret(secret: McpTransportOptions['secret']): string | undefined {\n  if (typeof secret === 'function') return secret()\n  if (secret !== undefined) return secret\n  const netlify = (globalThis as { Netlify?: { env?: { get(name: string): string | undefined } } }).Netlify\n  return netlify?.env?.get(MCP_TRANSPORT_SECRET_ENV) || process.env[MCP_TRANSPORT_SECRET_ENV]\n}\n\n/** The signature a relayed request carries: hex HMAC-SHA256 of `label` under `secret`. */\nexport function signMcpTransport(secret: string, label: string = DEFAULT_MCP_TRANSPORT_LABEL): string {\n  return createHmac('sha256', secret).update(label).digest('hex')\n}\n\nfunction verify(request: Request, transport: ResolvedTransport): boolean {\n  const key = readSecret(transport.secret)\n  const supplied = request.headers.get(transport.header) || ''\n  if (!key || !/^[a-f0-9]{64}$/.test(supplied)) return false\n  const expected = createHmac('sha256', key).update(transport.label).digest()\n  return timingSafeEqual(expected, Buffer.from(supplied, 'hex'))\n}\n\n/**\n * True when the request came through the rate-limited relay: its transport\n * header holds the HMAC of `label` under `MCP_TRANSPORT_SECRET`, compared in\n * constant time. False when the secret is unset.\n */\nexport function hasMcpTransportAuthorization(request: Request, options: McpTransportOptions = {}): boolean {\n  return verify(request, resolveTransport(options))\n}\n\n// ============================================\n// Next.js routes\n// ============================================\n\nfunction isEnforced(enforce: ProtectMcpHandlersOptions['enforce']): boolean {\n  if (typeof enforce === 'function') return enforce()\n  if (enforce !== undefined) return enforce\n  return process.env.NODE_ENV === 'production'\n}\n\n/**\n * Wrap the `/api/mcp` handlers so, in production, they answer only relayed\n * (signed) requests. The public path is the function's; this closes the Next\n * handler behind it so nothing can skip the rate limit.\n *\n * @example\n * ```ts\n * // app/api/mcp/route.ts\n * export const { POST, GET, DELETE, OPTIONS } = protectMcpHandlers(\n *   createMcpHandler({ server: mcpServer, baseUrl: SITE_URL, allowedOrigins: '*' }),\n * )\n * ```\n */\nexport function protectMcpHandlers(\n  handlers: McpRouteHandlerSet,\n  options: ProtectMcpHandlersOptions = {},\n): McpRouteHandlerSet {\n  const transport = resolveTransport(options)\n  const protect =\n    (handler: McpRouteHandler): McpRouteHandler =>\n    (request) => {\n      if (isEnforced(options.enforce) && !verify(request, transport)) {\n        return Response.json({ error: 'Use the public MCP endpoint' }, { status: 403 })\n      }\n      return handler(request)\n    }\n  return {\n    GET: protect(handlers.GET),\n    POST: protect(handlers.POST),\n    DELETE: protect(handlers.DELETE),\n    OPTIONS: protect(handlers.OPTIONS),\n  }\n}\n\n/**\n * Handlers for `/api/mcp-internal`, the relay's target. 403 without a valid\n * signature in every environment, then dispatch by method to the `/api/mcp`\n * handlers.\n *\n * @example\n * ```ts\n * // app/api/mcp-internal/route.ts\n * import * as mcp from '../mcp/route'\n * export const { POST, GET, DELETE, OPTIONS } = createMcpInternalRoute(mcp)\n * ```\n */\nexport function createMcpInternalRoute(\n  handlers: McpRouteHandlerSet,\n  options: McpTransportOptions = {},\n): McpRouteHandlerSet {\n  const transport = resolveTransport(options)\n  const relay: McpRouteHandler = (request) => {\n    if (!verify(request, transport)) return Response.json({ error: 'Forbidden' }, { status: 403 })\n    switch (request.method) {\n      case 'GET':\n        return handlers.GET(request)\n      case 'POST':\n        return handlers.POST(request)\n      case 'DELETE':\n        return handlers.DELETE(request)\n      case 'OPTIONS':\n        return handlers.OPTIONS(request)\n      default:\n        return new Response(null, { status: 405 })\n    }\n  }\n  return { GET: relay, POST: relay, DELETE: relay, OPTIONS: relay }\n}\n\n// ============================================\n// Netlify function\n// ============================================\n\n/**\n * The default export for `netlify/functions/mcp.mjs`. Signs the request and\n * relays it to {@link MCP_INTERNAL_PATH} on the same deploy.\n *\n * - 503 when `MCP_TRANSPORT_SECRET` is unset; 405 for methods MCP doesn't use.\n * - Strips `host` and `content-length`, overwrites any client-sent transport\n *   header with the real signature.\n * - POST bodies over 64 KB get a 413 and are never forwarded.\n * - `redirect: 'error'` and a 55 s timeout; any upstream failure is a 502.\n * - Responses drop the encoding/length headers fetch already undid, and gain\n *   `Cache-Control: no-store` plus the transport header set to\n *   {@link MCP_RELAY_MARKER}.\n *\n * The function file must still declare its own literal `config`: Netlify\n * reads `path` and `rateLimit` statically from that file, so they can't come\n * from an import.\n *\n * @example\n * ```js\n * // netlify/functions/mcp.mjs\n * import { createNetlifyMcpRelay } from '@sonordev/site-kit/mcp/transport'\n *\n * export default createNetlifyMcpRelay()\n *\n * export const config = {\n *   path: '/api/mcp',\n *   rateLimit: { windowSize: 60, windowLimit: 60, aggregateBy: ['ip', 'domain'] },\n * }\n * ```\n */\nexport function createNetlifyMcpRelay(\n  options: NetlifyMcpRelayOptions = {},\n): (request: Request, context: NetlifyRelayContext) => Promise<Response> {\n  const transport = resolveTransport(options)\n  const internalPath = options.internalPath ?? MCP_INTERNAL_PATH\n  const timeoutMessage = options.timeoutMessage ?? 'MCP request timed out. Try again.'\n  const unavailable = () => Response.json({ error: 'MCP is temporarily unavailable' }, { status: 503 })\n\n  return async function relayMcp(request, context) {\n    const key = readSecret(transport.secret)\n    if (!key) return unavailable()\n    if (!(MCP_RELAY_METHODS as readonly string[]).includes(request.method)) return new Response(null, { status: 405 })\n\n    // context is platform-provided, never a client-controlled forwarding URL.\n    // The deploy permalink keeps the relay on the deploy that took the call.\n    const base =\n      context?.deploy?.id && context.site?.name\n        ? `https://${context.deploy.id}--${context.site.name}.netlify.app`\n        : context?.site?.url\n    if (!base) return unavailable()\n    const target = new URL(internalPath, base)\n\n    const headers = new Headers(request.headers)\n    headers.delete('host')\n    headers.delete('content-length')\n    // set, not append: overwrite anything a client sent under this name.\n    headers.set(transport.header, signMcpTransport(key, transport.label))\n\n    let body: Uint8Array<ArrayBuffer> | undefined\n    if (request.method === 'POST') {\n      const bytes = await readCappedBody(request, MCP_RELAY_MAX_BODY_BYTES)\n      if (!bytes) return Response.json({ error: 'Tool arguments are too large' }, { status: 413 })\n      body = bytes\n    }\n\n    try {\n      const response = await fetch(target, {\n        method: request.method,\n        headers,\n        body,\n        redirect: 'error',\n        signal: AbortSignal.timeout(MCP_RELAY_TIMEOUT_MS),\n      })\n      const outgoing = new Headers(response.headers)\n      // fetch decodes the upstream body; its compression/length headers no longer apply.\n      for (const name of ['content-encoding', 'content-length', 'transfer-encoding']) outgoing.delete(name)\n      outgoing.set('Cache-Control', 'no-store')\n      outgoing.set(transport.header, MCP_RELAY_MARKER)\n      return new Response(response.body, { status: response.status, headers: outgoing })\n    } catch {\n      return Response.json({ error: timeoutMessage }, { status: 502 })\n    }\n  }\n}\n"]}

package/dist/search/index.js

@@ -2,9 +2,9 @@
 'use strict';
 
 var chunkCLO3K7PF_js = require('../chunk-CLO3K7PF.js');
-var chunkJ4C3JAJF_js = require('../chunk-J4C3JAJF.js');
-require('../chunk-TE3YNZVH.js');
-require('../chunk-6SBRD5KT.js');
+var chunkC7J4XLBN_js = require('../chunk-C7J4XLBN.js');
+require('../chunk-U5NFIHLY.js');
+require('../chunk-CIB3RHNZ.js');
 require('../chunk-SNAQBZPT.js');
 var react = require('react');
 var jsxRuntime = require('react/jsx-runtime');
@@ -39,7 +39,7 @@ function useSiteSearch(options = {}) {
         const apiUrl = typeof window !== "undefined" ? window.__SITE_KIT_API_URL__ || "https://api.sonor.io" : "https://api.sonor.io";
         const apiKey = typeof window !== "undefined" ? window.__SITE_KIT_API_KEY__ : void 0;
         const resolvedSite = site ?? (typeof window !== "undefined" ? window.__SITE_KIT_SITE__ : void 0);
-        const res = await chunkJ4C3JAJF_js.sonorFetch(
+        const res = await chunkC7J4XLBN_js.sonorFetch(
           `${apiUrl}${chunkCLO3K7PF_js.SEARCH_ENDPOINT}`,
           {
             method: "POST",

package/dist/search/index.mjs

@@ -1,9 +1,9 @@
 'use client';
 import { SEARCH_ENDPOINT } from '../chunk-CFRJ2MK5.mjs';
 export { SEARCH_ENDPOINT } from '../chunk-CFRJ2MK5.mjs';
-import { sonorFetch } from '../chunk-BJKA3XRS.mjs';
-import '../chunk-CXYGKK4U.mjs';
-import '../chunk-3V6DIQI7.mjs';
+import { sonorFetch } from '../chunk-5T3J24K4.mjs';
+import '../chunk-YRKWJCML.mjs';
+import '../chunk-K3PVUXKB.mjs';
 import '../chunk-BEXTDHO4.mjs';
 import { useState, useRef, useCallback, useEffect } from 'react';
 import { jsxs, jsx } from 'react/jsx-runtime';

package/dist/seo/client.js

@@ -1,19 +1,19 @@
 'use client';
 'use strict';
 
-var chunkX5J3PYZJ_js = require('../chunk-X5J3PYZJ.js');
+var chunkU4CYO4NG_js = require('../chunk-U4CYO4NG.js');
 require('../chunk-JONWE26J.js');
 require('../chunk-5RNAUYWE.js');
-require('../chunk-J4C3JAJF.js');
-require('../chunk-TE3YNZVH.js');
-require('../chunk-6SBRD5KT.js');
+require('../chunk-C7J4XLBN.js');
+require('../chunk-U5NFIHLY.js');
+require('../chunk-CIB3RHNZ.js');
 require('../chunk-SNAQBZPT.js');
 
 
 
 Object.defineProperty(exports, "SitemapSync", {
   enumerable: true,
-  get: function () { return chunkX5J3PYZJ_js.SitemapSync; }
+  get: function () { return chunkU4CYO4NG_js.SitemapSync; }
 });
 //# sourceMappingURL=client.js.map
 //# sourceMappingURL=client.js.map

package/dist/seo/client.mjs

@@ -1,10 +1,10 @@
 'use client';
-export { SitemapSync } from '../chunk-LFF32POH.mjs';
+export { SitemapSync } from '../chunk-M62L2N5A.mjs';
 import '../chunk-C2CTLLIO.mjs';
 import '../chunk-A6UYV475.mjs';
-import '../chunk-BJKA3XRS.mjs';
-import '../chunk-CXYGKK4U.mjs';
-import '../chunk-3V6DIQI7.mjs';
+import '../chunk-5T3J24K4.mjs';
+import '../chunk-YRKWJCML.mjs';
+import '../chunk-K3PVUXKB.mjs';
 import '../chunk-BEXTDHO4.mjs';
 //# sourceMappingURL=client.mjs.map
 //# sourceMappingURL=client.mjs.map

package/dist/seo/index.js

@@ -3,7 +3,7 @@
 var chunkDV2LJYFD_js = require('../chunk-DV2LJYFD.js');
 var chunkH6AU3WKF_js = require('../chunk-H6AU3WKF.js');
 var chunkJ7QI3GDX_js = require('../chunk-J7QI3GDX.js');
-var chunkX5J3PYZJ_js = require('../chunk-X5J3PYZJ.js');
+var chunkU4CYO4NG_js = require('../chunk-U4CYO4NG.js');
 var chunkTST2IKYO_js = require('../chunk-TST2IKYO.js');
 var chunkOSU4QA5M_js = require('../chunk-OSU4QA5M.js');
 require('../chunk-CXAXZFFW.js');
@@ -14,9 +14,9 @@ require('../chunk-IBJOGXQI.js');
 require('../chunk-UZKXOZHR.js');
 require('../chunk-SWIKKSKL.js');
 require('../chunk-5RNAUYWE.js');
-require('../chunk-J4C3JAJF.js');
-require('../chunk-TE3YNZVH.js');
-require('../chunk-6SBRD5KT.js');
+require('../chunk-C7J4XLBN.js');
+require('../chunk-U5NFIHLY.js');
+require('../chunk-CIB3RHNZ.js');
 require('../chunk-SNAQBZPT.js');
 var react = require('react');
 var jsxRuntime = require('react/jsx-runtime');
@@ -706,7 +706,7 @@ Object.defineProperty(exports, "ManagedScripts", {
 });
 Object.defineProperty(exports, "SitemapSync", {
   enumerable: true,
-  get: function () { return chunkX5J3PYZJ_js.SitemapSync; }
+  get: function () { return chunkU4CYO4NG_js.SitemapSync; }
 });
 Object.defineProperty(exports, "generateSitemap", {
   enumerable: true,

package/dist/seo/index.mjs

@@ -1,7 +1,7 @@
 export { ManagedNoScripts, ManagedScripts } from '../chunk-6PJTLBRR.mjs';
 import { pickManagedLlmSchemaForJsonLd } from '../chunk-PENNTSJE.mjs';
 import { safeJsonLd } from '../chunk-662YHKWW.mjs';
-export { SitemapSync } from '../chunk-LFF32POH.mjs';
+export { SitemapSync } from '../chunk-M62L2N5A.mjs';
 import { getManagedMetadata } from '../chunk-JSXLTZUP.mjs';
 export { generateSitemap, getABVariant, getManagedMetadata, getManagedMetadataWithAB, getRedirect, getRobotsDirective, isIndexable } from '../chunk-JSXLTZUP.mjs';
 import { getContentBlock, getSchemaMarkups, getSEOPageData, getEntityEnhancedSchema, getFAQData, getInternalLinks, getEntities, pruneSchemaTypes } from '../chunk-NE6QGHFT.mjs';
@@ -14,9 +14,9 @@ import '../chunk-YPGUV6BT.mjs';
 import '../chunk-KZVSB5WE.mjs';
 import '../chunk-ZN4HBK5C.mjs';
 import '../chunk-A6UYV475.mjs';
-import '../chunk-BJKA3XRS.mjs';
-import '../chunk-CXYGKK4U.mjs';
-import '../chunk-3V6DIQI7.mjs';
+import '../chunk-5T3J24K4.mjs';
+import '../chunk-YRKWJCML.mjs';
+import '../chunk-K3PVUXKB.mjs';
 import '../chunk-BEXTDHO4.mjs';
 import { cache, Suspense } from 'react';
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';

package/dist/seo/register-sitemap-cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 'use strict';
 
-var chunkNN2YE5WT_js = require('../chunk-NN2YE5WT.js');
+var chunkZUQSVCMD_js = require('../chunk-ZUQSVCMD.js');
 var chunkY2CP5J6Q_js = require('../chunk-Y2CP5J6Q.js');
 var chunkJONWE26J_js = require('../chunk-JONWE26J.js');
 var chunkIBJOGXQI_js = require('../chunk-IBJOGXQI.js');
@@ -18,7 +18,7 @@ var path__default = /*#__PURE__*/_interopDefault(path);
 var fs__default = /*#__PURE__*/_interopDefault(fs);
 
 // src/seo/register-sitemap-cli.ts
-var import_dotenv = chunkSNAQBZPT_js.__toESM(chunkNN2YE5WT_js.require_main());
+var import_dotenv = chunkSNAQBZPT_js.__toESM(chunkZUQSVCMD_js.require_main());
 var BRAND_PROFILE_EXTRACTOR_VERSION = 2;
 function decideTheme(background, text) {
   const bg = background ? chunkM2N7NY3V_js.colorLuminance(background) : null;
@@ -447,7 +447,7 @@ async function registerLocalSitemap(options) {
   }
   if (options.writeLlms && result.success) {
     try {
-      const { writeLLMsTxtToPublic } = await import('../writeLLMsTxt-XHLHJ5XY.js');
+      const { writeLLMsTxtToPublic } = await import('../writeLLMsTxt-SQG4B63X.js');
       const written = await writeLLMsTxtToPublic({
         // Resolved here too: the sync's own `site` is scoped to the branch that
         // posts, and this runs on the skip path as well.

package/dist/seo/register-sitemap-cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { require_main } from '../chunk-NNZDWY3L.mjs';
+import { require_main } from '../chunk-RH4XEXTK.mjs';
 import { findSitemapRoute, findAppDirForDiscovery, discoverNextJsRoutes } from '../chunk-UHYRVALN.mjs';
 import { inferPageType } from '../chunk-C2CTLLIO.mjs';
 import { resolveSyncSite, postRegisterSitemap } from '../chunk-YPGUV6BT.mjs';
@@ -440,7 +440,7 @@ async function registerLocalSitemap(options) {
   }
   if (options.writeLlms && result.success) {
     try {
-      const { writeLLMsTxtToPublic } = await import('../writeLLMsTxt-LYYC3ZSN.mjs');
+      const { writeLLMsTxtToPublic } = await import('../writeLLMsTxt-IYJILIU3.mjs');
       const written = await writeLLMsTxtToPublic({
         // Resolved here too: the sync's own `site` is scoped to the branch that
         // posts, and this runs on the skip path as well.

package/dist/server/index.js

@@ -1,16 +1,16 @@
 'use strict';
 
-var chunkUAOQVHZW_js = require('../chunk-UAOQVHZW.js');
+var chunkKZBDH5A3_js = require('../chunk-KZBDH5A3.js');
 require('../chunk-LVGSOW2F.js');
 var chunkO5GHP7UO_js = require('../chunk-O5GHP7UO.js');
-require('../chunk-6SBRD5KT.js');
+require('../chunk-CIB3RHNZ.js');
 require('../chunk-SNAQBZPT.js');
 
 
 
 Object.defineProperty(exports, "resolveClientCredential", {
   enumerable: true,
-  get: function () { return chunkUAOQVHZW_js.resolveClientCredential; }
+  get: function () { return chunkKZBDH5A3_js.resolveClientCredential; }
 });
 Object.defineProperty(exports, "requireServerApiConfig", {
   enumerable: true,

package/dist/server/index.mjs

@@ -1,7 +1,7 @@
-export { resolveClientCredential } from '../chunk-W46QIVBM.mjs';
+export { resolveClientCredential } from '../chunk-ZEBOOUBP.mjs';
 import '../chunk-BQP6JIE2.mjs';
 export { requireServerApiConfig, resolveApiOrigin, resolveServerApiConfig, serverApiFetch } from '../chunk-6XNEGG5B.mjs';
-import '../chunk-3V6DIQI7.mjs';
+import '../chunk-K3PVUXKB.mjs';
 import '../chunk-BEXTDHO4.mjs';
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map

package/dist/shared/build-entries.d.ts

@@ -74,6 +74,13 @@ export declare const entry: {
     readonly 'mcp/index': 'src/mcp/index.ts';
     /** Client half — <WebMcpTools> in-page registration. Stamped 'use client'. */
     readonly 'mcp/client': 'src/mcp/client.ts';
+    /**
+     * Rate-limited public relay: the Netlify function body plus the signed Next
+     * routes behind it. Node only (`crypto`) and imported by a plain-Node
+     * Netlify function, so it stays out of the `mcp/index` barrel and never
+     * imports `server-only`.
+     */
+    readonly 'mcp/transport': 'src/mcp/transport.ts';
     readonly 'slots/index': 'src/slots/index.ts';
     /** Pure contract + HMAC signing — import from `@sonordev/site-kit/slots/contract` in sonor-api */
     readonly 'slots/contract': 'src/slots/contract.ts';

package/dist/shared/build-entries.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build-entries.d.ts","sourceRoot":"","sources":["../../src/shared/build-entries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,KAAK;aAEhB,KAAO,EAAE,cAAc;aAIvB,cAAc,EAAE,qBAAqB;aAGrC,WAAW,EAAE,kBAAkB;aAC/B,YAAY,EAAE,mBAAmB;aACjC,YAAY,EAAE,mBAAmB;aACjC,0BAA0B,EAAE,iCAAiC;aAG7D,iBAAiB,EAAE,wBAAwB;aAG3C,cAAc,EAAE,qBAAqB;aAGrC,cAAc,EAAE,qBAAqB;aAGrC,aAAa,EAAE,oBAAoB;IACnC,gFAAgF;aAChF,gBAAgB,EAAE,uBAAuB;IACzC,yEAAyE;aACzE,cAAc,EAAE,qBAAqB;IACrC;;;;OAIG;aACH,cAAc,EAAE,qBAAqB;aAGrC,gBAAgB,EAAE,uBAAuB;aACzC,iBAAiB,EAAE,6BAA6B;aAChD,oBAAoB,EAAE,2BAA2B;aAGjD,gBAAgB,EAAE,uBAAuB;aACzC,iBAAiB,EAAE,wBAAwB;aAG3C,kBAAkB,EAAE,yBAAyB;aAG7C,YAAY,EAAE,mBAAmB;aAGjC,aAAa,EAAE,oBAAoB;aAGnC,eAAe,EAAE,sBAAsB;aAGvC,cAAc,EAAE,sBAAsB;IACtC,sEAAsE;aACtE,iBAAiB,EAAE,wBAAwB;aAG3C,UAAU,EAAE,iBAAiB;IAC7B,6EAA6E;aAC7E,UAAU,EAAE,kBAAkB;aAG9B,iBAAiB,EAAE,wBAAwB;IAC3C,6EAA6E;aAC7E,qBAAqB,EAAE,4BAA4B;aAGnD,cAAc,EAAE,qBAAqB;aACrC,eAAe,EAAE,sBAAsB;aAGvC,kBAAkB,EAAE,yBAAyB;aAC7C,mBAAmB,EAAE,0BAA0B;aAG/C,YAAY,EAAE,mBAAmB;IACjC;;;;OAIG;aACH,aAAa,EAAE,oBAAoB;IACnC,+FAA+F;aAC/F,eAAe,EAAE,sBAAsB;aAGvC,WAAW,EAAE,kBAAkB;IAC/B,8EAA8E;aAC9E,YAAY,EAAE,mBAAmB;aAGjC,aAAa,EAAE,oBAAoB;IACnC,kGAAkG;aAClG,gBAAgB,EAAE,uBAAuB;aAGzC,aAAa,EAAE,oBAAoB;IACnC,4FAA4F;aAC5F,gBAAgB,EAAE,uBAAuB;IAIzC,sDAAsD;aACtD,gBAAgB,EAAE,uBAAuB;IACzC,yDAAyD;aACzD,oBAAoB,EAAE,2BAA2B;IACjD,0FAA0F;aAC1F,mBAAmB,EAAE,0BAA0B;IAC/C,uDAAuD;aACvD,oBAAoB,EAAE,2BAA2B;aAGjD,cAAc,EAAE,qBAAqB;IACrC,0DAA0D;aAC1D,iBAAiB,EAAE,wBAAwB;aAG3C,mBAAmB,EAAE,0BAA0B;aAG/C,cAAc,EAAE,qBAAqB;aAGrC,eAAe,EAAE,sBAAsB;IACvC;;;;;OAKG;aACH,gBAAgB,EAAE,uBAAuB;aACzC,eAAe,EAAE,uCAAuC;aAGxD,cAAc,EAAE,qBAAqB;aAKrC,aAAa,EAAE,oBAAoB;aAGnC,gBAAgB,EAAE,uBAAuB;aAGzC,cAAc,EAAE,qBAAqB;aAGrC,WAAW,EAAE,kBAAkB;aAC/B,YAAY,EAAE,mBAAmB;aAGjC,YAAY,EAAE,mBAAmB;IAIjC,4EAA4E;aAC5E,cAAc,EAAE,qBAAqB;IACrC,qFAAqF;aACrF,aAAa,EAAE,oBAAoB;IACnC,kGAAkG;aAClG,cAAc,EAAE,qBAAqB;aAKrC,eAAe,EAAE,sBAAsB;IACvC,kFAAkF;aAClF,gBAAgB,EAAE,gCAAgC;aAGlD,WAAW,EAAE,kBAAkB;CACvB,CAAA;AAEV;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,cAAc,4RAkByB,CAAA;AAEpD;;;GAGG;AACH,eAAO,MAAM,gBAAgB,YAAI,WAAW,EAAE,0BAA0B,CAAU,CAAA"}
+{"version":3,"file":"build-entries.d.ts","sourceRoot":"","sources":["../../src/shared/build-entries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,KAAK;aAEhB,KAAO,EAAE,cAAc;aAIvB,cAAc,EAAE,qBAAqB;aAGrC,WAAW,EAAE,kBAAkB;aAC/B,YAAY,EAAE,mBAAmB;aACjC,YAAY,EAAE,mBAAmB;aACjC,0BAA0B,EAAE,iCAAiC;aAG7D,iBAAiB,EAAE,wBAAwB;aAG3C,cAAc,EAAE,qBAAqB;aAGrC,cAAc,EAAE,qBAAqB;aAGrC,aAAa,EAAE,oBAAoB;IACnC,gFAAgF;aAChF,gBAAgB,EAAE,uBAAuB;IACzC,yEAAyE;aACzE,cAAc,EAAE,qBAAqB;IACrC;;;;OAIG;aACH,cAAc,EAAE,qBAAqB;aAGrC,gBAAgB,EAAE,uBAAuB;aACzC,iBAAiB,EAAE,6BAA6B;aAChD,oBAAoB,EAAE,2BAA2B;aAGjD,gBAAgB,EAAE,uBAAuB;aACzC,iBAAiB,EAAE,wBAAwB;aAG3C,kBAAkB,EAAE,yBAAyB;aAG7C,YAAY,EAAE,mBAAmB;aAGjC,aAAa,EAAE,oBAAoB;aAGnC,eAAe,EAAE,sBAAsB;aAGvC,cAAc,EAAE,sBAAsB;IACtC,sEAAsE;aACtE,iBAAiB,EAAE,wBAAwB;aAG3C,UAAU,EAAE,iBAAiB;IAC7B,6EAA6E;aAC7E,UAAU,EAAE,kBAAkB;aAG9B,iBAAiB,EAAE,wBAAwB;IAC3C,6EAA6E;aAC7E,qBAAqB,EAAE,4BAA4B;aAGnD,cAAc,EAAE,qBAAqB;aACrC,eAAe,EAAE,sBAAsB;aAGvC,kBAAkB,EAAE,yBAAyB;aAC7C,mBAAmB,EAAE,0BAA0B;aAG/C,YAAY,EAAE,mBAAmB;IACjC;;;;OAIG;aACH,aAAa,EAAE,oBAAoB;IACnC,+FAA+F;aAC/F,eAAe,EAAE,sBAAsB;aAGvC,WAAW,EAAE,kBAAkB;IAC/B,8EAA8E;aAC9E,YAAY,EAAE,mBAAmB;IACjC;;;;;OAKG;aACH,eAAe,EAAE,sBAAsB;aAGvC,aAAa,EAAE,oBAAoB;IACnC,kGAAkG;aAClG,gBAAgB,EAAE,uBAAuB;aAGzC,aAAa,EAAE,oBAAoB;IACnC,4FAA4F;aAC5F,gBAAgB,EAAE,uBAAuB;IAIzC,sDAAsD;aACtD,gBAAgB,EAAE,uBAAuB;IACzC,yDAAyD;aACzD,oBAAoB,EAAE,2BAA2B;IACjD,0FAA0F;aAC1F,mBAAmB,EAAE,0BAA0B;IAC/C,uDAAuD;aACvD,oBAAoB,EAAE,2BAA2B;aAGjD,cAAc,EAAE,qBAAqB;IACrC,0DAA0D;aAC1D,iBAAiB,EAAE,wBAAwB;aAG3C,mBAAmB,EAAE,0BAA0B;aAG/C,cAAc,EAAE,qBAAqB;aAGrC,eAAe,EAAE,sBAAsB;IACvC;;;;;OAKG;aACH,gBAAgB,EAAE,uBAAuB;aACzC,eAAe,EAAE,uCAAuC;aAGxD,cAAc,EAAE,qBAAqB;aAKrC,aAAa,EAAE,oBAAoB;aAGnC,gBAAgB,EAAE,uBAAuB;aAGzC,cAAc,EAAE,qBAAqB;aAGrC,WAAW,EAAE,kBAAkB;aAC/B,YAAY,EAAE,mBAAmB;aAGjC,YAAY,EAAE,mBAAmB;IAIjC,4EAA4E;aAC5E,cAAc,EAAE,qBAAqB;IACrC,qFAAqF;aACrF,aAAa,EAAE,oBAAoB;IACnC,kGAAkG;aAClG,cAAc,EAAE,qBAAqB;aAKrC,eAAe,EAAE,sBAAsB;IACvC,kFAAkF;aAClF,gBAAgB,EAAE,gCAAgC;aAGlD,WAAW,EAAE,kBAAkB;CACvB,CAAA;AAEV;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,cAAc,4RAkByB,CAAA;AAEpD;;;GAGG;AACH,eAAO,MAAM,gBAAgB,YAAI,WAAW,EAAE,0BAA0B,CAAU,CAAA"}

package/dist/shared/request-guards.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @sonordev/site-kit shared - Request guards for secret-bearing route handlers
+ *
+ * Node only (`crypto`). Single source of truth for the two checks every
+ * webhook-style handler in the kit needs, so no module grows its own copy:
+ *
+ * - `secretsMatch`: constant-time secret comparison. Used by
+ *   `createLlmsRevalidateHandler` and `createSeoRevalidationHandler`.
+ * - `readCappedBody`: read a request body without buffering past a cap. Used
+ *   by `createSeoRevalidationHandler` (16 KB) and the MCP transport relay
+ *   (64 KB).
+ */
+/**
+ * Constant-time equality for a supplied secret against the expected one.
+ * An empty expected secret never matches, so a misconfigured site (no env
+ * var) refuses everything instead of accepting an empty token.
+ */
+export declare function secretsMatch(supplied: string | null | undefined, expected: string | null | undefined): boolean;
+/**
+ * Read a request body, giving up at the first chunk past `maxBytes`.
+ *
+ * Returns the bytes, or `null` when the body is larger than the cap (the
+ * stream is cancelled, so nothing past the cap is held in memory). A request
+ * with no body returns an empty array.
+ */
+export declare function readCappedBody(request: Request, maxBytes: number): Promise<Uint8Array<ArrayBuffer> | null>;
+//# sourceMappingURL=request-guards.d.ts.map

package/dist/shared/request-guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-guards.d.ts","sourceRoot":"","sources":["../../src/shared/request-guards.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAK9G;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAsBhH"}

package/dist/shared/version.d.ts

@@ -7,5 +7,5 @@
  * it matches package.json at publish time, and version.test.ts asserts it in
  * dev, so it can't silently drift.
  */
-export declare const SITE_KIT_VERSION = "6.3.6";
+export declare const SITE_KIT_VERSION = "6.4.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/signal/index.js

@@ -1,47 +1,47 @@
 'use client';
 'use strict';
 
-var chunk7NFSSPGM_js = require('../chunk-7NFSSPGM.js');
-var chunk5XDOBM5S_js = require('../chunk-5XDOBM5S.js');
+var chunkXZHR4E2D_js = require('../chunk-XZHR4E2D.js');
+var chunkVDEQVXNV_js = require('../chunk-VDEQVXNV.js');
 require('../chunk-SNAQBZPT.js');
 
 
 
 Object.defineProperty(exports, "ExperimentConversion", {
   enumerable: true,
-  get: function () { return chunk7NFSSPGM_js.ExperimentConversion; }
+  get: function () { return chunkXZHR4E2D_js.ExperimentConversion; }
 });
 Object.defineProperty(exports, "SignalExperiment", {
   enumerable: true,
-  get: function () { return chunk7NFSSPGM_js.SignalExperiment; }
+  get: function () { return chunkXZHR4E2D_js.SignalExperiment; }
 });
 Object.defineProperty(exports, "useExperimentVariant", {
   enumerable: true,
-  get: function () { return chunk7NFSSPGM_js.useExperimentVariant; }
+  get: function () { return chunkXZHR4E2D_js.useExperimentVariant; }
 });
 Object.defineProperty(exports, "SignalBridge", {
   enumerable: true,
-  get: function () { return chunk5XDOBM5S_js.SignalBridge; }
+  get: function () { return chunkVDEQVXNV_js.SignalBridge; }
 });
 Object.defineProperty(exports, "useSignal", {
   enumerable: true,
-  get: function () { return chunk5XDOBM5S_js.useSignal; }
+  get: function () { return chunkVDEQVXNV_js.useSignal; }
 });
 Object.defineProperty(exports, "useSignalConfig", {
   enumerable: true,
-  get: function () { return chunk5XDOBM5S_js.useSignalConfig; }
+  get: function () { return chunkVDEQVXNV_js.useSignalConfig; }
 });
 Object.defineProperty(exports, "useSignalEvent", {
   enumerable: true,
-  get: function () { return chunk5XDOBM5S_js.useSignalEvent; }
+  get: function () { return chunkVDEQVXNV_js.useSignalEvent; }
 });
 Object.defineProperty(exports, "useSignalExperiment", {
   enumerable: true,
-  get: function () { return chunk5XDOBM5S_js.useSignalExperiment; }
+  get: function () { return chunkVDEQVXNV_js.useSignalExperiment; }
 });
 Object.defineProperty(exports, "useSignalOutcome", {
   enumerable: true,
-  get: function () { return chunk5XDOBM5S_js.useSignalOutcome; }
+  get: function () { return chunkVDEQVXNV_js.useSignalOutcome; }
 });
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/signal/index.mjs

@@ -1,6 +1,6 @@
 'use client';
-export { ExperimentConversion, SignalExperiment, useExperimentVariant } from '../chunk-R26FAQWF.mjs';
-export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalExperiment, useSignalOutcome } from '../chunk-6MOGGEY3.mjs';
+export { ExperimentConversion, SignalExperiment, useExperimentVariant } from '../chunk-TPDDSEL3.mjs';
+export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalExperiment, useSignalOutcome } from '../chunk-GSU6VTCZ.mjs';
 import '../chunk-BEXTDHO4.mjs';
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map

package/dist/sitemap/index.js

@@ -1,8 +1,8 @@
 'use strict';
 
-var chunkG3L26XQ7_js = require('../chunk-G3L26XQ7.js');
+var chunkOIPG3EGM_js = require('../chunk-OIPG3EGM.js');
 require('../chunk-KR7ATPAN.js');
-require('../chunk-ZR43XFUM.js');
+require('../chunk-55J2KE7D.js');
 var chunkJP5WGL75_js = require('../chunk-JP5WGL75.js');
 var chunkLVGSOW2F_js = require('../chunk-LVGSOW2F.js');
 require('../chunk-H6AU3WKF.js');
@@ -504,7 +504,7 @@ function createSitemap(config) {
             try {
               let llmsTimer;
               const writeResult = await Promise.race([
-                chunkG3L26XQ7_js.writeLLMsTxtToPublic({
+                chunkOIPG3EGM_js.writeLLMsTxtToPublic({
                   apiUrl,
                   apiKey,
                   site: siteHost || void 0,

package/dist/sitemap/index.mjs

@@ -1,6 +1,6 @@
-import { writeLLMsTxtToPublic } from '../chunk-BJ4T65OK.mjs';
+import { writeLLMsTxtToPublic } from '../chunk-H4TSADY3.mjs';
 import '../chunk-5YVQWLSQ.mjs';
-import '../chunk-6DCAMW62.mjs';
+import '../chunk-6C47333H.mjs';
 import { getSiteConfig } from '../chunk-B22WSN4L.mjs';
 import { buildFetch } from '../chunk-BQP6JIE2.mjs';
 import '../chunk-PENNTSJE.mjs';