@substrat-run/contracts 0.156.0 → 0.157.0

package/dist/mcp.d.ts

@@ -36,4 +36,6 @@ export declare function mcpResourceOf(origin: string, path?: string): string;
  * The dashboard writes it. `demos/auth-server/src/resources.ts` turns it into rows.
  */
 export declare const MCP_RESOURCES_CONFIG_PREFIX = "substrat:resources:";
+/** Read-only auth-composition discovery, handled locally through the vertical's auth route. */
+export declare const MCP_AUTHORIZATION_SERVERS_PATH = "/api/auth/mcp-authorization-servers";
 //# sourceMappingURL=mcp.d.ts.map

package/dist/mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,wFAAwF;AACxF,wBAAgB,eAAe,CAAC,QAAQ,SAAS,GAAG,MAAM,CAEzD;AAED;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,QAAoB,CAAC;AAEnD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,MAA0B,GAAG,MAAM,CAEtF;AAED;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,wBAAwB,CAAC"}
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,wFAAwF;AACxF,wBAAgB,eAAe,CAAC,QAAQ,SAAS,GAAG,MAAM,CAEzD;AAED;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,QAAoB,CAAC;AAEnD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,MAA0B,GAAG,MAAM,CAEtF;AAED;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,wBAAwB,CAAC;AAEjE,+FAA+F;AAC/F,eAAO,MAAM,8BAA8B,wCAAwC,CAAC"}

package/dist/mcp.js

@@ -40,4 +40,6 @@ export function mcpResourceOf(origin, path = MCP_ENDPOINT_PATH) {
  * The dashboard writes it. `demos/auth-server/src/resources.ts` turns it into rows.
  */
 export const MCP_RESOURCES_CONFIG_PREFIX = 'substrat:resources:';
+/** Read-only auth-composition discovery, handled locally through the vertical's auth route. */
+export const MCP_AUTHORIZATION_SERVERS_PATH = '/api/auth/mcp-authorization-servers';
 //# sourceMappingURL=mcp.js.map

package/dist/mcp.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,wFAAwF;AACxF,MAAM,UAAU,eAAe,CAAC,QAAQ,GAAG,MAAM;IAC/C,OAAO,GAAG,QAAQ,MAAM,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,EAAE,CAAC;AAEnD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,IAAI,GAAW,iBAAiB;IAC5E,OAAO,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,qBAAqB,CAAC"}
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,wFAAwF;AACxF,MAAM,UAAU,eAAe,CAAC,QAAQ,GAAG,MAAM;IAC/C,OAAO,GAAG,QAAQ,MAAM,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,EAAE,CAAC;AAEnD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,IAAI,GAAW,iBAAiB;IAC5E,OAAO,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,qBAAqB,CAAC;AAEjE,+FAA+F;AAC/F,MAAM,CAAC,MAAM,8BAA8B,GAAG,qCAAqC,CAAC"}

package/dist/registry.js

@@ -108,7 +108,7 @@ export const vertical = z.object({
     /**
      * Holds the EMAIL-SENDER capability (#303) — this vertical's scopes may POST to the control
      * plane's `/internal/email/send` relay and have transactional mail sent on their behalf. A
-     * directory-backed staff grant, not deployment config: flipped by `setVerticalEmailSender`,
+     * directory-backed owner-managed grant, not deployment config: flipped by `setVerticalEmailSender`,
      * audited, and read by the relay handler on every send. Like `tenantProvisioner`, never set at
      * registration and NEVER touched by a re-push refresh — pushing new code must not be able to
      * grant (or silently keep) outbound authority. The platform holds the actual Email Sending

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@substrat-run/contracts",
-  "version": "0.156.0",
+  "version": "0.157.0",
   "description": "Substrat kernel contract schemas — Zod is the source of truth (master plan D-22); OAS/JSON Schema are emitted artifacts",
   "license": "Apache-2.0",
   "repository": {